Cloud landing zone
£1,750 to £3,000 plus VAT2-3 weeks
An Azure or AWS foundation written in Terraform: networking, identity, logging and cost controls.
What you get
- Terraform modules in your own repository
- Network layout: virtual networks, subnets and security rules
- Identity and access baseline, with least-privilege roles
- Central logging and budget alerts
- A handover session and a written runbook
Good fit for
- Teams whose cloud account was built by hand and now needs to be repeatable and safe to change.
What we need from you
- Cloud account access and a list of the workloads you plan to run.
Often chosen by
- startups, regulated businesses, IT providers
A cloud account you can grow into, set up in your first month instead of your first crisis.
A typical project
A seed-stage team has been deploying to an AWS or Azure account by hand, with shared logins and no record of what is running. We rebuild the foundation as code, separate development from production and add cost alerts, so your first hires inherit something safe.
What you get
- Separate development, staging and production accounts or subscriptions
- Terraform modules for networking, identity and shared services, in your repository
- Single sign-on and role-based access instead of shared credentials
- Budget alerts and tagging, so the cost of each environment is visible
- A layout your CI/CD pipeline can deploy into without admin rights
- A recorded walkthrough and runbook for new engineers
Good fit for
- Seed to Series A teams about to hire their first engineers, or about to answer a customer's security questionnaire.
What we need from you
- Admin access to the current account, a list of the services in use and the order you expect to launch environments.
What moves the price
- Nearer the lower end for one cloud and two environments. Nearer the upper end for several regions, existing resources to import or a customer security review to answer.
A cloud foundation built around who can see what, with the evidence to show it.
A typical project
A small firm is moving a line-of-business system to the cloud and needs to explain to clients where data lives and who can reach it. We design the network and access model first, log everything that matters and document the data flows for your data protection lead.
What you get
- Deployment in a UK region, with data residency choices written down
- Private networking, with no public access to data stores by default
- Role design with least privilege and mandatory multi-factor sign-in
- Central audit logging with a retention period you choose
- Encryption settings documented for data at rest and in transit
- A data-flow diagram and control summary for your data protection lead
Good fit for
- Law firms, clinics, accountants and advisers moving client or patient information to the cloud.
What we need from you
- The systems and data types involved, any client or contract security requirements and a named person responsible for data protection.
What moves the price
- Nearer the upper end where long audit retention, extra environments or client-specific control requirements apply. We document the controls, but compliance itself stays your responsibility.
A repeatable cloud baseline you can offer to more than one client.
A typical project
An IT provider keeps rebuilding similar Azure or AWS setups for small clients, each slightly different. We turn your best version into a parameterised Terraform baseline, so the next client takes days instead of weeks.
What you get
- A parameterised Terraform baseline for a typical small-business tenancy
- Guardrails for naming, tagging, policy and budget alerts, applied the same way every time
- Separate state and access for each client
- A pull-request workflow, so your engineers review every change
- A deployment checklist and handover pack you can reuse
- A training session on running and extending the code
Good fit for
- Providers with several small clients on Azure or AWS who want consistency and fewer one-off builds.
What we need from you
- An example of your current client build, your tenancy and billing model, and how many client types you expect.
What moves the price
- Nearer the lower end for one client type on one cloud. Nearer the upper end for several client profiles, or migration of existing client builds.