# US 2019/0377591 A1 · Cloud agnostic blueprint > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2019/0377591 A1 - Document ID: US20190377591A1 - Status: Published application - Kind: A1 - Application number: 16/004,456 - Filed: 2018-06-11 - Published: 2019-12-12 - Earliest claimed: 2018-06-11 - Assignees: VMware, Inc. - Applicants: VMware, Inc. - Inventors: George P. DIMITROV; Kristiyan GEORGIEV; Alexander DIMITROV; Alexandar SAVOV; Boris SAVOV - Web page: https://patentgrep.com/patent/US20190377591A1 ## CPC - G06F 9/45558: {Hypervisor-specific management and integration aspects} - H04L 63/104: {Grouping of entities} - G06F 8/60: Software deployment - G06F 9/5077: {Logical partitioning of resources; Management or configuration of virtualized resources (specific details on emulation or internal functioning of virtual machines G06F9/455)} - H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)} - H04L 67/10: in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46) - H04L 67/30: Profiles - G06F 2009/45562: {Creating, deleting, cloning virtual machine instances} - G06F 2009/45587: {Isolation or security of virtual machine instances} - G06F 2009/45595: {Network integration; Enabling network access in virtual machine instances} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A method to implement a cloud application includes receiving a blueprint of the cloud application, wherein the blueprint specifies virtual machines and a network connecting the virtual machines and being isolated from traffic external to the virtual machines. The method further includes automatically selecting a cloud profile specifying a cloud provider and a network isolation strategy and deploying the blueprint with the cloud provider by causing the cloud provider to create the virtual machines, create the network with the network isolation strategy, and attach the virtual machines to the network. ## Claims ### Claim at position 1 1: A method to implement a cloud application, comprising: receiving a blueprint of the cloud application, the blueprint specifying virtual machines and a network connecting the virtual machines and being isolated from traffic external to the virtual machines; automatically selecting a cloud profile specifying a cloud provider and a network isolation strategy; based on the cloud profile, deploying the blueprint with the cloud provider by instructing the cloud provider to: create the virtual machines; create the network with the network isolation strategy; and attach the virtual machines to the network. ### Claim at position 2 (depends on 1) 2: The method of claim 1, wherein selecting the cloud profile comprises selecting the cloud profile from cloud profiles, each cloud profile specifying a corresponding cloud provider and a corresponding network isolation strategy. ### Claim at position 3 (depends on 2) 3: The method of claim 2, further comprising receiving user input defining each cloud profile by selecting the corresponding cloud provider and the corresponding network isolation strategy. ### Claim at position 4 (depends on 3) 4: The method of claim 3, wherein selecting the corresponding network isolation strategy comprises selecting the use of a subnetwork or a security group to isolate the virtual machines from the other virtual machines. ### Claim at position 5 (depends on 1) 5: The method of claim 1, further comprising receiving user input defining the cloud profile by selecting the cloud provider and the network isolation strategy. ### Claim at position 6 (depends on 5) 6: The method of claim 5, wherein selecting the network isolation strategy comprises selecting the use of a subnetwork or a security group to isolate the virtual machines from the other virtual machines. ### Claim at position 7 7: A non-transitory, computer-readable storage medium encoded with instructions executable by a processor to implement a cloud application, the instructions comprising: receiving a blueprint of the cloud application, the blueprint specifying virtual machines and a network connecting the virtual machines and being isolated from traffic external to the virtual machines; automatically selecting a cloud profile specifying a cloud provider and a network isolation strategy; based on the cloud profile, deploying the blueprint with the cloud provider by instructing the cloud provider to: create the virtual machines; create the network with a corresponding network isolation strategy; and attaching the virtual machines to the network. ### Claim at position 8 (depends on 7) 8: The non-transitory, computer-readable storage medium of claim 7, wherein selecting the cloud profile comprises selecting the cloud profile from cloud profiles, each cloud profile specifying a corresponding cloud provider and a corresponding network isolation strategy. ### Claim at position 9 (depends on 8) 9: The non-transitory, computer-readable storage medium of claim 8, wherein the instructions further comprise receiving user input defining each cloud profile by selecting the corresponding cloud provider and the corresponding network isolation strategy. ### Claim at position 10 (depends on 9) 10: The non-transitory, computer-readable storage medium of claim 9, wherein selecting the corresponding network isolation strategy comprises selecting the use of a subnetwork or a security group to isolate the virtual machines from the other virtual machines. ### Claim at position 11 (depends on 7) 11: The non-transitory, computer-readable storage medium of claim 7, wherein the instructions further comprise receiving user input defining the cloud profile by selecting the cloud provider and the network isolation strategy. ### Claim at position 12 (depends on 11) 12: The non-transitory, computer-readable storage medium of claim 11, wherein selecting the network isolation strategy comprises selecting the use of a subnetwork or a security group to isolate the virtual machines from the other virtual machines. ### Claim at position 13 13: A computer system, comprising: a cloud automation tool being configured to: receive a blueprint of the cloud application, the blueprint specifying virtual machines and a network connecting the virtual machines and being isolated from traffic external to the virtual machines; automatically selecting a cloud profile specifying a cloud provider and a network isolation strategy; based on the cloud profile, deploy the blueprint with the cloud provider by instructing the cloud provider to: create the virtual machines; create the network with the network isolation strategy; and attach the virtual machines to the network. ### Claim at position 14 (depends on 13) 14: The computer system of claim 13, wherein the cloud automation tool comprises a deployment engine configured to select the cloud profile from cloud profiles, each cloud profile specifying a corresponding cloud provider and a corresponding network isolation strategy. ### Claim at position 15 (depends on 14) 15: The computer system of claim 14, wherein the deployment engine is further configured to receive user input defining each cloud profile by selecting the corresponding cloud provider and the corresponding network isolation strategy. ### Claim at position 16 (depends on 15) 16: The computer system of claim 15, wherein selecting the corresponding network isolation strategy comprises selecting the use of a subnetwork or a security group to isolate the virtual machines from the other virtual machines. ### Claim at position 17 (depends on 13) 17: The computer system of claim 13, wherein the cloud automation tool comprises a deployment engine configured to receive user input defining the cloud profile by selecting the cloud provider and the network isolation strategy. ### Claim at position 18 (depends on 17) 18: The computer system of claim 17, wherein selecting the network isolation strategy comprises selecting the use of a subnetwork or a security group. ### Claim at position 19 (depends on 13) 19: The computer system of claim 13, wherein the cloud automation tool comprises a blueprint designer configured to receive user input designing the blueprint.