System and method for a facet security framework
AssigneeCisco Technology, Inc.
InventorsDipankar Sarkar, Oleg Danilov, Alok Batra, John M. Morrell
Life of this patent
Estimating the term…
Abstract
An example method is provided and includes intercepting an action request from an entity for an action to be performed with respect to a resource in a cloud environment, where the action request comprises a resource facet that controls access to the resource. The method also includes determining whether the resource facet is valid for the action by evaluating a policy associated with the resource; and allowing the action.
Claims20
A method, comprising:
- intercepting an action request from an entity for an action to be performed with respect to a resource in a cloud environment, wherein the action request comprises a resource facet that controls access to the resource;
- determining whether the resource facet is valid for the action by evaluating a policy associated with the resource;
- and
- allowing the action.
An apparatus comprising at least one processor and at least one memory, the at least one memory including computer program instructions that, when executed by the at least one processor, cause the apparatus to:
- intercept an action request from an entity for an action to be performed with respect to a resource in a cloud environment, wherein the action request comprises a resource facet that controls access to the resource;
- determine whether the resource facet is valid for the action by evaluating a policy associated with the resource;
- and
- allow the action.
A non-transitory computer readable media comprising instructions that, when executed by a processor, cause an apparatus to:
- intercept an action request from an entity for an action to be performed with respect to a resource in a cloud environment, wherein the action request comprises a resource facet that controls access to the resource;
- determine whether the resource facet is valid for the action by evaluating a policy associated with the resource;
- and
- allow the action.
Dependencies are inferred from the claim text.