SlideShare a Scribd company logo
1 of 13
Download to read offline
Migrating your IT policies to
the Cloud
Sriram “Ram” Narayanan
ThoughtWorker
Twitter: @sriramnrn
www.sriramnarayanan.com
@sriramnrn
www.sriramnarayanan.com
Agenda
Pre-Cloud realities and the need for IT policies
A perspective on the “Cloud”
Comparing pre-cloud realities to what the Cloud gives us
A migration of policies
Migrating Applications - are we leveraging what a Cloud provider offers?
Re-thinking IT Infrastructure in the Cloud
Your Pre-Cloud IT team - what about them?
@sriramnrn
www.sriramnarayanan.com
Physical hardware, limited floor space, limited annual IT budgets
Software licenses
VMs
- Better utilisation of CPU cores
- Needs management to prevent VM sprawl
Internal charging mechanisms
Complaints by users and business - “You restrict us on hardware and on
innovation!”
Pre Cloud Realities and the need for IT policies
@sriramnrn
www.sriramnarayanan.com
Essentially, someone else’s massive data center with an API in front of it.
From Capex to Opex
Lots of automation possible
- Compute, Storage, Network policies
- Services (CDN, WAF, DNS, SMTP, SMS, MQ, DB, Cache)
A perspective on “The Cloud”
@sriramnrn
www.sriramnarayanan.com
Pre-Cloud vs Cloud
A Comparison point
(among many)
Pre-Cloud Cloud
Costs Capex + Opex - Pay for
everything, and then renewals,
and then Ops
Opex - Pay for what you use
Automation May be present but not used due
to existing processes and a lack
of skills
Comprehensive Automation - in
the cloud providers’ interests to
make it easier for you to use
Scalability Limited by owned infra -
determines scalability, imposes
constraints on what’s possible
Limited by Cloud provider’s infra,
and your Opex budget
Security You own everything You rent everything
@sriramnrn
www.sriramnarayanan.com
Moving to the Cloud - how to rethink policies
A Comparison point
(among many)
Cloud-Age policy Approach
Infra provisioning Leverage automation (instead of
using web based provisioning)
Automate once; enable users to
self-service
Managing Infra sprawl Introduce caps by budget, not by
instance count
Facilitate only-the-fly infra
provisioning and
decommissioning to control
spend (vs depending upon
reviews)
Security Leverage Cloud features and
API
Leverage configurable policies;
External automation
What should you gate-keep? Policies Configuration scripts and values;
Not the Infra itself
@sriramnrn
www.sriramnarayanan.com
Leverage scripting (by Cloud Provider or Independent) to provision and
decommission infrastructure
Gate-keep VM and Container Templates, configuration scripts and
Configuration values
(templates from known sources, scan the templates, etc)
Mandate all VM and container configuration via scripts - nothing manual
IMPORTANT: Nothing to scan on individual VMs themselves - your templates
and scripts are your source of truth!
On Automation
@sriramnrn
www.sriramnarayanan.com
Rethinking IT Infrastructure approaches
A Comparison point
(among many)
Cloud-Age policy Approach
Compute Compute capacity, vs number of
VMs and physical servers
Use auto-scaling + billing caps +
environments-on-demand
Storage Compute-associated storage.
Let the apps manage replication.
No “stretch-clusters” spanning
DCs to ensure HA.
Networks Leverage Cloud features and
API
Network policies in lieu of explicit
firewalls
Services Leverage Cloud features and
API
Manage service configuration
@sriramnrn
www.sriramnarayanan.com
Rethinking IT Tiers
A Comparison point
(among many)
Pre-Cloud Cloud
Web Tier Explicit Web servers, “Web Tier” CDN for static content
Web server + stateless apps
co-hosted in the same VM, etc
App Tier VMWare with multi-DC HA, etc Compute on the Edge using
Serverless, stateless
autoscaling, leverage multiple
zones
DB Tier Physical servers with inter-DC
replication via SAN
DBs with replication, caches
Expect and architect for failures
Network Explicit firewalls, WAFs, and
other appliances
Leverage Cloud providers
services and policies
@sriramnrn
www.sriramnarayanan.com
Lift and Shift
- Physical to Virtual Migration
- Unavoidable for COTS
Leveraging the Cloud
- Let their automation add and remove compute capacity for horizontal scaling
- Architect for multiple-zones
- Architect for everything to fail - eventual consistency
App Migration - Are we truly using the cloud?
@sriramnrn
www.sriramnarayanan.com
“I want to move to the Cloud and reduce IT costs”
- Firing people is not the only way to reduce costs
- Your IT people know your customers, your business, your org’s unique needs
“I’ll help you move to the Cloud and then quit” - True Story
APIs let you create and decommission - Troubleshooting doesn’t go away!
Your Pre-Cloud IT team
@sriramnrn
www.sriramnarayanan.com
Help with Lift and Shift
Understand and advise on failure scenarios
Liaise with the Cloud providers for troubleshooting
Maintain automation scripts to encourage self-service
Add more relevant monitoring and alerting
Understand and ready themselves and the org for multi-cloud scenarios
Integration with partners, vendors, service providers
Lots to do!!
How pre-cloud IT staff add value in the Cloud era
www.thoughtworks.com
www.sriramnarayanan.com
@sriramnrn
Thank you

More Related Content

What's hot

A Journey to Enterprise Agility: Migrating 15 Atlassian Instances to Data Center
A Journey to Enterprise Agility: Migrating 15 Atlassian Instances to Data CenterA Journey to Enterprise Agility: Migrating 15 Atlassian Instances to Data Center
A Journey to Enterprise Agility: Migrating 15 Atlassian Instances to Data CenterAtlassian
 
Transform Fearlessly to Serverless with Dynatrace 2 - DEM07 - Toronto AWS Summit
Transform Fearlessly to Serverless with Dynatrace 2 - DEM07 - Toronto AWS SummitTransform Fearlessly to Serverless with Dynatrace 2 - DEM07 - Toronto AWS Summit
Transform Fearlessly to Serverless with Dynatrace 2 - DEM07 - Toronto AWS SummitAmazon Web Services
 
Customer Driven DevOps at Work: Operating the Digital Turnstile [FutureStack1...
Customer Driven DevOps at Work: Operating the Digital Turnstile [FutureStack1...Customer Driven DevOps at Work: Operating the Digital Turnstile [FutureStack1...
Customer Driven DevOps at Work: Operating the Digital Turnstile [FutureStack1...New Relic
 
Product Keynote: Server and Data Center
Product Keynote: Server and Data CenterProduct Keynote: Server and Data Center
Product Keynote: Server and Data CenterAtlassian
 
Managing Application Lifecycle using Jira and Bitbucket Cloud and AWS Tooling
Managing Application Lifecycle using Jira and Bitbucket Cloud and AWS ToolingManaging Application Lifecycle using Jira and Bitbucket Cloud and AWS Tooling
Managing Application Lifecycle using Jira and Bitbucket Cloud and AWS ToolingAtlassian
 
Staying Secure When Moving to the Cloud - Dave Millier
Staying Secure When Moving to the Cloud - Dave MillierStaying Secure When Moving to the Cloud - Dave Millier
Staying Secure When Moving to the Cloud - Dave MillierTriNimbus
 
Self-Healing at Scale: How Adobe Eliminated Critical Service Outages
Self-Healing at Scale: How Adobe Eliminated Critical Service OutagesSelf-Healing at Scale: How Adobe Eliminated Critical Service Outages
Self-Healing at Scale: How Adobe Eliminated Critical Service OutagesAtlassian
 
How Data Center Can Help You Sleep Better
How Data Center Can Help You Sleep BetterHow Data Center Can Help You Sleep Better
How Data Center Can Help You Sleep BetterAtlassian
 
OOP 2016 - Faster releases and simpler operations
OOP 2016 - Faster releases and simpler operationsOOP 2016 - Faster releases and simpler operations
OOP 2016 - Faster releases and simpler operationsRoman Spitzbart
 
Modern Operations at Scale within Viasat – How to Structure Teams and Build A...
Modern Operations at Scale within Viasat – How to Structure Teams and Build A...Modern Operations at Scale within Viasat – How to Structure Teams and Build A...
Modern Operations at Scale within Viasat – How to Structure Teams and Build A...Atlassian
 
Using an ALM Router to Integrate Multiple Vendors’ ALM Systems
Using an ALM Router to Integrate Multiple Vendors’ ALM SystemsUsing an ALM Router to Integrate Multiple Vendors’ ALM Systems
Using an ALM Router to Integrate Multiple Vendors’ ALM SystemsGo2Group, Inc.
 
ALM migration and integration workshop: Simplifying and unifying your systems
ALM migration and integration workshop: Simplifying and unifying your systemsALM migration and integration workshop: Simplifying and unifying your systems
ALM migration and integration workshop: Simplifying and unifying your systemsGo2Group, Inc.
 
Big Bang And Beyond: Migrating Between Server and Cloud
Big Bang And Beyond: Migrating Between Server and CloudBig Bang And Beyond: Migrating Between Server and Cloud
Big Bang And Beyond: Migrating Between Server and CloudAtlassian
 
MuleSoft Connect 2015 - Go2Group presentation
MuleSoft Connect 2015 - Go2Group presentationMuleSoft Connect 2015 - Go2Group presentation
MuleSoft Connect 2015 - Go2Group presentationGo2Group, Inc.
 
Advocating Adoption: Best Practices for User-Friendly Jira Configurations
Advocating Adoption: Best Practices for User-Friendly Jira ConfigurationsAdvocating Adoption: Best Practices for User-Friendly Jira Configurations
Advocating Adoption: Best Practices for User-Friendly Jira ConfigurationsAtlassian
 
Dev ops hackformers-matt-tesauro
Dev ops hackformers-matt-tesauroDev ops hackformers-matt-tesauro
Dev ops hackformers-matt-tesauroMatt Tesauro
 
Kafka Summit 2018: Monitoring and Orchestration of Your Microservices Landsca...
Kafka Summit 2018: Monitoring and Orchestration of Your Microservices Landsca...Kafka Summit 2018: Monitoring and Orchestration of Your Microservices Landsca...
Kafka Summit 2018: Monitoring and Orchestration of Your Microservices Landsca...Bernd Ruecker
 
Matt tesauro Lessons from DevOps: Taking DevOps practices into your AppSec Li...
Matt tesauro Lessons from DevOps: Taking DevOps practices into your AppSec Li...Matt tesauro Lessons from DevOps: Taking DevOps practices into your AppSec Li...
Matt tesauro Lessons from DevOps: Taking DevOps practices into your AppSec Li...Matt Tesauro
 
Scaling Agile to the Enterprise: 5 Secrets to Unlocking the Strategic Value o...
Scaling Agile to the Enterprise: 5 Secrets to Unlocking the Strategic Value o...Scaling Agile to the Enterprise: 5 Secrets to Unlocking the Strategic Value o...
Scaling Agile to the Enterprise: 5 Secrets to Unlocking the Strategic Value o...Atlassian
 
141010 network inventory management series 2: challenges 14th birthday theme
141010 network inventory management series 2: challenges 14th birthday theme141010 network inventory management series 2: challenges 14th birthday theme
141010 network inventory management series 2: challenges 14th birthday themeRama Hari Yudha
 

What's hot (20)

A Journey to Enterprise Agility: Migrating 15 Atlassian Instances to Data Center
A Journey to Enterprise Agility: Migrating 15 Atlassian Instances to Data CenterA Journey to Enterprise Agility: Migrating 15 Atlassian Instances to Data Center
A Journey to Enterprise Agility: Migrating 15 Atlassian Instances to Data Center
 
Transform Fearlessly to Serverless with Dynatrace 2 - DEM07 - Toronto AWS Summit
Transform Fearlessly to Serverless with Dynatrace 2 - DEM07 - Toronto AWS SummitTransform Fearlessly to Serverless with Dynatrace 2 - DEM07 - Toronto AWS Summit
Transform Fearlessly to Serverless with Dynatrace 2 - DEM07 - Toronto AWS Summit
 
Customer Driven DevOps at Work: Operating the Digital Turnstile [FutureStack1...
Customer Driven DevOps at Work: Operating the Digital Turnstile [FutureStack1...Customer Driven DevOps at Work: Operating the Digital Turnstile [FutureStack1...
Customer Driven DevOps at Work: Operating the Digital Turnstile [FutureStack1...
 
Product Keynote: Server and Data Center
Product Keynote: Server and Data CenterProduct Keynote: Server and Data Center
Product Keynote: Server and Data Center
 
Managing Application Lifecycle using Jira and Bitbucket Cloud and AWS Tooling
Managing Application Lifecycle using Jira and Bitbucket Cloud and AWS ToolingManaging Application Lifecycle using Jira and Bitbucket Cloud and AWS Tooling
Managing Application Lifecycle using Jira and Bitbucket Cloud and AWS Tooling
 
Staying Secure When Moving to the Cloud - Dave Millier
Staying Secure When Moving to the Cloud - Dave MillierStaying Secure When Moving to the Cloud - Dave Millier
Staying Secure When Moving to the Cloud - Dave Millier
 
Self-Healing at Scale: How Adobe Eliminated Critical Service Outages
Self-Healing at Scale: How Adobe Eliminated Critical Service OutagesSelf-Healing at Scale: How Adobe Eliminated Critical Service Outages
Self-Healing at Scale: How Adobe Eliminated Critical Service Outages
 
How Data Center Can Help You Sleep Better
How Data Center Can Help You Sleep BetterHow Data Center Can Help You Sleep Better
How Data Center Can Help You Sleep Better
 
OOP 2016 - Faster releases and simpler operations
OOP 2016 - Faster releases and simpler operationsOOP 2016 - Faster releases and simpler operations
OOP 2016 - Faster releases and simpler operations
 
Modern Operations at Scale within Viasat – How to Structure Teams and Build A...
Modern Operations at Scale within Viasat – How to Structure Teams and Build A...Modern Operations at Scale within Viasat – How to Structure Teams and Build A...
Modern Operations at Scale within Viasat – How to Structure Teams and Build A...
 
Using an ALM Router to Integrate Multiple Vendors’ ALM Systems
Using an ALM Router to Integrate Multiple Vendors’ ALM SystemsUsing an ALM Router to Integrate Multiple Vendors’ ALM Systems
Using an ALM Router to Integrate Multiple Vendors’ ALM Systems
 
ALM migration and integration workshop: Simplifying and unifying your systems
ALM migration and integration workshop: Simplifying and unifying your systemsALM migration and integration workshop: Simplifying and unifying your systems
ALM migration and integration workshop: Simplifying and unifying your systems
 
Big Bang And Beyond: Migrating Between Server and Cloud
Big Bang And Beyond: Migrating Between Server and CloudBig Bang And Beyond: Migrating Between Server and Cloud
Big Bang And Beyond: Migrating Between Server and Cloud
 
MuleSoft Connect 2015 - Go2Group presentation
MuleSoft Connect 2015 - Go2Group presentationMuleSoft Connect 2015 - Go2Group presentation
MuleSoft Connect 2015 - Go2Group presentation
 
Advocating Adoption: Best Practices for User-Friendly Jira Configurations
Advocating Adoption: Best Practices for User-Friendly Jira ConfigurationsAdvocating Adoption: Best Practices for User-Friendly Jira Configurations
Advocating Adoption: Best Practices for User-Friendly Jira Configurations
 
Dev ops hackformers-matt-tesauro
Dev ops hackformers-matt-tesauroDev ops hackformers-matt-tesauro
Dev ops hackformers-matt-tesauro
 
Kafka Summit 2018: Monitoring and Orchestration of Your Microservices Landsca...
Kafka Summit 2018: Monitoring and Orchestration of Your Microservices Landsca...Kafka Summit 2018: Monitoring and Orchestration of Your Microservices Landsca...
Kafka Summit 2018: Monitoring and Orchestration of Your Microservices Landsca...
 
Matt tesauro Lessons from DevOps: Taking DevOps practices into your AppSec Li...
Matt tesauro Lessons from DevOps: Taking DevOps practices into your AppSec Li...Matt tesauro Lessons from DevOps: Taking DevOps practices into your AppSec Li...
Matt tesauro Lessons from DevOps: Taking DevOps practices into your AppSec Li...
 
Scaling Agile to the Enterprise: 5 Secrets to Unlocking the Strategic Value o...
Scaling Agile to the Enterprise: 5 Secrets to Unlocking the Strategic Value o...Scaling Agile to the Enterprise: 5 Secrets to Unlocking the Strategic Value o...
Scaling Agile to the Enterprise: 5 Secrets to Unlocking the Strategic Value o...
 
141010 network inventory management series 2: challenges 14th birthday theme
141010 network inventory management series 2: challenges 14th birthday theme141010 network inventory management series 2: challenges 14th birthday theme
141010 network inventory management series 2: challenges 14th birthday theme
 

Similar to Migrating your it policies to the cloud

Building Modern Applications on AWS.pptx
Building Modern Applications on AWS.pptxBuilding Modern Applications on AWS.pptx
Building Modern Applications on AWS.pptxNelson Kimathi
 
SRV205 Architectures and Strategies for Building Modern Applications on AWS
 SRV205 Architectures and Strategies for Building Modern Applications on AWS SRV205 Architectures and Strategies for Building Modern Applications on AWS
SRV205 Architectures and Strategies for Building Modern Applications on AWSAmazon Web Services
 
Cloud Intro - Saint Louis Day of Dot Net
Cloud Intro - Saint Louis Day of Dot NetCloud Intro - Saint Louis Day of Dot Net
Cloud Intro - Saint Louis Day of Dot NetBrian Blanchard
 
Making Sense Of Cloud Computing - by Mark Rivington
Making Sense Of Cloud Computing - by Mark RivingtonMaking Sense Of Cloud Computing - by Mark Rivington
Making Sense Of Cloud Computing - by Mark RivingtonCA Nimsoft
 
Cloud Computing Realities - Getting past the hype and setting your cloud stra...
Cloud Computing Realities - Getting past the hype and setting your cloud stra...Cloud Computing Realities - Getting past the hype and setting your cloud stra...
Cloud Computing Realities - Getting past the hype and setting your cloud stra...Compuware APM
 
An introduction to Cloud computing
An introduction to Cloud computing  An introduction to Cloud computing
An introduction to Cloud computing ashwin m
 
cloudintroduction.ppt
cloudintroduction.pptcloudintroduction.ppt
cloudintroduction.pptAhmedRebai8
 
Simplify Cloud Migration to AWS with RISC Network’s Complete App Analysis
Simplify Cloud Migration  to  AWS with RISC Network’s Complete App AnalysisSimplify Cloud Migration  to  AWS with RISC Network’s Complete App Analysis
Simplify Cloud Migration to AWS with RISC Network’s Complete App AnalysisRISC Networks
 
Simplify Migration with RISC Network’s Complete App Analysis
Simplify Migration with RISC Network’s Complete App AnalysisSimplify Migration with RISC Network’s Complete App Analysis
Simplify Migration with RISC Network’s Complete App AnalysisAmazon Web Services
 
Introduction to Cloud Computing
Introduction to Cloud ComputingIntroduction to Cloud Computing
Introduction to Cloud ComputingBharat Kalia
 
lect15_cloud.ppt
lect15_cloud.pptlect15_cloud.ppt
lect15_cloud.pptAjit Mali
 
Introduction to cloud computing
Introduction to cloud computingIntroduction to cloud computing
Introduction to cloud computingsuraj bhandari
 

Similar to Migrating your it policies to the cloud (20)

Cloud computing
Cloud computingCloud computing
Cloud computing
 
Building Modern Applications on AWS.pptx
Building Modern Applications on AWS.pptxBuilding Modern Applications on AWS.pptx
Building Modern Applications on AWS.pptx
 
Basic cloud
Basic cloudBasic cloud
Basic cloud
 
SRV205 Architectures and Strategies for Building Modern Applications on AWS
 SRV205 Architectures and Strategies for Building Modern Applications on AWS SRV205 Architectures and Strategies for Building Modern Applications on AWS
SRV205 Architectures and Strategies for Building Modern Applications on AWS
 
Cloud Intro - Saint Louis Day of Dot Net
Cloud Intro - Saint Louis Day of Dot NetCloud Intro - Saint Louis Day of Dot Net
Cloud Intro - Saint Louis Day of Dot Net
 
Making Sense Of Cloud Computing - by Mark Rivington
Making Sense Of Cloud Computing - by Mark RivingtonMaking Sense Of Cloud Computing - by Mark Rivington
Making Sense Of Cloud Computing - by Mark Rivington
 
Cloud Computing Realities - Getting past the hype and setting your cloud stra...
Cloud Computing Realities - Getting past the hype and setting your cloud stra...Cloud Computing Realities - Getting past the hype and setting your cloud stra...
Cloud Computing Realities - Getting past the hype and setting your cloud stra...
 
Cloud Computing
Cloud ComputingCloud Computing
Cloud Computing
 
Cloud Computing
Cloud ComputingCloud Computing
Cloud Computing
 
An introduction to Cloud computing
An introduction to Cloud computing  An introduction to Cloud computing
An introduction to Cloud computing
 
cloudintroduction.ppt
cloudintroduction.pptcloudintroduction.ppt
cloudintroduction.ppt
 
Simplify Cloud Migration to AWS with RISC Network’s Complete App Analysis
Simplify Cloud Migration  to  AWS with RISC Network’s Complete App AnalysisSimplify Cloud Migration  to  AWS with RISC Network’s Complete App Analysis
Simplify Cloud Migration to AWS with RISC Network’s Complete App Analysis
 
Simplify Migration with RISC Network’s Complete App Analysis
Simplify Migration with RISC Network’s Complete App AnalysisSimplify Migration with RISC Network’s Complete App Analysis
Simplify Migration with RISC Network’s Complete App Analysis
 
Introduction to Cloud Computing
Introduction to Cloud ComputingIntroduction to Cloud Computing
Introduction to Cloud Computing
 
Cloud computing
Cloud computingCloud computing
Cloud computing
 
lect15_cloud.ppt
lect15_cloud.pptlect15_cloud.ppt
lect15_cloud.ppt
 
Cloud computing-ppt
Cloud computing-pptCloud computing-ppt
Cloud computing-ppt
 
Introduction to cloud computing
Introduction to cloud computingIntroduction to cloud computing
Introduction to cloud computing
 
lect15_cloud.ppt
lect15_cloud.pptlect15_cloud.ppt
lect15_cloud.ppt
 
Salesforce - classification of cloud computing
Salesforce - classification of cloud computingSalesforce - classification of cloud computing
Salesforce - classification of cloud computing
 

Recently uploaded

Linked Data in Production: Moving Beyond Ontologies
Linked Data in Production: Moving Beyond OntologiesLinked Data in Production: Moving Beyond Ontologies
Linked Data in Production: Moving Beyond OntologiesDavid Newbury
 
COMPUTER 10 Lesson 8 - Building a Website
COMPUTER 10 Lesson 8 - Building a WebsiteCOMPUTER 10 Lesson 8 - Building a Website
COMPUTER 10 Lesson 8 - Building a Websitedgelyza
 
Videogame localization & technology_ how to enhance the power of translation.pdf
Videogame localization & technology_ how to enhance the power of translation.pdfVideogame localization & technology_ how to enhance the power of translation.pdf
Videogame localization & technology_ how to enhance the power of translation.pdfinfogdgmi
 
Nanopower In Semiconductor Industry.pdf
Nanopower  In Semiconductor Industry.pdfNanopower  In Semiconductor Industry.pdf
Nanopower In Semiconductor Industry.pdfPedro Manuel
 
VoIP Service and Marketing using Odoo and Asterisk PBX
VoIP Service and Marketing using Odoo and Asterisk PBXVoIP Service and Marketing using Odoo and Asterisk PBX
VoIP Service and Marketing using Odoo and Asterisk PBXTarek Kalaji
 
Building AI-Driven Apps Using Semantic Kernel.pptx
Building AI-Driven Apps Using Semantic Kernel.pptxBuilding AI-Driven Apps Using Semantic Kernel.pptx
Building AI-Driven Apps Using Semantic Kernel.pptxUdaiappa Ramachandran
 
UWB Technology for Enhanced Indoor and Outdoor Positioning in Physiological M...
UWB Technology for Enhanced Indoor and Outdoor Positioning in Physiological M...UWB Technology for Enhanced Indoor and Outdoor Positioning in Physiological M...
UWB Technology for Enhanced Indoor and Outdoor Positioning in Physiological M...UbiTrack UK
 
Connector Corner: Extending LLM automation use cases with UiPath GenAI connec...
Connector Corner: Extending LLM automation use cases with UiPath GenAI connec...Connector Corner: Extending LLM automation use cases with UiPath GenAI connec...
Connector Corner: Extending LLM automation use cases with UiPath GenAI connec...DianaGray10
 
Crea il tuo assistente AI con lo Stregatto (open source python framework)
Crea il tuo assistente AI con lo Stregatto (open source python framework)Crea il tuo assistente AI con lo Stregatto (open source python framework)
Crea il tuo assistente AI con lo Stregatto (open source python framework)Commit University
 
Apres-Cyber - The Data Dilemma: Bridging Offensive Operations and Machine Lea...
Apres-Cyber - The Data Dilemma: Bridging Offensive Operations and Machine Lea...Apres-Cyber - The Data Dilemma: Bridging Offensive Operations and Machine Lea...
Apres-Cyber - The Data Dilemma: Bridging Offensive Operations and Machine Lea...Will Schroeder
 
9 Steps For Building Winning Founding Team
9 Steps For Building Winning Founding Team9 Steps For Building Winning Founding Team
9 Steps For Building Winning Founding TeamAdam Moalla
 
UiPath Studio Web workshop series - Day 8
UiPath Studio Web workshop series - Day 8UiPath Studio Web workshop series - Day 8
UiPath Studio Web workshop series - Day 8DianaGray10
 
Secure your environment with UiPath and CyberArk technologies - Session 1
Secure your environment with UiPath and CyberArk technologies - Session 1Secure your environment with UiPath and CyberArk technologies - Session 1
Secure your environment with UiPath and CyberArk technologies - Session 1DianaGray10
 
Salesforce Miami User Group Event - 1st Quarter 2024
Salesforce Miami User Group Event - 1st Quarter 2024Salesforce Miami User Group Event - 1st Quarter 2024
Salesforce Miami User Group Event - 1st Quarter 2024SkyPlanner
 
IESVE Software for Florida Code Compliance Using ASHRAE 90.1-2019
IESVE Software for Florida Code Compliance Using ASHRAE 90.1-2019IESVE Software for Florida Code Compliance Using ASHRAE 90.1-2019
IESVE Software for Florida Code Compliance Using ASHRAE 90.1-2019IES VE
 
UiPath Studio Web workshop series - Day 6
UiPath Studio Web workshop series - Day 6UiPath Studio Web workshop series - Day 6
UiPath Studio Web workshop series - Day 6DianaGray10
 
Cybersecurity Workshop #1.pptx
Cybersecurity Workshop #1.pptxCybersecurity Workshop #1.pptx
Cybersecurity Workshop #1.pptxGDSC PJATK
 
Introduction to Matsuo Laboratory (ENG).pptx
Introduction to Matsuo Laboratory (ENG).pptxIntroduction to Matsuo Laboratory (ENG).pptx
Introduction to Matsuo Laboratory (ENG).pptxMatsuo Lab
 
activity_diagram_combine_v4_20190827.pdfactivity_diagram_combine_v4_20190827.pdf
activity_diagram_combine_v4_20190827.pdfactivity_diagram_combine_v4_20190827.pdfactivity_diagram_combine_v4_20190827.pdfactivity_diagram_combine_v4_20190827.pdf
activity_diagram_combine_v4_20190827.pdfactivity_diagram_combine_v4_20190827.pdfJamie (Taka) Wang
 

Recently uploaded (20)

Linked Data in Production: Moving Beyond Ontologies
Linked Data in Production: Moving Beyond OntologiesLinked Data in Production: Moving Beyond Ontologies
Linked Data in Production: Moving Beyond Ontologies
 
COMPUTER 10 Lesson 8 - Building a Website
COMPUTER 10 Lesson 8 - Building a WebsiteCOMPUTER 10 Lesson 8 - Building a Website
COMPUTER 10 Lesson 8 - Building a Website
 
Videogame localization & technology_ how to enhance the power of translation.pdf
Videogame localization & technology_ how to enhance the power of translation.pdfVideogame localization & technology_ how to enhance the power of translation.pdf
Videogame localization & technology_ how to enhance the power of translation.pdf
 
Nanopower In Semiconductor Industry.pdf
Nanopower  In Semiconductor Industry.pdfNanopower  In Semiconductor Industry.pdf
Nanopower In Semiconductor Industry.pdf
 
VoIP Service and Marketing using Odoo and Asterisk PBX
VoIP Service and Marketing using Odoo and Asterisk PBXVoIP Service and Marketing using Odoo and Asterisk PBX
VoIP Service and Marketing using Odoo and Asterisk PBX
 
Building AI-Driven Apps Using Semantic Kernel.pptx
Building AI-Driven Apps Using Semantic Kernel.pptxBuilding AI-Driven Apps Using Semantic Kernel.pptx
Building AI-Driven Apps Using Semantic Kernel.pptx
 
201610817 - edge part1
201610817 - edge part1201610817 - edge part1
201610817 - edge part1
 
UWB Technology for Enhanced Indoor and Outdoor Positioning in Physiological M...
UWB Technology for Enhanced Indoor and Outdoor Positioning in Physiological M...UWB Technology for Enhanced Indoor and Outdoor Positioning in Physiological M...
UWB Technology for Enhanced Indoor and Outdoor Positioning in Physiological M...
 
Connector Corner: Extending LLM automation use cases with UiPath GenAI connec...
Connector Corner: Extending LLM automation use cases with UiPath GenAI connec...Connector Corner: Extending LLM automation use cases with UiPath GenAI connec...
Connector Corner: Extending LLM automation use cases with UiPath GenAI connec...
 
Crea il tuo assistente AI con lo Stregatto (open source python framework)
Crea il tuo assistente AI con lo Stregatto (open source python framework)Crea il tuo assistente AI con lo Stregatto (open source python framework)
Crea il tuo assistente AI con lo Stregatto (open source python framework)
 
Apres-Cyber - The Data Dilemma: Bridging Offensive Operations and Machine Lea...
Apres-Cyber - The Data Dilemma: Bridging Offensive Operations and Machine Lea...Apres-Cyber - The Data Dilemma: Bridging Offensive Operations and Machine Lea...
Apres-Cyber - The Data Dilemma: Bridging Offensive Operations and Machine Lea...
 
9 Steps For Building Winning Founding Team
9 Steps For Building Winning Founding Team9 Steps For Building Winning Founding Team
9 Steps For Building Winning Founding Team
 
UiPath Studio Web workshop series - Day 8
UiPath Studio Web workshop series - Day 8UiPath Studio Web workshop series - Day 8
UiPath Studio Web workshop series - Day 8
 
Secure your environment with UiPath and CyberArk technologies - Session 1
Secure your environment with UiPath and CyberArk technologies - Session 1Secure your environment with UiPath and CyberArk technologies - Session 1
Secure your environment with UiPath and CyberArk technologies - Session 1
 
Salesforce Miami User Group Event - 1st Quarter 2024
Salesforce Miami User Group Event - 1st Quarter 2024Salesforce Miami User Group Event - 1st Quarter 2024
Salesforce Miami User Group Event - 1st Quarter 2024
 
IESVE Software for Florida Code Compliance Using ASHRAE 90.1-2019
IESVE Software for Florida Code Compliance Using ASHRAE 90.1-2019IESVE Software for Florida Code Compliance Using ASHRAE 90.1-2019
IESVE Software for Florida Code Compliance Using ASHRAE 90.1-2019
 
UiPath Studio Web workshop series - Day 6
UiPath Studio Web workshop series - Day 6UiPath Studio Web workshop series - Day 6
UiPath Studio Web workshop series - Day 6
 
Cybersecurity Workshop #1.pptx
Cybersecurity Workshop #1.pptxCybersecurity Workshop #1.pptx
Cybersecurity Workshop #1.pptx
 
Introduction to Matsuo Laboratory (ENG).pptx
Introduction to Matsuo Laboratory (ENG).pptxIntroduction to Matsuo Laboratory (ENG).pptx
Introduction to Matsuo Laboratory (ENG).pptx
 
activity_diagram_combine_v4_20190827.pdfactivity_diagram_combine_v4_20190827.pdf
activity_diagram_combine_v4_20190827.pdfactivity_diagram_combine_v4_20190827.pdfactivity_diagram_combine_v4_20190827.pdfactivity_diagram_combine_v4_20190827.pdf
activity_diagram_combine_v4_20190827.pdfactivity_diagram_combine_v4_20190827.pdf
 

Migrating your it policies to the cloud

  • 1. Migrating your IT policies to the Cloud Sriram “Ram” Narayanan ThoughtWorker Twitter: @sriramnrn www.sriramnarayanan.com
  • 2. @sriramnrn www.sriramnarayanan.com Agenda Pre-Cloud realities and the need for IT policies A perspective on the “Cloud” Comparing pre-cloud realities to what the Cloud gives us A migration of policies Migrating Applications - are we leveraging what a Cloud provider offers? Re-thinking IT Infrastructure in the Cloud Your Pre-Cloud IT team - what about them?
  • 3. @sriramnrn www.sriramnarayanan.com Physical hardware, limited floor space, limited annual IT budgets Software licenses VMs - Better utilisation of CPU cores - Needs management to prevent VM sprawl Internal charging mechanisms Complaints by users and business - “You restrict us on hardware and on innovation!” Pre Cloud Realities and the need for IT policies
  • 4. @sriramnrn www.sriramnarayanan.com Essentially, someone else’s massive data center with an API in front of it. From Capex to Opex Lots of automation possible - Compute, Storage, Network policies - Services (CDN, WAF, DNS, SMTP, SMS, MQ, DB, Cache) A perspective on “The Cloud”
  • 5. @sriramnrn www.sriramnarayanan.com Pre-Cloud vs Cloud A Comparison point (among many) Pre-Cloud Cloud Costs Capex + Opex - Pay for everything, and then renewals, and then Ops Opex - Pay for what you use Automation May be present but not used due to existing processes and a lack of skills Comprehensive Automation - in the cloud providers’ interests to make it easier for you to use Scalability Limited by owned infra - determines scalability, imposes constraints on what’s possible Limited by Cloud provider’s infra, and your Opex budget Security You own everything You rent everything
  • 6. @sriramnrn www.sriramnarayanan.com Moving to the Cloud - how to rethink policies A Comparison point (among many) Cloud-Age policy Approach Infra provisioning Leverage automation (instead of using web based provisioning) Automate once; enable users to self-service Managing Infra sprawl Introduce caps by budget, not by instance count Facilitate only-the-fly infra provisioning and decommissioning to control spend (vs depending upon reviews) Security Leverage Cloud features and API Leverage configurable policies; External automation What should you gate-keep? Policies Configuration scripts and values; Not the Infra itself
  • 7. @sriramnrn www.sriramnarayanan.com Leverage scripting (by Cloud Provider or Independent) to provision and decommission infrastructure Gate-keep VM and Container Templates, configuration scripts and Configuration values (templates from known sources, scan the templates, etc) Mandate all VM and container configuration via scripts - nothing manual IMPORTANT: Nothing to scan on individual VMs themselves - your templates and scripts are your source of truth! On Automation
  • 8. @sriramnrn www.sriramnarayanan.com Rethinking IT Infrastructure approaches A Comparison point (among many) Cloud-Age policy Approach Compute Compute capacity, vs number of VMs and physical servers Use auto-scaling + billing caps + environments-on-demand Storage Compute-associated storage. Let the apps manage replication. No “stretch-clusters” spanning DCs to ensure HA. Networks Leverage Cloud features and API Network policies in lieu of explicit firewalls Services Leverage Cloud features and API Manage service configuration
  • 9. @sriramnrn www.sriramnarayanan.com Rethinking IT Tiers A Comparison point (among many) Pre-Cloud Cloud Web Tier Explicit Web servers, “Web Tier” CDN for static content Web server + stateless apps co-hosted in the same VM, etc App Tier VMWare with multi-DC HA, etc Compute on the Edge using Serverless, stateless autoscaling, leverage multiple zones DB Tier Physical servers with inter-DC replication via SAN DBs with replication, caches Expect and architect for failures Network Explicit firewalls, WAFs, and other appliances Leverage Cloud providers services and policies
  • 10. @sriramnrn www.sriramnarayanan.com Lift and Shift - Physical to Virtual Migration - Unavoidable for COTS Leveraging the Cloud - Let their automation add and remove compute capacity for horizontal scaling - Architect for multiple-zones - Architect for everything to fail - eventual consistency App Migration - Are we truly using the cloud?
  • 11. @sriramnrn www.sriramnarayanan.com “I want to move to the Cloud and reduce IT costs” - Firing people is not the only way to reduce costs - Your IT people know your customers, your business, your org’s unique needs “I’ll help you move to the Cloud and then quit” - True Story APIs let you create and decommission - Troubleshooting doesn’t go away! Your Pre-Cloud IT team
  • 12. @sriramnrn www.sriramnarayanan.com Help with Lift and Shift Understand and advise on failure scenarios Liaise with the Cloud providers for troubleshooting Maintain automation scripts to encourage self-service Add more relevant monitoring and alerting Understand and ready themselves and the org for multi-cloud scenarios Integration with partners, vendors, service providers Lots to do!! How pre-cloud IT staff add value in the Cloud era