Who patches your VMs? Installs Antivirus.. installs vulnerability protection.. defines your resource groups.. virtual networks.. sets up your Azure subscription

Who patches your VMs? Installs Antivirus.. installs vulnerability protection.. defines your resource groups.. virtual networks.. sets up your Azure subscriptions.. performs billing management.. etc? I hope its not you. The whole idea was that there is a platform team responsible for providing a service or better yet the CSP does this for you and then you just have to architect as a platform team the things I listed above. It does not happen via magic. But the CSP platforms makes it certainly easier to provide a pre-audited version of the OS and tools. You should be able to self-service yourself within say a developer like portal as part of an IDP as described here. Not figure out ALL of the infra yourself.