Techniques for cloud deployment automation based on cybersecurity scanning
AssigneeWiz, Inc.
InventorsOr Tzabary, Ami Luttwak
Life of this patent
Estimating the term…
Abstract
A system and method for optimizing the deployment of a cloud computing environment is presented. The method includes: inspecting the cloud computing environment; generating a representation of the cloud computing environment based on a result of inspecting the cloud computing environment; determining a resource cost associated with each entity of a plurality of entities represented in the generated representation of the cloud computing environment; generating an optimization action for an entity of the plurality of entities, wherein the optimization action reduces the determined resource cost; and initiating the optimization action in the cloud computing environment.
Claims28
A method for optimizing deployment of a cloud computing environment, comprising:
- inspecting the cloud computing environment;
- generating a representation of the cloud computing environment based on a result of inspecting the cloud computing environment;
- determining a resource cost associated with each entity of a plurality of entities represented in the generated representation of the cloud computing environment, wherein the determining of the resource cost comprises detecting a plurality of software components associated with the resource;
- generating an optimization action for an entity of the plurality of entities, wherein the optimization action reduces the determined resource cost based on an associated resource cost of each software component of the plurality of software components of the entity;
- and
- initiating the optimization action in the cloud computing environment, wherein the optimization action further comprises:
- detecting a code object utilized to deploy the software component in the cloud computing environment;
- replacing computer code in the code object to generate a new code object, wherein the new code object is configured to utilize less resources when executed than the detected code object;
- deploying a new software component in the cloud computing environment based on the new code object;
- and
- halting the deployed software component from further execution.
A non-transitory computer-readable medium storing a set of instructions for optimizing deployment of a cloud computing environment, the set of instructions comprising:
- one or more instructions that, when executed by one or more processors of a device, cause the device to:
- inspect the cloud computing environment;
- generate a representation of the cloud computing environment based on a result of inspecting the cloud computing environment;
- determine a resource cost associated with each entity of a plurality of entities represented in the generated representation of the cloud computing environment, wherein the determination of the resource cost comprises detecting a plurality of software components associated with the resource;
- generate an optimization action for an entity of the plurality of entities, wherein the optimization action reduces the determined resource cost based on an associated resource cost of each software component of the plurality of software components of the entity;
- and
- initiate the optimization action in the cloud computing environment, wherein the optimization action further comprises:
- detecting a code object utilized to deploy the software component in the cloud computing environment;
- replacing computer code in the code object to generate a new code object, wherein the new code object is configured to utilize less resources when executed than the detected code object;
- deploying a new software component in the cloud computing environment based on the new code object;
- and
- halting the deployed software component from further execution.
A system for optimizing deployment of a cloud computing environment comprising:
- a processing circuitry;
- a memory, the memory containing instructions that, when executed by the processing circuitry, configure the system to:
- inspect the cloud computing environment;
- generate a representation of the cloud computing environment based on a result of inspecting the cloud computing environment;
- determine a resource cost associated with each entity of a plurality of entities represented in the generated representation of the cloud computing environment, wherein the determination of the resource cost comprises detecting a plurality of software components associated with the resource;
- generate an optimization action for an entity of the plurality of entities, wherein the optimization action reduces the determined resource cost based on an associated resource cost of each software component of the plurality of software components of the entity;
- and
- initiate the optimization action in the cloud computing environment, wherein the optimization action further comprises:
- detecting a code object utilized to deploy the software component in the cloud computing environment;
- replacing computer code in the code object to generate a new code object, wherein the new code object is configured to utilize less resources when executed than the detected code object;
- deploying a new software component in the cloud computing environment based on the new code object;
- and
- halting the deployed software component from further execution.
Dependencies are inferred from the claim text.