01
Clarify business units, regulatory boundaries and platform ownership
Apply this point to a real Kubernetes & AKS Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
Kubernetes & AKS Academy · Architecture Explorer
Azure Landing Zone Architecture
Design a governed Azure foundation covering identity, management groups, subscriptions, networking, policy and platform operations.
Objective: Create a scalable landing-zone model that enables application teams while preserving enterprise guardrails.
Practical guidance
Business context and requirements
02
Define workload archetypes, environments and subscription demand
Apply this point to a real Kubernetes & AKS Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
03
Capture connectivity, identity, data-residency and recovery requirements
Apply this point to a real Kubernetes & AKS Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
Practical guidance
Architecture and design decisions
01
Design the management-group and subscription hierarchy
Apply this point to a real Kubernetes & AKS Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
02
Select platform subscriptions for connectivity, identity and management
Apply this point to a real Kubernetes & AKS Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
03
Define policy, RBAC, naming, tagging and deployment patterns
Apply this point to a real Kubernetes & AKS Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
Practical guidance
Security, cost and operating model
01
Apply least privilege, privileged access and central logging
Apply this point to a real Kubernetes & AKS Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
02
Establish FinOps allocation, budgets and lifecycle controls
Apply this point to a real Kubernetes & AKS Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
03
Define platform support, exception and change-management processes
Apply this point to a real Kubernetes & AKS Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
Practical guidance
Validation, resilience and evolution
01
Validate policy inheritance, route paths and access boundaries
Apply this point to a real Kubernetes & AKS Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
02
Test onboarding, incident response and subscription vending
Apply this point to a real Kubernetes & AKS Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
03
Review the design against growth, sovereignty and exit requirements
Apply this point to a real Kubernetes & AKS Academy design, delivery or operational scenario and record the evidence used to validate the outcome.