Skip to content
Getting Started

Architecture diagrams

The resource and network diagrams of the HiloIntelligence toolbox for each hosting type — Microsoft Azure, Amazon Web Services and Google Cloud.

Updated July 5, 20262 min read

How to read these diagrams

Each hosting type is described by two complementary views, and they do not answer the same question.

The resource diagram shows what gets created in your cloud account: the tenant, the app registration used for single sign-on, the subscription, the resource group, the application virtual machine and the backup vault. This is the view to hand to whoever approves cost and access rights, because it enumerates exactly what will be billed and what has to exist before installation.

The network diagram shows the path a request takes from the Internet to the application machine, and the filters it crosses on the way. This is the view for the network or security team: open ports, TLS termination and public exposure are all argued from this picture.

Which one applies to you

Take the pair matching the environment where Hilo Tech will install your instance — you do not need the others. If you have not chosen yet, each hosting provider's requirements page lists what has to be prepared, and that is usually what settles it: the decision is made far more often on what your organization already owns and on its internal rules than on a technical difference between the three.

These diagrams describe the reference configuration. A real installation may depart from it — an existing network, naming constraints, a mandated region — and that is expected: they are the starting point for the conversation, not a contract.

Microsoft Azure

Resource diagram

Azure resource diagram — Microsoft 365 tenant, Entra (app registration and SSO), subscription, resource group with Lighthouse, virtual network, subnet, public IP, network interface, virtual machine and Recovery Services vault

Network diagram

Azure network diagram — network flow between the Internet, the network security gateway, the subnet and the application virtual machine

Amazon Web Services (AWS)

Resource diagram

AWS resource diagram — AWS account, VPC, subnet, application EC2 instance and related services

Network diagram

AWS network diagram — network flow between the Internet, the security group, the subnet and the application instance

Google Cloud (GCP)

Resource diagram

Google Cloud resource diagram — Google Cloud project, VPC network, subnet, application Compute Engine virtual machine and related services

Network diagram

Google Cloud network diagram — network flow between the Internet, the firewall rules, the subnet and the application virtual machine

Other environments

Need a hand?

Our team can walk through these steps with you in a meeting with screen sharing.

Contact Hilo Tech

Back to the collection : Getting Started