[{"data":1,"prerenderedAt":1318},["ShallowReactive",2],{"i-ph:list-bold":3,"i-ph:github-logo-bold":8,"i-ph:linkedin-logo-bold":10,"i-ph:rss-bold":12,"blog-list":14,"i-ph:magnifying-glass-bold":1314,"i-ph:arrow-right-bold":1316},{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":7},0,256,false,"\u003Cpath fill=\"currentColor\" d=\"M228 128a12 12 0 0 1-12 12H40a12 12 0 0 1 0-24h176a12 12 0 0 1 12 12M40 76h176a12 12 0 0 0 0-24H40a12 12 0 0 0 0 24m176 104H40a12 12 0 0 0 0 24h176a12 12 0 0 0 0-24\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":9},"\u003Cpath fill=\"currentColor\" d=\"M212.62 75.17A63.7 63.7 0 0 0 206.39 26A12 12 0 0 0 196 20a63.71 63.71 0 0 0-50 24h-20a63.71 63.71 0 0 0-50-24a12 12 0 0 0-10.39 6a63.7 63.7 0 0 0-6.23 49.17A61.5 61.5 0 0 0 52 104v8a60.1 60.1 0 0 0 45.76 58.28A43.66 43.66 0 0 0 92 192v4H76a20 20 0 0 1-20-20a44.05 44.05 0 0 0-44-44a12 12 0 0 0 0 24a20 20 0 0 1 20 20a44.05 44.05 0 0 0 44 44h16v12a12 12 0 0 0 24 0v-40a20 20 0 0 1 40 0v40a12 12 0 0 0 24 0v-40a43.66 43.66 0 0 0-5.76-21.72A60.1 60.1 0 0 0 220 112v-8a61.5 61.5 0 0 0-7.38-28.83M196 112a36 36 0 0 1-36 36h-48a36 36 0 0 1-36-36v-8a37.87 37.87 0 0 1 6.13-20.12a11.65 11.65 0 0 0 1.58-11.49a39.9 39.9 0 0 1-.4-27.72a39.87 39.87 0 0 1 26.41 17.8a12 12 0 0 0 10.1 5.53h32.35a12 12 0 0 0 10.11-5.53a39.84 39.84 0 0 1 26.41-17.8a39.9 39.9 0 0 1-.4 27.72a12 12 0 0 0 1.61 11.53A37.85 37.85 0 0 1 196 104Z\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":11},"\u003Cpath fill=\"currentColor\" d=\"M216 20H40a20 20 0 0 0-20 20v176a20 20 0 0 0 20 20h176a20 20 0 0 0 20-20V40a20 20 0 0 0-20-20m-4 192H44V44h168Zm-100-36v-56a12 12 0 0 1 21.43-7.41A40 40 0 0 1 192 148v28a12 12 0 0 1-24 0v-28a16 16 0 0 0-32 0v28a12 12 0 0 1-24 0m-16-56v56a12 12 0 0 1-24 0v-56a12 12 0 0 1 24 0M68 80a16 16 0 1 1 16 16a16 16 0 0 1-16-16\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":13},"\u003Cpath fill=\"currentColor\" d=\"M109.74 146.26A75.53 75.53 0 0 1 132 200a12 12 0 0 1-24 0a52 52 0 0 0-52-52a12 12 0 0 1 0-24a75.5 75.5 0 0 1 53.74 22.26M56 76a12 12 0 0 0 0 24a100 100 0 0 1 100 100a12 12 0 0 0 24 0A124 124 0 0 0 56 76m121.62 2.38A170.85 170.85 0 0 0 56 28a12 12 0 0 0 0 24a147 147 0 0 1 104.65 43.35A147 147 0 0 1 204 200a12 12 0 0 0 24 0a170.85 170.85 0 0 0-50.38-121.62M60 180a16 16 0 1 0 16 16a16 16 0 0 0-16-16\"\u002F>",[15,869,909,1104],{"_path":16,"_dir":17,"_draft":18,"_partial":6,"_locale":19,"title":20,"description":21,"date":22,"preview":19,"draft":18,"tags":23,"categories":19,"image":29,"body":30,"_type":863,"_id":864,"_source":865,"_file":866,"_stem":867,"_extension":868},"\u002Fblog\u002F2026-07-07-sovereign-cloud-azure-landing-zones-azure-local","blog","false","","Sovereign Cloud on Azure: Landing Zones and Azure Local","How Microsoft's Sovereign Landing Zone and Azure Local help European organizations meet digital sovereignty requirements while still using the Azure platform.","2026-07-07T09:00:00.000Z",[24,25,26,27,28],"azure","sovereign-cloud","landing-zones","azure-local","compliance","\u002Fimages\u002Fsovereign-cloud-header.svg",{"type":31,"children":32,"toc":854},"root",[33,41,70,103,110,122,134,142,187,192,198,210,217,222,314,319,494,499,506,552,558,569,576,588,647,652,658,663,722,727,765,770,782,787,820,825,831,836,848],{"type":34,"tag":35,"props":36,"children":38},"element","h1",{"id":37},"sovereign-cloud-on-azure-landing-zones-and-azure-local",[39],{"type":40,"value":20},"text",{"type":34,"tag":42,"props":43,"children":44},"p",{},[45,47,53,55,60,62,68],{"type":40,"value":46},"Almost every customer conversation I have lately opens with the same question: ",{"type":34,"tag":48,"props":49,"children":50},"em",{},[51],{"type":40,"value":52},"\"What is sovereign cloud, and do we need it?\"",{"type":40,"value":54}," Usually followed by a second one: ",{"type":34,"tag":48,"props":56,"children":57},{},[58],{"type":40,"value":59},"\"How much control do we actually have over our own data in Azure?\"",{"type":40,"value":61}," Those are fair questions. Between NIS2, DORA, the EU Data Act, the public debate about the ",{"type":34,"tag":63,"props":64,"children":65},"strong",{},[66],{"type":40,"value":67},"US CLOUD Act",{"type":40,"value":69}," and the ongoing uncertainty around the EU–US Data Privacy Framework, sovereignty has moved from a nice-to-have to a board-level topic for a lot of European organizations. The core worry is real: if a hyperscaler is US-owned, EU customer data could in theory be subject to US legal process regardless of the region it physically sits in.",{"type":34,"tag":42,"props":71,"children":72},{},[73,75,80,82,87,89,94,96,101],{"type":40,"value":74},"The good news is that this is not a story about leaving the public cloud. It is a story about ",{"type":34,"tag":63,"props":76,"children":77},{},[78],{"type":40,"value":79},"staying in control",{"type":40,"value":81}," — of where your data lives, who can operate it, and how you can prove it. In this blog I want to zoom out from my previous posts on Infrastructure-as-Code and Terraform, and talk about the platform itself: how do you build an Azure environment that is sovereign ",{"type":34,"tag":48,"props":83,"children":84},{},[85],{"type":40,"value":86},"and",{"type":40,"value":88}," still feels like Azure? To do that, Microsoft has introduced two important building blocks: the ",{"type":34,"tag":63,"props":90,"children":91},{},[92],{"type":40,"value":93},"Sovereign Landing Zone",{"type":40,"value":95}," and ",{"type":34,"tag":63,"props":97,"children":98},{},[99],{"type":40,"value":100},"Azure Local",{"type":40,"value":102},".",{"type":34,"tag":104,"props":105,"children":107},"h3",{"id":106},"so-what-is-sovereign-cloud-really",[108],{"type":40,"value":109},"So what is \"sovereign cloud\", really?",{"type":34,"tag":42,"props":111,"children":112},{},[113,115,120],{"type":40,"value":114},"When a customer asks me what sovereign cloud means, I try to avoid the marketing definition and reduce it to one sentence: ",{"type":34,"tag":63,"props":116,"children":117},{},[118],{"type":40,"value":119},"sovereign cloud is about being able to prove, at any moment, that you are in control of your own data",{"type":40,"value":121},". That control has a technical side (where is the data, who holds the keys, who can read the logs) and a legal side (which laws apply, which support engineer can touch what).",{"type":34,"tag":42,"props":123,"children":124},{},[125,127,132],{"type":40,"value":126},"Sovereign cloud is often reduced to \"my data stays in Europe\", but in practice it is broader than that. Microsoft describes it around four pillars in what is now called ",{"type":34,"tag":63,"props":128,"children":129},{},[130],{"type":40,"value":131},"Microsoft Sovereign Cloud",{"type":40,"value":133}," (formerly Microsoft Cloud for Sovereignty), and that model works well to structure the conversation:",{"type":34,"tag":42,"props":135,"children":136},{},[137],{"type":34,"tag":138,"props":139,"children":141},"img",{"alt":19,"src":140},"\u002Fimages\u002Fsovereign-cloud-pillars.svg",[],{"type":34,"tag":143,"props":144,"children":145},"ul",{},[146,157,167,177],{"type":34,"tag":147,"props":148,"children":149},"li",{},[150,155],{"type":34,"tag":63,"props":151,"children":152},{},[153],{"type":40,"value":154},"Data sovereignty",{"type":40,"value":156}," – where data is stored and processed, how it is encrypted, and who holds the keys.",{"type":34,"tag":147,"props":158,"children":159},{},[160,165],{"type":34,"tag":63,"props":161,"children":162},{},[163],{"type":40,"value":164},"Operational sovereignty",{"type":40,"value":166}," – who can operate the platform, from what location, and under which legal framework.",{"type":34,"tag":147,"props":168,"children":169},{},[170,175],{"type":34,"tag":63,"props":171,"children":172},{},[173],{"type":40,"value":174},"Software sovereignty",{"type":40,"value":176}," – can you run the same workloads somewhere else if you have to? Portability, open-source and hybrid runtimes.",{"type":34,"tag":147,"props":178,"children":179},{},[180,185],{"type":34,"tag":63,"props":181,"children":182},{},[183],{"type":40,"value":184},"Assurance and compliance",{"type":40,"value":186}," – proving all of the above against frameworks like GDPR, NIS2, DORA, ISO 27001, C5 or BIO.",{"type":34,"tag":42,"props":188,"children":189},{},[190],{"type":40,"value":191},"The point is that sovereignty is not a single Azure feature you can switch on. It is a combination of region choice, identity, key management, policy, monitoring and the way you operate the platform.",{"type":34,"tag":104,"props":193,"children":195},{"id":194},"the-sovereign-landing-zone-slz",[196],{"type":40,"value":197},"The Sovereign Landing Zone (SLZ)",{"type":34,"tag":42,"props":199,"children":200},{},[201,203,208],{"type":40,"value":202},"If you have worked with Azure Landing Zones before, the Sovereign Landing Zone will look familiar. It builds on the same ",{"type":34,"tag":63,"props":204,"children":205},{},[206],{"type":40,"value":207},"Azure Landing Zone (ALZ)",{"type":40,"value":209}," architecture, but adds an extra management group with a sovereign policy initiative, sovereign guardrails and a set of reference landing zones.",{"type":34,"tag":42,"props":211,"children":212},{},[213],{"type":34,"tag":138,"props":214,"children":216},{"alt":19,"src":215},"\u002Fimages\u002Fsovereign-landing-zone.svg",[],{"type":34,"tag":42,"props":218,"children":219},{},[220],{"type":40,"value":221},"What you get on top of a \"regular\" landing zone:",{"type":34,"tag":143,"props":223,"children":224},{},[225,261,273,290],{"type":34,"tag":147,"props":226,"children":227},{},[228,230,235,237,244,246,252,253,259],{"type":40,"value":229},"Three additional management groups under ",{"type":34,"tag":63,"props":231,"children":232},{},[233],{"type":40,"value":234},"Landing Zones",{"type":40,"value":236}," – ",{"type":34,"tag":238,"props":239,"children":241},"code",{"className":240},[],[242],{"type":40,"value":243},"Public",{"type":40,"value":245},", ",{"type":34,"tag":238,"props":247,"children":249},{"className":248},[],[250],{"type":40,"value":251},"Confidential Online",{"type":40,"value":95},{"type":34,"tag":238,"props":254,"children":256},{"className":255},[],[257],{"type":40,"value":258},"Confidential Corp",{"type":40,"value":260}," – so you can separate workloads by data classification and apply different sovereign controls per class.",{"type":34,"tag":147,"props":262,"children":263},{},[264,266,271],{"type":40,"value":265},"A ",{"type":34,"tag":63,"props":267,"children":268},{},[269],{"type":40,"value":270},"sovereign policy initiative",{"type":40,"value":272}," that can enforce or audit the three foundational sovereign controls Microsoft calls out on Learn – data residency (allowed regions), encryption at rest (customer-managed keys) and encryption in use (confidential compute) – plus supporting controls like allowed services, private endpoints and network restrictions, applied at the level that matches the classification.",{"type":34,"tag":147,"props":274,"children":275},{},[276,278,283,284,288],{"type":40,"value":277},"The ability to extend the model to on-premises workloads through ",{"type":34,"tag":63,"props":279,"children":280},{},[281],{"type":40,"value":282},"Azure Arc",{"type":40,"value":95},{"type":34,"tag":63,"props":285,"children":286},{},[287],{"type":40,"value":100},{"type":40,"value":289}," (see the next section), so a single policy story covers both cloud and edge.",{"type":34,"tag":147,"props":291,"children":292},{},[293,295,304,306,313],{"type":40,"value":294},"Bicep and Terraform templates in the ",{"type":34,"tag":296,"props":297,"children":301},"a",{"href":298,"rel":299},"https:\u002F\u002Fgithub.com\u002FAzure\u002Fsovereign-landing-zone",[300],"nofollow",[302],{"type":40,"value":303},"Azure\u002Fsovereign-landing-zone",{"type":40,"value":305}," repository, so you can deploy it as code (which fits nicely with what I wrote in my previous blog). Note that this repo will be archived in the first half of 2026 – the ongoing reference is ",{"type":34,"tag":296,"props":307,"children":310},{"href":308,"rel":309},"https:\u002F\u002Flearn.microsoft.com\u002Fazure\u002Fazure-sovereign-clouds\u002Fpublic\u002Foverview-sovereign-landing-zone",[300],[311],{"type":40,"value":312},"Microsoft Learn",{"type":40,"value":102},{"type":34,"tag":42,"props":315,"children":316},{},[317],{"type":40,"value":318},"A concrete example of a sovereign guardrail in Bicep looks like this:",{"type":34,"tag":320,"props":321,"children":325},"pre",{"className":322,"code":323,"language":324,"meta":19,"style":19},"language-bicep shiki shiki-themes github-light github-dark","targetScope = 'managementGroup'\n\nresource allowedLocations 'Microsoft.Authorization\u002FpolicyAssignments@2022-06-01' = {\n  name: 'sovereign-allowed-locations'\n  properties: {\n    displayName: 'Sovereign - Allowed locations'\n    policyDefinitionId: '\u002Fproviders\u002FMicrosoft.Authorization\u002FpolicyDefinitions\u002Fe56962a6-4747-49cd-b67b-bf8b01975c4c'\n    parameters: {\n      listOfAllowedLocations: {\n        value: [\n          'westeurope'\n          'northeurope'\n        ]\n      }\n    }\n    enforcementMode: 'Default'\n  }\n}\n","bicep",[326],{"type":34,"tag":238,"props":327,"children":328},{"__ignoreMap":19},[329,340,350,359,368,377,386,395,404,413,422,431,440,449,458,467,476,485],{"type":34,"tag":330,"props":331,"children":334},"span",{"class":332,"line":333},"line",1,[335],{"type":34,"tag":330,"props":336,"children":337},{},[338],{"type":40,"value":339},"targetScope = 'managementGroup'\n",{"type":34,"tag":330,"props":341,"children":343},{"class":332,"line":342},2,[344],{"type":34,"tag":330,"props":345,"children":347},{"emptyLinePlaceholder":346},true,[348],{"type":40,"value":349},"\n",{"type":34,"tag":330,"props":351,"children":353},{"class":332,"line":352},3,[354],{"type":34,"tag":330,"props":355,"children":356},{},[357],{"type":40,"value":358},"resource allowedLocations 'Microsoft.Authorization\u002FpolicyAssignments@2022-06-01' = {\n",{"type":34,"tag":330,"props":360,"children":362},{"class":332,"line":361},4,[363],{"type":34,"tag":330,"props":364,"children":365},{},[366],{"type":40,"value":367},"  name: 'sovereign-allowed-locations'\n",{"type":34,"tag":330,"props":369,"children":371},{"class":332,"line":370},5,[372],{"type":34,"tag":330,"props":373,"children":374},{},[375],{"type":40,"value":376},"  properties: {\n",{"type":34,"tag":330,"props":378,"children":380},{"class":332,"line":379},6,[381],{"type":34,"tag":330,"props":382,"children":383},{},[384],{"type":40,"value":385},"    displayName: 'Sovereign - Allowed locations'\n",{"type":34,"tag":330,"props":387,"children":389},{"class":332,"line":388},7,[390],{"type":34,"tag":330,"props":391,"children":392},{},[393],{"type":40,"value":394},"    policyDefinitionId: '\u002Fproviders\u002FMicrosoft.Authorization\u002FpolicyDefinitions\u002Fe56962a6-4747-49cd-b67b-bf8b01975c4c'\n",{"type":34,"tag":330,"props":396,"children":398},{"class":332,"line":397},8,[399],{"type":34,"tag":330,"props":400,"children":401},{},[402],{"type":40,"value":403},"    parameters: {\n",{"type":34,"tag":330,"props":405,"children":407},{"class":332,"line":406},9,[408],{"type":34,"tag":330,"props":409,"children":410},{},[411],{"type":40,"value":412},"      listOfAllowedLocations: {\n",{"type":34,"tag":330,"props":414,"children":416},{"class":332,"line":415},10,[417],{"type":34,"tag":330,"props":418,"children":419},{},[420],{"type":40,"value":421},"        value: [\n",{"type":34,"tag":330,"props":423,"children":425},{"class":332,"line":424},11,[426],{"type":34,"tag":330,"props":427,"children":428},{},[429],{"type":40,"value":430},"          'westeurope'\n",{"type":34,"tag":330,"props":432,"children":434},{"class":332,"line":433},12,[435],{"type":34,"tag":330,"props":436,"children":437},{},[438],{"type":40,"value":439},"          'northeurope'\n",{"type":34,"tag":330,"props":441,"children":443},{"class":332,"line":442},13,[444],{"type":34,"tag":330,"props":445,"children":446},{},[447],{"type":40,"value":448},"        ]\n",{"type":34,"tag":330,"props":450,"children":452},{"class":332,"line":451},14,[453],{"type":34,"tag":330,"props":454,"children":455},{},[456],{"type":40,"value":457},"      }\n",{"type":34,"tag":330,"props":459,"children":461},{"class":332,"line":460},15,[462],{"type":34,"tag":330,"props":463,"children":464},{},[465],{"type":40,"value":466},"    }\n",{"type":34,"tag":330,"props":468,"children":470},{"class":332,"line":469},16,[471],{"type":34,"tag":330,"props":472,"children":473},{},[474],{"type":40,"value":475},"    enforcementMode: 'Default'\n",{"type":34,"tag":330,"props":477,"children":479},{"class":332,"line":478},17,[480],{"type":34,"tag":330,"props":481,"children":482},{},[483],{"type":40,"value":484},"  }\n",{"type":34,"tag":330,"props":486,"children":488},{"class":332,"line":487},18,[489],{"type":34,"tag":330,"props":490,"children":491},{},[492],{"type":40,"value":493},"}\n",{"type":34,"tag":42,"props":495,"children":496},{},[497],{"type":40,"value":498},"Nothing exotic – it is a normal policy assignment. The value of the SLZ is that dozens of these controls are already bundled, tested and mapped to compliance frameworks, so you do not have to build the wheel yourself.",{"type":34,"tag":500,"props":501,"children":503},"h4",{"id":502},"where-the-confidential-landing-zones-fit-in",[504],{"type":40,"value":505},"Where the Confidential landing zones fit in",{"type":34,"tag":42,"props":507,"children":508},{},[509,511,516,517,522,524,529,531,536,538,543,545,550],{"type":40,"value":510},"The ",{"type":34,"tag":238,"props":512,"children":514},{"className":513},[],[515],{"type":40,"value":258},{"type":40,"value":95},{"type":34,"tag":238,"props":518,"children":520},{"className":519},[],[521],{"type":40,"value":251},{"type":40,"value":523}," management groups are meant for workloads that need extra protection while the data is being processed. That is where you would typically use ",{"type":34,"tag":63,"props":525,"children":526},{},[527],{"type":40,"value":528},"Confidential VMs",{"type":40,"value":530}," (AMD SEV-SNP or Intel TDX), ",{"type":34,"tag":63,"props":532,"children":533},{},[534],{"type":40,"value":535},"confidential containers on AKS",{"type":40,"value":537}," where available, keys in ",{"type":34,"tag":63,"props":539,"children":540},{},[541],{"type":40,"value":542},"Key Vault Managed HSM",{"type":40,"value":544},", and attestation patterns such as ",{"type":34,"tag":63,"props":546,"children":547},{},[548],{"type":40,"value":549},"Secure Key Release",{"type":40,"value":551}," before a workload is allowed to unwrap its keys. The SLZ does not deploy those workloads for you, but it provides the guardrails and the place in the hierarchy where these patterns naturally belong. This is the pattern I would use for workloads that fall under DORA or that process special categories of personal data.",{"type":34,"tag":104,"props":553,"children":555},{"id":554},"azure-local-sovereign-compute-in-your-own-datacenter",[556],{"type":40,"value":557},"Azure Local: sovereign compute in your own datacenter",{"type":34,"tag":42,"props":559,"children":560},{},[561,563,567],{"type":40,"value":562},"Even with all the sovereign controls in the cloud, there are still workloads that simply cannot leave a specific building. Think of a hospital, a factory floor, a government site, or a location with limited connectivity. This is where ",{"type":34,"tag":63,"props":564,"children":565},{},[566],{"type":40,"value":100},{"type":40,"value":568}," comes in – the product formerly known as Azure Stack HCI, rebranded and repositioned as the on-premises extension of the Azure platform.",{"type":34,"tag":42,"props":570,"children":571},{},[572],{"type":34,"tag":138,"props":573,"children":575},{"alt":19,"src":574},"\u002Fimages\u002Fazure-local-architecture.svg",[],{"type":34,"tag":42,"props":577,"children":578},{},[579,581,586],{"type":40,"value":580},"The important thing to understand is that Azure Local is ",{"type":34,"tag":63,"props":582,"children":583},{},[584],{"type":40,"value":585},"not",{"type":40,"value":587}," a separate cloud. It is a validated Hyper-V based cluster (up to 16 nodes on OEM-validated hardware) that is projected into Azure through Azure Arc. That means:",{"type":34,"tag":143,"props":589,"children":590},{},[591,619,624,635],{"type":34,"tag":147,"props":592,"children":593},{},[594,596,601,603,609,611,617],{"type":40,"value":595},"The control plane runs through ",{"type":34,"tag":63,"props":597,"children":598},{},[599],{"type":40,"value":600},"Azure Resource Manager and Azure Arc",{"type":40,"value":602},". You use the same tooling and the same workflow – Bicep, Terraform, RBAC, Policy – but keep in mind the resource providers are different (for example ",{"type":34,"tag":238,"props":604,"children":606},{"className":605},[],[607],{"type":40,"value":608},"Microsoft.AzureStackHCI\u002F*",{"type":40,"value":610}," for Arc VMs on Azure Local, and ",{"type":34,"tag":238,"props":612,"children":614},{"className":613},[],[615],{"type":40,"value":616},"Microsoft.HybridContainerService\u002F*",{"type":40,"value":618}," for AKS on Azure Local) so your existing cloud IaC won't run one-to-one on the edge.",{"type":34,"tag":147,"props":620,"children":621},{},[622],{"type":40,"value":623},"Monitoring, Defender for Cloud and Sentinel treat the workloads like any other Arc-enabled Azure resource.",{"type":34,"tag":147,"props":625,"children":626},{},[627,628,633],{"type":40,"value":510},{"type":34,"tag":63,"props":629,"children":630},{},[631],{"type":40,"value":632},"data plane stays on-premises",{"type":40,"value":634},". VM disks, container volumes and Arc-enabled data services (for example SQL Managed Instance enabled by Azure Arc, where supported) never leave the building.",{"type":34,"tag":147,"props":636,"children":637},{},[638,640,645],{"type":40,"value":639},"Azure Local expects Azure connectivity for its control plane, but Microsoft is also shipping ",{"type":34,"tag":63,"props":641,"children":642},{},[643],{"type":40,"value":644},"disconnected operations",{"type":40,"value":646}," (currently in preview) with a limited set of local services for sites with intermittent connectivity or temporary air-gap requirements.",{"type":34,"tag":42,"props":648,"children":649},{},[650],{"type":40,"value":651},"If you combine this with the Sovereign Landing Zone, Azure Local plugs in through Arc as a governed extension of your platform. The same sovereign policy initiative and the same tagging model apply – only the physical location of the compute changes.",{"type":34,"tag":104,"props":653,"children":655},{"id":654},"how-the-three-pieces-fit-together",[656],{"type":40,"value":657},"How the three pieces fit together",{"type":34,"tag":42,"props":659,"children":660},{},[661],{"type":40,"value":662},"To me, the interesting part is not any of these building blocks on their own, but the fact that they finally fit together into one consistent story:",{"type":34,"tag":143,"props":664,"children":665},{},[666,690,706],{"type":34,"tag":147,"props":667,"children":668},{},[669,674,676,681,683,688],{"type":34,"tag":63,"props":670,"children":671},{},[672],{"type":40,"value":673},"Sovereign Cloud",{"type":40,"value":675}," defines the ",{"type":34,"tag":48,"props":677,"children":678},{},[679],{"type":40,"value":680},"why",{"type":40,"value":682}," and the ",{"type":34,"tag":48,"props":684,"children":685},{},[686],{"type":40,"value":687},"controls",{"type":40,"value":689}," – regions, keys, operations, compliance.",{"type":34,"tag":147,"props":691,"children":692},{},[693,697,699,704],{"type":34,"tag":63,"props":694,"children":695},{},[696],{"type":40,"value":93},{"type":40,"value":698}," delivers the ",{"type":34,"tag":48,"props":700,"children":701},{},[702],{"type":40,"value":703},"how",{"type":40,"value":705}," on the platform side – a repeatable, policy-driven Azure foundation.",{"type":34,"tag":147,"props":707,"children":708},{},[709,713,715,720],{"type":34,"tag":63,"props":710,"children":711},{},[712],{"type":40,"value":100},{"type":40,"value":714}," extends that foundation to ",{"type":34,"tag":48,"props":716,"children":717},{},[718],{"type":40,"value":719},"where the data has to physically live",{"type":40,"value":721}," – on-premises or at the edge, without giving up the Azure operating model.",{"type":34,"tag":42,"props":723,"children":724},{},[725],{"type":40,"value":726},"For most organizations I talk to, the practical path looks something like this:",{"type":34,"tag":728,"props":729,"children":730},"ol",{},[731,736,741,760],{"type":34,"tag":147,"props":732,"children":733},{},[734],{"type":40,"value":735},"Start with a normal Azure Landing Zone in a European region.",{"type":34,"tag":147,"props":737,"children":738},{},[739],{"type":40,"value":740},"Layer the Sovereign policy initiative on top and pick your allowed regions and key strategy.",{"type":34,"tag":147,"props":742,"children":743},{},[744,746,751,753,758],{"type":40,"value":745},"Use the ",{"type":34,"tag":238,"props":747,"children":749},{"className":748},[],[750],{"type":40,"value":258},{"type":40,"value":752}," \u002F ",{"type":34,"tag":238,"props":754,"children":756},{"className":755},[],[757],{"type":40,"value":251},{"type":40,"value":759}," management groups for workloads that need in-use protection.",{"type":34,"tag":147,"props":761,"children":762},{},[763],{"type":40,"value":764},"Extend the model through Azure Arc and Azure Local for the workloads that genuinely cannot leave your datacenter.",{"type":34,"tag":42,"props":766,"children":767},{},[768],{"type":40,"value":769},"That way you are not building \"yet another private cloud\" next to Azure – you are extending the same platform, with the same code, into the places where sovereignty demands it.",{"type":34,"tag":104,"props":771,"children":773},{"id":772},"what-the-slz-does-not-solve",[774,776,780],{"type":40,"value":775},"What the SLZ does ",{"type":34,"tag":48,"props":777,"children":778},{},[779],{"type":40,"value":585},{"type":40,"value":781}," solve",{"type":34,"tag":42,"props":783,"children":784},{},[785],{"type":40,"value":786},"It is worth being explicit about this, because customers sometimes assume \"SLZ = sovereignty done\". A few things stay out of scope:",{"type":34,"tag":143,"props":788,"children":789},{},[790,800,810],{"type":34,"tag":147,"props":791,"children":792},{},[793,798],{"type":34,"tag":63,"props":794,"children":795},{},[796],{"type":40,"value":797},"Identity",{"type":40,"value":799}," – Entra ID is still a global Microsoft service. If your definition of sovereignty requires a fully sovereign identity provider, you need to look at Microsoft's operator-managed sovereign offerings (e.g. Bleu in France, Delos in Germany) or a separate identity layer, not at SLZ.",{"type":34,"tag":147,"props":801,"children":802},{},[803,808],{"type":34,"tag":63,"props":804,"children":805},{},[806],{"type":40,"value":807},"Productivity and collaboration",{"type":40,"value":809}," – Microsoft 365, Teams, Copilot and similar SaaS services have their own sovereignty story that is independent of what you configure in Azure.",{"type":34,"tag":147,"props":811,"children":812},{},[813,818],{"type":34,"tag":63,"props":814,"children":815},{},[816],{"type":40,"value":817},"The legal question",{"type":40,"value":819}," – SLZ addresses the technical controls. It does not, on its own, remove exposure to foreign legal process such as the US CLOUD Act. That part is a conversation between your legal team, Microsoft's contractual commitments (EU Data Boundary) and, for the strictest requirements, sovereign operator models.",{"type":34,"tag":42,"props":821,"children":822},{},[823],{"type":40,"value":824},"Being upfront about this makes the conversation with the business much easier: SLZ gives you a strong, provable sovereign posture on the Azure platform, but it is one layer in a bigger picture.",{"type":34,"tag":104,"props":826,"children":828},{"id":827},"which-approach-is-best-for-you",[829],{"type":40,"value":830},"Which approach is best for you?",{"type":34,"tag":42,"props":832,"children":833},{},[834],{"type":40,"value":835},"As with the IaC languages I wrote about earlier, there is no single right answer. If your workloads can run in a European Azure region and your legal team is comfortable with the sovereign controls in the SLZ, that is by far the simplest and cheapest path. If you have workloads that must physically stay on-premises, Azure Local is a much better option than building a separate stack, because you keep the same tooling, the same skills and the same governance.",{"type":34,"tag":42,"props":837,"children":838},{},[839,841,847],{"type":40,"value":840},"In my next blog I want to go one level deeper and walk through deploying the Sovereign Landing Zone with Terraform, including the sovereign policy initiative and Azure Local integration through Arc. If you want to already dive into the material, the best starting point is the official Microsoft Learn overview: ",{"type":34,"tag":296,"props":842,"children":844},{"href":308,"rel":843},[300],[845],{"type":40,"value":846},"Sovereign landing zone on Microsoft Learn",{"type":40,"value":102},{"type":34,"tag":849,"props":850,"children":851},"style",{},[852],{"type":40,"value":853},"html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}",{"title":19,"searchDepth":342,"depth":342,"links":855},[856,857,858,859,860,862],{"id":106,"depth":352,"text":109},{"id":194,"depth":352,"text":197},{"id":554,"depth":352,"text":557},{"id":654,"depth":352,"text":657},{"id":772,"depth":352,"text":861},"What the SLZ does not solve",{"id":827,"depth":352,"text":830},"markdown","content:blog:2026-07-07-sovereign-cloud-azure-landing-zones-azure-local.md","content","blog\u002F2026-07-07-sovereign-cloud-azure-landing-zones-azure-local.md","blog\u002F2026-07-07-sovereign-cloud-azure-landing-zones-azure-local","md",{"_path":870,"_dir":17,"_draft":871,"_partial":6,"_locale":19,"title":872,"description":873,"date":874,"preview":19,"draft":871,"tags":875,"categories":19,"image":878,"body":879,"_type":863,"_id":906,"_source":865,"_file":907,"_stem":908,"_extension":868},"\u002Fblog\u002F2023-03-17-terraform-explained","true","Terraform Explained","A practical introduction to Terraform: what it is, how it works and why you would use it for managing cloud infrastructure.","2023-03-17T11:13:49.196Z",[876,877],"iac","terraform","\u002Fimages\u002Fterraform.png",{"type":31,"children":880,"toc":903},[881,887,898],{"type":34,"tag":35,"props":882,"children":884},{"id":883},"terraform-explained",[885],{"type":40,"value":886},"Terraform explained",{"type":34,"tag":42,"props":888,"children":889},{},[890,892],{"type":40,"value":891},"In my last post I explained the option you have when starting withf Infrastructure-as-Code when looking at the languages you want to use.\nIn this blog I will go deeper in to the language Terrarfom. If you would like to read my previous blog, ",{"type":34,"tag":296,"props":893,"children":895},{"href":894},"2023-01-13-different-languages-iac",[896],{"type":40,"value":897},"click here",{"type":34,"tag":104,"props":899,"children":900},{"id":877},[901],{"type":40,"value":902},"Terraform",{"title":19,"searchDepth":342,"depth":342,"links":904},[905],{"id":877,"depth":352,"text":902},"content:blog:2023-03-17-Terraform-explained.md","blog\u002F2023-03-17-Terraform-explained.md","blog\u002F2023-03-17-Terraform-explained",{"_path":910,"_dir":17,"_draft":18,"_partial":6,"_locale":19,"title":911,"description":912,"date":913,"preview":19,"draft":18,"tags":914,"categories":19,"image":916,"body":917,"_type":863,"_id":1101,"_source":865,"_file":1102,"_stem":1103,"_extension":868},"\u002Fblog\u002F2023-01-13-different-languages-iac","Different languages for infrastructure-as-code","An overview of the main languages and tools used for infrastructure-as-code: Terraform, Bicep, ARM, Pulumi and CloudFormation.","2023-01-13T11:13:49.196Z",[876,877,324,915],"arm","\u002Fimages\u002Fiac-overview.png",{"type":31,"children":918,"toc":1097},[919,924,929,935,940,945,950,956,962,967,993,998,1004,1009,1014,1022,1026,1031,1036,1044,1048,1053,1058,1066,1071,1077,1082,1087,1092],{"type":34,"tag":35,"props":920,"children":922},{"id":921},"different-languages-for-infrastructure-as-code",[923],{"type":40,"value":911},{"type":34,"tag":42,"props":925,"children":926},{},[927],{"type":40,"value":928},"Infrastructure-as-Code (IaC) is a concept that allows for the management of infrastructure through the use of code. This means that instead of manually configuring and setting up infrastructure using a web interface, the infrastructure is defined and provisioned using code. This allows for greater automation, consistency, and repeatability in the management of infrastructure, as well as making it easier to version control, test and rollback changes",{"type":34,"tag":104,"props":930,"children":932},{"id":931},"benefits-of-infrastructure-as-code",[933],{"type":40,"value":934},"Benefits of Infrastructure-as-code",{"type":34,"tag":42,"props":936,"children":937},{},[938],{"type":40,"value":939},"Imagine you need to deploy multiple virtual machines, three storage accounts, and a virtual network. Next, you need to configure the network links on that network and format tje diskss. \"Just one click\" in the UI turns into hours of clicking and filling out all the forms and properties.",{"type":34,"tag":42,"props":941,"children":942},{},[943],{"type":40,"value":944},"Now imagine that something went wrong towards the end and you have to start all over again. With the IaC model, you can write code to describe all infrastructure components and then leave the implementation to Terraform, Bicep, or ARM. In this case, if something goes wrong at the end, you can change a few lines of code to fix the problem and run the code again.",{"type":34,"tag":42,"props":946,"children":947},{},[948],{"type":40,"value":949},"Another benefit is the ability to use a source code versioning system such as Azure DevOps or Github to store your code. This gives you equal version control and makes it possible to easily see all changes in the infrastructure and make them available to all team members. By using versions, you automatically  have an audit log in which all changes are recorded",{"type":34,"tag":42,"props":951,"children":952},{},[953],{"type":34,"tag":138,"props":954,"children":955},{"alt":19,"src":916},[],{"type":34,"tag":104,"props":957,"children":959},{"id":958},"which-language-should-you-use",[960],{"type":40,"value":961},"Which language should you use?",{"type":34,"tag":42,"props":963,"children":964},{},[965],{"type":40,"value":966},"When you start using IaC, you still have to make a number of choices. The most important choice here is: which language will you use? In principle, you have a choice of three languages.",{"type":34,"tag":143,"props":968,"children":969},{},[970,978,986],{"type":34,"tag":147,"props":971,"children":972},{},[973],{"type":34,"tag":330,"props":974,"children":975},{},[976],{"type":40,"value":977},"ARM templates (json)",{"type":34,"tag":147,"props":979,"children":980},{},[981],{"type":34,"tag":330,"props":982,"children":983},{},[984],{"type":40,"value":985},"Bicep",{"type":34,"tag":147,"props":987,"children":988},{},[989],{"type":34,"tag":330,"props":990,"children":991},{},[992],{"type":40,"value":902},{"type":34,"tag":42,"props":994,"children":995},{},[996],{"type":40,"value":997},"The three languages all use the Azure Resource Manager for the deployment. The Azure Resource Manager ensures that the code is converted to a resource that must be created. For each language I've made an example how to create a resource group within Azure, so that you can see a good difference between the different languages.",{"type":34,"tag":500,"props":999,"children":1001},{"id":1000},"arm-template-json",[1002],{"type":40,"value":1003},"ARM template (json)",{"type":34,"tag":42,"props":1005,"children":1006},{},[1007],{"type":40,"value":1008},"In the past, ARM templates were the only way to create resources in Azure based on IaC. This is also the default \"language\" that the Azure Resource Manager uses.",{"type":34,"tag":42,"props":1010,"children":1011},{},[1012],{"type":40,"value":1013},"The following code is required to create a resource group:",{"type":34,"tag":320,"props":1015,"children":1017},{"code":1016},"{\n  \"$schema\": \"https:\u002F\u002Fschema.management.azure.com\u002Fschemas\u002F2018-05-01\u002FsubscriptionDeploymentTemplate.json#\",\n  \"contentVersion\": \"1.0.0.0\",\n  \"parameters\": {\n    \"rgName\": {\n      \"type\": \"string\"\n    },\n    \"rgLocation\": {\n      \"type\": \"string\"\n    }\n  },\n  \"variables\": {},\n  \"resources\": [\n    {\n      \"type\": \"Microsoft.Resources\u002FresourceGroups\",\n      \"apiVersion\": \"2021-04-01\",\n      \"name\": \"[parameters('rgName')]\",\n      \"location\": \"[parameters('rgLocation')]\",\n      \"properties\": {}\n    }\n  ],\n  \"outputs\": {}\n}\n",[1018],{"type":34,"tag":238,"props":1019,"children":1020},{"__ignoreMap":19},[1021],{"type":40,"value":1016},{"type":34,"tag":500,"props":1023,"children":1024},{"id":324},[1025],{"type":40,"value":985},{"type":34,"tag":42,"props":1027,"children":1028},{},[1029],{"type":40,"value":1030},"Bicep is a language developed by Microsoft as a replacement for the ARM templates. The advantage of this language is that it is more readable and you need fewer lines to achieve the same. The disadvantage of Bicep, just like ARM templates, is that it can only be used on the Azure platform.",{"type":34,"tag":42,"props":1032,"children":1033},{},[1034],{"type":40,"value":1035},"As indicated, you need less code for the same action, creating a resource group.",{"type":34,"tag":320,"props":1037,"children":1039},{"code":1038},"targetScope = 'subscription'\n\nresource rg 'Microsoft.Resources\u002FresourceGroups@2021-01-01' = {\n  name: 'rg-contoso'\n  location: 'westeurope'\n}\n",[1040],{"type":34,"tag":238,"props":1041,"children":1042},{"__ignoreMap":19},[1043],{"type":40,"value":1038},{"type":34,"tag":500,"props":1045,"children":1046},{"id":877},[1047],{"type":40,"value":902},{"type":34,"tag":42,"props":1049,"children":1050},{},[1051],{"type":40,"value":1052},"Terraform is a language developed by the Terracorp company. This language can be used for all cloud platforms, Google, AWS and Azure. This makes it a language that is widely used by developers in the open-source community and companies with a multi-cloud environment.",{"type":34,"tag":42,"props":1054,"children":1055},{},[1056],{"type":40,"value":1057},"Like Bicep, Terraform uses the Azure Resource Manager to create the resources. Because Terraform can be used for multiple cloud environments, you must indicate that you want to use the Azure Resource Manager. To create a resource group you can use the following code:",{"type":34,"tag":320,"props":1059,"children":1061},{"code":1060},"resource \"azurerm_resource_group\" \"example\" {\n  name     = \"rg-contoso\"\n  location = \"West Europe\"\n}\n",[1062],{"type":34,"tag":238,"props":1063,"children":1064},{"__ignoreMap":19},[1065],{"type":40,"value":1060},{"type":34,"tag":42,"props":1067,"children":1068},{},[1069],{"type":40,"value":1070},"The emergence of Bicep and Terraform makes it easier to create resources in an unambiguous way. Because both languages are easy to read, you also have documentation of the environment and, in combination with Azure DevOps or Github, an audit trail for the changes.",{"type":34,"tag":500,"props":1072,"children":1074},{"id":1073},"which-language-is-best-for-you-to-use",[1075],{"type":40,"value":1076},"Which language is best for you to use?",{"type":34,"tag":42,"props":1078,"children":1079},{},[1080],{"type":40,"value":1081},"There is not really one answer to this and it has a lot to do with which cloud provider you use and the composition of a team.",{"type":34,"tag":42,"props":1083,"children":1084},{},[1085],{"type":40,"value":1086},"If you only use Microsoft Azure, it's best to work with Bicep because this language has been developed for Microsoft Azure.",{"type":34,"tag":42,"props":1088,"children":1089},{},[1090],{"type":40,"value":1091},"If you use different Cloud environments within your company, for example AWS and Azure, it is advisable to use Terraform because you can then manage both environments with the same language.",{"type":34,"tag":42,"props":1093,"children":1094},{},[1095],{"type":40,"value":1096},"In my next blog I will discuss the use of Terraform in more detail.",{"title":19,"searchDepth":342,"depth":342,"links":1098},[1099,1100],{"id":931,"depth":352,"text":934},{"id":958,"depth":352,"text":961},"content:blog:2023-01-13-different-languages-iac.md","blog\u002F2023-01-13-different-languages-iac.md","blog\u002F2023-01-13-different-languages-iac",{"_path":1105,"_dir":17,"_draft":18,"_partial":6,"_locale":19,"title":1106,"description":1107,"date":1108,"preview":19,"draft":18,"tags":1109,"categories":19,"image":1112,"body":1113,"_type":863,"_id":1311,"_source":865,"_file":1312,"_stem":1313,"_extension":868},"\u002Fblog\u002F2023-01-07-windows-365-cloud-wat-is-het-en-wat-heb-je-ervoor-nodig","Windows 365 Cloud: Wat is het en wat heb je ervoor nodig?","Microsoft heeft kort geleden aangekondigd dat ze met een nieuwe functionaliteit komen om het hybride werken nog meer te ondersteunen.","2022-07-26T10:01:27.048Z",[1110,1111,24],"windows-365","intune","\u002Fimages\u002Fhead365.jpg",{"type":31,"children":1114,"toc":1309},[1115,1119,1125,1130,1135,1141,1153,1158,1165,1170,1177,1183,1188,1195,1200,1206,1211,1217,1222,1297],{"type":34,"tag":42,"props":1116,"children":1117},{},[1118],{"type":40,"value":1107},{"type":34,"tag":35,"props":1120,"children":1122},{"id":1121},"windows-365-cloud-pc",[1123],{"type":40,"value":1124},"Windows 365 Cloud PC",{"type":34,"tag":42,"props":1126,"children":1127},{},[1128],{"type":40,"value":1129},"Met deze techniek gaat Microsoft Desktop as a Service (DaaS) bieden. Deze cloud PC’s zullen in eerste instantie draaien op basis van Windows 10 en als later dit jaar Windows 11 beschikbaar komt zal dit ook als Cloud PC worden ondersteund.",{"type":34,"tag":42,"props":1131,"children":1132},{},[1133],{"type":40,"value":1134},"Microsoft wil met het aanbieden van deze functionaliteiten bedrijven helpen om het hybride werken beter en gemakkelijker te maken. De Cloud PC maakt gebruik van alle Cloud-technieken en kan hierdoor op goede en veilige manier worden aangeboden. Daarbij zullen er apps voor alle bekende systemen zijn om verbinding te kunnen maken met de Desktop.",{"type":34,"tag":35,"props":1136,"children":1138},{"id":1137},"windows-365-web-portaal",[1139],{"type":40,"value":1140},"Windows 365 web portaal",{"type":34,"tag":42,"props":1142,"children":1143},{},[1144,1146],{"type":40,"value":1145},"Voor het gebruik van de Cloud PC heeft Microsoft een nieuw portaal beschikbaar gesteld, ",{"type":34,"tag":296,"props":1147,"children":1150},{"href":1148,"rel":1149},"https:\u002F\u002Fcloudpc.microsoft.com",[300],[1151],{"type":40,"value":1152},"cloudpc.microsoft.com",{"type":34,"tag":42,"props":1154,"children":1155},{},[1156],{"type":40,"value":1157},"ia dit portaal kan de gebruiker gemakkelijk zijn eigen pc beheren. Hierbij kan je denken aan het herstarten of bij de juiste rechten het vergroten van de pc.",{"type":34,"tag":42,"props":1159,"children":1160},{},[1161],{"type":34,"tag":138,"props":1162,"children":1164},{"alt":19,"src":1163},"\u002Fimages\u002Fwindows_365_1.png",[],{"type":34,"tag":42,"props":1166,"children":1167},{},[1168],{"type":40,"value":1169},"Daarnaast biedt het portaal de mogelijkheid om verbinding te maken met de pc doormiddel van de browser of door het downloaden van de desbetreffende cliënt.",{"type":34,"tag":42,"props":1171,"children":1172},{},[1173],{"type":34,"tag":138,"props":1174,"children":1176},{"alt":19,"src":1175},"\u002Fimages\u002Fwindows_365_2.png",[],{"type":34,"tag":35,"props":1178,"children":1180},{"id":1179},"beheer",[1181],{"type":40,"value":1182},"Beheer",{"type":34,"tag":42,"props":1184,"children":1185},{},[1186],{"type":40,"value":1187},"De Cloud PC worden beheerd en uitgerold met behulp van Microsoft Endpoint Manager. Hiermee kunnen alle policies worden toegepast zoals op ‘normale’ apparaten.",{"type":34,"tag":42,"props":1189,"children":1190},{},[1191],{"type":34,"tag":138,"props":1192,"children":1194},{"alt":19,"src":1193},"\u002Fimages\u002Fwindows_365_3.png",[],{"type":34,"tag":42,"props":1196,"children":1197},{},[1198],{"type":40,"value":1199},"Voor de Cloud PC zijn er verschillende type images bekend voor licht, gemiddeld en zwaar werk. Hierbij zijn standaard alle Office applicaties en Microsoft Teams geïnstalleerd. Daarnaast is het ook mogelijk om een eigen image te uploaden. De verschillende images kunnen dan aan Azure Active Directory groepen worden gekoppeld.",{"type":34,"tag":35,"props":1201,"children":1203},{"id":1202},"prijzen",[1204],{"type":40,"value":1205},"Prijzen",{"type":34,"tag":42,"props":1207,"children":1208},{},[1209],{"type":40,"value":1210},"Op dit moment zijn er nog geen prijzen bekend: deze worden binnenkort bekend gemaakt. Dit zal wel een fixed price zijn op basis van de grootte van de Virtuele Machine. Deze kunnen, net zoals de huidige Microsoft 365 licenties, via het admin center aan gebruikers worden gekoppeld.",{"type":34,"tag":35,"props":1212,"children":1214},{"id":1213},"technische-vereisten",[1215],{"type":40,"value":1216},"Technische vereisten",{"type":34,"tag":42,"props":1218,"children":1219},{},[1220],{"type":40,"value":1221},"Om Windows 365 Cloud PC’s te kunnen activeren moet je de volgende licenties en rechten hebben.",{"type":34,"tag":143,"props":1223,"children":1224},{},[1225,1233,1241,1249,1257,1265,1273,1281,1289],{"type":34,"tag":147,"props":1226,"children":1227},{},[1228],{"type":34,"tag":330,"props":1229,"children":1230},{},[1231],{"type":40,"value":1232},"Licentie voor het gebruik van de Cloud PC \u002F Windows 3651.",{"type":34,"tag":147,"props":1234,"children":1235},{},[1236],{"type":34,"tag":330,"props":1237,"children":1238},{},[1239],{"type":40,"value":1240},"Gebruiker met Windows 10 Pro",{"type":34,"tag":147,"props":1242,"children":1243},{},[1244],{"type":34,"tag":330,"props":1245,"children":1246},{},[1247],{"type":40,"value":1248},"Windows 10 Enterprise E3 + EMS E3",{"type":34,"tag":147,"props":1250,"children":1251},{},[1252],{"type":34,"tag":330,"props":1253,"children":1254},{},[1255],{"type":40,"value":1256},"Microsoft 365 F3\u002FE3\u002FE5\u002FBP",{"type":34,"tag":147,"props":1258,"children":1259},{},[1260],{"type":34,"tag":330,"props":1261,"children":1262},{},[1263],{"type":40,"value":1264},"Azure subscriptie",{"type":34,"tag":147,"props":1266,"children":1267},{},[1268],{"type":34,"tag":330,"props":1269,"children":1270},{},[1271],{"type":40,"value":1272},"Owner rol voor het opzetten van een vNet virtual netwerk.",{"type":34,"tag":147,"props":1274,"children":1275},{},[1276],{"type":34,"tag":330,"props":1277,"children":1278},{},[1279],{"type":40,"value":1280},"Hybrid identities in Azure AD wanneer er gebruikt wordt gemaakt van een on-premise Active Directory",{"type":34,"tag":147,"props":1282,"children":1283},{},[1284],{"type":34,"tag":330,"props":1285,"children":1286},{},[1287],{"type":40,"value":1288},"Microsoft Intune licenties (bijvoorbeeld Microsoft 365 E3)",{"type":34,"tag":147,"props":1290,"children":1291},{},[1292],{"type":34,"tag":330,"props":1293,"children":1294},{},[1295],{"type":40,"value":1296},"Intune Service Admin rechten voor het beheren van de Cloud PC’s",{"type":34,"tag":42,"props":1298,"children":1299},{},[1300,1302],{"type":40,"value":1301},"Mocht je Windows 365 Cloud PC in actie willen zien kijk dan op: ",{"type":34,"tag":296,"props":1303,"children":1306},{"href":1304,"rel":1305},"https:\u002F\u002Fwww.youtube.com\u002Fwatch?v=V14Ia2uwrtk",[300],[1307],{"type":40,"value":1308},"Windows 365, your Cloud PC | What it is, how it works, and how to set it up – YouTube",{"title":19,"searchDepth":342,"depth":342,"links":1310},[],"content:blog:2023-01-07-windows-365-cloud-wat-is-het-en-wat-heb-je-ervoor-nodig.md","blog\u002F2023-01-07-windows-365-cloud-wat-is-het-en-wat-heb-je-ervoor-nodig.md","blog\u002F2023-01-07-windows-365-cloud-wat-is-het-en-wat-heb-je-ervoor-nodig",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":1315},"\u003Cpath fill=\"currentColor\" d=\"M232.49 215.51L185 168a92.12 92.12 0 1 0-17 17l47.53 47.54a12 12 0 0 0 17-17ZM44 112a68 68 0 1 1 68 68a68.07 68.07 0 0 1-68-68\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":1317},"\u003Cpath fill=\"currentColor\" d=\"m224.49 136.49l-72 72a12 12 0 0 1-17-17L187 140H40a12 12 0 0 1 0-24h147l-51.49-51.52a12 12 0 0 1 17-17l72 72a12 12 0 0 1-.02 17.01\"\u002F>",1783492800315]