-
Notifications
You must be signed in to change notification settings - Fork 328
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Linkreview #969
Linkreview #969
Conversation
checklists/alz_checklist.en.json
Outdated
@@ -109,7 +109,7 @@ | |||
"guid": "5cf9f485-2784-49b3-9824-75d9b8bdb57b", | |||
"id": "A03.05", | |||
"severity": "Low", | |||
"link": "https://learn.microsoft.com/azure/cloud-adoption-framework/ready/landing-zone/design-area/azure-billing-enterprise-agreement#design-considerations", | |||
"link": "https://learn.microsoft.com/azure/cloud-adoption-framework/ready/landing-zone/design-area/management-application-environments", |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
As a comment (even though I am good to approve this) - the App Environments article doesn't talk as much about the use of Dev/Test subscriptions for billing, and is more of organizing by policy.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@hgotar1 would this link be better?
https://azure.microsoft.com/en-au/pricing/offers/ms-azr-0148p
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yeah, I think so. Making it region agnostic as https://azure.microsoft.com/pricing/offers/ms-azr-0148p would be a good landing page!
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Also, feel free to merge any time on this.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
link has been updated as per comment request
Feedback to have more specific links for CSAs and customers
Recommendation 1: If you give a partner access to administer your tenant, use Azure Lighthouse.
Actual: https://learn.microsoft.com/en-gb/azure/cloud-adoption-framework/ready/landing-zone/design-area/azure-billing-microsoft-customer-agreement#design-recommendations
More specific: https://learn.microsoft.com/en-us/azure/lighthouse/overview
Recommendation 2: Use of Enterprise Dev/Test Subscriptions to reduce costs for non-production workloads.
Actual: https://learn.microsoft.com/en-gb/azure/cloud-adoption-framework/ready/landing-zone/design-area/azure-billing-enterprise-agreement#design-considerations
More specific: https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/ready/landing-zone/design-area/management-application-environments
Recommendation 3: Use managed identities instead of service principals for authentication to Azure services. You can check for existing service principals via Entra ID > Sign in Logs > Service principal logins.
Actual: https://learn.microsoft.com/en-gb/azure/cloud-adoption-framework/ready/landing-zone/design-area/identity-access-landing-zones#identity-and-access-management-in-the-azure-landing-zone-accelerator
More specific: https://learn.microsoft.com/en-us/entra/identity/managed-identities-azure-resources/overview