Your single source of truth for the Azure Stamps Pattern - Architecture (ASPA), organized by role and learning path to help you navigate architecture, deployment, operations, security, and compliance.
- Read
README.md(project overview & prerequisites). - Read
docs/PROBLEM_STATEMENT.mdfor business & architectural problem framing. - Run the Live Data Path:
docs/LIVE_DATA_PATH.mdto seed Cosmos and validate Management Portal ↔ Hot Chocolate (GraphQL) ↔ Cosmos. - For local development: follow
docs/DEVELOPER_QUICKSTART.md(run Functions + Portal locally). - For deployments: open
docs/DEPLOYMENT_GUIDE.mdand usescripts/deploy.ps1or Bicep templates as documented. - Fast path: for a complete single-subscription deployment end-to-end, use the Three-Step Deployment Guide.
- Newcomers: Start here to understand the big picture and find your learning path
- Developers/DevOps: Quickly locate deployment, troubleshooting, and implementation guides
- Solution Architects: Access deep-dive technical and compliance documentation
A complete index of the documentation set. Use this as a quick catalog and to verify coverage.
- PROBLEM_STATEMENT.md - Foundational business & technical problem framing
- ARCHITECTURE_GUIDE.md - Core architecture and design patterns
- AUTH_CI_STRATEGY.md - Authentication and CI/CD strategy
- Azure_Stamps_Pattern_Analysis_WhitePaper.md - Technical analysis whitepaper
- CAF_WAF_COMPLIANCE_ANALYSIS.md - Compliance framework analysis
- CAPABILITIES_MATRIX.md - Feature capabilities matrix
- COST_OPTIMIZATION_GUIDE.md - Cost management strategies
- DATA_STRATEGY_GUIDE.md - Data architecture and strategy
- DEPLOYMENT_ARCHITECTURE_GUIDE.md - Deployment patterns
- DEPLOYMENT_GUIDE.md - Step-by-step deployment instructions
- DEVELOPER_QUICKSTART.md - Quick start for developers
- DEVELOPER_SECURITY_GUIDE.md - Security implementation guide
- DOCS.md - This documentation hub
- GLOSSARY.md - Terminology and definitions
- KNOWN_ISSUES.md - Common issues and solutions
- LANDING_ZONES_GUIDE.md - Azure Landing Zones integration
- LIVE_DATA_PATH.md - Live data flow validation
- MANAGEMENT_PORTAL_USER_GUIDE.md - Portal user documentation
- mermaid-template.md - Diagram template guide
- NAMING_CONVENTIONS_GUIDE.md - Naming standards
- OPERATIONS_GUIDE.md - Operations and maintenance
- PARAMETERIZATION_GUIDE.md - Configuration parameters
- RBAC_CHEATSHEET.md - Role-based access control reference
- REPOSITORY_MAP.md - Repository structure guide
- SAMPLE_GALLERIES.md - Sample app galleries and screenshots
- SECRETS_AND_CONFIG.md - Configuration management
- SECURITY_GUIDE.md - Security implementation
- TROUBLESHOOTING_PLAYBOOKS.md - Operational playbooks
- one-pagers/ - Executive summaries and quick references
- executive-brief-cio.md - CIO executive brief
- production-saas-checklist.md - Production readiness checklist
- releases/ - Release notes and version history
- v0.2.1-smoke-fix.md - Version 0.2.1 release notes
- v0.9.0-local-run.md - Version 0.9.0 release notes
- archive/ - Historical documentation and troubleshooting archives
- 🧩 Problem Framing: PROBLEM_STATEMENT.md
- 🏗️ Architecture: ARCHITECTURE_GUIDE.md
- 🚀 Deployment: DEPLOYMENT_GUIDE.md
- 📐 Deployment Architecture Patterns: DEPLOYMENT_ARCHITECTURE_GUIDE.md
- ⚙️ Operations: OPERATIONS_GUIDE.md
- 🛡️ Security: SECURITY_GUIDE.md
- 💰 Cost Optimization: COST_OPTIMIZATION_GUIDE.md
- 🧩 Parameterization: PARAMETERIZATION_GUIDE.md
- 🏷️ Naming Conventions: NAMING_CONVENTIONS_GUIDE.md
- 📊 Data Strategy: DATA_STRATEGY_GUIDE.md
- 📘 User Guide: MANAGEMENT_PORTAL_USER_GUIDE.md
- 🔁 Live Data Path: LIVE_DATA_PATH.md
- 🧭 CAF/WAF Compliance Analysis: CAF_WAF_COMPLIANCE_ANALYSIS.md
- 🗺️ Azure Landing Zones: LANDING_ZONES_GUIDE.md
- 🔐 Developer Security Guide: DEVELOPER_SECURITY_GUIDE.md
- 👨💻 Developer Quickstart: DEVELOPER_QUICKSTART.md
- 🖊️ Mermaid Template: mermaid-template.md
- 🔐 Auth & CI Strategy: AUTH_CI_STRATEGY.md
- 🔒 Secrets & Config: SECRETS_AND_CONFIG.md
- 🛂 RBAC Cheat Sheet: RBAC_CHEATSHEET.md
- 🗂️ Repository Map: REPOSITORY_MAP.md
- 🔧 Troubleshooting Playbooks: TROUBLESHOOTING_PLAYBOOKS.md
- Capabilities Matrix: CAPABILITIES_MATRIX.md
- 🧾 Production SaaS Checklist: one-pagers/production-saas-checklist.md
- 💼 Executive Brief: one-pagers/executive-brief-cio.md
- 🧠 Concept Whitepaper: Azure_Stamps_Pattern_Analysis_WhitePaper.md
- 📖 Glossary: GLOSSARY.md
- 🧰 Known Issues: KNOWN_ISSUES.md
- 📰 Release Notes: releases/
- 📁 Archive: archive/ - Historical documentation and troubleshooting
Recommended Path:
- README.md - Project overview and prerequisites (10 minutes)
- GLOSSARY.md - Key concepts and terminology (15 minutes)
- ARCHITECTURE_GUIDE.md - System design and components (45 minutes)
- DEPLOYMENT_GUIDE.md - Simple deployment walkthrough (60 minutes)
Recommended Path:
- README.md - Quick start and prerequisites (10 minutes)
- DEPLOYMENT_GUIDE.md - Step-by-step deployment (45 minutes)
- DEVELOPER_SECURITY_GUIDE.md - Security implementation patterns (30 minutes)
- KNOWN_ISSUES.md - Troubleshooting reference (as needed)
Recommended Path:
- README.md - Business value and ROI (10 minutes)
- one-pagers/executive-brief-cio.md - Executive summary (10 minutes)
- CAF_WAF_COMPLIANCE_ANALYSIS.md - Compliance scorecard (15 minutes)
Recommended Path:
- ARCHITECTURE_GUIDE.md - Technical deep-dive (45 minutes)
- SECURITY_GUIDE.md - Zero-trust security model (30 minutes)
- OPERATIONS_GUIDE.md - Operational excellence (30 minutes)
- COST_OPTIMIZATION_GUIDE.md - Cost management (15 minutes)
| Task | Documentation | Time Required |
|---|---|---|
| ✅ Complete Single-Subscription Deployment (3 steps) |
THREE_STEP_DEPLOYMENT_GUIDE | 45–90 minutes |
| Task | Documentation | Time Required |
|---|---|---|
| 📐 Choose Deployment Pattern | DEPLOYMENT_ARCHITECTURE_GUIDE | 10 minutes |
| 🌟 Simple 2-Region Setup | DEPLOYMENT_GUIDE - Option 1 | 45 minutes |
| 🌍 Enterprise Multi-GEO | DEPLOYMENT_GUIDE - Option 2 | 2-3 hours |
| 🔧 Automation Setup | DEPLOYMENT_GUIDE - Methods | 30 minutes |
| 👩💻 Run Locally (Dev) | DEVELOPER_QUICKSTART | 10-15 minutes |
| Task | Documentation | Time Required |
|---|---|---|
| 🏠 Add New Tenant (CELL) | OPERATIONS_GUIDE - Tenant Management | 20 minutes |
| 🗂️ Management Portal | MANAGEMENT_PORTAL_USER_GUIDE | 15-30 minutes |
| 🚨 Incident Response | OPERATIONS_GUIDE - Incident Response | 15 minutes |
| 📊 Monitoring Setup | OPERATIONS_GUIDE - Monitoring | 30 minutes |
| 🔧 Troubleshooting | KNOWN_ISSUES | Variable |
| Task | Documentation | Time Required |
|---|---|---|
| ✅ Security Baseline | SECURITY_GUIDE - Overview | 30 minutes |
| 🔐 Identity Setup | SECURITY_GUIDE - Identity | 45 minutes |
| 📋 Compliance Checklist | SECURITY_GUIDE - Compliance | 20 minutes |
🌍 Global Layer → DNS, Traffic Manager, Front Door, Global Functions
🚪 Geodes Layer → API Management (APIM), Global Control Plane Cosmos DB
🏢 Regional Layer → Application Gateway, Key Vault, Automation Account
🏠 CELL Layer → Flexible: Shared (10-100 tenants) or Dedicated (1 tenant)
User → Front Door → Traffic Manager → APIM Gateway → Application Gateway → CELL (Shared/Dedicated) → SQL/Storage
- Shared CELL: 10-100 small tenants, cost-optimized, application-level isolation
- Dedicated CELL: Single enterprise tenant, compliance-ready, infrastructure-level isolation
- Mixed Deployment: Optimize costs with tenant segmentation strategy
- Availability Target: 99.95% global uptime
- Performance Target: <100ms global response time
- Scale Target: Unlimited tenants per region (shared or dedicated)
- Cost Efficiency: $16/tenant (shared) to $3,200/tenant (dedicated)
- Security Target: Zero-trust architecture with flexible isolation levels
If you find gaps or areas for improvement in this documentation:
- Review the specific guide for detailed information
- Check the troubleshooting sections for common issues
- Refer to the architecture guide for technical context
- Architecture Questions: ARCHITECTURE_GUIDE.md
- Deployment Issues: DEPLOYMENT_GUIDE.md
- Operations Problems: OPERATIONS_GUIDE.md
- Security Concerns: SECURITY_GUIDE.md
- Azure Documentation: Azure Architecture Center ↗
- Azure Stamps Pattern: Azure Application Architecture Guide ↗
- Multi-Tenant SaaS: SaaS architecture and patterns ↗
- Azure Landing Zones: Landing Zones overview ↗
🎯 Start Here: Begin with README.md
⚡ Quick Deploy: Ready to deploy? Jump to DEPLOYMENT_GUIDE.md
🏗️ Deep Dive: Want technical details? Explore ARCHITECTURE_GUIDE.md
🤝 Contribution Guidelines: See CONTRIBUTING.md for how to contribute, report issues, or suggest improvements.
📝 Document Version Information
- Version: 1.6.4
- Last Updated: 2025-09-08 11:45:17 UTC
- Status: Current
- Next Review: 2025-12