IaC Landing Zone in AWS
Frignati, Vittorio (2024)
Julkaisun pysyvä osoite on
https://urn.fi/URN:NBN:fi:amk-2024053119039
https://urn.fi/URN:NBN:fi:amk-2024053119039
Tiivistelmä
In the dynamic real of IT, cloud computing has become the cornerstone for innovation and improved operation
al efficiency across various industries. As organizations migrate to the Public Cloud, the need for managing in
creasingly complex infrastructures securely and efficiently had grown. This thesis delves into the deployment of
Infrastructure as Code (IaC) via Terraform, focusing on the development of a functional Landing Zone in AWS.
This tool aims to ensure a structured environment for deploying, managing, and maintaining cloud resources
while aligning with security, compliance, and governance frameworks.
This study explores the how IaC can automate the setup and management of integrations between AWS, Azure,
GitHub, and Terraform Cloud, focusing on building on top of an extremely wide and complex environment al
ready deeply rooted in these resources. Particular attention has been paid to how Terraform can be made sim
ple and abstracted, reducing the need for matter experts, and how CI/CD pipelines can be used to support a
living product such as the Landing Zone without needing permanent credentials.
The results highlight the role of IaC and the Landing Zone in enhancing security, efficiency, and scalability when
deploying AWS Accounts and resources. Automating cloud management via Terraform can significantly decrease
the time from ticket to deployment while reducing manual oversight and, therefore, potential errors.
The insights of this thesis aim to contribute to the ongoing conversation on the balance of complexity and effi
ciency that IaC offsets, deepening the understanding of strategic cloud infrastructure management, and offering
a solid starting point for any enterprise looking to build a fully automated Landing Zone in AWS.
al efficiency across various industries. As organizations migrate to the Public Cloud, the need for managing in
creasingly complex infrastructures securely and efficiently had grown. This thesis delves into the deployment of
Infrastructure as Code (IaC) via Terraform, focusing on the development of a functional Landing Zone in AWS.
This tool aims to ensure a structured environment for deploying, managing, and maintaining cloud resources
while aligning with security, compliance, and governance frameworks.
This study explores the how IaC can automate the setup and management of integrations between AWS, Azure,
GitHub, and Terraform Cloud, focusing on building on top of an extremely wide and complex environment al
ready deeply rooted in these resources. Particular attention has been paid to how Terraform can be made sim
ple and abstracted, reducing the need for matter experts, and how CI/CD pipelines can be used to support a
living product such as the Landing Zone without needing permanent credentials.
The results highlight the role of IaC and the Landing Zone in enhancing security, efficiency, and scalability when
deploying AWS Accounts and resources. Automating cloud management via Terraform can significantly decrease
the time from ticket to deployment while reducing manual oversight and, therefore, potential errors.
The insights of this thesis aim to contribute to the ongoing conversation on the balance of complexity and effi
ciency that IaC offsets, deepening the understanding of strategic cloud infrastructure management, and offering
a solid starting point for any enterprise looking to build a fully automated Landing Zone in AWS.