Network buildout for cloud computing environments with data control policies

One or more computer storage media storing computer-useable instructions that, when used by one or more computing devices, cause the one or more computing devices to perform operations comprising:

• receiving, at a hardware proxy in a first cloud computing environment, a request to configure a network device in the first cloud computing environment, the request including a configuration template and being received from a buildout service in a second cloud computing environment remote from the first cloud computing environment, wherein the configuration template received at the hardware proxy is pre-populated with values from non-restricted data from the second cloud computing environment available to the buildout service;
• updating, by the hardware proxy, the configuration template with values from restricted data maintained within the first cloud computing environment and not accessible to the buildout service, the restricted data comprising customer content, end user identifiable information, and access control data;
• and
• issuing, by the hardware proxy, one or more commands to configure the network device using the updated configuration template.

A computerized method comprising:

• determining, at a buildout service in a first cloud computing environment remote from a second cloud computing environment, that a network device is being added to a second cloud computing environment, the buildout service not having access to restricted data in the second cloud computing environment, the restricted data comprising customer content, end user identifiable information, and access control data;
• managing, by the buildout service, manual operations performed by operating personnel to add the network device to the second cloud computing environment;
• obtaining, by the buildout service, a configuration template to configure the network device;
• populating, by the buildout service, the configuration template with values from non-restricted data from the second cloud computing environment available to the buildout service;
• sending, from the buildout service to a hardware proxy in the second cloud computing environment, a configuration request to configure the network device, the configuration request including the configuration template;
• updating, by the hardware proxy, the populated configuration template with one or more values from restricted data maintained within the first cloud computing environment and not accessible to the buildout service;
• configuring, by the hardware proxy, the network device using the updated configuration template;
• and
• validating, by the buildout service, configuration of the network device.