azure-landing-zone

What problem does it solve?

This Skill streamlines the process of designing, scaffolding, and reviewing Azure enterprise-scale landing zones (ESLZ) following the Cloud Adoption Framework (CAF).

Core Features & Use Cases

• Management Group Hierarchy: Design and document CAF management group hierarchies.
• Platform Subscriptions: Scaffold platform subscriptions for Connectivity, Identity, and Management.
• Hub Networking: Generate IaC templates for hub virtual networks, Azure Firewall, DNS resolver, Bastion, and gateway.
• Policy Assignments: Assign regulatory policy initiatives like NIST 800-53, ISO 27001, CIS, PCI-DSS.
• Landing Zone Vending: Create templates for vending new application landing zone subscriptions.
• Architecture Decisions: Document architecture decisions for ESLZ design choices.
• Use Case: For a company adopting Azure at scale, use this Skill to ensure compliance and standardization across the organization.

Quick Start

Use the azure-landing-zone skill to generate a hub networking Bicep module for the Connectivity subscription and assign the NIST 800-53 policy initiative at the Landing Zones management group scope.