Chapter 5: Ensuring Platform Governance
In Chapter 2, Principles of Modern Architecture, we discussed the need for an IT strategy that would define many aspects of your cloud platform, particularly around security, and would state different requisites, such as encryption, data residency, sign-on locations, use of Multi-Factor Authentication (MFA), and so on.
Within Azure, you can provide different teams within the business direct access to build solutions. With a relatively open and dynamic system, how can you ensure that the IT strategies and rules you have defined are observed?
Governance and compliance are terms used to describe what users of a system should and should not perform, and Azure provides a range of tools to enforce adherence to these rules.
To support this, we will look at how we can use tagging to define and manage metadata against resources, which in turn can be used in reporting and automated processes to help with governance.
Next, we will look at how Azure...