Section 1 – Introduction to Architecture and Governance for Multi-Cloud Environments
by
Multi-Cloud Architecture and Governance
- Multi-Cloud Architecture and Governance
- Why subscribe?
- Contributors
- About the author
- About the reviewers
- Packt is searching for authors like you
- Preface
- Section 1 – Introduction to Architecture and Governance for Multi-Cloud Environments
- Chapter 1: Introduction to Multi-Cloud
- Understanding multi-cloud concepts
- Multi-cloud – more than just public and private
- Multi-cloud as a true mixed zone
- Setting out a real strategy for multi-cloud
- What would be the best solution for my business requirements?
- Introducing the main players in the field
- Public clouds
- Private clouds
- Summary
- Questions
- Further reading
- Chapter 2: Business Acceleration Using a Multi-Cloud Strategy
- Analyzing the enterprise strategy for the cloud
- Industry position
- Enterprise core competence
- Long-term planning
- Financial structure
- Fitting cloud technology to business requirements
- Business planning
- Financial planning
- Technical planning
- IT4IT
- Keeping track of cloud developments – focusing on the business strategy
- Foundation architecture
- Cost of delay
- Benefit of opportunity
- Creating a comprehensive business roadmap
- Mapping the business roadmap to the cloud-fit strategy
- The Twelve-Factor App
- Summary
- Questions
- Further reading
- Chapter 3: Getting Connected – Designing Connectivity
- Connectivity is king – connectivity concepts in multi-cloud
- VPN
- Understanding concepts of direct connectivity
- Managed dedicated connectivity through telecom companies or brokers
- Designing a network topology for multi-cloud – thinking ahead
- Prerequisites for creating a network design
- Understanding network protocols in multi-cloud
- Summary
- Questions
- Chapter 4: Service Designs for Multi-Cloud
- Introducing the scaffold for multi-cloud environments
- Identity and access management (IAM)
- Security
- Cost management
- Monitoring
- Automation
- Cloud adoption stages
- Stage 1 – defining a business strategy and business case
- Stage 2 – creating your team
- Stage 3 – defining the architecture
- Stage 4 – engaging with cloud providers; getting financial controls in place
- Stage 5 – building and configuring the landing zone
- Stage 6 – assessment
- Stage 7 – migrating and transforming
- Translating business KPIs into cloud SLAs
- Using cloud adoption frameworks to align between cloud providers
- Understanding identities and roles in the cloud
- Creating the service design and governance model
- Requirements
- RAID
- Service decomposition
- Roles and responsibilities
- Processes
- Costs
- Security
- Summary
- Questions
- Further reading
- Chapter 5: Managing the Enterprise Cloud Architecture
- Defining architecture principles for multi-cloud
- Business principles
- Security and compliance
- Data principles
- Application principles
- Infrastructure and technology principles
- Principles for usability
- Principles for processes
- Transition and transformation
- Creating the architecture artifacts
- Creating a business vision
- Enterprise architecture
- Principles catalog
- Requirements catalog
- High-level design
- Low-level design
- Working under architecture for multi-cloud and avoiding pitfalls
- Stage 1 – security architecture
- Stage 2 – architecture for scalability
- Stage 3 – architecture for availability
- Stage 4 – architecture for operability
- Stage 5 – architecture for integration
- Pitfalls in architecture
- Change management and validation as the cornerstone
- Validating the architecture
- Summary
- Questions
- Further reading
- Section 2 – Getting the Basics Right with BaseOps
- Chapter 6: Designing, Implementing, and Managing the Landing Zone
- Understanding BaseOps and the foundational concepts
- Defining and implementing the base infrastructure – the landing zone
- Defining standards and policies for the base infrastructure
- Managing the base infrastructure
- Defining and managing infrastructure automation tools and processes (Infrastructure as Code and Configuration as Code)
- Defining and implementing monitoring and management tools
- Supporting operations
- Creating a multi-cloud landing zone and blueprint
- Configuring the landing zone on Azure
- Creating a landing zone in AWS
- Creating the landing zone in GCP
- Managing the landing zone using policies
- Managing basic operations in AWS
- Managing basic operations in Azure
- Managing basic operations in GCP
- Orchestrating policies for multi-cloud
- Global admin galore – the need for demarcation
- Summary
- Questions
- Further reading
- Chapter 7: Designing Resilience and Performance
- Starting with business requirements
- Understanding data risks
- Understanding application risks
- Understanding technological risks
- Exploring solutions for resiliency in different cloud propositions
- Working with AWS backup and disaster recovery
- Creating backup plans in GCP
- Optimizing your multi-cloud environment
- Using Trusted Advisor for optimization in AWS
- Optimizing environments using Azure Advisor
- Optimizing GCP with Cloud Trace and Cloud Debugger
- Performance KPIs in a public cloud – what's in it for you?
- Summary
- Questions
- Further reading
- Chapter 8: Defining Automation Tools and Processes
- Chapter 9: Defining and Using Monitoring and Management Tools
- Defining monitoring and management processes
- Cloud health
- Cloud performance
- Governance
- Security
- Cloud usage (analytics)
- Exploring monitoring and management tools
- Azure Monitor and Lighthouse
- AWS CloudWatch and Control Tower
- Google Cloud Platform's Cloud Monitoring and Operations Suite
- VMware's Tanzu
- Other end-to-end monitoring tools
- Consolidating and interpreting data from monitoring systems
- Discovering the single-pane-of-glass view
- Summary
- Questions
- Further reading
- Section 3 – Cost Control in Multi-Cloud with FinOps
- Chapter 10: Managing Licenses
- Chapter 11: Defining Principles for Resource Provisioning and Consumption
- Avoiding Amex Armageddon with unlimited budgets
- The provisioning and consumption of resources in public cloud platforms
- Deploying resources in Azure using ARM
- Deploying resources in AWS using OpsWorks
- Deploying resources in GCP using Deployment Manager
- Benefits of cloud provisioning
- The provisioning and consumption of resources in on-premises propositions
- Setting guidelines and principles for provisioning and consumption
- Using the Azure pricing calculator
- Using the AWS calculator
- Using the GCP instance pricing
- Design example for resource planning
- Controlling resource consumption using cost alerts
- Summary
- Questions
- Further reading
- Chapter 12: Defining Naming Conventions and Tagging
- Creating a naming convention
- Naming convention standards in Azure
- Naming convention standards in AWS
- Naming convention standards in GCP
- Creating a tagging convention
- Defining tags in Azure
- Defining tags in AWS
- Defining tags in GCP
- Implementing naming and tagging
- Managing naming and tagging conventions
- Summary
- Questions
- Further reading
- Chapter 13: Validating and Managing Bills
- Section 4 – Security Control in Multi-Cloud with SecOps
- Chapter 14: Defining Security Policies
- Understanding security policies
- Understanding security frameworks
- Defining the baseline for security policies
- Implementing security policies
- Implementing security policies in Azure Security Center
- Implementing security policies in AWS Security Hub
- Implementing security policies in GCP Security Command Center
- Managing security policies
- Summary
- Questions
- Further reading
- Chapter 15: Implementing Identity and Access Management
- Chapter 16: Defining Security Policies for Data
- Storing data in multi-cloud concepts
- Exploring storage technologies
- Understanding data protection in the cloud
- Understanding data encryption
- Securing access, encryption, and storage keys
- Using encryption and keys in Azure
- Using encryption and keys in AWS
- Using encryption and keys in GCP
- Securing raw data for big data modeling
- Summary
- Questions
- Further reading
- Chapter 17: Implementing and Integrating Security Monitoring
- Understanding SIEM and SOAR
- Differentiating SIEM and SOAR
- The role of SOC
- Setting up the requirements for integrated security
- Implementing the security model
- Exploring multi-cloud monitoring suites
- Exploring SIEM solutions from Splunk, LogRythm, and Rapid7
- Implementing SecOps with VMware and ServiceNow
- Introducing cloud-native SIEM with Azure Sentinel
- Summary
- Questions
- Further reading
- Section 5 – Structured Development on Multi-Cloud Environments with DevOps
- Chapter 18: Designing and Implementing CI/CD Pipelines
- Understanding CI/CD and pipelines
- Getting started with CI/CD
- Working under version control
- Using push and pull principles in CI/CD
- Pushing the code directly to the master
- Pushing code to forks of the master
- Best practices while working with CI/CD
- Designing the multi-cloud pipeline
- Exploring tooling for CI/CD
- Working with Azure DevOps
- Working with AWS CodePipeline
- Working with Google Cloud Build
- Summary
- Questions
- Further reading
- Chapter 19: Introducing AIOps in Multi-Cloud
- Chapter 20: Introducing Site Reliability Engineering in Multi-Cloud
- Assessments
- Other Books You May Enjoy
In this section, you will understand how building and maintaining an environment using different cloud providers, concepts, and technologies requires architecture and clearly defined governance on the multi-cloud estate.
The following chapters will be covered in this section:
-
No Comment
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.