Compliant software component infrastructure deployment

A computer program product, comprising a computer readable hardware storage device storing a computer readable program code, said computer readable program code comprising an algorithm that when executed by a processor of a compliance framework implements a compliance cloud software component deployment improvement method, said method comprising:

• receiving from hardware machine sources, by said processor, application compliance requirements associated with operational requirements associated with hardware and software components, wherein said application compliance requirements comprise encryption keys and audit logs associated with implemented hardware and software controls for said hardware and software components;
• receiving, by said processor from said hardware and software components, original configuration files associated with a current hardware and software configuration for each hardware and software component of said hardware and software components, wherein said original configuration files are generated based on measurements of said hardware and software components;
• generating, by said processor based on said application compliance requirements with respect to said original configuration files, modified configuration files associated with a modified hardware and software configuration for each said hardware and software component;
• executing, by said processor, a risk assessment with respect to said application compliance requirements, said risk assessment associated with applying said modified configuration files to each said hardware and software component;
• evaluating, by said processor, a workload of each said hardware and software component at a specified point in time with respect to regulatory requirements;
• enabling, by said processor based on results of said executing and said evaluating, a specified cloud infrastructure stack comprising a group of software components associated with executing said application compliance requirements within a specified operational risk threshold of said risk assessment;
• generating, by said processor, a software application comprising said specified cloud infrastructure stack;
• deploying, by said processor to said hardware and software components, said software application, data encryption software, and an external firewall;
• executing, by said processor, said software application, said data encryption software, and said external firewall resulting in execution of decryption keys enabling operation of said hardware and software components;
• executing, by said processor, a gap analysis with respect to said operation of said hardware and software components;
• and
• enabling, by said processor based on results of said executing said gap analysis, said specified cloud infrastructure stack with respect to a specified level of compliance.

A compliance framework comprising a hardware processor coupled to a computer-readable memory unit, said memory unit comprising instructions that when executed by the processor implements a compliance cloud software component deployment improvement method comprising:

• receiving from hardware machine sources, by said hardware processor, application compliance requirements associated with operational requirements associated with hardware and software components, wherein said application compliance requirements comprise encryption keys and audit logs associated with implemented hardware and software controls for said hardware and software components;
• receiving, by said hardware processor from said hardware and software components, original configuration files associated with a current hardware and software configuration for each hardware and software component of said hardware and software components, wherein said original configuration files are generated based on measurements of said hardware and software components;
• generating, by said hardware processor based on said application compliance requirements with respect to said original configuration files, modified configuration files associated with a modified hardware and software configuration for each said hardware and software component;
• executing, by said hardware processor, a risk assessment with respect to said application compliance requirements, said risk assessment associated with applying said modified configuration files to each said hardware and software component;
• evaluating, by said hardware processor, a workload of each said hardware and software component at a specified point in time with respect to regulatory requirements;
• enabling, by said hardware processor based on results of said executing and said evaluating, a specified cloud infrastructure stack comprising a group of software components associated with executing said application compliance requirements within a specified operational risk threshold of said risk assessment;
• generating, by said hardware processor, a software application comprising said specified cloud infrastructure stack;
• deploying, by said hardware processor to said hardware and software components, said software application, data encryption software, and an external firewall;
• executing, by said hardware processor, said software application, said data encryption software, and said external firewall resulting in execution of decryption keys enabling operation of said hardware and software components;
• executing, by said hardware processor, a gap analysis with respect to said operation of said hardware and software components;
• and
• enabling, by said hardware processor based on results of said executing said gap analysis, said specified cloud infrastructure stack with respect to a specified level of compliance.