Landing zone consulting service description

1. Service overview

1.1 Service description

The landing zone consulting service provides cloud governance solution design and technical validation based on the Alibaba Cloud product ecosystem to support your cloud migration. This service helps you design solutions for resource management, financial management, identity management, network planning, security protection, compliance management, operations management, and Infrastructure as Code (IaC) automation. The service guides you in setting up a secure, multi-account Alibaba Cloud environment more quickly by following Alibaba Cloud best practices.

The landing zone consulting service is available in five editions. You can purchase the edition that best suits your business needs. Note that any work or solutions not defined in this Statement of Work (SOW) are outside the project's scope of delivery.

Landing Zone consulting services:

• Lightweight Edition:

  • Customizations primarily focus on the multi-account structure and do not include personalized security, compliance, network architecture, or operations and maintenance (O&M) automation design.

  • The Lightweight Edition has a shorter delivery cycle, typically around two weeks. It automatically implements a standard landing zone architecture, providing a cost-effective foundation for your cloud migration.

• Basic Edition:

  • Basic consulting service: Designs a solution based on your needs, including resource management, identity management, network planning, and security protection.

  • Includes technical validation of the solution to ensure its feasibility.

  • Includes technical solutions for integrating with your self-built systems, such as single sign-on (SSO), Configuration Management Database (CMDB), IT Service Management (ITSM), and financial systems. This integration is based only on the standard capabilities of existing Alibaba Cloud products. Re-architecting, custom development, or configuration of your existing systems are not within the scope of this service.

• Standard Edition:

  • Standard consulting service: Designs a solution based on your needs, including resource management, identity management, network planning, security protection, compliance audit, financial management, operations management, and IaC automation.

  • Includes technical validation of the solution to ensure its feasibility.

  • Includes technical solutions for integrating with your self-built systems, such as SSO, CMDB, ITSM, and financial systems. This integration is based only on the standard capabilities of existing Alibaba Cloud products. Re-architecting, custom development, or configuration of your existing systems are not within the scope of this service.

• AI Edition:

  • In addition to the requirements of a standard landing zone, this edition adds support for AI capabilities. It includes the design and implementation of resource architecture, identity and permissions, networking, cost allocation, compliance audit, O&M, and security for scenarios that involve Alibaba Cloud Model Studio and PAI.

• Implementation Service:

  • If you need the Alibaba Cloud team to perform the actual implementation, you can purchase the implementation service. The number of service packages to purchase is estimated based on the actual workload of the project.

  • The implementation service is responsible for deploying all designs from the project. However, it does not include configuration, modification, or testing on your self-built systems, other cloud platforms, or Software as a Service (SaaS) services. The scope is limited to Alibaba Cloud products.

  • This service package is primarily delivered remotely but can be adjusted based on project requirements and your specific situation.

  • For the Basic Edition service, we recommend purchasing at least one implementation service package. This can be adjusted based on the specific project.

  • For the Standard Edition service, we recommend purchasing at least two implementation service packages. This can be adjusted based on the specific project.

  • If you have additional integration needs or a project scope larger than the Standard Edition, we can discuss and adjust as needed.

2. Service scope

The service scopes are categorized by the five editions: Landing Zone Consulting Service Lightweight Edition, Landing Zone Consulting Service Basic Edition, Landing Zone Consulting Service Standard Edition, Landing Zone Consulting Service AI Edition, and Landing Zone Consulting Service Implementation Edition. The service scope for each edition is described in the following sections.

2.1 Scope of Landing Zone Consulting Service Lightweight Edition

• Current state analysis:

  • Based on thorough pre-sales discussions and demos of the Lightweight Edition landing zone service, we gather all required input parameters for implementation. These parameters include your organization chart, resource group division, region requirements, security needs, and VPC network requirements, which are necessary for building the standard architecture.

• Custom requirement confirmation:

  • Based on the results of the current state analysis, we confirm your custom requirements, primarily related to multi-account design and financial management.

• Automated implementation:

  • Using the analysis inputs and custom requirements, we use automated tools to build the landing zone environment.

• Demonstration and knowledge transfer (KT):

  • We demonstrate the landing zone environment built on the cloud and make initial fine-tuning adjustments based on your requirements. The workload for fine-tuning will not exceed two person-days.

  • We create a Landing Zone Lightweight Edition implementation manual and deliver it to you during a knowledge transfer (KT) session.

Standard landing zone framework for the Lightweight Edition:

Architecture details:

Required input parameters for analysis:

This service does not include the following:

• The Lightweight Edition only provides automated implementation based on a standard architecture. It supports minor customizations related to organization structure and VPC planning but does not support detailed, personalized consulting, design, or implementation. For customized landing zone consulting and design, purchase the Landing Zone Consulting Service Standard Edition.

• The solution does not involve integration with your own platforms, such as SSO, CMDB, ITSM, or billing platforms. It does not provide detailed integration plans or implementation support. For integration needs, you can purchase the Standard Edition service.

• The solution does not include design content from the Standard Edition, such as O&M automation (IaC) or log collection and integration.

• If a delay in progress is caused by Party A, Party B is not responsible.

• Alibaba Cloud is not responsible for providing any technical documents other than official Alibaba Cloud documentation and documents within the project's delivery scope.

• Party B is not responsible for the planning, architecture design, or cloud migration and transformation of Party A's business system, nor for the implementation or maintenance of the application.

• Alibaba Cloud is not responsible for troubleshooting, technical support, or answering questions about issues outside the Alibaba Cloud platform, such as third-party software or application systems.

• Implementation of the landing zone solution after the design is complete is not within the scope of the consulting service. You are responsible for implementation. If you require assistance, you can purchase the corresponding implementation service.

2.2 Scope of Landing Zone Consulting Service Basic Edition

The Landing Zone Consulting Service Basic Edition includes the following:

• Analysis and assessment:

  • We conduct a comprehensive analysis of your current business and application systems through remote information collection or on-site communication to understand your long-term business and application plans.

  • We analyze your current IT governance standards, such as security, network, and O&M standards, to understand your current management state and governance requirements.

• Resource management solution design:

  • Based on the analysis and assessment, we design a resource management solution for you. This includes:

    • Account structure: Plan a multi-account system on Alibaba Cloud and define resource deployment principles for cloud applications.

    • Tag system: Design tag metadata and a full lifecycle process for tags to manage resources effectively.

• Identity management solution design:

  • Based on the analysis and assessment, we design an identity management solution for you. This includes:

    • Identity authentication: Identify identity usage scenarios and design an identity authentication integration solution to integrate with your existing identity management system.

    • Role-based authorization: Identify the roles for accessing the cloud and define permissions based on the principle of least privilege.

• Network planning solution design:

  • Based on the analysis and assessment, we design a network governance solution for you. This includes:

    • Network access solution: Plan the network access solution between your environment and the cloud platform, including leased line or VPN access, application layer access, and O&M access.

    • Internal cloud network solution: Define the network architecture plan, including VPC planning, CIDR block and IP address planning, and cloud DMZ design.

    • Inter-VPC connection solution: Use Alibaba Cloud CEN to establish VPC peering across different regions, accounts, and with on-premises data centers.

• Security protection solution design:

  • Based on the analysis and assessment, we design a security protection solution for you. This includes:

    • Network security: Primarily involves security group configuration. We design a cloud network security zone division plan to isolate applications and configure connectivity based on specific application needs.

    • Host security: Includes solutions for host vulnerability, threat, and attack prevention.

    • Data security: Includes key management, database access control, and storage access control. We design a data security solution that meets your security requirements.

  • Note that the security solution only covers security related to the cloud platform itself and follows corporate security management standards. It does not cover your applications or other security needs.

• Technical validation:

  • The goal of this phase is to technically validate the technology choices in the resource management, identity management, and network planning solutions. The scope of technical validation includes:

    • Corporate multi-account system validation

    • User identity and permission management validation

    • Network allocation, CIDR block division, and network connectivity validation

This service does not include the following:

• The landing zone service only includes the design of your cloud architecture. It does not provide consulting for your corporate governance itself. If you have such needs, you can purchase the relevant services separately.

• The security governance in the solution only includes design related to security audit and governance at the cloud platform level. It does not cover the application security, content security, data security, or transmission security of your business systems, nor does it cover your Multi-Level Protection Scheme (MLPS) requirements.

• For integrations with your own platforms, such as SSO, CMDB, ITSM, or billing platforms, we only provide the integration solution. We are not responsible for resolving technical issues with your own platforms or for the specific implementation of the integration, because integration may require code adjustments to your existing platforms, which is outside the scope of Alibaba Cloud services.

• Party B is not responsible for delays caused by Party A.

• Alibaba Cloud will conduct a detailed analysis and design the consulting solution on-site or remotely as required by the project and produce the final deliverables.

• Alibaba Cloud is not responsible for providing any technical documents other than official Alibaba Cloud documentation and documents within the project's delivery scope.

• Alibaba Cloud is not responsible for any implementation or maintenance of your business system planning, architecture design, cloud migration, or application processes.

• Alibaba Cloud is not responsible for troubleshooting, technical support, or answering questions about issues outside the Alibaba Cloud platform, such as third-party software or application systems.

• Implementation of the solution after the design is complete is not within the scope of the consulting service. You are responsible for implementation. If you require assistance, you can purchase the corresponding implementation service.

2.3 Scope of Landing Zone Consulting Service Standard Edition

The Landing Zone Consulting Service Standard Edition includes the following:

• Analysis and assessment:

  • We conduct a comprehensive analysis of your current business and application systems through remote information collection and on-site communication to understand your long-term business and application plans.

  • We analyze your current IT governance standards, such as security, network, and O&M standards, to understand your current management state and governance requirements.

• Resource management solution design:

  • Based on the analysis and assessment, we design a resource management solution for you. This includes:

    • Account structure: Plan a multi-account system on Alibaba Cloud and define resource deployment principles for cloud applications.

    • Tag system: Design tag metadata and a full lifecycle process for tags to manage resources effectively.

• Identity management solution design:

  • Based on the analysis and assessment, we design an identity management solution for you. This includes:

    • Identity authentication: Identify identity usage scenarios and design an identity authentication integration solution to integrate with your existing identity management system.

    • Role-based authorization: Identify the roles for accessing the cloud and define permissions based on the principle of least privilege.

• Network planning solution design:

  • Based on the analysis and assessment, we design an identity management solution for you. This includes:

    • Network access solution: Plan the network access solution between your environment and the cloud platform, including leased line or VPN access, application layer access, and O&M access.

    • Internal cloud network solution: Define the network architecture plan, including VPC planning, CIDR block and IP address planning, and cloud DMZ design.

    • Inter-VPC connection solution: Use Alibaba Cloud CEN to establish VPC peering across different regions, accounts, and with on-premises data centers. This includes implementing cross-account, cross-VPC service invocation with PrivateLink.

    • Secure VPC solution: Combine Alibaba Cloud Firewall and CEN TransitRouter to design a secure VPC that routes traffic for public services through the secure VPC before reaching production services.

• Security protection solution design:

  • Based on the analysis and assessment, we design an identity management solution for you. This includes:

    • Network security: Primarily involves security group configuration. We design a cloud network security zone division plan to isolate applications and configure connectivity based on specific application needs.

    • Host security: Includes solutions for host vulnerability, threat, and attack prevention.

    • Data security: Includes database access control and storage access control. We design a data security solution that meets your security requirements.

    • Data encryption: An end-to-end data encryption solution, including transport-layer encryption with HTTPS or Secure Sockets Layer (SSL) encryption, data encryption at rest (for OSS, cloud disks, etc.), and using KMS to encrypt user data.

  • Note that the security solution only covers security related to the cloud platform itself and follows corporate security management standards. It does not cover your applications or other security needs.

• Compliance audit solution design:

  • Based on the analysis and assessment, we design a compliance audit solution for you. This includes:

    • Proactive protection: Use control policies to enforce compliance red lines at the tenant level.

    • In-progress audit: Includes operation audit, account audit, and log audit. We customize an audit solution that meets your corporate audit requirements.

    • Preventive controls: Design controls that align with your corporate compliance red lines to prohibit certain management operations, implementing tenant-level controls based on control policies.

    • Detective controls: Design compliance baselines and continuously monitor your resources. When non-compliant resources are found, they are recorded, alerted, or even automatically remediated. This includes industry-standard CIS compliance packages and resource stability compliance packages.

    • Operation log audit: Persistently store logs of cloud operations, resource changes, and more for auditing purposes.

    • Monitor account risk events: Define risk levels for abnormal operations within an account and configure alerting to track abnormal operation risks promptly.

• Operations management solution design:

  • Based on the analysis and assessment, we design an operations management solution for you. This includes:

    • Monitoring management: Based on existing Alibaba Cloud monitoring products, such as Cloud Monitor, Application Real-Time Monitoring Service (ARMS), and Prometheus, we help you design standards and specifications for application and infrastructure monitoring.

    • Log management: Based on Alibaba Cloud's Simple Log Service (SLS), we design log ingestion and management specifications tailored to your situation. This includes VPC Flow Logs collection and alert configuration.

• Infrastructure as Code (IaC) automation solution design:

  • Based on the analysis and assessment, we design an automated resource management solution for you. This includes:

    • Automated infrastructure management process design: Based on your project's current state, we design an automated infrastructure management process, including standards for infrastructure code development, management, and deployment. This does not include automation process design for applications.

    • Continuous Integration/Continuous Delivery (CI/CD) tool integration design: We design an integration solution for your existing CI/CD tools. This includes the network connectivity solution for the Alibaba Cloud environment required by the CI/CD tools to deploy infrastructure, along with the authentication and authorization solution for the relevant Alibaba Cloud services needed for infrastructure deployment.

    • IaC templates: Build templated resource creation in the Service Catalog to enable self-service. This includes templates for creating RAM identities and building network infrastructure.

    • Account factory: Provides a convenient way to create new accounts with your own compliance baselines built-in.

• Technical validation:

  • The goal of this phase is to technically validate the technology choices in the resource management, financial management, identity management, network planning, compliance audit, security protection, operations management, and automation management solutions. The scope of technical validation includes:

    • Corporate multi-account system validation

    • User identity and permission management validation

    • Network allocation, CIDR block division, and network connectivity validation

    • IP whitelists and network security groups

    • Operation audit and configuration audit validation

    • Security zone isolation and data access whitelist validation

This service does not include the following:

• The landing zone service only includes the design of your cloud architecture. It does not provide consulting for your corporate IT governance itself. If you have such needs, you can purchase the relevant services separately.

• The security governance in the solution only includes design related to security audit and governance at the cloud platform level. It does not cover the application security, content security, data security, or transmission security of your business systems, nor does it cover your MLPS requirements.

• For integrations with your own platforms, such as SSO, CMDB, ITSM, or billing platforms, we only provide the integration solution. We are not responsible for resolving technical issues with your own platforms or for the specific implementation of the integration.

• The O&M solution only includes the design of O&M standards at the cloud platform level. It does not include the O&M and management of your business systems or your own IT systems.

• The automation management standards only include the processes and standards for automated management of Alibaba Cloud service infrastructure. They do not include the development, management, or deployment standards for your business applications or your own IT systems.

• Party B is not responsible for delays attributable to Party A.

• Alibaba Cloud will conduct a detailed analysis and design the consulting solution on-site or remotely as required by the project and produce the final deliverables.

• Alibaba Cloud's responsibility for providing technical documents is limited to official Alibaba Cloud documents and documents within the scope of project delivery.

• Alibaba Cloud is not responsible for any implementation or maintenance of your business system planning, architecture design, cloud migration, or application processes.

• Alibaba Cloud is not responsible for troubleshooting, technical support, or answering questions about issues outside the Alibaba Cloud platform, such as third-party software or application systems.

• Implementation of the landing zone consulting solution after the design is complete is not within the scope of this service. You are responsible for implementation.

2.4 Scope of Landing Zone Consulting Service AI Edition

The Landing Zone Consulting Service AI Edition includes the following:

• Current state analysis

  • Infrastructure analysis

    • We collect relevant information and requirements from you remotely, including the current state of your business systems and future goals. We analyze and assess your requirements and standards for the cloud platform architecture, including asset management, financial management, networking, identity and access control, security protection, compliance audit, operations management, and automation.

  • Corporate AI platform governance standards analysis

    • We collect your requirements for AI platform governance standards, such as AI security, network, account management, and cost allocation standards, to understand your requirements for the AI platform governance architecture.

  • Solution design

    • Resource management solution design

      • Based on the assessment, we design the resource architecture for the cloud account system and AI-related cloud resources. We plan the corresponding workspaces and related resources for AI platforms (such as Model Studio and PAI) to meet your business needs for AI platform deployment and management.

    • Identity management solution design

      • We design a solution for your user accounts, including identity and permission planning within Model Studio and PAI platforms, and a secure management solution for Large Language Model (LLM) API keys, providing corresponding permission templates. For agent identities, we provide a full-lifecycle identity solution for agents.

    • Network planning solution design

      • Based on your network plan, we design a networking solution for Model Studio and PAI training and inference scenarios, including relevant VPCs, vSwitches, and security groups.

    • Financial management solution design

      • We design a cost allocation solution for Model Studio and PAI platforms, including the resource fees for the AI platform itself and associated resources, to meet the fine-grained cost management needs of different business departments.

    • Compliance audit solution design

      • Based on your corporate compliance audit standards, we create a compliance and audit solution for Model Studio, PAI, and their associated cloud resources to meet your internal audit and compliance requirements.

    • Operations management solution design

      • For full-lifecycle observability in AI training and inference scenarios, we define golden signals and build an observability dashboard. We can also create one or two AIOps agents based on your O&M needs and AI capabilities.

    • Security protection solution design

      • Based on your corporate security standards, we create a security governance solution using cloud products to meet your needs. We perform security checks and intercept anomalies in the input and output of the AI platform and provide relevant security protection rules. We also provide a full-lifecycle data security protection solution for AI training and inference to ensure data security.

    • Technical validation

      • We provide technical validation of the solution and assist with any issues encountered during the validation process.

The AI Edition only provides planning for AI-related needs within a landing zone, such as for Model Studio and PAI training. If you have regular landing zone needs, you can purchase the Landing Zone Consulting Service Basic or Standard Edition. To add AI requirements to a regular landing zone, you must purchase both services.

2.5 Scope of Landing Zone Implementation Service

The implementation service includes the cloud deployment and implementation of the deliverables from the landing zone consulting and design service. The work includes:

• Assisting with activating cloud resources and accounts, building the basic cloud infrastructure, setting up the multi-account system, configuring the cloud authorization system, and configuring hybrid cloud networking and related security protections.

• Integrating with your own platforms, such as SSO, CMDB, ITSM, and billing platforms. We complete the setup on the Alibaba Cloud side and assist your team with the integration, providing troubleshooting and solutions during the process.

• We prioritize using IaC to complete the implementation. For cloud services and configurations that do not support IaC, we use Alibaba Cloud OpenAPI or manual configuration. For code repositories and pipelines, we prioritize reusing your existing DevOps toolchain.

• You can purchase multiple implementation service packages based on the actual service scope.

This service does not include the following:

• The implementation service package must be used in conjunction with a consulting service and cannot be purchased separately.

• No written deliverables are guaranteed during the implementation phase.

• During the service, Alibaba Cloud is not responsible for deploying your applications, modifying application code, modifying data code, or performing data migration. You are responsible for this implementation work. During the implementation process, Alibaba Cloud is responsible only for setting up and integrating the environment on the Alibaba Cloud side and helping you resolve issues related to the use of Alibaba Cloud products.

• Party B assumes no responsibility for schedule delays caused by Party A.

3. Prerequisites

• You should request this service at least 15 calendar days in advance so that Alibaba Cloud can assess the feasibility of your business goals and timeline and confirm whether to accept the service request.

• If your request involves many resources, we recommend that you apply one month in advance. The specific timeline will be negotiated based on the supply chain assessment.

• You must promptly provide Alibaba Cloud with all necessary and reasonable documents, information, data, charts, and required system permissions and remote access channels to enable Alibaba Cloud to provide the service. All such materials will be subject to the confidentiality clauses of this agreement. You agree that all information disclosed or to be disclosed to Alibaba Cloud is true, accurate, and not misleading.

• For the Landing Zone Consulting Service Basic Edition and Standard Edition, Alibaba Cloud's work location is not constrained by the project. The service is primarily provided through phone, DingTalk, and email.

• During project delivery, if the implementation service is not purchased, you are the implementing party. Alibaba Cloud primarily provides solution design and troubleshooting during technical validation. You are responsible for the specific IT governance implementation actions. If the implementation service is purchased, Alibaba Cloud is the implementing party, and you must provide the necessary technical support for implementation.

• Alibaba Cloud will provide the delivery services for this project during normal business hours, which are from 9:00 AM to 6:00 PM UTC+8, Monday to Friday (excluding national holidays).

• During the project implementation period, both parties will use mutually agreed-upon communication methods. The project managers of both parties are responsible for transmitting the written information required for this project. Communication methods can include DingTalk, the Internet, fax, and email.

• All project deliverables will be in Simplified Chinese, and the working language will be Chinese. All deliverables will be in Microsoft Office format (including PPT, WORD, Excel, Visio) and submitted as electronic copies.

• You and Alibaba Cloud must commit to the project work according to the mutually agreed-upon work plan, personnel resource plan, and system-determined start and end dates. If the launch of your relevant business systems is delayed, the project schedule will be extended accordingly, and Alibaba Cloud will not be held responsible.

• If a third party needs to be involved, you and Alibaba Cloud are separately responsible for signing contracts with your respective third parties. Alibaba Cloud is not responsible for the actions of your other subcontractors or vendors (other than Alibaba Cloud's subcontractors), nor for any delays caused by them. You are not responsible for the actions of Alibaba Cloud's other subcontractors or vendors (other than your subcontractors), nor for any delays caused by them.

• Neither party shall be liable for any special, incidental, or indirect damages or consequential economic damages (including loss of profits or savings) under this contract, even if that party has been advised of the possibility of such damages.

4. Division of labor

4.1 Customer and Alibaba Cloud

• You purchase the landing zone consulting service, and the service is confirmed after review and communication with Alibaba Cloud.

• For the duration of this service, both parties agree upon and confirm the specific business goals and scope.

• The specific division of labor is shown in the table below.

Landing Zone Consulting Service Lightweight Edition:

Due to the special nature of the Lightweight Edition service, it is described separately. The division of labor is as follows:

Differences between the Basic & Standard editions:

Landing Zone Consulting Service Basic Edition & Implementation Edition:

Landing Zone Consulting Service AI Edition

Responsibility abbreviations: R-Responsible, A-Accountable, C-Consulted, I-Informed, S-Support. S assists the R party in completing the work.

4.1.1 Customer

• You will designate a project manager with appropriate skills and experience as the primary contact for communication with Alibaba Cloud. This person will be directly responsible for planning, coordinating, supervising, and controlling the project implementation, and for escalating issues and risks. They will also have full authority to make decisions on your behalf in all aspects of this project.

• Depending on the project's needs, your project manager will coordinate resources from all parties to lead the landing zone analysis and technical validation work.

• At the beginning of the project, you will provide internal landing zone-related materials and standard documents and clearly state the execution requirements.

4.1.2 Alibaba Cloud

• Appoint an experienced technical manager to manage the landing zone project, assemble and manage the Alibaba Cloud project team members, and communicate with your project manager.

• Through a current state analysis, understand the basic architecture of your system, business scenarios, technical components, and development frameworks, and evaluate the landing zone standards.

• Design the landing zone consulting solution based on the current state analysis.

• Cooperate with you to conduct technical validation of the landing zone consulting solution and assist in resolving any issues encountered during the technical validation process.

4.1.3 Completion criteria

• Landing Zone Consulting Service Lightweight Edition completion criteria:

  • The on-cloud landing zone environment is built and confirmed by you.

  • Deliverable: "Landing Zone Consulting Service Lightweight Edition Implementation Manual".

• Landing Zone Consulting Service Basic Edition completion criteria:

  • The landing zone solution design is completed and confirmed by you, including resource management, identity management, network planning, and security protection.

  • Deliverable: "Landing Zone Consulting Service Basic Edition Solution".

• Landing Zone Consulting Service Standard Edition completion criteria:

  • The landing zone solution design is completed and confirmed by you, including resource management, identity management, network planning, security protection, compliance audit, financial management, operations management, and IaC automation.

  • Deliverable: "Landing Zone Consulting Service Standard Edition Solution".

• Landing Zone Consulting Service AI Edition completion criteria

  • The corporate AI landing zone governance solution design is completed and confirmed by you. It must include the top-level architecture design and specific implementation plan for identity management, resource management, network planning, financial management, compliance audit, security protection, and operations management for AI infrastructure, such as Model Studio and PAI platforms.

  • Deliverable: "Corporate AI Landing Zone Consulting Service Solution".

• Landing Zone Consulting Service Implementation Edition completion criteria:

  • This is an implementation service. Your environment implementation is completed and confirmed by you. The implementation must include all the content to be implemented from the "Landing Zone Consulting Service Basic/Standard Solution".

4.2 Service Catalog

Service content: The landing zone consulting service targets your business goals and includes the following services:

5. Service-Level Agreement (SLA)

• Provide landing zone consulting services.

• Provide a support group for solution technical validation and on-site support as needed during the service period.

• Provide the "Landing Zone Consulting Service Basic Edition Solution", "Landing Zone Consulting Service Standard Edition Solution", or "Corporate AI Landing Zone Consulting Service Solution" according to the corresponding service specification.

6. Service flow

Landing zone consulting service flow:

7. Acceptance criteria

7.1 Acceptance checklist

Landing Zone Lightweight Edition acceptance checklist:

Landing Zone Basic Edition & Standard Edition acceptance checklist:

Landing Zone Implementation Edition acceptance checklist:

Landing Zone Consulting Service AI Edition acceptance checklist

7.2 Acceptance standards

• During project delivery, Alibaba Cloud provides landing zone governance consulting and records key information in documents. Therefore, the acceptance of document-based deliverables should focus on their substantive content to confirm that the content submitted by Alibaba Cloud meets your needs.

• If your business process requires various internal reviews before Alibaba Cloud submits deliverables, you should facilitate and complete the required internal reviews and reports in a timely manner before the agreed acceptance point.

• After the document content is reviewed, if modifications are needed, Alibaba Cloud will make the changes and submit them for your acceptance. A representative designated by you will sign off for confirmation. Acceptance is confirmed by clicking the acceptance confirmation button on the public cloud service system page.

• Landing Zone Consulting Service Lightweight Edition acceptance standard:

  • The "Landing Zone Consulting Service Lightweight Edition" is built according to the standard architecture and meets expectations.

• Landing Zone Consulting Service Basic Edition acceptance standard:

  • The "Landing Zone Consulting Service Basic Edition Solution" meets expectations.

• Landing Zone Consulting Service Standard Edition acceptance standard:

  • The "Landing Zone Consulting Service Standard Edition Solution" meets expectations.

• Landing Zone Consulting Service AI Edition acceptance standard

  • The "Corporate AI Landing Zone Consulting Service Solution" is built according to the standard architecture and meets expectations.

• Landing Zone Consulting Service Implementation Edition acceptance standard:

  • The "Landing Zone Consulting Service Basic/Standard Edition Solution" is implemented on Alibaba Cloud.

7.3 Acceptance plan

Based on the content and deliverables for each phase listed in '7.1 Acceptance Checklist', Party A agrees to accept this project from Party B according to the following plan.

Landing Zone Consulting Service Lightweight Edition acceptance plan:

Landing Zone Consulting Service Basic Edition acceptance plan:

Landing Zone Consulting Service Standard Edition acceptance plan:

Landing Zone Consulting Service AI Edition acceptance plan:

Landing Zone Consulting Service Implementation Edition acceptance plan:

8. Completion flag

Customer acceptance is finalized.