Skip to main content

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Share your experience with the FAS IT-Playbook by taking this brief survey

Cloud Offerings Landing Zones

What Landing Zones Offer

The primary environment (operating model + corresponding offerings) for which a given tenant workload is aligned as determined through cloud advisory and enablement.

  • The landing zone operating model affects the sets of roles and responsibilities required of tenant vs. cloud ecosystem
  • Multiple landing zones balance business needs with continued enterprise standardization
  • The intended landing zone for a tenant workload may change over time

As we continue to evolve our offerings, they will better align to the principles of the landing zone definitions described above. Today, our cloud ecosystem provides Offerings such as Application Hosting and Container Orchestration, Data Services, Dev Tooling/Experience, and Cloud Management. These Offerings include Services (platform, data management, analytics, governance) that are security pre-approved with associated security controls accelerating the ATO of our tenant applications. These services bring Capabilities that enable business and technology activities such as data lineage, automation job scheduling, cloud orchestration, containerization, and content management systems (CMS). A set of Tools that deliver these capabilities are chosen to best align to the GSA IT standards and strategy.

Fully Managed Landing Zone

The Fully Managed Landing Zone provides an integrated portfolio of multi-tenant, shared services (e.g., Application Hosting and Container Orchestration Environments, Cloud and FCS Managed Data Services) to enable mature DevSecOps (e.g., CI/CD, Continuous Monitoring, IaC) and DataOps practices.

MCaaS

Provides multiple cloud capabilities utilizing a common infrastructure. This delivery model allows the tenant to focus on application development while FCS manages the infrastructure and handles security requirements.

MCaaS Solution Overview MCaaS Slick Sheet
MCaaS Blueprint

EBTA

Secure platform for hosting applications on a virtual private AWS cloud. EBTA enables ‘push-button deployment’ through DevOps principles, automation, and integration of common services. FCS provides tailored AWS cloud infrastructure along with a set of tools and procedures for deploying code changes.

Learn More About EBTA EBTA Blueprint

Data Services

FAS currently offers a variety of data management, data analytics, and data governance offerings that tenants can leverage to achieve their cloud program goals.

Learn More About Data Services Data Services Blueprint

Semi-Managed Landing Zone

The Semi-Managed Landing Zone builds on the foundation of the unmanaged landing zone with the addition of development shared services (e.g., Code Repository, Artifact management, Configuration Management) and deployment standards (IaC, Automated Configuration Management) to enable tenant creation of services that can mature into FCS multi-tenant offerings.

Development and Deployment Shared Services

Provides a standard development experience (e.g., GitHub, Artifactory, Jenkins) and appropriate guardrails. Tenants are able to benefit from accelerated delivery while promoting continued standardization and convergence of cloud platforms.


Un-Managed Landing Zone

The Un-Managed Landing Zone provides cloud infrastructure (e.g., AWS Account) and networking services (e.g., Internet Gateway, VPC-to-VPC , VPC-to-On Premise) aligned to support custom use cases.

VPCaaS (Cloud Management)

Provides a secure AWS cloud environment with a VPC connected to the CSR VPN network. VPCaaS is a technology environment for apps, services, or automated processes. It allows tenants to self-manage their applications and retain responsibility for app development, operations, architecture, and security.

Learn More About VPCaaS (Cloud Management)Datadog VPCaaS Tenant Responsibility Policy

Copy Page Text