Enterprise-scale Azure landing zone with management groups, hub-spoke networking, Azure Firewall, Azure Policy governance, and centralized monitoring. Implements Cloud Adoption Framework best practices with identity, management, and connectivity subscriptions. Fork this diagram on Diagrams.so to customize the subscription topology and policy assignments for your organization. Source: https://github.com/lukemurraynz/awesome-azure-architecture