Accelerate Application Innovation in the Cloud PaaS, IaaS (VMs & Containers) & Stack September, 2017

Introduction Focus: Cloud, Cybersecurity, Compliance (GRC) & Cost HQ in Redmond, Dev Center in Noida, India “An organization cannot simply ‘jump’ to the Cloud. There need to be activities that are part of a phased evaluation and a plan to move to the Cloud.” – Gartner Migrating from an on-premises IT environment to a Hybrid IT environment requires a logical set of steps: Consume Infrastructure Data to create inventory of applications & workloads that are candidates for Azure: PaaS (modernize) IaaS (relocate & Right sizing) Stack (Private cloud) Cloud cost and ROI Cyber Security Report Static code analysis for apps and data ‘No Code Change’ Migrations to Containers, VMs and Azure App Services Modernize apps for Azure PaaS Control: Costs, Cybersecurity, and Compliance (GRC) Configure baselines of enterprise standards, report on app compliance CloudOrigin® Knowledgebase stays current as Azure evolves, apps are changed, & enterprise standards are updated Knowledgebase of controls, costs, best practices, kept current with Azure releases

Solution Assessment for PaaS 3 Solution Assessment for PaaS Drive infrastructure data through the analytics to identify the highest potential custom applications that can be modernized to run in a PaaS environment. This provides a strategic view on where to focus high potential Azure migration efforts.

Solution Assessment – IaaS Migration 4 Solution Assessment – IaaS Migration Drive infrastructure data through the analytics in CloudRecon® to identify opportunities for VM rightsizing and consolidation to achieve maximum cost reductions by moving to Azure.

Cost Assessment – IaaS Migration – What If Analysis Change Tier Change Region Change Instance Sizing

Cost Assessment – IaaS Migration – What If Analysis Fully Customizable Cost Assumptions: Power, Labor, Hardware, Software, etc.

Cloud Cost Savings Estimates: Based on Actual Infrastructure and Usage

Assessment – IaaS Migration & Right Sizing 8 Assessment – IaaS Migration & Right Sizing Use CloudRecon® to identify candidate applications that can be migrated through a VM “lift & shift” strategy, or “right-sized”, for a more efficient utilization of Azure resources. On-Premise Environment 11,960 VMs & 485 Apps. Top 20 listed below:

Static Code Analysis of App and Data Migration Static Code Analysis of App and Data ‘No Code Change’ Migration Containers VMs Azure App Services Modernization to PaaS

Migrate in Minutes not Months “No Code Change” migrations enable you to move your applications and data to Azure without changing a line of code Options include Migration to: Azure VMs Azure Container Services which supports all Azure Orchestration Services (e.g. DC/OS, Swarm, and Kubernetes) Azure Container Instances Windows and Linux containers Select any of the database migration options. Migrate databases to SQL Azure or SQL Server VMs. Real time data replication uses Azure SQL Migration services After successful deployment to Azure Container Services (Kubernetes), user will receive the deployment URL

Assessment – PaaS Migration Recommendation 11 Assessment – PaaS Migration Recommendation Target applications for modernization and PaaS migration using CloudPilot® to provide detailed remediation estimates, guide development scrums, and provide a test bed to ensure Cloud security and regulatory control requirements are met. “I absolutely love the reports. It has time estimates, links for further information, and recommendations. This would save very much time in estimates and build effort. The recommendations include step by step instructions in some cases, which is extremely valuable.” KB, Software Engineer, F50 IT Dept

CloudPilot & Application PaaS Migration – Case Study Discover and Assess Target, Modernize & Migrate Monitor, Support & Report CloudPilot & Application PaaS Migration – Case Study Modernization for Azure Case Study: F50 Company 438,606 Lines of Code & SQL Scripts Estimate: 3 developer-days to scan 10,000 lines of code 6+ man-months to manually scan for changes to modernize to PaaS CloudPilot scanned in 8:37 minutes for all changes to modernize to PaaS Identified 129 Mandatory code changes required to run in Azure PaaS Identify line(s) of code to change Provide sample code Links to authoritative guidance Compliance status

CloudPilot : Application PaaS (Re-Architecture) Migration 13 CloudPilot : Application PaaS (Re-Architecture) Migration Using CloudPilot® to provide detailed guidance, estimates, and recommendations to Project Managers and Developers

Selecting Compliance /Regulatory Requirements User can select which GRC compliance certificates are required for this application. This ensures that Azure services are compliant with the required framework can be used. There are 50+ compliance certifications that Azure has received.

Azure Compliance Report Compliance Report provides developer with information on the compliance status of the Azure services which will be used as part of modernizaiton to PaaS. In the example below, Schduler is compliant with all the selected compliance frameworks, but Cloud Services appear not to be compliant with PCI. Before beginning to make code changes, the user can determine if they should use another service, or request an exception.

Configuration Management

Azure Application Resource Optimization- Cost 17 Azure Application Resource Optimization- Cost Moving applications to Azure is not once and done. Resources that support modernized applications need to be managed from two perspectives: Cost and Security; & Compliance. Through the analytics in CloudSupervisor®, applications targeted in CloudRecon® and migrated using CloudPilot® can be optimized to stay within the budget allocated.

Master Dashboard for configuration management – Cybersecurity & Regulatory Compliance (GDPR, etc.)

19 Azure Application – Security & GRC Azure Security Center + Dev Ops kit+ AAD+ Azure OMS CloudSupervisor® keeps application owners alerted to how their applications remain in compliance with the security baselines and internal controls configured for applications running on Azure. Baseline configuration based on GRC such as GDPR, PCI, Confidential, etc. and compare to Baselines with alerts & detailed reporting. Single Pane of Glass Personalized Dashboard: Security, Cost & Compliance Coverage for all PaaS and IaaS resources. Daily refresh Dashboards available on Organization level

Continuous Compliance with Standards CloudSupervisor® keeps application owners alerted to how their applications remain in compliance with the security baselines and internal controls configured in CloudOrigin for applications running on Azure. Individual dashboards as well as management dashboards (up to CVP) can be created and monitored.

Security Hygiene CloudSupervisor® allows alerts to be customized for any of the Azure services configuration setting to report on how applications remain in compliance with the security baselines and internal controls configured in CloudOrigin. Individual dashboards as well as management dashboards (up to CVP) can be created and monitored.

Security Hygiene CloudSupervisor® allows alerts to be customized for any of the Azure services configuration setting to report on how applications remain in compliance with the security baselines and internal controls configured in CloudOrigin. Individual dashboards as well as management dashboards (up to CVP) can be created and monitored.

Summary Focus: Cloud, Cybersecurity, Compliance (GRC) & Cost HQ in Redmond, Dev Center in Noida, India “An organization cannot simply ‘jump’ to the Cloud. There need to be activities that are part of a phased evaluation and a plan to move to the Cloud.” – Gartner Consume Infrastructure Data to create inventory of applications & workloads that are candidates for Azure: PaaS (modernize) IaaS (relocate & Right sizing) Stack (Private cloud) Cloud cost and ROI Cyber Security Report Static code analysis for apps and data ‘No Code Change’ Migrations to Containers, VMs and Azure App Services Modernize apps for Azure PaaS Control: Costs, Cybersecurity, and Compliance (GRC) Configure baselines of enterprise standards, report on app compliance CloudOrigin® Knowledgebase stays current as Azure evolves, apps are changed, & enterprise standards are updated Knowledgebase of controls, costs, best practices, kept current with Azure releases

Thank You