BJSS: AWS Landing Zone

This offering is for organisations looking to deploy a Landing Zone in AWS. A Landing Zone enables organisations to quickly set up a secure, multi-account AWS platform based on AWS best practices. Once deployed, the AWS Landing Zone can be used to rapidly and securely deploy applications hosted in AWS.

Key Features of the BJSS AWS Landing Zone:

• Governance - Built to AWS Well-Architected standard and includes controls to ensure that cloud resources adhere to industry policies and compliance requirements. This can include policies for resource naming conventions, resource tagging, and access controls.

• Scalable and Flexible - Designed to accommodate future growth and changes in organisational requirements. This can include designing for scalability, flexibility in resource allocation, and the ability to integrate with third-party services and tools.

• Automation of Account Vending - Automation services that enable the efficient deployment, vending and management of cloud resources. This includes automated provisioning of resources, automated configuration management, and automated security compliance checks.

• Security - Centralised security management that includes security controls, such as network segmentation, identity and access management, and encryption to protect against potential security threats.

Benefits

• Enhanced security posture - Establish a secure environment by implementing security guardrails and controls for monitoring and threat detection across all accounts.

• Reduced time to value with faster deployment - Rapidly deployed using automated templates and scripts, saving time and reducing the potential for human error

• Improved predictability and consistency for your cloud - Ensures that all accounts and workloads are deployed using a predictable, consistent set of standards and configurations, reducing the risk of misconfigurations and errors

• Improved business resilience - Flexibility and agility to quickly and easily deploy new workloads and services, allowing you to innovate and respond to changing business requirements.

• Increased observability into your cloud - Provides observability services to enable performance, improve collaboration and increase responsiveness

A Landing Zone is for organisations who have the following challenges:

• An early adopter of cloud but now need a clean slate to apply current best practices

• Lack the skills to set up or service cloud platforms

• Want to use multiple cloud providers to increase resiliency but need to standardise security, tooling and identity across all platforms

• Face risks from non-compliance in a heavily regulated industry and/or is vulnerable to security threats and attacks

• Lack observability or control over cloud deployments and standards across teams, business units and application owners

• Need help in operating the cloud environment

BJSS can deploy for the customer an AWS Landing Zone with or without the use of AWS Control Tower.