Azure Landing Zone: 5-day Implementation


Quick Start Azure Landing Zone. Delivered to government and NCSC standards and principles. Aligns to the Microsoft Cloud Adoption Framework.

This 5-day service enables customers to rapidly exploit the benefits of cloud computing. By configuring a secure connection to an existing datacentre, resources such as virtual machines can be easily deployed and be available on the corporate network.

Features: Build a virtual network in Azure and connect to a customer’s existing datacentre network
Apply policies to ensure control over resource creation and costs (e.g. sovereignty regulations may require data to reside in UK datacentres) Create resources to support logging, diagnostics and encryption Use Infrastructure-as-Code (IaC) blueprints to define resources and policies to ensure deployment to a repeatable standard

Benefits: Low-risk and low-cost opportunity to assess Azure as a potential hosting environment for business services Production-ready presence in the cloud that can be scaled to meet demand Cloud environment that is designed to Microsoft’s Cloud Adoption Framework (CAF) best practices Governance to demonstrate compliance with common standards such as ISO, PCI, NIST and UK OFFICIAL High level of physical security provided by Microsoft datacentres and data security through encryption and role-based access control Opportunities to test a wide range of services offered by Azure and experience the speed and flexibility of deploying Infrastructure-as-a-Service (IaaS) or Platform-as-a-Service (PaaS) solutions Detailed billing reports to understand charges per resource and capability to define budgets and alerts when thresholds have been exceeded Detailed design documentation of the implemented solution

Format: Day 1: Workshop to discuss objectives and gather configuration Day 2: Publish a design and configuration document (DCD)
Day 3-5: Implement and demonstrate Azure Landing Zone

Pre-requisites: An Azure subscription Active Directory user and group accounts replicated to Azure AD