POLICY AS CODE BASED ON A UNIFIED RESOURCE MODEL OF CLOUD INFRASTRUCTURE

Abstract

A system enforces policies based on a computing infrastructure of a cloud platform. The system stores a policy as code specification of a policy associated with computing resources of a cloud infrastructure of a cloud platform. The system stores metadata describing a set of computing resources of the cloud infrastructure. The metadata is represented using a uniform resource model of computing resources. The system executes the policy as code specification against the metadata and determines a policy violation based on execution. The policy violation indicates a failure to satisfy at least a policy constraint of the policy. The system determines a modification to the uniform cloud resource model representing the set of computing resources. The system executes a modified uniform cloud resource model that causes changes to the set of computing resources that remediate the policy violation.

CPC Classifications