Specifications include, but are not limited to: 1.1 Azure Subscription and Governance Design • Design must include best practice for Azure Management Groups, Subscriptions, and Resource Groups and Resources, and any related components necessary to maintain best practice security and operational posture. • Design must establish baseline policies, demonstrated to be aligned with best practice, for governance and resource management. • Landing zone design must accommodate Nutanix NC2 cluster as DR replication target. • Design must include strong measures and methods to contain Azure cost, including use of Azure Cost Management and Budgets. • Design must include best practice-aligned use of Azure Resource Manager / Blueprints and Role-Based Access Control (RBAC). 1.2Networking Component Design • Design must include Virtual network (vNet) topology options, including a hub and spoke topology. • Design must include at least three subnets for isolating and managing different workloads, or other best practice design as agreed to by the City. • Design must include networking to support a DMZ, or other best-practice security architecture as agreed to by the City.
