graph TD;
  A[Resource Group: wusm-prod-rg-main]
  
  subgraph Overview
    B["Databricks Workspaces"]
    C["Cognitive Services Accounts"]
    D["Key Vaults"]
    E["Public IP Addresses"]
    F["Storage Accounts"]
    G["Network Security Groups (NSGs)"]
    H["Network Interfaces"]
    I["Private Endpoints"]
  end
  
  subgraph Virtual Network
    K["Virtual Network: virtualNetworks_wusm_prod_vnet_main_name"]
    L["Subnets"]
    M["Routing Rules"]
    N["NSG Configurations"]
  end
  
  subgraph Security
    P["Network Security Controls"]
    Q["Private Link Services"]
    R["Key Vault Access Policies"]
  end
  
  A --> Overview
  A --> Virtual Network
  A --> Security
  
  B -->|Allocated Subnets, NSGs| L
  B -->|Secure Communication| C
  
  C -->|Multiple Accounts| L
  C -->|Uses Subnets| L
  
  D -->|Secrets| F
  D -->|Configured ACLs| Q
  
  E -->|For Application Gateway| R
  E -->|Static IP, DDoS Protection| A
  
  F -->|Various Storage Types| A
  F -->|Storage with ACLs| L
  
  G -->|Control Access Rules| K
  G -->|NSGs for Databricks| B
  
  H -->|Tied to VMs and Clusters| B
  
  I -->|Enhanced secure connectivity| F
  I -->|No Public IP| Q
  
  K -->|Configured for services| L
  K -->|Segment Network Components| B
  
  L -->|ADBContainerSubnet| A
  L -->|ADBHostSubnet| A
  L -->|AuxSubnet| A
  L -->|AppGWSubnet| A
  
  M -->|Monitors Traffic| K
  N -->|Control Inbound/Outgoing Traffic| K
  
  P -->|Network ACLs deny by default| A
  Q -->|Block Public Routes| P
  
  R -->|Role-based Access| D
  R -->|Restricts Sensitive Info| A
  
  subgraph Data Storage
    Y["Data Lake"]
    Z["File Storage"]
  end
  
  F -->|Stores Data| Y
  F -->|Stores Files| Z
  D -->|Manages Secrets| Y
  B -->|Scalable processing| Y
  B -->|Integrate with storage for datasets| Z
  
  subgraph Logging and Monitoring
    ZA["Log Analytics Workspaces"] 
  end
  
  ZA --> A