Cloud Transformation

Huawei Cloud Landing Zone and Secured Working Area

A governed landing zone with one network hub, and virtual desktops that keep the delivery team's work inside the cloud.

A reference design for Huawei Cloud: the landing zone is written as code, every VPC connects through one Enterprise Router hub, and the delivery team works only through Workspace desktops in a secured working area, so customer data never sits on laptops.

private lineVPC attachmentsremote desktopOn premisesDelivery teamHuawei CloudGovernance · management accountNetwork hubSecured working areaWorkload VPCsData centreDelivery teamoffshoreOrganizationsaccounts per environmentTerraformlanding zone as codeIAMfederated sign-inCloud Trace Serviceaudit trailLog Tank Servicecentral logsCloud EyemonitoringData EncryptionWorkshopkeys and secretsDirect ConnectEnterprise RouterhubCloud FirewallWorkspacevirtual desktopsAccess policiesclipboard, USB, egressCloud ContainerEngineElastic Cloud ServerRDSmanaged databasesDevSecOps pipelinesinfrastructure and appsCloud Backup andRecovery

Point at a component to light its links; select it for what it does here and the practice that makes it right.

When to use it

  • A second public cloud added next to an existing one
  • An offshore team that must not hold customer data on its own devices
  • A landing zone that has to follow rules already set on another cloud

How NGT delivers it

Built from code, reviewed at a gate by an NGT architect, and handed over with runbooks your team can run.

Cloud Transformation