Automatically orchestrating the compliance of cloud services to selected standards and policies

A computer system for enhancing a service delivery system of a cloud infrastructure provider with a compliance management system, the computer system comprising:

• one or more processors, one or more computer-readable memories, one or more computer-readable tangible storage medium, and program instructions stored on at least one of the one or more tangible storage medium for execution by at least one of the one or more processors via at least one of the one or more memories, wherein the computer system is capable of performing a method comprising:
• extracting a plurality of metadata from a service contract, wherein the service contract is a mutually agreed upon human-readable document between the cloud infrastructure provider and a service owner, and wherein a service of the service owner is deployed on the service delivery system of the cloud infrastructure provider according to the service contract;
• compiling the extracted plurality of metadata into a control component, wherein the control component is an executable program that is compiled as an integrated part of the service and adopted for auditing and enforcing the service contract;
• causing the service owner to compile the service with the control component, wherein the control component auditing and enforcing the service contract of the service;
• and
• monitoring the service at runtime for compliance with the service contract.

A computer program product for enhancing a service delivery system of a cloud infrastructure provider with a compliance management system, the computer program product comprising:

• one or more computer-readable tangible storage medium and program instructions stored on at least one of the one or more tangible storage medium, the program instructions executable by a processor, the program instructions comprising:
• program instructions to extract a plurality of metadata from a service contract, wherein the service contract is a mutually agreed upon human-readable document between the cloud infrastructure provider and a service owner, and wherein a service of the service owner is deployed on the service delivery system of the cloud infrastructure provider according to the service contract;
• program instructions to compile the extracted plurality of metadata into a control component, wherein the control component is an executable program that is compiled as an integrated part of the service and adopted for auditing and enforcing the service contract;
• program instructions to cause the service owner to compile the service with the control component, wherein the control component auditing and enforcing the service contract of the service;
• and
• program instructions to monitor the service at runtime for compliance with the service contract.