This ensures that control and administration of infrastructure and environment remain completely isolated from control and administration of data and applications. An HVA is a single isolated environment that provides a secure space for company workloads. Access to HVA data by unauthorized users could negatively affect Microsoft business in a significant way. In our organization, we host several HVAs for different business groups that need a highly secure environment to prevent unauthorized access or data leaks.
Most data in an HVA is classified as highly confidential. A typical HVA can be broken down into several components:.
A standard HVA host includes the three-tier administrative model and uses the HVA fabric for storage, network, and related services. The components of an HVA are distributed and managed in highly secured datacenters. Each access tier gives a layer of protection against credential theft.
The HVA system is multi-tenant. We use isolation techniques to help create clear boundaries between HVA stamps. HVA stamps can be of mixed size with a different number of virtual machines, different sizes of virtual machines, and so on and can host a variety of environments.
One HVA stamp might host a single Tier 2 service, and others might host full end-to-end environments that have hundreds of servers. It protects virtual machines from threats outside and inside the fabric.
