cloud.developerdays.pl@DeveloperDaysPL
SESSION STARTS AT 16:20
cloud.developerdays.pl@DeveloperDaysPL
Sponsors
Silver Sponsors
Strategic Sponsor
Media Partners
Day Zero In A Cloud Project
@RaduVunvulea
RADU VUNVULEA
Chief Cloud Strategies
at @Avaelgo
Technology Enthusiast
Microsoft Azure MVP
Speaker & Trainer
Writer & Blogger
Idealist Software
Architecture Crafter
Day 0 – On-premises
Manage
User
Access
Define
infrastruc
ture
Request
infrastruc
ture
resources
Manage
security
Manage
access
control
Define
policies
Configure
firewall
for
external
systems
Day 0 - Cloud
Get cloud
subscripti
on
Click Create Click Create Click Create
Day 0 - Cloud
Flexibility
Self
Service
Fast
provisioning
cloud.developerdays.pl@DeveloperDaysPL
Lackofcontrol
Resource
Data
Access
Security
Consumption
cloud.developerdays.pl@DeveloperDaysPL
Lackofcontrol
Resource
Data
Access
Security
Consumption
$
£
€
Identify concerns that need to be attacked
when you kick-off a cloud project
Purpose
cloud.developerdays.pl@DeveloperDaysPL
ACCESSIBILITY &
ENVIRONMENT ISOLATION
Accessibility
VM
VM
VM
VM VM VM VM
VM
DB
Accessibility
VM
VM
VM
VM VM VM VM
VM
DB
Environments
DEV TEST PRE-PROD PROD
Access Control
Subscription
Storage Storage
Computation Computation Computation
Subscription
Environments
DEV TEST PRE-PROD PROD
Access Control
Subscription
Storage Storage
Computation Computation ComputationComputation
Storage Storage
Subscription
Access Control Access Control Access Control
Subscription
Accessibility &
Environment
Network
isolation
VPN
Firewall & IP
Public
Accessibility
TLS
Location
cloud.developerdays.pl@DeveloperDaysPL
ACCESS RIGHTS
Admin
Classical approach
Cloud Subscription
PM Developer Tester ClientITDevOps
Admin
Classical approach
Cloud Subscription
PM Developer Tester ClientITDevOps
Subscription
Access
Limit full
access
rights
Control
access of
DEV &
Test
3rd parties shall
not be admin
on client
subscription
3rd parties
can be co-
admin
Granular
permissions
Use only
company
emails
cloud.developerdays.pl@DeveloperDaysPL
DATA SECURITY
Data security
Storage
Developer
Tester
Client
DevOps
Full access Relational Database
No-SQL Database
PRODPRETESTDEV
Data security
Storage
Developer
Tester
Client
DevOps
Full access Relational Database
No-SQL Database
Country regulations
Data
Security
Environment
isolation
Row
masking
Data
masking
Token base
access (SAS)
RBAC
cloud.developerdays.pl@DeveloperDaysPL
RESOURCE MANAGEMENT
VM
VM
VM
DB
VM
VM
VM
DB
VM VM
VMDB
VM VM
VM
VM
VM
DB
VM VM
VMDB
VM VM
VMDB
VM
VM
VM
DB
VM VM
VM VM
VM VM
VM VM
VMDB
VMDB
VMDB
VM VM
Resource management
Environment definition
New resource
Clean-up
Tear-down
Scripts only
Policy
cloud.developerdays.pl@DeveloperDaysPL
COST CONTROL
What is the value of the bill?
VM
VM
VM
DB
VM VM
VMDB
Cost
Control
Estimate
first
Define
budget
Access
control
Limit
consumpti
on per
env
Define
alerts
Empower
the team
cloud.developerdays.pl@DeveloperDaysPL
PROCESS DEFINITION
3636
36
Process definition
Resource
Control
Access
Management
Cost control
Artifacts Data Sharing Deployment
Process definition
Resource
Control
Access
Management
Cost control
Artifacts Data Sharing Deployment
Automation
OVERVIEW
Overview
Access
control
Data security
Accessibility
Consumtion
Environment
Isolation
Policies
cloud.developerdays.pl@DeveloperDaysPL
Q & A
42
THANK YOU!
@RaduVunvulea
RADU VUNVULEA
radu.vunvulea@avaelgo.ro
CHIEF CLOUD STRATEGIST
cloud.developerdays.pl
@DeveloperDaysPL
Sponsors
Silver Sponsors
Strategic Sponsor
Media Partners

Day Zero on a Xloud Projec - Radu Vunvulea Cloud Developer Days 2018

Editor's Notes

  • #10 Story with suspended project because of security and data issues
  • #15 Web Apps configured with VNET and VPN, but resources were outside it. UK Region
  • #16 Subs sharing
  • #22 Left the company and still have access to the env.
  • #24 Shared storage env
  • #26 Data in UK, processor in North Europe
  • #34 SB checks
  • #37 How to magene it – we don’t know