Cloud Landing Zone

A cloud landing zone (CLZ) is a pre defined set of best practices and guidelines that organisations can use to setup a cloud infrastructure with secure, scalable and well architected environment to easily deploy and manage the workloads in cloud.  It provides a standardised way of creating and operating a cloud environment that can serve as a foundation also adhering to organisational policies and best practices.

Usually CLZ is defined by an organisation's IT or Cloud Center of Excellence (CCoE) and covers a variety of areas, such as identity and access management, network architecture, security, logging, monitoring and cost optimisation. 

A CLZ can be thought of as a blueprint for setting up a cloud environment that is optimised for an organisation's specific needs and also defines how it will be managed. 


The main benefits of having a cloud landing zone as follows

  • reducing the time and effort required to setup a cloud environment
  • improved cloud governance
  • reduces the complexity 
  • improving security posture of the environment
  • reduces risk of misconfigurations
  • other security risks that can arise from manual setup
  • enable teams to focus on delivery business value rather than worrying infrastructure.
  • modular and scalable configurations
  • provides comprehensive insights

CLZ typically includes a set of predefined account structures, network configurations, security controls, and management tools that can be quickly and easily deployed to support a variety of workloads.

Additionally, it provides a consistent approach to cloud adoption across the organisation, which can help to reduce complexity and ensure compliance with industry regulations and standards.

overall, a cloud landing zone is a valuable tool for organisations that are looking to migrate workloads to the cloud or optimising their existing cloud environment for improved performance and security.

Following are the reference for landing zone from popular cloud providers

AWS : https://docs.aws.amazon.com/prescriptive-guidance/latest/strategy-migration/aws-landing-zone.html

Azure : https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/ready/landing-zone/

GCP : https://cloud.google.com/architecture/landing-zones


by Raj


Essentials of Cloud Architecture

Cloud Security                                                                                                    

Location: Espoo, Finland

Comments

Post a Comment

Popular posts from this blog

Chaos Engineering

Image
Chaos engineering is a discipline that focuses on deliberately introducing controlled instances of chaos or failure into a system in order to discover vulnerabilities and weaknesses. It involves running experiments on a system to test its resilience, robustness and ability to withstand unexpected conditions. The primary goal of chaos engineering is to proactively identify and address potential issues in a system's design or infrastructure before they cause significant problems in real-world scenarios. By intentionally causing failures, such as network outages, server crashes, or database failures, chaos engineers can observe how the system responds and identify areas that need improvement. Chaos engineering typically involves the following steps: Steady state : Defining the steady state of the system, this refers to the desired, normal functioning of the system. Hypothesising potential weaknesses : Brainstorm potential failure scenarios or vulnerabilities that could disrupt the ste...
Read more