The Virtual Cloud Architect (vCA), Managed Landing Zone Service

offers a managed SaaS that enables AWS customers & consulting partners to optimize business outcomes by removing AWS service delivery and onbording complexity, labor-intensive coding, and recurring costs at the start of every cloud project. In just a simple service request, the vCA creates the secure foundation for bringing innovative AWS products and technology solutions to market faster, with more repeatability, and at a lower cost. We build, install, and manage your Landing Zones.

Account Foundation: The vCA Account Foundation employs the well-governed and compliance-ready multi-account strategy for all your AWS Landing Zones and projects. The vCA Account foundation uses AWS-native services like AWS Organizations, OUs, Service Control Policies (SCP), and AWS IAM Identity Center (SSO) to deploy a repeatable and isolated secure AWS account fabric. No code templates or accelerators are required.

Security Foundation: Centrally collect and organize CloudTrail API logs, DNS logs, VPC Flow logs, and Packet Mirroring. Empower AWS network visibility by providing context to network and application logging data. Execute security analytics based on targeted network environment, user activity, and resource tag. Strategically increase ROI of analytic and security tools by delivering traffic/data of interest to Guard Duty and Security Hub.

Network Foundation: AWS native network orchestration, centrally managed, turnkey, repeatable, no guesswork. Deploy fully integrated VPC networking for your AWS Account and Security Foundations. Effortless segmented routing, micro-segmentation, and compliance-aware networking. Network zones for creating VPC shared services, security groups, and isolated default ACLs. Well-architected AWS networking, managed IPAM, DNS, BGP, NAT, TGW, and VPC’s.

By leveraging the Virtual Cloud Architect (vCA), AWS partners and customers will realize the benefits including extremely fast AWS delivery speed, eliminating platform misconfiguration, cloud drift, skills gaps, attack surfaces, and spiking cloud costs. All without the need for juggling various code templates, deploying expensive high-end resources, AWS platform updates, or struggling with cloud-native networking, security, and observability challanges.