Loading...

Implement Azure landing zones with HashiCorp Terraform

Implement Azure landing zones with HashiCorp Terraform

In our first blog post, we outlined the Azure landing zone conceptual architecture as the strategic design path for your Azure environments target technical state. Not all organizations adopt Azure in the same way and, similarly, not all organizations use the same tools to implement landing zones. We highlighted the Azure landing zone accelerator, which utilizes the Azure Portal to speed up your implementation — allowing you to customize environment configurations with the option of GitHub integration that sets up CI/CD pipelines for infrastructure as code (IaC) DevOps practices.  To accelerate organizations using HashiCorp Terraform and in co-development partnership with HashiCorp, we released the Terraform Module for Cloud Adoption Framework Enterprise-scale (caf-enterprise-scale). Just like the Azure landing zone accelerator, the caf-enterprise-scale module aligns with the Azure landing zone conceptual architecture and provides an alternate path to the same outcome as the Azure landing zone accelerator. This is another example of our collaborative joint engineering investment with our partner Hashicorp.

 

Operability of your cloud infrastructure and workloads is key to cloud adoption success and Azure landing zones provide prescriptive guidance to set a well-architected foundation for your Azure infrastructure. In partnership with HashiCorp and our Terraform Azure community, we now have the reference implementation for deploying and managing Azure resources at enterprise scale generally available in the Terraform registry. This is a great opportunity for Azure and HashiCorp customers to accelerate their cloud migration through vetted guidance.” 

Madhan Arumugam Ramakrishnan, VP WW Customer Success


The Terraform module for Cloud Adoption Framework Enterprise-scale provides a framework for customers to migrate and manage enterprise workloads to Azure using infrastructure as code. We are excited to see the results that this will have for Azure and Terraform customers looking to accelerate their cloud implementation journey, and look forward to our continued investments together.

— Burzin Patel, VP Global Partner Alliances, HashiCorp

In the figure below, you can see the Azure landing zone conceptual architecture resources that are delivered by the Terraform Enterprise-scale (caf-enterprise-scale) module. The Azure landing zones guidance for Enterprise-scale architecture prepares your organization for long-term self-sufficiency. This module provides a recommended approach for deploying and managing the Azure landing zone architecture using Terraform. Depending on the options selected, this module can deploy resources for each of the following capabilities as needed:

Module Resource Type

Azure landing zone design area:

Core Resources

Foundation core capability of this module deploys

Management Resources

Management

Connectivity Resources

Network Topology and Connectivity

Identity Resources

Identity and Access Management

 

These resources can be deployed to multiple Subscriptions by setting the Provider Configuration on the module block. The User Guide provides additional guidance on how to customize your deployment using the advanced configuration options for this module, and the additional examples in our documentation can also be used to get you started quickly.

 

We’ve also partnered up with the amazing team at HashiCorp to create a tutorial based on the module posted in the HashiCorp Learn site. The Deploy the Microsoft Cloud Adoption Framework Enterprise-Scale Module tutorial will walk you through how to use and customize the module.

 

In this tutorial, you will learn how to:

  • Deploy the core and demo landing zones. The core landing zones manage and organize user workloads to provide the services and governance that the Cloud Adoption Framework recommends. The demo landing zones represent sample landing zones that your infrastructure team would deploy to give downstream teams access to infrastructure for their workloads.
  • Deploy a custom landing zone. This simulates a workflow you can use to deploy landing additional, CAF-compliant infrastructure for teams within your organization.
  • Add logging and security with the management submodule.
  • Create subnets, DNS zones, and policies with the connectivity module.

Check out the Terraform Module for Cloud Adoption Framework Enterprise-scale landing zone

Microsoft DevRadio:  Terraform Module for Cloud Adoption Framework Enterprise-scale Walkthrough

Get started with the HashiCorp Learn Tutorial: Deploy the Microsoft Cloud Adoption Framework Enterprise-Scale Module

Check out our Channel 9 episodes on Azure landing zones today, on IT Ops Talk and the Azure Enablement Show!

Published on:

Learn more
Azure Migration and Modernization Blog articles
Azure Migration and Modernization Blog articles

Azure Migration and Modernization Blog articles

Share post:

Related posts

Powering Real-Time Gaming Experiences with Azure Cosmos DB for NoSQL

Scenario: When Every Millisecond Counts in Gaming Imagine millions of players logging in at the exact moment a new game season launches. Leade...

5 hours ago

Access Azure Virtual Desktop and Windows 365 Cloud PC from non-managed devices

Check out this article via web browser: Access Azure Virtual Desktop and Windows 365 Cloud PC from non-managed devices Many organizations use ...

1 day ago

Power Pages + Azure AD B2C: “The Provided Application Is Not Valid” Error

If you are new to configuring Azure AD B2C as Identity Provider in Power Pages, refer Power Pages : Set up Azure AD B2C After completing the s...

5 days ago

Semantic Reranking with Azure SQL, SQL Server 2025 and Cohere Rerank models

Supporting re‑ranking has been one of the most common requests lately. While not always essential, it can be a valuable addition to a solution...

7 days ago

How Azure Cosmos DB Powers ARM’s Federated Future: Scaling for the Next Billion Requests

The Cloud at Hyperscale: ARM’s Mission and Growth Azure Resource Manager (ARM) is the backbone of Azure’s resource provisioning and management...

7 days ago

Automating Business PDFs Using Azure Document Intelligence and Power Automate

In today’s data-driven enterprises, critical business information often arrives in the form of PDFs—bank statements, invoices, policy document...

22 days ago

Azure Developer CLI (azd) Dec 2025 – Extensions Enhancements, Foundry Rebranding, and Azure Pipelines Improvements

This post announces the December release of the Azure Developer CLI (`azd`). The post Azure Developer CLI (azd) Dec 2025 – Extensions En...

25 days ago
Stay up to date with latest Microsoft Dynamics 365 and Power Platform news!
* Yes, I agree to the privacy policy