包阅导读总结
1. 关键词：Google Cloud Private Marketplace、Shadow IT、Governance、Control Costs、End Users
2. 总结：Google Cloud Private Marketplace 现已全面可用，能让云管理员精选产品，帮助组织管控成本、治理和安全，在赋予终端用户权限的同时保持管控，适应组织变化。
3. 主要内容：
– 背景：
– 开发者和业务用户需要应用和工具，但存在“影子 IT”问题，云管理员等需管控软件和技术。
– Google Cloud Private Marketplace 介绍：
– 让云管理员为组织精选审核过的产品集合。
– 有助于管控成本，确保只有获批的解决方案能被采购和部署。
– 主要功能：
– 增强合规和安全态势，进行产品级访问控制。
– 赋能终端用户发现新产品同时保持控制，可开启请求产品功能。
– 管理员能处理请求并通知，提供相关说明。
思维导图：
文章地址：https://cloud.google.com/blog/topics/partners/google-cloud-private-marketplace-mitigates-shadow-it/
文章来源：cloud.google.com
作者：Akshat Khanna
发布时间：2024/7/29 0:00
语言：英文
总字数：783字
预计阅读时间：4分钟
评分：87分
标签：Google Cloud,云治理,未经授权的 IT 应用,IT安全,云市场
以下为原文内容
本内容来源于用户推荐转载，旨在分享知识与观点，如有侵权请联系删除 联系邮箱 media@ilingban.com
Developers and business users often need to access specialized applications and tools to help them work faster, more productively, and more resourcefully. At the same time, cloud administrators and IT, finance (FinOps), and procurement managers need to maintain governance and control over the software and technologies in use to mitigate “shadow IT”. This includes ensuring that the technology solutions being used are within cost, security, and compliance bounds of the organization’s procurement and IT security policies. This is especially relevant for large enterprises, which often have hundreds of Google Cloud projects, or organizations in highly regulated industries such as financial services, healthcare, and the public sector.
Today, we are pleased to announce the general availability of the Google Cloud Private Marketplace, a capability within the Google Cloud Marketplace that lets cloud administrators curate a collection of vetted products that’s specific to their organization. With Private Marketplace, organizations maintain governance and control costs, helping to ensure that only approved Google Cloud Marketplace solutions can be procured and deployed by end users.
In this blog, we’ll highlight some key features of the Private Marketplace and how they can help improve control over costs, governance, and security; adapt to changing organizational structures and needs; while at the same time empower end users to discover the right solutions.
Enhance compliance and security posture with product-level access control
With Google Cloud Private Marketplace, cloud administrators can manage and curate collections of trusted products. Administrators who have audited and approved products based on organizational IT security, privacy and procurement policies can share these collections with projects and folders in their Google Cloud environment. Only curated collections of third-party Private Marketplace solutions are discoverable and deployable by end-users, giving administrators control over which products can be used. These controls let administrators provide access to only the approved products in the Google Cloud Marketplace.
This is helpful in the following scenarios:
-
FinOps teams can use the Private Marketplace to minimize shadow IT and help better control costs by allowing business users to only procure approved Marketplace products.
-
IT, security, and compliance teams can ensure that developers and business users only deploy products in their organizations’ projects that follow internal IT security policies.
-
Procurement and legal teams can enforce that the terms and conditions of the software and solutions that the organization uses meet contractual terms of service with third-party vendors.
Empower end users to discover new products while maintaining control
With Private Marketplace, developers and business users in your organization can clearly see in their collection which Google Cloud Marketplace products are pre-approved for use in their projects for enhanced product discovery.
Additionally, to help ensure that governance controls do not impede productivity or efficiency, administrators can turn on the Request Product feature, also generally available. With it, cloud administrators can give developers the ability to safely and securely discover and request new Marketplace products. Product requests, such as for a SaaS solution, can be routed to an organizations’ procurement, billing or governance administrator for approval if it isn’t already in the Private Marketplace.
Administrators can review these requests and notify the requestor via email about the decision. Administrators can also add notes to provide additional context and instructions on how to access and use the requested product.
