Multi-region Azure enterprise architecture spanning Australia East and Australia Southeast with isolated application and shared services VNets in each region. Private endpoints for Blob, Queue, Table, File Storage, and Key Vault eliminate public internet exposure while VNet peering enables intra-region connectivity and cross-region replication. Function App Premium instances with system-assigned managed identities and RBAC enforce least-privilege access, with Azure AD Entra ID and service principal authentication securing external integrations. This design demonstrates zero-trust networking principles, reducing attack surface while maintaining high availability across geographically distributed regions. Fork and customize this diagram on Diagrams.so to adapt subnet ranges, add additional regions, or integrate your own Azure services.