Multi-environment Databricks data platform on Azure with VNet injection, private endpoints, and NAT gateways across Dev, UAT, and Prod resource groups. Each environment isolates compute (adb-ws-dev/uat/prod) and storage (ADLS Gen2, Key Vault) via dedicated vnets (10.10.0.0/16, 10.20.0.0/16, 10.30.0.0/16) with private endpoint subnets and network security groups. Private endpoints secure connectivity to Databricks UI/API, backend, blob, dfs, and Key Vault; ADF Managed VNets provide additional isolation for data factory operations. NAT gateways (natgw-dev/uat/prod) with public IPs enable controlled outbound traffic while keeping all data services public-access disabled. Log Analytics and Azure Monitor per environment enable compliance auditing and performance observability. Fork this diagram to customize IP ranges, add ExpressRoute for hybrid connectivity, or extend with additional data services like Synapse or Cosmos DB.