Week 1
Architecting Landing Zones Curriculum
Public curriculum preview for visitors and enrolled students. Use this page to evaluate module scope, outcomes, and learning path.
Curriculum
Architecting Landing Zones
Design, implement, and operate enterprise-grade cloud landing zones with governance, security, networking, and operational excellence baked in from day one.
Duration: 14 Weeks
Level: Advanced
Study Time: 2 hours/week + labs
School: Cloud & DevOps
Welcome to Architecting Landing Zones! 🎓
This 14-week advanced curriculum is designed for cloud engineers and platform teams responsible for building enterprise landing zones that are secure, governable, and scalable from day one.
You will move from strategy and architecture through identity, networking, policy-as-code, observability, compliance, and onboarding operations, producing practical deliverables each week that mirror real platform engineering work.
Your success is our priority. By the end of this course, you will be able to design and deliver a production-ready landing zone with clear governance controls, operational guardrails, and audit-ready documentation.
Prerequisites
- Working knowledge of cloud fundamentals and virtual networking.
- Basic understanding of IAM concepts and policy-based access control.
- Comfort with infrastructure automation concepts and CLI-based workflows.
- Readiness to document architecture decisions and operational runbooks.
Essential Resources
- Microsoft Cloud Adoption Framework and Azure Landing Zone reference architecture.
- AWS multi-account and control tower governance guidance for cross-cloud comparison.
- Terraform documentation for policy checks, modules, and remote state controls.
- Well-Architected frameworks and platform engineering operating model references.
Learning Roadmap
- Weeks 1-3 (Foundation): Strategy, identity model, and hierarchy design.
- Weeks 4-6 (Platform Core): Networking blueprint, hybrid integration, and security baselines.
- Weeks 7-10 (Operations): Observability, FinOps controls, IaC modules, and platform CI/CD.
- Weeks 11-14 (Governance to Delivery): Workload onboarding, compliance, resilience, and capstone defense.
Detailed Weekly Curriculum
Each week includes outcomes and practical lab work aligned to the curriculum structure.
2 hours + labs
Week 2
Identity at Scale
Week 3
Governance & Guardrails
Week 4
Hub-and-Spoke Networking
Week 5
Shared VPCs & Private Link
Week 6
Centralized Security
Week 7
Centralized Logging
Week 8
The Account Factory
Week 9
Account Customizations
Week 10
Deep Dive: AFT
Week 11
Standardization & Blueprints
Week 12
Landing Zone Drift & Lifecycle Management
Week 13
State Management & Scaling Strategies
Week 14
Final Project: The Corporate Handover
Capstone Projects
Project 1: Landing Zone Specialist Curriculum Foundation Build
Deliver a concrete foundation implementation covering the first phase of the curriculum.
- Implement and validate The "Why" of Landing Zones.
- Integrate Identity at Scale with reusable workflow standards.
- Publish evidence for Governance & Guardrails with test and quality artifacts.
Project 2: Landing Zone Specialist Curriculum Integrated Systems Build
Combine mid-program competencies into a production-style integrated workflow.
- Build an end-to-end flow around Shared VPCs & Private Link and Centralized Security.
- Add controls, observability, and rollback paths for reliability.
- Document architecture decisions and trade-offs tied to Centralized Logging.
Project 3: Landing Zone Specialist Curriculum Capstone Delivery
Ship a portfolio-ready capstone with measurable outcomes and stakeholder-ready presentation.
- Deliver a complete implementation centered on Standardization & Blueprints.
- Validate readiness for Landing Zone Drift & Lifecycle Management using objective acceptance checks.
- Present final defense and roadmap based on State Management & Scaling Strategies outcomes.