Architecture · containment

The database is not in the subnet

The database is not in the subnet Nested administrative bands hold two peered virtual networks; private endpoints sit inside a subnet while their managed database and vault sit outside every traffic boundary. SUBSCRIPTION RESOURCE GROUP VNET-HUB VNET-SPOKE SNET-APP SNET-PE PEERING SQL:1433 PRIVATE PRIVATE DB SQL managed KV Key Vault managed APP Checkout API snet-app PE PE · SQL snet-pe PE PE · Vault snet-pe LEGEND Admin band Traffic box Managed PaaS Private endpoint Workload