Azure networking baseline: secure landing zone foundation
A runbook-style secure networking baseline for Azure: hub-spoke or vWAN, DNS ownership, private endpoints, egress control and inbound protection.
Focus area
Azure changed. Here’s what to do about it.
Connectivity change notes and the Azure updates worth acting on.
What changed in Azure networking, who it actually affects, and the steps to prepare — written up the same way as the baselines.
The customer-initiated window to move VPN Gateway off Basic public IPs has closed. How to check your gateways have moved, handle a pending one, and validate.
Jump into the guided path, or browse everything if you’re after something specific.
Hop between landing zones, identity, networking, and more.
Search
Type an Azure service, control, or tag. Results refresh after every deploy.
Examples: landing zone policy, workload identity, vpn gateway