This repository is the Azure Enterprise-Scale (ALZ) reference implementation, providing infrastructure-as-code artifacts to deploy and govern multi-subscription Azure environments. It is not a runtime application but a deployment toolkit consisting of ARM templates, Bicep files, custom Azure Policy definitions/initiatives, custom role definitions, and PowerShell automation. The architecture follows the Cloud Adoption Framework's landing zone design, with a management group hierarchy, policy-driven governance, and modular networking topologies (hub-spoke, Virtual WAN). Key entry points include the main ARM deployment template (`eslzArm/eslzArm.json`), the portal accelerator (`eslzArm/eslz-portal.json`), and the Bicep-based policy compilation (`src/templates/policies.bicep`). Data flows are primarily declarative: policy definitions and assignments are deployed to management groups, which then enforce compliance on subscriptions and resources. External dependencies are entirely Azure-native: Azure Resource Manager, Azure Policy, Azure RBAC, and Azure networking services. The repository also includes a PowerShell module (`Alz.Tools`) for subscription alias creation, orphaned RBAC cleanup, and artifact conversion, plus a Pester-based test framework for policy validation.
This is not a production application but an educational repository for Microsoft's AZ-104 Azure Administrator training. It contains laboratory instructions, demonstration guides, and infrastructure-as-code templates (ARM JSON and Bicep) for provisioning Azure resources such as virtual networks, virtual machines, load balancers, and storage accounts. The repository provides step-by-step exercises for learners to practice Azure administration tasks. While the templates are functional and follow best practices, the repo's primary purpose is instructional, not to serve as a reusable software package. The codebase is essentially documentation with supporting automation scripts, and its architecture is not applicable to a running system.