← Back to all products

Azure Landing Zone Kit

$49

Azure Bicep/ARM templates for enterprise landing zones with governance, networking, and identity management.

📁 24 files

JSONPythonMarkdownAzure

📄 Product Preview

Try the interactive reader and demo tools below, or get the full product with all content unlocked.

📖 Interactive Reader (Free Preview) ⚙ Try Demo Tools 📦 Download Free Sample

📁 File Structure 24 files

azure-landing-zone-kit/ ├── LICENSE ├── README.md ├── bicep/ │ ├── hub-network.bicep │ ├── hub-to-spoke-peering.bicep │ ├── identity-baseline.bicep │ ├── log-analytics-workspace.bicep │ ├── main-landing-zone.bicep │ ├── management-groups.bicep │ ├── policy-assignments.bicep │ └── spoke-network.bicep ├── docs/ │ ├── architecture.md │ ├── deployment-guide.md │ ├── governance-guide.md │ ├── networking-guide.md │ └── security-considerations.md ├── examples/ │ ├── params-enterprise.json │ └── params-sandbox.json ├── free-sample.zip ├── guide/ │ ├── 01_overview.md │ ├── 02_quick-start.md │ └── 03_faq.md ├── index.html └── scripts/ ├── landing_zone_validator.py └── policy_compliance_report.py

📖 Documentation Preview README excerpt

Azure Landing Zone Kit

Enterprise-grade Bicep templates for Azure Landing Zone deployment — governance, networking, identity, and platform services following the Cloud Adoption Framework.

Built by Cloud Architecture Pro — premium reference architectures for senior cloud engineers.

Overview

This kit provides a complete set of Bicep templates to deploy an Azure enterprise landing zone aligned with the Microsoft Cloud Adoption Framework (CAF). Instead of spending weeks translating CAF documentation into IaC, deploy a production-ready landing zone with governance guardrails, hub-spoke networking, identity integration, and centralized logging in hours.

Every template is modular — deploy the full kit or pick individual components for existing environments.

What's Included

Bicep Templates (7 templates)

Template	Purpose
`bicep/main-landing-zone.bicep`	Orchestrator that deploys the full landing zone
`bicep/management-groups.bicep`	Management group hierarchy for governance
`bicep/hub-network.bicep`	Hub VNet with Azure Firewall, Bastion, and VPN Gateway
`bicep/spoke-network.bicep`	Spoke VNet with peering to hub and NSG rules
`bicep/policy-assignments.bicep`	Azure Policy for compliance enforcement
`bicep/log-analytics-workspace.bicep`	Centralized monitoring and diagnostics
`bicep/identity-baseline.bicep`	RBAC role assignments and managed identities

Documentation

Document	Description
`docs/architecture.md`	Reference architecture diagram and component breakdown
`docs/governance-guide.md`	Azure Policy strategy and management group design
`docs/networking-guide.md`	Hub-spoke topology, firewall rules, and DNS design
`docs/security-considerations.md`	Security baseline, RBAC, and compliance mapping
`docs/deployment-guide.md`	Step-by-step deployment with az CLI

Scripts & Examples

File	Description
`scripts/landing_zone_validator.py`	Validate deployment readiness and prerequisites
`scripts/policy_compliance_report.py`	Generate policy compliance summary from JSON export
`examples/params-enterprise.json`	Enterprise deployment parameters
`examples/params-sandbox.json`	Sandbox/dev deployment parameters

Prerequisites

Azure CLI 2.50+ (az --version)
Bicep CLI 0.22+ (az bicep version)
Azure subscription with Owner role (or User Access Administrator + Contributor)
Azure AD tenant with Global Administrator (for management groups)
For management groups: Tenant Root Group access enabled

Quick Start


# 1. Login and set subscription
az login

*... continues with setup instructions, usage examples, and more.*

📄 Code Sample .py preview

scripts/landing_zone_validator.py #!/usr/bin/env python3 """ Azure Landing Zone Prerequisite Validator Checks that all prerequisites are met before deploying the landing zone. Validates Azure CLI installation, login status, permissions, and resource provider registrations. Usage: python landing_zone_validator.py Author: Cloud Architecture Pro License: MIT """ import json import subprocess import sys from typing import NamedTuple class CheckResult(NamedTuple): """Result of a single validation check.""" name: str passed: bool detail: str def run_az_command(args: list[str]) -> tuple[bool, str]: """Run an Azure CLI command and return (success, output).""" try: result = subprocess.run( ["az"] + args, capture_output=True, text=True, timeout=30, ) return result.returncode == 0, result.stdout.strip() except FileNotFoundError: return False, "Azure CLI not found. Install: https://aka.ms/install-azure-cli" except subprocess.TimeoutExpired: return False, "Command timed out after 30 seconds" def check_az_cli() -> CheckResult: """Check Azure CLI installation.""" success, output = run_az_command(["version", "--output", "json"]) if success: try: versions = json.loads(output) # ... 123 more lines ...

Buy Now — $49 Back to Products