3. Pressure to
digitally
transform &
innovate
Need for
agility to
reduce speed
to market
Shift to
DevOps
Cloud Sprawl ->
Increased complexity in
managing standard,
accountability,
compliance, consistent
architecture & cost ->
at Scale
14. Native platform capabilities to ensure compliant use of cloud resources
Blueprints
Deploy and update
cloud environments in
a repeatable manner
using composable
artifacts
Resource Graph
Query, explore &
analyze cloud
resources at scale
Management Group
Define organizational
hierarchy
Cost
Monitor cloud spend
and optimize
resources
Policy
Real-time
enforcement,
compliance
assessment and
remediation
NEW NEW
Control VisibilityEnvironment ConsumptionHierarchy
15. CRUD
Azure Resource Manager (ARM)
Query
providing control over the cloud environment, without sacrificing developer agility
2. Policy-based Control: Real-time
enforcement, compliance assessment and
remediation at scale
3. Resource Visibility: Query, explore &
analyze cloud resources at scale
1. Environment Factory:
Deploy and update
cloud environments in a
repeatable manner using
composable artifacts
Role-based
Access
Policy
Definitions
ARMTemplates
Management Groups
Subscriptions
16.
17. Management Group & Subscription
Modeling Strategy
App A
Pre-Prod
Microsoft
Recommended
App B
Pre-Prod
Shared
services
(Pre-Prod)
App C
Pre-Prod
App A
Prod
App B
Prod
Shared
services
(Prod)
App D
Prod
Prod RBAC + Policy Pre-Prod RBAC + Policy
Org Management Group
18. RemediationEnforcement &
Compliance
Apply policies
at scale
Turn on built-in policies
or build custom ones for all
resource types
Real-time policy evaluation and
enforcement
Periodic & on-demand compliance
evaluation
Apply policies to a Management
Group with control across your
entire organization
Apply multiple policies and &
aggregate policy states with
policy initiative
Real time remediation
Remediation on existing resources
(NEW)
Exclusion Scope
23. • No central way to compose and enforce
what goes into or made available in a
subscription.
• Challenging to setup foundational
infrastructure
Customer Challenges
24. deploy and update cloud environments in a repeatable manner using composable artifacts
Role-based access controls
Policy Definitions
ARM Templates
25.
26. • In ability to view resources and their
properties across subscriptions
• Query resources (without worrying
about timeouts & throttling), including
filtering, grouping and sorting of
resources by resource properties
• Need to assess the impact of applying
policies in vast cloud environment
Customer Challenges
27. Query, explore & analyze cloud resources at scale
Perform fast ad hoc exploration in large
cloud environment
Ability to assess the impact of applying
policies in vast cloud environment
Impact AssessmentExplore
Query & analyze across all of your
cloud resources at scale in seconds
Query & Analyze
EA agreement _ when enterprise sign with the upfront spending on azure and this will benefit both the azure and enterprise customers
Two portals 1) EA portal and the 2) Azure management portal
EA – Define the hierarchy as per your organizational structure
How application teams will get a subscription or a resource group
Example: in on of my Core RGs I have a storage account (Azureandbeyond) that is protected by a delete lock
By the way: What actually are Resource Groups? (next)