Compliance-based application deployment system and method for a cloud computing environment

A compliance-based application deployment system for a cloud computing environment, the system comprising:

• a computing system comprising at least one processor and at least one memory to store a service that is configured to, when executed by the at least one processor:
• obtain a compliance level for each of a plurality of computing nodes configured in the a cloud computing environment;
• generate a standardized compliance specification instance;
• append a compliance level metadata to the standardized compliance specification instance, wherein the compliance level metadata directly includes the obtained compliance level;
• generate a user interface on a display screen to receive a request to provision an application on the cloud computing environment, the request including a specified compliance level associated with the application, the request comprising an identification of a type of second application that is non-compliant with the application;
• select at least one compliant computing node from among the plurality of computing nodes, the obtained compliance level for the at least one compliant computing node meeting the specified compliance level, by:
• retrieving the standardized compliance specification instance and extracting the obtained compliance level from the appended metadata of the standardized compliance specification instance;
• comparing the obtained compliance level to the specified compliance level associated with the application;
• and
• selecting the at least on compliant computing node based on a determination that the obtained compliance level is not below the specified compliance level;
• provision the application on the selected at least one computing node;
• and
• monitor a configuration of the at least one computing node by a compliance detection service in communication with the at least one computing node, the compliance detection service updating the compliance level for each of the plurality of computing nodes in response to changes in the configuration of a respective computing node of the plurality of computing nodes;
• wherein when an application of the specified type of second application that is non-compliant with the application is deployed to the at least one computing node based on the monitored configuration change of the at least one computing node, an at least second compliant computing node is selected from among the plurality of computing nodes and the application is provisioned on the selected at least second computing node.

A non-transitory, computer readable medium that is encoded with instructions that, when executed by at least one processor, is operable to perform at least the following:

• obtaining a compliance level for each of a plurality of computing nodes configured in a cloud computing environment;
• generating a standardized compliance specification instance;
• appending a compliance level metadata to the standardized compliance specification instance, wherein the compliance level metadata directly includes the obtained compliance level;
• generating a user interface on a display screen to receive a request to provision an application on the cloud computing environment, the request including a specified compliance level associated with the application, the request comprising an identification of a type of second application that is non-compliant with the application;
• selecting at least one compliant computing node from among the plurality of computing nodes, the obtained compliance level for the at least one compliant computing node meeting the specified compliance level, by:
• retrieving the standardized compliance specification instance and extracting the obtained compliance level from the appended metadata of the standardized compliance specification instance;
• comparing the obtained compliance level to the specified compliance level associated with the application;
• and
• selecting the at least one compliant computing node based on a determination that the obtained compliance level is not below the specified compliance level;
• provisioning the application on the selected at least one computing node;
• and
• monitoring a configuration of the at least one computing node by a compliance detection service in communication with the at least one computing node, the compliance detection service updating the compliance level for each of the plurality of computing nodes in response to changes in the configuration of a respective computing node of the plurality of computing nodes;
• wherein when an application of the specified type of second application that is non-compliant with the application is deployed to the at least one computing node based on the monitored configuration change of the at least one computing node, an at least second compliant computing node is selected from among the plurality of computing nodes and the application is provisioned on the selected at least second computing node.