terraform-oci-open-lz
terraform-oci-open-lz copied to clipboard
oracle-quickstart
The OCI Open LZ is an open and secure landing zone blueprint to simplify the onboarding and running of organizations, business units, and subsidiaries into OCI - by customers, partners, or ISVs. Use i...
The OCI Open LZ
A Repository to Simplify the Onboarding and Running of OCI
Welcome to the OCI Open LZ, a set of open assets and best practices to simplify the onboarding and running of OCI.
The objective of the OCI Open LZ is to provide:
- A Blueprint: A complete SecNetOps landing zone design, ready to onboard an enterprise organization and its functional divisions – identified as Operating Entities (OEs). You can use it directly, or use it to tailor your new landing zone.
- An Operating Model: a complete cloud-native / gitops runtime to simplify and scale day two operations, focusing on IaC configurations and not on code.
- Enablement: to our customers, partners, independent software vendors (ISV), and the general IT community to create, configure, and run OCI landing zones with lower efforts and reduced timeframes.
- A Catalogue: as the entry point to find more landing zone variations, related designs, extensions, and IaC configurations.
How to Start
This repository is the source of truth for the OCI Open LZ, where you can find all the materials to design, configure, and run OCI landing zones. The following activities are proposed as guidance to create your OCI-tailored landing zone.
| # | ACTIVITY | ASSETS | DESCRIPTION |
|---|---|---|---|
| 1 | PREPARE | 5 Steps in 5',A Blueprint to Onboard and Run OCI | These sessions discusses the differences between standard and tailored landing zones, presenting the OCI Open LZ Blueprint tailored views and running a demo. |
| 2 | ENABLE | OCI Learn LZ | Use the OCI Learn LZ exercises to understand how to design and configure OCI Landing Zones. |
| 3 | DESIGN | OCI Open LZ Blueprint | Use the OCI Open LZ blueprint to design your functional, security, network, and operations view, with all the diagrams in a reusable format. Other landing zone models are also available. |
| 4 | CONFIGURE | OCI Open LZ Runtime View | Use the OCI Open LZ runtime configurations as your IaC templates. These configurations are easily adjustable to any other landing zone model and are run with OCI Open LZ Terraform Orchestrator Module on top of the CIS Landing Zone Enhanced Modules. |
| 5 | RUN | OCI Open LZ Terraform Orchestrator | Use the OCI Open LZ orchestrator to run an operation on several resource types into one consolidated execution. It supports any OCI landing zone configuration, including - but not limited to – the OCI Open LZ. Use the orchestrator with your configurations or with the provided operations examples using Terraform CLI or Oracle Resource Manager (ORM). |
Approach Considerations
A landing zone can be set up in different ways and can take different amounts of time to implement. There are mainly two types of approaches:
- Standard and prescribed approaches are the recommended starting point and can take hours to days to set up. This option enables quick start cloud adoption with a set of recommended best practices with a prescriptive design. For more details on this type of approach, also known as standard landing zones, please refer to the CIS Landing Zone or OELZ.
- Tailored approaches focuses on creating a landing that fits your requirements completely. They usually cover security, network, and operational topics, and can onboard a complete enterprise organization with one cloud operating model. This option is recommended when the standard approach is not enough (e.g., large organizations with fine-tuned security or network requirements, large and heterogeneous workloads landscape with multi-cloud scenarios, etc.) and experience tells us it can take from days to weeks to set up – depending on requirements and team expertise.
The OCI Open LZ is an example of the outcome of the latter approach, a tailored landing zone, and one of its purposes is to help reduce the design time, associated cost, and effort.
For more details on other approaches and assets please refer to Oracle Landing Zones.
License
Copyright (c) 2024 Oracle and/or its affiliates.
Licensed under the Universal Permissive License (UPL), Version 1.0.
See LICENSE for more details.
Metadata
Owner
oracle-quickstart
Metadata
The OCI Open LZ is an open and secure landing zone blueprint to simplify the onboarding and running of organizations, business units, and subsidiaries into OCI - by customers, partners, or ISVs. Use i...