Enforcement Provider for Cloud Policy Template Conversion
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cloud computing systems face challenges in governing deployed virtual machines with a target state, as they lack effective mechanisms to convert enforcement policy information into provisioning template information.
Innovation Solution
An enforcement provider system is implemented to convert enforcement policy information into user-selectable template information, allowing for the creation of provisioning templates that can be used to enforce desired states of cloud resources.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If cloud computing resources are provisioned without enforcement policy conversion, then deployment speed is improved, but governance capability deteriorates
Solution Approach 1:
The system performs preliminary conversion of enforcement policy information into provisioning template information before the actual resource provisioning process. This advance preparation ensures that governance requirements are embedded in the provisioning templates, allowing fast deployment without sacrificing governance capability.
Solution Approach 2:
The enforcement provider acts as an intermediary component between the policy management system and the provisioning system. It converts enforcement policy information into a format suitable for provisioning templates, enabling both fast deployment and effective governance by bridging the two systems.
2Reliability
If enforcement policy information is converted into provisioning template information, then governance capability is improved, but system complexity worsens
Solution Approach 1:
The enforcement provider serves as a specialized intermediary that handles the complex conversion process between enforcement policy information and provisioning template information. This isolates the complexity within a dedicated component, maintaining overall system manageability while achieving improved governance capability.
Solution Approach 2:
The system segments the governance functionality into a separate enforcement provider module that specifically handles policy-to-template conversion. This modular approach manages complexity by dividing the system into distinct, manageable components with clear responsibilities.
3Reliability
If virtual machines are provisioned with enforcement policies, then compliance level is improved, but provisioning time worsens
Solution Approach 1:
The conversion of enforcement policy information into provisioning template information is performed in advance, before the actual VM provisioning occurs. This preliminary action ensures compliance requirements are pre-configured in the templates, allowing VMs to be provisioned quickly with embedded compliance controls without adding provisioning time.
Data Source
AI summary
Systems, apparatus, articles of manufacture, and methods are disclosed for converting enforcement policy information into provisioning template information by instantiating or executing machine-readable instructions to determine a type of a first placeholder of a provisioning template with a plurality of placeholders, copy enforcement policy data corresponding to the determined type of the first placeholder, fill the first placeholder of the provisioning template with the copied enforcement policy data, and save the provisioning template.