Trivadis Azure Foundation – Das Fundament für den erfolgreichen Einsatz der Azure Cloud Die Azure Cloud steuert auf ihr 10-jähriges Jubiläum zu und ist in der Schweiz angekommen. Im Vergleich zum Betrieb von On-Premise Lösungen bietet die Cloud eine Vielzahl von Vorteilen. Viele Aufgaben aus der On-Premise Welt werden im Cloud Computing vom Anbieter übernommen. Aber die Freiheiten, welche Cloud Computing bietet, sind sehr mächtig und das beste Rezept für Wildwuchs und Chaos. Viele unserer Kunden werden sich erst jetzt bewusst, um welche Aufgaben sie sich bereits vor 5 Jahren hätten kümmern sollen. Die Trivadis Azure Foundation ist unser in der Praxis erprobtes Vorgehen, um alle Vorteile der Cloud optimal Nutzen zu können, ohne die Kontrolle zu verlieren. In dieser Session bekommen Sie einen Einblick in unsere Azure Foundation Methodik, zusätzlich berichten wir von den Azure-Erfahrungen unserer Kunden.

1. https://blog.rajah.chnishi1905
Trivadis Azure Foundation
Grüezi | Willkommen | Bonjour | Welcome | Velkomst
Nisanth Muthukirushnasamy, Cloud Architect

2. Agenda
1. Trivadis Azure Portfolio „Way to Azure“
2. Trivadis Azure Foundation
3. Q&A

3. Nisanth Muthukirushnasamy
helps customers:
• to get Cloud Ready
• to adopt Microsoft Azure as an enterprise
Ready Cloud platform
@nishi1905

4. Trivadis Azure Portfolio
«Way to Azure»

5. Check-Up Strategy Ideation Realization Operation
Reviews
Coaching & Know-how Transfer
«Way to Azure»

6. Ideation
Way to Azure
Architecture
Workshop
Incubation Realization Operation
Strategy
Azure
Strategy
Check-up
Azure
Readiness
Check
Objective
Workshop
Orientation
Workshop
Innovation
Proof-of-
Value
Coaching & Know-how Transfer
Azure
Consulting
Azure
Reviews
Azure
Architecture
Microsoft
Courses
Trivadis Azure
Training
Cloud
Competence
Center as a
Service
Managed
Azure as a
Service
Transformation
/ Migration
Azure
Solutions
Azure
Foundation

8. System
Management
Automation
Cloud Service
Management
Connectivity
Network
Security Management
Identity & Access
Management
Reference
Architecture
Resources Security
Cost Management
Auditing&Reporting
Resources
Organization
Physical security
Cabling
Facility Management
(Powering/Cooling)
Hardware Lifecycle

9. Azure Solutions
Azure Foundation
Azure Governance
Azure Core
Infrastructure
System
Management
Automation
Azure Operations
Cloud Service
Management
Connectivity
Network
Security Management
Identity & Access
Management
Reference
Architecture
Resources Security
Cost Management
Auditing&Reporting
Resources
Organization
Physical security
Facility Management
(Powering/Cooling)
Cabling
Hardware Lifecycle

10. Trivadis Azure Foundation
Trivadis Best Practice for the adoption of Microsoft Azure as an Enterprise
Ready Cloud Platform in an organization.

11. Azure Solutions
Azure Governance
Azure Core
Infrastructure
System
Management
Automation
Azure Operations
Cloud Service
Management
Azure Foundation
Connectivity
Azure Network
Security Management
Identity & Access
Management
Reference
Architecture
Resources Security
Cost Management
Auditing&Reporting
Resources
Organization

12. Azure Services and Resources
Azure Account Azure Active Directory Azure Subscription
Management Groups Azure Blueprints Azure Policies
Azure Management Services Azure Resources
Machine Learning MS SQL Database Virtual Network
IoT Hub Virtual Machine Key Vault

13. Azure Solutions
Resources Security
Cost Management
Azure Governance
Auditing&Reporting
Resources
Organization*
* Submodule:
Enterprise Agreement-
Management structure
Subscription/Provider
Management
Azure AD Tenant
Management
Naming Convention
Governance structure
Basic Subscriptions
Default Subscription Design
Resource Groups Design
Solution Design Patterns
Tagging
Azure Foundation

14. Resource Organization – Azure AD Tenant Level
Root MG
IT_Core IT_IaaS Business_nonProdBusiness_Prod
Azure Account
Auditing
Enforcing
Corporate-wide
Policies
Environment Policies
Application Policies
Sandbox
Default
Subscription
tvd-it-mg
(IT)
tvd-bunitnonprod-mg
(Business NonProd)
tvd-bunitprod-mg
(Business Prod)
tvd-sandbox-mg
(Sandbox)
tvd-itcore-network-rg
tvd-itcore-vnet-001
TagsTagsTagsTagsTags

15. Basic Subscriptions / Landing Zone
Connectivity
Azure AD Tenant
Management
Shared
Services
Prod
NonProd
Labs

16. Default Subscription Design
Network
System
Manageme
nt
Shared
Services
Database
Application
Frontend
Application
Backend
Subscription Management

17. * Submodule:
Hybrid Identity
Azure AD Authentication
Azure AD Authorization
Domain Services for IaaS
MFA
Conditional Access
Identity Protection
Privileged Identity
Management
Break glass Concept
Azure Solutions
Azure Governance
Connectivity
Azure Network
Security Management
Identity & Access
Management*
Azure Core
Infrastructure
Azure Foundation
Resources Security
Cost Management
Auditing&Reporting
Resources
Organization

18. Identity and Access Management
Azure Active Directory
Microsoft Active Directory
Service
Azure AD Connect
Authentication Methods
Azure Active Directory
Domain Services for IaaSIdentity Synchronisation

19. Customer Case 1 - KMU
Azure Active Directory
MFA
Forest kunde.ch
DC01
Domain: kunde.ch
DC02
Domain: kunde.ch
Azure AD Connect
kunde.onmicrosoft.com
kunde.ch
Azure VM’s
OnPremises Forest
Identity Syncronization Authentication with PWHash-Sync OnPremises Domain Service

20. Customer Case 2 - Enterprise
Enterprise
Enrollment
Company 1 Company 2 Company 4 Central IT
Azure AD
Tenant:
Enterprise
Domain: ent.com
Azure AD – Com1
Domain: com1.ch
OnPremise AD
AzureADConnect
External
Azure AD
Domain: centralit-admins.chSuppliers Azure AD
B2B-Office365
Azure AD
Domain: centralit.ch
B2B-Office365
Company 3
Multi-Tenant IAM with Identity Syncronization and B2B

21. Customer Case 2 - Enterprise
Domain Service IaaS in Azure
Extern Intern
Azure Active Directory
AD-Federation Services
Microsoft Active Directory
Service
Authentication with Federation Services
Forest xyz.ch
DC01
Domain: xyz.ch
DC02
Domain: xyz.ch
DC03
Domain: xyz.ch
DC04
Domain: xyz.ch
AD Site - Azure
AD Site – OnPremise
ADRepication
Azure VM s
OnPremise VM s

22. Azure Solutions
Azure Governance
Connectivity
Azure Network
Security Management
Identity & Access
Management
Azure Core
Infrastructure
Azure Operations
* Submodule:
Integration
Monitoring
Alerting
Business Continuity
(Backup, Restore,
Disaster Recovery)
IaaS System
Management (Update-,
Configuration-, Change
Management)
Azure Foundation
System
Management*
Automation
Cloud Service
Management
Reference
Architecture
Resources Security
Cost Management
Auditing&Reporting
Resources
Organization

23. Business Continuity
Azure Backup Azure Site Recovery

24. Erfahrungen mit Azure Foundation
• Kommt bei den IT Pro’s sehr gut an, da die Themen sehr bekannt und
nachvollziehbar sind
• Azure Foundation als Vorgehensmodell kann unabhängig von Cloud Provider, als
Grundlage für die Einführung einer Enterprise Cloud Plattform angewendet
werden
• Geht bei vielen Cloud Projekte vergessen oder wird zu wenig Beachtung
gegeben, da es nicht einen direkten Business Mehrwert liefert.

25. Q&A