Azure · Architecture guide
Connect Azure services around a clear operating model
Map Azure infrastructure, data, AI, DevOps, IoT, and virtual desktop services to a defined workload and operating model.
Azure offers infrastructure, application, data, AI, integration, device, and virtual-desktop services. Using more of them does not make a workload more integrated.
Integration comes from contracts: identities, APIs, events, data models, deployment, monitoring, and ownership that connect the parts.
Start with the workload map
Describe the user or system that starts the work, the decision or transaction it supports, and the service level it needs. Then map data, dependencies, regions, identities, and support teams.
Use the Microsoft Cloud Adoption Framework to connect the architecture with readiness, governance, security, and management.
Assign each layer a responsibility
Infrastructure and application hosting
Choose virtual machines, containers, app hosting, or serverless services based on runtime control, scaling, networking, and operations. A managed service reduces some platform work but does not own your application reliability.
Data and analytics
Define systems of record, ingestion, retention, transformation, serving, and quality ownership. Select databases, storage, analytics, and reporting services only after latency and access requirements are known.
AI
State the model’s job, approved data, evaluation set, human review, prohibited actions, and monitoring. An AI service is one component of the product, not its operating model.
Integration and delivery
APIs, messaging, events, workflows, and deployment pipelines move changes between components. Document retries, idempotency, versioning, and recovery at every boundary.
Devices and user environments
IoT and virtual desktop services add device identity, network, patching, and support responsibilities. Include them only when the workload needs those controls.
Review five cross-cutting contracts
| Contract | Decision to record |
|---|---|
| Identity | Which user or service acts at each hop? |
| Network | Which paths are allowed, inspected, and recoverable? |
| Data | Where is authoritative data stored and retained? |
| Delivery | How are code and configuration promoted and rolled back? |
| Operations | Who monitors, supports, funds, and retires each component? |
Microsoft’s Azure Architecture Center provides current reference architectures and design guidance. Adapt a pattern only after checking its assumptions against your workload.
Prove one thin slice
Build the smallest path that crosses the main service boundaries. Test normal use, peak load, access denial, dependency failure, deployment, and recovery.
Compare the result with the current process. Add services only when the evidence shows a new responsibility that the existing design cannot meet.
Planning an Azure architecture?
Define the workload, service boundaries, and operating responsibilities before selection.