Azure/HubAndSpokeResearchEnclave

View on GitHub

A Hub-and-Spoke Azure enclave for secure research.

Stars: 18
Forks: 18
Open beginner issues: 0
Indexed issues: 77
Avg merge: 4d 19h
Merged PRs (30d): 3

Dominant language: Bicep
License: MIT
Last GitHub push: Sep 4, 2026
Latest indexed: Sep 14, 2026
Contributing guide: No contributing guide
Code of conduct: Code of conduct
Beginner labels: good first issue help wanted

Open All

77 open issues indexed

Price calculator example Open

documentation low priority

Azure/HubAndSpokeResearchEnclave#2 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Add metadata to Bicep modules Open

documentation low priority

Azure/HubAndSpokeResearchEnclave#3 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 14, 2026
Use PSDocs to generate README for Bicep modules Open

documentation in-progress low priority

Azure/HubAndSpokeResearchEnclave#4 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 14, 2026
Evaluate use of DNS Private Resolver to simplify DNS setup Open

low priority question

Azure/HubAndSpokeResearchEnclave#6 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Allow a choice between centralized airlock or distributed airlock Open

enhancement in-progress low priority

Azure/HubAndSpokeResearchEnclave#8 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 14, 2026
When not using an AD domain, create a private DNS zone for VM record registration Open

enhancement hub spoke

Azure/HubAndSpokeResearchEnclave#14 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Map file share to research VM Open

enhancement low priority

Azure/HubAndSpokeResearchEnclave#15 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Verify and configure SMB protocols and encryption settings Open

enhancement

Azure/HubAndSpokeResearchEnclave#16 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Add support for creating a file share per project member Open

enhancement low priority

Azure/HubAndSpokeResearchEnclave#18 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Use Azure Verified Modules where available Open

enhancement low priority

Azure/HubAndSpokeResearchEnclave#26 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Support for third-party cloud security services Open

enhancement low priority

Azure/HubAndSpokeResearchEnclave#28 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Add support for custom region names in resource names Open

enhancement low priority

Azure/HubAndSpokeResearchEnclave#30 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Create variations of the architecture diagram for Entra ID, AD, AADDS join, VPN GW, AVD session hosts as research VMs, etc. Open

documentation low priority

Azure/HubAndSpokeResearchEnclave#31 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Apply Defender for Cloud plans to hub subscription Open

enhancement low priority

Azure/HubAndSpokeResearchEnclave#32 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Provide configuration options for Defender for Cloud plans. Open

enhancement in-progress low priority

Azure/HubAndSpokeResearchEnclave#33 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Spoke does not deploy successfully when using HIPAAHITRUST compliance target Open

bug low priority

Azure/HubAndSpokeResearchEnclave#39 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 14, 2026
Optionally enable gateway transit from research hub to main hub Open

enhancement hub low priority

Azure/HubAndSpokeResearchEnclave#48 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 14, 2026
Register resource providers for subscriptions Open

enhancement in-progress

Azure/HubAndSpokeResearchEnclave#55 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 14, 2026
When not using research VMs as session hosts, when deploying spoke, grant RBAC to researchers to use AVD Open

enhancement spoke

Azure/HubAndSpokeResearchEnclave#56 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 14, 2026
Create policy assignment to enforce backup for spoke VMs Open

enhancement low priority

Azure/HubAndSpokeResearchEnclave#61 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Optionally, create resource group to store NSG or VNet flow logs Open

enhancement low priority

Azure/HubAndSpokeResearchEnclave#63 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 14, 2026
Assign a Data Collection Rule (DCR) to VMs, to deploy AMA Open

enhancement WAF

Azure/HubAndSpokeResearchEnclave#64 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Do not create userprofiles share when research VMs are not session hosts Open

low priority spoke

Azure/HubAndSpokeResearchEnclave#70 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
If not force tunneling Az FW, then allow for setting SNAT range exception Open

enhancement firewall low priority

Azure/HubAndSpokeResearchEnclave#71 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Session Hosts in research hub should be in separate RG Open

enhancement hub

Azure/HubAndSpokeResearchEnclave#77 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Restrict managed disk import/export through private endpoints Open

enhancement low priority

Azure/HubAndSpokeResearchEnclave#78 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Create IP Group for domain controller IPs Open

enhancement hub low priority

Azure/HubAndSpokeResearchEnclave#86 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 14, 2026
PSRule: Add maintenance configuration to VMs Open

enhancement WAF

Azure/HubAndSpokeResearchEnclave#87 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Consider automating adding security group to Remote Desktop Users group Open

enhancement spoke

Azure/HubAndSpokeResearchEnclave#93 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Logic App run should be in failed state after sending email that pipeline failed Open

bug low priority spoke

Azure/HubAndSpokeResearchEnclave#94 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Create policy exemptions for Defender for Cloud recommendations Open

enhancement in-progress low priority

Azure/HubAndSpokeResearchEnclave#96 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 14, 2026
Do not output host pool registration token for AVD deployments Open

enhancement low priority

Azure/HubAndSpokeResearchEnclave#97 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Failure to domain join spoke storage accounts does not cause deployment failure Open

bug low priority spoke

Azure/HubAndSpokeResearchEnclave#100 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Create or use bootstrap code to create action group and activity log alerts required for compliance Open

compliance enhancement hub low priority spoke

Azure/HubAndSpokeResearchEnclave#101 · 1 comment · 0 reactions · 1 assignee · Indexed Sep 14, 2026
Unblock Defender for Endpoint URLs in firewall Open

enhancement firewall hub

Azure/HubAndSpokeResearchEnclave#103 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 14, 2026
Word-wrap deployment output values Open

enhancement hub low priority spoke

Azure/HubAndSpokeResearchEnclave#115 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Support for deploying with Windows Defender Exploit Guard enabled on Management VM Open

compliance enhancement

Azure/HubAndSpokeResearchEnclave#119 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
NIST 800-171 compliance: Windows machines should meet requirements of the Azure compute security baseline Open

compliance enhancement

Azure/HubAndSpokeResearchEnclave#120 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Set description property on all role assignments created by deployment Open

low priority

Azure/HubAndSpokeResearchEnclave#122 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Support for multi-forest AD environments Open

enhancement

Azure/HubAndSpokeResearchEnclave#125 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Can requester be notified of airlock actions? Open

question

Azure/HubAndSpokeResearchEnclave#128 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Support building (spoke) virtual networks using Azure Virtual Network Manager IP Pools Open

enhancement spoke

Azure/HubAndSpokeResearchEnclave#139 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Always deploy Azure Firewall Management NIC and subnet, regardless of SKU or Forced Tunneling enabled Open

breaking-change firewall hub

Azure/HubAndSpokeResearchEnclave#146 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Firewall forced tunneling mode can be enabled even when no peering is done with a main hub network Open

bug firewall hub low priority

Azure/HubAndSpokeResearchEnclave#148 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Use `deployer()` function to retrieve Entra ID object ID to use as default param value for Entra object IDs Open

low priority

Azure/HubAndSpokeResearchEnclave#152 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Update AVD resource names to use recommended resource type abbreviations Open

breaking-change enhancement good first issue

Azure/HubAndSpokeResearchEnclave#157 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 14, 2026
Add support for error handling in PowerShell deploy scripts Open

good first issue

Azure/HubAndSpokeResearchEnclave#159 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Removing a recovery services vault using `Remove-rsv.ps1` throws an error for HTTP 202 response Open

bug spoke

Azure/HubAndSpokeResearchEnclave#163 · 2 comments · 0 reactions · 2 assignees · Indexed Sep 14, 2026
Remove spoke script should check if RSV immutability state is locked before attempting any removals Open

enhancement low priority spoke

Azure/HubAndSpokeResearchEnclave#165 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Update DSC domain join storage script from AVD accelerator Open

enhancement

Azure/HubAndSpokeResearchEnclave#167 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026

Azure/HubAndSpokeResearchEnclave

Get new issues in your inbox