Multi-Cloud Architecture and Governance: Leverage Azure, AWS, GCP, and VMware vSphere to build effective multi-cloud solutions

Description

A comprehensive guide to architecting, managing, implementing, and controlling multi-cloud environments Key FeaturesDeliver robust multi-cloud environments and improve your business productivityStay in control of the cost, governance, development, security, and continuous improvement of your multi-cloud solutionIntegrate different solutions, principles, and practices into one multi-cloud foundationBook Description Multi-cloud has emerged as one of the top cloud computing trends, with businesses wanting to reduce their reliance on only one vendor. But when organizations shift to multiple cloud services without a clear strategy, they may face certain difficulties, in terms of how to stay in control, how to keep all the different components secure, and how to execute the cross-cloud development of applications. This book combines best practices from different cloud adoption frameworks to help you find solutions to these problems. With step-by-step explanations of essential concepts and practical examples, you'll begin by planning the foundation, creating the architecture, designing the governance model, and implementing tools, processes, and technologies to manage multi-cloud environments. You'll then discover how to design workload environments using different cloud propositions, understand how to optimize the use of these cloud technologies, and automate and monitor the environments. As you advance, you'll delve into multi-cloud governance, defining clear demarcation models and management processes. Finally, you'll learn about managing identities in multi-cloud: who's doing what, why, when, and where By the end of this book, you'll be able to create, implement, and manage multi-cloud architectures with confidence What you will learnGet to grips with the core functions of multiple cloud platformsDeploy, automate, and secure different cloud solutionsDesign network strategy and get to grips with identity and access management for multi-cloudDesign a landing zone spanning multiple cloud platformsUse automation, monitoring, and management tools for multi-cloudUnderstand multi-cloud management with the principles of BaseOps, FinOps, SecOps, and DevOpsDefine multi-cloud security policies and use cloud security toolsTest, integrate, deploy, and release using multi-cloud CI/CD pipelinesWho this book is for This book is for architects and lead engineers involved in architecting multi-cloud environments, with a focus on getting governance right to stay in control of developments in multi-cloud. Basic knowledge of different cloud platforms (Azure, AWS, GCP, VMWare, and OpenStack) and understanding of IT governance is necessary. Table of ContentsIntroduction to Multi-CloudBusiness Acceleration Using a Multi-Cloud StrategyGetting Connected – Designing ConnectivityService Designs for Multi-CloudManaging the Enterprise Cloud ArchitectureDesigning, Implementing, and Managing the Landing ZoneDesigning Resilience and PerformanceDefining Automation Tools and ProcessesDefining and Using Monitoring and Management ToolsManaging LicensesDefining Principles for Resource Provisioning and ConsumptionDefining Naming Conventions and TaggingValidating and Managing BillsDefining Security PoliciesImplementing Identity and Access ManagementDefining Security Policies for DataImplementing and Integrating Security MonitoringDesigning and Implementing CI/CD PipelinesIntroducing AIOps in Multi-CloudIntroducing Site Reliability Engineering in Multi-Cloud Cover Title Page Copyright and Credits Dedication About Packt Contributors Table of Contents Preface Section 1 – Introduction to Architecture and Governance for Multi-Cloud Environments Chapter 01: Introduction to Multi-Cloud Understanding multi-cloud concepts Multi-cloud – more than just public and private Multi-cloud as a true mixed zone Setting out a real strategy for multi-cloud What would be the best solution for my business requirements? Introducing the main players in the field Public clouds Private clouds Summary Questions Further reading Chapter 02: Business Acceleration Using a Multi-Cloud Strategy Analyzing the enterprise strategy for the cloud Industry position Enterprise core competence Long-term planning Financial structure Fitting cloud technology to business requirements Business planning Financial planning Technical planning IT4IT Keeping track of cloud developments – focusing on the business strategy Foundation architecture Cost of delay Benefit of opportunity Creating a comprehensive business roadmap Mapping the business roadmap to the cloud-fit strategy The Twelve-Factor App Summary Questions Further reading Chapter 03: Getting Connected – Designing Connectivity Connectivity is king – connectivity concepts in multi-cloud VPN Understanding concepts of direct connectivity Managed dedicated connectivity through telecom companies or brokers Designing a network topology for multi-cloud – thinking ahead Prerequisites for creating a network design Understanding network protocols in multi-cloud Summary Questions Chapter 04: Service Designs for Multi-Cloud Introducing the scaffold for multi-cloud environments Identity and access management (IAM) Security Cost management Monitoring Automation Cloud adoption stages Stage 1 – defining a business strategy and business case Stage 2 – creating your team Stage 3 – defining the architecture Stage 4 – engaging with cloud providers; getting financial controls in place Stage 5 – building and configuring the landing zone Stage 6 – assessment Stage 7 – migrating and transforming Translating business KPIs into cloud SLAs Using cloud adoption frameworks to align between cloud providers Understanding identities and roles in the cloud Creating the service design and governance model Requirements RAID Service decomposition Roles and responsibilities Processes Costs Security Summary Questions Further reading Chapter 05: Managing the Enterprise Cloud Architecture Defining architecture principles for multi-cloud Business principles Security and compliance Data principles Application principles Infrastructure and technology principles Principles for usability Principles for processes Transition and transformation Creating the architecture artifacts Creating a business vision Enterprise architecture Principles catalog Requirements catalog High-level design Low-level design Working under architecture for multi-cloud and avoiding pitfalls Stage 1 – security architecture Stage 2 – architecture for scalability Stage 3 – architecture for availability Stage 4 – architecture for operability Stage 5 – architecture for integration Pitfalls in architecture Change management and validation as the cornerstone Validating the architecture Summary Questions Further reading Section 2 – Getting the Basics Right with BaseOps Chapter 06: Designing, Implementing, and Managing the Landing Zone Understanding BaseOps and the foundational concepts Defining and implementing the base infrastructure – the landing zone Defining standards and policies for the base infrastructure Managing the base infrastructure Defining and managing infrastructure automation tools and processes (Infrastructure as Code and Configuration as Code) Defining and implementing monitoring and management tools Supporting operations Creating a multi-cloud landing zone and blueprint Configuring the landing zone on Azure Creating a landing zone in AWS Creating the landing zone in GCP Managing the landing zone using policies Managing basic operations in AWS Managing basic operations in Azure Managing basic operations in GCP Orchestrating policies for multi-cloud Global admin galore – the need for demarcation Summary Questions Further reading Chapter 07: Designing Resilience and Performance Starting with business requirements Understanding data risks Understanding application risks Understanding technological risks Exploring solutions for resiliency in different cloud propositions  Working with AWS backup and disaster recovery Creating backup plans in GCP Optimizing your multi-cloud environment Using Trusted Advisor for optimization in AWS Optimizing environments using Azure Advisor Optimizing GCP with Cloud Trace and Cloud Debugger Performance KPIs in a public cloud – what's in it for you? Summary Questions Further reading Chapter 08: Defining Automation Tools and Processes Cross-cloud infrastructure automation Automation processes using a code repository and workflows Exploring automation tools Azure Automation AWS OpsWorks Automation in Google Cloud Platform Exploring other automation tools Architecting automation for multi-cloud Summary Questions Further reading Chapter 09: Defining and Using Monitoring and Management Tools Defining monitoring and management processes Cloud health Cloud performance Governance Security Cloud usage (analytics) Exploring monitoring and management tools Azure Monitor and Lighthouse AWS CloudWatch and Control Tower Google Cloud Platform's Cloud Monitoring and Operations Suite VMware's Tanzu Other end-to-end monitoring tools Consolidating and interpreting data from monitoring systems Discovering the single-pane-of-glass view Summary Questions Further reading Section 3 – Cost Control in Multi-Cloud with FinOps Chapter 10: Managing Licenses Types of license agreements Software licenses in cloud platforms Managing licenses and contracts Using third-party brokers for licenses Setting up an account hierarchy Summary Questions Further reading Chapter 11: Defining Principles for Resource Provisioning and Consumption Avoiding Amex Armageddon with unlimited budgets The provisioning and consumption of resources in public cloud platforms Deploying resources in Azure using ARM Deploying resources in AWS using OpsWorks Deploying resources in GCP using Deployment Manager Benefits of cloud provisioning The provisioning and consumption of resources in on-premises propositions Setting guidelines and principles for provisioning and consumption Using the Azure pricing calculator Using the AWS calculator Using the GCP instance pricing Design example for resource planning Controlling resource consumption using cost alerts Summary Questions Further reading Chapter 12: Defining Naming Conventions and Tagging Creating a naming convention Naming convention standards in Azure Naming convention standards in AWS Naming convention standards in GCP Creating a tagging convention Defining tags in Azure Defining tags in AWS Defining tags in GCP Implementing naming and tagging Managing naming and tagging conventions Summary Questions Further reading Chapter 13: Validating and Managing Bills Exploring billing options and using cost dashboards Using cost management and billing in Azure Using AWS Cost Management for billing Using billing options in GCP Validating invoices Centralizing billing in multi-cloud Summary Questions Further reading Section 4 – Security Control in Multi-Cloud with SecOps Chapter 14: Defining Security Policies Understanding security policies Understanding security frameworks Defining the baseline for security policies Implementing security policies Implementing security policies in Azure Security Center Implementing security policies in AWS Security Hub Implementing security policies in GCP Security Command Center Managing security policies Summary Questions Further reading Chapter 15: Implementing Identity and Access Management Understanding identity and access management Using a central identity store with Active Directory Designing access management across multi-cloud Exploring Privileged Access Management (PAM) PAM on cloud platforms Enabling account federation in multi-cloud Summary Questions Further reading Chapter 16: Defining Security Policies for Data Storing data in multi-cloud concepts Exploring storage technologies Understanding data protection in the cloud Understanding data encryption Securing access, encryption, and storage keys Using encryption and keys in Azure Using encryption and keys in AWS Using encryption and keys in GCP Securing raw data for big data modeling  Summary Questions Further reading Chapter 17: Implementing and Integrating Security Monitoring Understanding SIEM and SOAR Differentiating SIEM and SOAR The role of SOC Setting up the requirements for integrated security Implementing the security model Exploring multi-cloud monitoring suites Exploring SIEM solutions from Splunk, LogRythm, and Rapid7 Implementing SecOps with VMware and ServiceNow Introducing cloud-native SIEM with Azure Sentinel Summary Questions Further reading Section 5 – Structured Development on Multi-Cloud Environments with DevOps Chapter 18: Designing and Implementing CI/CD Pipelines Understanding CI/CD and pipelines Getting started with CI/CD Working under version control Using push and pull principles in CI/CD Pushing the code directly to the master Pushing code to forks of the master Best practices while working with CI/CD Designing the multi-cloud pipeline Exploring tooling for CI/CD Working with Azure DevOps Working with AWS CodePipeline Working with Google Cloud Build Summary Questions Further reading Chapter 19: Introducing AIOps in Multi-Cloud Understanding the concept of AIOps Optimizing cloud environments using AIOps Exploring AIOps tools for multi-cloud Summary Questions Further reading Chapter 20: Introducing Site Reliability Engineering in Multi-Cloud Understanding the concept of SRE Working with risk analysis in SRE Applying monitoring principles in SRE Applying principles of SRE to multi-cloud – building and operating distributed systems Summary Questions Further reading Assessments Chapter 1 Chapter 2 Chapter 3 Chapter 4 Chapter 5 Chapter 6 Chapter 7 Chapter 8 Chapter 9 Chapter 10 Chapter 11 Chapter 12 Chapter 13 Chapter 14 Chapter 15 Chapter 16 Chapter 17 Chapter 18 Chapter 19 Chapter 20 Other Books You May Enjoy Index