Secure AKS-to-GenAI architecture with managed identity, firewall egress control, and Azure OpenAI integration for IoT ticket services. OPTIME backend running on AKS (iot-ticket-services) authenticates via managed identity, routes outbound traffic through Azure Firewall and NAT Gateway for compliance, then calls API Management and Azure OpenAI Service for generative AI workloads. EntraID governance controls identity and Key Vault secrets, while Azure ML Studio provides predictive maintenance models and Azure Monitor ensures observability across the solution. Fork this diagram to customize firewall rules, add additional GenAI services, or adapt for multi-region deployments.