Cloud Transformation

Alibaba Cloud Landing Zone as Code

Accounts in Resource Directory, one network hub on a CEN transit router, guardrails and logs, all deployed from code.

From the infrastructure automation and DevOps service in the Alibaba Cloud offering: the landing zone is designed and deployed as code. Resource Directory holds the accounts, a CEN transit router is the one network hub, and ActionTrail, Cloud Config and Simple Log Service keep every account audited before the first workload arrives.

dedicated lineVPC attachmentslogs and trailsOn premisesAlibaba CloudManagement account · Resource DirectoryNetwork accountSecurity, logging and operationsWorkload accounts · production and non-productionData centreTerraformmodules per layerResourceOrchestration Servi…or ROS templatesCloud GovernanceCenterbaselineResource Directoryfolders per environmentCloudSSO and RAMone sign-inCloud Configcompliance rulesBudgetsper accountExpress Connectdedicated lineVPN Gatewaybackup pathCEN Transit RouterCloud FirewallNAT Gatewaycentral egressAlibaba Cloud DNSPrivateZoneActionTrailmulti-account trailSimple Log ServiceSecurity CenterKMS / Cloud HSMCloudMonitorBastionhostadmin accessApplication LoadBalancerACKContainer Service for KubernetesECSElastic Compute ServicePolarDB / ApsaraDBRDS for MySQLOSSObject Storage ServiceCloud Backup

Point at a component to light its links; select it for what it does here and the practice that makes it right on Alibaba Cloud.

When to use it

  • A first move of workloads to Alibaba Cloud
  • Alibaba Cloud alongside AWS or Azure, under the same rules
  • Accounts created by hand that need one standard

How NGT delivers it

Built from code, reviewed at a gate by an NGT architect, and handed over with runbooks your team can run.

Cloud Transformation