landing-zones

Automate OCI landing zone design with compartment hierarchies and hub-spoke networks.

16|3|Updated Jan 26, 2026
One-click install
npx skills add https://github.com/acedergren/oci-agent-skills --skill landing-zones
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: landing-zones
Source: https://github.com/acedergren/oci-agent-skills/tree/main/skills/landing-zones
Command: npx skills add https://github.com/acedergren/oci-agent-skills --skill landing-zones

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides expert guidance and automation for designing and implementing secure, compliant, and scalable Oracle Cloud Infrastructure (OCI) environments, addressing common pitfalls and ensuring adherence to best practices.

Core Features & Use Cases

  • Architecture Design: Guides on compartment hierarchies, network topologies (hub-spoke), and multi-tenancy patterns.
  • Security Implementation: Automates the setup of Security Zones, Cloud Guard, and IAM policies for robust security posture.
  • Cost Management: Provides strategies and CLI commands for budget creation and cost allocation through tagging.
  • Use Case: A new OCI customer needs to establish a production-ready environment that is secure, cost-effective, and compliant with industry standards. This Skill provides the blueprints and tools to achieve this foundation.

Quick Start

Use the landing-zones skill to create a secure OCI foundation with a hub-spoke network topology and security zones enabled.

Frequently Asked Questions about landing-zones

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I design a secure OCI landing zone with hub-spoke network topologies?

To design a secure OCI landing zone, you must establish a hub-spoke network topology, define compartment hierarchies, and enable Security Zones. This approach ensures your Oracle Cloud Infrastructure foundation is scalable, compliant, and isolated.

What is the best way to structure OCI compartments for enterprise cloud foundations?

The best way to structure OCI compartments is by implementing a logical hierarchy that supports multi-tenancy patterns and governance. Proper compartment design isolates workloads, simplifies IAM policies, and ensures scalable cloud foundation management.

How do I configure Cloud Guard and Security Zones in Oracle Cloud Infrastructure?

Configuring Cloud Guard and Security Zones in OCI involves automating the setup of robust security postures and IAM policies. This integration detects threats and enforces configuration compliance within your secure landing zone.

Can I automate budget management and cost tagging strategies for OCI landing zones?

Yes, you can automate budget management and cost tagging strategies for OCI landing zones. By utilizing CLI commands and tagging rules, you allocate costs accurately and maintain financial governance across your compartments.

Does this OCI landing zone approach address common cloud anti-patterns?

Yes, this OCI landing zone approach directly addresses common cloud anti-patterns by providing expert guidance on architecture design. It ensures adherence to enterprise-grade best practices, preventing insecure or non-compliant configurations.

When do I need a multi-tenancy pattern for my OCI compartments?

You need a multi-tenancy pattern for OCI compartments when isolating distinct business units or environments within a single tenancy. This pattern enforces strict governance, security boundaries, and IAM policy separation.