Overall Architecture

We provide the following Landing Zone reference architecture based on Huawei Cloud's practices and extensive delivery experience. This architecture involves nine domains: organization and account management, identity and permissions management, centralized network management, resource sharing management, unified security management, unified compliance audit, unified O&M management, unified financial management, and data perimeters.

Figure 1 Landing Zone reference architecture

The resources of the nine domains are managed by specific accounts. For example, organization and account management is implemented in the master account (management account), and centralized network management is implemented in the network operations account. The following table lists the accounts for these domains.

The previous sections detailed the design of organizations and accounts. The following sections will describe the designs of the other eight domains.