Dynamic generation of policy enforcement rules and actions from policy attachment semantics

A system, comprising:

• a memory;
• and
• a processor programmed to:
• obtain at least one defined service policy to be enforced by a policy enforcement point (PEP);
• parse the obtained at least one defined service policy to identify at least one set of enforceable policy provisions;
• identify the at least one set of enforceable policy provisions, where each set of enforceable policy provisions comprises a policy subject, a policy domain, and at least one assertion as the enforceable policy provisions within the at least one defined service policy;
• and
• create within the memory at least one runtime processing rule comprising at least one processing action usable by the PEP to enforce the policy subject, the policy domain, and the at least one assertion of each identified at least one set of enforceable policy provisions.

A computer program product, comprising:

• a computer readable storage medium having computer readable program code embodied therewith, where the computer readable program code when executed on a computer causes the computer to:
• obtain at least one defined service policy to be enforced by a policy enforcement point (PEP);
• parse the obtained at least one defined service policy to identify at least one set of enforceable policy provisions;
• identify the at least one set of enforceable policy provisions, where each set of enforceable policy provisions comprises a policy subject, a policy domain, and at least one assertion as the enforceable policy provisions within the at least one defined service policy;
• and
• create at least one runtime processing rule comprising at least one processing action usable by the PEP to enforce the policy subject, the policy domain, and the at least one assertion of each identified at least one set of enforceable policy provisions.