How to deploy Microsoft Entra Domain Services within Landing Zone Architecture

[rheight-sav]

There is good documentation around the Identity and Access Management landing zone, but there aren't any examples I can find of how you would actually implement a deployment like that (in Terraform or otherwise).

https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/ready/landing-zone/design-area/identity-access#identity-and-access-management-in-azure-landing-zones

Does anyone have any working examples how how they have done Microsoft Entra Domain Service integration within the Landing Zone Architecture?

[chrismacias06]

I have the same thoughts. I would like to deploy Microsoft Entra Domain Services in a dedicated Identity Subscription via terraform. I also want to have a connectivity (transit vnet) using virtual wan in a seperate management group and subscription. I want to make sure traffic can traverse from Identity --> Connectivity --> Corp or Online application in a global manner with low latency.