AWS Landing Zones in Practice - Part 1
Quando uma organização começa a utilizar AWS, é relativamente comum que tudo nasça dentro de uma única conta. No começo, isso parece razoável. Uma conta contém algumas VPCs, aplicações, bancos de dados, buckets e usuários. Com o crescimento do ambiente, porém, começam a surgir perguntas mais difíceis: Produção e desenvolvimento deveriam estar na mesma conta?, Onde devem ficar os logs de…
The article discusses the concept of a Landing Zone in Amazon Web Services (AWS), which is a framework for setting up a secure and organized AWS environment. A Landing Zone establishes a baseline for aspects such as multi-account architecture, Identity and Access Management, governance, data security, network architecture, logging, and billing.
It is not simply a virtual private cloud (VPC) or an AWS Organizations structure, but rather a foundation for building workloads. The article explains that a Landing Zone helps to isolate workloads and responsibilities, and provides a structure for organizing accounts, network components, and identity and access management. AWS recommends using a Landing Zone to establish a secure and scalable environment, and offers tools such as AWS Control Tower to automate the creation and governance of a multi-account environment.
Written by urgent.news from Dev.to's report — not a translation of it. Machine-written — may contain errors; check the original before relying on it.
