Cloud Application Deployment Automation via Configuration Service
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current container-based deployment methods for applications in cloud computing platforms lack efficiency and security, placing a heavy burden on DevOps personnel to ensure secure deployment.
Innovation Solution
A computer-implemented method that receives component composition files to modify default configuration parameters, using a configuration service database to retrieve and update configuration files, and deploy applications securely in the cloud platform based on modified configurations and connection schemes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of manufacture
If container-based deployment is used, then application deployment is simplified, but security is compromised and manual burden increases
Solution Approach 1:
The system enables self-service security by automatically generating cryptographic key pairs, signing application components, and managing security credentials without manual DevOps intervention. The application component itself performs security-related operations through embedded instructions, making the system self-sufficient in security matters.
Solution Approach 2:
Security measures are performed in advance during the build process. Cryptographic keys are generated beforehand, application components are signed prior to deployment, and security policies are pre-configured. This preliminary security preparation eliminates the need for manual security configuration during deployment.
2Reliability
If manual security configuration is performed, then security is improved, but productivity decreases and time consumption increases
Solution Approach 1:
Manual mechanical security configuration tasks are replaced by an automated electronic system. The build tool automatically performs cryptographic operations, signature generation, and security policy enforcement through software automation, eliminating the need for manual DevOps security configuration tasks.
Solution Approach 2:
The system changes the state of security configuration from manual parameters to automated parameters. Security credentials, cryptographic keys, and policy settings are automatically generated and configured as system parameters during the build process, transforming security from a manual operation to an automated parameter-driven process.
3Productivity
If automated deployment is implemented, then productivity is improved, but security control is reduced
Solution Approach 1:
The system incorporates feedback mechanisms where the build tool verifies security conditions, validates cryptographic signatures, and enforces security policies automatically during the deployment process. This closed-loop feedback ensures that automated deployment maintains security control through continuous verification and enforcement.
Solution Approach 2:
Security controls are built into the automated deployment process from the beginning. The system performs preliminary security checks, validates components against security policies, and ensures cryptographic integrity before deployment occurs. This preliminary security automation maintains control while enabling productivity.
Data Source
AI summary
A method of securely deploying an application in a cloud computing platform includes receiving component composition files that define configurations of application components included the application, and receiving an application composition file that defines a connection scheme between the application components. The method further includes retrieving default component configuration files that satisfy requirements of the application components. The method further includes executing functions corresponding to extension keywords included in the component composition files to modify default parameters in the default component configuration files, and deploying the application in the cloud computing platform based on the modified default component configuration files and the connection scheme defined by the application composition file.