flowchart LR
    subgraph Clients
        U[User / Apps]
    end

    subgraph Edge
        AFD[Azure Front Door + WAF]
        AGW[Application Gateway WAF + TLS]
        AFW[Azure Firewall]
    end

    subgraph API
        APIM[Azure API Management\n(API Gateway + Policies)]
        PF[Prompt Firewall\n(Content Safety + APIM Policies)]
    end

    subgraph AI_Compute[AI & Compute Layer (AKS)]
        AKS[AKS Cluster\nGPU/CPU Node Pools]
        LLMR[LLM Router Service]
        AGENTS[Agentic AI Orchestrator\n(AI Agents)]
        FE[Frontend Container]
    end

    subgraph AI_Services
        AOAI[Azure OpenAI / Azure AI Foundry\n(EU Data Residency)]
        MODELS[Self-hosted Models on AKS]
    end

    subgraph Data[Data & Storage Layer]
        SQL[Azure SQL DB / MI]
        COSMOS[Azure Cosmos DB\n(NoSQL + Graph)]
        BLOB[Azure Data Lake / Blob Storage]
        VECTOR[Azure AI Search\n(Vektorindex)]
        REDIS[Azure Cache for Redis]
        KUSTO[Azure Data Explorer / Synapse]
    end

    subgraph Events
        EH[Azure Event Hubs (Kafka Endpoint)]
        SB[Azure Service Bus (Queues/Topics)]
        SA[Azure Stream Analytics]
    end

    subgraph Observability[Observability & Security]
        AM[Azure Monitor + Log Analytics]
        APPINS[Application Insights]
        GRAF[Azure Managed Grafana]
        SENT[Microsoft Sentinel]
        SPL[SPLUNK (VM/AKS)]
        DEF[Microsoft Defender for Cloud]
    end

    subgraph Identity_Sec[Identity & Access]
        ENTRA[Azure Entra ID\n(RBAC, Conditional Access)]
        PIM[Entra Privileged Identity Mgmt]
        KV[Azure Key Vault + Managed HSM]
        BAST[Azure Bastion]
    end

    subgraph DevOps[DevOps / MLOps / IaC]
        GIT[GitHub / Azure DevOps Repos]
        PIPE[CI/CD Pipelines\n(GitHub Actions / Azure Pipelines)]
        TF[Terraform\n(State in Storage)]
    end

    U --> AFD --> AGW --> APIM --> PF --> LLMR --> AGENTS
    AGENTS --> AOAI
    AGENTS --> MODELS
    LLMR --> AOAI
    LLMR --> MODELS

    AGENTS --> SQL
    AGENTS --> COSMOS
    AGENTS --> BLOB
    AGENTS --> VECTOR
    AGENTS --> REDIS

    AGENTS --> EH
    EH --> SA --> KUSTO
    AGENTS --> SB

    AKS --> AM
    AKS --> APPINS
    AM --> GRAF
    AM --> SENT
    AM --> SPL
    DEF --> SENT

    ENTRA --> APIM
    ENTRA --> AKS
    ENTRA --> GIT
    PIM --> ENTRA
    KV --> AGW
    KV --> APIM
    KV --> AKS
    BAST --> AKS

    GIT --> PIPE --> AKS
    PIPE --> TF
    TF --> AKS
    TF --> Data
    TF --> Networking((VNet/NSG/PE))