Separate cloud for US government workloads, physically isolated from global Azure, so VNet peering between the two isn't possible.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Azure Government in context, with comparison tables and the common traps.
Terms in this definition
- AGDLP
Nesting pattern: users go into global groups, which go into domain local groups, which receive the permissions. AGUDLP adds universal groups for forests with several domains.
- Virtual network peering
Connects VNets privately with low latency across the Microsoft backbone, whether in different regions, subscriptions or tenants or not. Because it is non-transitive, spokes sharing a hub need direct peering, or UDRs through a hub firewall or NVA, to talk.
Related terms
- Global VNet peering
Peering that connects VNets in separate Azure regions. It works inside a single cloud but cannot join Azure public to Azure Government or to Azure operated by 21Vianet.
- Microsoft cloud settings
Lets an organisation collaborate through B2B with tenants that live in another Microsoft cloud, such as Azure Government or Azure operated by 21Vianet; configured within cross-tenant access settings.
- Sovereign regions
Copies of Azure that are physically separated from the global cloud to meet data residency, compliance or legal needs. Examples are Azure operated by 21Vianet in China and Azure Government, which serves qualifying US government customers.