Azure Foundation Map
Published on
Start with the Microsoft Entra tenant, management groups, subscriptions, resource groups, policy, centralized identity, and billing scopes. Use subscriptions to contain policy, quotas, costs, and administrative boundaries.
- Identity: Entra ID, managed identities, role-based access control, privileged identity management, and break-glass access.
- Network: Virtual Networks, subnets, network security groups, Private Link, Azure Firewall, DNS, Bastion, and Virtual WAN or hub-and-spoke connectivity.
- Compute: Virtual Machines, App Service, Functions, Container Apps, and AKS.
- Data: Blob Storage, Managed Disks, Azure SQL, Cosmos DB, Cache for Redis, and Service Bus.
- Security and evidence: Activity Log, Policy, Defender for Cloud, Key Vault, and central log retention.
- Operations and cost: Azure Monitor, Log Analytics, Backup, Site Recovery, budgets, tags, and cost allocation.
Document region pairing assumptions, identity dependencies, private connectivity, key ownership, service quotas, restoration tests, and policy-exception governance.
Last updated on