Home / Case studies / Multi-cloud reference architecture landing zone
Deepskilling Case studies
Multi-cloud reference architecture landing zone
Student and early-career capstone: portable IaC with cost and security controls
Industry: Cloud platform engineering
Challenge
Learners needed a portfolio artefact that proved they could design a secure landing zone—not a single-account “hello Terraform” demo.
Approach
- Defined shared modules for network, identity baselines, and logging sinks on AWS and Azure.
- Added CI for plan/apply with policy checks and cost estimates on every change.
- Documented blast-radius limits and break-glass procedures as part of the deliverable.
Outcomes
- Capstone reviews used a production-style rubric: least privilege, observability, and cost visibility.
- Graduates reused modules in interviews as a concrete architecture walkthrough.
Stack
Terraform · AWS · Azure · GitHub Actions · Policy-as-code
Lessons
- Portability is a product requirement—document what intentionally differs per cloud.
- Cost and security evidence belong in the same demo as the happy-path deploy.