Azure Windows Server Customization

I already have an Azure subscription with a fresh Windows Server instance and I want to turn it into a solid host for my new web application. The main thing I need right now is a clean, secure IIS setup that can serve as the foundation for whatever framework I decide to deploy next.

Here’s what I expect from the engagement:
• Install and configure IIS on the Windows Server VM (latest stable version).
• Apply best-practice hardening for public-facing sites—SSL/TLS, basic firewall rules, and the usual HTTP security headers.
• Enable automatic startup and health-check monitoring so the site stays online after reboots or scaling events.
• Provide concise, step-by-step documentation (screenshots or shell commands) so I can reproduce the setup in other environments.