Virtual private cloud that provides enterprise grade functionality and compliance
Techniques to enforce policies with respect to managed files and/or endpoints are disclosed. A policy to be applied with respect to one or more files included in a synchronization set and/or an endpoint associated with the synchronization set is received. Compliance with the policy is ensured across a plurality of heterogeneous endpoints associated with the synchronization set.
1. A method, comprising:
obtaining, by one or more processors associated with a synchronization point that is connected to a plurality of endpoints via a network, one or more objects that are subject to synchronization across the plurality of endpoints;
determining, by one or more processors associated with the synchronization point, a destination endpoint with which to synchronize the one or more objects, the destination endpoint being determined from among the plurality of endpoints, wherein the destination endpoint lacks a local file system;
formatting, by one or more processors associated with the synchronization point, the one or more objects into a preferred format preferred by the destination endpoint; and
providing, by one or more processors associated with the synchronization point, the one or more objects in the preferred format to the destination endpoint.
2. The method of claim 1 , wherein the one or more objects is provided to the destination endpoint in accordance with one or more policies.
3. The method of claim 2 , wherein at least one of the one or more policies restricts access to a file from one or more of the plurality of endpoints.
4. The method of claim 1 , further comprising:
obtaining, by one or more processors associated with the synchronization point, a policy to be applied with respect to a synchronization set, the one or more objects being included in the synchronization set; and
providing, by one or more processors associated with the synchronization point, the policy to at least a first one of the plurality of endpoints, wherein the first one of the plurality of endpoints enforces the policy in response to determining that a policy triggering event associated with one or more files in the synchronization set occurred, and the at least the first one of the plurality of endpoints is associated with a computing systems including one or more non-transitory computer-readable storage mediums.
5. The method of claim 4 , further comprising:
obtaining, by the one or more processors associated with the file management system, an indication of the policy triggering event,
wherein the providing the one or more objects in the preferred format to the destination endpoint comprises synchronizing the one or more files in the synchronization set across at least the destination endpoint, the one or more files in the synchronization set is synchronized based at least in part on the policy triggering event, and one or more files in the synchronization set is synchronized in a manner based at least in part on a type of the native file store of the at least the second one of the plurality of endpoints.
6. The method of claim 5 , wherein the synchronization set is synchronized in a manner based at least in part on a type of the native file store of the at least the second one of the plurality of endpoints.
7. The method of claim 4 , wherein the policy triggering event includes a request to access, create, change, or delete a file to which the policy applies.
8. The method of claim 4 , wherein enforcing the policy includes preventing access to the file by the one or more endpoints at which access is restricted.
9. The method of claim 1 , wherein each of the plurality of endpoints is configured to enforce at the endpoint policies received from a file management system with which the synchronization point is associated, including by responding in a manner prescribed by at least one of the policies to occurrence of a policy-triggering event defined in the at least one of the policies.
10. The method of claim 1 , wherein the one or more objects is provided to the destination endpoint in accordance with one or more policies, and at least one of the one or more policies comprises one or more of a retention policy, a security policy, and an access restriction policy.
11. The method of claim 1 , wherein:
the one or more objects is provided to the destination endpoint in accordance with one or more policies;
the one or more policies comprises a retention policy; and
in response to obtaining an indication of a policy-triggering event, a retention policy operation prescribed by the retention policy is performed.
12. The method of claim 1 , wherein at least partially in response to the policy trigger event, the file is marked as deleted at one or more endpoints at which the file has been stored, and a copy of the file is retained until expiration of a retention period specified in the policy.
13. The method of claim 12 , wherein the copy of the file is stored centrally.
14. The method of claim 12 , wherein the copy is stored, but not made visible to users, at one or more of the endpoints.
15. The method of claim 1 , further comprising:
providing an administrative user interface to enable the policy to be defined.
16. The method of claim 1 , wherein the preferred format corresponds to a native format of the destination endpoint.
17. A file management system that is connected to a plurality of endpoints via a network, the file management system comprising:
one or more processors configured to:
obtain a policy to be applied with respect to a synchronization set, wherein the policy includes an indication of one or more policy triggering events, the policy triggering events including one or more permitted or restricted events relating to a file in the synchronization set, wherein the plurality of endpoints are associated with the synchronization set and a plurality of computing systems respectively including one or more non-transitory computer-readable storage mediums, and wherein at least two of the plurality of endpoints have different types of native file stores, wherein at least one of the plurality of endpoints is a destination endpoint that lacks a local file system; and
providing, by one or more processors associated with the file management system, the policy to at least a first one of the plurality of endpoints, wherein the first one of the plurality of endpoints enforces the policy in response to determining that a policy triggering event associated with one or more files in the synchronization set occurred.
18. A computer program product to manage files, the computer program product being embodied in a tangible, non-transitory computer readable storage medium and comprising computer instructions for:
obtaining, by a file management system that is connected to a plurality of endpoints via a network, a policy to be applied with respect to a synchronization set, wherein the policy includes an indication of one or more policy triggering events, the policy triggering events including one or more permitted or restricted events relating to a file in the synchronization set, wherein the plurality of endpoints are associated with the synchronization set and a plurality of computing systems respectively including one or more non-transitory computer-readable storage mediums, and wherein at least two of the plurality of endpoints have different types of native file stores, wherein at least one of the plurality of endpoints is a destination endpoint that lacks a local file system; and
providing, by one or more processors associated with the file management system, the policy to at least a first one of the plurality of endpoints, wherein the first one of the plurality of endpoints enforces the policy in response to determining that a policy triggering event associated with one or more files in the synchronization set occurred.