We run SAP AI Lab — two of us, one in ML systems, one in enterprise information systems, entirely independent of SAP and Microsoft. This spring our lab finally got approval to move a real SAP landscape to Azure, and before touching a single VM we spent three weeks arguing about landing zones. Half our search results led nowhere. Here's what we settled on, verified as of 2026-11-08.

The pages we needed were gone

The Cloud Adoption Framework once shipped SAP-specific enterprise-scale landing zone docs describing an "SAP on Azure construction set" of six design areas: identity and access, network topology, management and monitoring, business continuity/DR, security-governance-compliance, and platform automation and DevOps. Those pages are now retired from the live English site — requesting them today redirects to the generic landing zone overview.…