Learning from similar cloud deployments
Learning from similar cloud deployments, including: identifying, for at least a portion of a first cloud deployment, one or more additional cloud deployments to utilize for cross-customer learning; receiving information describing configurations associated with the additional cloud deployments; and identifying, based on the configurations, one or more configurations to adopt for the first cloud deployment.
1. A method of learning from similar cloud deployments, the method comprising:
identifying, for at least a portion of a first cloud deployment, one or more additional cloud deployments to utilize for cross-customer learning;
receiving information describing configurations associated with the additional cloud deployments, including receiving information describing permissions for one or more users of the additional cloud deployments;
determining, based on the information describing permissions for one or more users of the additional cloud deployments, that one or more users of the first cloud deployment are over-permissioned; and
identifying, based on the configurations, one or more configurations to adopt for the first cloud deployment, including identifying a reduced privilege level to give to the one or more users.
2. The method of claim 1 further comprising:
receiving information describing one or more actions associated with the additional cloud deployments; and
wherein identifying the one or more configurations to adopt for the first cloud deployment is further based on the one or more actions.
3. The method of claim 2 wherein:
receiving information describing one or more actions associated with the additional cloud deployments further comprises receiving information describing a security threat to one or more of the additional cloud deployments; and
receiving information describing configurations associated with the additional cloud deployments further comprises receiving information describing configuration settings used to combat the security threat.
4. The method of claim 2 wherein:
receiving information describing one or more actions associated with the additional cloud deployments further comprises receiving information describing a detected vulnerability associated with one or more of the additional cloud deployments; and
receiving information describing configurations associated with the additional cloud deployments further comprises receiving information describing configuration settings used to address the vulnerability.
5. The method of claim 1 further comprising identifying abnormally configured components in the first cloud deployment.
6. The method of claim 1 further comprising receiving information describing one or more deployment processes associated with the additional cloud deployments.
7. The method of claim 1 wherein determining that one or more users of the first cloud deployment are over-permissioned comprises:
identifying the one or more users of the additional cloud deployments based on a similarity to the one or more users of the first cloud deployment; and
determining that the one or more users of the additional cloud deployments have permissions different or lesser than the one or more users of the first cloud deployment.
8. A system for learning from similar cloud deployments, the system comprising at least one processor and memory storing computer program instructions that, when executed, cause the system to carry out the steps of:
identifying, for at least a portion of a first cloud deployment, one or more additional cloud deployments to utilize for cross-customer learning;
receiving information describing configurations associated with the additional cloud deployments, including receiving information describing permissions for one or more users of the additional cloud deployments;
determining, based on the information describing permissions for one or more users of the additional cloud deployments, that one or more users of the first cloud deployment are over-permissioned; and
identifying, based on the configurations, one or more configurations to adopt for the first cloud deployment, including identifying a reduced privilege level to give to the one or more users.
9. The system of claim 8 wherein the computer program instructions, when executed, cause the system to carry out the step of:
receiving information describing one or more actions associated with the additional cloud deployments; and
wherein identifying the one or more configurations to adopt for the first cloud deployment is further based on the one or more actions.
10. The system of claim 9 wherein:
receiving information describing one or more actions associated with the additional cloud deployments further comprises receiving information describing a security threat to one or more of the additional cloud deployments; and
receiving information describing configurations associated with the additional cloud deployments further comprises receiving information describing configuration settings used to combat the security threat.
11. The system of claim 9 wherein:
receiving information describing one or more actions associated with the additional cloud deployments further comprises receiving information describing a detected vulnerability associated with one or more of the additional cloud deployments; and
receiving information describing configurations associated with the additional cloud deployments further comprises receiving information describing configuration settings used to address the vulnerability.
12. The system of claim 8 wherein the computer program instructions, when executed, cause the system to carry out the step of identifying abnormally configured components in the first cloud deployment.
13. The system of claim 8 wherein the computer program instructions, when executed, cause the system to carry out the step of receiving information describing one or more deployment processes associated with the additional cloud deployments.
14. A computer program product for learning from similar cloud deployments, the computer program product disposed on a non-transitory computer readable medium, the computer program product including computer program instructions that, when executed, carry out the steps of:
identifying, for at least a portion of a first cloud deployment, one or more additional cloud deployments to utilize for cross-customer learning;
receiving information describing configurations associated with the additional cloud deployments, including receiving information describing permissions for one or more users of the additional cloud deployments;
determining, based on the information describing permissions for one or more users of the additional cloud deployments, that one or more users of the first cloud deployment are over-permissioned; and
identifying, based on the configurations, one or more configurations to adopt for the first cloud deployment, including identifying a reduced privilege level to give to the one or more users.
15. The computer program product of claim 14 further comprising computer program instructions that, when executed, carry out the step of:
receiving information describing one or more actions associated with the additional cloud deployments; and
wherein identifying the one or more configurations to adopt for the first cloud deployment is further based on the one or more actions.
16. The computer program product of claim 15 wherein:
receiving information describing one or more actions associated with the additional cloud deployments further comprises receiving information describing a security threat to one or more of the additional cloud deployments; and
receiving information describing configurations associated with the additional cloud deployments further comprises receiving information describing configuration settings used to combat the security threat.
17. The computer program product of claim 15 further comprising computer program instructions that, when executed, carry out the step of creating a polygraph associated with the first cloud deployment.
18. The computer program product of claim 15 wherein:
receiving information describing one or more actions associated with the additional cloud deployments further comprises receiving information describing a detected vulnerability associated with one or more of the additional cloud deployments; and
receiving information describing configurations associated with the additional cloud deployments further comprises receiving information describing configuration settings used to address the vulnerability.
19. The computer program product of claim 15 further comprising computer program instructions that, when executed, carry out the step of identifying abnormally configured components in the first cloud deployment.
20. The computer program product of claim 15 further comprising computer program instructions that, when executed, carry out the step of receiving information describing one or more deployment processes associated with the additional cloud deployments.