AWS Starter Pack

Overview

Xebia's Landing Zone is a production-ready multi-account AWS environment designed and implemented according to AWS Well-Architected guidelines. It is a foundation on which you can quickly launch and deploy workloads and applications. Xebia’s Cloud experts will tailor a landing zone that is in line with technical, regulatory and business requirements of your organization as well as future business goals.

We will start with understanding your business goals, your planned workloads on cloud, what’s needed in terms of business continuity and resiliency and your security and compliance requirements. We’ll design and set up an AWS environment where you will be in control (and will be able to prove that you are).

When Digital Sovereignty is important to you, we will create an AWS Landing Zone that leverages the capabilities that AWS provides (or in certain cases relevant 3rd party tools), to maximize the control you need over data, data access and availability.

Key activities:

• Facilitated Requirements Workshop.
• Landing Zone design and implementation.
• Environment walk-through.
• Workloads migration (optional).

Deliverables:

• AWS Account Strategy – A centralised AWS multi-account environment providing streamlined billing and security controls.
• Single Sign-On (SSO) – Centrally managed Identity and Access Management (IAM) across all AWS accounts (integrated with your Identity Provider), allowing your users to access all of their AWS resources while maintaining security.
• Guardrails – Predefined detective and preventive rules that enables ongoing governance for your AWS environment.
• Digital Sovereignty – Overview of what digital sovereignty requirements are met by the AWS environment.
• Account Factory – Built-in account provisioning to help with the deployment of new AWS accounts with approved configurations.
• Monitoring – Event processing infrastructure and rules to ensure you’re notified of events that may impact security or resilience.
• Logging – All audit and network flow logs are enabled by default and stored encrypted in a dedicated, restricted-access account within the landing zone.
• Threat Protection – Active and passive methods are used to warn or protect against attacks or draw attention to security-related misconfigurations.
• Management with Infrastructure as Code – The landing zone is entirely defined using infrastructure as code and deployed and maintained via dedicated build and release pipelines.
• Solution Diagrams