RBAC for individual Foundry models

[marc-lerwick]

📥 Pull Request

🔗 Related Issue(s)

TBD

❓ What are you trying to address

• Added a new guide that demonstrates the Terraform necessary to protect individual Foundry models using Application Registrations, Application Roles, and APIM with JWT shredding.

✨ Description of new changes

New Guide: guides/implement_rbac_for_foundry_models/

Architecture & Security Model

• Client apps authenticate via Entra ID and receive JWT tokens with app role claims.
• APIM acts as the gateway — validates JWTs (issuer, audience, roles claim) and routes to specific Foundry model deployments.
• APIM's managed identity authenticates to Foundry on the backend, so clients never get direct Foundry credentials.
• Optional private networking isolates Foundry model endpoints behind VNet/private DNS (APIM ingress stays public).

Specific File Notes

• Added docker-in-docker, docker-outside-docker was not able to open Docker containers inside the dev container.
• Removed the spaces and added dashes to the names of the MCP serverrs in the mcp.json file. Agency would not start the MCP servers with spaces in their names.

☑️ Checklist

• 🔍 I have performed a self-review of my own code.
• 📝 I have commented my code, particularly in hard-to-understand areas.
• 🧹 I have run the linter and fixed any issues (if applicable).
• 📄 I have updated the documentation to reflect my changes (if necessary).

[marc-lerwick]

@microsoft-github-policy-service agree company="Microsoft"