The more the Landing Zone reflects a company's internal organization and communication structure, the better it works.

For this reason, beSharp will conduct an in-depth analysis alongside the customer’s stakeholders across the whole organization to understand the structure and identify processes and operations.

All this information will be used to design the landing zone according to the customer needs, so that its structure perfectly maps out the organizational structure and meets compliance and governance processes and requirements.

During the technical and strategic design session, you will benefit from the perfect intersection between AWS best practices from the Well-Architected Framework and beSharp’s deep expertise in custom Landing Zone solutions.

In the delivery phase beSharp’s Cloud Expert will work tightly with the customer teams in order to implement the designed solution according to a training on-the-job approach allowing the customer’s teams to achieve a strong technical ownership on the project.

The Landing Zone should be able to adapt to the dynamic nature of both the AWS ecosystem and the company evolution. beSharp will continuously support the customer by evolving the Landing Zone and keeping up to date in a perspective of continuous improvement.

Key areas of intervention

• Organization: master account configuration for billing and management, environments separation across different AWS accounts (dev, test, prod…), setup of an “Account Vending Machine” for sandbox environments creation allowing secure trial and experimentation.
• Identity and access management: from AWS IAM-based authentication and authorization to Federation through AWS SSO.
• Networking: integration with on-prem environments, cross-account and cross-region Networking management, Direct-connect, Site2Site VPN, Client VPN. centralized NAT implementation, and inspection VPC, DNS Management.
• Security: traceability, in-transit and at-rest data protection, least-privilege principle and isolation.
• Governance & Compliance: observability through centralized logging and alarm management and monitoring, Service Control Policies (SCPs), guardrails, tag policies, AWS Config rules and AWS Systems Manager for VM configuration and control
• Costs control: implementation of cost monitoring and optimization systems through deep break down of all services costs, AWS Cost Explorer, AWS Budget
• Backup: Implementation of backup systems and policies
• Disaster Recovery: design and implementation of DR strategies ranging from low complexity backup & restore to advanced active-active configurations.