![[Azure Governance] Lesson 4 : Azure Policy](https://cdn.slidesharecdn.com/ss_thumbnails/azuregovernance-lesson4-azurepolicy-190519183014-thumbnail.jpg?width=560&fit=bounds)
Ad
More Related Content
What's hot (20)
Similar to CAF intro Hosters modern (20)
Ad
Recently uploaded (20)
Ad
CAF intro Hosters modern
- 1. Preparing for Your Cloud Journey with Microsoft Peter Mogaka Cloud Solution Architect - 2023
- 2. Agenda • CAF overview • Programs / co-selling • Q&A
- 3. Going from Jernbanetorget to Ekebergparken
- 4. Why was Cloud Adoption Framework (CAF) created?
- 5. Achieve balance. Deliver modernization. Deli Control & Stability Speed & Results
- 6. Adopt Migrate First workload migration Expanded scenarios Best practice validation Process improvements Innovate Innovation guide Expanded scenarios Best practice validation Process improvements Ready Azure setup guide First landing zone Expand the landing zone Best practice validation Plan Digital estate Initial organization alignment Skills readiness plan Cloud adoption plan Define strategy Understand motivations Business outcomes Business justification Prioritize project Govern Methodology Benchmark initial best practice Governance maturity Manage Business commitments Operations baseline Operations maturity Microsoft Cloud Adoption Framework for Azure
- 8. An iterative process that supports your business … as it evolves Define strategy Plan Adopt Ready Manage Govern
- 9. Business and technical criteria to choose first project Define motivations for moving to the cloud Identify and document business outcomes Evaluate financial & technical considerations Create a business case Rationalize digital estate Initial Organization Alignment Identify skills gap and define readiness plan Define cloud adoption plan Plan This stage is about understanding ‘who’ in your organization will be leading the efforts, developing the right organizational structure, including a Cloud Center of Excellence and other readiness teams. This is also where you define the backlog of work including what workloads are going to move in the short, medium and long term and build that into an actionable cloud adoption plan. Strategy The cloud journey starts with defining the strategy by understanding motivations, identifying the business outcomes, evaluating the financial and technical considerations, and creating a business case for moving to the cloud. This stage is about understanding the ‘why’ behind your cloud adoption journey. 9 Preparing for Your Cloud Journey with Microsoft
- 10. Before you begin….. “Cloud Journey Tracker”
- 11. Define Strategy 1 Motivations Understand motivations to move to cloud 3 Business Justification Develop a business justification that supports your motivations and outcomes 2 Business Outcomes Engage stakeholders to document specific business outcomes 4 Identify First Project Leverage business and technical criteria to choose your first project
- 12. Cloud Adoption Motivations Critical Business Events o Data center exit o Mergers, acquisition or divestiture o Reductions in capital expenses o End of support for mission critical technologies o Regulatory compliance, data sovereignty requirements o Reduce disruptions and improve IT stability Migration Motivations • Cost Savings • Reduction in vendor or technical complexity • Optimization of internal operations • Increase business agility • Prepare for new technical capabilities • Scale to meet market demands • Scale to meet geographic demands Innovation Motivations • Prepare for new technical capabilities • Build new technical capabilities • Scale to meet market demands • Scale to meet geographic demands • Improve customer experiences / engagements • Transform products or services • Disrupt the market with new products or services
- 13. Choose the first project by using a clearly defined criteria and business outcomes to achieve Prioritize project • Should align with your motivations for cloud adoption • Should demonstrate progress towards a defined business outcome • Project is a source of learning. • It might result in production deployments, but it will probably require additional effort first. • The output of this project is a set of clear requirements to provide a longer-term production solution. • Critical business events: Use Azure free HA/DR benefits of SQL Server Software Assurance to stand up a DR location in Azure. • Migration motivations: Start with a noncritical workload and use Azure readiness guide and the Azure migration guide for guidance • Innovation motivations: Creation of a targeted dev/test environment can be a great first project. First Project Criteria First Project Expectations First Project Examples for each motivation category
- 14. Demo – Cloud Journey Tracker
- 15. Putting together your plan
- 16. Plan Cloud adoption plans convert the aspirational goals of the cloud adoption strategy into actions. It will help guide technical efforts, in alignment with the business strategy. 1. Rationalize Digital estate Rationalize your digital estate to determine best approach to cloud adoption 2. Initial org alignment Align governance and cloud adoption to mitigate risks 3. Skills readiness plan Get your people ready by identifying skills gap and plan 4. Cloud adoption plan Create an actionable cloud adoption plan that aligns to your business strategy
- 17. Rationalize digital estate • High level rationalization simplifies decision making to answer the key question about an asset – to rehost, refactor or retire? More detailed rationalization with 5R(s) happens in the ‘Adopt’ phase • While cloud adoption team executes first workload migration, the cloud strategy team uses the Incremental approach or ‘Power of 10’ where they select the first 10 applications to migrate Cloud rationalization is the process of evaluating assets to determine the best approach to hosting them in the cloud (public or hybrid). Moves a current state asset to the chosen cloud provider, with minimal change to overall architecture, aka lift and shift Retire Retiring assets can produce significant savings in annual operating costs and up-front migration efforts Refactor Modernize to platform-as-a- service, creating significant savings in application and data management and administration Rehost
- 18. Plan | Skills Readiness Plan Cloud computing is a technology shift and a new set of skills are required to support cloud solutions 1. Identify the gaps 2. Look across teams 3. Create an org-wide learning plan
- 19. Plan | Cloud Adoption Plan Translate strategy and effort into an actionable cloud adoption plan • Prerequisites: Confirm that all prerequisite steps have been completed before you create your plan. • Define and prioritize workloads: Prioritize your first 10 workloads to establish an initial adoption backlog. • Align assets: Identify which assets (proposed or existing) are required to support the prioritized workloads. • Review rationalization: Review rationalization decisions to refine adoption-path decisions: Migrate or Innovate. • Define iterations and releases: Iterations are the time blocks allocated to do work. Releases are the definition of the work to be done before triggering a change to production processes. • Estimate timelines: Establish rough timelines for release planning purposes, based on initial estimates.
- 20. Azure DevOps Cloud Adoption Plan Generator Leverage Azure DevOps to log and track your cloud adoption plan https://azuredevopsdemogenerator.azurewebsites.net/
- 21. Strategy & Plan Workshop Flow Preparing for Your Cloud Journey with Microsoft Final Outcome: Actionable Strategy & Plan Document Or, Deployable Azure DevOps plan templates Session 1: Suggested time: 2-4 hours Session 2: Suggested time: 2-4 hours Define your cloud strategy • Introduction to Cloud Adoption Framework • Deep Dive on Strategy • Assess current state with Cloud Journey Tracker • Understand motivations & business outcomes • Evaluate financial & technical considerations • Define a business case Define the cloud adoption plan • Recap of session 1 • Deep dive on Plan • Rationalize digital estate • Stakeholder alignment • Readiness & Skills • Build & operationalize a cloud adoption plan through DevOps Suggested Participants • Strategy Team • IT and Business Leadership • Cloud Center of Excellence / Central IT Suggested Participants • Strategy Team • IT and Business Leadership • Cloud Center of Excellence / Central IT Output: • Documented cloud strategy including • Prioritized motivations & objectives • Key applications/workloads identified for cloud adoption Output: • Completed strategy and plan document capturing: • Prioritized workloads • Skills readiness plans • Documented Cloud adoption plan Tools and Assessments: • Strategic Migration Assessment & Readiness tool • Azure DevOps plan generator Tools and Assessments: • Cloud Journey Tracker • Strategy and Plan Template
- 22. Demo – ADO plan
- 23. Adopt Migrate First workload migration Expanded scenarios Best practice validation Process improvements Innovate Innovation guide Expanded scenarios Best practice validation Process improvements Ready Azure setup guide First landing zone Expand the landing zone Best practice validation Plan Digital estate Initial organization alignment Skills readiness plan Cloud adoption plan Define strategy Understand motivations Business outcomes Business justification Prioritize project Govern Methodology Benchmark initial best practice Governance maturity Manage Business commitments Operations baseline Operations maturity Microsoft Cloud Adoption Framework for Azure
- 24. Ready | Azure Setup Guide • Prepare the cloud environment before building and deploying solutions using Azure services • The Azure Setup Guide provides guidance on how to organize resources, control costs, and secure and manage your organization helping you create your landing zone in Azure The guide is also published in the Azure Quickstart Center Aka.ms/aqc within the Azure Portal
- 25. Prepare first landing zone Cloud Adoption Framework migrate landing zone blueprint Start VS Align VS Enhance Landing zone is the environment that is provisioned to host workloads being migrated from an on-premises environment into Azure.
- 26. Ready | Recommended Practices Leverage best practices in Cloud Adoption Framework to help your teams establish and prepare the Azure environment. These include guidance in the areas of: • Azure fundamentals • Networking • Identity and Access Control • Storage • Databases • Cost Management
- 27. Governance
- 28. Assess your current state of governance Use the Governance Benchmark http://aka.ms/adopt/gov/assess
- 29. Making Governance Actionable with Native Tools • Azure Blueprints • Azure Policy • Azure Cost Management • Azure Advisor • Azure Portal • Azure EA Content Pack • Azure Blueprints • Azure Policy • Azure Security Center • Azure Sentinel • Subscription Design • Encryption • Hybrid Identity • Azure Networking • Azure Automation • Azure Blueprints • Azure Policy • Azure Monitor • Azure Advisor • Resource Manager Templates • Resource Graph • Management Groups • Azure Blueprints • RBAC • Azure AD • Azure AD B2B • Azure AD B2C • Directory Federation • Directory Replication • Azure Blueprint • Azure Policy • Resource Grouping & Tagging • Resource Manager Templates • Azure Advisor • Azure DevOps • Azure Site Recovery • Azure Backup • Azure Automation Azure Monitor
- 30. Governance MVP Considerations Management Group Subscription Resource Group Geography Mission Critical Protected Data Other Production App1 App2 App3 App4 App5 App6 Environment (Production & Non-Production) Non- Production App1 App4 App5 Mission Critical Protected Data Other Production App7 App8 App9 App11 Environment (Non-Production & Production) Non- Production App10 App10 App12 Business Unit Resource Organization Build only what you need, add as the requirements are needed. Management Group Hierarchy • Business Unit • Geography • Environment Subscription • Per Application Category • Pre-production • Dev environments • Production Resource Groups • Per Application
- 31. Ready & Govern Workshop Flow Preparing for Your Cloud Journey with Microsoft Session 1: Suggested time: 3-4 hours Session 2: Suggested time: 3-4 hours Define Governance MVP Deep Dive on ‘Govern’ Recap of session 1 • Deep dive on Resource Consistency • Deep dive on Cost Management • Deep dive on Identity Baseline • Deep dive on Security Baseline • Build Deployment Acceleration to operationalize governance Suggested Participants • Cloud Architects • Risk and compliance teams • Security team Suggested Participants • Strategy Team • IT and Business Leadership • Cloud adoption team • Governance Teams • Operations Lead • Finance Design and implement your landing zones Introduction to Cloud Adoption Framework Deep Dive on ‘Ready’: • Understand Operation models • Azure landing zones overview • Review design areas • Evaluate implementation options: • Azure landing zones accelerator • Other implementation options - Start small approach, Partner offers for landing zones Output: • Azure landing zones MVP Output: • Cloud Governance MVP Tools and Assessments: • Governance Benchmark Tools and Assessments: • Azure landing zones accelerator • Identity team • Operations team • Cloud adoption team Azure environment that accounts for scale, security, governance, networking, and identity and enables application migration, modernization and innovation at scale in Azure. Final Outcome:
- 32. Migration guide to understand Azure migration tools. Tools and approaches to act on specific migration scenarios. Address common migration needs with best practices. Architect workloads using Well-Architected Define business commitments Establish management baseline Expand management baseline Advanced operations with Well-Architected Manage The manage methodology provides guidance on setting up an operations management baseline in alignment with business commitments. It also includes advanced operations and design principles for platforms or workloads that may require a deeper architecture review to deliver on resiliency and reliability commitments. Adopt This methodology of the Cloud Adoption Framework provides guidance on an iterative process of assessing workloads, deploying workloads and releasing workloads to production. It also covers specific tools and approaches for migrating Microsoft and third-party technologies such as SAP, Java apps, PHP apps, Linux and open-source databases and more. 33 Preparing for Your Cloud Journey with Microsoft
- 33. Assess your migration readiness Use the Strategy Migration Assessment and Readiness tool across 10 readiness areas: aka.ms/smarttool
- 34. Migration: pre-requisite steps Before proceeding with migration execution, it is required that all the upstream steps of Strategy, Plan and Ready are completed. Key deliverable assets include – the Cloud Adoption Plan template and a landing zone configuration. Define strategy Define business justification and expected outcomes Plan Align actionable cloud adoption plan to business outcomes Ready Prepare people, process and environment for change Adopt Migrate or Innovate Implement desired changes across IT and business processes Govern Comply, control and secure Manage Operate and optimize Migration waves Assess migration readiness: https://aka.ms/smarttool
- 35. Adopt migration execution Assess each workload and finalize architectural decisions about migration options. Initiate the migration of the environment using native tools, third-party tools, and project management tools. Workloads should be tested, optimized, documented, and released for ongoing operations. Review the migrated workloads and hand them off to governance, operations management, and security teams for ongoing support of those workloads. https://aka.ms/adopt/migrate Migrate Plan Ready Adopt Migration waves (releases) Plan, Ready, and Adopt establish repeatable processes for iterative change management and digital transformation. Those processes establish waves of workload migrations (releases in agile terms). Migration effort (iterations) Assess workloads Assess each batch of workloads to evaluate cost, architecture, and deployment tooling. Deploy workloads Replicate functionality in the cloud using IaaS, PaaS, cloud- native, or other modernization solutions. Release workloads Test, optimize, document, and review. Release by handing off for governance, management, and security.
- 36. ISV solutions (as needed) Assess workloads Deploy workloads Release workloads Migration tooling options Azure Migrate Data Migration Assistant (DMA) SQL Server Migration Assistant (SSMA) Azure Database Migration Service Azure Data Box Azure Cost Management Azure Advisor Azure Monitor Azure Security Center
- 37. Govern and manage migrated workloads After a successful workload migration, the adoption team should hand off to governance and operations teams to ensure the workload is well-governed and optimized. Define strategy Plan Ready Adopt Govern Manage Migration waves
- 38. Adopt & Manage Workshop Flow Preparing for Your Cloud Journey with Microsoft Outcome: Session 1: Migration overview Suggested time: 2-4 hours Session 2: Setup operations mgmt. Suggested time: 4-6 hours Part 1: ‘Manage’ methodology • Manage methodology deep dive • Define business commitments • Establish management baseline • Advanced operations and Well-Architected Part 2: Optimize workloads with Well- Architected • Overview of Well-Architected Framework • Well-Architected Review assessment Suggested Participants • Cloud architects • IT operations • Developers Suggested Participants • Strategy team • Enterprise Architects • Governance team • Cloud adoption team • Operations lead • Developers Part 1: Adopt | Migrate methodology • Migration process overview: Assess workloads, Deploy workloads, Release workloads • 'One Migration’ scenarios to address specific first and third-party technologies • Best practices to address common needs Part 2: Architect solutions with Well- Architected • Overview of Well-Architected Framework • Well-Architected Review assessment Output: • Commit to a go-forward plan to migrate the first wave of workloads, commonly represented in a finalized Migration Azure DevOps backlog Tools and Assessments: • Azure Migrate Tools and Assessments: • Operations Management planning workbook Output: • Commit to operations management testing, transition, accountability, & processes for post-migration workloads. • Updated operations management planning workbook Migration ADO backlog Ops management workbook • Cloud adoption team • Operations lead
- 39. Microsoft Cloud Adoption Framework: Where is security?
- 40. Access control Simplify security—and make it more effective
- 41. Microsoft Cloud Adoption Framework for Azure Security is a discipline you practice along your entire cloud adoption path Define strategy Define motivations, and create a business case leveraging cloud economics Plan Create actionable cloud adoption plan aligned to the strategy Ready Prepare cloud environments with Azure landing zones Security is a critical design area here Adopt Migrate or Innovate Design, build and deploy workloads to Azure Govern Automate governance baseline and empower delegated responsibility Security is a discipline of governance & automated guardrails Manage Build operations baseline and support enterprise operations Security drives your operations baseline implementation Ready Prepare cloud environments with Azure landing zones Govern Automate governance baseline and empower delegated responsibility Manage Build operations baseline and support enterprise operations Secure Establish security baseline and manage security posture All of which depend on sound security posture management
- 42. Cloud Adoption Framework – Secure methodology End state for managing your overall security posture Secure Business alignment Risk insights Security integration Operational resilience Security disciplines Access control Security operations Asset protection Security governance Innovation security Business alignment Security disciplines Cloud security team
- 43. Establish a security foundation Don’t try to learn every security tool today. Take a balanced approach to implementation—audit, learn, then apply.
- 44. Accelerate security with native tools Secure Business alignment Risk insights Security integration Operational resilience Security disciplines Access control Security operations Asset protection Security governance Innovation security Azure AD M365 Defender Azure Firewall Azure RBAC & ABAC Azure DDoS Azure Web Application Firewall Azure AD B2B Azure AD B2C Azure Bastion Azure Lighthouse Directory Federation Directory Replication Azure Networking Azure Portal Subscription Design Hybrid Identity Management Groups PrivateLink Azure Defender Azure Sentinel M365 Defender Azure Blueprints Azure Policy Defender for Cloud Azure Networking Azure Storage Encryption Management Groups Azure DDoS Azure Web App Firewall Azure Site Recovery Azure Backup Defender for Cloud Azure Blueprints Azure Policy Azure RBAC & ABAC Secure Score Compliance Dashboard Resource Locks Azure DevOps GitHub Advanced Security Resource Manager Templates Azure Automation API Management Gateway
- 45. Security best practices - Cloud Security & Zero Trust – Norge Cloud Champion Access control RBAC controls, Identity, NSGs, Firewalls, WAF, Gateways, Encryption, … Security operations Sentinel (SIEM/SOAR), BCDR Asset protection Azure Policy, encryption, backup Security governance Defender for Cloud, Blueprints, Management Groups Innovation security Security architect, secure DevOps, secure development practices
- 46. Adopt Migrate First workload migration Expanded scenarios Best practice validation Process improvements Innovate Innovation guide Expanded scenarios Best practice validation Process improvements Ready Azure setup guide First landing zone Expand the landing zone Best practice validation Plan Digital estate Initial organization alignment Skills readiness plan Cloud adoption plan Define strategy Understand motivations Business outcomes Business justification Prioritize project Govern Methodology Benchmark initial best practice Governance maturity Manage Business commitments Operations baseline Operations maturity Microsoft Cloud Adoption Framework for Azure
- 47. Strategic Migration Assessment & Readiness Tool Cloud Journey Tracker Governance Benchmark Evaluate your cloud readiness using Microsoft Assessments Understand your organization’s preparedness to implement a cloud migration at scale. Identify your cloud adoption needs and find recommendations for your unique cloud journey. Identify gaps in your organization’s current state of governance and get curated guidance on how to get started.
- 48. Adopt Strategic migration assessment and readiness tool (SMART) Azure migration guide Azure innovation guide Ready Azure setup guide Readiness checklist Naming and tagging tracking template Landing zone blueprints Plan Azure DevOps demo generator Cloud adoption plan template Define strategy Cloud journey tracker Business outcome template Govern Governance benchmark Governance process template Cost Management process template Deployment acceleration process template Identity process template Resource consistency process template Security baseline process template Manage Microsoft Azure Well-Architected Review Best practices source code Operations management workbook Other tools, templates, and assessments
- 49. Key Deliverables and Outcomes 1. CAF-ready Partners 2. CAF-aligned Offers 3. CAF customer & partner success stories https://customers.microsoft.com/en-us/story/753908- belmont-green-banking-capital-markets-azure Co-sell Prioritized & Co-sell Ready Marketplace listings Stories published & amplified
- 50. Thank you