Modernized two Azure subscriptions from fragmented, over-permissioned networks into a governed hub-spoke platform architecture.