The document discusses cloud governance, its necessity for monitoring and implementing policies, and the differences from traditional IT governance. It highlights key areas to include in cloud governance, such as subscription models, identity management, and security, emphasizing the use of Azure tools for effective governance. The document also introduces Azure governance capabilities for real-time policy enforcement and resource visibility without sacrificing developer agility.

1. Cloud Governance
Theory and tools

2. Introduction
Antti Arnell
Chief Architect
Azure Lead - Cloud Advisor
antti.arnell@cybercom.com
https://www.linkedin.com/in/arnell

3. What is Cloud Governance
and why do you need it?

4. Governance – a definition
Establishment of policies, and
continuous monitoring of their proper
implementation, by the members of the
governing body of an organization[…]1
1Source: BusinessDictionary

5. Why is Cloud Governance needed?
If you do not have a governance for you
cloud; how do you know you are:
Doing right things?
Doing them the right way?
How do you know?

6. Why is Cloud Governance needed?
Pressure to
digitally
transform &
innovate
Need for
agility to
reduce speed
to market
Shift to
DevOps
Cloud Sprawl
Increased complexity in
managing standard,
accountability,
compliance, consistent
architecture & cost
at Scale

7. Traditional approach
Sacrifice Speed for Control
Developers
Operations
Cloud Custodian /
Engineers responsible for
Cloud environment

8. Cloud-native governance
Speed and Control
Developers
Built-in controls through
policy instead of workflow
Operations
Cloud Custodian
Team

9. Compared to legacy IT governance
How does your Cloud Governance differ
from your IT Governance?
It might not or better said should not be
that different…
There is no point in
reinventing the wheel!

10. What should be in your governance?
Your needs may vary but you need to at least look at
Subscription models
Operation management
Identity and access management
Deployment models
Security and risk management
Data management
Infrastructure and networking
Service creation standards
Monitoring
Governance enforcementDevOps

11. So how can you enforce
your governance?

12. Native platform capabilities to ensure compliant use of cloud resources
Governance for Azure
Blueprints
Deploy and update
cloud environments in a
repeatable manner
using composable
artifacts
Resource Graph
Query, explore &
analyze cloud
resources at scale
Management Group
Define organizational
hierarchy
Cost
Monitor cloud spend
and optimize resources
Policy
Real-time
enforcement,
compliance
assessment and
remediation
NEW NEW
Control VisibilityEnvironment ConsumptionHierarchy

13. Azure Management Groups

14. Azure Policy
Remediation
Enforcement & Compliance
Apply policies
at scale
Turn on built-in policies
or build custom ones for all resource
types
Real-time policy evaluation and
enforcement
Periodic & on-demand compliance
evaluation
Apply policies to a Management
Group with control across your
entire organization
Apply multiple policies and &
aggregate policy states with policy
initiative
Real time remediation
Remediation on existing resources
(NEW)
Exclusion Scope
VM In-Guest Policy (NEW)

15. Azure Policy and Azure DevOps
Enforce policies as part of the development process

16. VM guest policy
Policy Assignment
Compliance
Policy Assignment
Compliance

17. Azure Blueprints
Deploy and update cloud environments in a repeatable manner using composable
artifacts
Role-based access controls
Policy Definitions
ARM Templates

18. Azure Resource Graph
Query, explore & analyze cloud resources at scale
Perform fast ad hoc exploration in large cloud
environment
Ability to assess the impact of applying
policies in vast cloud environment
Impact AssessmentExplore
Query & analyze across all of your cloud
resources at scale in seconds
Query & Analyze

19. Azure Governance Architecture
Providing control over the cloud environment, without sacrificing developer agility
CRUD
Azure Resource Manager (ARM)
Query
2. Policy-based Control: Real-time
enforcement, compliance assessment
and remediation at scale
3. Resource Visibility: Query, explore &
analyze cloud resources at scale
1. Environment Factory:
Deploy and update
cloud environments in a
repeatable manner
using composable
artifacts
Role-based
Access
Policy
Definitions
ARMTemplates
Management Groups
Subscriptions

20. Demo time

21. So how much will these cost you?
There is no such thing
as free beer!
But all these features are
free services!
So go out there an take
charge of your cloud!

22. Links to check out
Open Group Cloud Computing
Governance Framework:
http://www.opengroup.org/cloud/gov_snapshot/p3.htm
Azure Governance page:
azure.com/governance

23. cybercom.com