checklist after getting azure subscription for setup production environment

Richa Kumari 286 Reputation points
2023-09-15T05:49:01.5233333+00:00

Hello,

I want to setup a new environment that I will use as production. What is the basic checklist I need to do after getting an Azure subscription? like branding, ,architecture ,monitoring, ,security points of view or other related things ..

Thanks
Richa

Azure Blueprints
Azure Blueprints
An Azure service that provides templates for quick, repeatable creation of fully governed cloud subscriptions.
70 questions
Azure Migrate
Azure Migrate
A central hub of Azure cloud migration services and tools to discover, assess, and migrate workloads to the cloud.
718 questions
Azure Advisor
Azure Advisor
An Azure personalized recommendation engine that helps users follow best practices to optimize Azure deployments.
45 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,587 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. tbgangav-MSFT 10,386 Reputation points
    2023-09-15T16:03:21.8333333+00:00

    Hi @Richa Kumari ,

    After getting an Azure subscription, there are several steps you should take to set up a new environment for production use. Here is a basic checklist to follow:

    1. Choose the Azure environment and region for your deployment.
    2. Determine how many resources and what kind of resources you need for scale and redundancy.
    3. Assign an Azure subscription owner role for when you create the CMG (Cloud Management Gateway) in Azure.
    4. Review the internet access requirements to make sure each required service can be reached.
    5. Establish a cross-functional DevOps platform team to build, manage, and maintain your workload.
    6. Involve the security team in the planning and design of the DevOps process to integrate preventive and detective controls for security risks.
    7. Clearly define CI/CD (Continuous Integration / Continuous Delivery) roles and permissions and minimize the number of people who have access to secure information or resources.
    8. Configure quality gate approvals in DevOps release process.
    9. Integrate scanning tools within CI/CD pipeline.
    10. No infrastructure changes, provisioning or configuring, should be done manually outside of IaC (Infrastructure as Code).

    In addition to these steps, you should also consider branding, architecture, and monitoring from a security point of view.

    Just FYI, this response is partially based on Q&A AI Assist and posted after manually validating the accuracy of the response and making necessary changes as appropriate.

    0 comments No comments