Azure governance
- 3. Pressure to digitally transform & innovate Need for agility to reduce speed to market Shift to DevOps Cloud Sprawl -> Increased complexity in managing standard, accountability, compliance, consistent architecture & cost -> at Scale
- 6. Development IT Governance Speed Control Speed versus control
- 14. Native platform capabilities to ensure compliant use of cloud resources Blueprints Deploy and update cloud environments in a repeatable manner using composable artifacts Resource Graph Query, explore & analyze cloud resources at scale Management Group Define organizational hierarchy Cost Monitor cloud spend and optimize resources Policy Real-time enforcement, compliance assessment and remediation NEW NEW Control VisibilityEnvironment ConsumptionHierarchy
- 15. CRUD Azure Resource Manager (ARM) Query providing control over the cloud environment, without sacrificing developer agility 2. Policy-based Control: Real-time enforcement, compliance assessment and remediation at scale 3. Resource Visibility: Query, explore & analyze cloud resources at scale 1. Environment Factory: Deploy and update cloud environments in a repeatable manner using composable artifacts Role-based Access Policy Definitions ARMTemplates Management Groups Subscriptions
- 17. Management Group & Subscription Modeling Strategy App A Pre-Prod Microsoft Recommended App B Pre-Prod Shared services (Pre-Prod) App C Pre-Prod App A Prod App B Prod Shared services (Prod) App D Prod Prod RBAC + Policy Pre-Prod RBAC + Policy Org Management Group
- 18. RemediationEnforcement & Compliance Apply policies at scale Turn on built-in policies or build custom ones for all resource types Real-time policy evaluation and enforcement Periodic & on-demand compliance evaluation Apply policies to a Management Group with control across your entire organization Apply multiple policies and & aggregate policy states with policy initiative Real time remediation Remediation on existing resources (NEW) Exclusion Scope
- 20. Shift left to deliver compliant code faster
- 21. Shift left to deliver compliant code faster
- 23. • No central way to compose and enforce what goes into or made available in a subscription. • Challenging to setup foundational infrastructure Customer Challenges
- 24. deploy and update cloud environments in a repeatable manner using composable artifacts Role-based access controls Policy Definitions ARM Templates
- 26. • In ability to view resources and their properties across subscriptions • Query resources (without worrying about timeouts & throttling), including filtering, grouping and sorting of resources by resource properties • Need to assess the impact of applying policies in vast cloud environment Customer Challenges
- 27. Query, explore & analyze cloud resources at scale Perform fast ad hoc exploration in large cloud environment Ability to assess the impact of applying policies in vast cloud environment Impact AssessmentExplore Query & analyze across all of your cloud resources at scale in seconds Query & Analyze
- 29. © Microsoft Corporation Bring the best together in Azure Portal
- 30. © Microsoft Corporation Azure Cost Management Built into Azure Richer analysis and budget alerting Reduced data latency by up to 80% On by default Integrated with Azure Advisor Better experience for more users Free to manage Azure costs
- 31. Speed Control Azure Governance Development Cloud Custodian Templates Policies RBAC Blueprints Management Groups Cost Management Resource Graph Speed and control
Editor's Notes
- #2: How many of devs in the room
- #3: Common sense One model does not fit all the organization Start small and then scale it once you understand the feature
- #4: Delete the VM will not delete the entire VM resource
- #6: © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
- #7: © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
- #8: EA agreement _ when enterprise sign with the upfront spending on azure and this will benefit both the azure and enterprise customers Two portals 1) EA portal and the 2) Azure management portal EA – Define the hierarchy as per your organizational structure How application teams will get a subscription or a resource group
- #12: Example: in on of my Core RGs I have a storage account (Azureandbeyond) that is protected by a delete lock By the way: What actually are Resource Groups? (next)
- #18: 17
- #31: Microsoft Worldwide Partner Conference 2016
- #32: © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.