KBP Azure Resources

KBP Azure Resources An architecture diagram generated by Archify. Agent · browser · Architecture component Agent browser Developer · workstation · Architecture component Developer workstation Azure Front Door · fd-enbw-prod · WAF · Architecture component · shared Azure Front Door fd-enbw-prod · WAF shared Dev client VPN · Azure VPN gateway · Architecture component Dev client VPN Azure VPN gateway Application Insights · telemetry · alerts · Architecture component · rg-kbp-prod Application Insights telemetry · alerts rg-kbp-prod App Service KBP · web-kbp-prod · staging slot · VNet KBP › VNet integration subnet · rg-kbp-prod App Service KBP web-kbp-prod · staging slot rg-kbp-prod Redis Cache · private endpoint · VNet KBP › Private endpoint subnet Redis Cache private endpoint Key Vault · App Config · private endpoints · VNet KBP › Private endpoint subnet Key Vault · App Config private endpoints APIM enbw · api.enbw.com · External context · IP-restricted · shared APIM enbw api.enbw.com shared Account DB · Azure SQL · YelloData · External context · IP-restricted · shared Account DB Azure SQL · YelloData shared APIM dlapiprod · outgoing events · External context · IP-restricted · shared APIM dlapiprod outgoing events shared APIM scale · CIAM · Azure scale tenant · scale tenant APIM scale CIAM scale tenant HTTPS Private Link App Config access telemetry REST SQL events CIAM VNet KBP VNet integration subnet Private endpoint subnet External context · IP-restricted Azure scale tenant Legend Backend Database Cloud Security Message bus External

Ingress

  • • Front Door with WAF is the only public entry; the App Service is a private origin
  • • The staging slot is used for deployment swaps

Private network

  • • Redis, Key Vault and App Configuration expose private endpoints only
  • • Developers reach App Configuration over the client VPN

Ownership

  • • rg-kbp-prod and rg-kbp-test are fully owned by iac/ bicep
  • • Front Door, API Management, Account DB and CIAM are shared EnBW resources