
🏛️ Government & Public Sector · Deployment · Pro
A secure cloud foundation for government workloads: separate accounts per environment, central networking, logging and security, in an in-country region.
Deployment diagrams are part of Pro. Anyone can view this one; generating and editing it needs Pro.
Drawing diagram…
Deployment for a government cloud landing zone in an in-country region: a management account with policies, a security account (SIEM, threat detection), a log archive account (immutable logs), a shared networking account with a transit gateway, firewall and VPN to government data centres, and workload accounts per department for dev, test and prod, each with its own VPC connected through the transit gateway.
flowchart TB
subgraph Region[Cloud Region - in-country]
MGMT[Management Account - policies, billing]
SEC[Security Account - SIEM, threat detection]
LOG[(Log Archive Account - immutable)]
subgraph NET[Shared Networking Account]
TGW[Transit Gateway]
FW[Central Firewall]
VPN[VPN to Gov Data Centres]
end
subgraph DEPT[Department Workload Accounts]
DEV[Dev VPC]
TEST[Test VPC]
PROD[Prod VPC]
end
end
DC[Government Data Centres]
MGMT -.policies.-> DEPT
DEV --- TGW
TEST --- TGW
PROD --- TGW
TGW --- FW
FW --- VPN
VPN --- DC
DEPT -->|Logs| LOG
LOG --> SECA single online portal where citizens apply for government services: identity login, a service catalogue, document storage and payments to the treasury.
How a building permit or trade licence application moves through a government office: scrutiny, site inspection, fees and the final certificate.
How a service verifies a person's identity with a national ID and OTP (e-KYC), with consent and without storing the ID number.
How a taxpayer files an income tax return online: pre-filled data, computation, payment of any balance tax and e-verification.
The states of a citizen complaint in a public grievance system: registration, assignment to a department, resolution, citizen feedback and escalation.
A schema for digitised land records: parcels with survey numbers, owners and shares, mutations, encumbrances and map references.