Module 5be - Identity, Governance, Privacy and Compliance - Build a Cloud Governance Strategy, The Cloud Adoption Framework

Question 1

What is the Cloud Adoption Framework for Azure?

Answer 1

Helps you create and implement the business and tech strategies needed to succeed in the Cloud.

It consists of tools, docs and proven practices.

Question 2

What are the five (5) stages in the Cloud Adoption Framework?

Answer 2

Basically the same strategy for any Change Management:

1. Defining strategy
2. Make a plan
3. Ready your organization
4. Adopt the cloud
5. Govern and manage your cloud environments

Question 3

What are the steps for Defining your Strategy for Cloud Adoption?

Answer 3

Basically define the Why, the Outcome, the Cost and the How

1. Define and document motivations
2. Document business outcomes - from finance, marketing, sales, HR, etc
3. Evaluate financial considerations - measure objectives and identify the return expected from the specific investment
4. Understanding technical considerations

Question 4

What are the steps for Making a Plan for Cloud Adoption?

Answer 4

Basically Tech Inventory, Get the Right People, Empower Current People and make the official Adoption Plan

1. Digital Estate - take an inventory of existing digital assets and workloads that you plan to migrate
2. Initial Organization Alignment - Get the right people involved, technically and from cloud governance standpoints
3. Skills readiness plan - build everyone’s skillset
4. Cloud adoption plan - layout the specific planning to bring dev, ops, and business teams to realize the shared cloud adoption goal

Question 5

What are the steps for Readying your Organization for Cloud Adoption?

Answer 5

It’s mostly about your Landing Zone and best practices for its implementation:

1. Azure setup guide - review all required setup guides to become familiar with tools and approaches you’ll need
2. Azure landing zone - Build out the Subscriptions that support major business areas of your organization.
3. Expand landing zone - Refine the landing zone to ensure it meets all your requirements
4. Best practices - Start with recommended or proven practices to ensure your migration efforts are scalable and maintainable

Question 6

Hint: not a web page landing page but similar concept…

What is a Landing Zone?

Answer 6

An environment in the cloud to being hosting your workloads. This includes cloud infrastructure, governance, accounting and security capabilities

For us, this is our Resource Group created by Release Engineering.

Question 7

What is the first part of the Adopt the Cloud step?

Answer 7

Migrate

1. Migrate your first workload
2. Migration scenarios - use additional in-depth guides to explore more complex migration scenarios
3. Best Practices - Check Azure migration best practices checklist to verify you’re following recommendations
4. Process Improvements - Identify ways to make migration scale with less effort

Question 8

What is the second part of the Adopt the Cloud step?

Answer 8

Innovate

1. Business value consensus - Verify investments in new innovation add value and meet customer needs
2. Azure innovation guide - use this to accelerate development and build MVPs for your ideas
3. Best practices - verify progress maps to recommended best practices BEFORE moving forward
4. Feedback loops - check frequently with customers to verify that you’re building what they need

Question 9

What is the first step for Governing and Managing your Cloud Environments for Cloud Adoption?

Answer 9

As cloud estate changes, as does your governance processes and policies, so you’ll need to create resilient solutions that are constantly optimized. Your first step is Governing, which concentrates on the proper application of Polices for regulatory and security Compliance (which oddly enough follows general SDLC)

1. Methodology - consider your solution’s end-state and define an INCREMENTAL approach from first steps to full cloud governance
2. Benchmark - use the Governance Benchmark Tool to assess current and future state to understand how to apply the framework
3. Initial governance foundation - Create an MVP for your governance plan first steps
4. Improve initial governance foundation - Iteratively add governance controls as you progress toward your end state

Question 10

What is the second step for Governing and Managing your Cloud Environments for Cloud Adoption?

Answer 10

As cloud estate changes, as does your governance processes and policies, so you’ll need to create resilient solutions that are constantly optimized. Your second step is Managing, which is largely about implementing Management Baselines and Business and Operational Commitments:

1. Establish a management baseline - Define minimum commitment to operations management
2. Define business commitments - document supported workloads to establish commitments and agree on investment for each workload
3. Expand management baseline - apply best practices to iterate on initial management baseline
4. Advanced operations and design principles - for workloads that require higher level business commitment, perform deep architecture review to optimize and deliver resiliency and reliability

Question 11

What is a Management Baseline?

Answer 11

The minimum set of tools and processes applied to every asset in an environment

Question 12

What are the three main aspects to consider when creating and managing Subscriptions?

Answer 12

Billing, Access Control, Subscription Limits

Question 13

Management Groups can create multiple Billing Reports on a Subscription then use Tagging to further drill down for granularity (T/F)?

Answer 13

False. You can create only one billing report per subscription. Further reporting details can be ascertained through tag filtering

Question 14

What should you consider for Access Control w.r.t. managing Subscriptions?

Answer 14

When designing your subscription, consider the deployment boundary factor i.e. a Subscription is a deployment boundary for Resources, with each Subscription providing admins the ability to set granular Roles Based Access Control

Question 15

What are two (2) considerations for Subscription Limits when managing Subscriptions?

Answer 15

Resource Limitations and Management Groups are the “parent”.

They have Resource limitations (ex 25k VMs per Region, certain Regions don’t even have certain services, etc.) and should be considered during your design phase. Note there is ZERO flexibility per subscription to increase these limits.

Also consider Management Groups for managing your Subscriptions i.e. manage access, policies an compliance across multiple Subscriptions.