SlideShare a Scribd company logo
1 of 26
The Cloud Journey in an
Enterprise
ANDERS LUNDSGARD, SCANIA CONNECTED SERVICES
2018-04-23, Berlin
• Our Rules of Play
• Why Cloud?
• How do Scania Cloud?
Agenda
~300.000 connected vehicles
~150 engineers
~15 years of age
Scania Connected Services
24/7
/5
(Q3 2017)
~300.000 connected vehicles
~150 engineers
~15 years of age
Scania Connected Services
24/7
/5
Anders Lundsgård
Senior Engineer, Delivery Engineering
@anderslundsgard
(Q3 2017)
5
Scania Connected Services
Message Platform
Remote Diagnos
Fleet Management
Tacho
Do not scale!
6
Scania Connected Services
• 3-8 people
• Requirements
• Technologies
• Quality
• Deployment
• Operations
7
Autonomous Teams that fully own their services
• 3-8 people
• Requirements
• Technologies
• Quality
• Deployment
• Operations
8
Autonomous Teams that fully own their services
9
Autonomous Engineers
Deploy frequency
• 2015
– Agile teams
• 12 deploys per year
• 2016
– Autonomous Teams
• Continuous Delivery
• 30+ deploys per day
• 2011
– Software projects
• 2-3 in parallel
• 3 deploys per year
1. Microservice Architecture
2. Trust and courage from
management
Continuous Integration
…There are some Rules of Play
BUT
11
…
Version Control
Pull & Push several
times a day
Continuous
Integration
Server Target Servers
(Dev, Staging, Prod)
Version Everything
Code
Tests
Configuration
Database
Pipeline
Infrastructure
10 minutes
Deploy
Orchestrator
Reliable changes must also include Infrastructure
TO TRUNK!!
Infrastructure
• No really good answer… but reality for us today is
− No acceptance test environment with a “known state”
− Favour automated tests within individual services
− Not the combination between them
− Versioning of APIs
− Never introduce a braking change
− Make a new version and deprecate the old one
− Feature Toggling for gracefully rollout
− Monitoring has (partly) been a substitution for traditional testing
− Limit WIP and having zero downtime deployments increases QA
14
How to ensure QA with Microservices?
Cloud
15
Cloud Adoption
20162014
Cloud First
2019
Cloud Only
Cloud – Return on Investment
Resistance
Legacy
Education
Value
benefits of
cloud
18
Organize for 1000+ Engineers
Corporate IT
Cloud Adoption
Delivery Engineering DE DE DE
FeatureTeam
FeatureTeam
FeatureTeam
FeatureTeam
FeatureTeam
FeatureTeam
FeatureTeam
FeatureTeam
FeatureTeam
FeatureTeam
FeatureTeam
FeatureTeam
FeatureTeam
FeatureTeam
FeatureTeam
FeatureTeam
FeatureTeam
FeatureTeam
FeatureTeam
FeatureTeam
FeatureTeam
FeatureTeam
FeatureTeam
FeatureTeam
FeatureTeam
FeatureTeam
Max 30 feature teams per DE team
(very dependent on DevOps maturity
and willingness)
19
Cloud and Security roles in feature teams
1. Enabling feature teams to iterate as fast as possible
2. Cloud on-boarding and education
3. Core infrastructure
− Networking, IAM, DNS, …
4. Automation tooling
5. Security awareness
− Automated audits to Security Lead
− Security Compliance Validator (cfn_nag)
6. Cost awareness
− Billing reports to Cloud Lead
20
Delivery Engineering teams mission
• Version Control
• Audit logs
• Cloud account management
• Rules of Play in cloud
21
What to centralize?
Supporting Cloud engineers
What should they NOT DO?
22
Deployments
23
Rules of Play in the Cloud
24
Rules of Play in the Cloud
DEV
AdministratorAccess
Access resources via bastion
Test data only
Manual exploration
PROD
ReadOnlyAccess
No bastion
Customer data
Security Compliance Validator
Automated deployments only
25
Heroes have been one big obstacle
to scale agility in our Enterprise
26
Thank You!
Anders Lundsgård
@anderslundsgard

More Related Content

What's hot

The Power of Partnership & Building a Cloud Native Tier-1 Platform in Paralle...
The Power of Partnership & Building a Cloud Native Tier-1 Platform in Paralle...The Power of Partnership & Building a Cloud Native Tier-1 Platform in Paralle...
The Power of Partnership & Building a Cloud Native Tier-1 Platform in Paralle...
VMware Tanzu
 

What's hot (20)

DevOps In The World of Serverless - PureSec @ Fullstack Radar Day
DevOps In The World of Serverless - PureSec @ Fullstack Radar DayDevOps In The World of Serverless - PureSec @ Fullstack Radar Day
DevOps In The World of Serverless - PureSec @ Fullstack Radar Day
 
Eseguire Applicazioni Cloud-Native con Pivotal Cloud Foundry su Google Cloud ...
Eseguire Applicazioni Cloud-Native con Pivotal Cloud Foundry su Google Cloud ...Eseguire Applicazioni Cloud-Native con Pivotal Cloud Foundry su Google Cloud ...
Eseguire Applicazioni Cloud-Native con Pivotal Cloud Foundry su Google Cloud ...
 
The DevOps Journey in an Enterprise, Scania - Delivery Of Things World 2017
The DevOps Journey in an Enterprise, Scania - Delivery Of Things World 2017The DevOps Journey in an Enterprise, Scania - Delivery Of Things World 2017
The DevOps Journey in an Enterprise, Scania - Delivery Of Things World 2017
 
Kubernetes Administration Certification Cost-Register Now(7262008866)
Kubernetes Administration Certification Cost-Register Now(7262008866)Kubernetes Administration Certification Cost-Register Now(7262008866)
Kubernetes Administration Certification Cost-Register Now(7262008866)
 
I Segreti per Modernizzare con Successo le Applicazioni (Pivotal Cloud-Native...
I Segreti per Modernizzare con Successo le Applicazioni (Pivotal Cloud-Native...I Segreti per Modernizzare con Successo le Applicazioni (Pivotal Cloud-Native...
I Segreti per Modernizzare con Successo le Applicazioni (Pivotal Cloud-Native...
 
Monitoring Serverless Applications with Datadog
Monitoring Serverless Applications with DatadogMonitoring Serverless Applications with Datadog
Monitoring Serverless Applications with Datadog
 
Sicurezza integrate nella tua piattaforma Cloud-Native con VMware NSX (Pivota...
Sicurezza integrate nella tua piattaforma Cloud-Native con VMware NSX (Pivota...Sicurezza integrate nella tua piattaforma Cloud-Native con VMware NSX (Pivota...
Sicurezza integrate nella tua piattaforma Cloud-Native con VMware NSX (Pivota...
 
Pivotal Container Service il modo più semplice per gestire Kubernetes in azie...
Pivotal Container Service il modo più semplice per gestire Kubernetes in azie...Pivotal Container Service il modo più semplice per gestire Kubernetes in azie...
Pivotal Container Service il modo più semplice per gestire Kubernetes in azie...
 
Azure DevOps with VSTS
Azure DevOps with VSTSAzure DevOps with VSTS
Azure DevOps with VSTS
 
DevOps Fest 2020. Сергей Абаничев. Modern CI\CD pipeline with Azure DevOps
DevOps Fest 2020. Сергей Абаничев. Modern CI\CD pipeline with Azure DevOpsDevOps Fest 2020. Сергей Абаничев. Modern CI\CD pipeline with Azure DevOps
DevOps Fest 2020. Сергей Абаничев. Modern CI\CD pipeline with Azure DevOps
 
Engineering Manager, Edge Insights @Netflix
Engineering Manager, Edge Insights @NetflixEngineering Manager, Edge Insights @Netflix
Engineering Manager, Edge Insights @Netflix
 
50 production deployments a day, at least
50 production deployments a day, at least50 production deployments a day, at least
50 production deployments a day, at least
 
Welcome - Kubernetes for the Enterprise - London
Welcome - Kubernetes for the Enterprise - LondonWelcome - Kubernetes for the Enterprise - London
Welcome - Kubernetes for the Enterprise - London
 
Transformational DevOps with AWS Native Tools
Transformational DevOps with AWS Native ToolsTransformational DevOps with AWS Native Tools
Transformational DevOps with AWS Native Tools
 
Containers at Netflx - An Evolving Story QConSF2015
Containers at Netflx - An Evolving Story QConSF2015Containers at Netflx - An Evolving Story QConSF2015
Containers at Netflx - An Evolving Story QConSF2015
 
Introducción a Azure Devops Pipelines - Plain Concepts DevOps day
Introducción a Azure Devops Pipelines - Plain Concepts DevOps dayIntroducción a Azure Devops Pipelines - Plain Concepts DevOps day
Introducción a Azure Devops Pipelines - Plain Concepts DevOps day
 
The Power of Partnership & Building a Cloud Native Tier-1 Platform in Paralle...
The Power of Partnership & Building a Cloud Native Tier-1 Platform in Paralle...The Power of Partnership & Building a Cloud Native Tier-1 Platform in Paralle...
The Power of Partnership & Building a Cloud Native Tier-1 Platform in Paralle...
 
Azure DevOps Presentation
Azure DevOps PresentationAzure DevOps Presentation
Azure DevOps Presentation
 
Cloud expo 2018: From Apollo 13 to Google SRE - When DevOps meets SRE
Cloud expo 2018: From Apollo 13 to Google SRE - When DevOps meets SRECloud expo 2018: From Apollo 13 to Google SRE - When DevOps meets SRE
Cloud expo 2018: From Apollo 13 to Google SRE - When DevOps meets SRE
 
The DevOps journey in an Enterprise - Scania @ Swisscom software day 2016
The DevOps journey in an Enterprise - Scania @ Swisscom software day 2016The DevOps journey in an Enterprise - Scania @ Swisscom software day 2016
The DevOps journey in an Enterprise - Scania @ Swisscom software day 2016
 

Similar to The Cloud journey in an Enterprise - Delivery of Things World - Berlin April 23, 2018

C3DNA-Presentation
C3DNA-PresentationC3DNA-Presentation
C3DNA-Presentation
rmikkilineni
 
IBM Technology Day 2013 Smarter Computing P Perdaems Salle Rome
IBM Technology Day 2013 Smarter Computing P Perdaems Salle RomeIBM Technology Day 2013 Smarter Computing P Perdaems Salle Rome
IBM Technology Day 2013 Smarter Computing P Perdaems Salle Rome
IBM Switzerland
 

Similar to The Cloud journey in an Enterprise - Delivery of Things World - Berlin April 23, 2018 (20)

The Cloud Journey in an Enterprise - CoDe-Conf - Copenhagen October 11, 2018
The Cloud Journey in an Enterprise - CoDe-Conf - Copenhagen October 11, 2018 The Cloud Journey in an Enterprise - CoDe-Conf - Copenhagen October 11, 2018
The Cloud Journey in an Enterprise - CoDe-Conf - Copenhagen October 11, 2018
 
Cloud Migration - CCS Technologies (P) Ltd.
Cloud Migration - CCS Technologies (P) Ltd.Cloud Migration - CCS Technologies (P) Ltd.
Cloud Migration - CCS Technologies (P) Ltd.
 
Cloud summit 2019 - Scania
Cloud summit 2019 - ScaniaCloud summit 2019 - Scania
Cloud summit 2019 - Scania
 
AWS Partner Summit London 2015 - Keynote
AWS Partner Summit London 2015 - KeynoteAWS Partner Summit London 2015 - Keynote
AWS Partner Summit London 2015 - Keynote
 
Support Software Defined Networking with Dynamic Network Architecture
Support Software Defined Networking with Dynamic Network ArchitectureSupport Software Defined Networking with Dynamic Network Architecture
Support Software Defined Networking with Dynamic Network Architecture
 
You Can Build Your OpenStack and Consume it Too
You Can Build Your OpenStack and Consume it TooYou Can Build Your OpenStack and Consume it Too
You Can Build Your OpenStack and Consume it Too
 
C3DNA-Presentation
C3DNA-PresentationC3DNA-Presentation
C3DNA-Presentation
 
Pentagon - Company Profile v1.4
Pentagon - Company Profile v1.4Pentagon - Company Profile v1.4
Pentagon - Company Profile v1.4
 
Cloud transition - The Trivadis approach
Cloud transition - The Trivadis approachCloud transition - The Trivadis approach
Cloud transition - The Trivadis approach
 
Defining a Cloud Adoption Journey to Deliver Cloud Native Services
Defining a Cloud Adoption Journey to Deliver Cloud Native ServicesDefining a Cloud Adoption Journey to Deliver Cloud Native Services
Defining a Cloud Adoption Journey to Deliver Cloud Native Services
 
Redefining Perspectives edition 12 and 13 session 2
Redefining Perspectives edition 12 and 13 session 2Redefining Perspectives edition 12 and 13 session 2
Redefining Perspectives edition 12 and 13 session 2
 
A New Approach to Continuous Monitoring in the Cloud
A New Approach to Continuous Monitoring in the CloudA New Approach to Continuous Monitoring in the Cloud
A New Approach to Continuous Monitoring in the Cloud
 
Orange Business Live 2013 cloud breakout
Orange Business Live 2013 cloud breakoutOrange Business Live 2013 cloud breakout
Orange Business Live 2013 cloud breakout
 
InterConnect 2015: 3540 Release and Deploy Headliner
InterConnect 2015: 3540 Release and Deploy HeadlinerInterConnect 2015: 3540 Release and Deploy Headliner
InterConnect 2015: 3540 Release and Deploy Headliner
 
DevOps journey at Scania - Visiting Migrationsverket
DevOps journey at Scania - Visiting MigrationsverketDevOps journey at Scania - Visiting Migrationsverket
DevOps journey at Scania - Visiting Migrationsverket
 
Resume
ResumeResume
Resume
 
You Can Build Your OpenStack and Consume it Too
You Can Build Your OpenStack and Consume it TooYou Can Build Your OpenStack and Consume it Too
You Can Build Your OpenStack and Consume it Too
 
NUS-ISS Learning Day 2018- Designing software to make the most of cloud platf...
NUS-ISS Learning Day 2018- Designing software to make the most of cloud platf...NUS-ISS Learning Day 2018- Designing software to make the most of cloud platf...
NUS-ISS Learning Day 2018- Designing software to make the most of cloud platf...
 
Risc and velostrata 2 28 2018 lessons_in_cloud_migration
Risc and velostrata  2 28 2018 lessons_in_cloud_migrationRisc and velostrata  2 28 2018 lessons_in_cloud_migration
Risc and velostrata 2 28 2018 lessons_in_cloud_migration
 
IBM Technology Day 2013 Smarter Computing P Perdaems Salle Rome
IBM Technology Day 2013 Smarter Computing P Perdaems Salle RomeIBM Technology Day 2013 Smarter Computing P Perdaems Salle Rome
IBM Technology Day 2013 Smarter Computing P Perdaems Salle Rome
 

More from Anders Lundsgård

More from Anders Lundsgård (6)

The DevOps Journey in an Enterprise - DOES 2021
The DevOps Journey in an Enterprise - DOES 2021The DevOps Journey in an Enterprise - DOES 2021
The DevOps Journey in an Enterprise - DOES 2021
 
The DevOps journey in an Enterprise - Continuous Lifecycle London 2016
The DevOps journey in an Enterprise - Continuous Lifecycle London 2016The DevOps journey in an Enterprise - Continuous Lifecycle London 2016
The DevOps journey in an Enterprise - Continuous Lifecycle London 2016
 
Always On - Zero Downtime releases
Always On - Zero Downtime releasesAlways On - Zero Downtime releases
Always On - Zero Downtime releases
 
DevOps @ Scania - Perforce on Tour, Berlin 2015
DevOps @ Scania - Perforce on Tour, Berlin 2015DevOps @ Scania - Perforce on Tour, Berlin 2015
DevOps @ Scania - Perforce on Tour, Berlin 2015
 
An agile journey - Scania Connected Services at Meetup Go Agile - Stockholm (...
An agile journey - Scania Connected Services at Meetup Go Agile - Stockholm (...An agile journey - Scania Connected Services at Meetup Go Agile - Stockholm (...
An agile journey - Scania Connected Services at Meetup Go Agile - Stockholm (...
 
DevOps @ Scania - Trust and some code - NFI Testforum 2015
DevOps @ Scania - Trust and some code - NFI Testforum 2015DevOps @ Scania - Trust and some code - NFI Testforum 2015
DevOps @ Scania - Trust and some code - NFI Testforum 2015
 

Recently uploaded

Uncommon Grace The Autobiography of Isaac Folorunso
Uncommon Grace The Autobiography of Isaac FolorunsoUncommon Grace The Autobiography of Isaac Folorunso
Uncommon Grace The Autobiography of Isaac Folorunso
Kayode Fayemi
 
Chiulli_Aurora_Oman_Raffaele_Beowulf.pptx
Chiulli_Aurora_Oman_Raffaele_Beowulf.pptxChiulli_Aurora_Oman_Raffaele_Beowulf.pptx
Chiulli_Aurora_Oman_Raffaele_Beowulf.pptx
raffaeleoman
 
If this Giant Must Walk: A Manifesto for a New Nigeria
If this Giant Must Walk: A Manifesto for a New NigeriaIf this Giant Must Walk: A Manifesto for a New Nigeria
If this Giant Must Walk: A Manifesto for a New Nigeria
Kayode Fayemi
 
Proofreading- Basics to Artificial Intelligence Integration - Presentation:Sl...
Proofreading- Basics to Artificial Intelligence Integration - Presentation:Sl...Proofreading- Basics to Artificial Intelligence Integration - Presentation:Sl...
Proofreading- Basics to Artificial Intelligence Integration - Presentation:Sl...
David Celestin
 
Bring back lost lover in USA, Canada ,Uk ,Australia ,London Lost Love Spell C...
Bring back lost lover in USA, Canada ,Uk ,Australia ,London Lost Love Spell C...Bring back lost lover in USA, Canada ,Uk ,Australia ,London Lost Love Spell C...
Bring back lost lover in USA, Canada ,Uk ,Australia ,London Lost Love Spell C...
amilabibi1
 

Recently uploaded (15)

Dreaming Marissa Sánchez Music Video Treatment
Dreaming Marissa Sánchez Music Video TreatmentDreaming Marissa Sánchez Music Video Treatment
Dreaming Marissa Sánchez Music Video Treatment
 
Report Writing Webinar Training
Report Writing Webinar TrainingReport Writing Webinar Training
Report Writing Webinar Training
 
Digital collaboration with Microsoft 365 as extension of Drupal
Digital collaboration with Microsoft 365 as extension of DrupalDigital collaboration with Microsoft 365 as extension of Drupal
Digital collaboration with Microsoft 365 as extension of Drupal
 
SOLID WASTE MANAGEMENT SYSTEM OF FENI PAURASHAVA, BANGLADESH.pdf
SOLID WASTE MANAGEMENT SYSTEM OF FENI PAURASHAVA, BANGLADESH.pdfSOLID WASTE MANAGEMENT SYSTEM OF FENI PAURASHAVA, BANGLADESH.pdf
SOLID WASTE MANAGEMENT SYSTEM OF FENI PAURASHAVA, BANGLADESH.pdf
 
Uncommon Grace The Autobiography of Isaac Folorunso
Uncommon Grace The Autobiography of Isaac FolorunsoUncommon Grace The Autobiography of Isaac Folorunso
Uncommon Grace The Autobiography of Isaac Folorunso
 
The workplace ecosystem of the future 24.4.2024 Fabritius_share ii.pdf
The workplace ecosystem of the future 24.4.2024 Fabritius_share ii.pdfThe workplace ecosystem of the future 24.4.2024 Fabritius_share ii.pdf
The workplace ecosystem of the future 24.4.2024 Fabritius_share ii.pdf
 
Chiulli_Aurora_Oman_Raffaele_Beowulf.pptx
Chiulli_Aurora_Oman_Raffaele_Beowulf.pptxChiulli_Aurora_Oman_Raffaele_Beowulf.pptx
Chiulli_Aurora_Oman_Raffaele_Beowulf.pptx
 
My Presentation "In Your Hands" by Halle Bailey
My Presentation "In Your Hands" by Halle BaileyMy Presentation "In Your Hands" by Halle Bailey
My Presentation "In Your Hands" by Halle Bailey
 
ICT role in 21st century education and it's challenges.pdf
ICT role in 21st century education and it's challenges.pdfICT role in 21st century education and it's challenges.pdf
ICT role in 21st century education and it's challenges.pdf
 
lONG QUESTION ANSWER PAKISTAN STUDIES10.
lONG QUESTION ANSWER PAKISTAN STUDIES10.lONG QUESTION ANSWER PAKISTAN STUDIES10.
lONG QUESTION ANSWER PAKISTAN STUDIES10.
 
AWS Data Engineer Associate (DEA-C01) Exam Dumps 2024.pdf
AWS Data Engineer Associate (DEA-C01) Exam Dumps 2024.pdfAWS Data Engineer Associate (DEA-C01) Exam Dumps 2024.pdf
AWS Data Engineer Associate (DEA-C01) Exam Dumps 2024.pdf
 
If this Giant Must Walk: A Manifesto for a New Nigeria
If this Giant Must Walk: A Manifesto for a New NigeriaIf this Giant Must Walk: A Manifesto for a New Nigeria
If this Giant Must Walk: A Manifesto for a New Nigeria
 
Proofreading- Basics to Artificial Intelligence Integration - Presentation:Sl...
Proofreading- Basics to Artificial Intelligence Integration - Presentation:Sl...Proofreading- Basics to Artificial Intelligence Integration - Presentation:Sl...
Proofreading- Basics to Artificial Intelligence Integration - Presentation:Sl...
 
Dreaming Music Video Treatment _ Project & Portfolio III
Dreaming Music Video Treatment _ Project & Portfolio IIIDreaming Music Video Treatment _ Project & Portfolio III
Dreaming Music Video Treatment _ Project & Portfolio III
 
Bring back lost lover in USA, Canada ,Uk ,Australia ,London Lost Love Spell C...
Bring back lost lover in USA, Canada ,Uk ,Australia ,London Lost Love Spell C...Bring back lost lover in USA, Canada ,Uk ,Australia ,London Lost Love Spell C...
Bring back lost lover in USA, Canada ,Uk ,Australia ,London Lost Love Spell C...
 

The Cloud journey in an Enterprise - Delivery of Things World - Berlin April 23, 2018

  • 1. The Cloud Journey in an Enterprise ANDERS LUNDSGARD, SCANIA CONNECTED SERVICES 2018-04-23, Berlin
  • 2. • Our Rules of Play • Why Cloud? • How do Scania Cloud? Agenda
  • 3. ~300.000 connected vehicles ~150 engineers ~15 years of age Scania Connected Services 24/7 /5 (Q3 2017)
  • 4. ~300.000 connected vehicles ~150 engineers ~15 years of age Scania Connected Services 24/7 /5 Anders Lundsgård Senior Engineer, Delivery Engineering @anderslundsgard (Q3 2017)
  • 5. 5 Scania Connected Services Message Platform Remote Diagnos Fleet Management Tacho Do not scale!
  • 7. • 3-8 people • Requirements • Technologies • Quality • Deployment • Operations 7 Autonomous Teams that fully own their services
  • 8. • 3-8 people • Requirements • Technologies • Quality • Deployment • Operations 8 Autonomous Teams that fully own their services
  • 10. Deploy frequency • 2015 – Agile teams • 12 deploys per year • 2016 – Autonomous Teams • Continuous Delivery • 30+ deploys per day • 2011 – Software projects • 2-3 in parallel • 3 deploys per year 1. Microservice Architecture 2. Trust and courage from management Continuous Integration
  • 11. …There are some Rules of Play BUT 11 …
  • 12.
  • 13. Version Control Pull & Push several times a day Continuous Integration Server Target Servers (Dev, Staging, Prod) Version Everything Code Tests Configuration Database Pipeline Infrastructure 10 minutes Deploy Orchestrator Reliable changes must also include Infrastructure TO TRUNK!! Infrastructure
  • 14. • No really good answer… but reality for us today is − No acceptance test environment with a “known state” − Favour automated tests within individual services − Not the combination between them − Versioning of APIs − Never introduce a braking change − Make a new version and deprecate the old one − Feature Toggling for gracefully rollout − Monitoring has (partly) been a substitution for traditional testing − Limit WIP and having zero downtime deployments increases QA 14 How to ensure QA with Microservices?
  • 17. Cloud – Return on Investment Resistance Legacy Education Value benefits of cloud
  • 18. 18 Organize for 1000+ Engineers Corporate IT Cloud Adoption Delivery Engineering DE DE DE FeatureTeam FeatureTeam FeatureTeam FeatureTeam FeatureTeam FeatureTeam FeatureTeam FeatureTeam FeatureTeam FeatureTeam FeatureTeam FeatureTeam FeatureTeam FeatureTeam FeatureTeam FeatureTeam FeatureTeam FeatureTeam FeatureTeam FeatureTeam FeatureTeam FeatureTeam FeatureTeam FeatureTeam FeatureTeam FeatureTeam Max 30 feature teams per DE team (very dependent on DevOps maturity and willingness)
  • 19. 19 Cloud and Security roles in feature teams
  • 20. 1. Enabling feature teams to iterate as fast as possible 2. Cloud on-boarding and education 3. Core infrastructure − Networking, IAM, DNS, … 4. Automation tooling 5. Security awareness − Automated audits to Security Lead − Security Compliance Validator (cfn_nag) 6. Cost awareness − Billing reports to Cloud Lead 20 Delivery Engineering teams mission
  • 21. • Version Control • Audit logs • Cloud account management • Rules of Play in cloud 21 What to centralize?
  • 22. Supporting Cloud engineers What should they NOT DO? 22 Deployments
  • 23. 23 Rules of Play in the Cloud
  • 24. 24 Rules of Play in the Cloud DEV AdministratorAccess Access resources via bastion Test data only Manual exploration PROD ReadOnlyAccess No bastion Customer data Security Compliance Validator Automated deployments only
  • 25. 25 Heroes have been one big obstacle to scale agility in our Enterprise

Editor's Notes

  1. The cloud first decision (Q3 2016) was crucial for our cloud movement. No more ShadowOps!
  2. Moved from software projects to agile teams and continuous integration. Even with continuous integration and agile teams it is hard to maintaine a big codebase Also about 4 times more check-ins with the microservice architecture.
  3. Code review is your security gate. Not a QA or an ISec department.