u/Great-Perception-714

Hey everyone,

I’m relatively new to this side of things and could use some war stories.
I'm building an LLM hub on Azure and need to integrate two legal data
open-source projects:

1. GitHub— full archive of laws as Markdown files in Git
2. MCP server wrapping official law API for real-time legal queries from LLMs

Problem is, our firm’s security policy doesn't allow direct external connections
(no direct Git clone, no direct outbound API calls from production).

Looking for advice on:

1. Secure integration patterns — Git mirroring through DMZ? APIM as API gateway
   for external calls? Any battle-tested approaches?
2. Additional Azure resources needed — beyond APIM, Firewall, Key Vault,
   what else should I plan for?
3. Rough effort estimate — anyone done something similar? How many man-days
   did it take including infra + pipeline?

For context: planning to chunk the legal data → embed → Azure AI Search for RAG,
with incremental sync when laws are amended.

Any experience sharing would be hugely appreciated. Thanks!