Skip to content

Visual guides

Explore the original illustrated guides. Learning arrows show exercise order; each technical figure has its own legend. Open an illustration for readable full-size labels.

Your learning journey

Six learning phases from the optional workstation setup through Terraform foundations, networking, Windows compute, platform services, and operations. Public DNS in CLZ-300 is optional.
Suggested learning journey, not a network topology. Follow lesson prerequisites; CLZ-090 and CLZ-300 are optional. On narrow screens, scroll the diagram horizontally. Open at full size.

Illustrated phases

Workstation

Workstation illustrated learning scene
Original conceptual artwork, not a deployment topology. Open at full size.

Foundations

Foundations illustrated learning scene
Original conceptual artwork, not a deployment topology. Open at full size.

Networking

Networking illustrated learning scene
Original conceptual artwork, not a deployment topology. Open at full size.

Windows compute

Windows compute illustrated learning scene
Original conceptual artwork, not a deployment topology. Open at full size.

Platform services

Platform services illustrated learning scene
Original conceptual artwork, not a deployment topology. Open at full size.

Operations

Operations illustrated learning scene
Original conceptual artwork, not a deployment topology. Open at full size.

Terraform habits

terraform safe workflow
Follow the exact lesson instructions. Open at full size.
troubleshooting
Follow the exact lesson instructions. Open at full size.
state aware cleanup
Follow the exact lesson instructions. Open at full size.

Every lesson

Learning sequences

CLZ-090 — Optional Windows Contributor Workstation Setup

CLZ-090 learning sequence
Arrows show learning order, not network traffic. Open at full size.

CLZ-100 — Terraform Foundations

CLZ-100 learning sequence
Arrows show learning order, not network traffic. Open at full size.

CLZ-110 — Azure CLI and Subscription Readiness

CLZ-110 learning sequence
Arrows show learning order, not network traffic. Open at full size.

CLZ-120 — First Azure Deployment and Terraform Workflow

CLZ-120 learning sequence
Arrows show learning order, not network traffic. Open at full size.

CLZ-130 — Provider Authentication

CLZ-130 learning sequence
Arrows show learning order, not network traffic. Open at full size.

CLZ-140 — Resource Groups and Tags

CLZ-140 learning sequence
Arrows show learning order, not network traffic. Open at full size.

CLZ-150 — Variables, Locals, and Outputs

CLZ-150 learning sequence
Arrows show learning order, not network traffic. Open at full size.

CLZ-160 — State and Locking Basics

CLZ-160 learning sequence
Arrows show learning order, not network traffic. Open at full size.

CLZ-170 — Virtual Network Foundation

CLZ-170 learning sequence
Arrows show learning order, not network traffic. Open at full size.

CLZ-180 — Network Security Groups

CLZ-180 learning sequence
Arrows show learning order, not network traffic. Open at full size.

CLZ-190 — Windows VM Basics

CLZ-190 learning sequence
Arrows show learning order, not network traffic. Open at full size.

CLZ-200 — Windows VM IIS Bootstrap

CLZ-200 learning sequence
Arrows show learning order, not network traffic. Open at full size.

CLZ-210 — Azure Bastion RDP

CLZ-210 learning sequence
Arrows show learning order, not network traffic. Open at full size.

CLZ-220 — Standard Load Balancer for Windows

CLZ-220 learning sequence
Arrows show learning order, not network traffic. Open at full size.

CLZ-230 — Load Balancer NAT Rules

CLZ-230 learning sequence
Arrows show learning order, not network traffic. Open at full size.

CLZ-240 — Count with Windows VMs

CLZ-240 learning sequence
Arrows show learning order, not network traffic. Open at full size.

CLZ-250 — For Each with Windows VMs

CLZ-250 learning sequence
Arrows show learning order, not network traffic. Open at full size.

CLZ-260 — Windows VMSS Manual Scaling

CLZ-260 learning sequence
Arrows show learning order, not network traffic. Open at full size.

CLZ-270 — Windows VMSS Autoscaling

CLZ-270 learning sequence
Arrows show learning order, not network traffic. Open at full size.

CLZ-280 — NAT Gateway Outbound

CLZ-280 learning sequence
Arrows show learning order, not network traffic. Open at full size.

CLZ-290 — Private DNS

CLZ-290 learning sequence
Arrows show learning order, not network traffic. Open at full size.

CLZ-300 — Optional Public DNS

CLZ-300 learning sequence
Arrows show learning order, not network traffic. Open at full size.

CLZ-310 — Remote State Storage

CLZ-310 learning sequence
Arrows show learning order, not network traffic. Open at full size.

CLZ-320 — Cross-Environment State

CLZ-320 learning sequence
Arrows show learning order, not network traffic. Open at full size.

CLZ-330 — Traffic Manager Global Routing

CLZ-330 learning sequence
Arrows show learning order, not network traffic. Open at full size.

CLZ-340 — Key Vault Secrets

CLZ-340 learning sequence
Arrows show learning order, not network traffic. Open at full size.

CLZ-350 — Private Endpoint for Storage

CLZ-350 learning sequence
Arrows show learning order, not network traffic. Open at full size.

CLZ-360 — Azure Monitor and Log Analytics

CLZ-360 learning sequence
Arrows show learning order, not network traffic. Open at full size.

CLZ-370 — GitHub Actions for Terraform

CLZ-370 learning sequence
Arrows show learning order, not network traffic. Open at full size.

CLZ-380 — Azure SQL Private Access

CLZ-380 learning sequence
Arrows show learning order, not network traffic. Open at full size.

CLZ-390 — Final Windows Reference Architecture

CLZ-390 learning sequence
Arrows show learning order, not network traffic. Open at full size.

Original phase symbols

Workstation phase symbol
Original symbolic phase illustration. Open at full size.
Foundations phase symbol
Original symbolic phase illustration. Open at full size.
Networking phase symbol
Original symbolic phase illustration. Open at full size.
Windows compute phase symbol
Original symbolic phase illustration. Open at full size.
Platform services phase symbol
Original symbolic phase illustration. Open at full size.
Operations phase symbol
Original symbolic phase illustration. Open at full size.

Architecture library

Bastion RDP access
Original diagram labels and service connections are preserved. Open at full size.
Capstone Windows reference architecture
Original diagram labels and service connections are preserved. Open at full size.
Azure From Zero To Hero curriculum map
Original diagram labels and service connections are preserved. Open at full size.
GitHub Actions validation
Original diagram labels and service connections are preserved. Open at full size.
Global routing
Original diagram labels and service connections are preserved. Open at full size.
Load balanced Windows web tier
Original diagram labels and service connections are preserved. Open at full size.
Monitoring foundation
Original diagram labels and service connections are preserved. Open at full size.
Network foundation
Original diagram labels and service connections are preserved. Open at full size.
Private endpoint service access
Original diagram labels and service connections are preserved. Open at full size.
Remote state storage
Original diagram labels and service connections are preserved. Open at full size.
Naming and tags
Original diagram labels and service connections are preserved. Open at full size.
Secrets flow
Original diagram labels and service connections are preserved. Open at full size.
Terraform workflow
Original diagram labels and service connections are preserved. Open at full size.
Windows IIS VM
Original diagram labels and service connections are preserved. Open at full size.
Windows workstation toolchain
Original diagram labels and service connections are preserved. Open at full size.