What Are the Service Contents and Scenarios of Landing Zone Design and Implementation?
Huawei Cloud Landing Zone design and implementation service provides basic solutions for medium, large, ultra-large, Corporate Edition–Basic Package and Corporate Edition–Incremental Package businesses. It also provides advanced solutions that cover data boundaries, cloud financial management, O&M management, advanced support, and governance optimization. The following table lists the service content and typical application scenarios. You can choose any combination of services that best fit your needs.
- Design and Implementation for Basic Scenarios
Service Item
Service Subitem
Service Content
Landing Zone Design for Basic Scenarios – Medium Scale
Huawei Cloud provides detailed design solutions for five scenarios tailored to customer needs: organizational accounts, identities and permissions, network planning, security, and compliance audit.
Huawei Cloud helps medium- and large-sized enterprises design and implement a scalable and efficient cloud governance architecture in terms of multi-account organizations, identities and permissions, network, security, and compliance audit.
Landing Zone Design for Basic Scenarios – Large Scale
Landing Zone Design for Basic Scenarios – Ultra-large Scale
Landing Zone Design Service (Corporate Edition) – Basic Package
Landing Zone Design Service (Corporate Edition) – Incremental Package
Landing Zone Implementation for Basic Scenarios – Medium Scale
Huawei Cloud implements a cloud environment based on the designs, including enabling cloud resources and accounts and establishing a multi-account system and a cloud authorization system. Huawei Cloud also builds a cloud infrastructure and configures networks and security settings.
Landing Zone Implementation for Basic Scenarios – Large Scale
Landing Zone Implementation for Basic Scenarios – Ultra-large Scale
Landing Zone Implementation Service (Corporate Edition) – Basic Package
Landing Zone Implementation Service (Corporate Edition) – Incremental Package
- High-Level Scenarios – Data Boundary Management
Service Item
Service Subitem
Service Content
Data Boundary Management Design
Huawei Cloud provides a detailed design solution for data boundary management that allows you to configure service control policies (SCPs) and guardrail policies for VPC endpoints and resources. This aims to block all unexpected access paths and ensure that only trusted users can access trusted resources from trusted networks.
Medium- and large-sized enterprises need their data privacy and core data being strictly protected on Huawei Cloud.
Data Boundary Management Implementation
Huawei Cloud implements the best practices of enterprise data management based on the data boundary management design.
- High-Level Scenarios – Cloud Financial Management
Service Item
Service Subitem
Service Content
Cloud Financial Management Design
Huawei Cloud designs a hierarchical financial management solution based on the Landing Zone organizational structure and master-member account associations. You can use the master account to centrally view bills, issue invoices, and analyze costs in a refined manner by tags. Timely alerts will be generated for excessive resource consumption of member accounts.
Medium- and large-sized enterprises need to manage finances in a hierarchical manner.
Cloud Financial Management Implementation
Huawei Cloud implements the cloud financial management design.
- High-Level Scenarios – O&M Management
Service Item
Service Subitem
Service Content
O&M Management Design
Huawei Cloud designs O&M and monitoring for resources, events, and logs of multiple accounts based on the Landing Zone organizational structure.
Medium- and large-sized enterprises want to monitor and maintain their accounts and resources on a regular basis on Huawei Cloud.
O&M Management Implementation
Huawei Cloud implements the O&M management design.
- High-Level Scenarios – Landing Zone Advanced Support
Service Item
Service Subitem
Service Content
Advanced Support – Basic Package
This incremental package requires 5 person-days from L2 experts. It applies to additional purchases when customer needs fall below the scope of L6 products in basic or medium-scale scenarios. The required service quantity is determined by project scope, deliverability, and workload.
Huawei Cloud provides Landing Zone services, including adapting automation scripts, provisioning infrastructure as a service (IaaS) resources, and providing technical enablement. These services help enterprises design and implement a scalable and efficient cloud governance architecture.
Advanced Support – Advanced Package
This incremental package requires 5 person-days from L3 experts. It is designed to meet customer requirements that go beyond the scope of the preceding L6 products, including but not limited to adapting automation scripts, provisioning IaaS resources, and providing technical enablement in Landing Zone scenarios. The quantity of service packages needed is determined by customers' project requirements, feasibility, and workload.
- Landing Zone Governance Optimization
Service Item
Service Subitem
Service Content
Landing Zone Governance Optimization – Standard – Monthly (Medium Scale)
After delivery, Huawei Cloud provides governance check and rectification specific to the five basic Landing Zone scenarios: organizational structure, identities and permissions, network management, security management, and compliance audit. Historical check records can also be queried.
After medium- and large-sized enterprises deploy a landing zone environment, they govern the five basic scenarios based on Landing Zone best practices on a regular basis.
Landing Zone Governance Optimization – Standard – Monthly (Large Scale)
Landing Zone Governance Optimization – Standard – Monthly (Ultra-large Scale)
Landing Zone Governance Optimization – Standard – Yearly (Medium Scale)
After delivery, Huawei Cloud provides governance check and rectification specific to the five basic Landing Zone scenarios: organizational structure, identities and permissions, network management, security management, and compliance audit. Historical check records can also be queried. Huawei Cloud adapts automation scripts and performs O&M for users within 5 person-days.
Landing Zone Governance Optimization – Standard – Yearly (Large Scale)
After delivery, Huawei Cloud provides governance check and rectification specific to the five basic Landing Zone scenarios: organizational structure, identities and permissions, network management, security management, and compliance audit. Historical check records can also be queried. Huawei Cloud adapts automation scripts and performs O&M for users within 10 person-days.
Landing Zone Governance Optimization – Standard – Yearly (Ultra-large Scale)
After delivery, Huawei Cloud provides governance check and rectification specific to the five basic Landing Zone scenarios: organizational structure, identities and permissions, network management, security management, and compliance audit. Historical check records can also be queried. Huawei Cloud adapts automation scripts and performs O&M for users within 15 person-days.
Landing Zone Governance Optimization – Flagship – Monthly (Medium Scale)
After delivery, Huawei Cloud provides governance check and rectification specific to the eight scenarios: organizational structure, identities and permissions, network management, security management, compliance audit, financial management, O&M management, and data boundaries. Historical check records can be queried.
Landing Zone Governance Optimization – Flagship – Monthly (Large Scale)
Landing Zone Governance Optimization – Flagship – Monthly (Ultra-large Scale)
Landing Zone Governance Optimization – Flagship – Yearly (Medium Scale)
After delivery, Huawei Cloud provides governance check and rectification specific to the eight scenarios: organizational structure, identities and permissions, network management, security management, compliance audit, financial management, O&M management, and data boundaries. Historical check records can be queried. Huawei Cloud adapts automation scripts and performs O&M for users within 5 person-days.
Landing Zone Governance Optimization – Flagship – Yearly (Large Scale)
After delivery, Huawei Cloud provides governance check and rectification specific to the eight scenarios: organizational structure, identities and permissions, network management, security management, compliance audit, financial management, O&M management, and data boundaries. Historical check records can be queried. Huawei Cloud adapts automation scripts and performs O&M for users within 10 person-days.
Landing Zone Governance Optimization – Flagship – Yearly (Ultra-large Scale)
After delivery, Huawei Cloud provides governance check and rectification specific to the eight scenarios: organizational structure, identities and permissions, network management, security management, compliance audit, financial management, O&M management, and data boundaries. Historical check records can be queried. Huawei Cloud adapts automation scripts and performs O&M for users within 15 person-days.
- Enterprise Scale Description :
- Medium scale (Landing Zone Design and Implementation for Basic Scenarios): accounts ≤ 10, VPCs ≤ 3, and in the same region
- Large scale (Landing Zone Design and Implementation for Basic Scenarios): If the requirements are not met in medium-scale scenarios, accounts ≤ 100 and VPCs ≤ 10.
- Ultra-large scale (Landing Zone Design and Implementation for Basic Scenarios): If the requirements are not met in large-scale scenarios, accounts > 100 or VPCs > 10.
- Medium scale (Landing Zone Governance Optimization): accounts ≤ 10.
- Large scale (Landing Zone Governance Optimization): accounts ≤ 100.
- Ultra-large scale (Landing Zone Governance Optimization): 100 < accounts ≤ 200.
- Landing Zone Design Service (Corporate Edition) – Basic Package: Large enterprises or government organizations require multiple sets or levels of IT functional accounts for network, security, O&M, or other purposes. Huawei Cloud provides a set of LLD documents for setting up a hybrid landing zone with multiple levels for corporate companies (including two subsidiaries). For the HQ, Huawei Cloud designs the organizational account management, multi-account resource/cost management, and data boundaries. For each subsidiary (with under 10 Huawei Cloud accounts), Huawei Cloud designs identities and permissions, network planning, security, compliance audit, and O&M management.
- Landing Zone Design Service (Corporate Edition) – Incremental Package: Large enterprises or government organizations require multiple sets or levels of IT functional accounts for network, security, O&M, or other purposes. Huawei Cloud provides an additional set of LLD documents for identities and permissions, network planning, security, compliance audit, and O&M management for multiple subsidiaries (each with under 10 Huawei Cloud accounts).
- Landing Zone Implementation Service (Corporate Edition) – Basic Package: Large enterprises or government organizations require multiple sets or levels of IT functional accounts for network, security, O&M, or other purposes. Huawei Cloud sets up a hybrid landing zone with multiple levels for corporate companies (including two subsidiaries). For the HQ, Huawei Cloud implements the organizational account management, multi-account resource/cost management, and data boundaries. For each subsidiary (with under 10 Huawei Cloud accounts), Huawei Cloud implements identities and permissions, network planning, security, compliance audit, and O&M management.
- Landing Zone Implementation Service (Corporate Edition) – Incremental Package: Large enterprises or government organizations require multiple sets or levels of IT functional accounts for network, security, O&M, or other purposes. Huawei Cloud implements an additional set of identities and permissions, network planning, security, compliance audit, and O&M management for each subsidiary (each with under 10 Huawei Cloud accounts).
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.
For any further questions, feel free to contact us through the chatbot.
Chatbot