IP Library › Granted Patent US 11,012,370
Granted Patent B1
US 11,012,370 · App. 16/879,371 · Granted May 18, 2021

Using captured configuration changes to enable on-demand production of graph-based relationships in a cloud computing environment

Inventor: Matthew Gladney (Washington, DC)
Assignee: Capital One Services, LLC
H04L47/765G06F16/903G06F16/9024H04L47/783H04L47/821H04L47/822H04L47/828
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,012,370
App. No.
16/879,371
Granted
May 18, 2021
Kind
B1
Abstract

Described herein is a system for automatically capturing configuration changes to the cloud computing resources. The system for automatically capturing configuration changes may detect changes to configurations of cloud computing resources across the geographic regions, in real-time. The changes may be stored in a central data storage device instantiated by a central cloud computing account. Furthermore, a relationship graph indicating the relationships between the different cloud computing resources may be generated.

Claims (43)

1. A method for identifying accessible cloud computing resources, the method comprising:

receiving, by one or more computing devices, a request to identify which cloud computing resources of a predetermined type that are accessible to a requested cloud computing resource from a user device;

responsive to the request:

retrieving, by the one or more computing devices, configuration data that specifies a group of cloud computing resources that the requested cloud computing resource is allowed to communicate to;

for each of the group of cloud computing resources:

retrieving, by the one or more computing devices, corresponding configuration data for the respective cloud computing resource, the corresponding configuration data specifying which cloud computing resources that the respective cloud computing resource is allowed to communicate to; and

determining, by the one or more computing devices, whether the corresponding configuration data specifies that the respective cloud computing resource is allowed to communicate to the requested cloud computing resource to identify a subset of the group of cloud computing resources able to communicate with the requested cloud computing resource; and

determining, by the one or more computing devices, which cloud computing resources of the subset are of the predetermined type.

2. The method of claim 1 , wherein the configuration data that specifies the group of cloud computing resources that the requested cloud computing resource is allowed to communicate to and the corresponding configuration data for the respective cloud computing resource each include port configurations.

3. The method of claim 2 , wherein the port configurations include inbound and outbound port configurations.

4. The method of claim 3 , wherein the inbound port configurations govern inbound network traffic and the outbound port configurations govern outbound network traffic.

5. The method of claim 1 , further comprising providing, by the one or more computing devices, the cloud computing resources of the predetermined type, to the user device.

6. The method of claim 1 , wherein the requested cloud computing resource and the group of cloud computing resources are accessible to a load balancer.

7. The method of claim 6 , wherein the load balancer is configured to forward data traffic to the requested cloud computing resource and the group of cloud computing resources based on the configuration data that specifies the group of cloud computing resources that the requested cloud computing resource is allowed to communicate to and the corresponding configuration data for the respective cloud computing resource.

8. A system for identifying accessible cloud computing resources, the system comprising:

a memory; and

a processor communicatively coupled with the memory and configured to:

receive a request to identify which cloud computing resources of a predetermined type that are accessible to a requested cloud computing resource from a user device;

responsive to the request:

retrieve configuration data that specifies a group of cloud computing resources that the requested cloud computing resource is allowed to communicate to;

for each of the group of cloud computing resources:

retrieve corresponding configuration data for the respective cloud computing resource, the corresponding configuration data specifying which cloud computing resources that the respective cloud computing resource is allowed to communicate to; and

determine whether the corresponding configuration data specifies that the respective cloud computing resource is allowed to communicate to the requested cloud computing resource to identify a subset of the group of cloud computing resources able to communicate with the requested cloud computing resource; and

determine which cloud computing resources of the subset are of the predetermined type.

9. The system of claim 8 , wherein the configuration data that specifies the group of cloud computing resources that the requested cloud computing resource is allowed to communicate to and the corresponding configuration data for the respective cloud computing resource includes port configurations.

10. The system of claim 9 , wherein the port configurations include inbound and outbound port configurations.

11. The system of claim 10 , wherein the inbound port configurations govern inbound network traffic and the outbound port configurations govern outbound network traffic.

12. The system of claim 8 , wherein the processor is further configured to provide the cloud computing resources of the predetermined type, to the user device.

13. The system of claim 8 , wherein the requested cloud computing resource and the group of cloud computing resources are accessible to a load balancer.

14. The system of claim 13 , wherein the load balancer is configured to forward data traffic to the requested cloud computing resource and the group of cloud computing resources based on the configuration data that specifies the group of cloud computing resources that the requested cloud computing resource is allowed to communicate to and the corresponding configuration data for the respective cloud computing resource.

15. A non-transitory computer-readable medium having instructions stored thereon that, when executed by at least one computing device, cause the at least one computing device to perform operations comprising:

receiving a request to identify which cloud computing resources of a predetermined type that are accessible to a requested cloud computing resource from a user device;

responsive to the request:

retrieving configuration data that specifies a group of cloud computing resources that the requested cloud computing resource is allowed to communicate to;

for each of the group of cloud computing resources:

retrieving corresponding configuration data for the respective cloud computing resource, the corresponding configuration data specifying which cloud computing resources that the respective cloud computing resource is allowed to communicate to; and

determining whether the corresponding configuration data specifies that the respective cloud computing resource is allowed to communicate to the requested cloud computing resource to identify a subset of the group of cloud computing resources able to communicate with the requested cloud computing resource; and

determining which cloud computing resources of the subset are of the predetermined type.

16. The non-transitory computer readable medium of claim 15 , wherein the configuration data that specifies the group of cloud computing resources that the requested cloud computing resource is allowed to communicate to and the corresponding configuration data for the respective cloud computing resource includes port configurations.

17. The non-transitory computer readable medium of claim 16 , wherein the port configurations include inbound and outbound port configurations.

18. The non-transitory computer readable medium of claim 17 , wherein the inbound port configurations govern inbound network traffic and the outbound port configurations govern outbound network traffic.

19. The non-transitory computer readable medium of claim 15 , the operations further comprising providing the cloud computing resources of the predetermined type to the user device.

20. The non-transitory computer readable medium of claim 15 , wherein a load balancer is configured to forward data traffic to the requested cloud computing resource and the group of cloud computing resources based on the configuration data that specifies the group of cloud computing resources that the requested cloud computing resource is allowed to communicate to and the corresponding configuration data for the respective cloud computing resource.

Continuity (1)
Continuation 16702993 · Dec 4, 2019