{
"Typ": "Standard IT-Sicherheit",
"Nummer": "R12345",
"Name": "Standard für Tests",
"Autoren": [
"Adrian A. Baumann"
],
"Pruefende": [
"Adrian A. Baumann"
],
"Gueltigkeit": {
"Von": "2025-08-15",
"Bis": "2028-08-15"
},
"SignaturCSO": "",
"Geltungsbereich": {
"Abschnitt": [
{
"typ": "text",
"inhalt": "Hier und jetzt. für alle Benutzer."
}
]
},
"Einleitung": {},
"Ziel": "",
"Grundlagen": "",
"Changelog": [],
"Anhänge": "",
"Verantwortlich": "Information Security Management BIT",
"Klassifizierung": null,
"Glossar": {},
"Vorgaben": [
{
"Nummer": "1",
"Titel": "Nur Text",
"Thema": "Informationen",
"Kurztext": {
"Abschnitt": [
{
"typ": "text",
"inhalt": "Test des Abschnitttyps \"Text\""
}
]
},
"Langtext": {
"Abschnitt": [
{
"typ": "text",
"inhalt": "Der Abschnitttyp \"Text\" enthält normalen Fliesstext. Hervorhebungen können auf zwei Arten erfolgen: *So* oder _so_. \r\nAbschnitte werden durch eine Leerzeile getrennt\r\n\r\nHier ist ein neuer Abschnitt.\r\n(Wenn das jemanden an \"Markdown\" erinnert: Korrekt. Die Textfelder unterstützen Markdown)"
}
]
},
"Referenz": [
"Stand der Technik"
],
"Gueltigkeit": {
"Von": "2025-10-08",
"Bis": null
},
"Checklistenfragen": [],
"Stichworte": []
},
{
"Nummer": "2",
"Titel": "Listen und Tabellen",
"Thema": "Informationen",
"Kurztext": {
"Abschnitt": [
{
"typ": "text",
"inhalt": "Diese Vorgabe enthält Listen und Tabellen"
}
]
},
"Langtext": {
"Abschnitt": [
{
"typ": "text",
"inhalt": "Listen kommen in geordneter und ungeordneter Form vor:"
},
{
"typ": "liste geordnet",
"inhalt": "Jedes\r\nElement\r\nist\r\nauf einer eigenen Zeile erfasst."
},
{
"typ": "liste ungeordnet",
"inhalt": "Jedes\r\nElement\r\nist\r\nauf einer eigenen Zeile erfasst."
},
{
"typ": "text",
"inhalt": "Tabellen werden in \"Ascii Art\" gezeichnet. Die Zeilen/Spaltentrenner müssen dabei nicht genau sein, \"die Maschine\" interpretiert das recht zuverlässig."
},
{
"typ": "tabelle",
"inhalt": "| Kopfzeile | Daten | Text |\r\n|-----------|-------|------|\r\n| 1 | A | B |\r\n| 2 | C | |"
}
]
},
"Referenz": [
"Stand der Technik"
],
"Gueltigkeit": {
"Von": "2025-10-08",
"Bis": null
},
"Checklistenfragen": [],
"Stichworte": []
},
{
"Nummer": "3",
"Titel": "Diagramme",
"Thema": "Informationen",
"Kurztext": {
"Abschnitt": [
{
"typ": "text",
"inhalt": "Diese Vorgabe enthält Diagramme. Die Dokumentation, wie Diagramme zu erfassen sind, befindet sich [hier](https://git.baumann.gr/adebaumann/vgui-cicd/src/branch/development/Documentation/diagramm.md) - womit auch gleich dokumentiert ist, wie Hyperlinks gesetzt werden."
}
]
},
"Langtext": {
"Abschnitt": [
{
"typ": "diagramm",
"inhalt": "erd\r\noptionen:width=\"70%\" align=\"center\"\r\nentity {bgcolor: \"#ececfc\", size: \"20\"}\r\nheader {bgcolor: \"#0000aa\", size: \"25\"}\r\n\r\n[Vorgabendokument]\r\n*Nummer\r\n+Dokumententyp\r\nName\r\n+\"Autor(en)\"\r\n+Pruefende\r\nGeltungsbereich\r\nZiel\r\nGrundlagen\r\n\"Gueltigkeit (ev. redundant)\" {label: \"Datum von-bis\"}\r\n\"Signatur CSO\"\r\n+Vorgaben\r\n+Changelog\r\n\"Anhänge\"\r\n\r\n[Dokumententyp]\r\n*Name\r\n\"Verantwortliche VE\"\r\n\r\n[Vorgabe]\r\n*Nummer\r\n+Thema\r\nTitel\r\nKurztext\r\nAussage\r\n\"Begründung\"\r\nAuswirkung\r\n\"Weitere Informationen\"\r\n+Referenz\r\n\"Gueltigkeit\" {label: \"Datum von-bis\"}\r\n+Checklistenfragen\r\n+Stichworte\r\n\r\n[Thema]\r\n*Name\r\nErklaerung\r\n\r\n[Checklistenfrage]\r\nChecklistenfrage\r\n\r\n[Person]\r\n*Name\r\nFunktion\r\n\r\n[Changelog]\r\n+\"Autor(en)\"\r\nDatum\r\n\"Änderung\"\r\n\r\n[Referenz]\r\n*\"Name/Nummer\"\r\n+\"Uebergeordnete Referenz\"\r\nURL\r\nErklaerung\r\n\r\n[Stichworte]\r\n*Stichwort\r\nErklaerung\r\n\r\n\r\nVorgabendokument +--1 Dokumententyp\r\nVorgabendokument 1--+ Vorgabe\r\nVorgabendokument 1--+ Changelog\r\nVorgabendokument +--+ Person {label: \"Autor(en)\"}\r\nVorgabendokument +--+ Person {label: \"Pruefende\"}\r\n\r\nVorgabe 1--* Checklistenfrage\r\nVorgabe +--1 Thema\r\nVorgabe +--+ Referenz\r\nVorgabe +--* Stichworte\r\n\r\nChangelog +--+ Person\r\n\r\nReferenz *--? Referenz {label: \"Hierarchie\"}\r\nReferenz *--* Vorgabendokument"
},
{
"typ": "diagramm",
"inhalt": "bytefield\r\nOPtions:width=\"75%\"\r\n(defattrs :bg-green {:fill \"#a0ffa0\"})\r\n(defattrs :bg-yellow {:fill \"#ffffa0\"})\r\n(defattrs :bg-pink {:fill \"#ffb0a0\"})\r\n(defattrs :bg-cyan {:fill \"#a0fafa\"})\r\n(defattrs :bg-purple {:fill \"#e4b5f7\"})\r\n\r\n(defn draw-group-label-header\r\n \"Creates a small borderless box used to draw the textual label headers\r\n used below the byte labels for remotedb message diagrams.\r\n Arguments are the number of columns to span and the text of the\r\n label.\"\r\n [span label]\r\n (draw-box (text label [:math {:font-size 12}]) {:span span\r\n :borders #{}\r\n :height 14}))\r\n\r\n(defn draw-remotedb-header\r\n \"Generates the byte and field labels and standard header fields of a\r\n request or response message for the remotedb database server with\r\n the specified kind and args values.\"\r\n [kind args]\r\n (draw-column-headers)\r\n (draw-group-label-header 5 \"start\")\r\n (draw-group-label-header 5 \"TxID\")\r\n (draw-group-label-header 3 \"type\")\r\n (draw-group-label-header 2 \"args\")\r\n (draw-group-label-header 1 \"tags\")\r\n (next-row 18)\r\n\r\n (draw-box 0x11 :bg-green)\r\n (draw-box 0x872349ae [{:span 4} :bg-green])\r\n (draw-box 0x11 :bg-yellow)\r\n (draw-box (text \"TxID\" :math) [{:span 4} :bg-yellow])\r\n (draw-box 0x10 :bg-pink)\r\n (draw-box (hex-text kind 4 :bold) [{:span 2} :bg-pink])\r\n (draw-box 0x0f :bg-cyan)\r\n (draw-box (hex-text args 2 :bold) :bg-cyan)\r\n (draw-box 0x14 :bg-purple)\r\n\r\n (draw-box (text \"0000000c\" :hex [[:plain {:font-weight \"light\" :font-size 16}] \" (12)\"])\r\n [{:span 4} :bg-purple])\r\n (draw-box (hex-text 6 2 :bold) [:box-first :bg-purple])\r\n (doseq [val [6 6 3 6 6 6 6 3]]\r\n (draw-box (hex-text val 2 :bold) [:box-related :bg-purple]))\r\n (doseq [val [0 0]]\r\n (draw-box val [:box-related :bg-purple]))\r\n (draw-box 0 [:box-last :bg-purple]))\r\n\r\n(draw-remotedb-header 0x4702 9)\r\n\r\n(draw-box 0x11)\r\n(draw-box 0x2104 {:span 4})\r\n(draw-box 0x11)\r\n(draw-box 0 {:span 4})\r\n(draw-box 0x11)\r\n(draw-box (text \"length\" [:math] [:sub 1]) {:span 4})\r\n(draw-box 0x14)\r\n\r\n(draw-box (text \"length\" [:math] [:sub 1]) {:span 4})\r\n(draw-gap \"Nutzerdaten\")\r\n\r\n(draw-box nil :box-below)\r\n(draw-box 0x11)\r\n(draw-box 0x36 {:span 4})\r\n(draw-box 0x11)\r\n(draw-box (text \"num\" [:math] [:sub \"hot\"]) {:span 4})\r\n(draw-box 0x11)\r\n(draw-box (text \"num\" [:math] [:sub \"cue\"]) {:span 4})\r\n\r\n(draw-box 0x11)\r\n(draw-box (text \"length\" [:math] [:sub 2]) {:span 4})\r\n(draw-box 0x14)\r\n(draw-box (text \"length\" [:math] [:sub 2]) {:span 4})\r\n(draw-gap \"Unbekannte Daten\" {:min-label-columns 6})\r\n(draw-bottom)"
},
{
"typ": "diagramm",
"inhalt": "seqdiag\r\noptionen:width=\"80%\"\r\nseqdiag {\r\n browser -> webserver [label = \"GET /seqdiag/svg/base64\"];\r\n webserver -> processor [label = \"Convert text to image\"];\r\n webserver <-- processor;\r\n browser <-- webserver;\r\n}"
},
{
"typ": "text",
"inhalt": "Test zum Testen der Suchfunktion: Benutzer"
},
{
"typ": "diagramm",
"inhalt": "bpmn\r\noptionen: width=\"80%\"\r\n\r\n\r\n \r\n \r\n \r\n \r\n \r\n \r\n Activity_0ucdoti\r\n \r\n \r\n Activity_0di06s2\r\n Activity_1hbuglz\r\n Gateway_1mz16e1\r\n \r\n \r\n Activity_0x9gg7s\r\n Gateway_1ldakdu\r\n Activity_1xtumch\r\n Activity_18edwf1\r\n Activity_08rv18y\r\n Gateway_1jn2x4b\r\n Activity_1nzn2wn\r\n Event_1t6suu7\r\n Activity_1asnv7w\r\n Activity_0o57wac\r\n StartEvent_1h29u55\r\n Activity_1k1a2fy\r\n Gateway_0ilw8i4\r\n Activity_12f0sg0\r\n \r\n \r\n Gateway_1eupu8i\r\n Activity_0kh26m1\r\n Gateway_04xiet8\r\n \r\n \r\n Activity_0xaflsv\r\n \r\n \r\n \r\n Flow_0jaqjyr\r\n Flow_1a43fe9\r\n \r\n \r\n Flow_111g9v8\r\n Flow_1a43fe9\r\n Flow_0e6too1\r\n Flow_0b98g5o\r\n \r\n \r\n Flow_0b98g5o\r\n Flow_0sgattj\r\n \r\n \r\n Flow_0sgattj\r\n Flow_0sk3lz0\r\n Flow_0hranqw\r\n \r\n \r\n Flow_0l8n8bk\r\n Flow_0of15mt\r\n \r\n \r\n Flow_0hranqw\r\n Flow_1vjogxk\r\n Flow_1v850rf\r\n Flow_0uorqfp\r\n \r\n \r\n Flow_1vjogxk\r\n Flow_08nyuic\r\n \r\n \r\n Flow_1v850rf\r\n Flow_0kdxb97\r\n \r\n \r\n Flow_0uorqfp\r\n Flow_09ouo0w\r\n \r\n \r\n Flow_0kdxb97\r\n Flow_09ouo0w\r\n Flow_1xxv4ss\r\n \r\n \r\n Flow_1xxv4ss\r\n Flow_1axg623\r\n \r\n \r\n Flow_1axg623\r\n Flow_0ik4x4c\r\n Flow_053hgdk\r\n \r\n \r\n Flow_053hgdk\r\n Flow_0fciz2z\r\n \r\n \r\n Flow_0znge9r\r\n \r\n \r\n Flow_0fciz2z\r\n Flow_0znge9r\r\n \r\n \r\n Flow_1kdtof5\r\n Flow_0e6too1\r\n \r\n \r\n Flow_08nyuic\r\n Flow_0ik4x4c\r\n \r\n \r\n Flow_0pgm7af\r\n Flow_0l8n8bk\r\n \r\n \r\n Flow_0pgm7af\r\n \r\n \r\n Flow_0of15mt\r\n Flow_0sk3lz0\r\n Flow_0ovxkcz\r\n \r\n \r\n Flow_0ovxkcz\r\n Flow_0jaqjyr\r\n Flow_08ek068\r\n Flow_1kdtof5\r\n \r\n \r\n Flow_08ek068\r\n Flow_111g9v8\r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n"
}
]
},
"Referenz": [
"Produkteneutralität",
"SI-001: IT-Grundschutz",
"Grundsätze und Prinzipien",
"Defense-in-Depth-Prinzip",
"Form der Leistungserbringung",
"Least-Privilege-Prinzip",
"Need-to-Know-Prinzip",
"Security-by-Default-Prinzip",
"Security-by-Design-Prinzip",
"Stand der Technik",
"Virtualisierung",
"Zero-Trust-Prinzip",
"O1: Verantwortlichkeit",
"O2 Dokumentation",
"O2.1"
],
"Gueltigkeit": {
"Von": "2025-10-29",
"Bis": "2029-12-31"
},
"Checklistenfragen": [],
"Stichworte": [
"Diagramm",
"Test"
]
},
{
"Nummer": "4",
"Titel": "Mermaid",
"Thema": "Informationen",
"Kurztext": {
"Abschnitt": [
{
"typ": "text",
"inhalt": "Dieser Abschnitt ist ein Kurztext."
}
]
},
"Langtext": {
"Abschnitt": [
{
"typ": "diagramm",
"inhalt": "mermaid\r\nflowchart LR\r\n IAM([1: IAM]) --> API([2: API Management & Service Mesh])\r\n IAM --> Micro([3: Microservices])\r\n Micro --> ConInfra([8: Container Infrastructure])\r\n Micro --> DataMgmt([4: Data Management & Data Governance])\r\n DataMgmt --> Analytics([5: Analytics & AI Platform])\r\n Micro --> EDA([10: Event-driven Architecture])\r\n Micro --> Portal([11: Portal Architecture])\r\n SecureOps([6: Secure Operations]) --> Micro\r\n SecureOps --> DataMgmt\r\n SecureOps --> Portal\r\n DevSec([7: Secure App Development]) --> ConInfra\r\n DevSec --> Micro\r\n DevSec --> EDA\r\n Obs([9: Monitoring & Observability]) --> Micro\r\n Obs --> DataMgmt\r\n Obs --> EDA\r\n Obs --> ConInfra\r\n Obs --> Portal\r\n API --> Micro\r\n API --> Portal\r\n API --> SecureOps\r\n API --> Obs\r\n EDA --> Analytics"
}
]
},
"Referenz": [],
"Gueltigkeit": {
"Von": "2020-10-28",
"Bis": "2021-10-29"
},
"Checklistenfragen": [],
"Stichworte": []
},
{
"Nummer": "5",
"Titel": "Mermaid Komplex",
"Thema": "Anwendungen",
"Kurztext": {},
"Langtext": {
"Abschnitt": [
{
"typ": "diagramm",
"inhalt": "mermaid\r\nflowchart TB\r\n\r\n%% ----------------------------------------------------------------\r\n%% Subgraph for ABB1: Identity & Access Management\r\n%% ----------------------------------------------------------------\r\nsubgraph ABB1[ABB1: Identity & Access Management]\r\n IAM1(Azure AD)\r\n IAM2(Azure AD Connect)\r\n IAM3(Azure AD B2C)\r\n IAM4(Privileged ID Mgmt)\r\n IAM5(MFA & Conditional Access)\r\nend\r\n\r\n%% ----------------------------------------------------------------\r\n%% Subgraph for ABB2: API Management & Service Mesh\r\n%% ----------------------------------------------------------------\r\nsubgraph ABB2[ABB2: API Mgmt & Service Mesh]\r\n API1(Azure API Management)\r\n API2(Service Mesh on AKS)\r\n API3(Dapr)\r\nend\r\n\r\n%% ----------------------------------------------------------------\r\n%% Subgraph for ABB3: Microservices / Modular Applications\r\n%% ----------------------------------------------------------------\r\nsubgraph ABB3[ABB3: Microservices]\r\n MS1(AKS - Orchestration)\r\n MS2(Web Apps for Containers)\r\n MS3(Azure Container Apps)\r\n MS4(Azure Functions)\r\nend\r\n\r\n%% ----------------------------------------------------------------\r\n%% Subgraph for ABB4: Data Management & Governance\r\n%% ----------------------------------------------------------------\r\nsubgraph ABB4[ABB4: Data Mgmt & Governance]\r\n DMG1(Purview)\r\n DMG2(Data Lake Gen2)\r\n DMG3(Storage Account)\r\n DMG4(Data Factory)\r\n DMG5(Key Vault)\r\n DMG6(Azure SQL DB)\r\n DMG7(Cosmos DB)\r\n DMG8(PostgreSQL)\r\n DMG9(Microsoft Fabric - Data)\r\nend\r\n\r\n%% ----------------------------------------------------------------\r\n%% Subgraph for ABB5: Analytics & AI Platform\r\n%% ----------------------------------------------------------------\r\nsubgraph ABB5[ABB5: Analytics & AI]\r\n AI1(Synapse Analytics)\r\n AI2(Azure Databricks)\r\n AI3(Azure Stream Analytics)\r\n AI4(Azure ML)\r\n AI5(Azure Cognitive Services)\r\n AI6(Microsoft Fabric - AI)\r\nend\r\n\r\n%% ----------------------------------------------------------------\r\n%% Subgraph for ABB6: Secure Operations\r\n%% Split: Secure Network Ops & Secure App Ops\r\n%% ----------------------------------------------------------------\r\nsubgraph ABB6[ABB6: Secure Operations]\r\n\r\n subgraph NetOps[Secure Network Operations]\r\n Net1(Azure Virtual Network)\r\n Net2(Hub & Spoke Arch)\r\n Net3(Azure Firewall)\r\n Net4(DDoS Protection)\r\n Net5(Azure Application Gateway)\r\n Net6(Azure Virtual WAN)\r\n Net7(Azure VPN Gateway)\r\n Net8(Azure ExpressRoute Gateway)\r\n Net9(Azure Front Door) \r\n end\r\n\r\n subgraph AppOps[Secure Application Operations]\r\n Sec1(Microsoft Defender for Cloud)\r\n Sec2(Microsoft Sentinel)\r\n Sec3(Azure Policy & Blueprints)\r\n end\r\n\r\nend\r\n\r\n%% ----------------------------------------------------------------\r\n%% Subgraph for ABB7: Secure Application Development (DevSecOps)\r\n%% ----------------------------------------------------------------\r\nsubgraph ABB7[ABB7: Secure App Development]\r\n Dev1(Azure Repos / GitHub Repos)\r\n Dev2(Azure Pipelines / GitHub Actions)\r\n Dev3(Defender for DevOps / Sec Scans)\r\n Dev4(ACR DevSecOps)\r\n Dev5(Key Vault for DevSecOps)\r\nend\r\n\r\n%% ----------------------------------------------------------------\r\n%% Subgraph for ABB8: Container Infrastructure\r\n%% ----------------------------------------------------------------\r\nsubgraph ABB8[ABB8: Container Infrastructure]\r\n CI1(AKS - Container Infra)\r\n CI2(Azure Container Instances)\r\n CI3(Azure Container Apps Infra)\r\n CI4(ACR Containers)\r\n CI5(Containers Net & Security)\r\nend\r\n\r\n%% ----------------------------------------------------------------\r\n%% Subgraph for ABB9: Monitoring & Observability\r\n%% ----------------------------------------------------------------\r\nsubgraph ABB9[ABB9: Monitoring & Observability]\r\n Mon1(Azure Monitor & Log Analytics)\r\n Mon2(App Insights)\r\n Mon3(Monitor for Containers)\r\n Mon4(Monitor for VMs)\r\n Mon5(Monitor Networks)\r\nend\r\n\r\n%% ----------------------------------------------------------------\r\n%% Subgraph for ABB10: Event-driven Architecture\r\n%% ----------------------------------------------------------------\r\nsubgraph ABB10[ABB10: Event-driven Arch]\r\n EDA1(Azure Event Hubs)\r\n EDA2(Azure Service Bus)\r\n EDA3(Azure Event Grid)\r\n EDA4(Functions for EDA)\r\n EDA5(Azure Logic Apps)\r\nend\r\n\r\n%% ----------------------------------------------------------------\r\n%% Subgraph for ABB11: Portal Architecture\r\n%% ----------------------------------------------------------------\r\nsubgraph ABB11[ABB11: Portal Architecture]\r\n PA1(Azure App Service / Static Web)\r\n PA2(Azure Front Door Portal)\r\n PA3(AD B2C for Portal)\r\n PA4(Azure CDN)\r\n PA5(API Mgmt for Portal)\r\nend\r\n\r\n%% ----------------------------\r\n%% Example Cross-ABB Dependencies\r\n%% ----------------------------\r\n\r\n%% Identity & Access Management -> Many Consumers\r\nIAM1 --> Dev1 \r\n%% Azure AD used for repo access\r\nIAM1 --> API1 \r\n%% Securing external APIs\r\nIAM3 --> PA3 \r\n%% B2C used by Portal for citizen logins\r\n\r\n%% Microservices & Container Infrastructure usage\r\nMS1 --> API2 \r\n%% AKS uses Service Mesh\r\nMS1 --> Sec1 \r\n%% Defender for Cloud scanning\r\nCI1 --> MS1 \r\n%% Container Infrastructure (AKS) overlaps with Microservices (AKS)\r\n\r\n%% Data Factory -> Data Lake / Storage / SQL, etc.\r\nDMG4 --> DMG2 \r\n%% Data Factory writes to Data Lake\r\nDMG4 --> DMG3 \r\n%% or to Storage Account\r\nDMG4 --> DMG6 \r\n%% or to Azure SQL DB\r\nDMG5 --> DMG4 \r\n%% Key Vault for ADF credentials\r\n\r\n%% Analytics & AI -> Data Mgmt\r\nAI1 --> DMG2 \r\n%% Synapse reads from Data Lake\r\nAI2 --> DMG2 \r\n%% Databricks also reads/writes Data Lake\r\nAI4 --> DMG2 \r\n%% ML trains on data from Lake\r\nAI1 --> DMG4 \r\n%% Synapse pipelines can orchestrate Data Factory\r\n\r\n%% Secure Network Ops dependencies\r\nNet2 --> Net1 \r\n%% Hub & Spoke uses VNets\r\nNet3 --> Net2 \r\n%% Azure Firewall in the hub\r\nNet5 --> Net2 \r\n%% Azure Application Gateway in the hub\r\nNet4 --> Net1 \r\n%% DDoS plan applied to VNets\r\nPA2 --> Net9 \r\n%% Front Door can route to private endpoints in VNet\r\n\r\n%% Event-driven Arch connections\r\nEDA1 --> AI2 \r\n%% Event Hubs -> Databricks for streaming\r\nEDA2 --> EDA4 \r\n%% Service Bus triggers Functions\r\nEDA3 --> EDA4 \r\n%% Event Grid triggers serverless Functions\r\n\r\n%% Portal Architecture referencing existing building blocks\r\nPA5 --> API1 \r\n%% Portal uses API Management\r\nPA3 --> IAM3 \r\n%% AD B2C for external user auth\r\nPA2 --> Net5 \r\n%% Portal's Front Door usage"
},
{
"typ": "diagramm",
"inhalt": "bpmn\r\n\r\n\r\n \r\n \r\n \r\n \r\n \r\n \r\n StartEvent_0esqkxa\r\n Event_1rpb6qf\r\n Activity_1w6w9x9\r\n Gateway_0c60g2j\r\n Activity_0wxcvfs\r\n Activity_13r8ig5\r\n Gateway_17ejoh2\r\n Activity_157b9n2\r\n Activity_19ka8ss\r\n Activity_1pbx66b\r\n Activity_1tktkkp\r\n Gateway_1gbbuko\r\n Event_14f6909\r\n \r\n \r\n Activity_0k9clxk\r\n Event_1qjm2ng\r\n \r\n \r\n Activity_0od32pk\r\n Gateway_1fyw1we\r\n \r\n \r\n \r\n Flow_17opf5j\r\n \r\n \r\n Flow_0msqy2v\r\n \r\n \r\n Flow_17opf5j\r\n Flow_0msqy2v\r\n Flow_15kolkj\r\n \r\n \r\n Flow_15kolkj\r\n Flow_0xdyadh\r\n Flow_15ct01m\r\n \r\n \r\n Flow_0xdyadh\r\n Flow_0iufqf9\r\n \r\n \r\n Flow_0iufqf9\r\n Flow_06z04tr\r\n \r\n \r\n Flow_15ct01m\r\n Flow_1jnvtaw\r\n Flow_01v53u3\r\n \r\n \r\n Flow_1jnvtaw\r\n Flow_0v9n3pi\r\n \r\n \r\n Flow_01v53u3\r\n Flow_0ydyute\r\n \r\n \r\n Flow_0ydyute\r\n Flow_0e75b9x\r\n \r\n \r\n Flow_0e75b9x\r\n Flow_0ku1lle\r\n Flow_0beutfz\r\n \r\n \r\n Flow_0ku1lle\r\n Flow_1bb4sr3\r\n \r\n \r\n Flow_1j9q18v\r\n Flow_1lxc4n6\r\n \r\n \r\n Flow_0v9n3pi\r\n Flow_06z04tr\r\n Flow_1afryd0\r\n Flow_0beutfz\r\n Flow_0zs8lmb\r\n \r\n \r\n Flow_1bb4sr3\r\n Flow_1afryd0\r\n Flow_1j9q18v\r\n \r\n \r\n Flow_0zs8lmb\r\n \r\n \r\n Flow_1lxc4n6\r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n"
}
]
},
"Referenz": [],
"Gueltigkeit": {
"Von": "2026-10-28",
"Bis": null
},
"Checklistenfragen": [],
"Stichworte": []
}
]
}