GCP Secure Landing Zone

digraph gcplz {
  rankdir=TB;
  graph [bgcolor=transparent];
  node [shape=box, style="rounded,filled", fontname=Inter, fontsize=10];

  Org [label="Organization", fillcolor="#fce7f3"];
  Fcommon [label="Folder: Common", fillcolor="#fef3c7"];
  Fbus [label="Folder: Business", fillcolor="#fef3c7"];
  Fnonprod [label="Folder: Non-prod", fillcolor="#fef3c7"];
  Fprod [label="Folder: Prod", fillcolor="#fef3c7"];

  Log [label="Logging project\n(centralised audit logs)", fillcolor="#dbeafe"];
  Mon [label="Monitoring project"];
  Sec [label="Security Command Center"];

  Shared [label="Shared VPC host\n(prod)", fillcolor="#ede9fe"];
  Service [label="Service project (workload)", fillcolor="#dcfce7"];

  Org -> Fcommon -> Log;
  Fcommon -> Mon; Fcommon -> Sec;
  Org -> Fnonprod;
  Org -> Fprod -> Fbus;
  Fprod -> Shared -> Service;
}