Permissions for a cloud environment application programming interface
AssigneeHewlett Packard Enterprise Development LP
InventorTimothy Martin Potter
Life of this patent
Estimating the term…
Abstract
In some examples, a system tests a program that includes code to invoke calls of an application programming interface (API) for managing resources of a cloud environment. As part of the testing of the program, the system determines permissions for the invoked calls of the API, creates a collection of the determined permissions, and associates the collection of the determined permissions with an access policy of the cloud environment, the access policy to control use of the API for managing resources of the cloud environment.
Claims20
A non-transitory machine-readable storage medium comprising instructions that upon execution cause a system to:
- test a program that comprises code to invoke calls of an application programming interface (API) for managing resources of a cloud environment;
- as part of the testing of the program, determine permissions for the invoked calls of the API;
- create a collection of the determined permissions;
- and
- associate the collection of the determined permissions with an access policy of the cloud environment, the access policy to control use of the API for managing resources of the cloud environment.
A system comprising:
- a processor;
- and
- a non-transitory storage medium storing proxy instructions executable on the processor to:
- receive, from a test engine, calls of an application programming interface (API) included in code of a target program that manages resources of a cloud environment;
- determine a collection of permissions associated with the calls of the API;
- and
- associate the collection of the permissions with an access policy of the cloud environment, the access policy to control use of the API for managing the resources of the cloud environment.
A method performed by a system comprising a hardware processor, comprising:
- testing a program that comprises code to invoke calls of an application programming interface (API) for accessing resources of a cloud environment;
- as part of the testing of the program, creating a collection of permissions for the invoked calls of the API;
- associating the collection of permissions with an access policy of the cloud environment, the access policy to control use of the API for managing resources of the cloud environment;
- and
- in response to a change of the program,
- testing the changed program by invoking calls of the API included in code of the changed program,
- creating an updated collection of permissions for the invoked calls of the API included in the code of the changed program, and
- associating the updated collection of permissions with the access policy of the cloud environment.
Dependencies are inferred from the claim text.