SLZ extended with a country pack

This is the same as the previous one, but also adds in an example side loaded custom library hosted on GitHub.

Description

As per the previous configuration, we have a local override library in ./lib stacked on top of the Sovereign Landing Zone. It has all of the override functionality of that example.

In addition there is an example custom library hosted in GitHub. It is loosely associated with the BIO compliancy requirement in the Netherlands, but the example is constructed more to illustrate how to construct custom libraries. However, the process to insert custom libraries (from the Custom Libraries lab series) is summarised here as a useful reference.

Local override library

Included if you need to add in a local override library first.

If not then you can skip down to Architecture and Archetypes, or right down to Provider Block which is the start of the most important section.

Create the default local override library

These commands are designed for Bash on a Linux/macOS system. Ensure that you are in the root of your Azure Landing Zone repo.

tmp=$(mktemp -d)
git clone -n --depth=1 --filter=tree:0 "https://github.com/Azure/alz-terraform-accelerator" "$tmp"
lib_folder_path="templates/platform_landing_zone/lib"
git -C "$tmp" sparse-checkout set --no-cone "$lib_folder_path"
git -C "$tmp" checkout
cp -r "$tmp/$lib_folder_path" .
rm -rf "$tmp"

These commands are designed for PowerShell on a Windows system. Ensure that you are in the root of your Azure Landing Zone repo.

$tmp = Join-Path $env:TEMP (New-Guid)
New-Item -ItemType Directory -Path $tmp
git clone -n --depth=1 --filter=tree:0 "https://github.com/Azure/alz-terraform-accelerator" "$tmp"
$lib = "templates/platform_landing_zone/lib"
git -C $tmp sparse-checkout set --no-cone $lib
git -C $tmp checkout
Copy-Item -Path "$tmp/$lib" -Recurse -Force
Remove-Item -Path $tmp -Recurse -Force

The code blocks creates a local library using similar logic to the documentation for the Azure Landing Zone accelerator, and pulls the example lib folder from the ALZ Accelerator repo.

Extend the library for Sovereign Landing Zone

As you are using the Sovereign Landing Zone then run these commands to extend the default local library with additional override files for the additional archetypes found in the Sovereign Landing Zone.

⚠️ As well as adding the additional override files, these commands will also overwrite the following files:

lib/alz_library_metadata.json - library dependency on the Sovereign Landing Zone, which has its own dependency on the Azure Landing Zone
lib/architecture_definitions/alz_custom.alz_architecture_definition.yaml - additional archetype overrides

These commands are designed for Bash on a Linux/macOS system. Ensure that you are in the root of your Azure Landing Zone repo.

tmp=$(mktemp -d)
git clone -n --depth=1 --filter=tree:0 "https://github.com/Azure/alz-terraform-accelerator" "$tmp"
lib_folder_path="templates/platform_landing_zone/examples/slz/lib"
git -C "$tmp" sparse-checkout set --no-cone "$lib_folder_path"
git -C "$tmp" checkout
cp -r "$tmp/$lib_folder_path" .
rm -rf "$tmp"

These commands are designed for PowerShell on a Windows system. Ensure that you are in the root of your Azure Landing Zone repo.

$tmp = Join-Path $env:TEMP (New-Guid)
New-Item -ItemType Directory -Path $tmp
git clone -n --depth=1 --filter=tree:0 "https://github.com/Azure/alz-terraform-accelerator" "$tmp"
$lib = "templates/platform_landing_zone/examples/slz/lib"
git -C $tmp sparse-checkout set --no-cone $lib
git -C $tmp checkout
Copy-Item -Path "$tmp/$lib" -Recurse -Force
Remove-Item -Path $tmp -Recurse -Force

These code blocks are fundamentally the same as the ones used to initialise the local library, but extend it using the slz lib add on folder from the same ALZ Accelerator repo.

Note that the architecture file is still called alz_custom.alz_architecture_definition.yaml and the architecture name is alz_custom. The reason for this is that the Sovereign Landing Zone scenario is designed to handle brownfield scenarios.

Architecture and Archetypes

The architecture name is slz_custom, as defined in the local slz_custom.alz_architecture_definition.yaml that you’ll find in lib/architecture_definitions.

flowchart TD slz["Sovereign Landing Zone (root_custom, sovereign_root_custom)"] slz --> decommissioned decommissioned["Decommissioned (decommissioned_custom)"] slz --> landingzones landingzones["Landing zones (landing_zones_custom)"] landingzones --> confidential_corp confidential_corp["Confidential Corp (confidential_corp_custom)"] landingzones --> confidential_online confidential_online["Confidential Online (confidential_online_custom)"] landingzones --> corp corp["Corp (corp_custom)"] landingzones --> online online["Online (online_custom)"] landingzones --> public public["Public (public_custom)"] slz --> platform platform["Platform (platform_custom)"] platform --> connectivity connectivity["Connectivity (connectivity_custom)"] platform --> identity identity["Identity (identity_custom)"] platform --> management management["Management (management_custom)"] platform --> security security["Security (security_custom)"] slz --> sandbox sandbox["Sandbox (sandbox_custom)"]

Note the Sovereign Landing Zone at the top has two archetypes assigned:

root_custom
sovereign_root_custom

and you will find override files for both in the lib’s archetype_definitions folder.

Provider block

The provider block here is unchanged and refers to the override library in the local lib folder.

provider "alz" {
  library_overwrite_enabled = true
  library_references = [
    {
      custom_url = "${path.root}/lib"
    }
  ]
}

Metadata

The local metadata filename is lib/alz_library_metadata.json.

This is where the the custom library in GitHub is side loaded to add in the additional archetypes etc. within that library. Note the two dependencies.

{
  "$schema": "https://raw.githubusercontent.com/Azure/Azure-Landing-Zones-Library/main/schemas/library_metadata.json",
  "name": "local",
  "display_name": "ALZ Accelerator - Azure Verified Modules for SLZ Platform Landing Zone",
  "description": "This library allows overriding policies, archetypes, and management group architecture in the ALZ Accelerator.",
  "dependencies": [
    {
      "path": "platform/slz",
      "ref": "2025.10.1"
    },
    {
      "custom_url": "github.com/richeney-org/Sovereign-Landing-Zone-Packs//country/nl/bio?ref=2026.01.0"
    }
  ]
}

The first dependency is semantically versioned to Sovereign Landing Zone 2025.10.1, which is itself stacked on top of Azure Landing Zone 2025.9.3.

The second dependency is the custom_url to the custom library. The url specifies the GitHub hosted custom repo, subfolder, and ref. More details in the custom libraries section including go-getter url alternatives.

Module block

Specify the architecture name in lib/alz_library_metadata.json as the value to the architecture_name module argument.

module "management_groups" {
  source  = "Azure/avm-ptn-alz/azurerm"
  version = "0.20.2"
  architecture_name  = "alz_custom"