Change recommendations for compliance policy enforcement

1. A method comprising:

collecting information from a plurality of components of a software system;

storing the collected information in a data repository;

parsing a compliance policy for the software system to determine a compliance test that includes a predefined database query for the data repository, wherein the database query produces a result which indicates whether the software system is in compliance with a configuration requirement for the software system;

determining whether the software system violates the compliance policy by performing the database query of the compliance test on the data repository;

in response to determining that the software system violates the compliance policy:

generating a change recommendation based on a suggested solution to the policy violation included in the compliance policy; and

providing the change recommendation;

re-evaluating the software system using the compliance policy; and

in response to determining that the software system conforms to the compliance policy, clearing both the violation and the change recommendation.

2. The method of claim 1 , wherein the compliance policy is user-authored by the administrator.

3. The method of claim 1 , wherein the violation is associated with at least one of a password reset, a security attack, a port, a configuration file, a software patch, an application type, an application version, and a standard.

4. The method of claim 1 , wherein the software system is executed at multiple server computers within a data center.

5. The method of claim 1 , wherein the change recommendation is provided to the administrator using a change recommendation user interface (UI).

6. The method of claim 1 , wherein the compliance policy comprises an Extensible Markup Language (XML) document.

7. A system comprising:

a processor;

a memory;

a data repository configured to store information collected from a plurality of components of a software system;

a configuration framework configured to parse a compliance policy to determine a compliance test that includes a predefined database query, wherein the database query produces a result which indicates whether the software system is in compliance with a configuration requirement for the software system, and wherein the configuration framework comprises:

a configuration engine configured to determine whether the software system violates the compliance policy by performing the database query of the compliance test on the data repository; and

a change recommendation engine configured to generate a change recommendation for the violation associated with the compliance test using the compliance policy; and

a change recommendation user interface (UI) configured to provide the change recommendation;

wherein the configuration engine is further configured to re-evaluate the software system using the compliance policy, and

wherein the change recommendation engine is further configured to clear both the violation and the change recommendation.

8. The system of claim 7 , further comprising:

an agent process configured to:

obtain information from the software system; and

store the information in the data repository,

wherein the stored information is used by the configuration standard framework to determine whether the software system violates the compliance policy.

9. The system of claim 7 , wherein the compliance policy is user-authored by the administrator.

10. The system of claim 7 , wherein the violation is associated with at least one of a password reset, a security attack, a port, a configuration file, a software patch, an application type, an application version, and a standard.

11. The system of claim 7 , wherein the software system is executed at multiple server computers within a data center.

12. The system of claim 7 , wherein the compliance policy comprises an Extensible Markup Language (XML) document.

13. A non-transitory computer-readable storage medium storing instructions that when executed by a computer cause the computer to perform a method comprising:

collecting information from a plurality of components of a software system;

storing the collected information in a data repository;

parsing a compliance policy for the software system to determine a compliance test that includes a predefined database query for the data repository, wherein the database query produces a result which indicates whether the software system is in compliance with a configuration requirement for the software system;

determining whether the software system violates the compliance policy by performing the database query of the compliance test on the data repository;

in response to determining that the software system violates the compliance policy:

generating a change recommendation for the compliance test; and

providing the change recommendation;

re-evaluating the software system using the compliance policy; and in response to determining that the software system conforms to the compliance policy, clearing both the violation and the change recommendation.

14. The non-transitory computer-readable storage medium of claim 13 , wherein the compliance policy is user-authored by the administrator.

15. The non-transitory computer-readable storage medium of claim 13 , wherein the violation is associated with at least one of a password reset, a security attack, a port, a configuration file, a software patch, an application type, an application version, and a standard.

16. The non-transitory computer-readable storage medium of claim 13 , wherein the software system is executed at multiple server computers within a data center.

17. The non-transitory computer-readable storage medium of claim 13 , wherein the change recommendation is provided to the administrator using a change recommendation user interface (UI).

18. The non-transitory computer-readable storage medium of claim 13 , wherein the compliance policy comprises an Extensible Markup Language (XML) document.