Active-passive disaster recovery landing zone spanning Azure West US and East US with near-zero data loss for a 28-31 TiB SQL estate using Always-On Availability Groups, SQL Managed Instance auto-failover groups, and Azure Site Recovery. Traffic flows from on-premises and partner sites through Microsoft Entra ID and dual Azure Firewall Premium instances, with primary SQL 2019 Enterprise, SQL Managed Instance Business Critical tier, and file servers in the active region replicating asynchronously to warm standby replicas in the passive region. Recovery Services Vaults with geo-redundant storage, immutable backups, and multi-user access controls ensure compliance and rapid failover capability across hub-spoke VNets with private endpoints for storage, Key Vault, and managed instances. Fork this diagram to customize failover thresholds, adjust RPO/RTO targets, or extend the DR scope to include App Service Environment and additional application tiers.