his is a simple Azure networking lab I built to understand how network security actually works in the cloud. The main idea was to separate a public-facing machine from a private backend one, and then control how they talk to each other using Network Security Groups. It’s basically a small zero-trust style setup where nothing is open by default unless I explicitly allow it.