A landing zone is a well-architected, multi-account AWS environment that is a starting point from which you can deploy workloads and applications.

Share an encrypted AMI between accounts and launch an encrypted, EBS backed EC2 instance from the shared AMI.

Automate RDS SQL backup and restore from an authorized webpage

Get notified (SNS) of S3 events

RDP over HTTPS to establish a secure, encrypted connection between remote users and EC2 instances