Is anyone using Azure landing zone for cloud migration? Any best practices or experiences to share?

To what extent do you agree or disagree with this statement: I'd prefer to leverage existing on-prem compliance, policies, controls and knowledge for cloud workloads over rebuilding security and compliance in the cloud.

If you had a magic wand - what's the #1 daily business challenge you'd eliminate?

We are about to embark on ECC to S/4HANA migration, and SAP is pushing us strongly towards RISE. They delivered a business case for us, and they are presenting cases of successful RISE migrations. On the other hand, our experience with handing over any support or project execution to SAP (e.g. BTP or SAC Cloud Foundry migrations, Success Factors and Ariba configurations) in the last 2-3 years has been very negative. Can anyone with hands-on experience with RISE share their journey? Contrary to what SAP is showing us, I am interested in challenges and complications that may arise in project execution, particularly in the quality of support they provide during the migration and in BAU. 

Would love to hear from anyone who has successfully taken a more proactive approach to cloud cost-savings versus a reactive approach? What strategies or tactics have been key in your success?

Did you use a landing zone as part of your cloud migration? Comments welcome!