This repo is a reference implementation for building a secure Azure environment following cloud security practices and real-world enterprise controls. This project demonstrates how to design, deploy, and enforce a cloud security posture across Azure using Infrastructure as Code, Azure Policy, Defender for Cloud, and automated remediation.