US 10,942,788 B2 · Policy constraint framework for an sddc

Abstract

Some embodiments of the invention provide a method for processing requests for performing operations on resources in a software defined datacenter (SDDC). The resources are software-defined (SD) resources in some embodiments. The method initially receives a request to perform an operation with respect to a first resource in the SDDC. The method identifies a policy that matches (i.e., is applicable to) the received request for the first resource by comparing a set of attributes of the request with sets of attributes of a set of policies that place constraints on operations specified for resources. In some embodiments, several sets of attributes for several policies can be expressed for resources at different hierarchal resource levels of the SDDC. The method rejects the received request when the identified policy specifies that the requested operation violates a constraint on operations specified for the first resource.

Claims23

Dependent claims

A method of processing requests for performing operations on resources in a datacenter, the method comprising:

parsing a declarative API into a plurality of requests with each request specifying at least one operation to perform with respect to at least one resource;
for each parsed request:
identifying at least one policy applicable to the request by comparing a set of attributes of the request with sets of attributes of a set of policies that place constraints on operations specified for the resources;
and
determining whether the request violates the policy identified for the request;
and
rejecting the declarative API as an unauthorized API after determining that at least one particular request violates a particular policy identified for the particular request.

4 more elements

Dependencies are inferred from the claim text.

Policy constraint framework for an sddc

Life of this patent

Policy constraint framework for an sddc

Life of this patent

Abstract

Claims23