This article is the fourth part of a series on cloud security in real-world Azure environments. We move from signals and access to a more structural topic: architecture. Because some security controls will inevitably fail, the platform's architecture determines whether such failures are contained or lead to disaster.