Control of cloud infrastructure configuration

A non-transitory computer-readable medium, having stored thereon program instructions that, upon execution by a computing system, cause the computing system to perform operations comprising:

• determining, based on a predefined policy, one or more configuration settings, wherein the predefined policy specifies a permitted value of a key within the configuration settings;
• obtaining, from a cloud-based service provider, an actual value of the key, wherein a collector application contains one or more collector routines that are configured to be able to obtain values of specific keys from the cloud-based service provider, and wherein obtaining the actual value of the key comprises:
• determining, based on the configuration settings, a collector routine configured to request and receive the actual value of the key from the cloud-based service provider;
• and
• storing a name of the key and the actual value of the key in a database;
• identifying, after obtaining the actual value of the key, that the cloud-based service provider is no longer accessible;
• determining, by applying the predefined policy, while the cloud-based service provider is no longer accessible, that the actual value of the key does not match the permitted value of the key, wherein a policy engine application is configured to apply the predefined policy to stored keys, and wherein determining that the actual value of the key does not match the permitted value of the key comprises:
• loading, by the policy engine application, the predefined policy;
• reading, by the policy engine application, the actual value of the key from the database;
• comparing, by the policy engine application, the actual value of the key to the permitted value of the key;
• and
• generating, by the policy engine application, a report indicating that the actual value of the key does not match the permitted value of the key;
• identifying a remediation for the key that includes determining an updated value of the key, wherein the updated value of the key satisfies the predefined policy;
• and
• causing the updated value to be applied to the key in the cloud-based service provider after the cloud-based service provider become accessible again.

A system comprising:

• one or more processors;
• and
• memory, containing program instructions that, upon execution by the one or more processors, cause the system to perform operations comprising:
• determining, based on a predefined policy, one or more configuration settings, wherein the predefined policy specifies a permitted value of a key within the configuration settings;
• obtaining, from a cloud-based service provider, an actual value of the key, wherein a collector application contains one or more collector routines that are configured to be able to obtain values of specific keys from the cloud-based service provider, and wherein obtaining the actual value of the key comprises:
• determining, based on the configuration settings, a collector routine configured to request and receive the actual value of the key from the cloud-based service provider;
• and
• storing a name of the key and the actual value of the key in a database;
• identifying, after obtaining the actual value of the key, that the cloud-based service provider is no longer accessible;
• determining, by applying the predefined policy, while the cloud-based service provider is no longer accessible, that the actual value of the key does not match the permitted value of the key, wherein a policy engine application is configured to apply the predefined policy to stored keys, and wherein determining that the actual value of the key does not match the permitted value of the key comprises:
• loading, by the policy engine application, the predefined policy;
• reading, by the policy engine application, the actual value of the key from the database;
• comparing, by the policy engine application, the actual value of the key to the permitted value of the key;
• and
• generating, by the policy engine application, a report indicating that the actual value of the key does not match the permitted value of the key;
• identifying a remediation for the key that includes determining an updated value of the key, wherein the updated value of the key satisfies the predefined policy;
• and
• causing the updated value to be applied to the key in the cloud-based service provider after the cloud-based service provider become accessible again.