Please enable JavaScript.

Coggle requires JavaScript to display documents.

Azure Landing Zone (Cloud Strategy (Workload patterns (IaaS, PaaS),…

- - - - Leverage built-in sign-in & auditing report
    - - MFA
      - PIM
    - - Design enrollment model
    - - RBAC templates for resources
- - - - Design for high availability deployment
    - - All VMs need to have backup and recovery plan
- - - - Application insights for VM
    - - Alerts on VM performance
    - - Implement update management
- - - - Design hub/spoke network topology
      - Hub/spoke vnet peering
    - - Design for test and production environment
    - - Deploy S2S VPN connection
    - - Design for N-tier application topology
- - - - Test/Prod subscription and management group design
    - - Architecture design for hub/spoke topology
    - - NSG for each subnet
      - Firewall and UDR design for traffic control
    - - EA portal management
      - Budgetary design
- - - - Enable the Azure security center
    - - Implement Application gateway and WAF for internet facing services
    - - Enable DDoS protection
    - - Enable Azure Sentinel
- - - - Implement DevOps Services
      - Infrastructure as a code for CI/CD
- - - - Azure naming convention recommendation
    - - Azure policy implementation
      - Azure blueprint implementation
    - - Cost management and budgetary implement
    - - Tagging recommendations
- - - - 現有兩個資源群組未納管, 管理權限與存取限制需要重新調整
      - Storage 資源仍透過外部直接存取, 需要限制存取
      - 官網圖檔過大, 現有頻寬使用量過大
      - Azure DR 規劃
      - Azure Automation 教育訓練
      - Azure 安全中心啟用
      - Azure Monitor 實作
      - Azure IaaS 教育訓練