Designing an AWS Landing Zone for a Small Team
A pragmatic multi-account AWS setup for small teams — separate environments, central logging and guardrails without enterprise overhead.
I’m Owes Shubho. I help organisations design, secure and operate enterprise technology — from SAP administration to cloud infrastructure and applied security research — and I write about what I learn along the way.

ENTERPRISE TECHNOLOGY — SAP, CLOUD & SECURITY
Four focus areas, one discipline: monitor closely, secure by default, and document everything so knowledge compounds over time.
Administration, monitoring and optimisation of the core business systems organisations depend on every day.
Learn moreScalable, cost-controlled infrastructure — provisioned, monitored and governed end to end.
Learn moreAccess governance, continuous monitoring and incident readiness built in from day one.
Learn moreApplied research and practical write-ups that turn field experience into shared knowledge.
Learn moreEvery engagement starts with the same discipline: understand the landscape, secure access at every layer, and leave behind runbooks that the next engineer can trust.
A snapshot of recent roles across enterprise IT.
years working across enterprise systems, cloud platforms and security operations.
systems administered, migrated or hardened across production landscapes.
professional certifications across SAP, cloud and security disciplines.
“Technology creates value only when it solves a real business problem — everything else is decoration.”

Notes from the field — practical guidance on SAP, cloud architecture and applied security.

A pragmatic multi-account AWS setup for small teams — separate environments, central logging and guardrails without enterprise overhead.

What went well, what surprised us, and what I would plan differently when moving an SAP landscape from on-premises to Microsoft Azure.

A simple, repeatable access review process — who to involve, what to check and how to record decisions so auditors and engineers both trust it.