Lesson 1 of 414 min

Cloud landing zones

Subscriptions/accounts, networks, identity, policy, logging, baseline security — pre-built before workloads.

Organizational directory structure on a laptop screen — Photo by Christina Morillo on Pexels

A landing zone is the standardized cloud foundation: management groups (Azure) or OUs (AWS (Amazon Web Services) Organizations), network topology, identity wiring, policy guardrails, logging, baseline RBAC (Role-Based Access Control).

Without a landing zone, every project re-invents the wheel and creates security gaps.

Diagram · Cloud service models

Microsoft has Cloud Adoption Framework; AWS has Control Tower / LZA.

Key takeaways

▸Landing zone before workload
▸Guardrails > gates
▸Reuse Microsoft CAF (Cloud Adoption Framework) / AWS LZA — don't reinvent

Next: Identity architecture at scale →