Azure Landing Zone Architecture: Governance, Autonomy and Platform Design
How to design an Azure landing zone that balances subscription autonomy with governance across identity, policy, networking, operations and FinOps.
Original, implementation-focused writing for engineering and technology leaders making decisions about FinOps, AWS, Kubernetes, migration, DevOps and SRE.
How to build a durable Azure FinOps practice across cost data, workload ownership, rightsizing, Reservations, Savings Plans and unit economics.
Read the guide19 practical guides and field notes
How to design an Azure landing zone that balances subscription autonomy with governance across identity, policy, networking, operations and FinOps.
An Azure migration framework for portfolio assessment, workload decisions, landing zone readiness, migration waves, data cutover and source retirement.
How to design a secure Azure delivery system using trusted artifacts, infrastructure as code, federated identity, safe deployment, AKS and DORA metrics.
How to build a Google Cloud FinOps practice using billing exports, ownership, rightsizing, GKE, BigQuery, CUDs and business unit economics.
How to design a Google Cloud landing zone across resource hierarchy, IAM, Organization Policy, Shared VPC, security, operations and FinOps.
A Google Cloud migration framework for continuous discovery, workload decisions, foundation readiness, migration waves, data cutover and source retirement.
How to design secure Google Cloud delivery and SRE using pipeline identity, Cloud Deploy, GKE, canaries, SLOs, error budgets and DORA metrics.
Build a practical FinOps operating model for allocation, forecasting, anomaly response, commitment management and cloud unit economics.
Optimize Kubernetes cost across EKS, AKS and GKE through allocation, pod rightsizing, autoscaling, node efficiency and reliability controls.
Run an evidence-based AWS Well-Architected Review, prioritize findings by business risk and turn recommendations into a funded improvement plan.
Plan a secure cloud migration with portfolio discovery, the 7 Rs, landing zones, dependency-based waves, tested cutovers and operating readiness.
Design a DevOps and SRE operating model that connects service ownership, secure CI/CD, SLOs, incident learning, platforms and DORA metrics.
Reduce AWS costs with a structured plan for billing data, ownership, EC2, storage, databases, networking, commitments and financial guardrails.
Compare AWS Savings Plans and Reserved Instances by flexibility, discount scope, capacity, risk and workload fit before building a commitment portfolio.
Compare a DevOps consultant, permanent hire and hybrid model by urgency, ownership, capability, continuity, cost, risk and knowledge transfer.
Build a credible DevOps career through systems fundamentals, cloud, infrastructure as code, CI/CD, containers, observability and portfolio evidence.
Reduce cloud cost through risk-classified changes, SLO evidence, staged validation, rollback planning and verified savings across AWS, Azure and GCP.
Define credible SLIs, SLO targets, error budgets and burn-rate alerts that connect customer experience with engineering and product decisions.
Design internal developer platform golden paths with product research, self-service workflows, secure defaults, extension points and adoption metrics.