Please enable JavaScript.

Coggle requires JavaScript to display documents.

Landing Zone Design - Coggle Diagram

- - - - create a module for creating a new project with all the required security policies, a module for a new VPC network, and a module for setting up logging and monitoring.
  - - - Prevents serial port access on VMs.
        Disallows public IP addresses on VMs.
    - - Security Command Center for a unified view
    - - Defense-in-depth strategy.
        
        Hierarchical Firewall Policies
        
        VPC Service Controls
        
        Cloud Armor
  - - - Absolute minimum required to start: the organization node, a central billing account, and the initial set of top-level folders. This phase also sets up the CI/CD pipeline and the state backend for your IaC (e.g., a Cloud Storage bucket).
    - - Deploy the shared services that all "tenants" will use.
        the central networking hub (for a hub-and-spoke model), centralized logging sinks, and foundational IAM groups and roles.
    - - Terraform module that allows application teams to provision their own isolated environments (projects). This "project factory" should automatically apply the governance policies and security controls defined in the design phase.