Method for sensitive infrastructure protection
View Patent ↗Managing access to computing environments is provided. A number of infrastructure as code (IAC) configurations are configured, wherein the IAC configurations are related to a same project. The IAC configurations are grouped into a number of environments, wherein the environments represent project stages or deployment situations, and wherein the environments have respective access privileges and allowed modifications for the respective IAC configurations within each environment. A number of user trusted profiles are automatically created that are linked to the access privileges and allowed modifications for the environments, wherein each trusted profile is specific to one of the environments. Modification are be deployed in an environment only after those modifications have been successfully deployed in a prerequisite environment.
1 . A computer-implemented method of managing access to computing environments, the method comprising:
using a number of processors to perform:
configuring a number of infrastructure as code (IAC) configurations, wherein the IAC configurations are related to a same project;
grouping the IAC configurations into a number of environments, wherein the environments represent project stages or deployment situations, and wherein the environments have respective access privileges and allowed modifications for the respective IAC configurations within each environment, and wherein the IAC configuration has no prerequisite environment, or the IAC configuration has been successfully deployed in a prerequisite environment; and
automatically creating a number of user trusted profiles that are linked to the access privileges and allowed modifications for the environments, wherein each trusted profile is specific to one of the environments.
2 . The method of claim 1 , wherein a modification cannot be deployed in an environment unless that modification has been successfully deployed in a prerequisite environment.
3 . The method of claim 1 , further comprising searching all IAC configurations in a prerequisite environment for a match of a target IAC configuration version with a successful deployment.
4 . The method of claim 1 , wherein the project development stages comprise at least one of:
development;
testing; or
production.
5 . The method of claim 1 , wherein the access privileges specify session time duration limits.
6 . The method of claim 1 , wherein the access privileges limit access to the specific environment to which access privileges and allowed modifications are linked.
7 . The method of claim 1 , wherein a deployment of the IAC configuration to a selected environment is denied unless a user has assumed a trusted profile corresponding to the selected environment prior to the deployment.
8 . A system for managing access to computing environments, the system comprising:
a storage device that stores program instructions;
one or more processors operably connected to the storage device and configured to execute the program instructions to cause the system to:
configure a number of infrastructure as code (IAC) configurations, wherein the IAC configurations are related to a same project;
group the IAC configurations into a number of environments, wherein the environments represent project stages or deployment situations, and wherein the environments have respective access privileges and allowed modifications for the respective IAC configurations within each environment, and wherein the IAC configuration has no prerequisite environment, or the IAC configuration has been successfully deployed in a prerequisite environment; and
automatically create a number of user trusted profiles that are linked to the access privileges and allowed modifications for the environments, wherein each trusted profile is specific to one of the environments.
9 . The system of claim 8 , wherein a modification cannot be deployed in an environment unless that modification has been successfully deployed in a prerequisite environment.
10 . The system of claim 8 , wherein the program instructions further cause the system to search all IAC configurations in a prerequisite environment for a match of a target IAC configuration version with a successful deployment.
11 . The system of claim 8 , wherein the project development stages comprise at least one of:
development;
testing; or
production.
12 . The system of claim 8 , wherein the access privileges specify session time duration limits.
13 . The system of claim 8 , wherein the access privileges limit access to the specific environment to which access privileges and allowed modifications are linked.
14 . The system of claim 8 , wherein a deployment of the IAC configuration to a selected environment is denied unless a user has assumed a trusted profile corresponding to the selected environment prior to the deployment.
15 . A computer program product for managing access to computing environments, the computer program product comprising:
a computer readable storage medium having program instructions configured to cause one or more processors to:
configure a number of infrastructure as code (IAC) configurations, wherein the IAC configurations are related to a same project;
group the IAC configurations into a number of environments, wherein the environments represent project stages or deployment situations, and wherein the environments have respective access privileges and allowed modifications for the respective IAC configurations within each environment, and wherein the IAC configuration has no prerequisite environment, or the IAC configuration has been successfully deployed in a prerequisite environment; and
automatically create a number of user trusted profiles that are linked to the access privileges and allowed modifications for the environments, wherein each trusted profile is specific to one of the environments.
16 . The computer program product of claim 15 , wherein a modification cannot be deployed in an environment unless that modification has been successfully deployed in a prerequisite environment.
17 . The computer program product of claim 15 , further comprising instructions for searching all IAC configurations in a prerequisite environment for a match of a target IAC configuration version with a successful deployment.
18 . The computer program product of claim 15 , wherein the access privileges specify session time duration limits.
19 . The computer program product of claim 15 , wherein the access privileges limit access to the specific environment to which access privileges and allowed modifications are linked.
20 . The computer program product of claim 15 , wherein a deployment of the IAC configuration to a selected environment is denied unless a user has assumed a trusted profile corresponding to the selected environment prior to the deployment.