--- title: Secure cloud operations with Azure Cloud Adoption Framework description: "Can satellite images increase both sustainability and profit? We partnered with @‌eLEAF to help Colombian sugarcane mills monitor 25,000 hectares of land using an app. This allows the mill manager to apply fertilizer only to the areas in need, resulting in significant environmental impact and large monthly savings for the mills.\nCheck out the full story." image: https://blogs.itility.nl/hubfs/Secure%20Cloud%20Operations.jpg --- [![itility](https://blogs.itility.nl/hubfs/blog/img/itility%20logo-01.png)](https://www.itility.nl) - Your industry - [Agriculture](https://www.itility.nl/agriculture) - [Energy](https://www.itility.nl/energy) - [Manufacturing](https://itility.nl/manufacturing) - Our expertise - [Business transformations](https://www.itility.nl/business-transformations) - [Software and data](https://www.itility.nl/software-development/) - [IT foundation](https://www.itility.nl/it-foundation) - [Managed services](https://www.itility.nl/managed-services) - [(Generative) AI](https://www.itility.nl/ai/) - [Who we are](https://www.itility.nl/who-we-are) - [Working at Itility](https://careers.itility.nl) - [About](https://itility.nl/about) - [About Itility](https://itility.nl/about) - [Offices](https://itility.nl/about#office-locations) - [Tech partners](https://itility.nl/tech-partners) - [Responsibility](https://itility.nl/responsibility) - [Contact](https://www.itility.nl/#contact) - Your industry - [Agriculture](https://www.itility.nl/agriculture) - [Energy](https://www.itility.nl/energy) - [Manufacturing](https://itility.nl/manufacturing) - Our expertise - [Business transformations](https://www.itility.nl/business-transformations) - [Software and data](https://www.itility.nl/software-development/) - [IT foundation](https://www.itility.nl/it-foundation) - [Managed services](https://www.itility.nl/managed-services) - [(Generative) AI](https://www.itility.nl/ai/) - [Who we are](https://www.itility.nl/who-we-are) - [Working at Itility](https://careers.itility.nl) - [About](https://itility.nl/about) - [About Itility](https://itility.nl/about) - [Offices](https://itility.nl/about#office-locations) - [Tech partners](https://itility.nl/tech-partners) - [Responsibility](https://itility.nl/responsibility) - [Contact](https://www.itility.nl/#contact) [![Picture of Guy Ariëns](https://blogs.itility.nl/hubfs/Guy%20Ari%C3%ABns%20rond.png)](https://blogs.itility.nl/en/author/guy-ariens?hsLang=en) Written by:   ## [Guy Ariëns](https://blogs.itility.nl/en/author/guy-ariens?hsLang=en) # Secure cloud operations with Azure Cloud Adoption Framework One of our European energy customers was looking for future-proof cloud operations. They adopted a ‘desired state management’ strategy early on in their cloud journey, acknowledging the need for security and control. But fast growth and acquisitions in preceding years led to a proliferation of policies and exemptions. To uphold a high level of security, several work-arounds were put in place. Which led to an unscalable situation.  Our solution was a redesign of the management group structure with a flat architecture, to prevent discrepancies and to implement automated compliance to guarantee a structural and scalable solution. We applied the Azure Cloud Adoption Framework with Azure EPAC (Enterprise Policy As Code). ### The main succes factor: bringing people together Our first step was to connect with business stakeholders and engineers to understand their future needs and current issues. This gave us the insight to design a solution based on proven standards, that: \- facilitated efficient integration with on-premise infrastructure \- significantly reduced the lead time for new landing zones \- applied subscription vending \- allowed for sandboxing \- improved scalability and governance We then completed the list with security, compliancy and manageability requirements.  Considering all requirements and insights, we designed a solution based on the Azure Cloud Adoption Framework and included our best practices on code hygiene and migration.  As it was not possible to clean all policies in advance, it was necessary to also migrate existing policy structures to the new solution. Therefore, to minimize the potential impact to users, we chose a canary deployment strategy and the use of EPAC to translate policies into code. Policy cleaning then continued during the project, using EPAC. An important benefit of EPAC is that it checks for obsolete policies and exemptions. Combined with a canary deployment in which code is tested and deployed step by step, our migration strategy significantly reduced the risk of business impact. EPAC also provides version control, makes code searchable and tracks changes in code. These features improve the manageability of the solution as the resulting transparency prevents the creation of unnecessary policies or obsolete exemptions. Which in turn speeds up the creation of new landing zones.  The mentioned transparency, combined with the implementation of a 6-eye principle on policy changes, makes the solution easily auditable which helps the work of external auditors as well.   ### Fully cleaned, scalable and secure In the end, over 25 sets were reviewed and revised, 400 policies were updated, and 1200 exemptions were reviewed and either migrated or removed. The new structure ensures compliance and eliminates unnecessary restrictions. The flatness of the group structure, combined with automation of compliance, makes the solution transparent and trustworthy supporting the platform team to have more control over their environment. And allowing the operation manager to also have a good night’s sleep.  [![back](https://blogs.itility.nl/hubfs/blog/img/button_back.png)Back to overview](https://blogs.itility.nl?hsLang=en) Tags: [Business consulting](https://blogs.itility.nl/en/tag/business-consulting)   |   [Cloud Infra](https://blogs.itility.nl/en/tag/cloud-infra)   |   [Security](https://blogs.itility.nl/en/tag/security)   |   [IT modernization](https://blogs.itility.nl/en/tag/it-modernization)   |   [Network Segmentation](https://blogs.itility.nl/en/tag/network-segmentation) Share: - [![](https://blogs.itility.nl/hubfs/blog/img/linked-in-02.png)](https://www.linkedin.com/shareArticle?mini=true&url=https://blogs.itility.nl/en/secure-cloud-operations-azure&title=Secure%20cloud%20operations%20with%20Azure%20Cloud%20Adoption%20Framework&source=Itility) - [![](https://blogs.itility.nl/hubfs/blog/img/socmedicons-04.png)](https://www.facebook.com/sharer/sharer.php?u=https://blogs.itility.nl/en/secure-cloud-operations-azure&t=Secure%20cloud%20operations%20with%20Azure%20Cloud%20Adoption%20Framework) # Author's picks [![](https://blogs.itility.nl/hs-fs/hubfs/Blog%20-Taking%20manual%20work%20out%20of%20invoice%20processing%20with%20AI.png?width=345)](https://blogs.itility.nl/en/taking-manual-work-out-of-invoice-processing-with-ai?hsLang=en) [(Gen) AI](https://blogs.itility.nl/en/topic/gen-ai?hsLang=en#b-overview)   |   [FinOps](https://blogs.itility.nl/en/topic/finops?hsLang=en#b-overview)   |   [Industry Solutions](https://blogs.itility.nl/en/topic/industry-solutions?hsLang=en#b-overview) ## [Taking manual work out of invoice processing with AI](https://blogs.itility.nl/en/taking-manual-work-out-of-invoice-processing-with-ai?hsLang=en) [![](https://blogs.itility.nl/hs-fs/hubfs/BMAD-party-mode-on-1920x1080-1.png?width=345)](https://blogs.itility.nl/en/from-bmad-to-agents-to-skills?hsLang=en) [(Gen) AI](https://blogs.itility.nl/en/topic/gen-ai?hsLang=en#b-overview)   |   [AI engineering](https://blogs.itility.nl/en/topic/ai-engineering?hsLang=en#b-overview) ## [From BMAD to agents to skills: Why we are building reusable engineering knowledge](https://blogs.itility.nl/en/from-bmad-to-agents-to-skills?hsLang=en) [![](https://blogs.itility.nl/hs-fs/hubfs/48629250503_d19c551163_b-1.jpg?width=345)](https://blogs.itility.nl/en/itilian-in-the-spotlight-max-heezemans?hsLang=en) [Careers](https://blogs.itility.nl/en/topic/careers?hsLang=en#b-overview)   |   [Itility & Careers](https://blogs.itility.nl/en/topic/itility-careers?hsLang=en#b-overview) ## [Itilian in the Spotlight: Where ownership creates impact](https://blogs.itility.nl/en/itilian-in-the-spotlight-max-heezemans?hsLang=en) # Technology, Data, People [Eindhoven (HQ)](https://itility.nl/about#nl-office) [Flight Forum 3360](https://goo.gl/maps/eEgqhvCsQ2wBY3rs6) 5657 EW, Eindhoven The Netherlands [info@itility.nl](mailto:info@itility.nl) [+31 (0)88 00 46 100](tel:+31880046100) [San Diego](https://itility.nl/about#us-office) [13500 Evening Creek Dr N #120](https://maps.app.goo.gl/Z9wtjcQK6Jn8QGa88) San Diego, CA 92128 United States [info@us-itility.com](mailto:info@us-itility.com) [+1-858-325-0120](tel:+18583250120) [Austin](https://itility.nl/about#us-office)[106 E 6th St #900](https://maps.app.goo.gl/tfFfowbYtwzCfwFN8) Austin, TX 78701 United States [info@us-itility.com](mailto:info@us-itility.com) [+1-858-325-0120](tel:+18583250120) [Romania](https://itility.nl/about#romania-office) [Palas Campus Iași](https://maps.app.goo.gl/6KEC5iTi8RUtM1QTA) B2 Building, 6th Floor Romania [contact@itility.nl](mailto:contact@itility.nl) [+31 (0)88 00 46 100](tel:+31880046100) - [Linkedin](https://www.linkedin.com/company/itility) - [Facebook](https://nl-nl.facebook.com/itilitybv) - [YouTube](https://www.youtube.com/@itility-bv) - [Mail](mailto:info@itility.nl) © Copyright - Itility 2026 | [Cookie policy](https://www.itility.nl/cookie-policy) | [Privacy policy](https://www.itility.nl/privacy) [![Itility](https://blogs.itility.nl/hubfs/blog/img/itility%20logo-01.png)](https://itility.nl)