Cloud Infrastructure (000-cloud)

December 18, 2025 · View on GitHub

Welcome to the Cloud Infrastructure components section. This grouping contains all Azure cloud-based infrastructure components that support the Edge AI platform deployment.

Overview

The 000-cloud components provide the foundational cloud infrastructure including identity, security, data, messaging, and monitoring services that support edge deployments. These components are typically deployed first and managed by cloud infrastructure teams.

Components

Core Infrastructure

ComponentDescriptionTerraformBicep
000-resource-groupEnvironment onboarding with Resource Groups, User Assigned Managed Identity, and Service Principal✅✅
010-security-identityFoundational security with managed identities, Key Vault, Schema Registry, and RBAC✅✅
020-observabilityCentralized monitoring with Log Analytics, Monitor Workspace, and Managed Grafana✅✅

Data & Analytics

ComponentDescriptionTerraformBicep
030-dataData management with Storage Accounts, Data Lake Gen2, and Fabric integration✅✅
031-fabricMicrosoft Fabric capacity, workspace, eventhouse, and lakehouse for real-time analytics✅❌
032-fabric-rtiFabric Real-Time Intelligence EventStream with DAG architecture and AIO integration✅❌
035-postgresqlPostgreSQL Flexible Server with TimescaleDB extension for time-series data✅❌
036-managed-redisAzure Managed Redis with private endpoints and Entra ID authentication✅❌

Messaging & Communication

ComponentDescriptionTerraformBicep
040-messagingEvent Grid Namespace with MQTT broker, Event Hubs, and edge-to-cloud dataflows✅✅

Networking

ComponentDescriptionTerraformBicep
050-networkingVirtual networks with subnets, NSGs, optional NAT gateway, and Private Resolver✅✅
055-vpn-gatewayVPN Gateway with P2S configuration and certificate or Entra ID authentication✅✅

Compute & Container Infrastructure

ComponentDescriptionTerraformBicep
051-vm-hostAzure VMs with Entra ID RBAC-based SSH authentication✅✅
060-acrAzure Container Registry with Premium SKU and private endpoint support✅✅
070-kubernetesAzure Kubernetes Service with optional Azure Arc and private cluster support✅✅
071-aks-hostAKS resources with configurable node pools and Azure Monitor metrics✅✅
072-azure-local-hostArc-enabled Kubernetes on Azure Stack HCI with provisioned cluster instances✅❌
073-vm-hostAzure VMs with Entra ID RBAC-based SSH authentication (alternate deployment)✅✅

AI & Machine Learning

ComponentDescriptionTerraformBicep
080-azuremlAzure Machine Learning workspace with compute clusters and AKS integration✅❌
085-ai-foundryAzure AI Foundry with projects, OpenAI model deployments, and RAI filtering✅✅

Architecture

The cloud infrastructure follows a layered deployment approach with clear dependencies and logical grouping:

flowchart TD
    %% Core Infrastructure Foundation
    ResourceGroup[000-resource-group<br/>Resource Groups<br/>Organization & Governance]

    SecurityIdentity[010-security-identity<br/>Key Vault & Identity<br/>Managed Identities<br/>Role Assignments]

    Observability[020-observability<br/>Azure Monitor<br/>Log Analytics<br/>Grafana Dashboard]

    %% Data & Analytics Platform
    Data[030-data<br/>Storage Account<br/>Data Lake Gen2<br/>Data Management]

    Fabric[031-fabric<br/>Microsoft Fabric<br/>Eventhouse & Lakehouse<br/>Real-Time Analytics]

    FabricRTI[032-fabric-rti<br/>Fabric RTI<br/>EventStream DAG<br/>AIO Integration]

    PostgreSQL[035-postgresql<br/>PostgreSQL Flexible<br/>TimescaleDB<br/>Time-Series Data]

    Redis[036-managed-redis<br/>Azure Managed Redis<br/>Private Endpoints<br/>Entra ID Auth]

    %% Communication Infrastructure
    Messaging[040-messaging<br/>Event Grid & Hubs<br/>MQTT Broker<br/>Event-Driven Architecture]

    %% Network Infrastructure
    Networking[050-networking<br/>Virtual Networks<br/>Subnets & NSGs<br/>NAT Gateway]

    VpnGateway[055-vpn-gateway<br/>VPN Gateway<br/>Point-to-Site<br/>Secure Remote Access]

    %% Compute Resources
    VmHost[051-vm-host<br/>Virtual Machines<br/>Entra ID SSH<br/>Edge Hosting]

    Acr[060-acr<br/>Container Registry<br/>Premium SKU<br/>Private Endpoints]

    Kubernetes[070-kubernetes<br/>AKS Cluster<br/>Azure Arc<br/>Orchestration]

    AksHost[071-aks-host<br/>AKS Resources<br/>Node Pools<br/>Azure Monitor]

    AzureLocal[072-azure-local-host<br/>Azure Stack HCI<br/>Arc Kubernetes<br/>Hybrid Compute]

    VmHostAlt[073-vm-host<br/>Virtual Machines<br/>Alternate Deployment]

    %% AI & ML Resources
    AzureML[080-azureml<br/>Azure ML Workspace<br/>Compute Clusters<br/>Model Registry]

    AIFoundry[085-ai-foundry<br/>AI Foundry<br/>OpenAI Models<br/>RAI Filtering]

    %% Edge Integration
    EdgeIntegration[Edge Components<br/>100-edge Integration<br/>Hybrid Cloud-Edge]

    %% Core deployment flow
    ResourceGroup --> SecurityIdentity
    SecurityIdentity --> Observability

    %% Data platform flow
    SecurityIdentity --> Data
    Data --> Fabric
    Fabric --> FabricRTI
    SecurityIdentity --> PostgreSQL
    SecurityIdentity --> Redis

    %% Communication setup
    SecurityIdentity --> Messaging

    %% Network infrastructure
    SecurityIdentity --> Networking
    Networking --> VpnGateway

    %% Compute infrastructure
    Networking --> VmHost
    Networking --> Acr
    Networking --> Kubernetes
    Kubernetes --> AksHost
    Networking --> AzureLocal
    Networking --> VmHostAlt

    %% AI infrastructure
    SecurityIdentity --> AzureML
    SecurityIdentity --> AIFoundry

    %% Integration relationships
    Observability --> EdgeIntegration
    Data --> EdgeIntegration
    Messaging --> EdgeIntegration
    VmHost --> EdgeIntegration
    Kubernetes --> EdgeIntegration
    AzureLocal --> EdgeIntegration

    %% Cross-platform dependencies
    Data -.-> Messaging
    Observability -.-> Messaging
    Acr -.-> Kubernetes
    Acr -.-> AksHost

    %% Color coding by component function
    style ResourceGroup fill:#e1f5fe,stroke:#01579b,stroke-width:3px
    style SecurityIdentity fill:#e1f5fe,stroke:#01579b,stroke-width:2px
    style Observability fill:#f3e5f5,stroke:#7b1fa2,stroke-width:2px
    style Data fill:#f3e5f5,stroke:#7b1fa2,stroke-width:2px
    style Fabric fill:#f3e5f5,stroke:#7b1fa2,stroke-width:2px
    style FabricRTI fill:#f3e5f5,stroke:#7b1fa2,stroke-width:2px
    style PostgreSQL fill:#f3e5f5,stroke:#7b1fa2,stroke-width:2px
    style Redis fill:#f3e5f5,stroke:#7b1fa2,stroke-width:2px
    style Messaging fill:#fff3e0,stroke:#e65100,stroke-width:2px
    style Networking fill:#cffafe,stroke:#059669,stroke-width:2px
    style VpnGateway fill:#cffafe,stroke:#059669,stroke-width:2px
    style VmHost fill:#e8f5e8,stroke:#2e7d32,stroke-width:2px
    style Acr fill:#e8f5e8,stroke:#2e7d32,stroke-width:2px
    style Kubernetes fill:#e8f5e8,stroke:#2e7d32,stroke-width:2px
    style AksHost fill:#e8f5e8,stroke:#2e7d32,stroke-width:2px
    style AzureLocal fill:#e8f5e8,stroke:#2e7d32,stroke-width:2px
    style VmHostAlt fill:#e8f5e8,stroke:#2e7d32,stroke-width:2px
    style AzureML fill:#fef3c7,stroke:#d97706,stroke-width:2px
    style AIFoundry fill:#fef3c7,stroke:#d97706,stroke-width:2px
    style EdgeIntegration fill:#dbeafe,stroke:#1e40af,stroke-width:2px

Deployment Order

Components are numbered to indicate their deployment order and dependencies:

Foundation (000-029)

  1. 000-resource-group - Deploy first to establish resource organization
  2. 010-security-identity - Essential security and identity foundation
  3. 020-observability - Monitoring and logging infrastructure

Data & Analytics (030-039)

  1. 030-data - Data storage and management services
  2. 031-fabric - Microsoft Fabric capacity and workspace (optional)
  3. 032-fabric-rti - Fabric Real-Time Intelligence EventStream (optional)
  4. 035-postgresql - PostgreSQL with TimescaleDB (optional)
  5. 036-managed-redis - Azure Managed Redis (optional)

Messaging (040-049)

  1. 040-messaging - Event-driven messaging infrastructure

Networking (050-059)

  1. 050-networking - Network infrastructure for compute resources
  2. 051-vm-host - Virtual machine hosting (if required)
  3. 055-vpn-gateway - VPN Gateway for secure remote access (optional)

Compute & Containers (060-079)

  1. 060-acr - Azure Container Registry
  2. 070-kubernetes - Azure Kubernetes Service with Arc integration
  3. 071-aks-host - AKS resources (alternate deployment)
  4. 072-azure-local-host - Azure Stack HCI with Arc Kubernetes (optional)
  5. 073-vm-host - Virtual machine hosting (alternate deployment)

AI & Machine Learning (080-099)

  1. 080-azureml - Azure Machine Learning workspace (optional)
  2. 085-ai-foundry - Azure AI Foundry with OpenAI models (optional)

Framework Support

Each component supports multiple Infrastructure as Code frameworks:

  • Terraform - Complete Terraform modules with comprehensive configuration
  • Bicep - Azure-native Bicep templates for streamlined deployment

Getting Started

  1. Review Architecture: Start with main source documentation for overall architecture
  2. Plan Deployment: Choose components based on your deployment requirements
  3. Select Framework: Pick Terraform or Bicep based on your team's preferences
  4. Follow Order: Deploy components in numerical order to respect dependencies
  5. Configure Monitoring: Ensure observability components are properly configured

Prerequisites

  • Azure subscription with appropriate permissions
  • Resource providers registered (see azure-resource-providers)
  • Service principal or managed identity for deployment automation

For more information about the overall source code structure, see the main source documentation.

🤖 Crafted with precision by ✨Copilot following brilliant human instruction, then carefully refined by our team of discerning human reviewers.