Essentials - Overview
The SoftwareOne Landing Zone for AWS is an AWS Control Tower-based, well-architected, multi-account environment designed to serve as a foundational starting point for deploying workloads and applications. It provides a robust baseline for multi-account architecture, identity and access management, governance, data security, network design, and logging. This solution is turnkey and customizable, allowing configurations to be easily tailored to meet specific needs. Leveraging Terraform Infrastructure as Code, the environment is provisioned, configured, and maintained seamlessly.
Service Modules in the Essentials Tier
Foundational Landing Zone - Establishes the core environment for AWS accounts, setting up the necessary structure for subsequent operations.
Identity and Access Management - Implements robust identity and access controls to ensure secure and efficient management of user permissions and access.
Centralised Logging - Provides a unified logging framework to capture and manage logs across all accounts for enhanced visibility and compliance.
Organisational Structure - Defines and manages the organizational units and account hierarchy to streamline governance and administrative processes.
Account Baseline - Sets up standard configurations for new accounts, ensuring consistency and compliance with organizational policies.
Account Factory - Automates the provisioning of new accounts, enabling rapid and standardized account creation.
Security Controls - Implements essential security measures and policies to protect the environment from threats and vulnerabilities.
Landing Zone Monitoring - Provides continuous monitoring of the landing zone to ensure performance, security, and compliance.
Service Delivery and Maintenance
The Landing Zone is delivered as a one-time professional service, including a 12-month subscription for maintenance and configuration change management. This ensures ongoing updates and compliance with AWS's rapid release cycle.
Customers with an active subscription have access to Cloud Management Portals, enabling them to raise incidents and service requests.