Infrastructure Leader’s Guide to Google Cloud : Lead Your Organization's Google Cloud Adoption, Migration and Modernization Journey

Making fast and accurate technology decisions is critical to staying relevant to your customers. And technology needs to add value back to your organization quicker than ever. Google Cloud offers IT leaders the answer to today’s technology challenges. However, to realize its benefits you must navigate your journey without hitting common pitfalls that lead to stalled and unsuccessful cloud adoption. This book distills the lessons learned from guiding and working with hundreds of organizations on their journey to the cloud. Its goal is to give aspiring and current IT leaders the knowledge required to be an infrastructure leader. That is the term author Jeremy Lloyd uses for the person who can lead your organization's Google Cloud adoption strategy. Of course, cloud adoption isn’t a solo endeavor. Jeremy covers the different generations of IT leaders, the team structure, and the skills required for a successful migration to Google Cloud. This book also covers why you should choose Google Cloud, how to build a business case for the cloud, and defining your adoption/migration/modernization strategies and cloud operating model. Finally, the book covers how to empower your developers to deploy cloud-native applications and how to support day two operations once you have moved to Google Cloud. What You Will Learn Use Google Cloud to add value to your organization Define and lead your Google Cloud adoption strategy Migrate and modernize your workloads Operate workloads once in Google Cloud and avoid antipatterns Understand how the infrastructure team can be enablers for cloud-native development Who This Book Is For Current infrastructure/IT/technology leaders who need guidance for their Google Cloud adoption, migration, and modernization journey; IT managers, IT team leads and IT professionals aspiring to be the next IT leaders who must learn to navigate more than just technical complexity. Table of Contents About the Author About the Technical Reviewer Acknowledgments Foreword Introduction Part I: Understanding Why Google Cloud Is Used Chapter 1: Introduction The Infrastructure Leader What Does an Infrastructure Leader Do? Who Is an Infrastructure Leader? What Are the Characteristics and Softer Skills of an Infrastructure Leader Types of Infrastructure Leaders First Generation Second Generation Third Generation Fourth Generation Moving Organizations Forward Challenges Becoming a Profit Center Summary Chapter 2: About Google and Google Cloud Google Cloud Google Cloud Core Components Regions and Zones Points of Presence Network Why Use Google Cloud Global Infrastructure Trust and Security Security by Design Encryption in Transit and at Rest Compliance Standards Privacy Data Deletion Operational Privacy Transparency Data Cloud Analytics/Intelligence Open Cloud/Flexible Open Source Hybrid and Multicloud Flexible Sustainability Productivity and Collaboration Third-Party Analysts Summary Chapter 3: The Future of IT Summary Chapter 4: The Four Approaches to Google Cloud Adoption Shadow IT Tactical Adoption Strategic Adoption Organization Transformation Summary to Align Your Adoption Approach Cloud Adoption Meets the Four Generations Summary Chapter 5: Business Case Innovation Operational Efficiency Security Reliability Sustainability Business Critical Events Rapid Business Case Detailed Business Case Integrating with an Existing Business Case Template Be Aware of Competing Priorities Summary Chapter 6: The Cloud Strategy Version Executive Summary Current State Financial Models Alignment to Business Strategy Guiding Principles Security Data Classification Compliance Risk Management Governance Ways of Working Objectives and Key Results (OKRs) Implementation Plan Summary Chapter 7: Cloud Operating Model Strategy Three Common Cloud Operating Models Decentralized Operations Advantages of This Pattern The Disadvantages of This Pattern Centralized Operations The Advantages of This Pattern The Disadvantages of the Centralized Pattern Hybrid Operations The Advantages of This Pattern The Disadvantages of This Pattern Evolving Your Operating Model Summary Chapter 8: Migration Strategies Considerations Migration Risk Management Working with Your IT Outsourcer in a Cloud Migration Google Cloud Rapid Assessment and Migration Program (RAMP) Summary Chapter 9: Modernization Strategies Guardrails Modernization Roadmap Workloads to Modernize Skills and Team Structure Tools and Partners Mainframe Modernization Migration and Modernization Decision Trees Summary Chapter 10: Accelerate with Google and Partners Googlers and Office of the CTO Partner Ecosystem Managed Service Providers (MSPs) Summary Part III: Organizational Readiness and Change Chapter 11: Cloud Adoption and Cultural Change Unite with a Purpose, Guide with a Mission, and Deliver Through Objectives Purpose Mission Statements Psychological Safety Identify Key Decision Makers and Get Them on Side Product Mindset over Project Site Reliability Engineering Google Cloud Adoption Framework Summary Chapter 12: Cloud Operating Model Readiness Security Readiness Accountability Operational Security Technology and Architectural Guidance Governance Readiness Operations Readiness Summary Chapter 13: Skills How to Get the Skills You Need Building the Capability Cross-Skilling from AWS or Azure Learning Paths Certifications Building Certification Momentum Cloud Digital Leader In-Person and Online Events Summary Chapter 14: Cloud Adoption Teams Cloud Office Cloud Strategy and Governance Comms and Engagement Program Management Adoption Improvements Cloud Onboarding People and Skills Management Cloud Risk Management Financial Operations (FinOps) Cloud Center of Excellence Shadow IT Tactical Adoption Strategic Adoption What Does the CCoE Do in This Phase? Who Should Be in the Strategic Adoption Phase CCoE and What Does the Team Structure Look Like? Organization Transformation What Does the CCoE Do in This Phase? How Can You Mitigate the Risk of the CCoE Becoming a Blocker? Summary Part IV: Migration Journey Chapter 15: Assess Application Owners Assessment Tools Assessment Tools CAST Software Workload Categorization Assessing the Migration Approach First Movers Low-Hanging Fruit Cross Representation Highest Priority Summary Chapter 16: Plan Tools and Prerequisites Cloud Foundations and a Migration Landing Zone Communication and Engagement Migration Wave Grouping and Scheduling Implementing Organizational Readiness Plans Pilot Migration Summary Chapter 17: Migrate Migration Tools Server Migration Tools VMware’s Hybrid Cloud Extension (HCX) and NSX-T Custom Image Import Container Migration Tools Database Migration Tools Data Migration Tools Feedback Loops Operational Handover Summary Chapter 18: Optimize Summary Part V: Cloud-Native Chapter 19: Cloud-Native Development Cloud-Native Advantages Integrated Development Environment Cloud-Native Architecture Access to Google Cloud Projects to Provision New Resources to Experiment An Integrated Development Environment (IDE) upon Which to Write Code and Improve Code Quality A Location to Store Their Code and Artifacts in Source Control The Ability to Monitor, Log, and Alert on Production Workloads To Be Able to Test and Debug Efficiently The Skills to Use Google Cloud-Native Products and Services To Be Able to Select the Right Tools for the Job The Knowledge of Designing Cloud Architectures To Design with Security in Mind (Shift-Left on Security) Be Able to Get to Production Efficiently A Stable Infrastructure upon Which to Build and Deploy Supportive Leadership Google’s Approach to Cloud-Native Security Summary Chapter 20: Containers Management of Hundreds to Thousands of Containers and Multiple Nodes Maintaining Container Image Integrity and Software Security Managing Legacy Workloads Unfamiliarity and Lack of Container Skills Products to Centralize Management/Operations Anthos Summary Chapter 21: Serverless Cloud Run Cloud Functions App Engine Workflows Serverless Data Products Summary Part VI: Day 2 Operations Chapter 22: Day 2 Operations Explained Day 2 Cloud Challenges Day 2 Antipatterns Extend Existing On-Prem Tools for Use Within Your Google Cloud Environment Manual Changes to Google Cloud Resources Incorrect Use of Service Model Alerts for Everything Defaulting to Stability and Making No Improvements Loss of Alignment to the Business Lack of Health Checks Summary Chapter 23: Cloud Foundations and Landing Zones Landing Zones Summary Chapter 24: Compute Server Hosting Options Compute Engine On-Demand Preemptible VM Instances Spot VMs Cloud Tensor Processing Units Google Cloud VMware Engine Data Center Exit Data Center expansion Disaster Recovery Virtual Desktop Infrastructure Application Modernization What other considerations are there for GCVE? Sole-Tenant Nodes Why Should You Consider Using Sole-Tenant Nodes? Provisioning Sole-Tenant Nodes Regional Extensions and Bare Metal Servers Why Should You Consider Using Bare Metal Servers? Summary Chapter 25: Containers and Serverless Containers Container Images Build and Unit Tests Deploy, Release, and Test Terminate and Delete Rollback Container Compliance Container Operations Logging, Monitoring, and Alerting Health Checks Container Orchestration with GKE Pod and Node Scaling Anthos Cluster Management Access mgmt. Maintenance Resource and Security Management Anthos Config Management Binary Authorization Storage/Networking Load Balancers Dataplane V2 Volumes and Persistent Volumes Observability Anthos Service Mesh Serverless Summary Chapter 26: Networking Connect Virtual Private Clouds (VPCs) Scale Load Balancers Secure VPC Service Controls Cloud Armor Optimize Network Service Tiers Network Intelligence Center Summary Chapter 27: Additional Workload Architectural Considerations Consistency VM Manager OS Images Managed Instance Groups (MIGs) Assured Workloads Why Should You Consider Assured Workloads? How Do You Provision Assured Workloads? Live Migration Bring Your Own License Why Should You Consider Bring Your Own License? Observability and Optimization Monitoring, Logging, and Alerting Service-Level Indicators Service-Level Objectives Service-Level Agreements Active Assist Sustained Use Discounts Committed Use Discounts Reliability Recoverability High Availability Financial Operations Prioritizing Cost Optimization Effort Security Shared Responsibility Model Security Frameworks Shielded VMs Confidential Computing Confidential GKE Nodes Automating Security Operations Information Security and Data Classification Availability Confidentiality Integrity Patterns and Feedback Loops Governance, Risk, and Compliance (GRC) Risk management in Google Cloud How to Reassess Existing Risks Shift Left on Compliance Moving Toward Continuous Compliance Governance Summary Chapter 28: Other Key Day 2 Products and Services Google Cloud Marketplace Private Catalog Cloud Build API Management Cloud IDS Managed Databases: Cloud SQL Consistency Maintenance High Availability Backup and Recovery Observability and Optimization Security Support Summary Part VII: Productivity and Collaboration Chapter 29: BeyondCorp What Is BeyondCorp Enterprise? Summary Chapter 30: Other Google Services Google Workspace Security and Management Vault Work Insights Google Workspace Marketplace Adopting Google Workspace Chrome Enterprise Chrome Enterprise Device Chrome Browser A Powerful Combination Fast Deployment and Simple Cloud Management Access the Apps You Want from Anywhere Built-In Security Cost-Effective and Eco-friendly Summary Final Words References Chapter 1. Introduction Chapter 2. About Google and Google Cloud Chapter 3. Future of IT Chapter 5. Business Case Chapter 6. The Cloud Strategy Chapter 7. Cloud Operating Model Strategy Chapter 8. Migration Strategies Chapter 9. Modernization Strategies Chapter 11. Cloud Adoption and Cultural Change Chapter 13. Skills Chapter 14. Cloud Adoption Teams Chapter 15. Assess Chapter 17. Migrate Chapter 18. Optimize Chapter 20. Containers Chapter 23. Cloud Foundations and Landing Zones Chapter 24. Compute Chapter 25. Containers and Serverless Chapter 27. Additional Workload Architectural Considerations Chapter 29. BeyondCorp Chapter 30. Other Google Services Index