diff --git a/samples/aci-blob-storage/python/README.md b/samples/aci-blob-storage/python/README.md
index 76e4509..b1761a7 100644
--- a/samples/aci-blob-storage/python/README.md
+++ b/samples/aci-blob-storage/python/README.md
@@ -9,24 +9,12 @@ A sample application demonstrating how to deploy a containerized Flask web app u
 
 ## Architecture
 
-```
-┌──────────────┐     store conn     ┌──────────────┐  env vars   ┌──────────────┐
-│   Storage    │ ──── string ────►  │   KeyVault   │ ─────────►  │     ACI      │
-│   Account    │                    │  (secrets)   │             │  (container  │
-└──────────────┘                    └──────────────┘             │   group)     │
-       ▲                                                        │              │
-       │ read/write activities                                  │              │
-       └────────────────────────────────────────────────────────┤              │
-                                                                │              │
-┌──────────────┐     image pull                                 │              │
-│     ACR      │ ────────────────────────────────────────────►  │              │
-│  (registry)  │  (registry credentials)                        └──────────────┘
-└──────────────┘
-```
+The following diagram illustrates the architecture of the solution:
 
-**Deployment flow:** The deploy script creates Storage and Key Vault first, stores the storage connection string as a secret, creates ACR and pushes the container image, then creates an ACI container group that pulls from ACR with the secrets injected as environment variables.
+![Architecture Diagram](./images/architecture.png)
 
-**At runtime:** The Flask app reads the storage connection string from its environment, connects to Blob Storage, and provides a web UI for managing vacation activities (add, edit, delete).
+- **Deployment flow:** The deploy script creates Storage and Key Vault first, stores the storage connection string as a secret, creates ACR and pushes the container image, then creates an ACI container group that pulls from ACR with the secrets injected as environment variables.
+- **At runtime:** The Flask app reads the storage connection string from its environment, connects to Blob Storage, and provides a web UI for managing vacation activities (add, edit, delete).
 
 ## Prerequisites
 
diff --git a/samples/aci-blob-storage/python/images/architecture.png b/samples/aci-blob-storage/python/images/architecture.png
new file mode 100644
index 0000000..f774c5c
Binary files /dev/null and b/samples/aci-blob-storage/python/images/architecture.png differ
diff --git a/samples/aci-blob-storage/python/visio/architecture.vsdx b/samples/aci-blob-storage/python/visio/architecture.vsdx
new file mode 100644
index 0000000..a2f5815
Binary files /dev/null and b/samples/aci-blob-storage/python/visio/architecture.vsdx differ