Deploy the Enterprise Landing Zone

You can deploy both the Baseline and Workload Expansion flavors of an Enterprise Landing Zone either by automatically deploying a Terraform stack or by going to the respective GitHub repository and completing the process manually. You deploy an Enterprise Baseline Landing Zone from the OCI console, which makes it simple to deploy every product scope, from a basic template to enterprise scale. Before commencing with deployment, however, you should review the principles guiding deployment from the OCI console.

Review the OCI Console Deployment Principles

When you're deploying this architecture from the OCI console, be aware of these deployment principles:
  • Start Small and Scale

    The Quickstart version of the Enterprise Scale Baseline Landing Zone allows you start with a small deployment then scale it to best fit your needs. This reference architecture makes more than 40 decision points across multiple OCI services including Security, Identity, Networking and more to provide a best practice deployment. You only need to provide a suitable compartment and decide whether you want to enable Audit and/or Flow Logging and you are ready to deploy. This deployment will take 10 minutes and allow you to get up and running by including support for deploying a single workload into OCI.

  • Enterprise Scale Baseline Landing Zone

    This reference architecture provides an enterprise-scale architecture and deployment that includes designs for governance, security segmentation, and separation of duties. Deploy multiple workloads with separate networks for isolation and access, add private connectivity to your environment from on-premise locations by using FastConnector Site-to-Site VPN, and optionally federate with Microsoft Active Directory.

Deploy the Appropriate Landing Zone

The Terraform code for both the Baseline and Workload Expansion architectures is available as a sample stack in Oracle Cloud Infrastructure Resource Manager. You can also download the code from GitHub, and customize it to suit your specific requirements.

  • Deploy using the sample stack in Oracle Cloud Infrastructure Resource Manager:
    1. Click the button appropriate to the architecture you want to deploy:

      If you aren't already signed in, enter the tenancy and user credentials.

    2. Select the region where you want to deploy the stack.
    3. Follow the on-screen prompts and instructions to create the stack.
    4. After creating the stack, click Terraform Actions, and select Plan.
    5. Wait for the job to be completed, and review the plan.

      To make any changes, return to the Stack Details page, click Edit Stack, and make the required changes. Then, run the Plan action again.

    6. If no further changes are necessary, return to the Stack Details page, click Terraform Actions, and select Apply.
  • Deploy using the Terraform code in GitHub:
    1. Go to the GitHub repository for the architecture you want to deploy:
    2. Clone or download the repository to your local computer.
    3. Follow the instructions in the README document.