1. Accelerate Application Innovation in the Cloud PaaS, IaaS (VMs & Containers) & Stack
September, 2017

2. Introduction
Focus: Cloud, Cybersecurity, Compliance (GRC) & Cost
HQ in Redmond, Dev Center in Noida, India
“An organization cannot simply ‘jump’ to the Cloud. There need to be activities that are part of a phased evaluation and a plan to move to the Cloud.” – Gartner
Migrating from an on-premises IT environment to a Hybrid IT environment requires a logical set of steps:
Consume Infrastructure Data to create inventory of applications & workloads that are candidates for Azure:
PaaS (modernize)
IaaS (relocate & Right sizing)
Stack (Private cloud)
Cloud cost and ROI
Cyber Security Report
Static code analysis for apps and data
‘No Code Change’ Migrations to Containers, VMs and Azure App Services
Modernize apps for Azure PaaS
Control: Costs, Cybersecurity, and Compliance (GRC)
Configure baselines of enterprise standards, report on app compliance
CloudOrigin® Knowledgebase stays current as Azure evolves, apps are changed, & enterprise standards are updated
Knowledgebase of controls, costs, best practices, kept current with Azure releases

3. Solution Assessment for PaaS3
Solution Assessment for PaaS
Drive infrastructure data through the analytics to identify the highest potential custom applications that can be modernized to run in a PaaS environment. This provides a strategic view on where to focus high potential Azure migration efforts.

4. Solution Assessment – IaaS Migration4
Solution Assessment – IaaS Migration
Drive infrastructure data through the analytics in CloudRecon® to identify opportunities for VM rightsizing and consolidation to achieve maximum cost reductions by moving to Azure.

5. Cost Assessment – IaaS Migration – What If Analysis
Change Tier
Change Region
Change Instance Sizing

6. Cost Assessment – IaaS Migration – What If Analysis
Fully Customizable Cost Assumptions: Power, Labor, Hardware, Software, etc.

7. Cloud Cost Savings Estimates: Based on Actual Infrastructure and Usage

8. Assessment – IaaS Migration & Right Sizing8
Assessment – IaaS Migration & Right Sizing
Use CloudRecon® to identify candidate applications that can be migrated through a VM “lift & shift” strategy, or “right-sized”, for a more efficient utilization of Azure resources.
On-Premise Environment 11,960 VMs & 485 Apps. Top 20 listed below:

9. Static Code Analysis of App and Data
Migration
Static Code Analysis of App and Data
‘No Code Change’ Migration
Containers
VMs
Azure App Services
Modernization to PaaS

10. Migrate in Minutes not Months
“No Code Change” migrations enable you to move your applications and data to Azure without changing a line of code
Options include Migration to:
Azure VMs
Azure Container Services which supports all Azure Orchestration Services (e.g. DC/OS, Swarm, and Kubernetes)
Azure Container Instances
Windows and Linux containers
Select any of the database migration options. Migrate databases to SQL Azure or SQL Server VMs. Real time data replication uses Azure SQL Migration services
After successful deployment to Azure Container Services (Kubernetes), user will receive the deployment URL

11. Assessment – PaaS Migration Recommendation11
Assessment – PaaS Migration Recommendation
Target applications for modernization and PaaS migration using CloudPilot® to provide detailed remediation estimates, guide development scrums, and provide a test bed to ensure Cloud security and regulatory control requirements are met.
“I absolutely love the reports. It has time estimates, links for further information, and recommendations. This would save very much time in estimates and build effort. The recommendations include step by step instructions in some cases, which is extremely valuable.”
KB, Software Engineer, F50 IT Dept

12. CloudPilot & Application PaaS Migration – Case Study
Discover and Assess
Target, Modernize & Migrate
Monitor, Support & Report
CloudPilot & Application PaaS Migration – Case Study
Modernization for Azure Case Study: F50 Company
438,606 Lines of Code & SQL Scripts
Estimate: 3 developer-days to scan 10,000 lines of code
6+ man-months to manually scan for changes to modernize to PaaS
CloudPilot scanned in 8:37 minutes for all changes to modernize to PaaS
Identified 129 Mandatory code changes required to run in Azure PaaS
Identify line(s) of code to change
Provide sample code
Links to authoritative guidance
Compliance status

13. CloudPilot : Application PaaS (Re-Architecture) Migration13
CloudPilot : Application PaaS (Re-Architecture) Migration
Using CloudPilot® to provide detailed guidance, estimates, and recommendations to Project Managers and Developers

14. Selecting Compliance /Regulatory Requirements
User can select which GRC compliance certificates are required for this application. This ensures that Azure services are compliant with the required framework can be used. There are 50+ compliance certifications that Azure has received.

15. Azure Compliance Report
Compliance Report provides developer with information on the compliance status of the Azure services which will be used as part of modernizaiton to PaaS. In the example below, Schduler is compliant with all the selected compliance frameworks, but Cloud Services appear not to be compliant with PCI. Before beginning to make code changes, the user can determine if they should use another service, or request an exception.

16. Configuration Management

17. Azure Application Resource Optimization- Cost17
Azure Application Resource Optimization- Cost
Moving applications to Azure is not once and done. Resources that support modernized applications need to be managed from two perspectives: Cost and Security; & Compliance. Through the analytics in CloudSupervisor®, applications targeted in CloudRecon® and migrated using CloudPilot® can be optimized to stay within the budget allocated.

18. Master Dashboard for configuration management – Cybersecurity & Regulatory Compliance (GDPR, etc.)

19. 19
Azure Application – Security & GRC Azure Security Center + Dev Ops kit+ AAD+ Azure OMS
CloudSupervisor® keeps application owners alerted to how their applications remain in compliance with the security baselines and internal controls configured for applications running on Azure. Baseline configuration based on GRC such as GDPR, PCI, Confidential, etc. and compare to Baselines with alerts & detailed reporting.
Single Pane of Glass
Personalized Dashboard: Security, Cost & Compliance
Coverage for all PaaS and IaaS resources.
Daily refresh
Dashboards available on Organization level

20. Continuous Compliance with Standards
CloudSupervisor® keeps application owners alerted to how their applications remain in compliance with the security baselines and internal controls configured in CloudOrigin for applications running on Azure. Individual dashboards as well as management dashboards (up to CVP) can be created and monitored.

21. Security Hygiene
CloudSupervisor® allows alerts to be customized for any of the Azure services configuration setting to report on how applications remain in compliance with the security baselines and internal controls configured in CloudOrigin. Individual dashboards as well as management dashboards (up to CVP) can be created and monitored.

22. Security Hygiene
CloudSupervisor® allows alerts to be customized for any of the Azure services configuration setting to report on how applications remain in compliance with the security baselines and internal controls configured in CloudOrigin. Individual dashboards as well as management dashboards (up to CVP) can be created and monitored.

23. Summary
Focus: Cloud, Cybersecurity, Compliance (GRC) & Cost
HQ in Redmond, Dev Center in Noida, India
“An organization cannot simply ‘jump’ to the Cloud. There need to be activities that are part of a phased evaluation and a plan to move to the Cloud.” – Gartner
Consume Infrastructure Data to create inventory of applications & workloads that are candidates for Azure:
PaaS (modernize)
IaaS (relocate & Right sizing)
Stack (Private cloud)
Cloud cost and ROI
Cyber Security Report
Static code analysis for apps and data
‘No Code Change’ Migrations to Containers, VMs and Azure App Services
Modernize apps for Azure PaaS
Control: Costs, Cybersecurity, and Compliance (GRC)
Configure baselines of enterprise standards, report on app compliance
CloudOrigin® Knowledgebase stays current as Azure evolves, apps are changed, & enterprise standards are updated
Knowledgebase of controls, costs, best practices, kept current with Azure releases

24. Thank You