Difference between revisions of "GC Cloud Infocentre"

From wiki
Jump to navigation Jump to search
 
(94 intermediate revisions by 11 users not shown)
Line 1: Line 1:
 +
 
[[FR:L'infocentre de l'infonuagique]]
 
[[FR:L'infocentre de l'infonuagique]]
 
<multilang>
 
<multilang>
 
@en|__NOTOC__
 
@en|__NOTOC__
 +
 +
 +
<div style="text-align: center;  background-color: orange; color: black"><big>
 +
'''Please note that all communication and documentation will be shared through GCxchange moving forward.'''<br>
 +
'''Register through the following link: [https://www.gcx-gce.gc.ca gcx-gce.gc.ca].  Once registered, join our community by becoming a member: [https://gcxgce.sharepoint.com/teams/1000233 Cloud and DevOps Community of Practice ]'''
 +
<p>
 +
'''Veuillez noter que toutes les communications et la documentation seront partagées via GCxchange à l'avenir.'''<br>
 +
'''Inscrivez-vous via le lien suivant :  [https://www.gcx-gce.gc.ca gcx-gce.gc.ca].  Une fois inscrit, rejoignez notre communauté en devenant membre: [https://gcxgce.sharepoint.com/teams/1000233 Communauté de pratique infonuagique et DevOps]''' </big></div>
  
 
<!-- NAV -->
 
<!-- NAV -->
Line 27: Line 36:
  
 
<!-- Title -->
 
<!-- Title -->
 +
 
{|style="width: 80%; background-color:white; border-collapse: collapse;"
 
{|style="width: 80%; background-color:white; border-collapse: collapse;"
 
|-
 
|-
Line 41: Line 51:
 
|style="width: 20%; text-align:right;"|<div style="font-family:Arial; color:#392F41;><big><big><big><big><big>'''What's New?'''<br></big></big></big></big></big><big> </div>
 
|style="width: 20%; text-align:right;"|<div style="font-family:Arial; color:#392F41;><big><big><big><big><big>'''What's New?'''<br></big></big></big></big></big><big> </div>
 
|style="width: 80%; text-align:left; padding-left: 80px"|<hr><hr><div style="font-family:Arial>
 
|style="width: 80%; text-align:left; padding-left: 80px"|<hr><hr><div style="font-family:Arial>
* Secure Remote Working - [https://wiki.gccollab.ca/Secure_Remote_Working_-_Overview English version]
+
New for July 2022
* Secure Use of Collaboration Tools - [https://wiki.gccollab.ca/Secure_Use_of_Collaboration_Tools English version]
+
*[https://github.com/canada-ca/TBS-OCIO-ESP/blob/master/gc_cloud_cost_management_guidance/readme.md GC Cloud Cost Management Playbook]
* Government of Canada Enterprise Security Architecture (ESA) Program - [https://www.gcpedia.gc.ca/wiki/Government_of_Canada_Enterprise_Security_Architecture_(ESA)_Program English version]
+
New for September 2022
* Connectivity Readiness Process [[Media:Connection-Readiness-V1.3-EN.docx|V 1.3 EN]]
+
* GC Public Cloud Roles & Responsibilities (Endorsed by GC EARB 2018-03-22, updated 2022-09-30 to include guardrail activities)
* [https://gccollab.ca/file/group/2749615/all#4057529 DRAFT Application Modernisation Guidance ]
+
**[https://gcxgce.sharepoint.com/teams/1000233/SitePages/GC-Public-Cloud-Roles-&-Responsibilities.aspx Document]  
* [https://github.com/canada-ca/cloud-guardrails-O365 GC Guardrails for MS Office 365]
+
 
* [https://github.com/canada-ca/accelerators_accelerateurs-azure/tree/master/Deployments/powershell/AzureUserManagement Script to automate creation of users] (Transport Canada)
 
* [https://digital.canada.ca/2019/11/26/introducing-notify/ Notify] the GC standard platform for sending email from cloud and on-prem
 
 
</big>
 
</big>
</div>
+
</div>  
 
<br>
 
<br>
 
<hr><hr>
 
<hr><hr>
Line 69: Line 77:
 
*** [https://github.com/canada-ca/Azure_LZBCA-AIZDB Azure Landing Zone Base Cloud Architecture ]
 
*** [https://github.com/canada-ca/Azure_LZBCA-AIZDB Azure Landing Zone Base Cloud Architecture ]
 
** [https://github.com/canada-ca/accelerators_accelerateurs-aws GC Accelerator for AWS]
 
** [https://github.com/canada-ca/accelerators_accelerateurs-aws GC Accelerator for AWS]
* Remote work
+
** [https://github.com/canada-ca/accelerators_accelerateurs-gcp GC Accelerator for GCP]
** Secure Remote Working - [https://wiki.gccollab.ca/Secure_Remote_Working_-_Overview| English version]
+
* GC Guardrail implementation - These guides are maintained by each vendor
** Secure Use of Collaboration Tools - [https://wiki.gccollab.ca/Secure_Use_of_Collaboration_Tools| English version]
+
** [https://github.com/canada-ca/cloud-guardrails-gcp Implementing Guardrails for GCP]
** Government of Canada Enterprise Security Architecture (ESA) Program - [https://www.gcpedia.gc.ca/wiki/Government_of_Canada_Enterprise_Security_Architecture_(ESA)_Program| English version]
+
** [https://github.com/canada-ca/cloud-guardrails-oracle Implementing Guardrails for Oracle Cloud]
 +
<!-- #these two items have no useful content from the vendor.
 +
** [https://github.com/canada-ca/cloud-guardrails-aws Implementing Guardrails for AWS]
 +
** [https://github.com/canada-ca/cloud-guardrails-azure Implementing Guardrails for Azure]
 +
-->
 
* Office 365
 
* Office 365
 
** [https://github.com/canada-ca/accelerators_accelerateurs-azure/tree/master/Deployments/powershell/AzureUserManagement Script to automate creation of users] (Transport Canada)
 
** [https://github.com/canada-ca/accelerators_accelerateurs-azure/tree/master/Deployments/powershell/AzureUserManagement Script to automate creation of users] (Transport Canada)
 
* Connectivity
 
* Connectivity
** Connectivity Readiness Process [[Media:Connection-Readiness-V1.3-EN.docx|V 1.3 EN]] - For departments wanting to onboard onto the CXP
+
** Connectivity Readiness Process [[:en:images/0/02/Connection-Readiness_V2.4_EN.docx|V 2.4 EN]] / [[:en:images/1/1d/Preparation-a-la-connectivite-V1.5-FR.docx|V 1.5 FR]]For departments wanting to onboard onto the CXP
** GC Cloud Enablement: Cloud Connection Patterns [[Media:GC Cloud Enablement - Cloud Connection Patterns - GC EARB.pptx|English]] - For departments seeking services from the Secure Cloud Enablement and Defence (SCED) initiative
+
** [https://wiki.gccollab.ca/images/c/cb/BN_Decryption_SCED_Mandatory_or_Optional_v1.1.pdf SSL/TLS Decryption - Mandatory or Optional]
** [[Media:Escalation_for_Urgent_Requests_to_Onboard_to_the_Cloud_eXchange_Point.pdf|Escalation for Urgent Requests to Onboard to the Cloud eXchange Point (CXP)]]
+
** GC Cloud Enablement: Cloud Connection Patterns - [[Media:GC Cloud Enablement - Cloud Connection Patterns - GC EARB.pptx|English]]  
** Secure Connectivity Onboarding Priority List - [https://wiki.gccollab.ca/images/6/6e/Secure_Connectivity_Pilot_Prioritization_Matrix_June16-2020.pdf  Latest update June 16, 2020 EN]
 
 
* [https://gccode.ssc-spc.gc.ca/GCCloudEnablement GCCode Cloud Enablement Repository]
 
* [https://gccode.ssc-spc.gc.ca/GCCloudEnablement GCCode Cloud Enablement Repository]
 +
* TBS SaaS Assessment Tool (MVP 2)
 +
** [https://www.gcpedia.gc.ca/gcwiki/images/c/c0/MVP2-TBS_SaaS_Assessment_Tool.xlsm GC SaaS Assessment Tool (MVP2)]
 +
** [https://gccollab.ca/file/view/7964117/entbs-saas-assessment-tool-mvp-2-english-demofr Demo Video]
 +
** [https://www.gcpedia.gc.ca/gcwiki/images/c/cb/GC_Cloud_Tiered_Assurance_Model.xlsx GC Cloud Tiered Assurance Model]
 +
** [https://www.gcpedia.gc.ca/gcwiki/images/7/77/GC_SaaS_Assessment_Approach.pdf GC SaaS Assessment Approach / Approche d’évaluation du logiciel comme service (SaaS) du GC]
 +
 
|}
 
|}
  
Line 92: Line 109:
 
Policies and guides to help departments govern their usage of cloud.<br>
 
Policies and guides to help departments govern their usage of cloud.<br>
 
* [https://www.canada.ca/en/government/system/digital-government/digital-government-innovations/cloud-services.html GC Cloud Policies & Direction]
 
* [https://www.canada.ca/en/government/system/digital-government/digital-government-innovations/cloud-services.html GC Cloud Policies & Direction]
** [https://www.canada.ca/en/government/system/digital-government/digital-government-innovations/cloud-services/government-canada-cloud-adoption-strategy.html GC Cloud Adoption Strategy - 2018 Update]
 
** [https://www.canada.ca/en/government/system/digital-government/modern-emerging-technologies/cloud-services/gc-white-paper-data-sovereignty-public-cloud.html Government of Canada White Paper: Data Sovereignty and Public Cloud]
 
 
** [https://www.canada.ca/en/government/system/digital-government/digital-government-innovations/cloud-services/direction-secure-use-commercial-cloud-services-spin.html Direction on the Secure Use of Commercial Cloud Services]
 
** [https://www.canada.ca/en/government/system/digital-government/digital-government-innovations/cloud-services/direction-secure-use-commercial-cloud-services-spin.html Direction on the Secure Use of Commercial Cloud Services]
 
** [https://www.tbs-sct.gc.ca/pol/doc-eng.aspx?id=32601 Directive on Service & Digital](Cloud First 4.4.1.9 / Data Residency 4.4.1.10 / Non-Public Cloud GC EARB Assessments 4.1.1.2.4)
 
** [https://www.tbs-sct.gc.ca/pol/doc-eng.aspx?id=32601 Directive on Service & Digital](Cloud First 4.4.1.9 / Data Residency 4.4.1.10 / Non-Public Cloud GC EARB Assessments 4.1.1.2.4)
Line 107: Line 122:
 
** [https://github.com/canada-ca/cloud-guardrails-aws/tree/master/tools/prowler GC Cloud Guardrails Prowler Checks for AWS]
 
** [https://github.com/canada-ca/cloud-guardrails-aws/tree/master/tools/prowler GC Cloud Guardrails Prowler Checks for AWS]
 
** [https://github.com/canada-ca/cloud-guardrails-O365 GC Guardrails for MS Office 365]
 
** [https://github.com/canada-ca/cloud-guardrails-O365 GC Guardrails for MS Office 365]
 +
** [[Media:GC_Cloud_Guardrails_GCEARB_changes_Aug_2020.pdf|GC Cloud Guardrails - Updated Process, Endorsed at GCEARB Aug 2020]]
 
* Canadian Centre for Cyber Security Guidance
 
* Canadian Centre for Cyber Security Guidance
 
** [https://cyber.gc.ca/en/guidance/baseline-security-requirements-network-security-zones-government-canada-itsg-22 CCCS ITSG-22 Baseline Security Requirements for Network Security Zones in the Government of Canada]
 
** [https://cyber.gc.ca/en/guidance/baseline-security-requirements-network-security-zones-government-canada-itsg-22 CCCS ITSG-22 Baseline Security Requirements for Network Security Zones in the Government of Canada]
Line 113: Line 129:
 
** [https://www.cse-cst.gc.ca/en/node/1830/html/26507 CCCS ITSP.40.062 Guidance on Securely Configuring Network Protocols]
 
** [https://www.cse-cst.gc.ca/en/node/1830/html/26507 CCCS ITSP.40.062 Guidance on Securely Configuring Network Protocols]
 
** [https://cyber.gc.ca/en/guidance/cloud-service-provider-information-technology-security-assessment-process-itsm50100 CCCS ITSM.50.100 Cloud Service Provider Information Technology Security Assessment Process]
 
** [https://cyber.gc.ca/en/guidance/cloud-service-provider-information-technology-security-assessment-process-itsm50100 CCCS ITSM.50.100 Cloud Service Provider Information Technology Security Assessment Process]
* [[Media:Data_resdiency_and_amazon_connect.pdf| Data Residency and Amazon Connect]]
+
**      [https://cyber.gc.ca/en/publications Canadian Centre for Cyber Security Publications]
 +
<!--* [[Media:Data_resdiency_and_amazon_connect.pdf| Data Residency and Amazon Connect]]-->
 +
*[https://www.gcpedia.gc.ca/gcwiki/images/c/c5/GC_Zero_Trust_Security_Concept.pdf TBS Zero Trust Initiative]
 +
*[https://www.gcpedia.gc.ca/gcwiki/images/7/7c/Considerations_for_Using_Microsoft_Cognitive_Services.pdf Considerations for Using Microsoft Cognitive Services]
 +
*[https://github.com/canada-ca/TBS-OCIO-ESP/blob/master/gc_cloud_cost_management_guidance/readme.md GC Cloud Cost Management Playbook]
 
|}
 
|}
  
Line 126: Line 146:
 
Tools and guides to help departments operate their cloud services.<br>
 
Tools and guides to help departments operate their cloud services.<br>
 
* [https://www.gcpedia.gc.ca/gcwiki/images/e/e3/GC_Event_Logging_Strategy.pdf GC Event Logging Guidance]
 
* [https://www.gcpedia.gc.ca/gcwiki/images/e/e3/GC_Event_Logging_Strategy.pdf GC Event Logging Guidance]
* [https://www.canada.ca/en/government/system/digital-government/modern-emerging-technologies/cloud-services/security-playbook-information-system-solutions-cloud.html Security Playbook for Information System Solutions]
 
 
* [https://www.gcpedia.gc.ca/gcwiki/images/5/5f/GC_Cloud_Event_Management_Standard_Operating_Procedure.pdf Standard Operating Procedure for GC Cloud Event Management]
 
* [https://www.gcpedia.gc.ca/gcwiki/images/5/5f/GC_Cloud_Event_Management_Standard_Operating_Procedure.pdf Standard Operating Procedure for GC Cloud Event Management]
* [https://gccollab.ca/file/view/3634499/ennaming-and-tagging-standardsfr#elgg-object-4383750 Naming and Tagging Guidance (SSC)]
 
* [https://digital.canada.ca/2019/11/26/introducing-notify/ Notify] the GC standard platform for sending email from cloud and on-prem environments
 
 
* [[Media:CPMSD - CCoE - Organizational Change Management - v1 (EN) (1).pptx|Cloud Adoption Playbooks]]
 
* [[Media:CPMSD - CCoE - Organizational Change Management - v1 (EN) (1).pptx|Cloud Adoption Playbooks]]
 +
* [https://gccollab.ca/file/view/3634499/ennaming-and-tagging-standardsfr#elgg-object-4383750 Naming and Tagging Guidance discussion thread(SSC)]
 +
* [https://wiki.gccollab.ca/images/5/54/Azure_Naming_and_Tagging_Quick_Reference.docx Azure Naming and Tagging Quick Reference]
 +
* [https://wiki.gccollab.ca/images/6/6f/Azure_Naming_and_Tagging_v_2.0.pdf Azure Naming and Tagging v2.0 EN]
 
|}
 
|}
  
Line 140: Line 160:
 
|style="border-left: 10px solid #FF792C; box-shadow: 0 4px 8px 0 rgba(0, 0, 0, 0.2), 0 6px 20px 0 rgba(0, 0, 0, 0.19); color: black; background-color: white; font-size:1.2em;" |  
 
|style="border-left: 10px solid #FF792C; box-shadow: 0 4px 8px 0 rgba(0, 0, 0, 0.2), 0 6px 20px 0 rgba(0, 0, 0, 0.19); color: black; background-color: white; font-size:1.2em;" |  
  
<span style="font-size: 1.5em;">Migration</span><br>
+
<span style="font-size: 1.5em;">Application Migration & Modernization</span><br>
 
Tools and guidance to help migrate application and workloads to the cloud.<br>
 
Tools and guidance to help migrate application and workloads to the cloud.<br>
 
* [https://wiki.gccollab.ca/Application_Modernization Application Modernisation & Workload Migration Program]
 
* [https://wiki.gccollab.ca/Application_Modernization Application Modernisation & Workload Migration Program]
Line 147: Line 167:
 
**  [[Media:05_IT_skills_and_Workforce_EN.pdf|Workforce and Skills]]
 
**  [[Media:05_IT_skills_and_Workforce_EN.pdf|Workforce and Skills]]
 
**  [[Media:02_-_Lockin_EN.pdf|Evaluating Technology Lock-in and Exit]]
 
**  [[Media:02_-_Lockin_EN.pdf|Evaluating Technology Lock-in and Exit]]
**  [[Media:04 _ Cloud based Managed Services.pdf|Cloud-based Managed Services]]
+
**  [[Media:API_First_Architecture_Patterns_EN_Endorsed.docx|API First Architecture Patterns for Public Cloud PaaS]]
 
|}
 
|}
  
Line 161: Line 181:
 
Designated users are individuals selected by the departmental CIO and are authorized to submit cloud requests to the GC Cloud Brokering Service Portal on behalf of the department.<br>  
 
Designated users are individuals selected by the departmental CIO and are authorized to submit cloud requests to the GC Cloud Brokering Service Portal on behalf of the department.<br>  
 
* [https://gccollab.ca/file/view/5785957/engc-cloud-broker-service-designated-user-listfr GC Cloud Broker Service Designated User List]
 
* [https://gccollab.ca/file/view/5785957/engc-cloud-broker-service-designated-user-listfr GC Cloud Broker Service Designated User List]
 +
* [https://ssc-clouddocs.canada.ca Cloud Documentation Portal (CDP)]
 +
*[https://gcconnex.gc.ca/file/view/62841157/gc-cloud-broker-sci-assessed-marketplace-products?language=en GC Cloud Broker - SCI Assessed Marketplace Products]
 +
*[https://gccollab.ca/file/view/7096018/enapproach-for-managed-service-providers-cloud-sub-processorsfr Approach for Managed Service Providers (Deck)]
 +
*[https://gccollab.ca/file/view/6617114/enaccounting-for-cloud-sub-processors-during-procurement-processesfr Process for Accounting for Cloud Sub-processors During Procurement (Document - DRAFT)]
 +
* Bring Your Own Licence
 +
** [https://gcconnex.gc.ca/file/download/45648502 Interim Approach for Marketplace and BYOL]
 +
** [https://gcconnex.gc.ca/file/view/62841157/gc-cloud-broker-sci-assessed-marketplace-products?language=en SCI Assessed Marketplace Products]
 +
* [[Media:01_Accoutning_for_Cloud_Sub_Processor_During_Procurements_EN.pdf | Accounting for Cloud Sub-processors During Procurements (Managed Services on Cloud)]]
 
|}
 
|}
  
Line 173: Line 201:
 
* Departmental Cloud Strategies  
 
* Departmental Cloud Strategies  
 
** [[Media:CFIA_Cloud_Adoption_Strategy_and_Architecture.pdf  | CFIA Cloud Adoption Strategy and Architecture]]
 
** [[Media:CFIA_Cloud_Adoption_Strategy_and_Architecture.pdf  | CFIA Cloud Adoption Strategy and Architecture]]
* GC Public Cloud Roles & Responsibilities (Endorsed by GC EARB 2018-03-22)
 
** [https://gccollab.ca/file/view/1785972/engc-cloud-roles-and-responsibilities-v1fr Document]
 
** [https://gccollab.ca/file/view/1785973/engc-cloud-roles-and-responsibilities-matrixfr RACI Matrix]
 
  
 
* Community
 
* Community
** GC Cloud Technical Working Group - Monthly meeting to demonstrate tech. and discuss cloud adoption
+
** [https://gccollab.ca/groups/profile/2683084/encloud-technical-working-groupfrgroupe-de-travail-technique-infonuagique-gtti GC Cloud Technical Working Group] - Monthly meeting to demonstrate tech. and discuss cloud adoption
 
** [https://gccollab.ca/groups/profile/2749615/encloud-and-computing-network-of-expertisefrru00e9seau-dexpertise-sur-infonuage-et-linformatique GC Cloud & Computing Network of Expertise] - Assesses all cloud related topics for GC EARB
 
** [https://gccollab.ca/groups/profile/2749615/encloud-and-computing-network-of-expertisefrru00e9seau-dexpertise-sur-infonuage-et-linformatique GC Cloud & Computing Network of Expertise] - Assesses all cloud related topics for GC EARB
** [https://gccollab.ca/groups/profile/1785962/engc-cloud-working-groupfr GC Cloud Working Group] - No Longer active
+
** [https://gccollab.ca/groups/profile/2014905/ M365 Community of Practice]
** [https://gccollab.ca/groups/profile/2014905/enoffice-365-community-of-practicefrcommunautu00e9-de-pratique-office-365 Office 365 Community of Practice]
 
  
 
*Events
 
*Events
 
** [[Stratosphere2019|Stratosphere 2019]]
 
** [[Stratosphere2019|Stratosphere 2019]]
 +
** [[Stratosphere2020|Stratosphere 2020]]
 
* [https://gccollab.ca/file/view/1785967/cloud-first-primer-for-senior-managementpdf Cloud First Primer for Senior Management]
 
* [https://gccollab.ca/file/view/1785967/cloud-first-primer-for-senior-managementpdf Cloud First Primer for Senior Management]
  
 
|}
 
|}
 +
  
 
==About==
 
==About==
This site is maintained by the Core Technologies team at the Treasury Board of Canada Secretariat, Office of the Chief Information Officer
+
This site is maintained by the Modern Technologies team at the Treasury Board of Canada Secretariat, Office of the Chief Information Officer
  
 
</multilang>
 
</multilang>

Latest revision as of 17:46, 19 April 2024


Please note that all communication and documentation will be shared through GCxchange moving forward.
Register through the following link: gcx-gce.gc.ca. Once registered, join our community by becoming a member: Cloud and DevOps Community of Practice

Veuillez noter que toutes les communications et la documentation seront partagées via GCxchange à l'avenir.
Inscrivez-vous via le lien suivant : gcx-gce.gc.ca. Une fois inscrit, rejoignez notre communauté en devenant membre: Communauté de pratique infonuagique et DevOps


Home Blogs | Video FAQs About Security] Français


Stratosphere logo.png Cloud Infocentre
Everything you need to know for Cloud & DevOps



What's New?


New for July 2022

New for September 2022

  • GC Public Cloud Roles & Responsibilities (Endorsed by GC EARB 2018-03-22, updated 2022-09-30 to include guardrail activities)





Technical Build
Tools to help teams build and configure their cloud services.


Governance & Policy
Policies and guides to help departments govern their usage of cloud.


Automation & Operations
Tools and guides to help departments operate their cloud services.


Application Migration & Modernization
Tools and guidance to help migrate application and workloads to the cloud.


Acquisition
Links to help teams acquire cloud services.

Designated users are individuals selected by the departmental CIO and are authorized to submit cloud requests to the GC Cloud Brokering Service Portal on behalf of the department.


Workforce
Guidance and links to training to grow workforce talent and create a culture of continuous delivery.


About[edit | edit source]

This site is maintained by the Modern Technologies team at the Treasury Board of Canada Secretariat, Office of the Chief Information Officer