Production readiness in Azure: A practical guide

In this session, we will deep dive into important concepts and practices on making an environment "production ready" in Azure. Everything from infra provisioning, deployment, and security-hardening, to monitoring, reporting, operations, and process automation with integrations to various tools (both Azure-provided and Third Party).

Transcript

1. Production Readiness in Azure
3. Defining the WHAT aka.ms/adopt
4. Checklists we tried https://azurechecklist.com/ https://docs.microsoft.com/en-us/assessments/
5. No silver bullet https://azure.microsoft.com/en-us/overview/trusted-cloud/compliance/
6. Define monitoring strategy and architecture
7. Consolidate Azure Monitor workspaces * https://docs.microsoft.com/en-us/azure/azure-monitor/app/create-workspace-resource
8. Data Collection & Onboarding Azure Monitor Custom Sources Application Infrastructure Azure Resources Azure Subscription Azure Tenant Zero Instrumentation Logs & Metrics Agents Windows + Linux Support Workload Agnostic Application Insights SDK/Agent Multi-Language Support REST APIs Metrics Logs
9. Onboarding at scale for Azure resources https://blog.tyang.org/2019/06/10/updated-azure-policy-for-azure-diagnostic-settings/
10. Using Agents & Extensions for VMs & Servers Azure Diagnostics Extension (WAD) Log Analytics Agent Dependency Agent Environments Supported Azure Azure Other cloud On-premises Azure Other cloud On-premises Agent Requirements None None Requires Log Analytics agent Data Collected Event Logs ETW events Performance File based logs IIS logs .NET app logs Crash dumps Agent diagnostics logs Event Logs Performance File based logs Insights and solutions Other services Process details and dependencies Network connection metrics Data Sent To Azure Storage Azure Monitor Metrics Event Hub Azure Monitor Logs Azure Monitor Logs Diagnostics Extension (LAD) Telegraf Agent Log Analytics Agent Dependency Agent Environments Supported Azure Azure Other cloud On-premises Azure Other cloud On-premises Azure Other cloud On-premises Agent Requirements None None None Requires Log Analytics agent Data Collected Syslog Performance Performance Syslog Performance Security Custom logs Container logs Insights and solutions Other services Process details and dependencies Network connection metrics Data Sent To Azure Storage Event Hub Azure Monitor Metrics Azure Monitor Logs Azure Monitor Logs
11. Onboarding at scale for Azure VMs
12. Operationalize Azure Security Center Secure Score
13. Ensure security data collection ASC Standard tier
14. Shared responsibility model and supportability Basic Developer Standard Professional Direct Included for all Azure customers Trial and non-prod env. Production workload env. Business-critical dependence https://azure.microsoft.com/en-us/support/plans/
15. Configure Service Health alerts health events health alerts
16. Azure Monitor Alerts: Notifications & Actions Simple Notifications Email, SMS, Voice & Mobile App Push Logic App Workflows ChatOps (Teams/Slack) Bug Filing (Azure Boards/GitHub/Jira) Custom Emails/Reports ITSM & On-Call Management ITSM Connectors: ServiceNow/Cherwell/ Provance Webhooks: PagerDuty/VictorOps/etc. Secure Export: ITSM integration with Azure AD Authentication Auto-healing & Auto-remediation Automation Runbooks Azure Functions Operationalization Alert Suppression Action Groups at Scale
17. ChatOps with Slack and Logic Apps
18. Pattern A: Event Grid, Logic App Event subscription Workflow Message Event
19. Pattern B: Azure Monitor, Logic App Workflow Alert Action Group Action (Logic App) Metrics Message
20. Avoid secrets in application code https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/services-support-managed-identities
21. Prevent data exfiltration
22. Operationalize Azure Advisor recommendations alerts
23. Ensuring regulatory compliance