They have custom FPGAs in Azure to offload networking and storage from the host CPU. There's an internal team designing and deploying all these, and the eventual goal is to have all this on ASICs for even more efficiency. Though you are right that they'll be subcontracting out the actual fabrication.