About This Architecture

Zero-trust secure access architecture connecting on-premises Ansible controllers to Azure Automation Runners via Cyolo's identity-driven gateway. Traffic flows from RHEL Management Host through Cyolo Client with vendor identity verification, across an encrypted TCP tunnel to Cyolo Gateway (MOH), then to Linux Automation Runners in Azure VNET's Automation Subnet, finally reaching MyNRG Servers in the Workload Subnet. This pattern eliminates VPN complexity and network exposure by enforcing identity-based access control at every hop, reducing blast radius and audit burden. Fork this diagram to customize subnets, add additional datacenters, or integrate with Azure AD for MFA-enforced automation workflows. Ideal for enterprises managing multi-datacenter Ansible deployments with strict compliance requirements.

People also ask

How do I securely connect on-premises Ansible controllers to Azure Automation Runners without exposing network infrastructure?

This diagram shows a zero-trust architecture using Cyolo's identity-driven gateway to create encrypted tunnels between RHEL Management Host and Azure Automation Runners. Traffic is authenticated at the Cyolo Client layer using vendor identity, routed through Cyolo Gateway (MOH), then delivered to Linux Automation Runners in Azure VNET's Automation Subnet, eliminating VPN complexity while enforcing