Generation and application of meta-policies for application deployment environments
Systems, computer-implemented methods, and computer program products that can facilitate generating and applying meta-policies for application deployment environments are provided. According to an embodiment, a system can comprise a memory that stores computer executable components and a processor that executes the computer executable components stored in the memory. The computer executable components can comprise a state analyzer that can analyze a first application deployment environment to identify a first configuration of the first application deployment environment. The computer executable components can further comprise a policy generator that generates a meta-policy based on the identified first configuration.
1. A computer-implemented method, comprising:
analyzing, by a system operatively coupled to a processor, a first application deployment environment to identify a first configuration of the first application deployment environment; and
generating, by the system, a meta-policy based on the identified first configuration,
wherein the generating the meta-policy comprises: identifying, by the system, common elements in the first configuration of the first application deployment environment, wherein the common elements are identified based on a determination that there is a common suffix for two or more roles.
2. The computer-implemented method of claim 1 , further comprising:
comparing, by the system, the meta-policy to a second configuration of a second application deployment environment; and
identifying, by the system, based on the comparing the meta-policy to the second configuration, a first configuration element of the meta-policy that is equivalent to a second configuration element of the second application deployment environment.
3. The computer-implemented method of claim 2 , wherein the identifying the first configuration element that is equivalent to a second configuration element comprises determining a semantic equivalence between the first configuration element and the second configuration element.
4. The computer-implemented method of claim 2 , wherein the identifying the first configuration element that is equivalent to a second configuration element comprises applying a rule of the meta-policy to the second configuration element.
5. The computer-implemented method of claim 1 , wherein the identifying the first configuration of the first application deployment environment comprises identifying patterns of settings in the first configuration.
6. The computer-implemented method of claim 1 , wherein the generating the meta-policy further comprises:
generating, by the system, an aggregated element based on the identified common elements, wherein the meta-policy comprises the aggregated element.
7. The computer-implemented method of claim 1 , wherein the first application deployment environment comprises a cluster of one or more applications.
8. The computer-implemented method of claim 1 , wherein the first application deployment environment comprises an application deployment environment that is approved based on a data protection standard.
9. The computer-implemented method of claim 8 , further comprising, determining a minimum set of configuration elements required to be compliant with the data protection standard.
10. A computer program product facilitating generating a meta-policy based on a first application deployment environment, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a processor to cause the processor to:
analyze the first application deployment environment to identify a first configuration of the approved first application deployment environment;
generate the meta-policy based on the identified configuration;
compare a first configuration element of the meta-policy with a second configuration of the second application deployment environment; and
determine, by the processor, a semantic equivalence between the first configuration and the second configuration, wherein the semantic equivalence is determined based on a determination of commonality between privileges for roles.