{"id":42424,"date":"2024-01-11T16:52:05","date_gmt":"2024-01-11T15:52:05","guid":{"rendered":"https:\/\/www.skaylink.com\/?p=42424"},"modified":"2024-11-15T10:59:47","modified_gmt":"2024-11-15T09:59:47","slug":"pfa-azure-hybrid-cloud-infrastructure","status":"publish","type":"post","link":"https:\/\/www.skaylink.com\/en\/case-studies\/pfa-azure-hybrid-cloud-infrastructure\/","title":{"rendered":"PFA gets ready for the future with Azure hybrid cloud infrastructure"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Home<\/a><\/span><\/span><\/p>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t
\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Case studies<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t

PFA gets ready for the future with Azure hybrid cloud infrastructure<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Getting ready to move from an on-premises data center setup to public cloud in Azure is one of the cornerstones in PFA\u2019s 2020 IT strategy.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Challenge<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

PFA is aiming to move workloads to Microsoft Azure and have the ability to build new cloud-based solutions quickly and as securely as their existing on-premises installations. All this with a relentless focus on governance, risk and compliance matching their existing on-premises setup.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

The goal for PFA was to establish an Azure hybrid cloud architecture that was reliable, cost-effective, and enabled faster time-to-market for new solutions with full scalability and flexibility. In addition, a Cloud Center of Excellence (CCoE) function would be created to support the ongoing cloud journey and new cloud solution development and migrations.<\/p>

All relevant parts of the organization required involvement, including IT security, architecture, operations, development, legal, finance, etc. The CCoE is a central cloud governance function which will make cloud services available to the entire PFA organization in a controlled and secure way.<\/p>

The platform will support many development teams across all the different business areas. Finding the right balance between control and flexibility for the developer teams was a priority, given the detailed focus on governance, risk and compliance.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t

Solution<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Skaylink has operated an internal Cloud CoE for many years. Among other things, the CoE is responsible for managing Skaylink\u2019s acceleration platform CADD, a platform used by many customers both local and internationally. This experience and know-how was a key factor when PFA awarded Skaylink their Azure cloud project, including the creation of a PFA Cloud CoE. The project was a joint effort between PFA\u2019s architecture team and Skaylink experts.<\/p>

The implementation was based on Microsoft’s Cloud Adoption Framework (CAF) and the new extension \u201cEnterprise Scale Landing Zones\u201d. An architecture framework with design principles, guidelines, recommended policies, etc.<\/p>

Deliverables included the entire cloud adoption cycle: Plan, Ready, Adopt, Govern and Manage. The close relationship between Microsoft, PFA and Skaylink further enabled pre-release access to the latest expansions of CAF, ensuring PFA was on the forefront with the technology and applied international best practices. An important part of the delivery included tools and a framework which, with the help of governance, risk management and compliance, ensures that PFA complies with the relevant legal legislation governing the pension and insurance industry. This includes security-by-design, detailed cost management and defined use principles for all SaaS, FaaS, PaaS and IaaS components making up cloud solutions at PFA.<\/p>

As a validation of the new platform, Skaylink provides support for \u201cLighthouse\u201d projects to be developed and operated using the new cloud platform.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t

\n\t\t\t\t\"Finding a cloud partner with competencies ranging from infrastructure to DevOps development is not easy! Especially as cloud technology is a moving target.\"\t\t\t<\/p>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\tMorten Bruun Steiner, CIO, PFA<\/cite>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/blockquote>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Technologies Used<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Iterative development of an Enterprise Scale Cloud Platform:<\/p>

  • Standards and governance model<\/li>
  • Security and automation operations<\/li>
  • Pilot projects<\/li><\/ul>
    \u00a0<\/div>

    Cloud capabilities:<\/p>

    • Cloud\u00a0CoE\u00a0(Cloud Center of Excellence)<\/li>
    • IaaS\/PaaS infrastructure and components<\/li>
    • Security and risk mitigation<\/li>
    • 100% scripted\/automated provisioning of build\/deploy pipelines<\/li>
    • Operations setup and monitoring<\/li>
    • Operating and service model<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
      \n\t\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
      \n\t\t\t\t\t
      \n\t\t
      \n\t\t\t\t<\/div>\n\t\t
      \n\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t\t

      Result<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t\t\t\t\t\t

      In just 6 months and on time, the platform was delivered and ready to onboard the first large scale strategic cloud project – \u201cThe Modern Data Platform\u201d. We succeeded in building a very flexible platform, which provides freedom for the individual development teams rather than limiting them. All teams can write and implement the jnfrastructure-as-code needed to run specific workloads in Azure. Individual development teams no longer need to order servers and databases. Now they can provision what they need within minutes, just by clicking in Azure or with infrastructure-as-code from a DevOps pipeline.<\/p>

      Furthermore PFA development teams are now also able to create innovative solutions with Databricks, Azure Machine Learning and computing with GPUs. They have access to fully managed services, such as Azure Functions, which automatically and quickly scale down to 0 machines when not in use and potentially grows up to more than 100 machines during peak hours. Since the service is now managed, there is no longer a need for operations to handle security updates, upgrades or patching machines. All now starts with a fully automated process when ordering a so-called \u201cLanding Zone\u201d that will support the relevant workloads. Landing zones consist of an Azure subscription, some blueprints, a virtual network that is connected to a virtual WAN in Azure, which then again is connected on-premises via ExpressRoutes. To ensure compliance with all guidelines, several Azure policies are automatically implemented for each landing zone.<\/p>

      A large number of components have been developed for the solution, including: <\/strong><\/p>

      • Cloud Center of Excellence (CCoE) organization<\/li>
      • Guidelines and standards<\/li>
      • Development of landing zones<\/li>
      • Establishment of hybrid connection to existing Data Center via Microsoft’s Express Route<\/li>
      • IaaS and PaaS platform<\/li>
      • White-listing services<\/li>
      • Azure compute options (VMs, containers, app service, serverless)<\/li>
      • Infrastructure provisioning (VMs, containers, storage, networks, \u2026)<\/li>
      • Integration with on-premises data sources and external systems<\/li>
      • Templates and DevOps environments (i.e. Dev\/Test\/Prod)<\/li>
      • Service and operating model<\/li>
      • Cost management and resource\/cost consumption reporting<\/li>
      • Principles for minimizing supplier lock-in\/exit strategy<\/li>
      • Tenancy administration, resource\/network administration and user role administration<\/li>
      • Provisioning and ad-provisioning resources ad-hoc<\/li>
      • Scaling of Azure resources<\/li>
      • Monitoring and operational monitoring<\/li>
      • Full scripting\/infrastructure-as-code of components used<\/li>
      • Scripting of build\/deploy<\/li>
      • Security, identity, risks and measures and application of the already established AD<\/li><\/ul>

        \u00a0<\/p>

        The project also involved knowledge transfer and Azure training for the PFA team.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

        \n\t\t\t\t\t
        \n\t\t\t\t
        \n\t\t\t\t
        \n\t\t\t\t\t

        Case Stories<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
        \n\t\t\t\t
        \n\t\t\t\t\t\t\t
        \n\t\t\t\t
        \n\t\t