Improve visibility and cost in Microsoft Azure
ImprovevisibilityandcostinMicrosoftAzure
Stephane Lapointe
@s_lapointe
Microsoft Azure MVP
Cloud Solutions Architect
ImprovevisibilityandcostinMicrosoftAzure
Agenda • Typical cloud journey
• What is Governance?
• Our journey to the cloud
• Visibility
• Cost
• Lessons learned
ImprovevisibilityandcostinMicrosoftAzure
ImprovevisibilityandcostinMicrosoftAzure
Traditional Approach to Control
Block Dev/Ops from directly accessing the cloud (portal/api/cli) to attain control
Developers
Operations
Cloud Engineers responsible
for Cloud environment
ImprovevisibilityandcostinMicrosoftAzure
Modern Approach to Control
Cloud-native governance -> removing barriers to compliance and enabling velocity
Cloud Engineers
Developers
Operations
Management
Groups
Templates RBAC
Blueprints
Policies
Policy
Cost
Management
ImprovevisibilityandcostinMicrosoftAzure
Things tend to get messy
ImprovevisibilityandcostinMicrosoftAzure
Governance = Guardrails
ImprovevisibilityandcostinMicrosoftAzure
Management groups
Azure policy
Blueprints
Resource Graph
Cost Management
ImprovevisibilityandcostinMicrosoftAzure
Our cloud journey
ImprovevisibilityandcostinMicrosoftAzure
Our journey to the
cloud
–
• 2013-14 - Clients dev/staging env
• 2015 - Clients prod env
• 2016 - Cloud first
1 2 3 4 5 6 7
$ CAD/month
from 60$ to 34K$
ImprovevisibilityandcostinMicrosoftAzure
It grew organically,
fast
• Unable to explain some
increases
• Is it still in use?
• Who owns what?
ImprovevisibilityandcostinMicrosoftAzure
Visibility
ImprovevisibilityandcostinMicrosoftAzure
What we did/tried
• Ownership mapping
• Deprecated resources
inventory
• New subscription model
ImprovevisibilityandcostinMicrosoftAzure
What we did/tried
• Tags
• Naming convention
• Lot of cost management tools
• Azure Policy
• Azure Resource Graph
ImprovevisibilityandcostinMicrosoftAzure
Our subscription
model
• 2 subs per projects/products
• Regular offer for production
• Enterprise Dev/Test offer for
non-production
Using PAYG ?
Pay-As-You-Go Dev/Test
offer
ImprovevisibilityandcostinMicrosoftAzure
Tags
Tagging policy is essential in a
good governance plan, ours is:
• Mandatory tags
• Required at resource group
• Forced inheritance on child
resources
ImprovevisibilityandcostinMicrosoftAzure
provide efficient and performant
resource exploration
ability to query at scale across a given set of subscriptio
ns
ImprovevisibilityandcostinMicrosoftAzure
Features
• Blazing fast
• Visibility across your cloud resources
• Powerful querying to gain deeper insights
• Rich aggregation and parsing of granular properties
• Tracking of changes made to resource properties
(preview)
• Support Azure Delegated Resource Management
(Azure Lighthouse)
AzureResour
ce Graph
ImprovevisibilityandcostinMicrosoftAzure
ImprovevisibilityandcostinMicrosoftAzure
ImprovevisibilityandcostinMicrosoftAzure
Cost
ImprovevisibilityandcostinMicrosoftAzure
Tools we used
• All the free ones!
• Azure Consumption
Insights in Power BI
• ShareGate Overcast
• Azure Cost
Management
ImprovevisibilityandcostinMicrosoftAzure
Bad reasons for
increases
• Oversized resources
• Misconfiguration
• Forgotten resources
• Human error
ImprovevisibilityandcostinMicrosoftAzure
Good reasons for
increases
• Migration to the cloud
• Increased customer
demand
• New projet / product
ImprovevisibilityandcostinMicrosoftAzure
What to pay special
attention to
• Slow, constant increases
• Spikes
• Too many regions
ImprovevisibilityandcostinMicrosoftAzure
Problems detected
because of cost
Software bugs
• Storage bandwidth
• Automated scaling
ImprovevisibilityandcostinMicrosoftAzure
Problems detected
because of cost
Architecture
problems
• Big scale-up
• Multiple scale-up
ImprovevisibilityandcostinMicrosoftAzure
Problems detected
because of cost
Misconfiguration
• Database pools
• Premium disk snapshots
• Application Insights without
cap / sampling
ImprovevisibilityandcostinMicrosoftAzure
What we learned
• Assign resources/cost
verifications responsibilities
• Perform regular cost trends
verification
• Free software plumbing has
a cost
ImprovevisibilityandcostinMicrosoftAzure
What we learned
• Document standards &
guidelines
• Increase employee knowledge
• Tagging is essential
• Prioritize tagging over naming
convention
ImprovevisibilityandcostinMicrosoftAzure
Resources
• Getting started with Azure
Resource Graph webinar
• Inherit a tag from the
resource group policy
• Azure Governance
documentation
• Azure Resource Graph
portal dashboard samples
ImprovevisibilityandcostinMicrosoftAzure
Stephane
Lapointe
Microsoft Azure MVP
Cloud Solutions Architect
Questions?
Don’t hesitate to reach out

Improve cloud visibility and cost in Microsoft Azure