Terraform Module for AWS Landing Zone
AWS Landing Zone Template v2.4.6(Latest)
This is the public roadmap for the custom build AWS CDK Landing Zone solution provided by Towards the Cloud.
Leverage Ollion's AWS Landing Zone to deploy a secure, compliant foundation with ease. The repository contains an implementation of a secure and compliant landing zone pattern that will help expedite cloud migration for an enterprise in a heavily regulated industry.
Terraform Module for AWS Landing Zone (Read-Only)
Terraform blueprint for AWS Organizations, multi-account landing zones, SCPs, IAM Identity Center, and secure AWS cloud foundations.
Multi-cloud observability platform implementation guide — OpenTelemetry, New Relic, Amazon Bedrock AI, EKS/GKE/AKS
Example GDPR/EUCS/NIS2 AWS enterprise landing zone built with Compiled AI by Merlin Studio — one intent spec deterministically compiled to two IaC formats (AWS LZA + AWS CDK/TypeScript). Multi-region EU data residency, HSM-backed KMS, centralized egress inspection, Direct Connect, 100/100 (A+) security scorecard. A reference, not a turnkey deploy.
Example CIS-aligned AWS startup landing zone built with Compiled AI by Merlin Studio — one intent spec deterministically compiled to two IaC formats (AWS LZA + Terraform tfvars). Lean single-region baseline: org + security/log/audit accounts, GitHub Actions OIDC, 100/100 (A+) security scorecard. A reference, not a turnkey deploy.
A sample of AWS landing zone for Nutanix Cloud Cluster (NC2) with Site-to-Site VPN
PCI-DSS/SOX/CIS AWS multi-account landing zone built with Compiled AI by Merlin Studio - a regional bank's card platform compiled from one intent spec to OpenTofu + tfvars. SCP-isolated PCI cardholder-data (CDE) account, multi-region warm-standby DR, centralized inspected egress, 97/100 (A+) security scorecard. A reference, not a turnkey deploy
Example FedRAMP High + NIST 800-53 AWS landing zone built with Compiled AI by Merlin Studio — a US federal civilian agency mission system, one intent spec deterministically compiled to AWS LZA config. SCP-isolated CUI account, multi-region warm-standby DR, HSM-backed KMS, 100/100 (A+) security scorecard. A reference, not a turnkey deploy.
An example of configuration of Cloudformation nested applications deploying resources globally used and shared by AWS services and applications.
Example HIPAA/CIS/SOC2 AWS multi-account landing zone built with Compiled AI by Merlin Studio — one intent spec deterministically compiled to two IaC formats (AWS LZA + OpenTofu). Dedicated SCP-isolated PHI account, multi-region warm-standby DR, immutable audit logging, 100/100 (A+) security scorecard. A reference, not a turnkey deploy.
AWS Organization bootstrapper: SCPs, SSO, GuardDuty, Security Hub, account vending — all Terraform
AWS Foundation - configures "one-per-account" type stuff - Organization, OUs, MemberAccounts, IdentityCenter, IPAM
Add a description, image, and links to the aws-landing-zone topic page so that developers can more easily learn about it.
To associate your repository with the aws-landing-zone topic, visit your repo's landing page and select "manage topics."