Scenarios
Multi-account Management on the Cloud
Supports centralized planning of the enterprise cloud account system to meet requirements such as business isolation and architectural scalability within the organization.
Medium and Long-term Network Architecture Design
Helps enterprises plan network architectures for medium and long-term use to ensure network flexibility, security, and ease of maintenance.
Security Compliance Management
Provides custom designs of cloud security systems to help enterprises meet security compliance requirements such as network security, data security, operation auditing, and configuration auditing.
Cloud Cost Management
Designs cost allocation systems to help enterprises track the cloud computing costs of each branch, department, and project, enabling effective decision-making at later stages.
Benefits
Many Years of Industry Experience
Familiar with the security compliance requirements and business processes of industries such as finance, new retail, pharmaceutical, home appliances, and manufacturing. Provides custom solutions for cloud governance based on your business characteristics.
A Professional Team of Experts
Our team of experts has rich experience in access control, data security, and compliance auditing, and can meet a wide range of business requirements from top-level design to solution implementation.
A Variety of Best Practices
Alibaba Cloud has helped many enterprises implement the Landing Zone solution, and accumulated various best practices and use cases in the process. This ensures that Alibaba Cloud can deliver cloud-based IT governance solutions with high efficiency.
Service Content
Infrastructure
Collect information about the customer's current IT infrastructure such as computing, storage, networking, and middleware, investigate the dependency between the infrastructure and business applications, and fully understand the current operation and management status of enterprise IT facilities. This provides basic information for the subsequent design of solutions for IT resource management and network planning.
Business Status and Application Systems
Conduct a comprehensive investigation into the customer's business status and application systems through means such as remote information collection and on-site communication, understand the customer's long-term planning of the business and applications, and set the initial goals of enterprise IT governance.
IT Governance Norms
Investigate the customer's current IT governance norms, such as security norms, network norms, and O&M norms, and understand the customer's management status and requirements of IT governance norms.
Account Management
Implement role authorization based on Alibaba Cloud RAM to enforce the principle of least privilege and integrate with the enterprise's self-managed SSO system to achieve unified identity authentication. This reduces management risks, such as the risk of account leakage caused by employee departure.
Financial Management
Based on the account distribution label, so that the cloud expenditure of each branch/department/project within the enterprise can be clearly seen, which is also convenient for the enterprise management to quickly understand the cost distribution and change, and provides data support for the subsequent cost optimization and business decision.
Network Planning
Design enterprise networks based on the preliminary situation investigation to meet business requirements, plan the IP segments and network control policies for different lines of businesses, and allocate VPCs for different Alibaba Cloud accounts to ensure a flexible and secure solution that meets the long-term development requirements of the enterprise.
Security Protection
Develop security protection solutions that meet enterprise requirements for data security, storage security, host security, and network security. Build a fundamental security layer for the enterprise to ensure the security and reliability of business systems.
Resource Management
Implement resource management based on classification labels and directory permissions in accordance with the results of the preliminary investigation. Manage cloud resources with labels and groups to make it easy to integrate with enterprise account systems.
Compliance Auditing
Design cloud compliance solutions to meet industry norms as well as internal O&M norms, such as network port restrictions and data disk encryption. In addition, make sure that the audit requirements for enterprises are also met.
Landing Zone Technical Validation for Basic Solutions (Basic Edition Only)
Validate the technical design of the following solutions: account management, and network planning or security protection. Make sure that the solutions meet customer expectations and are practical to implement. Help the customer resolve issues that occur during the validation process.
Landing Zone Technical Validation for Standard Solutions (Standard or Advanced Edition Only)
Validate the technical design of the following solutions: account management, financial management, network planning, security protection, resource management, and compliance auditing. Make sure that the solutions meet customer expectations. Help the customer resolve issues that occur during the validation process.
Landing Zone Technical Validation for Advanced Solutions (Advanced Edition Only)
Alibaba Cloud implements and delivers the following solutions based on the design: account management, financial management, network planning, security protection, resource management, and compliance auditing.
Infrastructure
Collect information about the customer's current IT infrastructure such as computing, storage, networking, and middleware, investigate the dependency between the infrastructure and business applications, and fully understand the current operation and management status of enterprise IT facilities. This provides basic information for the subsequent design of solutions for IT resource management and network planning.
Business Status and Application Systems
Conduct a comprehensive investigation into the customer's business status and application systems through means such as remote information collection and on-site communication, understand the customer's long-term planning of the business and applications, and set the initial goals of enterprise IT governance.
IT Governance Norms
Investigate the customer's current IT governance norms, such as security norms, network norms, and O&M norms, and understand the customer's management status and requirements of IT governance norms.
Infrastructure
Collect information about the customer's current IT infrastructure such as computing, storage, networking, and middleware, investigate the dependency between the infrastructure and business applications, and fully understand the current operation and management status of enterprise IT facilities. This provides basic information for the subsequent design of solutions for IT resource management and network planning.
Business Status and Application Systems
Conduct a comprehensive investigation into the customer's business status and application systems through means such as remote information collection and on-site communication, understand the customer's long-term planning of the business and applications, and set the initial goals of enterprise IT governance.
IT Governance Norms
Investigate the customer's current IT governance norms, such as security norms, network norms, and O&M norms, and understand the customer's management status and requirements of IT governance norms.
Account Management
Implement role authorization based on Alibaba Cloud RAM to enforce the principle of least privilege and integrate with the enterprise's self-managed SSO system to achieve unified identity authentication. This reduces management risks, such as the risk of account leakage caused by employee departure.
Financial Management
Based on the account distribution label, so that the cloud expenditure of each branch/department/project within the enterprise can be clearly seen, which is also convenient for the enterprise management to quickly understand the cost distribution and change, and provides data support for the subsequent cost optimization and business decision.
Network Planning
Design enterprise networks based on the preliminary situation investigation to meet business requirements, plan the IP segments and network control policies for different lines of businesses, and allocate VPCs for different Alibaba Cloud accounts to ensure a flexible and secure solution that meets the long-term development requirements of the enterprise.
Account Management
Implement role authorization based on Alibaba Cloud RAM to enforce the principle of least privilege and integrate with the enterprise's self-managed SSO system to achieve unified identity authentication. This reduces management risks, such as the risk of account leakage caused by employee departure.
Financial Management
Based on the account distribution label, so that the cloud expenditure of each branch/department/project within the enterprise can be clearly seen, which is also convenient for the enterprise management to quickly understand the cost distribution and change, and provides data support for the subsequent cost optimization and business decision.
Network Planning
Design enterprise networks based on the preliminary situation investigation to meet business requirements, plan the IP segments and network control policies for different lines of businesses, and allocate VPCs for different Alibaba Cloud accounts to ensure a flexible and secure solution that meets the long-term development requirements of the enterprise.
Security Protection
Develop security protection solutions that meet enterprise requirements for data security, storage security, host security, and network security. Build a fundamental security layer for the enterprise to ensure the security and reliability of business systems.
Resource Management
Implement resource management based on classification labels and directory permissions in accordance with the results of the preliminary investigation. Manage cloud resources with labels and groups to make it easy to integrate with enterprise account systems.
Compliance Auditing
Design cloud compliance solutions to meet industry norms as well as internal O&M norms, such as network port restrictions and data disk encryption. In addition, make sure that the audit requirements for enterprises are also met.
Landing Zone Technical Validation for Basic Solutions (Basic Edition Only)
Validate the technical design of the following solutions: account management, and network planning or security protection. Make sure that the solutions meet customer expectations and are practical to implement. Help the customer resolve issues that occur during the validation process.
Landing Zone Technical Validation for Standard Solutions (Standard or Advanced Edition Only)
Validate the technical design of the following solutions: account management, financial management, network planning, security protection, resource management, and compliance auditing. Make sure that the solutions meet customer expectations. Help the customer resolve issues that occur during the validation process.
Landing Zone Technical Validation for Basic Solutions (Basic Edition Only)
Validate the technical design of the following solutions: account management, and network planning or security protection. Make sure that the solutions meet customer expectations and are practical to implement. Help the customer resolve issues that occur during the validation process.
Landing Zone Technical Validation for Standard Solutions (Standard or Advanced Edition Only)
Validate the technical design of the following solutions: account management, financial management, network planning, security protection, resource management, and compliance auditing. Make sure that the solutions meet customer expectations. Help the customer resolve issues that occur during the validation process.
Landing Zone Technical Validation for Advanced Solutions (Advanced Edition Only)
Alibaba Cloud implements and delivers the following solutions based on the design: account management, financial management, network planning, security protection, resource management, and compliance auditing.
Landing Zone Technical Validation for Advanced Solutions (Advanced Edition Only)
Alibaba Cloud implements and delivers the following solutions based on the design: account management, financial management, network planning, security protection, resource management, and compliance auditing.
Acceptance Criteria
The acceptance criteria are specified in the report Landing Zone Solution submitted by Alibaba Cloud. Both parties must agree on the content of the report so as to ensure that the solution meets customer expectations.
Service Process
The customer must apply for the service at least 15 working days before they place the order. Both parties must agree on the service requirements and objectives.
Customer
Cooperate with the investigation, provide information about relevant IT facilities, current management situation, and current norms, and define the objectives of the solutions.
Alibaba Cloud
Collect the information required for solution design, investigate the current system, and assess the rationality of the objectives.
Customer
Choose solutions, confirm the architecture, review solutions, and support technical validation.
Alibaba Cloud
Develop strategies, design solutions, and validate solutions.
Customer
Review solutions and confirm acceptance or implementation.
Alibaba Cloud
Submit Landing Zone Basic Solution, Landing Zone Standard Solution, or Landing Zone Advanced Solution report.
Pricing
Landing Zone provides four editions that you can select based on your business
requirements: basic, standard, advanced and custom. All editions are paid services.
Basic Edition
$70,000
Provides architecture design and guidance for the following solutions: account management, and network planning or security protection.
