Network resource management devices methods and systems
A method of managing a configuration of a computer network system includes creating of an instance of a server by a user through an interface of a public cloud service. A management process detects the existence of the instance by regularly polling the cloud service for infrastructure data and analyzing the infrastructure data to determine that the newly created instance exists. The method also includes testing parameters of the server indicated in the infrastructure data, which parameters are fully determined by the request, against predefined one or more infrastructure policies, whereby the parameters are available and testable against the policies during the generating, but are tested after the request is enacted to create the instance without creating policy enforcement encumbrance on the user when the user creates the new instance of the server.
1. A method comprising:
receiving a request from a user to modify an instance of a resource provided in a cloud computing environment, wherein the cloud computing environment is associated with a utilization policy that specifies at least one security rule;
causing the request to be fulfilled by the cloud computing environment without intervention for enforcement of the utilization policy in response to the request;
scheduling a harvest task to obtain on a repeating schedule data that specifies configuration of the instance provided in the cloud computing environment;
receiving infrastructure status data that specifies the configurations of the instance based on an output of the harvest task;
detecting a change in the configuration of the instance based on the infrastructure status data, wherein the change is caused by a modification of the instance;
detecting that the change in the configuration deviates from the at least one security rule; and
causing the instance to be further modified in the cloud computing environment so that it satisfies the at least one security rule.
2. The method of claim 1 , wherein
the cloud computing environment is provided by a cloud service;
the detecting of the change in the configuration of the instance is performed by a cloud management system that monitors the cloud service; and
the causing of the instance to be further modified comprises performing, by the cloud management system:
creating a first request to further modify the instance in a first language of management system;
translating the first request to a second request in a second language of the cloud service; and
sending the second request to the cloud service.
3. The method of claim 2 , further comprising:
receiving a response to the second request indicating a termination of the instance and failure metadata about the instance.
4. The method of claim 3 , further comprising:
translating the response from the second language of the cloud service to the first language of the cloud management system.
5. The method of claim 3 , wherein
the response comprises a notification email to an administrator.
6. The method of claim 1 , wherein
causing the instance to be further modified comprises causing termination of the instance in the cloud computing environment.
7. The method of claim 1 , wherein
causing the instance to be further modified comprises causing the instance to be disconnected from one or more other resources external to the cloud computing environment.
8. The method of claim 1 , wherein
causing the instance to be further modified comprises blocking one or more users from accessing the instance.
9. The method of claim 1 , further comprising:
invoking one or more user-registered methods in response to detecting that the change deviates from the at least one security rule, wherein the user-registered methods are implemented as scripts.
10. The method of claim 1 , further comprising:
determining, based on the infrastructure status data, that the configuration of the instance is in a transitional state; and
in response to the determination that the configuration of the instance is in a transitional state, modifying the repeating schedule of the harvest task to increase a frequency of the harvest task.
11. A system comprising:
one or more computing systems that implement a cloud management system, configured to:
receive a request from a user to modify an instance of a resource provided in a cloud computing environment, wherein the cloud computing environment is associated with a utilization policy that specifies at least one security rule;
cause the request to be fulfilled by the cloud computing environment without intervention for enforcement of the utilization policy in response to the request;
schedule a harvest task to obtain on a repeating schedule data that specifies configuration of the instance provided in the cloud computing environment;
receive infrastructure status data that specifies the configurations of the instance based on an output of the harvest task;
detect a change in the configuration of the instance based on the infrastructure status data, wherein the change is caused by a modification of the instance;
detect that the change in the configuration deviates from the at least one security rule; and
cause the instance to be further modified in the cloud computing environment so that it satisfies the at least one security rule.
12. The system of claim 11 , wherein
the cloud computing environment is provided by a cloud service; and
to cause the instance to be further modified, the cloud management system is configured to:
create a first request to further modify the instance in a first language of management system;
translate the first request to a second request in a second language of the cloud service; and
send the second request to the cloud service.
13. The system of claim 12 , wherein the cloud management system is configured to:
receive a response to the second request indicating failure metadata about the instance; and
translate the response from the second language of the cloud service to the first language of the cloud management system.
14. The system of claim 13 , wherein
the response comprises a notification email to an administrator.
15. The system of claim 11 , wherein
to cause the instance to be further modified, the cloud management system is configured to cause a termination of the instance in the cloud computing environment.
16. The system of claim 11 , wherein
to cause the instance to be further modified, the cloud management system is configured to cause the instance to be disconnected from one or more other resources external to the cloud computing environment.
17. The system of claim 11 , wherein
to cause the instance to be further modified, the cloud management system is configured to block one or more users from accessing the instance.
18. One or more non-transitory computer-readable media storing instructions that when executed on one or more processors implement a cloud management system and cause the cloud management system to:
receive a request from a user to modify an instance of a resource provided in a cloud computing environment, wherein the cloud computing environment is associated with a utilization policy that specifies at least one security rule;
cause the request to be fulfilled by the cloud computing environment without intervention for enforcement of the utilization policy in response to the request;
schedule a harvest task to obtain on a repeating schedule data that specifies configuration of the instance provided in the cloud computing environment;
receive infrastructure status data that specifies the configurations of the instance based on an output of the harvest task;
detect a change in the configuration of the instance based on the infrastructure status data, wherein the change is caused by a modification of the instance;
detect that the change in the configuration deviates from the at least one security rule; and
cause the instance to be further modified in the cloud computing environment so that it satisfies the at least one security rule.
19. The one or more non-transitory computer-readable media of claim 18 , wherein
the cloud computing environment is provided by a cloud service; and
to cause the instance to be further modified, the instructions when executed on the one or more processors cause the cloud management system to:
create a first request to further modify the instance in a first language of management system;
translate the first request to a second request in a second language of the cloud service; and
send the second request to the cloud service.
20. The one or more non-transitory computer-readable media of claim 18 , wherein
to cause the instance to be further modified, the instructions when executed on the one or more processors cause the cloud management system to cause a termination of the instance in the cloud computing environment.