smom-dbis-138/docs/archive/status-reports/operations-legacy/CLOUD_SOVEREIGNTY_STATUS.md

Cloud for Sovereignty Landing Zone - Deployment Status

Current Status

✅ Completed

• Architecture design
• Terraform configuration created
• All 44 non-US regions defined
• Per-region deployment module
• Variables and configuration files
• Deployment scripts
• Documentation

🚀 Ready to Deploy

• Foundation resources (Phase 1)
• AKS clusters (Phase 2)
• Besu network (Phase 3)

Deployment Commands

Automated Deployment

./scripts/deployment/deploy-cloud-sovereignty-auto.sh

Manual Deployment

cd terraform/well-architected/cloud-sovereignty
terraform init
terraform validate
terraform plan -out=tfplan
terraform apply tfplan

Regions Configuration

All Regions Enabled

By default, all 44 non-US commercial regions are enabled.

Selective Deployment

To deploy to specific regions only, edit terraform.tfvars:

enable_all_regions = false
selected_regions = [
  "westeurope",
  "northeurope",
  "uksouth"
]

Resource Count

Per Region

• 6 Resource Groups
• 1 Virtual Network
• 2 Subnets
• 1 Key Vault
• 1 Log Analytics Workspace
• 1 Storage Account
• 1 Storage Container

Total per region: ~12 resources

All Regions (44)

Total resources: ~528 resources

Cost Estimate

Foundation Phase (Per Region)

• Resource Groups: $0
• Virtual Networks: ~$10/month
• Key Vaults: ~$3/month
• Log Analytics: ~$50/month
• Storage Accounts: ~$5/month

Per region: ~$68/month All 44 regions: ~$3,000/month

Next Steps

1. Review Configuration

   • Check terraform.tfvars
   • Verify subscription ID
   • Select regions if needed

2. Deploy Foundation

   • Run deployment script
   • Monitor progress
   • Verify resources

3. Configure AKS

   • Set deploy_aks_clusters = true
   • Deploy clusters per region

4. Deploy Besu Network

   • Set deploy_besu_network = true
   • Deploy network components