https://cloudfoundation.org/assets/guided-cloud-onboarding.html.34aa3ba9.js

1import{_ as d,e as a,o as c,c as u,k as e,l as n,w as o,F as h,h as t,j as m}from"./app.80a6da87.js";const p={},g=e("p",null,"Guided Cloud Onboarding is about helping application teams move to the cloud as smoothly as possible by reducing cognitive load and reducing the number of steps to a minimum.",-1),_=t("A cloud onboarding can be as simple as signing into "),f=t("Self-Service Multi-Cloud Tenant Database"),b=t(", choosing between Landing Zones, agreeing to the Shared Responsibility Model and provisioning your first tenant within minutes. Application teams in regulated industries, such as Finance and Healthcare, must often meet a long list of regulatory requirements before accessing the cloud. This can include activities such as getting approvals from other departments or creating entries in CMDB or IAM systems. Regardless of the complexity, a guided cloud onboarding ensures that customers have an overview over where they are in their cloud onboarding journey and what comes next."),y=m('<h2 id="best-practices" tabindex="-1"><a class="header-anchor" href="#best-practices" aria-hidden="true">#</a> Best Practices</h2><h3 id="start-simple" tabindex="-1"><a class="header-anchor" href="#start-simple" aria-hidden="true">#</a> Start Simple</h3><p>While you can build a lot to make onboarding even smoother for your customers, we recommend to start simple.</p><p>Start a wiki area for your team. Write a guide \u201CHow to access the cloud at <em>company</em>\u201D and advertise this wiki page with your customer. This has multiple benefits:</p><ol><li><p>Application teams are made aware that there is a standard process for cloud onboarding.</p></li><li><p>Having all steps laid out makes the process transparent for the customer, leading to less friction then back-and-forth-emailing.</p></li></ol><h3 id="help-applications-teams-to-pick-the-right-landing-zone" tabindex="-1"><a class="header-anchor" href="#help-applications-teams-to-pick-the-right-landing-zone" aria-hidden="true">#</a> Help Applications Teams to Pick the Right Landing Zone</h3><p>Cloud Foundation teams should provide material to guide their customers to the right Landing Zone. Common implementations are a decision tree diagram on a Wiki page or an interactive assessment.</p>',7),w=e("h3",{id:"lay-out-multiple-cloud-onboarding-paths",tabindex:"-1"},[e("a",{class:"header-anchor",href:"#lay-out-multiple-cloud-onboarding-paths","aria-hidden":"true"},"#"),t(" Lay out Multiple Cloud Onboarding Paths")],-1),v=e("p",null,"If regulatory requirements for some Landing Zones are much higher than for other Landing Zones, Cloud Foundation customers can benefit from multiple cloud onboarding paths. Multiple onboarding paths may shorten time-to-cloud for a majority of use cases compared to one-size-fits-all onboardings.",-1),k=e("p",null,[e("strong",null,"Example with two onboarding paths:"),t(" Compare two different teams at the imaginary likvid bank.")],-1),C=t("The newly founded application team \u201CMobile Notification Backend\u201D needs a cloud tenant to run their application in production. The Notification Backend system needs an "),x=t("On-Premise Network Connection"),T=t(" on layer 3. This access must be registered and approved by the Compliance department. The approval may take up to 5 business days. The application\u2019s tenant will be in the \u201CConnected\u201D Landing Zone."),L=t("In contrast, the application team \u201CRobo-Advisor Website Analytics\u201D wanted to explore the Analytics options of GCP in a "),z=t("Playground / Sandbox Environments"),M=t(". It did not need on-prem connectivity. Therefore their cloud onboarding did not include the step for registering on-prem connectivity. No manual sign-off was needed and "),q=t("Tenant Provisioning"),P=t(" happened within minutes. The tenant is in the \u201CIsland\u201D Landing Zone."),A=e("h2",{id:"how-design-a-guided-cloud-onboarding-with-multiple-onboarding-paths",tabindex:"-1"},[e("a",{class:"header-anchor",href:"#how-design-a-guided-cloud-onboarding-with-multiple-onboarding-paths","aria-hidden":"true"},"#"),t(" How Design a Guided Cloud Onboarding with Multiple Onboarding Paths")],-1),R=e("p",null,"The idea is to find a small set of use-case requirements that allow to build a decision tree for a guided cloud onboarding.",-1),O=e("strong",null,"\u{1F4A1}",-1),S=t(" Clustering use-cases by requirements is an exercise that demands a good knowledge use-cases as well as regulatory requirements that affect those use-cases. This may enable you to also offer a "),B=t("Quickstart Guide "),I=t(" for certain use cases that offers a shortened onboarding path."),N=e("p",null,"Cluster application teams by common use-case requirements and leverage these cluster

1s to build tailored landing zones.",-1),Z=e("p",null,[e("strong",null,"Common Use-Case Requirements")],-1),E=e("li",null,[e("p",null,[e("strong",null,"confidentiality:"),t(" Processing confidential data is often only allowed after accepting a higher degree of responsibility in the Shared Responsibility Model or working in a more constrained environment.")])],-1),F=e("strong",null,"legal zones:",-1),W=t(" Regulated industries like the financial industry can be required to segregate regulated from non-regulated IT systems. This can also intersect with organizational boundaries like different legal entities belonging to your organizations, though you should cautiously avoid "),H={href:"https://cloudfoundation.org/maturity-model/tenant-management/resource-hierarchy.html#decouple-cloud-resource-hierarchy-from-your-org-chart",target:"_blank",rel:"noopener noreferrer"},j=t("coupling your org chart to the cloud resource hierarchy"),D=t("."),G=e("li",null,[e("p",null,[e("strong",null,"connectivity:"),t(" Perimeter based networking security stands in contrast to zero-trust models.")])],-1),V=e("li",null,[e("p",null,[e("strong",null,"stage:"),t(" An application team usually runs their application in multiple stages. While production workloads are relevant for audit, this might not be true for development workloads.")])],-1),Q=e("li",null,[e("p",null,"Write down all steps for cloud onboardings that are needed to meet regulatory requirements per landing zone"),e("p",null,[e("strong",null,"Example steps")]),e("ul",null,[e("li",null,[e("p",null,"register application in CMDB")]),e("li",null,[e("p",null,"register L3 level on-prem connectivity")]),e("li",null,[e("p",null,"get approval by the compliance department for L3 level on-prem connectivity")])])],-1),U=e("li",null,[e("p",null,"For every landing zone, write down a Cloud Onboarding Path as a list of steps.")],-1),J=t("Restrict landing zone consumtption to customers that followed the corresponding onboarding path. The capability to "),K=t("Control Access to Landing Zones"),X=t(" is needed here.");function Y($,ee){const i=a("RouterLink"),s=a("Mermaid"),l=a("ClientOnly"),r=a("ExternalLinkIcon");return c(),u(h,null,[g,e("p",null,[_,n(i,{to:"/maturity-model/tenant-management/self-service-multi-cloud-tenant-database.html"},{default:o(()=>[f]),_:1}),b]),y,n(l,null,{default:o(()=>[n(s,{id:"mermaid_382ee189"})]),_:1}),w,v,k,e("ul",null,[e("li",null,[e("p",null,[C,n(i,{to:"/maturity-model/service-ecosystem/on-premise-network-connection.html"},{default:o(()=>[x]),_:1}),T])]),e("li",null,[e("p",null,[L,n(i,{to:"/maturity-model/tenant-management/playground-sandbox-environments.html"},{default:o(()=>[z]),_:1}),M,n(i,{to:"/maturity-model/tenant-management/tenant-provisioning.html"},{default:o(()=>[q]),_:1}),P])])]),n(l,null,{default:o(()=>[n(s,{id:"mermaid_382ee1c9"})]),_:1}),A,R,e("blockquote",null,[e("p",null,[O,S,n(i,{to:"/maturity-model/knowledge/quickstart-guide.html"},{default:o(()=>[B]),_:1}),I])]),e("ol",null,[e("li",null,[N,Z,e("ul",null,[E,e("li",null,[e("p",null,[F,W,e("a",H,[j,n(r)]),D])]),G,V])]),Q,U,e("li",null,[e("p",null,[J,n(i,{to:"/maturity-model/security-and-compliance/control-access-to-landing-zones.html"},{default:o(()=>[K]),_:1}),X])])])],64)}var ne=d(p,[["render",Y]]);export{ne as default};