Azure Sanbox - creating a new realm

Azure Sandbox, as described, is a Terraform-based reference environment for learning and experimentation in Azure. It provides:

• A preconfigured Microsoft Entra ID tenant integration
• Domain-joined Windows and Linux jump boxes
• Preconfigured AD DS local domain, DNS, file shares, and database endpoints

The available capabilities and architecture in the provided context do not mention support for creating or managing “realms” (for example, identity realms or AWS-style constructs) as a feature of Azure Sandbox itself. The sandbox is intended to give a ready-made Azure environment (VMs, networking, AD DS, SQL, etc.) for testing, not to introduce new identity partitioning primitives beyond the standard Azure/Microsoft Entra and AD DS setup it deploys.

For AWS–Azure integration scenarios, Azure Sandbox can still be used as the Azure side of the lab (for example, using the Windows or Linux jump boxes, networking, and AD DS domain), but any “realm”-like configuration would need to be implemented using standard Azure identity/networking features outside what is explicitly described for Azure Sandbox in this context.

References:

• Azure Sandbox
• Landing zone sandbox environments