Partnering to set up and manage the cloud landing zone at scale

Their challenges

• An increasing number of digital Google Cloud applications, not able to scale to operate. Each of these applications being built without centralized sharing of best practices & processes.
• Manual creation and maintenance of cloud resources at a large scale for the various service lines in the company became cumbersome and time-consuming.
• Need for accountability driven policies and user action traceability to ensure security and cost control.

• Auditing was complex as the applications were scattered, without domain-specific grouping.
• Need for standard monitoring and alerting policies on various levels like infrastructure, application, network, and security to detect threats and vulnerabilities and mitigate them.
• Need for a highly-trained operations team that can provide 24*7 support and ensure service availability for mission-critical applications.

Our solutions

• Establish a partnership with one vendor for full end-to-end service delivery on GCP from applications development, and maintenance to cloud operations.
• Move from many scattered landing zones to one centrally professionally set-up and
  managed GCP landing zone where ‘security by design’ is the starting point.
• Simplify and automate infrastructure provisioning and ensure infrastructure consistency through Infrastructure as Code (IaC).

• Continuous Integration/Continuous Delivery (CI/CD) processes. Define and implement organization governance policies as part of the landing zone design.
• Proper design and implementation of network architecture.
• Implementation of mature monitoring tools that provide detailed insights and alerting on production security and performance.
• Migrate all the 100+ apps built on GCP, as well as Tableau and Dataiku, to the new landing zone to cover them under the security and operations policies.