Posts

Showing posts from October, 2025

Adopt FinOps on Azure

Image
  Introduction FinOps Domains represent spheres of activity or knowledge. Every organisation adopting FinOps engages in activities across all FinOps domains. Each FinOps domain comprises FinOps capabilities, which outline functional activities that can be performed within that domain. In the image here, you can see how domains and capabilities are grouped: Understand cloud usage and cost Understanding cloud usage and costs are important for effective cloud management and optimisation. Gaining this understanding allows organisations to gain insight into how resources are being utilised, identify trends, and make informed decisions to optimise performance and cost efficiency. Data ingestion, allocation, reporting and analysis, and anomaly management play crucial roles in achieving this objective.  Data ingestion Objective: Collect, transfer, and normalise data from various sources for analysis, with a focus on understanding the usage and costs associated with an organisation's ...

Iterating an Enterprise Azure Landing Zone for Continuous Improvement

Image
An Azure Landing Zone is your foundation for cloud adoption -- covering identity, networking, security, governance, and management. Once the initial version is deployed, the key is treating it as a living system that evolves as your organisation's needs, regulations, and Azure capabilities change.  Here's how you can continuously improve it: 1. Establish a Governance & Feedback Loop Why : Prevents drift and ensures the landing zone aligns with business, security, and compliance needs. How : Set up a  Cloud Governance Board  with IT, security, and business stakeholders. Review usage data, policy compliance, and security posture monthly/quarterly. Gather feedback from application teams to identify friction points. 2. Adopt Infrastructure-as-Code (IaC) for Iteration Why : Enables version control, repeatability, and safe experimentation. How : Use  Bicep, Terraform  to define landing zone components. Keep IaC in GitHub/Azure DevOps with pull request reviews. Aut...