Private by Default: Eradicating the Public Attack Surface in Azure PaaS. Institutional Doctrine Edition for Enterprise Azure Estates by Kieran Sky.