Multi-Cloud Architecture and Governance

Leverage Azure, AWS, GCP, and VMware vSphere to build effective multi-cloud solutions

Jeroen Mulder 지음

Packt(GCO Science) 2020년 12월 11일 출간

작품소개

책소개

comprehensive guide to architecting, managing, implementing, and controlling multi-cloud environments

▶Book Description
Multi-cloud has emerged as one of the top cloud computing trends, with businesses wanting to reduce their reliance on only one vendor. But when organizations shift to multiple cloud services without a clear strategy, they may face certain difficulties, in terms of how to stay in control, how to keep all the different components secure, and how to execute the cross-cloud development of applications. This book combines best practices from different cloud adoption frameworks to help you find solutions to these problems.

With step-by-step explanations of essential concepts and practical examples, you'll begin by planning the foundation, creating the architecture, designing the governance model, and implementing tools, processes, and technologies to manage multi-cloud environments. You'll then discover how to design workload environments using different cloud propositions, understand how to optimize the use of these cloud technologies, and automate and monitor the environments. As you advance, you'll delve into multi-cloud governance, defining clear demarcation models and management processes. Finally, you'll learn about managing identities in multi-cloud: who's doing what, why, when, and where

By the end of this book, you'll be able to create, implement, and manage multi-cloud architectures with confidence

▶What You Will Learn
？Get to grips with the core functions of multiple cloud platforms
？Deploy, automate, and secure different cloud solutions
？Design network strategy and get to grips with identity and access management for multi-cloud
？Design a landing zone spanning multiple cloud platforms
？Use automation, monitoring, and management tools for multi-cloud
？Understand multi-cloud management with the principles of BaseOps, FinOps, SecOps, and DevOps
？Define multi-cloud security policies and use cloud security tools
？Test, integrate, deploy, and release using multi-cloud CI/CD pipelines

▶Key Features
？Deliver robust multi-cloud environments and improve your business productivity
？Stay in control of the cost, governance, development, security, and continuous improvement of your multi-cloud solution
？Integrate different solutions, principles, and practices into one multi-cloud foundation

▶Who This Book Is For
This book is for architects and lead engineers involved in architecting multi-cloud environments, with a focus on getting governance right to stay in control of developments in multi-cloud. Basic knowledge of different cloud platforms (Azure, AWS, GCP, VMWare, and OpenStack) and understanding of IT governance is necessary.

목차

▶TABLE of CONTENTS
▷ Section 1 ？ Introduction to Architecture and Governance for Multi-Cloud Environments
？Chapter 1: Introduction to Multi-Cloud
？Chapter 2: Business Acceleration Using a Multi-Cloud Strategy
？Chapter 3: Getting Connected ？ Designing Connectivity
？Chapter 4: Service Designs for Multi-Cloud
？Chapter 5: Managing the Enterprise Cloud Architecture

▷ Section 2 ？ Getting the Basics Right with BaseOps
？Chapter 6: Designing, Implementing, and Managing the Landing Zone
？Chapter 7: Designing Resilience and Performance
？Chapter 8: Defining Automation Tools and Processes
？Chapter 9: Defining and Using Monitoring and Management Tools

▷ Section 3 ？ Cost Control in Multi-Cloud with FinOps
？Chapter 10: Managing Licenses
？Chapter 11: Defining Principles for Resource Provisioning and Consumption
？Chapter 12: Defining Naming Conventions and Tagging
？Chapter 13: Validating and Managing Bills

▷ Section 4 ？ Security Control in Multi-Cloud with SecOps
？Chapter 14: Defining Security Policies
？Chapter 15: Implementing Identity and Access Management
？Chapter 16: Defining Security Policies for Data
？Chapter 17: Implementing and Integrating Security Monitoring

▷ Section 5 ？ Structured Development on Multi-Cloud Environments with DevOps
？Chapter 18: Designing and Implementing CI/CD Pipelines
？Chapter 19: Introducing AIOps in Multi-Cloud
？Chapter 20: Introducing Site Reliability Engineering in Multi-Cloud

책 속으로

▶What this book covers
？ Chapter 1, Introduction to Multi-Cloud, provides the definition of multi-cloud and why companies have a multi-cloud strategy.

？ Chapter 2, Business Acceleration Using a Multi-Cloud Strategy, discusses how enterprises could accelerate business results by implementing a multi-cloud strategy.

？ Chapter 3, Getting Connected ？ Designing Connectivity, explains how to design connectivity to the platforms. All major public cloud platforms have their own connectivity technology such as Azure ExpressRoute, AWS Direct Connect, Google Dedicated Interconnect, VMware NSX, and more. The chapter provides an overview of the connectivity options.

？ Chapter 4, Service Design for Multi-Cloud, discusses governance in multi-cloud, using the Cloud Adoption Frameworks of cloud providers.

？ Chapter 5, Managing the Enterprise Cloud Architecture, covers the architecture principles of various domains, such as security, data, and applications. You will learn how to create an enterprise architecture for multi-cloud using The Open Group Architecture Framework (TOGAF).

？ Chapter 6, Designing, Implementing, and Managing the Landing Zone, describes how to design the landing zones for Azure, AWS, and Google Cloud Platform. You will learn how to define policies to manage the landing zone and get a deeper understanding of handling accounts in landing zones.

？ Chapter 7, Designing Resilience and Performance, covers solutions for backup, business continuity, and disaster recovery. How do companies increase availability and ensure that data is not lost when an outage occurs and how do they arrange disaster recovery?

？ Chapter 8, Defining Automation Tools and Processes, covers the principles of automation. You will learn how to design an automation process, starting with storing our source code in a single repository and applying version control to that code.

？ Chapter 9, Defining and Using Monitoring and Management Tools, discusses monitoring processes and tools, including the native tools that providers offer. The single pane of glass view is introduced.

？ Chapter 10, Managing Licenses, provides an introduction to financial operations in the cloud by looking at managing licenses, agreements, and the various contract options that cloud providers offer.

？ Chapter 11, Defining Principles for Resource Provisioning and Consumption, describes how enterprises can plan and deploy resources in Azure, AWS, and Google Cloud. Cost control by setting alerts and thresholds is also discussed.

？ Chapter 12, Defining Naming Conventions and Tagging, demonstrates how to create consistent naming and tagging conventions. Cost control starts with enabling the clear identification of resources and accountability for those resources.

？ Chapter 13, Validating and Managing Bills, covers methods to view and analyze costs in the consoles of Azure, AWS, and Google Cloud.

？ Chapter 14, Defining Security Policies, introduces the security frameworks of cloud providers and overall frameworks such as the Center for Internet Security (CIS) controls. You will learn how to define policies using these frameworks.

？ Chapter 15, Implementing Identity and Access Management, covers authenticating and authorizing identities. It also provides a good understanding of how to deal with least privileged accounts and the use of eligible accounts. Lastly, federation with Active Directory is discussed.

？ Chapter 16, Defining Security Policies for Data, describes how to protect data in rest and in transit. All cloud platforms have technologies to encrypt data but differ in the ways they apply encryption and store and handle keys. The chapter covers various technologies.

？ Chapter 17, Implementing and Integrating Security Monitoring, discusses the function and the need for integrated security monitoring, using SIEM (Security Information and Event Management) and SOAR (Security Orchestration, Automation, and Response).
...

출판사 서평

▶ Preface
Enterprises move environments to the cloud. Applications and systems are not migrated to just one cloud platform: enterprises will use a mix of Software as a Service (SaaS), Platform as a Service (PaaS), and Infrastructure as a Service (IaaS), hosted on different platforms such as AWS, Azure, Google Cloud, and on-premises private clouds. Enterprises are adopting a multi-cloud strategy, leaving the architects and lead engineers with the challenge of how to integrate architectures and manage the enterprise cloud. Architects and engineers will learn how to design, implement, and integrate cloud solutions and set up controls for governance.

After the introduction of the concept of multi-cloud, this book covers all of the topics that architects should consider when designing systems for multi-cloud platforms. That starts with designing connectivity to and between the various platforms and creating the landing zones in Azure, AWS, and GCP.

The book is divided into four main sections, covering the following:

？ Operations, including setting up and managing the landing zones that provide the infrastructure for cloud environments
？ Financial operations including cost control and license management
？ Security operations, covering identity and access management, securing data, security information, and event management
？ Continuous delivery and deployment using DevOps, CI/CD pipelines, and new concepts such as AIOps and Site Reliability Engineering

The book contains best practices for the major providers, discusses common pitfalls and how to avoid them, and gives recommendations for methodologies and tools. Of course, a book about multi-cloud could never be complete, but this book will provide you with good guidelines to get started with architecting for multi-cloud.

작가정보

저자(글) Jeroen Mulder

After his study in Journalism, Jeroen (born 1970) started his career as editor for Dutch newspapers. In 2000 he joined the IT company Origin, as communication specialist in cross-media platforms. At (Atos) Origin and Atos he has fulfilled many roles, lastly as principal architect. Since 2017 he works for Fujitsu, where he boarded as sr. lead architect. In 2020 he got promoted to Head of Applications and Multi-Cloud Services for Fujitsu in the Netherlands.Jeroen is a certified enterprise and security architect, concentrating on cloud technology. This includes architecture for cloud infrastructure, serverless and container technology, application development and digital transformation using various DevOps methodologies and tools.