Guidance for designing secure Azure network architecture — hub-spoke topology, segmentation with NSGs/ASGs, private endpoints, DDoS protection, and egress control, aligned to Zero Trust network pillar. WHEN: Azure network security, hub spoke, network segmentation, NSG ASG design, private endpoint, DDoS protection, secure virtual network, egress control, Zero Trust network, private connectivity design.
