Bring your own cloud (BYOC) for Microsoft Azure

Aiven now supports Microsoft Azure as a self-service cloud provider for bring your own cloud (BYOC). You can create custom clouds on AWS, Google Cloud, and Microsoft Azure through the Aiven Console or with the Aiven CLI. Azure supports two deployment models: private, with a bastion host proxying traffic to privately addressed workload nodes, and public, with service VMs directly accessible from the internet.

To get started, you need an Azure subscription and a user or service principal with the required subscription permissions. As a one-time step per tenant, you install Aiven's pre-registered enterprise application on your Microsoft Entra tenant. The setup generates a Terraform template that you deploy to your Azure subscription. The template creates role assignments granting the Aiven enterprise application access to your subscription, a resource group, custom role definitions, and storage accounts. For the private model, it also creates two virtual networks (bastion and workload VNets), VNet peering, network security groups, and NAT gateways. For the public model, it creates a single workload VNet with a network security group.

For more information, see Create a Microsoft Azure-integrated custom cloud.