69 lines
2.2 KiB
Markdown
69 lines
2.2 KiB
Markdown
---
|
|
title: "Cloud Governance"
|
|
type: concept
|
|
tags: [Cloud, Governance, Compliance, Security, Cloud Operations]
|
|
date: 2026-04-26
|
|
---
|
|
|
|
# Cloud Governance (云治理)
|
|
|
|
## Definition
|
|
**Cloud Governance** is the set of policies, processes, and controls that ensure cloud resources are used securely, efficiently, and in compliance with regulatory requirements. It provides the framework for managing cloud chaos, security loopholes, and cost overruns.
|
|
|
|
## Key Components
|
|
|
|
### 1. Identity & Access Management (IAM)
|
|
- Role-based access control (RBAC)
|
|
- Principle of least privilege
|
|
- Multi-factor authentication
|
|
|
|
### 2. Security & Compliance
|
|
- Policy-as-Code for automated enforcement
|
|
- Continuous compliance monitoring
|
|
- Automated compliance checks
|
|
|
|
### 3. Cost Management & Governance
|
|
- Real-time cost tracking
|
|
- Budget alerts and allocation
|
|
- Resource tagging strategies
|
|
|
|
### 4. Resource Governance
|
|
- Guardrails for resource provisioning
|
|
- Tagging standards
|
|
- Resource lifecycle management
|
|
|
|
## Cloud Governance by Provider
|
|
|
|
| Aspect | AWS | Azure | GCP |
|
|
|--------|-----|-------|-----|
|
|
| IAM | AWS IAM | Azure AD | Google IAM |
|
|
| Security Tools | AWS Security Hub | Microsoft Defender | Security Command Center |
|
|
| Cost Control | AWS Cost Explorer | Azure Cost Management | GCP Billing Reports |
|
|
| Policy Enforcement | AWS Organizations & SCPs | Azure Policy | GCP Organization Policies |
|
|
|
|
## Best Practices
|
|
|
|
1. **Define IAM roles and policies upfront** — avoid giving excessive permissions
|
|
2. **Use automated compliance checks** — detect misconfigurations
|
|
3. **Implement guardrails** — prevent unauthorized resource provisioning
|
|
4. **Establish tagging standards** — track resources by teams, projects, workloads
|
|
5. **Enable real-time monitoring** — detect anomalies and compliance violations
|
|
|
|
## Relationship to Cloud Operating Model
|
|
- Cloud Governance is a **core pillar** of the Cloud Operating Model
|
|
- Provides the guardrails that enable secure and efficient cloud operations
|
|
- Works alongside Automation, Security, and FinOps
|
|
|
|
## Related Concepts
|
|
- [[Cloud Operating Model]]
|
|
- [[Policy-as-Code]]
|
|
- [[Compliance-Automation]]
|
|
- [[FinOps]]
|
|
- [[Zero-Trust-Architecture]]
|
|
- [[IAM]]
|
|
|
|
## Related Entities
|
|
- [[AWS]]
|
|
- [[Azure]]
|
|
- [[Google-Cloud]]
|