Search the practice set
126 questions, 454 terms and 400 topics in 20 areas.
14 results for “Landing Zones”
Account Vending
Automated creation of new cloud accounts pre-configured with the organisation's networking, identity, logging, guardrails and cost allocation.
Service Control Policy
An organisation-level guardrail that limits what any identity in an account may do, regardless of the permissions granted within that account.
Landing Zone
A pre-configured, governed cloud environment — accounts, networking, identity, logging, guardrails — into which workloads can be deployed safely.
Blast Radius Reduction
The set of deliberate partitions — accounts, regions, zones, cells, tenants, deployment stages — that bound how far any single failure or compromise can reach.
Cross-Zone Data Transfer
Charges incurred when data moves between availability zones within a region — invisible on architecture diagrams and a recurring surprise on cloud bills.
Cross-Zone Load Balancing
Whether a load balancer node distributes traffic to targets in all zones or only its own — a setting that affects both balance and data transfer cost.
Egress Cost
The charge for moving data out of a cloud provider or across its zones and regions — usually the least-anticipated line on a cloud bill.
Microsegmentation
Enforcing fine-grained network policy between individual workloads rather than between broad network zones, so a compromise cannot move laterally.
Zonal vs Regional Services
Whether a cloud resource lives in one availability zone or is inherently spread across several — a property that determines what a zone failure takes with it.
An organisation is starting cloud adoption. Three teams want to deploy next month. What must exist first, and what can wait?
What must exist before anything reaches production Account structure. Separation by environment and by workload, because an account is the strongest isolation b
One availability zone becomes unavailable. Walk through what happens to a typical three-tier application and what you would have changed.
What survives and what does not Load balancer — regional, survives, and stops routing to targets in the failed zone once health checks fail. Note the detection
Landing Zones
A governed foundation of accounts, network, identity and guardrails.
Availability Zones
The unit of correlated physical failure, and what zones do not protect against.
Fault Isolation
Cells, zones, tenants and the partitions that bound a failure.