Unlocking the Cloud Operating Model: The Provisioning Strategy
1 like1,894 views
The document discusses HashiCorp's Terraform and its role in automating cloud infrastructure provisioning, security, and compliance across multi-cloud environments. It highlights the importance of digital transformation and infrastructure as code in enhancing application delivery and managing operational consistency, while also emphasizing the need for policies to prevent security breaches and regulatory non-compliance. Terraform is presented as a solution for organizations seeking to standardize workflows, improve productivity, and reduce cloud overspending.
Unlocking the Cloud Operating Model: The Provisioning Strategy
- 1. Unlocking the Cloud Operating Model for Provisioning
- 2. © 2019 HashiCorp 2whoami Meghan Liese Terraform Product Marketing at HashiCorp she/her MeghanLiese linkedin.com/in/meghanliese/
- 3. © 2018 HashiCorp Agenda ❏ About HashiCorp ❏ Decompose the Cloud Operating Model ❏ Introduce Terraform ❏ Discuss Use Cases ❏ Q&A 3
- 4. About HashiCorp Leading Cloud Infrastructure Automation Founded 2012 Employees 700 Funding 174M Our software stack enables the provisioning, securing, connecting and running of apps and the infrastructure to support them. We unlock the cloud operating model for every business and enable their digital transformation strategies to succeed.
- 5. Digital experiences are now the primary interface between a customer and a business, or business and business. Experiences are typically device- and cloud-first: rich, personal interface, with large scale data processing and intelligence. Cloud adoption is a secular trend This pattern demands a change in the model for software delivery to meet delivery goals, and transformation objectives. Digital transformation means pressure on application delivery
- 6. Accelerating Application Delivery Facets of delivering applications in a multi cloud world Volume and distribution of services Ephemerality and immutability Multiple target environments ? App App
- 7. The effects of digital transformation
- 8. Reimagining the stack The implications of the Cloud Operating Model Run Development Dedicated Infrastructure Scheduled across the fleet Connect Networking Host-based Static IP Service-based Dynamic IP Secure Security High trust IP-based Low trust Identity-based Provision Operations Dedicated servers Homogeneous Capacity on-demand Heterogeneous STATIC DYNAMIC
- 9. The Cloud Landscape In search of a common model across multi-cloud environments Run Development Connect Networking Secure Security Provision Operations DEDICATED PRIVATE CLOUD vSphere Hardware IP: Hardware vCenter vSphere Various Hardware Identity: AD/LDAP Terraform EKS / ECS Lambda CloudMap/ AppMesh Identity: AWS IAM Cloud Formation AKS / ACS Azure Functions Proprietary Identity: Azure AD Resource Manager GKE Cloud Functions Proprietary Identity: GCP IAM Cloud Deployment Manager AWS AZURE GCP
- 10. Terraform Provides the foundation for cloud infrastructure automation using infrastructure as code for provisioning and compliance in the cloud operating model Multi-Cloud Compliance & Management to provision and manage any infrastructure with one workflow Self-Service infrastructure for users to easily provision infrastructure on-demand with a library of approved infrastructure modules 300+ Customers 100K+ Weekly D/Ls 200 Providers Trusted by:
- 11. © 2019 HashiCorpTERRAFORM PRINCIPLE 11 Guiding Principle: Infrastructure as Code ● Using version control and automation to reduce human error and failed builds ● Terraform infrastructure as code and policy as code to automate everything ● Open source providers allow rapid creation and support for any infrastructure
- 12. Security Posture Regulatory Compliance Operational Consistency When operations is no longer the gatekeeper to infrastructure, how is your ...
- 13. © 2019 HashiCorp 13 IMPACT | Well known Consulting, TeleCommunications, and Government organizations have data breaches due to publicly exposed AWS servers (Cybersecurity Insiders) Security: Enforce policies that prevent breaches TERRAFORM USE CASE - Restrict app versions with vulnerabilities - Restrict resources with a public IP address - Prevent security groups with egress 0.0.0.0 - Restrict use to only approved modules
- 14. © 2019 HashiCorp 14 IMPACT | Non-Compliance with GDPR can incur up to €20 million, or 4% of the worldwide annual revenue. GDPR EU Compliance: Enforce policies for regulatory compliance TERRAFORM USE CASE - Comply with GDPR - Comply with FedRamp regulations - Comply with HIPAA regulations - Comply with PCI regulations
- 15. © 2019 HashiCorp 15 IMPACT | Cloud overspending is estimated at 30-40% for idle, orphaned, and over-sized resources. (CIO.com) Estimated $62 Billion Overspend in Cloud Infrastructure? (CEO World) Operational Consistency: Enforce policies for operational best practices TERRAFORM USE CASE - Enable mandatory tags - Restrict premium instance type - Restrict provisioning on weekends - Ensure use of ttl variable - Restrict infrastructure cost over $2,000
- 16. © 2019 HashiCorp 16 ● Reduce risk with a central point for compliance & management. ● Reduce costs by eliminating overspending on idle, orphaned, and over-sized resources. ● Increase productivity with a single workflow with 200+ unique infrastructure providers. Use Case: Multi-Cloud Compliance and Management TERRAFORM USE CASE
- 17. Standardize Adoption Manage Shadow IT How is the rest of the organization going to get onboard? How will you ... Enable Developers
- 18. © 2019 HashiCorp 18 Adoption: Standardize infrastructure as code to underpin all workflows TERRAFORM USE CASE - CLI workflows using VCS providers - DevOps workflows using CI/CD providers - ITSM workflows using Cloud Management providers
- 19. © 2019 HashiCorp 19 IMPACT | By 2020, one-third of all successful attacks on businesses will be against their shadow IT resources. (Gartner’s Top 10 Security Predictions) Shadow IT: Bring Shadow IT into the light TERRAFORM USE CASE - Single infrastructure source of truth - Policy Enforcement - Auditability and Tracking
- 20. © 2019 HashiCorp 20 Enable Developers: Integrated workflows to support agility TERRAFORM USE CASE - Infrastructure ownership and access controls - Policies for security, compliance, operations - CLI, DevOps, and GUI-based workflows
- 21. © 2019 HashiCorpTERRAFORM USE CASE 21 Use Case: Self-Service Infrastructure ● Increase productivity using a library of infrastructure modules for technical and non-technical end-users. ● Reduce risk with Sentinel policies automatically enforced against every request.
- 22. © 2019 HashiCorpTERRAFORM ECOSYSTEM Single Control Plane for cloud provisioning ● Automate, control, and provision infrastructure and applications through one workflow ● Unified support across heterogeneous environments ● Integrate with providers and technologies you’re already using 22
- 23. © 2019 HashiCorpTERRAFORM ECOSYSTEM Broad Ecosystem OSS and Enterprise Integrations 23
- 24. © 2019 HashiCorp Self-Service InfrastructureORGANIZATIONAL COMPLEXITY TERRAFORM ADOPTION JOURNEY Terraform Adoption Enterprise products build on the guiding principle to address organizational complexity and requirements. Adoption Open Source Enterprise Advanced Scale Strategic 24 Secrets, identity, and policy management Multi-Cloud Compliance and Management Secrets, identity, and policy managementInfrastructure as Code for Cloud Migration
- 25. © 2019 HashiCorpTERRAFORM PACKAGE Terraform Packages Products build on open source to address organizational challenges and complexity. ORGANIZATIONAL COMPLEXITY PROVISIONING Terraform Cloud Free SMBS ENTERPRISES 25 COLLABORATION PROVISIONING INDIVIDUAL Terraform Cloud Paid Feature Sets TEAMS Open Source Free Terraform Enterprise Paid Feature Sets PROVISIONIN G POLICY & GOVERNANCE PROVISIONIN GCOLLABORATION PROVISIONING SELF-SERVICE PROVISIONIN G POLICY & GOVERNANCE COLLABORATION PROVISIONING SELF-SERVICE OPERATIONS SUPPORT SUPPORT
- 26. A Common Cloud Operating Model App App Run Provision Connect Secure Compliance&Governance
- 28. © 2019 HashiCorp Resources Unlocking the Cloud Operating Model https://www.hashicorp.com/cloud-operating-model Unlocking the Cloud Operating Model: Provisioning https://www.hashicorp.com/resources/unlocking-the-cloud-operating-model-provisioning Try it out with Terraform Cloud https://app.terraform.io/signup/account Terraform Curriculum https://learn.hashicorp.com/terraform Unlocking the Cloud Operating Model: Security https://www.hashicorp.com/resources/unlocking-the-cloud-operating-model-security Unlocking the Cloud Operating Model: Networking https://www.hashicorp.com/resources/unlocking-the-cloud-operating-model-networking 28
- 29. A Unified Provisioning Solution for Multi-Cloud