This repository is the Azure Enterprise-Scale / Azure Landing Zones reference implementation: a policy-as-code and infrastructure-as-code framework for bootstrapping and governing large Azure environments. It does not run a runtime service; instead it ships deployable ARM templates, Bicep source templates, PowerShell automation, and a large library of custom Azure Policy definitions and initiatives. In production, platform teams use it to create management group hierarchies, assign RBAC roles, deploy policy assignments, provision hub-and-spoke or Virtual WAN network topologies, and standardize subscription landing zones across multiple Azure clouds (AzureCloud, AzureUSGovernment, AzureChinaCloud). The real, code-level deliverable is governance-as-code: hundreds of Deny/Audit/DeployIfNotExists/Modify policies covering security, networking, storage, SQL, containers, key vault, encryption, diagnostics, and cost optimization, plus Pester-based tests that validate policy behavior in live Azure subscriptions.