Configuration change tracking

A computer-implemented method, comprising:

• mapping configuration data associated with a computing environment to a hierarchy of configuration items based at least in part on configuration metadata;
• determining, using at least the configuration metadata and the configuration items, that a plurality of first configuration items are relevant to a configuration tracking policy and a plurality of second configuration items are irrelevant to the configuration tracking policy;
• generating a plurality of signatures for the plurality of first configuration items;
• generating a first signature of the hierarchy of configuration items based at least in part on the plurality of signatures;
• identifying a change to a configuration of the computing environment, the change detected based at least in part on comparison of the first signature to a second signature;
• and
• causing an action to be performed in response to the change to the configuration of the computing environment.

A non-transitory computer-readable storage medium having stored thereon instructions that, upon execution by one or more computing devices, cause the one or more computing devices at least to:

• map configuration data associated with a computing environment to a hierarchy of configuration items based at least in part on configuration metadata;
• determine, based at least in part on the configuration metadata and from the configuration items, a plurality of first configuration items to be relevant to a configuration tracking policy and a plurality of second items to be irrelevant to the configuration tracking policy;
• compute a plurality of signatures for the plurality of first configuration items;
• compute a first signature of the hierarchy of configuration items based at least in part on the plurality of signatures;
• identify a change to a configuration of the computing environment, the change detected based at least in part on comparison of the first signature to a second signature;
• and
• initiate an action in response to the change to the configuration of the computing environment.