Providing on-demand production of graph-based relationships in a cloud computing environment
Described herein is a system for automatically capturing configuration changes to the cloud computing resources. The system for automatically capturing configuration changes may detect changes to configurations of cloud computing resources across the geographic regions, in real-time. The changes may be stored in a central data storage device instantiated by a central cloud computing account. Furthermore, a relationship graph indicating the relationships between the different cloud computing resources may be generated.
1. A method for identifying accessible cloud computing resources, the method comprising:
receiving, by one or more computing devices, a request to identify cloud computing resources that are accessible to a requested cloud computing resource;
retrieving, by the one or more computing devices, respective configuration data for each respective cloud computing resource of a set of cloud computing resources, wherein the respective configuration data includes respective port configurations that specify cloud computing resources with which the respective cloud computing resource is allowed to communicate;
retrieving, by the one or more computing devices, configuration data of the requested cloud computing resource, wherein the configuration data includes port configurations that specify cloud computing resources with which the requested cloud computing resource is allowed to communicate; and
identifying, by the one or more computing devices, a subset of cloud computing resources from the set that are accessible to the requested cloud computing resource based on the respective port configurations in the respective configuration data for each respective cloud computing resource of the subset and the port configurations of the requested cloud computing resource.
2. The method of claim 1 , wherein the port configurations of the requested cloud computing resource and the respective port configurations include inbound and outbound port configurations.
3. The method of claim 2 , wherein the inbound port configurations govern inbound network traffic and the outbound port configurations govern outbound network traffic.
4. The method of claim 1 , wherein the request to identify the cloud computing resources that are accessible to the requested cloud computing resource specifies a predetermined type of cloud computing resource.
5. The method of claim 1 , wherein the requested cloud computing resource and the subset of cloud computing resources are accessible to a load balancer.
6. The method of claim 1 , further comprising generating, by the one or more computing devices, a relationship graph indicating relationships between the subset of cloud computing resources and the requested cloud computing resource.
7. The method of claim 6 , wherein the relationship graph includes the respective configuration data of each respective cloud computing resource of the subset and the configuration data of the cloud computing resource.
8. A system for identifying accessible cloud computing resources, the system comprising:
a processor coupled to the memory, the processor configured to:
receive a request to identify cloud computing resources that are accessible to a requested cloud computing resource;
retrieve respective configuration data for each respective cloud computing resource of a set of cloud computing resources, wherein the respective configuration data includes respective port configurations that specify cloud computing resources with which the respective cloud computing resource is allowed to communicate;
retrieve configuration data of the requested cloud computing resource, wherein the configuration data includes port configurations that specify cloud computing resources with which the requested cloud computing resource is allowed to communicate; and
identify a subset of cloud computing resources from the set that are accessible to the requested cloud computing resource based on the respective port configurations in the respective configuration data for each respective cloud computing resource of the subset and the port configurations of the requested cloud computing resource.
9. The system of claim 8 , wherein the port configurations of the requested cloud computing resource and the respective port configurations include inbound and outbound port configurations.
10. The system of claim 9 , wherein the inbound port configurations govern inbound network traffic and the outbound port configurations govern outbound network traffic.
11. The system of claim 8 , wherein the request to identify the cloud computing resources that are accessible to the requested cloud computing resource specifies a predetermined type of cloud computing resource.
12. The system of claim 8 , wherein the requested cloud computing resource and the subset of cloud computing resources are accessible to a load balancer.
13. The system of claim 8 , wherein the processor is further configured to generate a relationship graph indicating relationships between the subset of cloud computing resources and the requested cloud computing resource.
14. The system of claim 13 , wherein the relationship graph includes the respective configuration data of each respective cloud computing resource of the subset and the configuration data of the cloud computing resource.
15. A non-transitory computer-readable medium having instructions stored thereon that, when executed by at least one computing device, cause the at least one computing device to perform operations comprising:
receiving a request to identify cloud computing resources that are accessible to a requested cloud computing resource;
retrieving respective configuration data for each respective cloud computing resource of a set of cloud computing resources, wherein the respective configuration data includes respective port configurations that specify cloud computing resources with which the respective cloud computing resource is allowed to communicate;
retrieving configuration data of the requested cloud computing resource, wherein the configuration data includes port configurations that specify cloud computing resources with which the requested cloud computing resource is allowed to communicate; and
identifying a subset of cloud computing resources from the set that are accessible to the requested cloud computing resource based on the respective port configurations in the respective configuration data for each respective cloud computing resource of the subset and the port configurations of the requested cloud computing resource.
16. The non-transitory computer-readable medium of claim 15 , wherein the port configurations of the requested cloud computing resource and the respective port configurations include inbound and outbound port configurations.
17. The non-transitory computer-readable medium of claim 16 , wherein the inbound port configurations govern inbound network traffic and the outbound port configurations govern outbound network traffic.
18. The non-transitory computer-readable medium of claim 15 , wherein the request to identify the cloud computing resources that are accessible to the requested cloud computing resource specifies a predetermined type of cloud computing resource.
19. The non-transitory computer-readable medium of claim 15 , wherein the requested cloud computing resource and the subset of cloud computing resources are accessible to a load balancer.
20. The non-transitory computer-readable medium of claim 15 , further comprising generating, by the at least one computing device, a relationship graph indicating relationships between the subset of cloud computing resources and the requested cloud computing resources, wherein the relationship graph includes the respective configuration data of each respective cloud computing resource of the subset and the configuration data of the cloud computing resource.