Loading…
Design a Secure Multi-Account Cloud Landing Zone is a medium cloud architecture interview question covering cloud architecture, governance, iam, landing zone, network segmentation, security — the kind asked at FAANG (Facebook/Meta, Apple, Amazon, Netflix, Google) and AI-first companies like Anthropic, OpenAI, and Nvidia.
An organisation is putting twenty product teams onto a cloud provider. Teams must deploy without waiting on a central team, but encryption, audit logging, approved regions and no-public-data-stores cannot be optional. One product handles payment data under external audit, and some customer data must stay in Europe. A data centre will remain connected for the foreseeable future. Design the account structure, guardrails and access model.
Interactive walkthrough on Pro
Upgrade to Pro to unlock the clarifying questions, architecture, managed-versus-self-run service selection, tradeoffs, follow-up answers, and the model answer.
What's inside this guide
Design rounds are decided on capacity estimates. Both tools are free.
Fully unlocked, no account needed — solutions, walkthroughs and follow-up answers included.
Or start the Study Plan — a week-by-week order for your loop, and week 1 is entirely free.
A full interview loop is more than one round. These are the others, each with what is on the site for it.