Copy of Deployment Diagram
logs / metrics / traces
logs / metrics / traces
Observability
DD
DATADOG
Users & Edge Access
👤
Zscaler
Akamai
Browser → Zscaler → Akamai
External Service
IB
External Service
AD
Azure AD (SSO)
Dev
UAT
Prod
Region North Europe
Zone 1
DAP AKS Cluster
Azure VNet (Private)
AG

Azure Application Gateway

WAF / API ingress / private routing

AP

IBM API Connect

Managed API exposure / request forwarding

FE

Frontend

React Web App

Independently deployable UI

BE

Backend Services on AKS

Independently deployable services

Roster
Attendance
Events
Leave
Workflow
Document
Zone 2
DAP AKS Cluster
Azure VNet (Private)
AG

Azure Application Gateway

WAF / API ingress / private routing

AP

IBM API Connect

Managed API exposure / request forwarding

FE

Frontend

React Web App

Independently deployable UI

BE

Backend Services on AKS

Independently deployable services

Trainings
Qualifications
Recruitment
Productivity
Notifications
Profile
Zone 3
DAP AKS Cluster
Azure VNet (Private)
AG

Azure Application Gateway

WAF / API ingress / private routing

AP

IBM API Connect

Managed API exposure / request forwarding

FE

Frontend

React Web App

Independently deployable UI

BE

Backend Services on AKS

Independently deployable services

API Auth
RBAC / ABAC
Audit Logs
File Metadata
Saved Views
Outbox
Azure Document DB
Operational workflow data
Exports / Attachments
Read-only curated datasets
DB
Azure DocumentDB
workflow state / audit / preferences / outbox / file metadata
DL
Azure Data Lake Storage
attachments / generated files / exports
MF
Microsoft Fabric
read-only enterprise analytical datasets
Updated for latest HLD: no BFF, no modular monolith, APIC forwards requests, backend services are independently deployable.