Sofian’s City
Eine island explains the whole of cloud security.
Eighteen building blocks of modern enterprise IT — from the lighthouse at the perimeter to the power station behind the skyline. Every detail on this island stands for a concept from practice.
Illustration: own graphic, created with AI assistance
Cloud architecture sounds abstract — until you see it as a city.
When I explain their Azure landscape to clients for the first time, I almost never reach for a whiteboard sketch. I describe a island. With a lighthouse at the perimeter, an access bridge with a gatehouse, two town halls in two municipalities, an underground railway faster than any bus, and a motorway leading to the next city.
Because that is exactly how the cloud works: not as a loose bundle of services but as connected infrastructure in which every element has its role. Understand the city and you understand the cloud.
Welcome to Sofian’s City — the visual foundation for the whole Klartext series. In the coming issues each building block becomes an episode of its own: the firewall at the bridgehead, the power station with two chimneys, the fire station with its flashing light. Everything on this map means something.
Three reasons why images stay with you
What you see, you remember
A slide with 20 bullet points disappears once the presentation ends. A picture of a lighthouse stays. When a discussion about perimeter security comes up two weeks later, clients think of the lighthouse — not of bullet point seven.
Metaphors create a shared language
„We need a second town hall for the B2B partners“ is a better way into a conversation than „we should introduce Entra External ID“. The metaphor makes the conversation between IT and the business possible, without anything lost in translation.
Structure follows the landscape
Cities are not built at random. There are centres, edges, approach roads, utilities. Exactly that logic applies to cloud architecture. Plan the city and you automatically plan the rest — networking, identity, governance and security are thought through together.
What each detail means
Eighteen elements you will find on the map — from the lighthouse in the south-west to the power station in the north. Each stands for a concrete building block of modern enterprise security. And each will get its own Klartext issue.
Access control
Firewall · Enterprise Perimeter
The identity town hall
Microsoft Entra ID
The partner town hall
Entra External ID · B2B
The fast underground
MPLS · Private Backbone
The central hub
Hub-and-Spoke · Netzwerktraffic
The data centres
Azure Landing Zones (ALZ)
The protected homes
Defender for Endpoint
Site security
Defender for Cloud
The houses under construction
Microsoft Intune · Endpoint Manager
The building code
Intune Compliance Policies
The long-distance link
Azure Virtual WAN
Traffic routing
Route Tables · User-Defined Routes
Central administration
Azure Management Groups
The power supply
Azure Monitor · Log Analytics
The dedicated line out to sea
Azure ExpressRoute
The operations centre
Microsoft Sentinel · SIEM
The vault
Azure Key Vault
Traffic control
Azure Traffic Manager · Front Door
Welcome to the island.
Eighteen building blocks, one metaphor, not a single PowerPoint slide. If you would like your own cloud architecture told this clearly, do get in touch.
For every building block — its own episode
I simply do not understand Azure landing zones
If we think of the cloud as a classic server room, subscriptions become buildings, resource groups become racks and Owner roles become master keys.
◦ Read now Issue #02The tool trolley in the server room
Monitoring resources lie scattered across several racks. Service groups bundle them by function rather than by structure — like a tool trolley rolling through the server room.
◦ Coming soon Issue #03The lighthouse at the perimeter
Why the access bridge to the island is more than a firewall — and what a gatehouse with a barrier reveals about modern enterprise perimeter design.
◦ Coming soon