Azure Day @ Trivadis – Where Cloud Enthusiasts meet

Lernen Sie von ausgewiesenen Azure Experten und verbessern Sie Ihre Skills

Die Microsoft Azure Cloud Plattform feiert demnächst ihr 10-jähriges Jubiläum und startet in der Schweiz durch. Cloud Computing ist für unsere Enterprisekunden wichtiger denn je und steht auf der Agenda an erster Stelle. Am Trivadis Azure Day berichten wir von spannenden Best Practice Szenarios und durchdachten Use Cases. Kommen Sie mit uns auf eine Reise durch die Azure Cloud und nehmen Sie unsere Learnings und Best Practices mit nach Hause. Die Konferenz wird in deutscher Sprache gehalten.

Welche wertvollen Insights werden Sie erhalten?

Am Trivadis Azure Day erwarten Sie 2 volle Tracks mit spannenden Sessions zu diversen Themen rund um die Azure Cloud. Die Sprecher sind zum grossen Teil Trivadis Consultants, welche aus Ihren Kundenprojekten aus dem DACH-Raum erzählen. Ergänzt wird die Agenda mit 2 Speakern von unserem Partner Microsoft. Nutzen Sie diese einmalige Gelegenheit, um von unseren Herausforderungen und der Projekterfahrung zu profitieren. Der Trivadis Azure Day ist eine Gelegenheit, die es sonst nirgendwo gibt!
  • Wie starte ich meine Reise in die Cloud?
  • Bots und AI, brauche ich das?
  • Infrastruktur als Code
  • Azure@Helsana
  • Die Azure Foundation – Wie lege ich eine erfolgreiche Basis?
  • Business Intelligence in der Cloud

Die Einführung einer Cloud Plattform in einer Organisation erfordert es, die strategischen, organisatorischen sowie auch die technischen Herausforderungen zu identifizieren und zu meistern.

Bei der Einführung der Azure Cloud Plattform unterscheiden wir zwischen der Azure Foundation und den Azure Solutions. Die Azure Foundation besteht aus drei Säulen, welche die gesamte Azure Cloud Plattform unserer Kunden tragen. Hierzu gehören Azure Governance, Azure Core Infrastruktur und Azure Operations. In dieser Session stellen wir die Azure Foundations vor und erzählen von den Erfahrungen, welche wir in unseren Kundenprojekten gemacht haben.

Für mehr Infos: https://m.trivadis.com/azure-days

Azure Governance with Management Groups, Blueprints and Policies – First steps before the implementation

To adopt Azure as your Enterprise cloud platform, you should start with Cloud Governance to starting work in a controlled and secure Environment. Azure provides several Services to do that, but you still have get your organizations requirements for governance, security and compliance, and configure this Services for your requirements.

Below you can find the main three Azure Services which Azure provides to build Governance in Azure and first steps from my experience to start with this Services before the implementation.

Azure Resource Organization with Management Groups

What is Azure Management Group and which goals can you reach with using of Management Groups:

If your organization has many subscriptions, you may need a way to efficiently manage access, policies, and compliance for those subscriptions. Azure management groups provide a level of scope above subscriptions. You organize subscriptions into containers called “management groups” and apply your governance conditions to the management groups. All subscriptions within a management group automatically inherit the conditions applied to the management group. Management groups give you enterprise-grade management at a large scale no matter what type of subscriptions you might have.

For example, you can apply policies to a management group that limits the regions available for virtual machine (VM) creation. This policy would be applied to all management groups, subscriptions, and resources under that management group by only allowing VMs to be created in that region.

Source https://docs.microsoft.com/de-de/azure/governance/management-groups/index

 

First steps:

  • group your Governance, Compliance, and Security requirements top-down and divide it in max. 6 hierarchical levels
  • separate the organizational and operational responsibilities

 

Azure Policy structure with Initiatives and Effect Types

What is Azure Policy and which goals can you reach with using of these Policies:

Governance validates that your organization can achieve its goals through effective and efficient use of IT. It meets this need by creating clarity between business goals and IT projects.

Does your company experience a significant number of IT issues that never seem to get resolved? Good IT governance involves planning your initiatives and setting priorities on a strategic level to help manage and prevent issues. This strategic need is where Azure Policy comes in.

Azure Policy is a service in Azure that you use to create, assign and, manage policies. These policies enforce different rules and effects over your resources, so those resources stay compliant with your corporate standards and service level agreements. Azure Policy meets this need by evaluating your resources for non-compliance with assigned policies. For example, you can have the policy to allow only a certain SKU size of virtual machines in your environment. Once this policy is implemented, new and existing resources are evaluated for compliance. With the right type of policy, existing resources can be brought into compliance. Later in this documentation, we’ll go over more details on how to create and implement policies with Azure Policy.

Source https://docs.microsoft.com/en-us/azure/governance/policy/overview

 

First steps:

  • verify your Governance, Compliance, and Security requirements from the first part
  • identify which type of effects (auditing or enforcing) make sense four your organization
  • group similar policies to Initiative even it’s only one, use the initiatives
  • start with auditing from top-down and enforcing from bottom-up
  • verify which initiatives/policies should be assigned over the management groups and which one over the Blueprints

 

Azure Blueprint structure for an initial and additional setup

What is Azure Policy and which goals can you reach with using of these Policies:

just as a blueprint allows an engineer or an architect to sketch a project’s design parameters, Azure Blueprints enables cloud architects and central information technology groups to define a repeatable set of Azure resources that implements and adheres to an organization’s standards, patterns, and requirements. Azure Blueprints makes it possible for development teams to rapidly build and stand up new environments with the trust they’re building within organizational compliance with a set of built-in components — such as networking — to speed up development and delivery.

Blueprints are a declarative way to orchestrate the deployment of various resource templates and other artifacts such as:

    • Role Assignments

    • Policy Assignments

    • Azure Resource Manager templates

    • Resource Groups

Source https://docs.microsoft.com/en-us/azure/governance/blueprints/overview

First steps:

  • Sketch your own Azure Environment Templates with organization’s standards, patterns, and requirements to reuse it in multiple Azure Subscriptions.
  • identify the initial Blueprints which contains the basic settings of each Azure subscription in your organization and then create additional blueprints for individual Services like ISO certified SQL Instance and etc.