Cloud Computing
Cloud Landing Zones, Guardrails and Account Governance
This in-depth course develops directly applicable capability in Cloud Landing Zones, Guardrails and Account Governance. It connects Landing Zone Operating Model, Identity and Access Foundation, and Network, Logging, and Security Baselines to the decisions, controls, and activities participants need to perform in their workplace.
Overview
Practical learning for workplace transfer.
This in-depth course develops directly applicable capability in Cloud Landing Zones, Guardrails and Account Governance. It connects Landing Zone Operating Model, Identity and Access Foundation, and Network, Logging, and Security Baselines to the decisions, controls, and activities participants need to perform in their workplace. The five-module curriculum progresses toward Landing Zone Design Workshop, using evidence, scenarios, and work products appropriate to the subject.
Objectives
- Analyze landing zone operating model, including organization hierarchy, accounts, subscriptions, projects, and ownership.
- Configure or structure identity and access foundation, including federation, workforce identity, service identities, and break-glass access.
- Evaluate network, logging, and security baselines, including hub-and-spoke and transit network patterns.
- Manage account vending and policy as code, including automated enrollment, naming, tagging, budgets, and quotas.
- Apply landing zone design workshop, including map enterprise requirements into a hierarchy and control matrix.
Target audience
- Professionals responsible for this subject area
- Managers, supervisors, and team leaders
- Analysts, specialists, engineers, or coordinators working with the relevant processes
- Project, implementation, assurance, or improvement team members
- Professionals preparing for broader responsibilities in this field
Program outline
A clear structure for the learning journey.
Program outline
Outline points are grouped in one designed block instead of being treated as separate module cards.
Module 1: Landing Zone Operating Model
Organization hierarchy, accounts, subscriptions, projects, and ownership
Platform team, workload team, security, and finance responsibilities
Provisioning workflow and policy exception authority
Module 2: Identity and Access Foundation
Federation, workforce identity, service identities, and break-glass access
Privileged access workflows and separation of duties
Baseline role design and cross-account access
Module 3: Network, Logging, and Security Baselines
Hub-and-spoke and transit network patterns
Central logs, security telemetry, keys, secrets, and configuration inventory
Preventive policies and detective controls
Module 4: Account Vending and Policy as Code
Automated enrollment, naming, tagging, budgets, and quotas
Guardrails through organization policies and infrastructure pipelines
Versioning, testing, waivers, and drift remediation
Module 5: Landing Zone Design Workshop
Map enterprise requirements into a hierarchy and control matrix
Design an account-vending and exception workflow
Assess a workload onboarding request against guardrails
Materials provided
- ○ Course-specific presentation slides
- ○ Guided exercises, scenarios, or configured-environment activities appropriate to the subject
- ○ Course-specific worksheets, checklists, or calculation templates
- ○ Applied workplace case materials
- ○ 4D Certificate of Completion issued by 4D Training & Consultancy
- ○ Post-course support for implementation questions
Training Options
Programs can be delivered in-house, online, or in a blended format depending on your team's schedule, location, and learning objectives. When an external certificate or exam is included, certification rules and fees remain under the relevant awarding body's policies, while 4D provides the training and preparation support.
Why choose 4D
4D Training & Consultancy adapts the program to the client’s operating environment. Delivery combines structured explanation with subject-specific analysis, exercises, and implementation decisions so participants can transfer the learning to real responsibilities without implying vendor authorization.
Related courses
Advanced FinOps and Cloud Cost Governance
This practical course helps professionals master advanced FinOps, cloud cost governance, tagging, budgeting, rightsizing, showback, chargeback, and optimization. The program connects key concepts, real use cases, risks, tools, and operational decisions so participants can apply the learning in their work environment. It can be tailored to the organization’s sector, internal systems, participant maturity, and performance objectives.
View courseAWS Advanced Networking Specialty Practical Training
This practical course helps professionals master AWS advanced networking, VPC design, hybrid connectivity, routing, security, DNS, load balancing, and operations. The program connects key concepts, real use cases, risks, tools, and operational decisions so participants can apply the learning in their work environment. It can be tailored to the organization’s sector, internal systems, participant maturity, and performance objectives.
View courseAWS Certified Cloud Practitioner
Build a solid foundation in Amazon Web Services with our AWS Certified Cloud Practitioner Training. This beginner friendly course introduces the core concepts of AWS cloud computing, including fundamental services, basic architecture, security and compliance, pricing models, and cloud economics. Designed for individuals new to the cloud, this training equips you with the essential knowledge to understand AWS’s value proposition and confidently communicate AWS cloud benefits within your organization. By the end of this training, participants will be able to: Understand AWS cloud concepts, terminology, and core services, identify basic AWS architecture components and their use cases, explain AWS security and compliance fundamentals, describe AWS pricing, billing models, and cost management best practices, understand AWS cloud deployment models and cloud economics and prepare confidently for the AWS Certified Cloud Practitioner exam.
View course