Network Restrictions For Secure Sharing Of Cloud Storage Data

1 . A method comprising:

receiving, from a requestor, a request to access a dataset that is stored within a cloud-based storage system of one or more cloud-based storage systems, wherein one or more network topology-based restrictions restrict access to one or more portions of the dataset;

in response to the request, generating an obfuscated dataset for the requestor that restricts access to at least one portion of the dataset based on the one or more network topology-based restrictions; and

providing the obfuscated dataset to the requestor.

2 . The method of claim 1 wherein the one or more network topology-based restrictions restrict access to portions of datasets, services, or virtual storage systems.

3 . The method of claim 1 , wherein the cloud-based storage systems include a plurality of execution environments that are accessible via different virtual networks.

4 . The method of claim 3 , wherein the plurality of execution environments include a production execution environment and a test and development execution environment.

5 . The method of claim 4 , wherein one or more portions of the requested dataset are in the production execution environment, and wherein providing the obfuscated dataset further comprises:

determining that the requestor is not authorized to access the one or more portions of the requested dataset; and

providing the obfuscated dataset by excluding, by the one or more network topology-based restrictions, the one or more portions of the dataset that the requestor is not authorized to access.

6 . The method of claim 1 , wherein generating the obfuscated dataset for the requestor further comprises creating a dataset that includes only the portions of the dataset that should be provided to the requestor.

7 . The method of claim 1 , wherein providing the requestor with at least a portion of the dataset further comprises providing the requestor with a snapshot of the portion of the dataset.

8 . The method of claim 1 , further comprising notifying the requestor that the dataset is at least partially available for accessing.

9 . An apparatus including a computer processor and a computer memory, the computer memory including computer program instructions that when executed by the computer processor, cause the apparatus to carry out the steps of:

receiving, from a requestor, a request to access a dataset that is stored within a cloud-based storage system of one or more cloud-based storage systems, wherein one or more network topology-based restrictions restrict access to one or more portions of the dataset;

in response to the request, generating an obfuscated dataset for the requestor that restricts access to at least one portion of the dataset based on the one or more network topology-based restrictions; and

providing the obfuscated dataset to the requestor.

10 . The apparatus of claim 9 , wherein the one or more network topology-based restrictions restrict access to portions of datasets, services, or virtual storage systems.

11 . The apparatus of claim 9 , wherein the cloud-based storage systems include a plurality of execution environments that are accessible via different virtual networks.

12 . The apparatus of claim 11 , wherein the plurality of execution environments include a production execution environment and a test and development execution environment.

13 . The apparatus of claim 9 , wherein the computer program instructions further cause the apparatus to perform the steps of:

determining that the requestor is not authorized to access the one or more portions of the requested dataset; and

providing the obfuscated dataset by excluding, by the one or more network topology-based restrictions, the one or more portions of the dataset that the requestor is not authorized to access.

14 . The apparatus of claim 9 , wherein generating the obfuscated dataset for the requestor further comprises creating a dataset that includes only the portions of the dataset that should be provided to the requestor.

15 . The apparatus of claim 9 , wherein providing the requestor with at least a portion of the dataset further comprises providing the requestor with a snapshot of the portion of the dataset.

16 . A computer program product disposed upon a non-transitory computer readable medium, the computer program product comprising computer program instructions that, when executed, cause a computer to carry out the steps of:

receiving, from a requestor, a request to access a dataset that is stored within a cloud-based storage system of one or more cloud-based storage systems, wherein one or more network topology-based restrictions restrict access to one or more portions of the dataset;

in response to the request, generating an obfuscated dataset for the requestor that restricts access to at least one portion of the dataset based on the one or more network topology-based restrictions; and

providing the obfuscated dataset to the requestor.

17 . The computer program product of claim 16 , wherein the one or more network topology-based restrictions restrict access to portions of datasets, services, or virtual storage systems.

18 . The computer program product of claim 16 , wherein the cloud-based storage systems include a plurality of execution environments that are accessible via different virtual networks.

19 . The computer program product of claim 18 , wherein the plurality of execution environments include a production execution environment and a test and development execution environment.

20 . The computer program product of claim 16 , wherein the computer program instructions further cause the computer to carry out the steps of:

determining that the requestor is not authorized to access the one or more portions of the requested dataset; and

providing the obfuscated dataset by excluding, by the one or more network topology-based restrictions, the one or more portions of the dataset that the requestor is not authorized to access.