Techniques for generating network security policies for application components deployed in a computing environment

A system, comprising:

• a processor;
• and
• a memory storing instructions that, when executed by the processor, configure the system to:
• for a first version of a component to be deployed as part of a deployed application, monitor network traffic flow to and from the first version of the component, wherein a second version of the component is included in the deployed application, the first version being different from the second version;
• based upon the monitoring, identify a set of one or more network paths for the first version of the component, wherein a network path in the set of one or more network paths identifies at least one other component to which the first version of the component sends traffic;
• generate a component identifier that uniquely identifies the first version of the component;
• generate a first network security policy for the first version of the component, wherein the first network security policy comprises information representative of the set of one or more network paths, and, wherein the first network security policy comprises information indicating that the first network security policy is applicable to the first version of the component identified by the component identifier;
• and
• generate a deployment package for the application for adding the first version of the component to the deployed application in addition to the second version of the component, the deployment package comprising the first version of the component and the first network security policy.

A non-transitory computer-readable medium having program code that is stored thereon, the program code executable by one or more processing devices for performing operations comprising:

• for a first version of a component to be deployed as part of a deployed application, monitoring network traffic flow to and from the first version of the component, wherein a second version of the component is included in the deployed application, the first version being different from the second version;
• based upon the monitoring, identifying a set of one or more network paths for the first version of the component, wherein a network path in the set of one or more network paths identifies at least one other component to which the first version of the component sends traffic;
• generating a component identifier that uniquely identifies the first version of the component;
• generating a first network security policy for the first version of the component, wherein the first network security policy comprises information representative of the set of one or more network paths, and, wherein the first network security policy comprises information indicating that the first network security policy is applicable to the first version of the component identified by the component identifier;
• and
• generating a deployment package for the application for adding the first version of the component to the deployed application in addition to the second version of the component, the deployment package comprising the first version of the component and the first network security policy.