VM Manager Dynamic Access Control for Cloud Database Isolation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In a cloud environment, existing technologies face challenges in dynamically managing access restrictions and data isolation between applications and databases, particularly in ensuring secure access while allowing flexibility and scalability as customer needs evolve, with existing solutions often lacking in efficiency and adaptability.
Innovation Solution
A system and method involving a VM manager that dynamically configures access restrictions by retrieving database information, generating configuration instructions, and applying security policies to allow or restrict access based on account associations, enabling secure and flexible access management between applications and databases.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If access restrictions are dynamically configured for applications to databases in cloud environment, then data isolation and security are improved, but system complexity increases
Solution Approach 1:
The patent introduces a VM manager as an intermediary component that sits between applications and databases. This manager dynamically configures access restrictions by retrieving database information from a database manager and generating configuration instructions for virtual machines. The intermediary handles the complexity of access control logic centrally, isolating it from both applications and databases, thereby improving data isolation while managing system complexity through a dedicated control layer.
2Adaptability or versatility
If access rules are dynamically updated based on database associations, then adaptability to changing customer needs is improved, but configuration management complexity increases
Solution Approach 1:
The patent implements dynamic access control where the VM manager continuously monitors database associations and automatically updates configuration instructions for virtual machines. When databases are added, removed, or associated with different accounts, the system dynamically adjusts access rules without requiring manual reconfiguration. This dynamic approach enhances adaptability to changing customer needs while the automated nature of the process manages configuration complexity through event-driven updates.
Solution Approach 2:
The system employs feedback mechanisms where the VM manager retrieves information from the database manager about current database associations and uses this feedback to adjust access restrictions. The configuration instructions are regenerated based on the current state of database associations, ensuring that access control rules always reflect the latest organizational structure and customer requirements, thereby improving flexibility while managing complexity through automated feedback loops.
3Reliability
If multiple virtual machines are managed with individual access configurations, then data isolation between applications is improved, but management overhead increases
Solution Approach 1:
The VM manager serves as a universal control mechanism that manages access configurations for multiple virtual machines simultaneously. Instead of configuring each VM individually, the manager applies configuration instructions across multiple VMs based on their database associations. This multi-functional approach maintains strong data isolation between applications while significantly reducing management overhead through centralized, batch-based configuration management.
Data Source
AI summary
The present disclosure relates to computer-implemented methods, software, and systems for dynamic configuration of access restrictions on an application in relation to databases running in a cloud environment. An instruction to run an application is received by a virtual machine (VM) manager. The VM manager retrieves from a database manager information identifying databases accessible to the application. The databases are associated with at least one account of the application. The VM manager sends configuration instructions to dynamically configure a particular VM at which the application is to run. The particular VM is configured based on the configuration instructions that are generated based on the retrieved information and include rules for accessing the one or more databases identified in the retrieved information. The rules identify each database by its respective network address, and wherein the rules cause the particular VM to allow the application to access the one or more databases.