Managing governance and policies at a large scale
When organizations begin to adopt cloud services, it is highly recommended to plan and consider cloud governance (asset deployment, data security, risk management, and more), even before they find themselves managing multiple cloud environments and multiple accounts.
Failing to plan makes it challenging to fix configuration that was done ad hoc as lack of uniformity results in heterogeneous assets that need to be protected, lack of repeatability, redundancy, large attack surface, and self-imposed constraints from technical debt that are a challenge to recover from (such as overlapping CIDR blocks).
Some of the important terminology related to governance is as follows:
- Landing Zones: These are pre-configured environments that are provisioned through code (policies, best practices, guidelines, and centrally managed services), as explained in the following section.
- Compliance Policies: These are specific rules for evaluating...
