# US 12,739,253 B2 · Converting enforcement policy information into provisioning template information > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,739,253 B2 - Document ID: US12739253B2 - Status: Granted - Kind: B2 - Application number: 18/647,852 - Filed: 2024-04-26 - Published: 2025-04-17 - Granted: 2026-09-15 - Earliest claimed: 2023-10-15 - Assignees: VMware, Inc. - Applicants: VMware LLC - Inventors: Siddharth Sukumar Burle; Manish Jain; Vishal Gupta; Amit Meena; Suraj Malgave - Web page: https://patentgrep.com/patent/US12739253B2 ## CPC - H04L 63/10: {for controlling access to devices or network resources} - G06F 9/45558: {Hypervisor-specific management and integration aspects} - G06F 2009/45562: {Creating, deleting, cloning virtual machine instances} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract Systems, apparatus, articles of manufacture, and methods are disclosed for converting enforcement policy information into provisioning template information by instantiating or executing machine-readable instructions to determine a type of a first placeholder of a provisioning template with a plurality of placeholders, copy enforcement policy data corresponding to the determined type of the first placeholder, fill the first placeholder of the provisioning template with the copied enforcement policy data, and save the provisioning template. ## Claims ### Claim 1 A non-transitory machine readable storage medium comprising instructions to cause a programmable circuitry to at least: determine a type of a first placeholder of the provisioning template with a plurality of placeholders; copy enforcement policy data corresponding to the determined type of the first placeholder; determine a location for a name data in the enforcement policy in a metadata location and corresponding location for the name data in a provisional template; fill the first placeholder of the provisioning template with the copied enforcement policy data; save the provisioning template; cause an enforcement of provisional template by an enforcement service. ### Claim 2 (depends on 1) The storage medium of claim 1, wherein the provisioning template is offered as a selectable cloud resource. ### Claim 3 (depends on 1) The storage medium of claim 1, wherein the provisioning template offers an enforcement of a configuration state of a virtual machine. ### Claim 4 (depends on 1) The storage medium of claim 1, wherein the programmable circuitry is to provide the provisioning template to a consumer service, the consumer service accessible by a user account. ### Claim 5 (depends on 1) The storage medium of claim 1, wherein the programmable circuitry is to receive a provisioning request that includes a modified version of the provisioning template. ### Claim 6 (depends on 5) The storage medium of claim 5, wherein the programmable circuitry is to convert the modified version of the provisioning template into second enforcement policy data. ### Claim 7 (depends on 6) The storage medium of claim 6, wherein the programmable circuitry is to provide the second enforcement policy data to an enforcement service, the enforcement service to enforce a target configuration state of provisioned cloud resources according to the provisioning request. ### Claim 8 (depends on 1) The storage medium of claim 1, wherein the programmable circuitry is to access a first enforcement policy from an enforcement service and extracting a policy enforcement data from the first enforcement policy. ### Claim 9 A system comprising: network interface circuitry; machine-readable instructions; and programmable circuitry to at least one of instantiate or execute the machine-readable instructions to: determine a type of a first placeholder of a provisioning template with a plurality of placeholders; copy enforcement policy data corresponding to the determined type of the first placeholder; determine a location for a name data in the enforcement policy in a metadata location and corresponding location for the name data in a provisional template; fill the first placeholder of the provisioning template with the copied enforcement policy data; save the provisioning template; and cause an enforcement of provisional template by an enforcement service. ### Claim 10 (depends on 9) The system of claim 9, wherein the provisioning template is offered as a selectable cloud resource. ### Claim 11 (depends on 9) The system of claim 9, wherein the provisioning template offers an enforcement of a configuration state of a virtual machine. ### Claim 12 (depends on 9) The system of claim 9, wherein the programmable circuitry is further to provide the provisioning template to a consumer service, the consumer service accessible by a user account. ### Claim 13 (depends on 9) The system of claim 9, wherein the programmable circuitry is further to receive a provisioning request that includes a modified version of the provisioning template. ### Claim 14 (depends on 13) The system of claim 13, wherein the programmable circuitry is further to convert the modified version of the provisioning template into second enforcement policy data. ### Claim 15 (depends on 14) The system of claim 14, wherein the programmable circuitry is further to provide the second enforcement policy data to an enforcement service, the enforcement service to enforce a target configuration state of provisioned cloud resources according to the provisioning request. ### Claim 16 (depends on 9) The system of claim 9, wherein the programmable circuitry is further to access a first enforcement policy from an enforcement service and extracting the enforcement policy data from the first enforcement policy. ### Claim 17 A system comprising: an enforcement provider; an enforcement service; a blueprint service; a consumer service, the enforcement provider to: retrieve first enforcement policy information from the enforcement service; convert the first enforcement policy information into a provisioning template; and provide the provisioning template to the consumer service; the blueprint service to: obtain a provisioning request from a user account, the provisioning request to include a modified version of the provisioning template; determine a location for name data in the enforcement policy in a metadata location and corresponding location for the name data in a provisional template; generate a deployment based on the provisioning request; and submit the generated deployment for approval by the consumer service; the consumer service to approve the generated deployment; provide enforcement using at least the provisional template. ### Claim 18 (depends on 17) The system of claim 17, wherein the blueprint service is to transmit the approved deployment to the enforcement provider. ### Claim 19 (depends on 18) The system of claim 18, wherein the enforcement provider is to: convert a portion of the approved deployment to second enforcement policy information; and transmit the second enforcement policy information to the enforcement service. ### Claim 20 (depends on 19) The system of claim 19, wherein the enforcement service to enforce the second enforcement policy information.