Typically one per Microsoft Entra tenant, this is the shared core that everything else rests on. It comprises the management group structure, common services for networking, identity, management and security, and the route by which teams receive their own landing zones.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Platform landing zone in context, with comparison tables and the common traps.
Terms in this definition
- Microsoft Entra tenant
Instance of the Entra ID directory dedicated to an organisation, with an initial .onmicrosoft.com domain picked when it is created. Every Azure subscription trusts one tenant only.
- Management group
An Azure scope that sits over subscriptions. Policies and role assignments set there flow down to every subscription, resource group and resource it contains.
- IDENTITY
A column property, written IDENTITY(seed, increment), that gives each new row the next number in a rising sequence. SCOPE_IDENTITY reports the latest value created in the current scope, and a rolled-back transaction still uses up the numbers it took.
Related terms
- Azure landing zone
The architecture Microsoft recommends for running a multi-subscription Azure environment that is governed, secure and able to scale. It consists of a single platform landing zone plus workload landing zones operating inside the guardrails it provides.
- Platform team
Owns the build and day-to-day running of the platform landing zone. Workload teams rely on it for common services, guardrails and self-service tools like subscription vending.
- Sovereign Landing Zone
Builds on the Azure platform landing zone's design principles and library, adding sovereignty measures such as keeping data in a region, customer-managed keys and confidential computing. It is not meant to replace an Azure landing zone already in place.
- Starter module
A choice made while bootstrapping the Azure landing zone IaC accelerator: which template the platform code starts from, for example platform_landing_zone (offered in Bicep and Terraform). You then pick a scenario and set its options.