What is the recommended approach for multi-region platform landing zone subscriptions?

AJ Bajada 5 Reputation points
2024-07-14T23:16:32.3233333+00:00

When deploying to multiple regions, there is conflicting information on whether to use new platform landing zone subscriptions (identity, management, connectivity) or the existing subscription. What is the recommended approach? Should I use the existing subscription or create a new subscription for each region?

One article recommends using the existing subscription: https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/ready/considerations/regions#traditional-hub-and-spoke-architecture

Another article recommends using a different subscription for each region: https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/scenarios/cloud-scale-analytics/eslz-network-considerations-cross-region

Azure Cloud Services
Azure Cloud Services
An Azure platform as a service offer that is used to deploy web and cloud applications.
700 questions
0 comments No comments
{count} vote

1 answer

Sort by: Most helpful
  1. Luke Murray 11,091 Reputation points MVP
    2024-07-15T05:15:12.47+00:00

    Definitely - Depends! There's no right or wrong answer here, I have done both for customers, and both work well.

    I personally prefer to keep the same Management Group structure - i.e., Identity, etc., but separate by Subscription (i.e., Stamps) - for the different regions; my reasoning is mainly to:

    • Keep permissions separate
    • Avoid any accidental changes to resources in another region that may be a passive/DR region,
    • Allow more granular policy control at the Subscription level if need be
    • Avoid ANY potential risk of running into subscription quotas
    • And filter out resources in the Azure Portal easily by just unselecting a subscription from being viewed.
    • Refer: Mission-critical baseline architecture in an Azure landing zone

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.