Method and system for generating a security-compliant workload in a composable infrastructure
A method for managing data includes obtaining a workload generation request, wherein the workload generation request specifies a security compliant rule, in response to the workload generation request: selecting a first set of resource devices using a resource allocation master list, initiating a security compliance test on the first set of resource devices to obtain a security compliance result, making a first determination, based on the security compliance result, that the first set of resource devices meet a security compliance criterion, and in response to the first determination: storing a virtual certificate in a security compliance database based on the security compliance result, and allocating the first set of resource devices to a workload based on the workload generation request.
1. A method for managing data, the method comprising:
obtaining a workload generation request, wherein the workload generation request specifies a security compliant rule;
in response to the workload generation request:
selecting a first set of resource devices using a resource allocation master list;
initiating a security compliance test on the first set of resource devices to obtain a security compliance result;
making a first determination, based on the security compliance result, that the first set of resource devices meet a security compliance criterion; and
in response to the first determination:
storing a virtual certificate in a security compliance database based on the security compliance result; and
allocating the first set of resource devices to a workload based on the workload generation request;
obtaining a second workload generation request, wherein the second workload generation request specifies the security compliant rule;
in response to the second workload generation request:
selecting a second set of resource devices using the resource allocation master list;
initiating the security compliance test on the second set of resource devices to obtain a second security compliance result;
making a second determination, based on the second security compliance result, that the second set of resource devices do not meet the security compliance criterion; and
in response to the second determination:
selecting a third set of resource devices using the resource allocation master list;
initiating the security compliance test on the third set of resource devices to obtain a third security compliance result;
making a third determination, based on the third security compliance result, that the third set of resource devices meet the security compliance criterion; and
in response to the third determination:
storing a second virtual certificate in the security compliance database based on the third security compliance result; and
allocating the third set of resource devices to a second workload based on the workload generation request.
2. The method of claim 1 , wherein the security compliance criterion is based on the security compliant rule.
3. The method of claim 1 , wherein the security compliant rule specifies an encryption algorithm.
4. The method of claim 1 , wherein the security compliance test comprises:
performing a penetration test on data stored in at least one resource device in the first set of resource devices;
making a second determination, based on the penetration test, that the data is not accessible without authorization; and
in response to the second determination, generating the security compliance result, wherein the security compliance result specifies the second determination.
5. The method of claim 4 , wherein initiating the security compliance test comprises prompting a third-party application to perform the security compliance test.
6. The method of claim 1 , wherein a resource device in the first set of resource devices is a storage device.
7. A non-transitory computer readable medium comprising computer readable program code, which when executed by a computer processor enables the computer processor to perform a method for managing data, the method comprising:
obtaining a workload generation request, wherein the workload generation request specifies a security compliant rule;
in response to the workload generation request:
selecting a first set of resource devices using a resource allocation master list;
initiating a security compliance test on the first set of resource devices to obtain a security compliance result;
making a first determination, based on the security compliance result, that the first set of resource devices meet a security compliance criterion; and
in response to the first determination:
storing a virtual certificate in a security compliance database based on the security compliance result; and
allocating the first set of resource devices to a workload based on the workload generation request;
obtaining a second workload generation request, wherein the second workload generation request specifies the security compliant rule;
in response to the second workload generation request:
selecting a second set of resource devices using the resource allocation master list;
initiating the security compliance test on the second set of resource devices to obtain a second security compliance result;
making a second determination, based on the second security compliance result, that the second set of resource devices do not meet the security compliance criterion; and
in response to the second determination:
selecting a third set of resource devices using the resource allocation master list;
initiating the security compliance test on the third set of resource devices to obtain a third security compliance result;
making a third determination, based on the third security compliance result, that the third set of resource devices meet the security compliance criterion; and
in response to the third determination:
storing a second virtual certificate in the security compliance database based on the third security compliance result; and
allocating the third set of resource devices to a second workload based on the workload generation request.
8. The non-transitory computer readable medium of claim 7 , wherein the security compliance criterion is based on the security compliant rule.
9. The non-transitory computer readable medium of claim 7 , wherein the security compliant rule specifies an encryption algorithm.
10. The non-transitory computer readable medium of claim 7 , wherein the security compliance test comprises:
performing a penetration test on data stored in at least one resource device in the first set of resource devices;
making a second determination, based on the penetration test, that the data is not accessible without authorization; and
in response to the second determination, generating the security compliance result, wherein the security compliance result specifies the second determination.
11. The non-transitory computer readable medium of claim 10 , wherein initiating the security compliance test comprises prompting a third-party application to perform the security compliance test.
12. The non-transitory computer readable medium of claim 7 , wherein a resource device in the first set of resource devices is a storage device.
13. A system, comprising:
a processor; and
memory comprising instructions, which when executed by the processor, perform a method, the method comprising:
obtaining a workload generation request, wherein the workload generation request specifies a security compliant rule;
in response to the workload generation request:
selecting a first set of resource devices using a resource allocation master list;
initiating a security compliance test on the first set of resource devices to obtain a security compliance result;
making a first determination, based on the security compliance result, that the first set of resource devices meet a security compliance criterion; and
in response to the first determination:
storing a virtual certificate in a security compliance database based on the security compliance result; and
allocating the first set of resource devices to a workload based on the workload generation request;
obtaining a second workload generation request, wherein the second workload generation request specifies the security compliant rule;
in response to the second workload generation request:
selecting a second set of resource devices using the resource allocation master list;
initiating the security compliance test on the second set of resource devices to obtain a second security compliance result;
making a second determination, based on the second security compliance result, that the second set of resource devices do not meet the security compliance criterion; and
in response to the second determination:
selecting a third set of resource devices using the resource allocation master list;
initiating the security compliance test on the third set of resource devices to obtain a third security compliance result;
making a third determination, based on the third security compliance result, that the third set of resource devices meet the security compliance criterion; and
in response to the third determination:
storing a second virtual certificate in the security compliance database based on the third security compliance result; and
allocating the third set of resource devices to a second workload based on the workload generation request.
14. The system of claim 13 , wherein the security compliance criterion is based on the security compliant rule.
15. The system of claim 13 , wherein the security compliant rule specifies an encryption algorithm.
16. The system of claim 13 , wherein the security compliance test comprises:
performing a penetration test on data stored in at least one resource device in the first set of resource devices;
making a second determination, based on the penetration test, that the data is not accessible without authorization; and
in response to the second determination, generating the security compliance result, wherein the security compliance result specifies the second determination.
17. The system of claim 16 , wherein initiating the security compliance test comprises prompting a third-party application to perform the security compliance test.