Heard about Shielded VMs? Looking to learn more?

Then you should definitely check out this post by Dean Wells..

https://blogs.technet.microsoft.com/datacentersecurity/2017/03/14/shielded-vms-a-conceptual-review-of-the-components-and-steps-necessary-to-deploy-a-guarded-fabric/

it's full of great information about building a guarded fabric.. well worth the read.

(side note - if you ever get a chance to see him speak, do it, you won't regret it)