Skip to content

Azure · Architecture guide

Connect Azure services around a clear operating model

Map Azure infrastructure, data, AI, DevOps, IoT, and virtual desktop services to a defined workload and operating model.

2 min read Updated 25 Aug 2026
Azure services connected around a business workload

Azure offers infrastructure, application, data, AI, integration, device, and virtual-desktop services. Using more of them does not make a workload more integrated.

Integration comes from contracts: identities, APIs, events, data models, deployment, monitoring, and ownership that connect the parts.

Start with the workload map

Describe the user or system that starts the work, the decision or transaction it supports, and the service level it needs. Then map data, dependencies, regions, identities, and support teams.

Use the Microsoft Cloud Adoption Framework to connect the architecture with readiness, governance, security, and management.

Assign each layer a responsibility

Infrastructure and application hosting

Choose virtual machines, containers, app hosting, or serverless services based on runtime control, scaling, networking, and operations. A managed service reduces some platform work but does not own your application reliability.

Data and analytics

Define systems of record, ingestion, retention, transformation, serving, and quality ownership. Select databases, storage, analytics, and reporting services only after latency and access requirements are known.

AI

State the model’s job, approved data, evaluation set, human review, prohibited actions, and monitoring. An AI service is one component of the product, not its operating model.

Integration and delivery

APIs, messaging, events, workflows, and deployment pipelines move changes between components. Document retries, idempotency, versioning, and recovery at every boundary.

Devices and user environments

IoT and virtual desktop services add device identity, network, patching, and support responsibilities. Include them only when the workload needs those controls.

Review five cross-cutting contracts

ContractDecision to record
IdentityWhich user or service acts at each hop?
NetworkWhich paths are allowed, inspected, and recoverable?
DataWhere is authoritative data stored and retained?
DeliveryHow are code and configuration promoted and rolled back?
OperationsWho monitors, supports, funds, and retires each component?

Microsoft’s Azure Architecture Center provides current reference architectures and design guidance. Adapt a pattern only after checking its assumptions against your workload.

Prove one thin slice

Build the smallest path that crosses the main service boundaries. Test normal use, peak load, access denial, dependency failure, deployment, and recovery.

Compare the result with the current process. Add services only when the evidence shows a new responsibility that the existing design cannot meet.

Continue reading

Related perspectives

Planning an Azure architecture?

Define the workload, service boundaries, and operating responsibilities before selection.