Skip to main content

Setting Up Your AWS Landing Zone

Overview​

The AWS Landing Zone provides a secure, well-architected starting point for your enterprise GenAI applications. This guide walks you through the initial setup process.

Account Structure​

Root Account
├── Security
│   ├── GuardDuty
│   ├── SecurityHub
│   └── IAM
├── Logging
│   ├── CloudWatch
│   └── CloudTrail
├── Shared Services
│   ├── VPC
│   └── DirectConnect
└── Workloads
    ├── Development
    ├── Staging
    └── Production

Initial Setup Steps​

  1. Create AWS Organization
aws organizations create-organization
  1. Enable AWS Control Tower
  • Navigate to AWS Control Tower Console
  • Select "Set up landing zone"
  • Choose your home Region
  • Configure your logging account
  1. Configure Security Services
# Enable GuardDuty
aws guardduty create-detector --enable

# Enable SecurityHub
aws securityhub enable-security-hub

Next Steps​

  1. Review our implementation guides
  2. Set up your security controls
  3. Deploy your first workload

[Detailed setup instructions and code examples available in our repositories]