AWS Landing Zone Foundation by CloudNation

CloudNation offers the opportunity to deliver the AWS design, build and deploy phase of the LZ based on a one-time project fee or a Landing Zone-as-a-Subscription (LZaaS) model (OpEx). The as-a-Subscription model is based on a monthly subscription, which limits your up-front (CapEx) investment. This can already be leveraged after the Landing Zone multi-account setup is created, and can be further expanded when application workloads are deployed in the accounts in a later stage.

What is included in your Landing Zone?

The AWS Landing Zone Foundation is a solution geared towards rapid implementation of AWS best practices with respect to cloud infrastructure, developed by CloudNation. In case of a subscription model, the LZ is also operated by CloudNation (infrastructure, not application platform).

The Landing Zone will provide you with the below functionality:

• Use of AWS Organizations, creating standard accounts for different services like Security, Auditing, Billing, Shared Services and DTAP separation. Customers will get their own dedicated AWS organization with their business address and Chamber of Commerce + VAT number. This enables and ensures that all IP-rights and ownership for the developed source code used in the application platform stays with you.
• You choose your region(s); no matter where you want to deploy your workload, either as close to your office as possible, or near your customers on different continents;
• Service Control Policies to restrict specific actions in OUs or accounts;
• AWS Single Sign-On for role-based access to accounts in the organization;
• AWS Security Hub to centralize security findings within the organization and benchmark against security standards - one or a combination of checks possible:
  • CIS
  • PCI-DSS
  • AWS best practices. Note: the security score initially presented in Security Hub, indicating the percentage of compliance with one or more security standards, is not 100% by default since this is dependent on the compliance rules selected in agreement with the customer and which are considered relevant by the customer to comply with in terms of resource configuration.
• AWS Config to enforce compliance of resource configuration against a set of rules that can be expanded by preference;
• Amazon CloudTrail to log all API activity in the organization;
• Amazon Inspector to scan your instances and docker images for vulnerabilities;
• Amazon GuardDuty for intelligent threat detection in and around your network;
• AWS Cost Budgets to stay aware of your monthly spend;
• AWS Cost Anomaly Detection to be informed of anomalies in your regular spend pattern and their cost impact;
• CloudBilling integration to you receive your monthly bill from CloudNation;
• AWS CDK Toolkit to quickly start deploying infrastructure-as-code resources;
• OpenID Connect deployment role for enabling role-based access to AWS for Github Actions, or any other supported code repository provider;
• AWS CodeCommit repository and AWS CodePipeline for version control and automated deployment of above mentioned resources via org-formation. This can be done either in a customer pipeline (like Github Actions) or in a pipeline provisioned by CloudNation if in a subscription model.

Additional subscription model offerings only:

• Technical Support on LZaaS-related infrastructure.

Getting started

You can request the AWS Landing Zone Foundation, by selecting 'Continue' and providing your contact details. You will receive an email from us to inform you on the next steps and to plan an introduction meeting.

Pricing Information

We can deliver a tailored Landing Zone based on a one-time project fee (fixed price) or based on our Landing Zone-as-a-Subscription model. The fixed costs are spread over a 24-month period and you will receive an invoice on a monthly basis. Contact us for more information and to get started!