Automatic tuning of virtual data center resource utilization policies

A data processing method executed using a programmed computing device, and under control of a management entity that is different than a host of a plurality of virtual data center (VDC) security resources, and wherein the VDC is remote with respect to the computing device, the method comprising:

• receiving a request to utilize one or more of the VDC security resources;
• in response to receiving the request, determining a particular service level applicable to the request;
• determining, based on the particular service level and mapping information that indicates associations between VDC security policies and service levels, a particular VDC security policy corresponding to the request, wherein the particular VDC security policy specifies one or more current security properties of VDC security resources to be utilized in completing the request, and wherein the particular VDC security policy indicates an encryption option, or indicates a frequency or depth of malware scanning;
• causing completion of the request by utilizing one or more security properties of VDC security resources associated with the particular service level by:
• determining, using the resource administrator logic executed using the computing device, based on an analysis of security properties of a set of VDC security resources, that the particular VDC security policy associated with the particular service level is no longer compatible with a security protection provided by the one or more current security properties of VDC security resources;
• modifying, using the resource administrator logic executed using the computing device, the mapping information to replace an identification of an association between the particular VDC security policy and the particular service level with an identification of an association between a new VDC security policy and the particular service level, wherein the new VDC security policy specifies the one or more security properties of VDC security resources that are different than the one or more current security properties of VDC security resources.

A data processing method comprising:

• using a server, obtaining from one or more non-transitory computer-readable data storage media a copy of program code that are stored on the media and are arranged, when executed using a computer system among a plurality of other computer systems to cause the computer system to perform, using resource administrator logic:
• receiving a request to utilize one or more virtual data center (VDC) security resources, wherein the VDC is remote with respect to the computing device,
• in response to receiving the request, determining a particular service level applicable to the request,
• determining, based on the particular service level and mapping information that indicates associations between VDC security policies and service levels, a particular VDC security policy corresponding to the request,
• causing completion of the request by utilizing one or more security properties of VDC security resources associated with the particular service level,
• wherein the resource administrator logic is controlled by a management entity that is different than a host of the VDC;
• using the server, downloading the copy of the program code to any of the other computers.