Section 5 – Structured Development on Multi-Cloud Environments with DevOps
by
Multi-Cloud Architecture and Governance
- Multi-Cloud Architecture and Governance
- Why subscribe?
- Contributors
- About the author
- About the reviewers
- Packt is searching for authors like you
- Preface
- Section 1 – Introduction to Architecture and Governance for Multi-Cloud Environments
- Chapter 1: Introduction to Multi-Cloud
- Understanding multi-cloud concepts
- Multi-cloud – more than just public and private
- Multi-cloud as a true mixed zone
- Setting out a real strategy for multi-cloud
- What would be the best solution for my business requirements?
- Introducing the main players in the field
- Public clouds
- Private clouds
- Summary
- Questions
- Further reading
- Chapter 2: Business Acceleration Using a Multi-Cloud Strategy
- Analyzing the enterprise strategy for the cloud
- Industry position
- Enterprise core competence
- Long-term planning
- Financial structure
- Fitting cloud technology to business requirements
- Business planning
- Financial planning
- Technical planning
- IT4IT
- Keeping track of cloud developments – focusing on the business strategy
- Foundation architecture
- Cost of delay
- Benefit of opportunity
- Creating a comprehensive business roadmap
- Mapping the business roadmap to the cloud-fit strategy
- The Twelve-Factor App
- Summary
- Questions
- Further reading
- Chapter 3: Getting Connected – Designing Connectivity
- Connectivity is king – connectivity concepts in multi-cloud
- VPN
- Understanding concepts of direct connectivity
- Managed dedicated connectivity through telecom companies or brokers
- Designing a network topology for multi-cloud – thinking ahead
- Prerequisites for creating a network design
- Understanding network protocols in multi-cloud
- Summary
- Questions
- Chapter 4: Service Designs for Multi-Cloud
- Introducing the scaffold for multi-cloud environments
- Identity and access management (IAM)
- Security
- Cost management
- Monitoring
- Automation
- Cloud adoption stages
- Stage 1 – defining a business strategy and business case
- Stage 2 – creating your team
- Stage 3 – defining the architecture
- Stage 4 – engaging with cloud providers; getting financial controls in place
- Stage 5 – building and configuring the landing zone
- Stage 6 – assessment
- Stage 7 – migrating and transforming
- Translating business KPIs into cloud SLAs
- Using cloud adoption frameworks to align between cloud providers
- Understanding identities and roles in the cloud
- Creating the service design and governance model
- Requirements
- RAID
- Service decomposition
- Roles and responsibilities
- Processes
- Costs
- Security
- Summary
- Questions
- Further reading
- Chapter 5: Managing the Enterprise Cloud Architecture
- Defining architecture principles for multi-cloud
- Business principles
- Security and compliance
- Data principles
- Application principles
- Infrastructure and technology principles
- Principles for usability
- Principles for processes
- Transition and transformation
- Creating the architecture artifacts
- Creating a business vision
- Enterprise architecture
- Principles catalog
- Requirements catalog
- High-level design
- Low-level design
- Working under architecture for multi-cloud and avoiding pitfalls
- Stage 1 – security architecture
- Stage 2 – architecture for scalability
- Stage 3 – architecture for availability
- Stage 4 – architecture for operability
- Stage 5 – architecture for integration
- Pitfalls in architecture
- Change management and validation as the cornerstone
- Validating the architecture
- Summary
- Questions
- Further reading
- Section 2 – Getting the Basics Right with BaseOps
- Chapter 6: Designing, Implementing, and Managing the Landing Zone
- Understanding BaseOps and the foundational concepts
- Defining and implementing the base infrastructure – the landing zone
- Defining standards and policies for the base infrastructure
- Managing the base infrastructure
- Defining and managing infrastructure automation tools and processes (Infrastructure as Code and Configuration as Code)
- Defining and implementing monitoring and management tools
- Supporting operations
- Creating a multi-cloud landing zone and blueprint
- Configuring the landing zone on Azure
- Creating a landing zone in AWS
- Creating the landing zone in GCP
- Managing the landing zone using policies
- Managing basic operations in AWS
- Managing basic operations in Azure
- Managing basic operations in GCP
- Orchestrating policies for multi-cloud
- Global admin galore – the need for demarcation
- Summary
- Questions
- Further reading
- Chapter 7: Designing Resilience and Performance
- Starting with business requirements
- Understanding data risks
- Understanding application risks
- Understanding technological risks
- Exploring solutions for resiliency in different cloud propositions
- Working with AWS backup and disaster recovery
- Creating backup plans in GCP
- Optimizing your multi-cloud environment
- Using Trusted Advisor for optimization in AWS
- Optimizing environments using Azure Advisor
- Optimizing GCP with Cloud Trace and Cloud Debugger
- Performance KPIs in a public cloud – what's in it for you?
- Summary
- Questions
- Further reading
- Chapter 8: Defining Automation Tools and Processes
- Chapter 9: Defining and Using Monitoring and Management Tools
- Defining monitoring and management processes
- Cloud health
- Cloud performance
- Governance
- Security
- Cloud usage (analytics)
- Exploring monitoring and management tools
- Azure Monitor and Lighthouse
- AWS CloudWatch and Control Tower
- Google Cloud Platform's Cloud Monitoring and Operations Suite
- VMware's Tanzu
- Other end-to-end monitoring tools
- Consolidating and interpreting data from monitoring systems
- Discovering the single-pane-of-glass view
- Summary
- Questions
- Further reading
- Section 3 – Cost Control in Multi-Cloud with FinOps
- Chapter 10: Managing Licenses
- Chapter 11: Defining Principles for Resource Provisioning and Consumption
- Avoiding Amex Armageddon with unlimited budgets
- The provisioning and consumption of resources in public cloud platforms
- Deploying resources in Azure using ARM
- Deploying resources in AWS using OpsWorks
- Deploying resources in GCP using Deployment Manager
- Benefits of cloud provisioning
- The provisioning and consumption of resources in on-premises propositions
- Setting guidelines and principles for provisioning and consumption
- Using the Azure pricing calculator
- Using the AWS calculator
- Using the GCP instance pricing
- Design example for resource planning
- Controlling resource consumption using cost alerts
- Summary
- Questions
- Further reading
- Chapter 12: Defining Naming Conventions and Tagging
- Creating a naming convention
- Naming convention standards in Azure
- Naming convention standards in AWS
- Naming convention standards in GCP
- Creating a tagging convention
- Defining tags in Azure
- Defining tags in AWS
- Defining tags in GCP
- Implementing naming and tagging
- Managing naming and tagging conventions
- Summary
- Questions
- Further reading
- Chapter 13: Validating and Managing Bills
- Section 4 – Security Control in Multi-Cloud with SecOps
- Chapter 14: Defining Security Policies
- Understanding security policies
- Understanding security frameworks
- Defining the baseline for security policies
- Implementing security policies
- Implementing security policies in Azure Security Center
- Implementing security policies in AWS Security Hub
- Implementing security policies in GCP Security Command Center
- Managing security policies
- Summary
- Questions
- Further reading
- Chapter 15: Implementing Identity and Access Management
- Chapter 16: Defining Security Policies for Data
- Storing data in multi-cloud concepts
- Exploring storage technologies
- Understanding data protection in the cloud
- Understanding data encryption
- Securing access, encryption, and storage keys
- Using encryption and keys in Azure
- Using encryption and keys in AWS
- Using encryption and keys in GCP
- Securing raw data for big data modeling
- Summary
- Questions
- Further reading
- Chapter 17: Implementing and Integrating Security Monitoring
- Understanding SIEM and SOAR
- Differentiating SIEM and SOAR
- The role of SOC
- Setting up the requirements for integrated security
- Implementing the security model
- Exploring multi-cloud monitoring suites
- Exploring SIEM solutions from Splunk, LogRythm, and Rapid7
- Implementing SecOps with VMware and ServiceNow
- Introducing cloud-native SIEM with Azure Sentinel
- Summary
- Questions
- Further reading
- Section 5 – Structured Development on Multi-Cloud Environments with DevOps
- Chapter 18: Designing and Implementing CI/CD Pipelines
- Understanding CI/CD and pipelines
- Getting started with CI/CD
- Working under version control
- Using push and pull principles in CI/CD
- Pushing the code directly to the master
- Pushing code to forks of the master
- Best practices while working with CI/CD
- Designing the multi-cloud pipeline
- Exploring tooling for CI/CD
- Working with Azure DevOps
- Working with AWS CodePipeline
- Working with Google Cloud Build
- Summary
- Questions
- Further reading
- Chapter 19: Introducing AIOps in Multi-Cloud
- Chapter 20: Introducing Site Reliability Engineering in Multi-Cloud
- Assessments
- Other Books You May Enjoy
Section 5 – Structured Development on Multi-Cloud Environments with DevOps
We are building a multi-cloud foundation – or landing zone – for a reason. We are building it to build and host applications. So, we are trying to reach our end goal: the app and how we optimize our landing zone for that app.
The following chapters will be covered in this section:
- Chapter 18, Designing and Implementing CI/CD Pipelines
- Chapter 19, Introducing AIOps in Multi-Cloud
- Chapter 20, Introducing Site Reliability Engineering in Multi-Cloud
-
No Comment
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.