System, apparatus and method for deploying infrastructure to the cloud

A method of checking compliance of infrastructure-as-code for a software application to be deployed as a resource in a live-environment operating on a cloud computing network accessible to a plurality of users, the method comprising:

• receiving application code and at least one compliance library for the software application and infrastructure-as-code to be deployed in the live-environment, the infrastructure-as-code operational to provide access to the software application to the plurality of users;
• processing the infrastructure-as-code, prior to deployment of the infrastructure-as-code to the live-environment, via automatic static testing of the infrastructure-as-code in a pre-deployment environment, to determine whether the infrastructure-as-code complies with a plurality of standards including standards to meet regulatory requirements, standards to meet operational requirements and standards to meet security requirements;
• if the infrastructure-as-code complies with the plurality of standards during the automatic static testing in the pre-deployment environment, deploying the infrastructure-as-code to the live environment for access by the plurality of users, and
• if the infrastructure-as-code fails to comply with the plurality of standards during the automatic static testing in the pre-deployment environment, preventing the infrastructure-as-code from being released to the live environment.

A non-transitory computer-readable medium whose contents cause a processing device including a processor and a memory coupled to the processor to perform a method of checking compliance of infrastructure-as-code for a software application to be deployed as a resource in a live-environment operating on a cloud computing network accessible to a plurality of users, the method comprising:

• receiving application code and at least one compliance library for the software application and infrastructure-as-code to be deployed in the live-environment, the infrastructure-as-code operational to provide access to the software application to the plurality of users;
• processing the infrastructure-as-code, prior to deployment of the infrastructure-as-code to the live-environment, via automatic static testing of the infrastructure-as-code in a pre-deployment environment, to determine whether the infrastructure-as-code complies with a plurality including standards to meet regulatory requirements, standards to meet operational requirements and standards to meet security requirements;
• if the infrastructure-as-code complies with the plurality of standards during the automatic static testing in the pre-deployment environment, deploying the infrastructure-as-code to the live environment for access by the plurality of users, and
• if the infrastructure-as-code fails to comply with the plurality of standards during the automatic static testing in the pre-deployment environment, preventing the infrastructure-as-code from being released to the live environment.