---
title: "Azure BYOC"
description: "Deploy Streamkap Bring Your Own Cloud on Azure using a turnkey or BYO-VPN option, and create the Azure service principal needed for provisioning."
---

Please read through [Bring Your Own Cloud (BYOC)](/bring-your-own-cloud-byoc) to understand BYOC in more detail.


## Deployment Options

* Turnkey / default - creates a VPN and cluster for a fully managed install
* BYO-VPN - requires the customer to provide a VPN

## Create Service Principle

Installs are created and provisioned by offering a Service Principal, that streamkap can use to provision the sandbox.

Contributor role can be used instead of Owner in a shared deployment.

To create an Azure service principal locally:

```sql SQL 
$ az login
$ az account list (to get the subscription ID)
$ az ad sp create-for-rbac --name <name> --role Owner --scopes /subscriptions/<subscription-id>
```

## Architecture Diagram

![](/blume-assets/content/docs/_assets/images/docs/2e63569-image.png)