Skip to content

Commit 7767bf3

Browse files
committed
fix typos
1 parent 41c97e4 commit 7767bf3

File tree

1 file changed

+8
-8
lines changed

1 file changed

+8
-8
lines changed

articles/ai-foundry/concepts/architecture.md

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -16,39 +16,39 @@ author: sdgilley
1616

1717
# Azure AI Foundry architecture
1818

19-
Azure AI Foundry provides a comprehensive set of tools to support development teams in building, customizing, evaluating and operating AI Agents and its composing models and tools.
19+
Azure AI Foundry provides a comprehensive set of tools to support development teams in building, customizing, evaluating, and operating AI Agents and its composing models and tools.
2020

21-
This article is intended to provide IT security teams with details on the Azure service architecture, its components, and its relation with related Azure resource types. Use this information to guide how to [customize](../how-to/configure-private-link.md) your Foundry deployment to your organization's requirements. For additional guidance on how to roll out AI Foundry in your organization, see [Azure AI Foundry Rollout](planning.md).
21+
This article is intended to provide IT security teams with details on the Azure service architecture, its components, and its relation with related Azure resource types. Use this information to guide how to [customize](../how-to/configure-private-link.md) your Foundry deployment to your organization's requirements. For more information on how to roll out AI Foundry in your organization, see [Azure AI Foundry Rollout](planning.md).
2222

2323
## Azure AI resource types and providers
2424

2525
Within the Azure AI product family, we distinguish three [Azure resource providers](https://learn.microsoft.com/azure/azure-resource-manager/management/resource-providers-and-types) supporting user needs at different layers in the stack.
2626

2727
| Resource provider | Purpose | Supports resource type kinds |
2828
| --- | --- | --- |
29-
| Microsoft.CognitiveServices | Supports Agentic and GenAI application development composing and customizing pre-built models. | Azure AI Foundry; Azure OpenAI service; Azure Speech; Azure Vision |
29+
| Microsoft.CognitiveServices | Supports Agentic and GenAI application development composing and customizing prebuilt models. | Azure AI Foundry; Azure OpenAI service; Azure Speech; Azure Vision |
3030
| Microsoft.Search | Support knowledge retrieval over your data | Azure AI Search |
3131
| Microsoft.MachineLearningServices | Train, deploy and operate custom and open source machine learning models | Azure AI Hub (and its projects); Azure Machine Learning Workspace |
3232

3333
Azure AI Foundry resource is the primary resource for Azure AI and is recommended for most use cases. It is built on the same [Azure resource provider and resource type](https://learn.microsoft.com/azure/azure-resource-manager/management/resource-providers-and-types) as Azure OpenAI service, Azure Speech, Azure Vision, and Azure Language service. It provides access to the superset of capabilities from each individual services combined.
3434

3535
[!INCLUDE [Resource provider kinds](../includes/resource-provider-kinds.md)]
3636

37-
Resource types under the same provider namespace share the same control plane, hence use similar [Azure RBAC](https://learn.microsoft.com/azure/role-based-access-control/overview) actions, networking configurations and aliases for Azure Policy configuration. If you are upgrading from Azure OpenAI to Azure AI Foundry, this means your existing custom Azure policies and Azure RBAC options apply.
37+
Resource types under the same provider namespaces share the same control plane, hence use similar [Azure Role Based Access Control](https://learn.microsoft.com/azure/role-based-access-control/overview) actions, networking configurations and aliases for Azure Policy configuration. If you are upgrading from Azure OpenAI to Azure AI Foundry, your existing custom Azure policies and Azure Role Based Access Control actions continue to apply.
3838

3939
## Security-driven separation of concerns
4040

4141
Azure AI Foundry enforces a clear separation between management and development operations to ensure secure and scalable AI workloads.
4242

4343
- **Top-Level Resource Governance:** Management operations—such as configuring security, establishing connectivity with other Azure services, and managing deployments—are scoped to the top-level Azure AI Foundry resource. Development activities are isolated within dedicated project containers, which encapsulate use cases and provide boundaries for access control, files, agents, and evaluations.
4444

45-
- **Role-Based Access Control (RBAC):** Azure RBAC actions are designed to reflect this separation of concerns. Control plane actions (e.g., creating deployments and projects) are distinct from data plane actions (e.g., building agents, running evaluations, uploading files). RBAC assignments can be scoped at both the top-level resource and individual project level. [Managed identities](https://learn.microsoft.com/entra/identity/managed-identities-azure-resources/overview) can be assigned at either scope to support secure automation and service access.
45+
- **Role-Based Access Control (RBAC):** Azure RBAC actions are designed to reflect this separation of concerns. Control plane actions (for example creating deployments and projects) are distinct from data plane actions (for example building agents, running evaluations, uploading files). RBAC assignments can be scoped at both the top-level resource and individual project level. [Managed identities](https://learn.microsoft.com/entra/identity/managed-identities-azure-resources/overview) can be assigned at either scope to support secure automation and service access.
4646

4747
- **Monitoring and Observability:** Azure Monitor metrics are segmented by scope. Management and usage metrics are available at the top-level resource, while project-specific metrics—such as evaluation performance or agent activity—are scoped to the individual project containers.
4848

4949
## Computing infrastructure
5050

51-
Azure AI Foundry leverages a flexible compute architecture to support diverse [model access](../concepts/foundry-models-overview.md) and workload execution scenarios.
51+
Azure AI Foundry applies a flexible compute architecture to support diverse [model access](../concepts/foundry-models-overview.md) and workload execution scenarios.
5252

5353
- Model Hosting Architecture: Foundry models can be accessed in different ways:
5454

@@ -58,7 +58,7 @@ Azure AI Foundry leverages a flexible compute architecture to support diverse [m
5858

5959
For an overview of data, privacy and security considerations with these deployment options, see [Data, privacy, and security for use of models](../how-to/concept-data-privacy.md)
6060

61-
- **Workload Execution:** Agents, Evaluations and Batch jobs are executed as managed container compute, fully managed by Microsoft.
61+
- **Workload Execution:** Agents, Evaluations, and Batch jobs are executed as managed container compute, fully managed by Microsoft.
6262

6363
- **Networking Integration:** For enhanced security and compliance when your Agents connect with external systems, [container injection](../agents/how-to/virtual-networks.md) allows the platform network to host APIs and inject a subnet into your network, enabling local communication of your Azure resources within the same virtual network.
6464

@@ -74,7 +74,7 @@ Users can optionally connect their own Azure Storage accounts. Foundry tools can
7474

7575
* **Agent Data Storage:**
7676

77-
* In the basic configuration, the Agent service stores threads, messages, and files in Microsoft-managed multi-tenant storage, with logical separatation.
77+
* In the basic configuration, the Agent service stores threads, messages, and files in Microsoft-managed multi-tenant storage, with logical separation.
7878
* With the [Agent standard setup](../agents/how-to/use-your-own-resources.md), you may bring your own storage for thread and message data. In this configuration, data is isolated by project within the customer’s storage account.
7979

8080
* **Customer-Managed Key Encryption:**

0 commit comments

Comments
 (0)