Mission Landing Zone Add-Ons
February 11, 2026 ยท View on GitHub
Home | Design | Add-Ons | Resources
This directory contains add-ons to extend the functionality of Mission Landing Zone. These add-ons are reference implementations aligned with industry proven practices, and automation packaged to deploy workload platforms on Azure at scale. Each add-on creates a spoke virtual network that is peered to the hub virtual network. These add-ons were developed to adhere to the SCCA and zero-trust guidelines.
Add-Ons
| Name | Description |
|---|---|
| ArcGIS Pro | Deploys Mission Landing Zone, the Azure Virtual Desktop, and ArcGIS Enterprise in a single click deployment. |
| Azure NetApp Files | Allows for the deployment of Azure NetApp Files with an SMB file share. |
| Azure Virtual Desktop | Deploys Azure Virtual Desktop stamps in either generic or ArcGIS Pro configurations with FSLogix, AutoScale, AVD Insights, and more. |
| NAT Gateway | Deploys a NAT Gateway and attaches it to AzureFirewallSubnet for hub egress |
| Policy Guardrails Tool | Deploys Azure Policy guardrails at the subscription scope. |
| Tier3 | Deploys a spoke network peered to the hub in preparation for the manual deployment of a workload. |
| VPN Gateway | Deploys a VPN Gateway for site-to-site connectivity and hub routing. |
| Zero Trust Imaging | Deploys images in an Azure Compute Gallery using a zero trust configuration with several configuration options. |
| Zero Trust (TIC3.0) Workbook | Deploys an Azure Sentinel Zero Trust (TIC3.0) Workbook |