Validation of cloud security policies

A system for managing security in a cloud computing environment, the system comprising:

• a processor;
• and
• a memory communicatively coupled to the processor, the memory storing instructions executable by the processor to perform a method comprising:
• providing a graph database, the graph database representing workloads of the cloud computing environment as nodes and relationships between the workloads as edges;
• determining a level of entropy in the cloud computing environment based on the workloads;
• determining a reliability score and at least one recommendation for a security policy based on the level of entropy;
• receiving the security policy, the security policy logically describing rules for the relationships between the workloads;
• determining, based on the security policy and the graph database, a list of violations, the list of violations including at least one relationship from the relationships between the workloads in the graph database, the at least one relationship being not allowed by at least one of the rules in the security policy;
• and
• providing the list of violations to a user.

A non-transitory processor-readable medium having embodied thereon a program being executable by at least one processor to perform a method for validating security policy in a cloud computing environment, the method comprising:

• providing a graph database, the graph database representing workloads of the cloud computing environment as nodes and relationships between the workloads as edges;
• determining a level of entropy in the cloud computing environment based on the workloads;
• determining a reliability score and at least one recommendation for a security policy based on the level of entropy;
• receiving the security policy, the security policy logically describing rules for the relationships between the workloads;
• determining, based on the security policy and the graph database, a list of violations, the list of violations including at least one relationship from the relationships between the workloads in the graph database, the at least one relationship being not allowed by at least one of the rules in the security policy;
• and
• providing the list of violations to a user.