Our organization is using a mix of AWS and Azure, but we are struggling with inconsistent security policies and runaway costs across different departments. It feels like every team is spinning up their own instances without following a central framework. How do you handle cloud cost optimization and identity management when resources are spread across multiple providers without slowing down the development teams?
3 answers
Managing a multi-cloud environment requires a robust Cloud Management Platform (CMP) or at least a very strong FinOps culture. We implemented a centralized tagging policy across both AWS and Azure, which allowed us to track every cent back to specific projects. For identity, you should look into a federated Identity Provider (IdP) so that your engineers have a single login across all platforms. This not only improves security but also makes offboarding much easier. Automation through Infrastructure as Code (IaC) like Terraform is also essential to ensure environments are consistent.
Thank you for the detailed explanation. This answer helped me understand the concept clearly.
Have you considered a 'Cloud Center of Excellence' (CCoE) to set these standards, or are you trying to manage this solely through automated tooling?
Brian, we’ve talked about a CCoE, but there’s a lot of internal pushback from devs who feel it will just be another layer of red tape. We want to empower them to move fast but with 'guardrails' instead of 'gates.' The goal is to have automated policies that flag non-compliant resources in real-time rather than having a committee that has to approve every single architectural change.
Focus on visibility first. You can't govern what you can't see. Use native tools like Azure Cost Management and AWS Cost Explorer to get a unified view.
Thomas is spot on. Visibility is the foundation. Once you have the data, you can start implementing 'Policy as Code' to automatically shut down non-compliant or idle resources, which is where the real cost savings and security improvements happen in a multi-cloud setup.
Thank you for the detailed explanation. This answer helped me understand the concept clearly.