Cloud Governance: Winning the battle between speed and control
summary
Describes how Azure Resource Manager enforces governance using Azure Policy and management groups to stop expensive or insecure resources before they fully provision; shows a custom initiative that bans E‑series VMs (some cost ~ $5,000/month) and uses deployIfNotExists to auto‑reinstall VM extensions; demonstrates RBAC, tagging and Blueprints for repeatable scopes, cites 86% compliance with 23 noncompliant resources in a demo, and explains cost tools: Azure Migrate, pricing/TCO calculators, budgets with 50/75/90% alerts, and a 1% fee to import AWS spend.
AI-written summary · about
chapters (19)
- 0:00Intro
- 1:41The battle between good and evil
- 2:33Cloud native governance
- 4:12Cloud adoption framework
- 6:52Tags
- 9:38Rolebased access control
- 14:46Policies
- 17:10Definitions
- 23:00GitHub
- 24:52Blueprints
- 27:18PowerShell commands
- 29:19Cost management
- 30:41Design decisions
- 39:40Purchasing options
- 43:32Managing cloud spend
- 43:55Budgets
- 49:02Cost Analysis Demo
- 51:33Power BI
- 53:20Docs
related talks
47mAzure Governance using Policies and Blueprints
53mAzure Cost Management
31mA Comprehensive Approach to Cloud Security Posture Management
46mTurning Azure Platform recommendations into Gold
46mLet Azure control your DevOps Pipelines
54mMastering Azure Well-Architected: From Pipelines to Perfection
50mFrom Code to Compliance: Enforcing Azure Security with Terraform and...
47mARM FTW – Azure Resource Manager For The Win