Resource management method based on cloud service and cloud platform

Abstract

The invention discloses a resource management method based on cloud service and a cloud platform, and belongs to the technical field of cloud service. The method comprises the following steps: a cloud service system provides a resource authentication request for a resource management system based on a cloud service request, wherein the resource authentication request indicates a target user and a target resource required to be used by a cloud service indicated by the cloud service request; the resource management system obtains a sharing margin of the target resource based on the resource authentication request, the sharing margin indicates the quantity of unused resources in a sharing limit of the target resource, and the sharing limit is the total quantity of the target resource shared by a resource purchaser of the target resource to the target user; the resource management system instructs the cloud service system to use the target resource when the sharing allowance can meet the cloud service, otherwise instructs the cloud service system to prohibit use of the target resource; and the cloud service system responds to the cloud service request based on the indication of the resource management system. According to the invention, the resource purchaser can normally use the shared resources.

Description

Technical Field

[0001] The present application relates to the field of cloud service technology, and in particular to a resource management method and cloud platform based on cloud services. Background Art

[0002] In order to meet the needs of cloud customers for resource sharing capabilities, the cloud platform can provide users with resource sharing services. Through the resource sharing service, resource buyers can share the resources they purchased with other accounts, and the accounts with shared resources can access the shared resources. Resource buyers can also share resources with organizations or organizational units, and all accounts under the organization or organizational unit can access the shared resources.

[0003] Currently, the resource sharing function can provide sharing permissions for different types of resources. When a resource sharer accesses a shared resource, he or she can only access the resource within the scope of his or her permissions. This ensures that the shared resource meets the business needs of the resource sharer while preventing the resource sharer from taking unexpected actions on the shared resource.

[0004] However, this sharing method still has some problems, so it is urgent to propose a more complete resource sharing strategy. Summary of the invention

[0005] This application provides a resource management method and cloud platform based on cloud services. This application limits the total amount of resources used by sharers, ensuring that resource buyers can use shared resources normally. The technical solutions provided by this application are as follows:

[0006] In a first aspect, the present application provides a resource management method based on cloud services. The method is executed by a cloud platform. The cloud platform includes a cloud service system and a resource management system. The cloud service system is used to provide cloud services to users based on the resources owned by the cloud platform. The resource management system is used to manage the resources owned by the cloud platform. The method includes: the cloud service system receives a cloud service request sent by a target user, and provides a resource authentication request to the resource management system based on the cloud service request, the cloud service request instructs the cloud service system to provide cloud services to the target user, and the resource authentication request indicates the target resources that the target user and the cloud service need to use; the resource management system obtains the shared margin of the target resource based on the resource authentication request, the shared margin indicates the amount of unused resources in the shared quota of the target resource, and the shared quota is the total amount of the target resource shared by the resource purchaser of the target resource to the target user; the resource management system instructs the cloud service system to use the target resource when the shared margin can satisfy the cloud service, and instructs the cloud service system to prohibit the use of the target resource when the shared margin cannot satisfy the cloud service; the cloud service system responds to the cloud service request based on the instruction of the resource management system.

[0007] In this way, the resource management system can control the usage quota of shared resources by resource sharers, only allowing resource sharers to use the shared quota of resources, limiting the total amount used by resource sharers, and preventing resource sharers from using shared resources without restriction, thereby avoiding resources being exhausted by resource sharers and ensuring that resource buyers can use shared resources normally.

[0008] The resource purchaser can share the purchased resources with other users, organizations or organization members for use, and the shared resources are called shared resources. The following is explained by taking the shared resource as the target resource as an example. In an embodiment of the present application, the resource purchaser can configure the sharing amount of the target resource. In a possible implementation, before the resource management system obtains the sharing margin of the target resource based on the resource authentication request, the method also includes: the resource management system receives a sharing configuration request, configures the target resource based on the sharing configuration request, and the sharing configuration request indicates the sharing amount of the target resource.

[0009] In another implementation, the sharing configuration request also indicates the respective sharing quotas of multiple resource sharees. That is, the resource purchaser specifies the sharing quotas of multiple sharees respectively. Compared with the implementation in which the sharing configuration request only indicates the sharing quota of the target resource, the second implementation limits the sharing quota that each resource sharee can use, and can prevent the resource sharee from using the shared resources without restriction. It can not only ensure that the resource purchaser can use the unshared quota, but also ensure that each resource sharee can use its own shared quota.

[0010] In another implementation, the sharing configuration request also indicates the sharing quota of each of the multiple operation behaviors. That is, the resource purchaser specifies the sharing quota of the multiple operation behaviors respectively. Compared with the first implementation, the third implementation limits the sharing quota that can be used for each operation behavior, which can prevent the resource sharer from using the shared resources without restriction by the same operation behavior. It can not only ensure that the resource purchaser can use the unshared quota, but also ensure that various operation behaviors can use their shared quota, thereby ensuring the functional realization of multiple operation behaviors. Among them, the operation behavior can be an operation that triggers the cloud service system to provide related functions of the cloud service.

[0011] At this time, obtaining the sharing balance of the target resource includes: obtaining the target operation behavior that uses the target resource in the cloud service; and obtaining the sharing balance of the target resource shared by the target operation behavior based on the sharing quota of the target operation behavior.

[0012] Optionally, the target operation behavior may be provided by the cloud service system to the resource management system. For example, the resource authentication request also indicates the target operation behavior.

[0013] In another implementation, the sharing configuration request further indicates the usage conditions applicable to the sharing quota. That is, the resource purchaser specifies the conditions that need to be met for using the shared resource. The usage condition may be a network condition, such as allowing the shared resource to be used only when the network is secure. For another example, the usage condition may be a resource status condition, such as allowing the shared resource to be used only when the shared resource is idle.

[0014] At this time, obtaining the shared balance of the target resource includes: obtaining the target usage conditions for the cloud service to use the target resource; and obtaining the shared balance of the target resource under the target usage conditions based on the sharing quota of the target usage conditions.

[0015] In the second aspect, the present application provides a cloud platform. The cloud platform includes a cloud service system and a resource management system. The cloud service system is used to provide cloud services to users based on the resources owned by the cloud platform. The resource management system is used to manage the resources owned by the cloud platform. Among them, the cloud service system is specifically used to receive a cloud service request sent by a target user, and provide a resource authentication request to the resource management system based on the cloud service request. The cloud service request instructs the cloud service system to provide cloud services to the target user, and the resource authentication request indicates the target resources that the target user and the cloud service need to use; the resource management system is specifically used to obtain the shared balance of the target resource based on the resource authentication request, and the shared balance indicates the amount of unused resources in the shared quota of the target resource. The shared quota is the total amount of the target resource shared by the resource purchaser of the target resource to the target user; the resource management system is also specifically used to instruct the cloud service system to use the target resource when the shared balance can satisfy the cloud service, and to instruct the cloud service system to prohibit the use of the target resource when the shared balance cannot satisfy the cloud service; the cloud service system is also specifically used to respond to the cloud service request based on the instruction of the resource management system.

[0016] Optionally, the resource management system is further specifically configured to receive a sharing configuration request, and configure the target resource based on the sharing configuration request, wherein the sharing configuration request indicates a sharing quota of the target resource.

[0017] Optionally, the sharing configuration request further indicates the respective sharing quotas of the multiple resource sharers.

[0018] Optionally, the sharing configuration request also indicates the sharing quotas of the various operation behaviors.

[0019] Optionally, the resource management system is further specifically used to: obtain a target operation behavior that uses target resources in a cloud service; and obtain a sharing margin of the target operation behavior that shares the target resources based on a sharing quota of the target operation behavior.

[0020] Optionally, the resource authentication request also indicates a target operation behavior.

[0021] Optionally, the sharing configuration request also indicates usage conditions to which the sharing quota applies.

[0022] Optionally, the resource management system is further specifically used to: obtain target usage conditions for the cloud service to use the target resources; and based on the sharing quota of the target usage conditions, obtain the sharing margin of the target resources under the target usage conditions.

[0023] In a third aspect, the present application provides a resource management method based on cloud services. The method is executed by a resource management system of a cloud platform. The cloud platform also includes a cloud service system. The cloud service system is used to provide cloud services to users based on the resources owned by the cloud platform. The resource management system is used to manage the resources owned by the cloud platform. The method includes: the resource management system receives a resource authentication request sent by the cloud service system, the resource authentication request indicates the target user who uses the cloud service provided by the cloud service system and the target resource that the cloud service needs to use; the resource management system obtains the shared margin of the target resource based on the resource authentication request, the shared margin indicates the amount of unused resources in the shared quota of the target resource, and the shared quota is the total amount of the target resource shared by the resource purchaser of the target resource to the target user; when the shared margin can satisfy the cloud service, the resource management system instructs the cloud service system to use the target resource so that the cloud service system can provide cloud services to the target user based on the target resource, and when the shared margin cannot satisfy the cloud service, the resource management system instructs the cloud service system to prohibit the use of the target resource.

[0024] Optionally, before the resource management system obtains the sharing margin of the target resource based on the resource authentication request, the method further includes: the resource management system receives a sharing configuration request, and configures the target resource based on the sharing configuration request, wherein the sharing configuration request indicates the sharing amount of the target resource.

[0025] Optionally, the sharing configuration request further indicates the respective sharing quotas of the multiple resource sharers.

[0026] Optionally, the sharing configuration request also indicates the sharing quotas of the various operation behaviors.

[0027] Optionally, obtaining the sharing balance of the target resource includes: obtaining a target operation behavior that uses the target resource in the cloud service; and obtaining a sharing balance of the target resource shared by the target operation behavior based on the sharing quota of the target operation behavior.

[0028] Optionally, the resource authentication request also indicates a target operation behavior.

[0029] Optionally, the sharing configuration request also indicates usage conditions to which the sharing quota applies.

[0030] Optionally, obtaining the shared balance of the target resource includes: obtaining a target usage condition for the cloud service to use the target resource; and obtaining the shared balance of the target resource under the target usage condition based on the sharing quota of the target usage condition.

[0031] In a fourth aspect, the present application provides a resource management system based on cloud services. The resource management system is deployed in a cloud platform. The cloud platform also includes a cloud service system. The cloud service system is used to provide cloud services to users based on the resources owned by the cloud platform. The resource management system is used to manage the resources owned by the cloud platform. The resource management system includes: an interaction module, which is used to receive a resource authentication request sent by the cloud service system, the resource authentication request indicates the target user who uses the cloud service provided by the cloud service system and the target resource that the cloud service needs to use; a processing module, which is used to obtain the shared balance of the target resource based on the resource authentication request, the shared balance indicates the amount of unused resources in the shared quota of the target resource, and the shared quota is the total amount of the target resource shared by the resource purchaser of the target resource to the target user; the interaction module is also used to instruct the cloud service system to use the target resource when the shared balance can satisfy the cloud service, so that the cloud service system can provide cloud services to the target user based on the target resource, and when the shared balance cannot satisfy the cloud service, instruct the cloud service system to prohibit the use of the target resource.

[0032] Optionally, the interaction module is further used to: receive a sharing configuration request, and configure the target resource based on the sharing configuration request, wherein the sharing configuration request indicates a sharing quota of the target resource.

[0033] Optionally, the sharing configuration request further indicates the respective sharing quotas of the multiple resource sharers.

[0034] Optionally, the sharing configuration request also indicates the sharing quotas of the various operation behaviors.

[0035] Optionally, the processing module is specifically used to: obtain a target operation behavior that uses target resources in the cloud service; and based on a sharing quota of the target operation behavior, obtain a sharing margin of the target resource shared by the target operation behavior.

[0036] Optionally, the resource authentication request also indicates a target operation behavior.

[0037] Optionally, the sharing configuration request also indicates usage conditions to which the sharing quota applies.

[0038] Optionally, the processing module is specifically used to: obtain target usage conditions for the cloud service to use the target resources; and obtain the sharing balance of the target resources under the target usage conditions based on the sharing quota of the target usage conditions.

[0039] In a fifth aspect, the present application provides a computing device including a memory and a processor, wherein the memory stores program instructions, and the processor runs the program instructions to execute the method provided in the first aspect of the present application and any possible implementation thereof.

[0040] In a sixth aspect, the present application provides a computing device cluster, including multiple computing devices, the multiple computing devices including multiple processors and multiple memories, the multiple memories storing program instructions, and the multiple processors running the program instructions, so that the computing device cluster executes the method provided in the first aspect of the present application and any possible implementation thereof.

[0041] In the seventh aspect, the present application provides a computer-readable storage medium, which is a non-volatile computer-readable storage medium, and the computer-readable storage medium includes program instructions. When the program instructions are executed on a computing device, the computing device executes the method provided in the first aspect of the present application and any possible implementation thereof.

[0042] In an eighth aspect, the present application provides a computer program product comprising instructions, which, when executed on a computer, enables the computer to execute the method provided in the first aspect of the present application and any possible implementation thereof. BRIEF DESCRIPTION OF THE DRAWINGS

[0043] Figure 1 is a schematic diagram of a shared resource provided in an embodiment of the present application;

[0044] Figure 2 It is a structural diagram of an implementation scenario involved in a resource management method provided in an embodiment of the present application;

[0045] Figure 3 It is a structural diagram of an implementation scenario involved in another resource management method provided in an embodiment of the present application;

[0046] Figure 4 is a flow chart of a resource management method provided by an embodiment of the present application;

[0047] Figure 5 A cloud service-based resource management method provided in the embodiment of the present application is applied to Figure 3 A schematic diagram of the process in the application scenario shown;

[0048] Figure 6 It is a schematic diagram of a sharing relationship when a sharing configuration request indicates a sharing quota of a target resource provided by an embodiment of the present application;

[0049] Figure 7 This is a schematic diagram of a shared quota shared by multiple resource sharers provided in an embodiment of the present application;

[0050] Figure 8 It is a schematic diagram of a sharing relationship when a sharing configuration request provided by an embodiment of the present application further indicates the respective sharing quotas of multiple resource sharers;

[0051] Fig. 9 This is a schematic diagram of a plurality of resource sharers enjoying respective sharing quotas provided in an embodiment of the present application;

[0052] Fig.10 is a schematic diagram of a resource management system provided in an embodiment of the present application;

[0053] Fig.11 is a schematic diagram of the structure of a computing device provided in an embodiment of the present application;

[0054] Fig.12 It is a structural diagram of a computing device cluster provided in an embodiment of the present application. DETAILED DESCRIPTION

[0055] In order to make the objectives, technical solutions and advantages of the present application clearer, the implementation methods of the present application will be further described in detail below with reference to the accompanying drawings.

[0056] In order to meet the needs of cloud customers for resource sharing capabilities, the cloud platform can provide users with resource sharing services. For example, resource access manager (RAM) service. Through the resource sharing service, resource buyers can share the resources they purchased with other accounts, and the accounts with shared resources can access the shared resources. Resource buyers can also share resources with organizations or organizational units, and all accounts under the organization or organizational unit can access the shared resources. Figure 1 As shown in the figure, account Acct-1 shares resources with organization OU-1 through the resource access management service. Accounts Acct-2 and Acct-3 under organization OU-1 can access the shared resources. The resource purchaser is also called the resource purchaser or resource sharer, which is the account that owns the resource. The account that is shared with the resource is also called the resource sharee or resource sharee.

[0057] Currently, the resource sharing function can provide sharing permissions for different types of resources. When a resource sharer accesses a shared resource, he or she can only access the resource within the scope of his or her permissions. This ensures that the shared resources meet the business needs of the resource sharer while preventing the resource sharer from taking unexpected actions on the shared resources.

[0058] For the permission control of shared resources, some cloud service providers provide a resource-based permission policy. The resource-based permission policy defines the operations that resource sharers are allowed to perform when accessing shared resources. When a resource buyer creates a resource share, the shared resource and the resource sharer are first determined, and the resource buyer specifies a permission policy for the resource. Generally, a permission policy includes an authorization effect, an action, and a condition. The authorization effect indicates whether to allow (allow) or deny (deny) the use of a resource. The action defines the resource use behavior of the resource sharer. Conditions are a protection measure for shared resources, which are used to limit sensitive operations of resource sharers on shared resources. For example, conditions define the conditions that need to be met to use resources, such as the network environment, to ensure that resources are used in a secure network environment. As shown below, the policy defines that the resource sharee in the resource sharing can perform ec2:GetIpamPoolAllocations and ec2:GetIpamPoolCidrs operations on the resource ec2:IpamPool. These operations are allowed only when the shared resource has a resource tag (ResourceTag) with a Tag-Key value of Owner and a Tag-Value value of Tom.

[0059]

[0060] Some cloud service providers also provide permission policies that include authorization effects, actions, resources, and conditions. They specify shared resources in the permission policies, but are essentially the same as the shared permissions mentioned above.

[0061] There are some similar permission policies, the difference is that this permission policy only supports authorization effects and actions, but does not support conditions.

[0062] However, no matter which permission strategy is used, the current permission strategy is a stateless permission mode. The use of shared resources is treated as a completely independent behavior. The permission strategy is only responsible for the current behavior and completely ignores the historical behavior. Therefore, the current existing sharing methods have some problems, and a more perfect resource sharing strategy is urgently needed.

[0063] The embodiment of the present application provides a resource management method based on cloud services. The method is executed by a cloud platform. The cloud platform includes a cloud service system and a resource management system. The cloud service system is used to provide cloud services to users based on the resources owned by the cloud platform. The resource management system is used to manage the resources owned by the cloud platform. The method includes: when the cloud service system needs to use the target resource, it provides a resource authentication request to the resource management system; then, the resource management system obtains the shared margin of the target resource based on the resource authentication request, and indicates whether the cloud service system can use the target resource according to whether the shared margin can meet the cloud service; then, the cloud service system responds to the cloud service request based on the instruction of the resource management system. Among them, the cloud service request indicates that the cloud service system provides cloud services to the target user. The resource authentication request indicates the target resource that the target user and the cloud service need to use. The shared margin indicates the amount of unused resources in the shared quota of the target resource. The shared quota is the total amount of the target resource shared by the resource purchaser of the target resource to the target user. That is, the shared quota is the quota shared by the resource purchaser of the target resource to the target user from the total quota purchased by the target resource.

[0064] In this way, the resource management system can control the usage quota of shared resources by resource sharers, only allowing resource sharers to use the shared quota of resources, limiting the total amount used by resource sharers, and preventing resource sharers from using shared resources without restriction, thereby avoiding resources being exhausted by resource sharers and ensuring that resource buyers can use shared resources normally.

[0065] This article provides a detailed introduction to the technical solution of the present application from multiple perspectives, including implementation scenarios, method flow, hardware devices, and software devices.

[0066] The following first describes the application scenarios of the embodiments of the present application with examples.

[0067] Figure 2 Schematic diagram of the implementation environment of a cloud service-based resource management method provided in the embodiment of the present application. Figure 2 As shown, the implementation environment includes: a cloud platform 1 and a client 2. A communication connection can be established between the cloud platform 1 and the client 2 through a network. Optionally, the network can be a local area network, the Internet, or other networks, which is not limited in the embodiments of the present application. Users (also referred to as tenants or cloud tenants) can interact with the cloud platform 1 through the client 2. For example, a user can send instructions and cloud service request information to the cloud platform 1 through the client 2. The cloud platform 1 is used to provide corresponding cloud services to users based on the information sent by the client 2 to the cloud platform 1. The cloud service can be provided as an independent cloud service or as an additional service to other cloud services, which is not specifically limited in the embodiments of the present application.

[0068] A large number of basic resources owned by the cloud service provider are deployed in the cloud platform 1, such as computing resources, storage resources, and network resources. For example, computing resources can be computing devices (such as servers, etc.) that can provide computing capabilities. Clients 2 can be computers, personal computers, laptops, mobile phones, smart phones, tablet computers, cloud hosts, portable mobile terminals, multimedia players, e-book readers, wearable devices, smart home appliances, artificial intelligence devices, smart wearable devices, smart car devices, or Internet of Things devices.

[0069] In the embodiment of the present application, the cloud platform 11 can be a cloud platform 1 of a central cloud, a cloud platform 1 of an edge cloud, or a cloud platform 1 including a central cloud and an edge cloud, and the embodiment of the present application does not specifically limit it. In addition, when the cloud platform 11 is a cloud platform 1 including a central cloud and an edge cloud, the resource management method based on cloud services provided in the embodiment of the present application can be partially executed by the cloud platform 1 deployed in the edge cloud and partially executed by the cloud platform 1 deployed in the central cloud. In addition, the cloud platform 1 can be a cloud platform of a private cloud or a public cloud, and the embodiment of the present application does not specifically limit it.

[0070] The cloud platform 1 can use the basic resources deployed in the cloud platform 1 to deploy a cloud system to provide corresponding cloud services to users using the cloud system. The cloud platform 1 includes: one or more cloud systems. Each cloud system can establish a communication connection between each other, and each cloud system can also establish a communication connection with a network system outside the cloud platform 1. The cloud system can be implemented by one or more devices such as a physical machine, a bare metal server, a cloud server, a virtual machine or a container.

[0071] For example, Figure 2 As shown, the cloud platform 1 includes a cloud service system 11 and a resource management system 12. The cloud service system 11 is used to provide cloud services to users based on the resources owned by the cloud platform 1. In the embodiment of the present application, the cloud service system 11 can be a general term for a system used by the cloud platform 1 to provide a variety of cloud services that the cloud platform 1 can provide. Alternatively, the cloud platform 1 includes multiple cloud service systems 11, each of which is used to provide a specific cloud service. For example, some cloud service systems 11 provide database cloud services, and some cloud service systems 11 provide storage cloud services, etc.

[0072] The resource management system 12 is used to manage the resources owned by the cloud platform 1. For example, the resource management system 12 is used to schedule the resources owned by the cloud platform 1, maintain the shared information of the resources, and configure the shared resources based on the resource sharing permission policy. For example, the resource management system 12 is used to receive a user's cloud service purchase request (also called a purchase request), allocate resources to the user based on the cloud service purchase request, and use the resources to provide the user with corresponding cloud services. For another example, the resource management system 12 is used to receive a configuration instruction provided by the user, and configure the resources purchased by the user based on the configuration instruction.

[0073] In an embodiment of the present application, after the cloud service system 11 receives the cloud service request sent by the client 2, it is necessary to first provide a resource authentication request to the resource management system based on the cloud service request. After receiving the resource authentication request, the resource management system 12 obtains the shared margin of the target resource indicated by the resource authentication request, and then indicates whether the cloud service system 11 can use the target resource based on whether the shared margin can satisfy the cloud service. Then, the cloud service system 11 responds to the cloud service request based on the instruction of the resource management system. For example, when the resource management system 12 instructs the cloud service system 11 to use the target resource, the cloud service system 11 provides the corresponding cloud service based on the instruction. When the resource management system 12 instructs the cloud service system 11 to prohibit the use of the target resource, the cloud service system 11 refuses to provide the corresponding cloud service based on the instruction.

[0074] In one implementation, the cloud platform 1 can be divided into an operation and maintenance management area and a cloud service area according to its functions. At this time, the resource management system 12 can be deployed in the operation and maintenance management area, and the cloud service system 11 can be deployed in the cloud service area. Among them, the resources in the operation and maintenance management area are used to manage the resources in the cloud service area. For example, the resources in the operation and maintenance management area are used to create a cloud system based on the resources in the cloud service area. The resources in the cloud service area are used to provide cloud services to users. It should be noted that the cloud platform 1 can also include other functional areas. The above description that the cloud platform 1 includes an operation and maintenance management area and a cloud service area is only an example and is not used to limit the functions of the cloud platform 1.

[0075] Alternatively, if Figure 3 As shown, the resource management system 12 may include a management unit 121 and an authentication unit 122. In one implementation, the functions of the resource management system 12 described above can be implemented through the collaboration of the management unit 121 and the authentication unit 122. For example, the management unit 121 is used to configure resources and manage resource usage. The authentication unit 122 is used to receive a resource authentication request, send a query request to the management unit 121, to query the shared margin of the target resource indicated by the resource authentication request, and indicate whether the cloud service system 11 can use the target resource based on whether the shared margin can meet the cloud service.

[0076] In addition, since resource buyers can also share resources with organizations or organizational units, such as Figure 3 As shown, the cloud platform 1 also includes an organization management system 13. The organization management system 13 is used to maintain organization information. For example, when the resource management system 12 receives a resource authentication request indicating that a user needs to use shared resources, the organization management system 13 can query whether the user is a member of the organization, and provide the resource management system 12 with the result of whether the user is a member of the organization, so that the resource management system 12 can determine the shared margin corresponding to the user according to the result.

[0077] In one implementation, the cloud service-based resource management method provided in the embodiment of the present application can be implemented by running an executable program on a computing device in the cloud platform 1. For example, the functions of the resource management system 12 in the cloud service-based resource management method can be presented in the form of an application installation package. After the computing device in the cloud platform 1 installs the application installation package, the relevant functions of the resource management system 12 can be implemented by running the executable program therein.

[0078] It should be understood that the above content is an exemplary description of the application scenario of the resource management method based on cloud services provided in the embodiment of the present application, and does not constitute a limitation on the application scenario of the resource management method based on cloud services. It is known to those skilled in the art that as business needs change, its application scenario can be adjusted according to application needs, and the embodiment of the present application does not list them one by one. As an example, the idea of ​​the resource management method based on cloud services provided in the embodiment of the present application can also be applied to other sharing scenarios to ensure that resource buyers can use shared resources normally.

[0079] The following is an explanation of the resource management method based on cloud services provided in the embodiment of the present application. The method is executed by a cloud platform. The cloud platform includes a cloud service system and a resource management system. The cloud service system is used to provide cloud services to users based on the resources owned by the cloud platform. The resource management system is used to manage the resources owned by the cloud platform. Figure 4 As shown, the cloud service-based resource management method 400 includes the following steps:

[0080] Step 401: The resource management system receives a sharing configuration request and configures a target resource based on the sharing configuration request. The sharing configuration request indicates a sharing amount of the target resource.

[0081] The resource purchaser can share the resources he purchased with other users, organizations or organization members for use, and the shared resources are called shared resources. The following is an example of a shared resource as a target resource. In an embodiment of the present application, the resource purchaser can configure the sharing quota of the target resource. The sharing quota is the total amount of the target resource shared by the resource purchaser to others for use. In one implementation, the quota of the resource can be optionally measured by the number of times, that is, the sharing quota of the resource is the maximum number of times the resource can be shared. Alternatively, the quota of the resource can also be measured according to a quantitative value. For example, assuming that the shared resource is a bandwidth resource, its quota is the maximum bandwidth value that can be shared. When the user needs to configure the sharing quota of the target resource, a sharing configuration request can be sent to the resource management system through the client used by the user. After receiving the sharing configuration request, the resource management system configures the sharing quota of the target resource based on the sharing configuration request. Among them, the resource management system configures the sharing quota of the target resource including: recording the sharing quota, and taking into effect a policy for managing the target resource based on the sharing quota. The strategy for managing the target resource based on the sharing quota may include: when the resource sharer wants to use the target resource, if the unused resource amount in the sharing quota of the target resource can meet the needs of the resource sharer, the resource sharer is allowed to use the target resource; if the unused resource amount in the sharing quota of the target resource cannot meet the needs of the resource sharer, the resource sharer is prohibited from using the target resource. For example, Figure 5 A cloud service-based resource management method provided in the embodiment of the present application is applied to Figure 3 The process diagram of the application scenario shown in the figure is as follows. Figure 5 As shown, the resource purchaser sends a sharing configuration request to the management unit 121, which indicates that the target resource is shared with the target user and indicates the sharing quota. After receiving the sharing configuration request, the management unit 121 takes effect the management policy based on the sharing configuration request.

[0082] Optionally, the sharing configuration request may be triggered when the resource purchaser indicates that the target resource is to be shared, that is, when the shared resource is created. At this time, the sharing configuration request may indicate that the target resource is to be shared and indicate the sharing amount of the target resource. Alternatively, the sharing configuration request may be triggered after the shared resource is created. For example, the resource purchaser first creates a shared resource, and only after the resource sharer uses part of the amount of the shared resource does the resource purchaser send a sharing configuration request to the resource management system.

[0083] There are many ways to configure the shared quota through the shared configuration request. The following uses the following implementation methods as examples to illustrate the implementation methods of configuring the shared quota:

[0084] In a first implementation, the sharing configuration request indicates the sharing quota of the target resource. When the shared resource is shared with multiple resource sharers, the multiple resource sharers share the sharing quota. Figure 6 As shown, the resource purchaser owns resource A and resource B. The resource purchaser instructs to share resource A with account A and account B through a first sharing configuration request, and instructs account A and account B to share the sharing quota of resource A. The resource purchaser instructs to share resource B with account A and account B through a second sharing configuration request, and instructs account A and account B to share the sharing quota of resource B. After receiving the first sharing configuration request, the resource management system configures account A and account B to have the authority to use resource A within the sharing quota based on the first sharing configuration request. After receiving the second sharing configuration request, the resource management system configures account A and account B to have the authority to use resource B within the sharing quota based on the second sharing configuration request.

[0085] The shared quota of the target resource is the portion of the total quota of the target resource owned by the buyer. This ensures that the resource buyer can use the unshared quota and can use the resource normally. For example, Figure 7 As shown, resource buyer A shares resources of resource type R with resource sharees B and resource sharees C through RAM. The resources of resource type R have a total usage quota of 100. Resource buyer A configures the sharing quota of resources of resource type R to 50 through a sharing configuration request to ensure that the resource buyer has at least a usage quota of 50 of the resource, thereby ensuring that the resource buyer can use the shared resources normally.

[0086] In the second implementation, the sharing configuration request also indicates the respective sharing quotas of multiple resource sharees. That is, the resource purchaser specifies the sharing quotas of multiple sharees respectively. Compared with the first implementation, the second implementation limits the sharing quota that each resource sharee can use, which can prevent the resource sharee from using the shared resources without restriction. It can not only ensure that the resource purchaser can use the unshared quota, but also ensure that each resource sharee can use its own shared quota.

[0087] Figure 8 FIG. 1 is a schematic diagram of a configuration based on a shared configuration request provided in an embodiment of the present application. Figure 8 As shown, the resource management system also configures the shared quotas of resource A and resource B of account A and account B respectively. Figure 7 It only limits the amount of resources that all resource sharers share, and does not limit the amount of resources that each resource sharer shares. Figure 7 , Figure 8On this basis, the sharing configuration request is further expanded. The sharing configuration request also indicates the sharing quotas of multiple resource sharers, which is a more fine-grained quota control method.

[0088] In the third implementation, the sharing configuration request also indicates the sharing quota of each of the multiple operation behaviors. That is, the resource purchaser specifies the sharing quota of the multiple operation behaviors respectively. Compared with the first implementation, the third implementation limits the sharing quota that can be used for each operation behavior, which can prevent the resource sharer from using the shared resources without restriction by the same operation behavior. It can not only ensure that the resource purchaser can use the unshared quota, but also ensure that various operation behaviors can use their shared quotas, and ensure the functional realization of multiple operation behaviors. Among them, the operation behavior can be an operation that triggers the cloud service system to provide the relevant functions of the cloud service. For example, for a database cloud service, a user can write data to the database based on the database cloud service, or read data from the database based on the database cloud service. Then the operation behavior can be the behavior of reading data from the database, which is used to trigger the cloud service system to feedback the data that needs to be read to the user. Alternatively, the operation behavior is the behavior of writing data to the database, which triggers the cloud service system to write data in the database based on the user's write instruction.

[0089] For example, Fig. 9 As shown, the resource type R has a total usage quota of 150. Resource buyer A indicates through a sharing configuration request: share resource R with resource sharees B and resource sharees C for use, and allow resource sharee B to perform operation behavior Action1 based on resource R 50 times, and allow resource sharee C to perform operation behavior Action2 based on resource R 50 times, thereby preventing resource sharees from executing certain sensitive behaviors without restriction.

[0090] In a fourth implementation, the sharing configuration request also indicates the usage conditions applicable to the sharing quota. That is, the resource purchaser specifies the conditions that need to be met to use the shared resources. The usage conditions may be selected as network conditions, such as allowing the use of shared resources only when the network is secure. For another example, the usage conditions may be selected as resource status conditions, such as allowing the use of shared resources only when the shared resources are idle. The above are only examples of the usage conditions, which can be adjusted according to application requirements and are not listed here one by one.

[0091] It should be noted that the above-mentioned implementation methods of the shared configuration request can be used individually or in combination. For example, the shared configuration request can also indicate the shared quotas of multiple operation behaviors of each of the multiple resource sharers. For another example, the shared configuration request can also indicate the usage conditions applicable to the shared quotas of each of the multiple resource sharers. For another example, the shared configuration request can also indicate the usage conditions applicable to the shared quotas of multiple operation behaviors of each of the multiple resource sharers. In addition, the above-mentioned implementation methods of the shared configuration request can also adjust the implementation methods based on the application requirements, and the embodiments of the present application do not specifically limit them.

[0092] Step 402: The cloud service system receives a cloud service request sent by a target user, where the cloud service request instructs the cloud service system to provide cloud services to the target user.

[0093] When the target user needs the cloud service system to provide cloud services to him, he can send a cloud service request to the cloud service system through the client used by the target user to instruct the cloud service system to provide cloud services to the target user. In one implementation, the cloud service system provides cloud services to users in response to the user's operation behavior. The cloud service request carries the target user's target operation behavior indication information, so that the cloud service system responds based on the target operation behavior, thereby providing the user with the corresponding cloud service.

[0094] Step 403: The cloud service system provides a resource authentication request to the resource management system based on the cloud service request. The resource authentication request indicates the target user and the target resources that the cloud service needs to use.

[0095] After receiving the cloud service request sent by the target user, the cloud service system can determine the target resource required to implement the cloud service indicated by the cloud service request based on the cloud service request, and provide a resource authentication request to the resource management system so that the resource management system can determine whether the target user can use the target resource based on the target user and target resource indicated in the resource authentication request. Figure 5 As shown, after receiving the cloud service request sent by the target user, the cloud service system 11 sends a resource authentication request to the authentication unit 122 based on the cloud service request. The resource authentication request carries the identification information of the target user, the indication information of the target operation behavior and the indication information of the target resource.

[0096] According to the previous description, the sharing configuration request can not only indicate the sharing quota of the target resource that all resource sharers can share, but also indicate the sharing quota at a finer granularity. Therefore, the resource authentication request can also indicate the relevant information of the finer granularity, so that the resource management system can determine whether the target user can use the target resource based on the relevant information of the fine granularity. The following takes the several granularities listed in step 401 as an example to illustrate the information that the resource authentication request needs to carry. For example, when the sharing configuration request also indicates the sharing quota of each of the multiple operation behaviors, the resource authentication request also carries the indication information of the target operation behavior, so that the resource management system can determine whether the target user can use the target resource to realize the cloud service corresponding to the target operation behavior. When the sharing configuration request also indicates the usage conditions applicable to the sharing quota, the resource authentication request also carries the target usage conditions that the target user expects to use the target resource, so that the resource management system can determine whether the target user can use the target resource under the target usage conditions to realize the corresponding cloud service.

[0097] Step 404: The resource management system obtains the sharing margin of the target resource based on the resource authentication request. The sharing margin indicates the unused resource amount in the sharing quota of the target resource. The sharing quota is the total amount of the target resource shared by the resource purchaser of the target resource with the target user.

[0098] After the resource management system receives the resource authentication request sent by the cloud service system, it first determines the target user who needs to use the shared resources and the target resources that need to be used based on the resource authentication request, and then determines whether the target user has the sharing permission of the target resource. If the target user has the sharing permission of the target resource, the resource management system obtains the sharing balance of the target resource.

[0099] According to the above description, the sharing configuration request can indicate the sharing quota at different granularities. For different granularities, the resource management system obtains the sharing margin of the target resource in different ways. The following uses several granularities listed in step 401 as examples to illustrate the implementation of obtaining the sharing margin of the target resource.

[0100] In the first implementation method, when the sharing configuration request indicates that all resource sharers can share the sharing quota of the target resource, the resource management system first obtains the used quota of the target resource by all resource sharers and resource buyers of the target resource, and then obtains the sharing balance of the target resource based on the sharing quota and the used quota.

[0101] In the second implementation method, when the sharing configuration request also indicates the sharing quotas of multiple resource sharers, the resource management system first obtains the used quota of the target resource used by the target user, and then obtains the sharing balance of the target user for the target resource based on the sharing quota of the target user and the used quota.

[0102] In a third implementation, when the sharing configuration request also indicates the sharing quotas of multiple operation behaviors, the resource management system also determines the target operation behavior that needs to use the target resource based on the resource authentication request, and when the target operation behavior has the sharing authority of the target resource, obtains the used quota of the target resource used by the target operation behavior, and then obtains the sharing balance of the target resource for the target operation behavior based on the sharing quota of the target operation behavior and the used quota.

[0103] In a fourth implementation, when the sharing configuration request also indicates the usage conditions applicable to the sharing quota, the resource management system also determines the target usage conditions under which the target user expects to use the target resource based on the resource authentication request, and when the target usage conditions meet the usage conditions applicable to the sharing quota, obtains the used quota of the target resource under the target usage conditions, and then obtains the sharing balance of the target resource under the target usage conditions based on the sharing quota of the target usage conditions and the used quota.

[0104] For example, Figure 5 As shown, after the authentication unit 122 receives the resource authentication request, it first determines the target user who needs to use the shared resource and the target resource that needs to be used based on the resource authentication request, and then determines whether the target user has the sharing permission for the target resource. When the target user has the sharing permission for the target resource, a query request is sent to the management unit 121. The management unit 121 is used to obtain the sharing margin of the target resource based on the above implementation method, and provide the sharing margin to the authentication 122. When the target user does not have the sharing permission for the target resource, the target user is instructed to prohibit the use of the target resource. It should be noted that when the resources managed by the resource management system are shared with organizations and / or organizational units, in the process of executing step 404, it is also necessary to query whether the target user is a member of the organization or organizational unit. When the target user is a member of an organization or an organizational unit, it is determined whether the organization or organizational unit has the sharing permission for the target resource. When the organization or organizational unit has the sharing permission for the target resource, the target user's sharing margin for the target resource is obtained. As shown Figure 5 As shown, after receiving the query request, the management unit 121 sends a query request to the organization management system 13 to determine whether the target user is a member of the organization or the organization unit. Only when the target user is a member of the organization or the organization unit, the shared margin of the target resource is obtained.

[0105] Step 405: When the shared margin can satisfy the cloud service, the resource management system instructs the cloud service system to use the target resource; when the shared margin cannot satisfy the cloud service, the resource management system instructs the cloud service system to prohibit the use of the target resource.

[0106] After the resource management system obtains the shared margin of the target resource, it determines whether the shared margin can satisfy the cloud service based on the shared margin, and instructs the cloud service system to use the target resource when the shared margin can satisfy the cloud service, and instructs the cloud service system to prohibit the use of the target resource when the shared margin cannot satisfy the cloud service. In one implementation, when the amount of resources is measured by the number of times, if the shared margin of the target user is not 0, then the shared margin can satisfy the cloud service, and if the shared margin of the target user is 0, then the shared margin cannot satisfy the cloud service. When the amount of resources is measured by quantitative value, the resource management system also needs to obtain the number of resources that the cloud service is expected to use. When the shared margin is greater than or equal to the number of resources expected to be used, the shared margin can satisfy the cloud service, and when the shared margin is less than the number of resources expected to be used, the shared margin cannot satisfy the cloud service. Among them, instructing the cloud service system to use or prohibit the use of target resources means instructing the cloud service system to use or prohibit the use of target resources to provide the target user with the cloud service requested by the target user. For example, such as Figure 5 As shown, after the authentication unit 122 obtains the shared margin of the target resource, it can determine whether the shared margin can satisfy the cloud service based on the shared margin, and when the shared margin can satisfy the cloud service, instruct the cloud service system 11 to use the target resource; when the shared margin cannot satisfy the cloud service, instruct the cloud service system 11 to prohibit the use of the target resource.

[0107] It should be noted that in the above description, judging whether the shared resource can be used by comparing the shared margin of the shared resource with the resource quota required by the cloud service is an example method for judging whether the shared resource can be used. A person skilled in the art will know that based on the idea, the implementation method can also be adjusted. For example, the used quota of the shared resource can also be obtained, and then judging whether the shared resource can be used based on the used quota and the quota required for the cloud service requested by the target user.

[0108] Step 406: The cloud service system responds to the cloud service request based on the instruction of the resource management system.

[0109] After the cloud service system receives the instruction from the resource management system, it needs to respond to the cloud service request based on the instruction. For example, when the resource management system instructs the cloud service system to use the target resource, the cloud service system provides the corresponding cloud service based on the instruction, and feeds back a response of successful request to the target user. When the resource management system instructs the cloud service system to prohibit the use of the target resource, the cloud service system refuses to provide the corresponding cloud service to the target user based on the instruction, and feeds back a response of failed request to the target user. After the cloud service system provides cloud service based on the target resource, the management unit 121 can update the used amount of the target resource based on the amount of resources of the target resource provided for the cloud service.

[0110] In summary, in the resource management method based on cloud services provided in the embodiment of the present application, when the cloud service system needs to use the target resource, it provides a resource authentication request to the resource management system; then, the resource management system obtains the shared balance of the target resource based on the resource authentication request, and indicates whether the cloud service system can use the target resource according to whether the shared balance can meet the cloud service; then, the cloud service system responds to the cloud service request based on the instruction of the resource management system. In this way, the resource management system can control the usage quota of the shared resource by the resource sharer, and only allow the resource sharer to use the shared quota of the resource, which limits the total amount used by the resource sharer, and can prevent the resource sharer from using the shared resource without restriction, thereby avoiding the resource being exhausted by the resource sharer, and ensuring that the resource buyer can use the shared resource normally. In addition, if the resource sharer uses the shared resource without restriction, it may cause unexpected expenses. For example, each access to the storage object service (OBS) requires traffic consumption, and the service is charged by the accumulated value of the generated traffic. For another example, the Function Graph service is charged on a per-use basis and provides a certain amount of free usage. When the number of calls exceeds the quota, a certain amount of fees will be incurred. Therefore, when the resource sharer uses the shared resource without restriction, it will incur unaffordable fees for the resource buyer. By limiting the total amount of resource sharers' usage through this method, unexpected fees can be effectively avoided.

[0111] It should be noted that the sequence of steps of the cloud service-based resource management method provided in the embodiment of the present application can be adjusted appropriately, and the steps can be increased or decreased accordingly according to the situation. Any technician familiar with the technical field can easily think of a change within the technical scope disclosed in this application, which should be included in the protection scope of this application, so it will not be repeated.

[0112] The above describes the resource management method based on cloud services in the embodiment of the present application. Corresponding to the above method, the embodiment of the present application also provides a cloud platform for executing the method. Please refer to the structure of the cloud platform Figure 2 or Figure 3 .based on Figure 2 or Figure 3 The cloud platform can perform the above Figure 4 It should be understood that the device may include more additional modules than the modules shown or omit some of the modules shown, and the embodiments of the present application are not limited to this. Optionally, the cloud platform may be configured on the cloud platform. Figure 2 or Figure 3 As shown, the cloud platform may include: a cloud service system and a resource management system. The cloud service system is used to provide cloud services to users based on the resources owned by the cloud platform. The resource management system is used to manage the resources owned by the cloud platform. The specific functions of the cloud service system and the resource management system are as follows:

[0113] The cloud service system is specifically used to receive cloud service requests sent by target users, and provide resource authentication requests to the resource management system based on the cloud service requests. The cloud service requests instruct the cloud service system to provide cloud services to the target users, and the resource authentication requests indicate the target users and target resources that the cloud services need to use.

[0114] The resource management system is specifically used to obtain the sharing margin of the target resource based on the resource authentication request. The sharing margin indicates the unused resource amount in the sharing quota of the target resource. The sharing quota is the total amount of the target resource shared by the resource purchaser of the target resource to the target user.

[0115] The resource management system is also specifically used to instruct the cloud service system to use the target resources when the shared margin can satisfy the cloud service, and to instruct the cloud service system to prohibit the use of the target resources when the shared margin cannot satisfy the cloud service.

[0116] The cloud service system is also specifically used to respond to the cloud service request based on the instruction of the resource management system.

[0117] Optionally, the resource management system is further specifically configured to receive a sharing configuration request, and configure the target resource based on the sharing configuration request, wherein the sharing configuration request indicates a sharing quota of the target resource.

[0118] Optionally, the sharing configuration request further indicates the respective sharing quotas of the multiple resource sharers.

[0119] Optionally, the sharing configuration request also indicates the sharing quotas of the various operation behaviors.

[0120] Optionally, the resource management system is further specifically used to: obtain a target operation behavior that uses target resources in a cloud service; and obtain a sharing margin of the target operation behavior that shares the target resources based on a sharing quota of the target operation behavior.

[0121] Optionally, the resource authentication request also indicates a target operation behavior.

[0122] Optionally, the sharing configuration request also indicates usage conditions to which the sharing quota applies.

[0123] Optionally, the resource management system is further specifically used to: obtain target usage conditions for the cloud service to use the target resources; and based on the sharing quota of the target usage conditions, obtain the sharing margin of the target resources under the target usage conditions.

[0124] In this way, the resource management system can control the usage quota of shared resources by resource sharers, and only allow resource sharers to use the shared quota of resources, thereby limiting the total amount used by resource sharers, and preventing resource sharers from using shared resources without limit, thereby avoiding the exhaustion of resources by resource sharers, and ensuring that resource buyers can use shared resources normally. In addition, when resource sharers use shared resources without limit, it will incur unaffordable expenses for resource buyers. By limiting the total amount used by resource sharers through this method, unexpected expenses can be effectively avoided.

[0125] The embodiment of the present application also provides a resource management method based on cloud services. The method is executed by the resource management system of the cloud platform. The cloud platform also includes a cloud service system. The cloud service system is used to provide cloud services to users based on the resources owned by the cloud platform. The resource management system is used to manage the resources owned by the cloud platform. The method includes: the resource management system receives a resource authentication request sent by the cloud service system, the resource authentication request indicates the target user who uses the cloud service provided by the cloud service system and the target resource that the cloud service needs to use; the resource management system obtains the shared margin of the target resource based on the resource authentication request, the shared margin indicates the amount of unused resources in the shared quota of the target resource, and the shared quota is the total amount of the target resource shared by the resource purchaser of the target resource to the target user; when the shared margin can satisfy the cloud service, the resource management system instructs the cloud service system to use the target resource so that the cloud service system can provide cloud services to the target user based on the target resource, and when the shared margin cannot satisfy the cloud service, the resource management system instructs the cloud service system to prohibit the use of the target resource.

[0126] Optionally, before the resource management system obtains the sharing margin of the target resource based on the resource authentication request, the method further includes: the resource management system receives a sharing configuration request, and configures the target resource based on the sharing configuration request, wherein the sharing configuration request indicates the sharing amount of the target resource.

[0127] Optionally, the sharing configuration request further indicates the respective sharing quotas of the multiple resource sharers.

[0128] Optionally, the sharing configuration request also indicates the sharing quotas of the various operation behaviors.

[0129] Optionally, obtaining the sharing balance of the target resource includes: obtaining a target operation behavior that uses the target resource in the cloud service; and obtaining a sharing balance of the target resource shared by the target operation behavior based on the sharing quota of the target operation behavior.

[0130] Optionally, the resource authentication request also indicates a target operation behavior.

[0131] Optionally, the sharing configuration request also indicates usage conditions to which the sharing quota applies.

[0132] Optionally, obtaining the shared balance of the target resource includes: obtaining a target usage condition for the cloud service to use the target resource; and obtaining the shared balance of the target resource under the target usage condition based on the sharing quota of the target usage condition.

[0133] In this way, the resource management system can control the usage quota of shared resources by resource sharers, and only allow resource sharers to use the shared quota of resources, thereby limiting the total amount used by resource sharers, and preventing resource sharers from using shared resources without limit, thereby avoiding the exhaustion of resources by resource sharers, and ensuring that resource buyers can use shared resources normally. In addition, when resource sharers use shared resources without limit, it will incur unaffordable expenses for resource buyers. By limiting the total amount used by resource sharers through this method, unexpected expenses can be effectively avoided.

[0134] The above introduces the resource management method based on cloud services of the embodiment of the present application. Corresponding to the above method, the embodiment of the present application also provides a resource management system based on cloud services. Fig.10 This is a schematic diagram of a cloud service-based resource management system provided by an embodiment of the present application. Fig.10 As shown in the following multiple modules, the Fig.10 The cloud service-based resource management system shown can perform the above Figure 4 It should be understood that the device may include more additional modules than the modules shown or omit some of the modules shown, and the embodiments of the present application are not limited to this. Optionally, the resource management system based on cloud services can be configured on a cloud platform. Fig.10 As shown, the cloud service-based resource management system 100 may include:

[0135] The interaction module 1001 is used to receive a resource authentication request sent by the cloud service system, where the resource authentication request indicates a target user who uses the cloud service provided by the cloud service system and a target resource that the cloud service needs to use.

[0136] Processing module 1002 is used to obtain the sharing margin of the target resource based on the resource authentication request, where the sharing margin indicates the unused resource amount in the sharing quota of the target resource, and the sharing quota is the total amount of the target resource shared by the resource purchaser of the target resource to the target user.

[0137] The interaction module 1001 is also used to instruct the cloud service system to use the target resources when the shared margin can satisfy the cloud service, so that the cloud service system can provide cloud services to the target users based on the target resources, and to instruct the cloud service system to prohibit the use of the target resources when the shared margin cannot satisfy the cloud service.

[0138] Optionally, the interaction module 1001 is further used to: receive a sharing configuration request, and configure the target resource based on the sharing configuration request, where the sharing configuration request indicates a sharing quota of the target resource.

[0139] Optionally, the sharing configuration request further indicates the respective sharing quotas of the multiple resource sharers.

[0140] Optionally, the sharing configuration request also indicates the sharing quotas of the various operation behaviors.

[0141] Optionally, the processing module 1002 is specifically used to: obtain a target operation behavior that uses a target resource in a cloud service; and obtain a sharing margin of the target operation behavior that shares the target resource based on a sharing quota of the target operation behavior.

[0142] Optionally, the resource authentication request also indicates a target operation behavior.

[0143] Optionally, the sharing configuration request also indicates usage conditions to which the sharing quota applies.

[0144] Optionally, the processing module 1002 is specifically used to: obtain a target usage condition for the cloud service to use the target resource; and obtain a sharing balance of the target resource under the target usage condition based on a sharing quota of the target usage condition.

[0145] In this way, the resource management system can control the usage quota of shared resources by resource sharers, and only allow resource sharers to use the shared quota of resources, thereby limiting the total amount used by resource sharers, and preventing resource sharers from using shared resources without limit, thereby avoiding the exhaustion of resources by resource sharers, and ensuring that resource buyers can use shared resources normally. In addition, when resource sharers use shared resources without limit, it will incur unaffordable expenses for resource buyers. By limiting the total amount used by resource sharers through this method, unexpected expenses can be effectively avoided.

[0146] Here, please refer to the description in the previous method embodiment for the detailed working process of the interaction module 1001 and the processing module 1002. For example, the interaction module 1001 receives the sharing configuration request using step 401 in method 400; the processing module 1002 obtains the sharing margin of the target resource based on the resource authentication request using step 404 in method 400. The present application embodiment will not be described again here.

[0147] The interaction module 1001 and the processing module 1002 can be implemented by software or hardware. For example, the interaction module 1001 is taken as an example to introduce the implementation of the interaction module 1001. Similarly, the implementation of the processing module 1002 can refer to the implementation of the interaction module 1001.

[0148] As an example of a software functional unit, the interaction module 1001 may include code running on a computing instance. Among them, the computing instance may include at least one of a physical host (computing device), a virtual machine, and a container. Further, the above-mentioned computing instance may be one or more. For example, the interaction module 1001 may include code running on multiple hosts / virtual machines / containers. It should be noted that the multiple hosts / virtual machines / containers used to run the code may be distributed in the same region (region) or in different regions. Furthermore, the multiple hosts / virtual machines / containers used to run the code may be distributed in the same availability zone (AZ) or in different AZs, each AZ including one data center or multiple data centers with similar geographical locations. Among them, usually a region may include multiple AZs.

[0149] Similarly, multiple hosts / virtual machines / containers used to run the code can be distributed in the same virtual private cloud (VPC) or in multiple VPCs. Usually, a VPC is set up in a region. For cross-region communication between two VPCs in the same region and between VPCs in different regions, a communication gateway needs to be set up in each VPC to achieve interconnection between VPCs through the communication gateway.

[0150] As an example of a hardware functional unit, the interaction module 1001 may include at least one computing device, such as a server, etc. Alternatively, the interaction module 1001 may also be a device implemented using an application-specific integrated circuit (ASIC) or a programmable logic device (PLD). The PLD may be a complex programmable logical device (CPLD), a field-programmable gate array (FPGA), a generic array logic (GAL) or any combination thereof.

[0151] The multiple computing devices included in the interaction module 1001 can be distributed in the same region or in different regions. The multiple computing devices included in the interaction module 1001 can be distributed in the same AZ or in different AZs. Similarly, the multiple computing devices included in the interaction module 1001 can be distributed in the same VPC or in multiple VPCs. The multiple computing devices can be any combination of computing devices such as servers, ASICs, PLDs, CPLDs, FPGAs, and GALs.

[0152] It should be noted that, in other embodiments, any of the interaction module 1001 and the processing module 1002 can be used to execute any step in the resource management method based on cloud services. The steps that the interaction module 1001 and the processing module 1002 are responsible for implementing can be specified as needed, and the interaction module 1001 and the processing module 1002 respectively implement different steps in the resource management method based on cloud services to implement all functions of the resource management system based on cloud services.

[0153] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the above-described devices and modules can refer to the corresponding contents in the aforementioned method embodiments and will not be repeated here.

[0154] The following is an illustration of the basic hardware structure involved in the embodiments of the present application.

[0155] The embodiment of the present application provides a computing device. The computing device is used to implement part or all of the functions of the cloud service-based resource management method provided in the embodiment of the present application. Fig.11 Schematic diagram of a computing device provided in an embodiment of the present application. Fig.11As shown, the computing device 1100 includes a processor 1101, a memory 1102, a communication interface 1103 and a bus 1104. The processor 1101, the memory 1102 and the communication interface 1103 are connected to each other through the bus 1104.

[0156] Processor 1101 may include a general-purpose processor and / or a dedicated hardware chip. A general-purpose processor may include: a central processing unit (CPU), a microprocessor or a graphics processing unit (GPU). The CPU is, for example, a single-core processor (single-CPU) or a multi-core processor (multi-CPU). A dedicated hardware chip is a hardware module for high-performance processing. A dedicated hardware chip includes at least one of a digital signal processor, an application-specific integrated circuit (ASIC), a field-programmable gate array (FPGA) or a network processor (NP). Processor 1101 may also be an integrated circuit chip having signal processing capabilities. In the implementation process, some or all of the functions of the cloud service-based resource management method of the present application may be completed by hardware integrated logic circuits in processor 1101 or instructions in software form.

[0157] The memory 1102 is used to store computer programs, which include an operating system 1102a and executable codes (i.e., program instructions) 1102b. The memory 1102 is, for example, a read-only memory or other types of static storage devices that can store static information and instructions, or a random access memory or other types of dynamic storage devices that can store information and instructions, or an electrically erasable programmable read-only memory, a read-only optical disc or other optical disc storage, an optical disc storage (including a compressed optical disc, a laser disc, an optical disc, a digital versatile disc, a blue-ray disc, etc.), a magnetic disk storage medium or other magnetic storage device, or any other medium that can be used to carry or store the desired executable code in the form of an instruction or data structure and can be accessed by a computer, but is not limited thereto. For example, the memory 1102 is used to store an outbound port queue, etc. The memory 1102 is, for example, independent and connected to the processor 1101 via a bus 1104. Or the memory 1102 and the processor 1101 are integrated together. The memory 1102 can store executable code. When the executable code stored in the memory 1102 is executed by the processor 1101, the processor 1101 is used to perform some or all functions of the resource management method based on cloud services provided in the embodiment of the present application. For the implementation of the process executed by the processor 1101, please refer to the relevant description in the aforementioned embodiment. The memory 1102 may also include software modules and data required for other running processes such as an operating system.

[0158] The communication interface 1103 uses a transceiver module such as, but not limited to, a transceiver to achieve communication with other devices or communication networks. For example, the communication interface 1103 can be any one or any combination of the following devices: a network interface (such as an Ethernet interface), a wireless network card, and other devices with network access functions.

[0159] The bus 1104 is any type of communication bus for interconnecting the internal devices of the computing device (e.g., the memory 1102, the processor 1101, and the communication interface 1103). For example, a system bus. The embodiment of the present application takes the interconnection of the above-mentioned devices inside the computing device through the bus 1104 as an example. Optionally, the above-mentioned devices inside the computing device 1100 can also be connected to each other in communication with each other using other connection methods other than the bus 1104. For example, the above-mentioned devices inside the computing device 1100 are interconnected through an internal logical interface.

[0160] It should be noted that the above-mentioned multiple devices can be respectively arranged on independent chips, or at least partially or completely arranged on the same chip. Whether to independently arrange each device on different chips or to integrate and arrange it on one or more chips often depends on the needs of product design. The embodiments of the present application do not limit the specific implementation form of the above-mentioned devices. The descriptions of the processes corresponding to the above-mentioned figures have different focuses. For the parts not described in detail in a certain process, please refer to the relevant descriptions of other processes.

[0161] In the above embodiments, all or part of the embodiments may be implemented by software, hardware, firmware, or any combination thereof. When implemented by software, all or part of the embodiments may be implemented in the form of a computer program product. The computer program product providing a program development platform includes one or more computer instructions, and when these computer program instructions are loaded and executed on a computing device, all or part of the functions of the resource management method based on cloud services provided in the embodiments of the present application are implemented.

[0162] Furthermore, computer instructions may be stored in a computer-readable storage medium or transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, computer instructions may be transmitted from one website, computer, server or data center to another website, computer, server or data center via wired (e.g., coaxial cable, optical fiber, digital subscriber line) or wireless (e.g., infrared, wireless, microwave, etc.) means. The computer-readable storage medium stores computer program instructions that provide a program development platform.

[0163] The embodiment of the present application also provides a computing device cluster. The computing device cluster includes at least one computing device. The computing device can be a server, such as a central server, an edge server, or a local server in a local data center. In some embodiments, the computing device can also be a terminal device such as a desktop computer, a laptop computer, or a smart phone.

[0164] Optionally, the structure of at least one computing device included in the computing device cluster can be found in Fig.11 The computing device 1100 is shown. The memory 1102 in one or more computing devices 1100 in the computing device cluster may store the same instructions for executing the resource management method based on cloud services.

[0165] In some possible implementations, the memory 1102 of one or more computing devices 1100 in the computing device cluster may also store partial instructions for executing the resource management method based on cloud services. In other words, the combination of one or more computing devices 1100 may jointly execute instructions for executing the resource management method based on cloud services.

[0166] It should be noted that the memory 1102 in different computing devices 1100 in the computing device cluster can store different instructions, which are respectively used to execute part of the functions of the resource management method based on cloud services. That is, the instructions stored in the memory 1102 in different computing devices 1100 can implement the functions of one or more modules in the resource management system and the cloud service system.

[0167] In some possible implementations, one or more computing devices in the computing device cluster may be connected via a network, which may be a wide area network or a local area network. Fig.12 A possible implementation is shown. Fig.12 As shown, two computing devices 1200A and 1200B are connected via a network. Specifically, the network is connected via a communication interface in each computing device. In this type of possible implementation, computing devices 1200A and 1200B include a bus 1202, a processor 1204, a memory 1206, and a communication interface 1208. The memory 1206 in the computing device 1200A stores instructions for executing the functions of the resource management system. At the same time, the memory 1206 in the computing device 1200B stores instructions for executing the functions of the cloud service system.

[0168] It should be understood that Fig.12 The functions of the computing device 1200A shown in the figure can also be completed by multiple computing devices 1200. Similarly, the functions of the computing device 1200B can also be completed by multiple computing devices 1200. And the deployment mode of the modules for implementing the resource management method based on cloud services in the computing devices can also be adjusted according to application requirements.

[0169] An embodiment of the present application also provides a computer-readable storage medium, which is a non-volatile computer-readable storage medium. The computer-readable storage medium includes program instructions. When the program instructions are executed on a computing device, the computing device implements a cloud service-based resource management method as provided in an embodiment of the present application.

[0170] The embodiment of the present application also provides a computer program product including instructions. When the computer program product is executed on a computer, the computer implements the cloud service-based resource management method provided by the embodiment of the present application.

[0171] A person skilled in the art will understand that all or part of the steps to implement the above embodiments may be accomplished by hardware or by instructing related hardware through a program, and the program may be stored in a computer-readable storage medium, and the above-mentioned storage medium may be a read-only memory, a disk or an optical disk, etc.

[0172] It should be noted that the information (including but not limited to user device information, user personal information, etc.), data (including but not limited to data used for analysis, stored data, displayed data, etc.) and signals involved in this application are all authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with the relevant laws, regulations and standards of relevant countries and regions. For example, the original data and executable code involved in this application are all obtained with full authorization.

[0173] In the embodiments of the present application, the terms "first", "second" and "third" are used for descriptive purposes only and are not to be understood as indicating or implying relative importance. The term "at least one" means one or more, and the term "plurality" means two or more, unless otherwise expressly defined.

[0174] The term "and / or" in this application is only a description of the association relationship of associated objects, indicating that there can be three relationships. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. In addition, the character " / " in this article generally indicates that the associated objects before and after are in an "or" relationship.

[0175] The above description is only an optional embodiment of the present application and is not intended to limit the present application. Any modifications, equivalent substitutions, improvements, etc. made within the concept and principle of the present application shall be included in the protection scope of the present application.

Claims

1. A resource management method based on cloud services, characterized in that: The method is performed by a cloud platform, the cloud platform includes a cloud service system and a resource management system, the cloud service system is used to provide cloud services to users based on the resources owned by the cloud platform, and the resource management system is used to manage the resources owned by the cloud platform, and the method includes: The cloud service system receives a cloud service request sent by a target user, and provides a resource authentication request to the resource management system based on the cloud service request, wherein the cloud service request instructs the cloud service system to provide cloud services to the target user, and the resource authentication request indicates the target user and the target resources that the cloud service needs to use; The resource management system obtains the sharing margin of the target resource based on the resource authentication request, where the sharing margin indicates the unused resource amount in the sharing quota of the target resource, and the sharing quota is the total amount of the target resource shared by the resource purchaser of the target resource with the target user; The resource management system instructs the cloud service system to use the target resource when the shared margin can satisfy the cloud service, and instructs the cloud service system to prohibit the use of the target resource when the shared margin cannot satisfy the cloud service; The cloud service system responds to the cloud service request based on the instruction of the resource management system.

2. The method according to claim 1, characterized in that Before the resource management system obtains the shared margin of the target resource based on the resource authentication request, the method further includes: The resource management system receives a sharing configuration request and configures the target resource based on the sharing configuration request, wherein the sharing configuration request indicates a sharing quota of the target resource.

3. The method according to claim 2, characterized in that The sharing configuration request also indicates the respective sharing quotas of the multiple resource sharers.

4. The method according to claim 2 or 3, characterized in that The sharing configuration request also indicates the sharing quotas of the various operation behaviors.

5. The method according to claim 4, characterized in that The obtaining the shared margin of the target resource includes: Obtaining a target operation behavior using the target resource in the cloud service; Based on the sharing quota of the target operation behavior, a sharing margin of the target resource shared by the target operation behavior is obtained.

6. The method according to claim 5, characterized in that The resource authentication request also indicates the target operation behavior.

7. The method according to any one of claims 2 to 6, characterized in that: The sharing configuration request also indicates usage conditions applicable to the sharing quota.

8. The method according to claim 7, characterized in that The obtaining the shared margin of the target resource includes: Obtaining a target usage condition for the cloud service to use the target resource; Based on the sharing quota of the target usage condition, a sharing margin of the target resource under the target usage condition is obtained.

9. A cloud platform, characterized in that: The cloud platform includes a cloud service system and a resource management system. The cloud service system is used to provide cloud services to users based on the resources owned by the cloud platform, and the resource management system is used to manage the resources owned by the cloud platform. The cloud service system is specifically used to receive a cloud service request sent by a target user, and provide a resource authentication request to the resource management system based on the cloud service request, wherein the cloud service request instructs the cloud service system to provide cloud services to the target user, and the resource authentication request indicates the target user and the target resources that the cloud service needs to use; The resource management system is specifically used to obtain the sharing margin of the target resource based on the resource authentication request, where the sharing margin indicates the amount of unused resources in the sharing quota of the target resource, and the sharing quota is the total amount of the target resource shared by the resource purchaser of the target resource to the target user; The resource management system is further specifically configured to instruct the cloud service system to use the target resource when the shared margin can satisfy the cloud service, and to instruct the cloud service system to prohibit the use of the target resource when the shared margin cannot satisfy the cloud service; The cloud service system is also specifically configured to respond to the cloud service request based on an instruction from the resource management system.

10. The cloud platform according to claim 9, characterized in that: The resource management system is further specifically configured to receive a sharing configuration request, and configure the target resource based on the sharing configuration request, wherein the sharing configuration request indicates a sharing amount of the target resource.

11. The cloud platform according to claim 10, characterized in that: The sharing configuration request also indicates the respective sharing quotas of the multiple resource sharers.

12. The cloud platform according to claim 10 or 11, characterized in that: The sharing configuration request also indicates the sharing quotas of the various operation behaviors.

13. The cloud platform according to claim 12, characterized in that: The resource management system is also specifically used for: Obtaining a target operation behavior using the target resource in the cloud service; Based on the sharing quota of the target operation behavior, a sharing margin of the target resource shared by the target operation behavior is obtained.

14. The cloud platform according to claim 13, characterized in that: The resource authentication request also indicates the target operation behavior.

15. The cloud platform according to any one of claims 10 to 14, characterized in that: The sharing configuration request also indicates usage conditions applicable to the sharing quota.

16. The cloud platform according to claim 15, characterized in that: The resource management system is also specifically used for: Obtaining a target usage condition for the cloud service to use the target resource; Based on the sharing quota of the target usage condition, a sharing margin of the target resource under the target usage condition is obtained.

17. A computing device cluster, characterized in that: The method comprises a plurality of computing devices, wherein the plurality of computing devices comprises a plurality of processors and a plurality of memories, wherein program instructions are stored in the plurality of memories, and the plurality of processors execute the program instructions, so that the computing device cluster executes any one of the methods described in claims 1 to 8.

18. A computer-readable storage medium, characterized in that: The method comprises program instructions, and when the program instructions are executed on a computing device, the computing device is caused to execute the method according to any one of claims 1 to 8.

19. A computer program product comprising instructions, characterized in that When the computer program product is executed on a computer, the computer is enabled to execute the method according to any one of claims 1 to 8.

Images