What are landing zones and why do we need them?
A landing zone is a reference architecture for a multi-account AWS environment. It provides a set of foundational resources and best practices that you can use as a starting point for your infrastructure.
A landing zone typically includes the following components:
- A core account: This is the primary account that contains the shared resources for the environment, such as the landing zone itself and the Identity and Access Management (IAM) resources.
- One or more member accounts: These are the accounts that contain the resources for your applications and workloads. The member accounts are linked to the core account and inherit the shared resources and policies from the core account.
- A networking layer: This includes the Virtual Private Clouds (VPCs) and other networking resources that are shared across the accounts.
- A security layer: This includes the IAM policies and other security resources that are shared across...
