Hitachi Azure Landing Zone Accelerator - Standard version

This is a paid offer, designed by Hitachi Digital Services, implements greenfield Azure Landing Zone based on the Microsoft Cloud Adoption Framework. It is developed on cloud agnostic Infrastructure as Code (IaC) tool "Terraform". Best practices for naming, tagging, governance and security is being followed during implementation. It is built on top of "Basic" version with enhances cloud security, Automation, Backup, Secure Remote Connectivity and DevOps self hosted VM agent. This implementation can be further upgraded to "Enterprise" version which completely aligns with Microsoft CAF and provides private connectivity to Azure Services. The solution is customizable to certain extent (Security rules, names, IP Schema inclusion and exclusion of resources etc,). Any resource which is not listed below can also be deployed with extra time and efforts.

The Accelerator provides the following benefits: - • Speed: The version can be deployed in your environment as soon as 3 weeks of time including customization. • Scalability : The Standard version can be further upgraded to “Enterprise” version at later stage as per evolving cloud requirements. • Security : Our Accelerator enforces Cloud security best practices from Microsoft and the market. It includes Standard Azure Firewall and Azure Firewall Policy with option to customize firewall rules. It also protects the networks from DDoS attacks. • Governance: It promotes governance policies and frameworks. • Cost Optimization: The solution is designed in cost optimized way, predictable and consistent cost for deployed solution over a period.

The Standard version relies on the following Azure Services: - • Application Gateway v1 • Automation Account • Azure DevOps CI/ CD YAML pipelines • Azure DevOps Organization Setup • Azure Firewall Instance (Standard) • Azure Firewall Policy (Standard) • Azure Key Vault • Bastion Host • DDoS Protection Plan • DevOps Self Hosted Agent VM • Domain Controller VMs • Log Analytics Workspace • Microsoft Sentinel • Network Security Group • Recovery Service Vault • Routing Tables • Storage Account • Virtual Network Peering • Virtual Networks and Subnets • Vnet Gateway • WAF Policy

• To access the Standard version : Please reach out to us by clicking on the "Contact Us" button. ** For enhanced versions of Azure Landing Zone (Enterprise and Global Enterprise) implementation, please contact us.