Initial commit: loc_az_hci (smom-dbis-138 excluded via .gitignore)

Co-authored-by: Cursor <cursoragent@cursor.com>

infrastructure/security/azure-policy-baseline.sh

@@ -0,0 +1,6 @@
+#!/bin/bash
+# Azure Policy Baseline Configuration
+
+echo "Configure Azure Policy baseline via Arc."
+echo "See docs/azure-arc-onboarding.md for policy setup."
+

infrastructure/security/configure-network-security.sh

@@ -0,0 +1,6 @@
+#!/bin/bash
+# Configure Network Security
+
+echo "Configure inter-VLAN firewall rules (default deny, explicit allow)."
+echo "See OpenWrt firewall configuration."
+

infrastructure/security/configure-rbac.sh

@@ -0,0 +1,6 @@
+#!/bin/bash
+# Configure Role-Based Access Control
+
+echo "Configure RBAC for all services."
+echo "See Azure Arc and Cloudflare Zero Trust policies."
+

infrastructure/security/secret-vault-setup.sh

@@ -0,0 +1,6 @@
+#!/bin/bash
+# Secret Vault Setup
+
+echo "Configure secret management (no secrets in repos)."
+echo "Consider Azure Key Vault integration."
+

infrastructure/security/setup-identity-sso.sh

@@ -0,0 +1,6 @@
+#!/bin/bash
+# Setup Identity SSO + MFA
+
+echo "Configure SSO + MFA for management portals."
+echo "See Cloudflare Zero Trust configuration."
+