An Azure Landing Zone is a multi-subscription Azure environment that accounts for scale, security, governance, networking, and identity. It is designed to enable application migration, modernization, and innovation at enterprise-scale in Azure.
Client Challenges:
- On-premise hardware constraints
- Lack of supportable hardware for bursting or fast expansion
- Shipping delays on new hardware
- 3 to 5-Year hardware refreshes
- Capex vs. Opex spending models
- Geographic distribution of resources
- Windows Server Extended Support
- Networking security
- Secure external exposure of applications
- Logging & monitoring
- Business Continuity & Disaster Recovery methodologies
What's Included:
- Virtual workshops with Client to educate, design, and deploy Azure Landing Zone
- Design of naming conventions, resource management, tagging, and governance operations
- Design & deployment of Azure Hybrid Networking, VNETs, networking connectivity
- Enablement of basic Azure Activity logging & monitoring
- Design & enablement of basic Azure security & policies
- Final As Built documentation
Outcomes:
- Deployed Azure Landing Zone – Deployment of an Azure Landing Zone to include Networking, VPN Gateway connectivity, Management Groups and Subscription design and governance, Base Line RBAC, and Naming Standards
- Azure Landing Zone Documentation – Architectural diagrams including subscription topology, on-premise connectivity pathways, relevant resource group designs, and other design aspects of the landing zone as described in the scope of work
- Knowledge Transfer – Knowledge transfer for operational support
Value Proposition:
- Scalability for future growth
- Governance/Compliance/Regulation (IAM, RBAC, etc.)
- Logging/Monitoring/Alerting
- Business Continuity/Disaster Recovery improvements