Azure Governance
Platform
Multi-tenant Azure governance, cost optimization, and compliance monitoring — built for enterprise scale, running on a startup budget.
Platform Capabilities
Enterprise-grade governance tools
Zero-Secrets Auth
Azure AD B2C with OIDC, User-Assigned Managed Identity, and zero secrets in code. Defense-in-depth authentication.
Cost Optimization
Automated cost analysis and recommendations. 63% savings achieved — from $145/mo to ~$53/mo with continuous monitoring.
Compliance Monitoring
Continuous governance assessment against regulatory frameworks. Custom compliance rules with real-time scoring.
Resource Discovery
Automated Azure resource inventory across subscriptions. Cross-tenant visibility via Azure Lighthouse integration.
Identity Governance
Multi-tenant identity management with row-level security. Role-based access control with department-based personas.
Alerting & Monitoring
Real-time anomaly detection with Application Insights and OpenTelemetry. /api/v1/health/data monitors 10 sync domains; alerts escalate to the governance-alerts action group.
Platform Architecture
5 tenants, 2 environments, zero secrets
Technology Stack
Modern, proven, cost-effective
Documentation
Everything you need to build, operate, and extend
Architecture
How it all fits together
┌─────────────────────────────────────────────────────────────────┐
│ CLIENTS │
│ Web UI · Mobile · API Consumers · Admin Portal │
└───────────────────────────┬─────────────────────────────────────┘
│
┌───────────▼───────────┐
│ Azure Front Door │
│ WAF · CDN · HTTPS │
└───────────┬───────────┘
│
┌───────────────────────────▼─────────────────────────────────────┐
│ App Service (FastAPI) │
│ ┌──────────┐ ┌───────────┐ ┌──────────┐ ┌─────────────┐ │
│ │ API Layer│ │ Services │ │ Workers │ │ Scheduler │ │
│ │ (REST) │ │ (Business)│ │(Background)│ │ (Cron) │ │
│ └──────────┘ └───────────┘ └──────────┘ └─────────────┘ │
└──────┬──────────────┬──────────────┬──────────────┬─────────────┘
│ │ │ │
┌────▼────┐ ┌─────▼─────┐ ┌────▼────┐ ┌─────▼──────┐
│Azure SQL│ │ Azure AD │ │Key Vault│ │App Insights│
│ (Data) │ │ (Auth) │ │(Secrets)│ │(Telemetry) │
└─────────┘ └───────────┘ └─────────┘ └────────────┘
│
┌────▼──────────────────────────────────┐
│ Azure Lighthouse │
│ Cross-Tenant Governance Plane │
│ ┌─────────┐ ┌─────────┐ ┌────────┐ │
│ │Tenant A │ │Tenant B │ │Tenant C│ │
│ └─────────┘ └─────────┘ └────────┘ │
└───────────────────────────────────────┘
Quick Start
Get up and running in minutes
git clone https://github.com/HTT-BRANDS/azure-governance-platform.git
cd azure-governance-platform
pip install uv
uv sync --dev
uv run uvicorn app.main:app --reloadProduction Status
Live system metrics