Policy-driven management of security and compliance controls for multi-cloud workloads

A computer program product comprising a non-transitory processor-readable storage medium having stored therein program code of one or more software programs, wherein the program code when executed by at least one processing device causes the at least one processing device to perform steps of:

• receiving, at a user interface of a trust platform configured to manage a plurality of cloud assets operating in clouds of two or more cloud service providers, a specification of one or more security and compliance policies of a given entity;
• generating, based at least in part on the specified one or more security and compliance policies of the given entity, one or more security and compliance controls to be implemented for one or more workloads of the given entity, the one or more workloads running on a subset of the plurality of cloud assets operating in the clouds of the two or more cloud service providers;
• deploying, utilizing one or more application programming interfaces of the trust platform, the generated one or more security and compliance controls on a first plurality of monitoring tools operating in tenant environments of the clouds of the two or more cloud service providers and a second plurality of monitoring tools operating in management environments of the clouds of the two or more cloud service providers;
• and
• providing, at the user interface of the trust platform, a unified view of the one or more security and compliance policies for the given entity running the one or more workloads on the subset of the plurality of cloud assets operating in the clouds of the two or more cloud service providers;
• wherein providing the unified view of the one or more security and compliance policies for the given entity comprises providing one or more user interface features for configuring the one or more security and compliance policies for the given entity;
• wherein the first plurality of monitoring tools are deployed by the given entity in the tenant environments of the clouds of the two or more cloud service providers, the first plurality of monitoring tools being configured for monitoring ones of the subset of the plurality of cloud assets, which are controlled by the given entity, running in the tenant environments of the clouds of the two or more cloud service providers;
• and
• wherein the second plurality of monitoring tools are deployed by operators of the clouds of the two or more cloud service providers in the management environments of the clouds of the two or more cloud service providers, the second plurality of monitoring tools being configured for monitoring of the plurality of cloud assets, which are controlled by a plurality of different entities including the given entity, running in the tenant environments of the clouds of the two or more cloud service providers.

A method comprising:

• receiving, at a user interface of a trust platform configured to manage a plurality of cloud assets operating in clouds of two or more cloud service providers, a specification of one or more security and compliance policies of a given entity;
• generating, based at least in part on the specified one or more security and compliance policies of the given entity, one or more security and compliance controls to be implemented for one or more workloads of the given entity, the one or more workloads running on a subset of the plurality of cloud assets operating in the clouds of the two or more cloud service providers;
• deploying, utilizing one or more application programming interfaces of the trust platform, the generated one or more security and compliance controls on a first plurality of monitoring tools operating in tenant environments of the clouds of the two or more cloud service providers and a second plurality of monitoring tools operating in management environments of the clouds of the two or more cloud service providers;
• and
• providing, at the user interface of the trust platform, a unified view of the one or more security and compliance policies for the given entity running the one or more workloads on the subset of the plurality of cloud assets operating in the clouds of the two or more cloud service providers;
• wherein providing the unified view of the one or more security and compliance policies for the given entity comprises providing one or more user interface features for configuring the one or more security and compliance policies for the given entity;
• wherein the first plurality of monitoring tools are deployed by the given entity in the tenant environments of the clouds of the two or more cloud service providers, the first plurality of monitoring tools being configured for monitoring ones of the subset of the plurality of cloud assets, which are controlled by the given entity, running in the tenant environments of the clouds of the two or more cloud service providers;
• wherein the second plurality of monitoring tools are deployed by operators of the clouds of the two or more cloud service providers in the management environments of the clouds of the two or more cloud service providers, the second plurality of monitoring tools being configured for monitoring of the plurality of cloud assets, which are controlled by a plurality of different entities including the given entity, running in the tenant environments of the clouds of the two or more cloud service providers;
• and
• wherein the method is performed by at least one processing device comprising a processor coupled to a memory.