Privacy choreographer for fully managed serverless application platforms

A computer-implemented method comprising:

• deploying a plurality of privacy agents including at least a first privacy agent and a second privacy agent;
• receiving, from the plurality of privacy agents, system metric data comprising compute metrics associated with a plurality of compute resources comprising at least a first compute resource located in a first geographic region and a second compute resource located in a second geographic region, wherein the compute metrics are based on at least one of settings and functions of the first compute resource and the second compute resource;
• comparing the system metric data to current privacy state requirements that are based on organizational privacy settings, wherein the current privacy state requirements comprise a first set of requirements associated with the first geographic region and a second set of requirements associated with the second geographic region;
• generating, by a computing system, a real-time risk profile for the computing system by comparing the system metric data to current privacy state requirements to determine that at least the first compute resource is not in compliance with the first set of requirements;
• based on the real-time risk profile, generating a configuration file to spin up a new compute resource that is in compliance with the current privacy state requirements;
• and
• executing the configuration file to spin up the new compute resource to maintain compliance with the current privacy state requirements.

One or more non-transitory computer-readable media storing instructions that are executable by one or more processors to perform operations comprising:

• obtaining privacy input data;
• generating, by a computing system, a first configuration file based on the privacy input data;
• deploying plurality of privacy agents comprising at least a first privacy agent and a second privacy agent by reading and executing the configuration file;
• monitoring a first compute resource located in a first geographic location by the first privacy agent and second compute resource located in a second geographic location by the second privacy agent, wherein the first compute resource and the second compute resource are associated with the system, and wherein the monitoring comprises:
• obtaining system metric data associated with the first compute resource from the first privacy agent and the second compute resource from the second privacy agent;
• and
• aggregating the system metric data;
• generating, based on the aggregated system metric data, a real-time risk profile for the computing system by comparing the system metric data to current privacy state requirements, wherein the current privacy state requirements comprise geographically specific resourcing requirements associated with the first geographic location and the second geographic location;
• based on the real-time risk profile generating a second configuration file to spin up a new compute resource that is in compliance with the current privacy state requirements;
• and
• executing the second configuration file to spin up the new compute resource to maintain compliance with the current privacy state requirements.