Zero-trust secure access architecture connecting on-premises Ansible controllers to Azure Automation Runners via Cyolo's identity-driven gateway. Traffic flows from RHEL Management Host through Cyolo Client with vendor identity verification, across an encrypted TCP tunnel to Cyolo Gateway (MOH), then to Linux Automation Runners in Azure VNET's Automation Subnet, finally reaching MyNRG Servers in the Workload Subnet. This pattern eliminates VPN complexity and network exposure by enforcing identity-based access control at every hop, reducing blast radius and audit burden. Fork this diagram to customize subnets, add additional datacenters, or integrate with Azure AD for MFA-enforced automation workflows. Ideal for enterprises managing multi-datacenter Ansible deployments with strict compliance requirements.