Network Segments

[mbilalamjad]

The network segments seem overly large in my opinion. Often times an app landing zone would only get a /24

[oliverlabs]

@mbilalamjad, while this is true, Azure Firewall and Azure Bastion hosts are not normally deployed in the same /24 subnet as enterprise customers use hub-and-spoke network model. On top of them, azfw azfwmgmt and bastion each require a minimum of /26 subnets to be deployed. I'd suggest deploying two vnets in a hub and spoke manner to make it more realistic.

[ckittel]

The approach that @oliverlabs is talking about is in the landing zone alternative for this architecture. When that gets updated for AI Foundry accounts, we'll make sure the vnet is downsized. ALso open to any other suggests on where to downsize.