Tier-3 Add-On

August 20, 2025 ยท View on GitHub

This add-on deploys a spoke virtual network, peers it to the Hub virtual network, and routes traffic to the Hub firewall to support a workload. The tier-3 deployment is foundational to all add-on deployments. Each add-on calls the tier-3 module to consistently deploy a spoke VNET to support each workload.

Pre-requisites

  1. MLZ: ensure Mission Landing Zone is deployed
  2. Encryption at Host: ensure the Encryption at Host feature is registered on the target subscription

Deploy from the Azure Portal

  1. Deploy a new Tier-3 Workload Environment into AzureCloud or AzureUsGovernment from the Azure Portal:

    Azure CommercialAzure Government
    Deploy to AzureDeploy to Azure Gov