Azure Enclave
Managed isolated zero-trust network environments with built-in guardrails.
- Provider
- azure
- Kind
- Network fabric
- Category
- Operations
| property | type | values | required | kind default | this component |
|---|---|---|---|---|---|
| denyAssignments | boolean | — | no | true | inherited |
| flowLogging | boolean | — | no | true | inherited |
| interconnect | enum | public | private | cloud-backbone | no | public | ▸ cloud-backbone |
| kernelBypass | boolean | — | no | false | inherited |
| managed | boolean | — | no | false | ▸ true |
| managedFirewall | boolean | — | no | true | inherited |
| multicast | boolean | — | no | false | inherited |
| overlay | boolean | — | no | false | ▸ true |
| policyGuardrails | boolean | — | no | true | inherited |
Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.
No rule reads this kind yet. That is a gap, not a guarantee.
nodes:
- { id: "enclave", component: "azure-enclave" }Anycast Elastic IP Addressalibaba-anycast-eipCloud Enterprise Networkalibaba-cenElastic IP Addressalibaba-eipExpress Connectalibaba-express-connectGlobal Acceleratoralibaba-gaVirtual Private Cloudalibaba-vpcvSwitchalibaba-vswitchAWS Cloud WANaws-cloud-wanAWS Direct Connectaws-direct-connectDirect Connect gatewayaws-direct-connect-gatewayElastic IP addressaws-elastic-ipElastic network interfaceaws-elastic-network-interfaceAWS Interconnectaws-interconnectInternet gatewayaws-internet-gatewayVPC subnetaws-subnetAWS Transit Gatewayaws-transit-gatewayAmazon VPCaws-vpcAmazon VPC IP Address Manageraws-vpc-ipamVPC peering connectionaws-vpc-peeringAzure ExpressRouteazure-expressrouteAzure Multicloud Interconnectazure-multicloud-interconnectAzure network interfaceazure-network-interfaceAzure Peering Serviceazure-peering-servicePublic IP addressazure-public-ipAzure Relayazure-relayAzure Route Serverazure-route-serverAzure subnetazure-subnetAzure Virtual Networkazure-virtual-networkAzure Virtual WANazure-virtual-wanCloudflare Bring Your Own IPcloudflare-byoipCloudflare Meshcloudflare-meshCloudflare Network Interconnectcloudflare-network-interconnectCloudflare WANcloudflare-wanAntreaantreaCisco routercisco-routerCisco switchcisco-switchMulticast domainmulticast-domainGeneric network fabricnetwork-fabricngrokngrokSpine-leaf fabricspine-leaf-fabric
and 29 more → Network fabric page# yaml-language-server: $schema=../../schema/component.schema.json # Azure Enclave (preview): managed isolated zero-trust environments — a community, which is a managed # Virtual WAN hub with Azure Firewall, fronting one or more enclave virtual networks ("What is Azure # Enclave?"). Logging is enabled for all enclaves by default; policy guardrails and deny assignments ship. schemaVersion: "1" type: "component" id: "azure-enclave" kind: "network-fabric" provider: "azure" docs: "https://learn.microsoft.com/en-us/azure/enclave/what-azure-enclave" defaults: managed: true overlay: true interconnect: "cloud-backbone" properties: flowLogging: type: "boolean" default: true managedFirewall: type: "boolean" default: true policyGuardrails: type: "boolean" default: true denyAssignments: type: "boolean" default: true