The other day, we talked to a prospective ParkMyCloud customer about how to protect his production servers. He had just started a trial of ParkMyCloud, and before he added additional users to his account, he had an important question: How can I keep my production servers safe from my end users accidentally parking them?
It’s a great question! Before you start shutting down your non-production resources for cost savings, it’s a good idea to protect your mission-critical production resources from being parked, which could wreak havoc on your applications — while some resources can be stopped, or “parked”, during off-hours, there are, of course, others that need to run 24×7.
Luckily, with ParkMyCloud’s policy engine, it’s straightforward and easy to protect your production resources. All you need to do is apply a “never park” policy so those resources cannot be scheduled or manually started/stopped.
Only users with the SuperAdmin role can create and manage policies, so if you’re the primary account holder, you don’t have to worry about end users changing these policies once they’re set up. Your production resources will be safe from being parked, so you can start parking and saving away.
Here’s how to create a policy for yourself. (If you don’t have an account yet, you can start a ParkMyCloud free trial and follow along.)
From the ParkMyCloud console:
- Go to the left sidebar and select “Policies” and “Create Policy”.
- Name your policy – let’s call it ‘Never Park’
- Input the criteria to identify your production resources – usually this will be by name or tag.
- Select “Restrict” as the action.
- From the Restrict dropdown menu, select “Never Park”. For this option, users can neither attach schedules nor manually start/stop resources.
You can also use policies to assign instances to teams based on their tags or names. If you set up your teams in advance, this is a simple way to automatically control which users have access to which instances. So in this example you could set up a “Production Team” and have all your production instances sort directly to this team. And as an admin you are able to create the permissions for who has access to this team, adding another layer of protection.
Save your policy to protect your production resources from being parked and you’re all set!
There are a few other reasons you may want to use policies on your resources. For example, you can use policies to automatically attach or detach schedules to instances, again based on credential, location, name, type, or tag. So, for example, you could set all of your instances tagged “development” to have the “Up M-F, 8 am – 5 pm” schedule automatically applied.
You can also restrict resources with parking schedules to “snooze only”. That is, end users can only snooze the attached schedule, they cannot edit, detach or change it.
The policy engine is a powerful feature that can help you automate many of the common actions within ParkMyCloud, ensuring that you maximize your cost savings with the least amount of effort.
If you have any additional questions about using policies, please comment below or contact us!