Content-Based Cloud Backup Policies for Automated Compliance
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cloud infrastructure backup systems lack flexibility in including data resources based on their content, such as specific data classes or runtime environments, and struggle to enforce compliance with regulatory requirements automatically.
Innovation Solution
Implement content-based backup policies and posture controls that identify data resources based on their content, such as data classes and runtime environments, and enforce backup parameters and requirements to ensure compliance.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If traditional backup methods (snapshots or agent-based copying) are used, then backup functionality is provided, but flexibility in selecting data resources based on content properties is lacking
Solution Approach 1:
The system automatically probes cloud accounts to identify data resources and their content properties, then autonomously applies backup policies without requiring manual configuration. The backup system serves itself by automatically discovering what needs to be backed up based on content characteristics like data classes and runtime environments.
Solution Approach 2:
The system changes the parameter basis for backup selection from traditional methods (time-based, manual selection) to content-based parameters (data classes, runtime environments, sensitivity levels). This allows flexible inclusion/exclusion of data resources based on their inherent properties rather than fixed schedules or manual choices.
2Reliability
If manual backup policy configuration is used, then user control is maintained, but automated enforcement of regulatory compliance is difficult
Solution Approach 1:
The system continuously monitors data resources against defined backup policies and provides feedback when compliance requirements are not met. It automatically adjusts backup actions based on this feedback, ensuring regulatory compliance is maintained without manual intervention. The system checks whether identified data resources are properly backed up and takes corrective action if needed.
Solution Approach 2:
The system introduces an intermediary layer between raw data resources and backup execution that automatically interprets regulatory requirements and translates them into concrete backup actions. This intermediary analyzes content properties, determines compliance status, and orchestrates appropriate backup responses without requiring users to manually configure each compliance rule.
3Measurement precision
If content-based identification of data resources is implemented, then precise backup targeting is achieved, but probing and analysis overhead increases
Solution Approach 1:
The system performs preliminary probing and content analysis of data resources in advance, before backup decisions need to be made. By pre-identifying data resource properties such as data classes, runtime environments, and sensitivity levels, the system prepares the information needed for rapid backup decision-making without delaying actual backup operations.
Solution Approach 2:
The system implements periodic probing of cloud accounts to update knowledge about data resources and their content properties. Rather than continuously analyzing all resources, it performs scheduled assessments to refresh its understanding of the data landscape, balancing identification accuracy with time efficiency through interval-based updates.
Data Source
AI summary
A method includes probing one or more accounts on a cloud infrastructure so as to identify content of multiple data resources hosted by the cloud infrastructure in association with the accounts, receiving, from a user of the accounts, a backup policy specifying one or more backup parameters and at least one set of one or more data-resource properties, identifying, based on the identified content, at least some of the data resources that have the data-resource properties, and backing up the identified data resources in accordance with the backup parameters. Other embodiments are also described.