We adopted DevOps and are Cloud Native. Now What? Bruno Amaro Almeida 1 Photo by Alessandro Erbetta on Unsplash Sept 2022

Hello! About me • Head of Technology & Architecture at Fortum • Advisor / Architect Consultant Bruno Amaro Almeida brunoamaro.com Reach out on: @bruno_amaro @brunoamaroalmeida

Fortum Digital Development: Energy Optimization, Sustainability, Mobility Generation, Trading and Asset Optimization District Heating, Recycling & Waste Consumer Solutions Enterprise 3 … … Startups

Cloud Native & DevOps can have many meanings … Instances. Containers. Serverless. Public- Private- Multi- Hybrid- Cloud DevOps. SRE. Platform Engineering. 4

Technology Strategy: an Organizational Perspective • Compliance and regulatory • Mergers and Acquisitions • Geographic Locations • Capacity commitments and existing business relationships • Best-of-breed services 5 Photo by Austin Neill on Unsplash

How do we move a Mountain? CloudOps & Platform Engineering Data & Integration EA, CyberSec, Legal, … • Open governance and strong operational foundations: § CloudOps & Platform Engineering. Data & Integrations. • Multi-competence team & co-creation SW CoE Project A • Enable transparency, visibility and escalation paths Project Z K8s Serverless Project B Treat Operations as a value center, not a cost center 6 Project C …

7

Security Threat Modeling Workshop “Threat modelling works to identify, communicate, and understand threats and mitigations within the context of protecting something of value.” source: owasp.org 8

AWS and Azure Well-Architected Framework & Review • Consistent, Repeatable Assessment • Identify Risks & Opportunities • Outside perspective new Sustainability 9

Fortum Digital Development Handbook Exa m ple Inspired by 💚 https://s-group-dev.github.io/development-guidelines/ (…) 10

Guidelines Digital Development Handbook Assessments 11 HOW WHY WHAT Builders Library HOW

Connecting the dots with Backstage • Tech Radar • Digital Development Handbook • Builders Library and Templates • Project/Service Catalog & Discovery • Metrics – DORA Metrics (Deployment Frequency, Change Lead Time, Change Failure Rate, Mean Time to Recovery) – SLAs, SLOs, SLIs, RPO, RTO, … • … 12 source: backstage.io

Culture > Processes > Technologies 13

Thanks! Questions? Feedback? Bruno Amaro Almeida brunoamaro.com Reach out on: @bruno_amaro @brunoamaroalmeida