Budget Enforcement
Video Activity
Join over 3 million cybersecurity professionals advancing their career
Sign up with
Required fields are marked with an *
or
Already have an account? Sign In »

Video Transcription
00:01
budget enforcement is our next cloud governance principle
00:05
in this module will cover the concepts of budget transparency and agnostic reporting.
00:10
We'll also be looking at some best practices around proactive enforcement.
00:16
All organizations care about cost control
00:19
in the cloud of the cost management optimization and reporting life cycle requires that CFO's received assurance that cloud spend can be controlled and budgets adhere to and respected.
00:31
While this sounds simple enough, the reality is often different at any scale in the cloud.
00:37
As we discussed earlier, providing a single cloud account or subscription to a user is synonymous with giving them their own data center.
00:46
Controlling costs, while still empowering users with the power of the cloud, is a balance that must be struck early to avoid unexpected overruns.
00:57
One of the first steps in budget enforcement is providing cloud users transparency to their cloud costs.
01:03
Sounds straightforward, but the cost of cloud computing alone, with nothing to compare or related against, provides very little value to the end user.
01:11
Aligning the cloud account or subscription with a budget
01:15
gives dimension to resource costs over time and provides more context around spend on a daily or weekly basis.
01:23
This visibility to cloud costs with the added context of how it fits within a budget provides users with a fuller picture of their cloud spending trajectory,
01:34
enabling them to better plan and strategize efforts for the long term.
01:38
Another dimension of budget enforcement is proactively handling waste management. This could be a simple is turning off resource is and non production environments when not in use or alerting users and leadership to unused or orphaned resource is provisioned. Cloud resources continue to turn the meter and generates Ben
01:59
whether they're being used or not.
02:00
So handling these concerns at scale requires an automated and programmatic approach. As most cloud services are billed in single second Interval,
02:09
nothing will stifle cloud adoption in an organization faster than unbounded and unaccounted expenses.
02:17
Establishing an automated solution toe automatically and proactively look for re sources that are over provisioned and underutilized can help drastically pulling unnecessary costs.
02:30
One best practice that can alleviate complexity and understanding cloud costs at scale is providing users agnostic data reporting from multiple cloud service providers. A cloud tamer. We've seen an increase over time in the amount of organizations that work with more than one cloud service provider.
02:49
So here's an example of how we provide this agnostic reporting in our tool.
02:53
Here we are inside Cloud Tamer at the organizational chart for Company A.
03:00
As we drill down into the company's structure, we see the research and development department within research and development. There are a number of projects with associate ID accounts and subscriptions from multiple cloud providers.
03:15
For instance, in the Asthma research project alone, there is an AWS commercial account, an azure subscription and an address CSP Resource Group
03:25
with agnostic reporting at any level, a user with the right permissions can select, in this case, the Research and Development Department and poll aggregated financial reporting.
03:38
This first spending view gives us a summary of cost across all of the accounts underneath.
03:44
But if we want to drill in more, we can go into spend reports and filter the data even further, say by cloud provider.
03:52
Now we can see the cost breakdown between AWS and Azure. In this case,
03:59
we can take it one step further by filtering our results. But each cloud service giving us a full breakdown of both AWS and azure services that have been used in all of the accounts and subscriptions in research and development.
04:13
We couldn't even isolate our particular service in a month to view resource level details around the spend, giving us even more insight.
04:23
Another best practice in budget enforcement that we have brought to our cloud tamer customers is proactive budget enforcements.
04:30
This allows users to create automated enforcements that could be configured to take any number of actions. When a cost threshold is reached,
04:39
let me show you
04:41
back in cloud tamer. We're taking a look at this remote support project,
04:46
which we can already visually tell is overspending their planned budget.
04:49
Let's go into enforcements to see how they work. And if we can tighten the reins on this particular environment
04:57
in enforcements, we have a myriad of options to create an appropriate custom trigger.
05:02
We could set the enforcement on a particular cloud service or on the entire project, which will do here.
05:09
We can also customize the timeframe and spend type of this trigger
05:14
for this first enforcement.
05:15
We're going to set the trigger when monthly spend surpasses 85% of her monthly budget for this project.
05:21
When that happens, let's have our developers on this project notified. We hit save and then see that our enforcement is active on the project.
05:30
And because this project is already passed this spend threshold, the enforcement automatically triggers sending email and platform notifications to our Debs that this enforcement has been triggered.
05:44
Now let's add in another enforcement.
05:46
Let's set this one to trigger an event when spending is past 95% for the given month.
05:53
When that happens, we'll have this enforcement kick off a cloud resource that will restrict easy to skews to those that are under $2 an hour.
06:02
Once we save this enforcement and it's triggered, we can actually see that this cost restricting cloud resource has been deployed within this project
06:11
and its cloud environment.
06:14
Finally, let's make an enforcement that triggers at 99% of our monthly spend
06:19
this time, we'll have it kick off a system freeze rule and notify. Our admits
06:25
This system freeze rule deploys policies to the project to deny all but read only actions in this environment,
06:31
meaning no one can spend up. New resource is creating additional spend.
06:36
These are just a few examples of how our customers use proactive enforcements, toe limit cloud costs
06:45
to review providing users of an organization with cloud cost transparency. An agnostic reporting is instrumental for finding balance in budget enforcement.
06:56
Also, establishing proactive enforcement actions can give financial leaders peace of mind that cost won't spin out of control.
Up Next
Similar Content