Skip to main content
Version: 2203.1

Getting started

Deploy your first platform landing zones​

In this tutorial you are going to learn how to build the Azure Platform Landing zones with the Azure Terraform SRE (CAF) for Azure Terraform landing zones. It is a framework that requires to have both advanced knowledge of Terraform and Azure services.

It is assumed the reader has already deep knowledge of the CAF (https://aka.ms/caf). It is recommended to be certified to the Azure Architecture track.

This tutorial will guide you on how to deploy the Platform landing zones and includes:

  • Azure Remote State management (launchpad)
  • Azure landing zones (formerly called Enterprise-Scale) for management groups, policy definitions, policy assignments and RBAC
  • Identity services (Azure Active Directory Services, extend your on-premise Active Directory Domain Services...)
  • Monitoring services
  • Connectivity services (virtual WAN, private DNS zones, egress firewall...)

The steps in the tutorial will guide you through the following process:

Creation of Azure landing zones environment