Azure Enterprise Infra Planner

It architects landing zones, hub-spoke networks, multi-region DR setups, and the full stack of VNets, firewalls, private endpoints, and compliance-driven RBAC from a workload description. Outputs production-ready Bicep or Terraform at subscription scope, validates against WAF best practices, and won't let you deploy until you approve the plan. The seven-phase workflow keeps you from skipping steps, and it taps Microsoft Learn and Bicep schemas via MCP tools to stay current. Note that it's for platform engineers doing infrastructure, not app-centric deployments where azure-prepare is the better fit.