Google Cloud Landing Zone
Organization, folders and projects from a bootstrap project: policies, identity, a network hub with private links, and central logs and findings.
The foundation NGT puts in place before the first workload: the resource hierarchy with Organization Policy on the folders, Cloud Identity federated with the company directory, a network hub on Network Connectivity Center with Cloud Interconnect or Cloud VPN to the data centre and Cloud NGFW inspection, Shared VPC for the workload projects, and an aggregated log sink and Security Command Center in a security project. All of it is Terraform, applied from a bootstrap project.
Point at a component to light its links; select it for what it does here and the practice that makes it right on Google Cloud. A Google Cloud product without an icon of its own shows its category's icon, as Google's icon set does.
When to use it
- A company starting on Google Cloud, or tidying projects created by hand
- Regulated workloads that need policies and audit logs everywhere
- A hybrid period with the data centre connected privately
How NGT delivers it
Built from code, reviewed at a gate by an NGT architect, and handed over with runbooks your team can run.
Cloud Transformation
