Cloud compliance drift automation and root cause analysis tool

An enterprise information handling system (IHS) that avoids noncompliant configuration changes, the enterprise IHS comprising:

• more than one node that respectively perform at least one of computing workload and data storage;
• an automated deployment system communicatively coupled to distribute a configuration change to selected ones of the more than one node;
• a change management system communicatively coupled to the automated deployment system to control timing of the distribution of the configuration change by the automated deployment system;
• and
• a compliance drift automation system communicatively coupled to the more than one node and the change management system and comprising a controller that enables the enterprise IHS to:
• determine whether a triggering event has occurred that has a potential for degrading compliance of the enterprise IHS;
• and
• in response to determining that the triggering event has occurred:
• perform a configuration scan of the hardware and software of the enterprise IHS to obtain current configuration information;
• determine changes in the current configuration information based on a comparison of the current configuration information with baseline configuration information that was obtained in response to a previous triggering event;
• determine whether any changes determined in the current configuration information are non-compliant based on a comparison to compliance status information;
• and
• perform a compliance remediation operation in response to determining that at least one change is non-compliant.

A non-transitory computer-readable storage medium comprising computer-executable instructions, which when executed via a processing unit on a computer performs acts, comprising:

• respectively performing at least one of computing workload and data storage by a plurality of nodes;
• distributing a configuration change to a subset of the plurality of nodes by a deployment system communicatively coupled to the subset of the plurality of nodes;
• controlling timing of the distributing of the configuration change to selected ones of the subset of the plurality of nodes by a change management system communicatively coupled to the automated deployment system;
• enabling an enterprise information handling system (IHS), by a controller of a compliance drift automation system that is communicatively coupled to the subset of the plurality of nodes and the change management system to:
• determine whether a triggering event has occurred that has a potential for degrading compliance of the enterprise;
• and
• in response to determining that the triggering event has occurred:
• perform a configuration scan of hardware or software of the enterprise IHS to obtain current configuration information;
• determine changes in the current configuration information based on a comparison of the current configuration information with baseline configuration information that was obtained in response to a previous triggering event;
• determine whether any changes determined in the current configuration information are non-compliant based on a comparison to compliance status information;
• and
• perform a compliance remediation operation in response to determining that at least one change is non-compliant.