Deployment of Azure Landing Zone

An Azure Landing Zone is a multi-subscription Azure environment that accounts for scale, security, governance, networking, and identity. It is designed to enable application migration, modernization, and innovation at enterprise-scale in Azure.

Client Challenges:

• On-premise hardware constraints
• Lack of supportable hardware for bursting or fast expansion
• Shipping delays on new hardware
• 3 to 5-Year hardware refreshes
• Capex vs. Opex spending models
• Geographic distribution of resources
• Windows Server Extended Support
• Networking security
• Secure external exposure of applications
• Logging & monitoring
• Business Continuity & Disaster Recovery methodologies

What's Included:

• Virtual workshops with Client to educate, design, and deploy Azure Landing Zone
• Design of naming conventions, resource management, tagging, and governance operations
• Design & deployment of Azure Hybrid Networking, VNETs, networking connectivity
• Enablement of basic Azure Activity logging & monitoring
• Design & enablement of basic Azure security & policies
• Final As Built documentation

Outcomes:

• Deployed Azure Landing Zone – Deployment of an Azure Landing Zone to include Networking, VPN Gateway connectivity, Management Groups and Subscription design and governance, Base Line RBAC, and Naming Standards
• Azure Landing Zone Documentation – Architectural diagrams including subscription topology, on-premise connectivity pathways, relevant resource group designs, and other design aspects of the landing zone as described in the scope of work
• Knowledge Transfer – Knowledge transfer for operational support

Value Proposition:

• Scalability for future growth
• Governance/Compliance/Regulation (IAM, RBAC, etc.)
• Logging/Monitoring/Alerting
• Business Continuity/Disaster Recovery improvements