Landing zones

A production foundation for each major cloud: network, identity, keys, logging and alerting, wired in the order they depend on each other. Every piece is a module that was verified on its own before it was composed - so you can take the whole foundation, or take the three parts you were missing.

AWS·17 modules·✓ root live-tested

AWS Production Landing Zone

Multi-AZ VPC and KMS on everything; CloudFront, Fargate and Aurora one flag away.

Azure·11 modules·✓ root live-tested

Azure Production Landing Zone

VNet, Key Vault and a workload identity; Container Apps behind a WAF one flag away.

Google Cloud·14 modules·✓ root live-tested

GCP Production Landing Zone

One shared Cloud NAT, CMEK throughout, Cloud Run behind a global HTTPS load balancer.

Oracle Cloud·8 modules

OCI Production Landing Zone

IAM, VCN and a Vault key on the shared vault - not the private one at ~$294/mo.

Looking for a runtime to put on top? Stacks has these four alongside the EKS and GKE container platforms.