This is the Azure Kubernetes Service (AKS) Baseline Cluster reference implementation as produced by the Microsoft Azure Architecture Center.
-
Updated
Jul 8, 2026 - Bicep
This is the Azure Kubernetes Service (AKS) Baseline Cluster reference implementation as produced by the Microsoft Azure Architecture Center.
Architecture options when you need to accommodate more than 500 Spoke Virtual Networks within a common environment
Terraform module to create a spoke network using the Microsoft Azure Hub-Spoke Architecture
Build a low-cost Azure AD DS lab with Terraform: hub-and-spoke VNets, two domain controllers, DNS, file/print/PKI/NPS/IIS/DHCP simulation, admin workstation, validation scripts, CI/CD, and full wiki docs.
Private Endpoint network setup in hub-spoke network topology
Production-grade enterprise Azure Cloud Platform — CAF, WAF, Zero Trust, Hub-Spoke, Bicep, Terraform, GitHub Actions CI/CD
Proof of concept for a Hub & Spoke topology using private endpoints on Azure
Terraform modules and workflows for bare-metal Kubernetes (kubeadm), AWS, Google Cloud, and Azure enterprise infrastructure: hub-spoke, AKS, APIM, Front Door, Service Bus, Key Vault
Terraform-deployed hub-spoke infrastructure on Azure with ILB, Bastion, NAT Gateway, NSG, Log Analytics, AMA, DCRs, and CPU alerts. Monitoring-focused IaC project.
Terraform lab for Azure Virtual Network Manager IPAM, dynamic groups, connectivity, security admin rules, routing, and Azure Firewall
Terraform-based Azure infra: hub-spoke network design, secure VNets, and scalable cloud architecture.
One hub, many spokes, much security.
Hub-spoke topology with Azure Firewall.
This script deploys hub and spoke, where opnsense acts as NVA in the hub
Archived Azure hub-and-spoke Terraform lab; code-study reference, not a live production environment.
This Hub-Spoke deployment with TGW can be usde to integrate with CloudGuard Autoscaling with TGW and Geo-Cluster with TGW. Instructions for integration are provided in the Lab documents.
Secure Azure Landing Zone using Azure CLI + CIS Azure Foundations Benchmark + Log Analytics + Hub-Spoke networking.”
This script deploys hub and spoke, where pfsense acts as NVA in the hub
To associate your repository with the hub-spoke topic, visit your repo's landing page and select "manage topics."