Knowledge is Power

Sitewide Search

Search Bare Metal Cyber

Search exact control and technique identifiers, Cyber Wiki articles, framework records, playbooks, books, podcasts, Academy courses, individual lessons, and BMC Cyber Challenge activities.

Platform architectureIntermediate

Cloud Landing Zones

A cloud landing zone is a governed foundation for accounts or subscriptions, identity, networking, logging, policy, security services, and workload onboarding.

What it means

It turns recurring enterprise requirements into reusable platform capabilities so teams can begin from a safer and more consistent baseline.

Why it matters

Landing zones reduce repeated design work, but they must be versioned and operated like a product. A rigid foundation that cannot evolve becomes a source of bypasses and shadow environments.

Practical focus

  • Define account, identity, network, logging, and policy baselines
  • Automate creation and evidence collection
  • Separate platform administration from workload administration
  • Provide a documented exception and upgrade path

Common mistakes

  • Calling an empty account a landing zone
  • Embedding one team's temporary choices as enterprise standards
  • Allowing unmanaged workloads outside the foundation

Certification relevance

This subject appears in or supports the following certification bodies of knowledge:

AWS Cloud PractitionerAzure FundamentalsGoogle Cloud Digital LeaderGIAC GCLDCompTIA Cloud+ISC2 CCSPAzure AZ-900ISC2 ISSAP

Authoritative sources