Automated compliance checking through analysis of cloud infrastructure templates

A non-transitory machine-readable medium for determining a state of an information technology (IT) environment, the machine-readable medium comprising instructions that, when executed by one or more processors of a machine, cause the one or more processors to carry out operations comprising:

• accessing an infrastructure-as-code (IaC) template for the IT environment, wherein the IT environment is virtualized and cloud-based;
• deconstructing, using a parser for the IaC template, the IaC template to a graph database representation of the IT environment, wherein the graph database representation implements a predefined cloud resource ontology (CRO);
• determining, using the graph database representation, the state of the IT environment;
• and
• providing, as a digital transmission, an output corresponding to the determined state of the IT environment.

A method for determining a state of an information technology (IT) environment, the method comprising:

• accessing an infrastructure-as-code (IaC) template for the IT environment, wherein the IT environment is virtualized and cloud-based;
• deconstructing, using a parser for the IaC template, the IaC template to a graph database representation of the IT environment, wherein the graph database representation implements a predefined cloud resource ontology (CRO);
• determining, using the graph database representation, the state of the IT environment;
• and
• providing, as a digital transmission, an output corresponding to the determined state of the IT environment.