The key benefits of using the ITGix AWS Landing Zone include:

PCI DSS compliance and auditability from day one * CDE environment that is ready to be audited

Centralized organizational login via Single Sign-On * Optional integration with federated access control from SAML or OIDC providers (Keycloak, Google Workspace, Active Directory, etc)

Cost efficiency at scale because of centralized networking and shared services * Hub and spoke network topology * Centralized Egress * Centralized network firewall inspection of all outbound traffic * Ability to create centralized VPNs (supports both Site-to-Site VPNs and Client VPNs) * Ability to integrate landing zone with on-prem datacenters via AWS Direct Connect * Ability to multiply application accounts while maintaining a cost efficient egress traffic and VPN infrastructure

Fast time to market * Automated provisioning

Security controls * Resource isolation * Least privilege access * Single sign-on * Centralized user management * WAF for inbound traffic * Network firewall for outbound traffic * Optional DDOS protection via AWS Shield Advanced

Automated security scanning * Intrusion detection * Vulnerability scanning * Automated scanning for security standard compliance - PCI DSS, NIST, CIS Benchmarks, AWS Foundations