Azure Landing Zone Scaffolder

VS Code Extension Architecture — TypeScript + esbuild + Webview Wizard

Entry Point

extension.ts
Registers commands & tree view
azureLandingZone.createLandingZone
azureLandingZone.openDocumentation

Sidebar Tree View

LandingZoneTreeProvider.ts
Quick-start guide in VS Code sidebar
Links to docs & wizard launch

Webview Wizard

WizardPanel.ts — lifecycle & message handler
wizardHtml.ts — 7-step HTML/CSS/JS
Steps 0–6: Persona → Networking → Security → Review
Sends LandingZoneConfig to generators
Receives files → writes to disk

Types & Config

types.ts — all interfaces
LandingZoneConfig (root config)
Personas: sandbox · devtest · production
Archetypes: online · corp-connected · sandbox
Connectivity: hub-spoke · virtual-wan
Input validators & persona defaults

Doc Links

docLinks.ts
70+ Microsoft Learn URLs
Single source of truth
Referenced by all generators

Generation Orchestrator

generators/index.ts
Calls all generators based on config.persona
Assembles GeneratedFile[]
Persona-driven: sandbox → minimal, production → full
Returns summary with file count

main.bicep always

mainBicep.ts
Master orchestrator
References ALL modules
Subscription-scope deploy
Creates resource groups
Passes params + outputs

Networking

hubNetworking.ts
virtualWan.ts
firewall.ts
vpnGateway.ts
expressRouteGateway.ts
bastion.ts
spokeNetwork.ts per-spoke
privateDnsZones.ts
networkWatcher.ts

Security & Logging

logAnalytics.ts always
defenderForCloud.ts
rbac.ts prod
policyAssignments.ts

Governance & Cost

managementGroups.ts prod
budgetAlerts.ts
readmeGenerator.ts
azdIntegration.ts

Deployment

deploymentOrchestrator.ts
DEPLOYMENT-GUIDE.md
deploy-stage1-tenant.sh
deploy-stage2-platform.sh
deploy-stage3-workload.sh
Multi-stage pipeline

Generated Output (to disk)

main.bicep + modules/**/*.bicep
parameters/main.bicepparam
azure.yaml + .azure/ (azd)
DEPLOYMENT-GUIDE.md + stage scripts
README.md

Deployment Scopes

Stage 1 — Tenant: Mgmt groups, RBAC, Policy
Stage 2 — Subscription: main.bicep (hub, spokes, security)
Stage 3 — Workload: App-team deploy via azd

Personas

sandbox Minimal, no hub
devtest Basic hub + policies
production Full enterprise ALZ

Tests (Mocha)

types.test.ts
networking.test.ts
securityLogging.test.ts
managementGroups.test.ts
policyAssignments.test.ts
newGenerators.test.ts
integration.test.ts
120 tests passing

Entry Wizard Config Generators Output Tests