Deployment Modes Overview
Azure SRA supports three deployment modes to accommodate different organizational requirements and existing infrastructure.
Mode Comparison
| Mode | Hub | Spoke Network | Use Case |
|---|---|---|---|
| Mode 1: Full SRA | SRA creates | SRA creates | Greenfield deployments |
| Mode 2: Bring-your-own hub | You provide | SRA creates | Existing hub, new spoke |
| Mode 3: Bring-your-own hub + spoke | You provide | You provide | Existing infrastructure (most restrictive) |
Spoke Resource Group
In both bring-your-own hub and bring-your-own hub + spoke options, you may optionally use SRA to create the spoke resource group by changing the value of the create_workspace_resource_group variable.
Decision Tree
Use this decision tree to determine which deployment mode is right for you:
Quick Summary
Mode 1: Full SRA (Default)
- Best for: Greenfield deployments
- SRA creates: Everything (hub, spoke, workspace)
- Template:
template.example.tfvars
Mode 2: Bring-your-own Hub
- Best for: Teams with existing hub infrastructure
- SRA creates: Spoke resources only
- You provide: Hub VNET, Key Vault, metastore, NCC, network policy
- Template:
template_byo_hub.example.tfvars
Mode 3: Bring-your-own Hub + Spoke
- Best for: Organizations with fully existing infrastructure
- SRA creates: Workspace and related resources only
- You provide: Hub VNET, Key Vault, metastore, NCC, network policy, spoke VNET
- Template:
template_byo_spoke_network.example.tfvars
Next Steps
- Select your deployment mode using the decision tree above
- Click on the mode link to view detailed configuration requirements
- Copy the appropriate template file to
terraform.tfvars - Fill in required variables based on your mode
- Review Configuration Reference for optional features
- Follow Getting Started deployment steps
- Review Troubleshooting if you encounter issues