Final considerations
Last updated
Last updated
Now that you have the knowledge about the importance of adopting Governance and what tools Azure makes available for you to implement, how about starting to put it into practice?
Having a board containing all the information related to governance from the details of how it works to the details on how to implement it could be useful? Also, if you could share this board with your entire team to discuss each point, delegate activities, create iterations and track the progress of each task, would it be interesting?
So come on. Visit this link and find out how to use Azure DevOps Generator to get it all for free and start implementing Azure Governance in your organization.
What do you think about a have a graphical representation of your Governance implementation? Let me present you with one of my favorite tools: AzGovViz.
The AzGovViz (Azure governance visualizer) is a PowerShell script that iterates through an Azure tenant's management group hierarchy down to the subscription level. It captures data from the most relevant Azure governance capabilities such as Azure Policy, Azure role-based access control (Azure RBAC), and Azure Blueprints. From the collected data, the visualizer shows your hierarchy map, creates a tenant summary, and builds granular scope insights about your management groups and subscriptions.
We have a Landing Zone Workbook you can deploy to your environment to validate the usage of all Azure CAF best practices. Is available here and is highly recommended to use.
The aim of this workbook is to visualise core components of an Azure Landing Zone with the focus on the core components. This workbook currently visualises the following checks:
Governance
Subscription health
Tag use
Policy Assignments
Resource Locks use
Azure Security Center/Defender status + Secure Score
Azure Monitor components + Log Analytics workspaces
Identity and RBAC
Azure Advisor findings around Identity and Access
Networking
Subnets without NSGs
Virtual Network Gateways
Compute
Virtual Machines wih public IP addresses directly assigned
Virtual Machines with unmanaged disks
Storage
Storage accounts with Secure Transfer Only disabled
PSRule for Azure is a pre-built set of tests and documentation to help you configure Azure solutions. These tests allow you to check your Infrastructure as Code (IaC) before or after deployment to Azure. PSRule for Azure includes tests that check how IaC is written and how Azure resources are configured. See more at https://azure.github.io/PSRule.Rules.Azure/
Feel free to reach out to me and share any feedback you may have!
👋 Ricardo Martins
