Methods and systems that manage cloud-computing infrastructure by idempotent application of data specifications and enforced-state management

A method that facilitates enforced-state management carried out by an infrastructure-as-code cloud-infrastructure-management service or system, the method comprising:

• providing an archive that stores structured-layered-state data files;
• storing enforced-state-management information in a database, the enforced-state-management information including
• Enforcement entries or records that each includes an enforced_state_ID value, and enforced_state_version value, an organization identifier, an indication of archived structured-layered-state information, and a timestamp, and
• Resource-States entries or records that each includes a resource identifier, an enforced_state_ID value, an enforced_state_version value, previous and current resource states, and a timestamp;
• and
• adding Enforcement entries and Resource-States entries to the database during execution of idempotent state commands and enforce requests.

A physical data-storage device encoded with processor instructions that, when executed by one or more processors within one or more computer systems, each containing one or more processors, one or more memories, and one or more data-storage devices, control the one or more computer systems to implement an infrastructure-as-code cloud-infrastructure-management service or system, the infrastructure-as-code cloud-infrastructure-management service or system including

• a frontend having
• a management interface that receives cloud-infrastructure-management commands and requests, including idempotent state commands and enforce requests,
• a database that stores information related to managed cloud infrastructure, received cloud-infrastructure-management requests and commands, and enforced-state management,
• an archive that stores structured-layered-state data files, and
• a frontend service that
• throttles the cloud-infrastructure-management commands and requests received through the management interface,
• generates tasks corresponding to the cloud-infrastructure-management commands and requests received through the management interface,
• prioritizes tasks, implements forced-state management, ingests events, and stores events, and
• a task manager which receives tasks from the frontend and coordinates multiple stages of task execution using multiple task queues, including task preemption, and
• multiple workers that each provides a worker interface and that each executes tasks, including execution of tasks that result in generation of enforced_state_ID values and enforced_state_version values.