Platform landing zone vs application landing zone vs management group scope

This sheet compares Platform landing zone subscription, Application landing zone subscription, Management group scope.

CriterionPlatform landing zone subscriptionApplication landing zone subscriptionManagement group scope
What it hostsShared services used by every team: container registry, VM image repositoryWorkload resources, including AI/RAG applications - no separate AI landing zoneNothing directly; it groups subscriptions for policy inheritance

The verdict, the full comparison, 6 rules and 4 traps are part of SC-100 access. Unlock SC-100.