Methods and systems for secure storage segmentation based on security context in a virtual environment

A system comprising:

• a memory;
• and
• a processing device coupled with the memory to:
• identify a request to place a workload in a hypervisor-based host;
• identify a security level of the workload;
• identify a security level of a storage device associated with the hypervisor-based host;
• grant the request to place the workload in the hypervisor-based host if the security level of the workload corresponds to the security level of the storage device;
• and
• deny the request to place the workload in the hypervisor-based host if the security level of the workload does not correspond to the security level of the storage device.

A non-transitory computer readable storage medium including instructions that, when executed by a processing device, cause the processing device to perform a method comprising:

• identifying a request to place a workload in a hypervisor-based host;
• identifying a security level of the workload;
• identifying a security level of a storage device associated with the hypervisor-based host;
• granting the request to place the workload in the hypervisor-based host if the security level of the workload corresponds to the security level of the storage device;
• and
• denying the request to place the workload in the hypervisor-based host if the security level of the workload does not correspond to to the security level of the storage device.