The SoftwareOne AWS Landing Zone offers a pre-configured and automated framework that provides a foundation for building a secure, multi-account AWS environment. The service offers a comprehensively configured environment featuring a best practice set of secure cloud infrastructure, policies, and guardrails. It includes centrally managed services that adhere to the best practices of utilising Infrastructure as Code. It's designed to help organisations quickly set up a secure and scalable environment with a consistent set of AWS best practices. Leveraging the industry-leading Infrastructure as Code platform Terraform, SoftwareOne’s Landing Zone gets you up and running from a zero footprint to be ready for your first AWS workload deployment in a matter of days.

The SoftwareOne Landing Zone offers a predefined AWS account structure along with governance policies for Identity Access Management (IAM) roles and policies, networking configuration, logging, and security policies. SoftwareOne's Landing Zone follows a structure based on AWS Organisational Units, which are further divided into separate accounts to support the application lifecycle across Dev, UAT, and Prod environments. By prioritising robust identity management and adhering to the principle of least privilege, we enforce strict separation of duties and provide appropriate authorisation for each interaction with your AWS resources. Additionally, the Landing Zone includes a set of AWS guardrails to ensure compliance with industry and regulatory standards.

SoftwareOne utilises a unique delivery approach by provisioning a fully operational Landing Zone on the first day using an initial configuration, followed by design sessions to guide you through customisation options, thus enabling organisations to adapt the configuration according to their unique needs and requirements. With the SoftwareOne Landing Zone, organisations can accelerate their cloud adoption journey, reduce the risk of misconfiguration or security vulnerabilities, and streamline the management of their AWS environment.

The delivery of the Landing Zone follows a three-step approach: Discovery: during this step, SoftwareOne AWS solution architects will review any existing design documents, reference architectures, and standards in use. The focus will be on infrastructure documents, security documents and the project requirements for the creation of the Landing Zone. This will be supplemented by meetings with your team to elaborate on specific setup requirements (e.g., networking). Implementation: once all the necessary information has been gathered, the team will clone the core Landing Zone repository and make a code repository dedicated to your organisation. The Terraform code will be configured and changed as necessary to support your requirements. A code pipeline will be established to run the Terraform code, and the code will be run to create the Landing Zone. Any amendments or fixes arising out of creation will be done at this stage. Handover: the handover phase differs whether or not you utilise SoftwareOne Cloud Operations managed services for AWS. We will take care of your specific code, ensure it is updated as required, with little effort from you as we will be managing the deployed workloads. If you do not subscribe to SoftwareOne Cloud Operations managed services for AWS, then a full handover is done which includes knowledge transfer on the Landing Zone and a handover of the code.