Granted Patent B2

US 12,445,495 · App. 18/190,368 · Granted Oct 14, 2025

Inventor: Arn Hyndman (Ottawa, CA)

Assignee: INTERNATIONAL BUSINESS MACHINES CORPORATION

H04L63/20

Abstract

Claims (91)

1. A computer-implemented method, comprising operations for:

receiving a signed Infrastructure as Code (IaC) solution, wherein the signed IaC solution is selected from a group consisting of a signed public IaC solution, a signed private IaC solution, and a signed combined IaC solution;

performing a policy check to determine that the signed IaC solution conforms to one or more policies;

performing an automated validation of the signed IaC solution to check for one or more compliance or security issues;

performing a signature check of the signed IaC solution to determine that the signed IaC solution has not been tampered with;

determining that the signed IaC solution is authorized to be deployed by checking a trusted profile;

validating one or more configuration parameters; and

executing the signed IaC solution using the one or more configuration parameters to deploy cloud resources.

2. The computer-implemented method of claim 1 , wherein the signed combined IaC solution comprises a combination of the signed public IaC solution and the signed private IaC solution.

3. The computer-implemented method of claim 1 , comprising further operations for:

under control of a public catalog:

receiving the signed public IaC solution;

performing another automated validation of the signed public IaC solution;

performing another signature check of the signed public IaC solution; and

in response to the signed public IaC solution being approved based on the automated validation and the signature check, storing the signed public IaC solution as an approved IaC solution in the public catalog.

4. The computer-implemented method of claim 1 , comprising further operations for:

under control of a private catalog:

receiving the signed private IaC solution;

performing another automated validation of the signed private IaC solution;

performing another signature check of the signed private IaC solution; and

in response to the signed private IaC solution being approved based on the automated validation and the signature check, storing the signed private IaC solution as an approved IaC solution in the private catalog.

5. The computer-implemented method of claim 1 , comprising further operations for:

displaying a plurality of approved IaC solutions;

receiving selection of an approved IaC solution from the plurality of approved IaC solutions;

receiving authorization to execute the selected, approved IaC solution; and

executing the selected, approved IaC solution to deploy new cloud resources.

6. The computer-implemented method of claim 1 , wherein a public catalog, a private catalog, a secure deployment agent, and a target account form a secure IaC solution pipeline.

7. The computer-implemented method of claim 1 , comprising further operations for:

determining that a new, signed IaC solution is not authorized to be deployed by checking the trusted profile; and

returning a message that the resources will not be deployed.

8. A computer program product, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a processor to cause the processor to perform operations for:

receiving a signed Infrastructure as Code (IaC) solution, wherein the signed IaC solution is selected from a group consisting of a signed public IaC solution, a signed private IaC solution, and a signed combined IaC solution;

performing a policy check to determine that the signed IaC solution conforms to one or more policies;

performing an automated validation of the signed IaC solution to check for one or more compliance or security issues;

performing a signature check of the signed IaC solution to determine that the signed IaC solution has not been tampered with;

determining that the signed IaC solution is authorized to be deployed by checking a trusted profile;

validating one or more configuration parameters; and

executing the signed IaC solution using the one or more configuration parameters to deploy cloud resources.

9. The computer program product of claim 8 , wherein the signed combined IaC solution comprises a combination of the signed public IaC solution and the signed private IaC solution.

10. The computer program product of claim 8 , wherein the program instructions are executable by the processor to cause the processor to perform further operations for:

under control of a public catalog:

receiving the signed public IaC solution;

performing another automated validation of the signed public IaC solution;

performing another signature check of the signed public IaC solution; and

in response to the signed public IaC solution being approved based on the automated validation and the signature check, storing the signed public IaC solution as an approved IaC solution in the public catalog.

11. The computer program product of claim 8 , wherein the program instructions are executable by the processor to cause the processor to perform further operations for:

under control of a private catalog:

receiving the signed private IaC solution;

performing another automated validation of the signed private IaC solution;

performing another signature check of the signed private IaC solution; and

in response to the signed private IaC solution being approved based on the automated validation and the signature check, storing the signed private IaC solution as an approved IaC solution in the private catalog.

12. The computer program product of claim 8 , wherein the program instructions are executable by the processor to cause the processor to perform further operations for:

displaying a plurality of approved IaC solutions;

receiving selection of an approved IaC solution from the plurality of approved IaC solutions;

receiving authorization to execute the selected, approved IaC solution; and

executing the selected, approved IaC solution to deploy new cloud resources.

13. The computer program product of claim 8 , wherein a public catalog, a private catalog, a secure deployment agent, and a target account form a secure IaC solution pipeline.

14. The computer program product of claim 8 , wherein the program instructions are executable by the processor to cause the processor to perform further operations for:

determining that a new, signed IaC solution is not authorized to be deployed by checking the trusted profile; and

returning a message that the resources will not be deployed.

15. A computer system, comprising:

one or more processors, one or more computer-readable memories and one or more computer-readable, tangible storage devices; and

program instructions, stored on at least one of the one or more computer-readable, tangible storage devices for execution by at least one of the one or more processors via at least one of the one or more computer-readable memories, to perform operations comprising:

receiving a signed Infrastructure as Code (IaC) solution, wherein the signed IaC solution is selected from a group consisting of a signed public IaC solution, a signed private IaC solution, and a signed combined IaC solution;

performing a policy check to determine that the signed IaC solution conforms to one or more policies;

performing an automated validation of the signed IaC solution to check for one or more compliance or security issues;

performing a signature check of the signed IaC solution to determine that the signed IaC solution has not been tampered with;

determining that the signed IaC solution is authorized to be deployed by checking a trusted profile;

validating one or more configuration parameters; and

executing the signed IaC solution using the one or more configuration parameters to deploy cloud resources.

16. The computer system of claim 15 , wherein the signed combined IaC solution comprises a combination of the signed public IaC solution and the signed private IaC solution.

17. The computer system of claim 15 , wherein the operations further comprise:

under control of a public catalog:

receiving the signed public IaC solution;

performing another automated validation of the signed public IaC solution;

performing another signature check of the signed public IaC solution; and

in response to the signed public IaC solution being approved based on the automated validation and the signature check, storing the signed public IaC solution as an approved IaC solution in the public catalog.

18. The computer system of claim 15 , wherein the operations further comprise:

under control of a private catalog:

receiving the signed private IaC solution;

performing another automated validation of the signed private IaC solution;

performing another signature check of the signed private IaC solution; and

in response to the signed private IaC solution being approved based on the automated validation and the signature check, storing the signed private IaC solution as an approved IaC solution in the private catalog.

19. The computer system of claim 15 , wherein the operations further comprise:

displaying a plurality of approved IaC solutions;

receiving selection of an approved IaC solution from the plurality of approved IaC solutions;

receiving authorization to execute the selected, approved IaC solution; and

executing the selected, approved IaC solution to deploy new cloud resources.

20. The computer system of claim 15 , wherein the operations further comprise:

determining that a new, signed IaC solution is not authorized to be deployed by checking the trusted profile; and

returning a message that the resources will not be deployed.

Assignments (1)

Continuity (1)

References Cited (12)

Cited By (1)

US 12,603,890