Core Landing Zone Deployment - Forge

Nobody has claimed this yet.

Technical implementation of the technology that the landing zone will be built upon, the landing zone represents secure guardrails implementated on top of the raw Azure services. The security guardrails allow us to create a Protected B compliant hosting environment for Ministry applications in Azure.

Conditions to follow:

1. try to limit the number of customizations that we introduced on top of the original code base and if a customization cannot be avoided, try to have it accepted and merged into the original code base
2. use CanPubSec as a target architecture and try to reach it by implementing configurations on top of the TerraformALZ
3. maintain a decision log for major decisions such as deviations from the the original code base, major architectural decisions such as what firewall product we will be using, network architecture, etc
4. book a status update meeting with David and Jenny every 6 weeks

Start by reviewing the TerraformALZ foundation and the CanPubSec target architecture referenced in the issue. Identify the required landing-zone guardrails, record major deviations and architecture decisions in a decision log, and define completion around a secure Protected B-compliant Azure hosting environment.

Written by the indexing model from the issue text.