Cloud Workload Management Based on Configurable Compliance Objectives

A computer system comprising:

• a processor set;
• one or more computer-readable storage media;
• and
• program instructions stored on the one or more computer-readable storage media to cause the processor set to perform operations comprising:
• determining whether a set of software vulnerabilities exists in an in-use software package of a set of in-use software packages corresponding to a cloud workload in a production environment based on a search of a set of software vulnerability databases;
• responsive to determining that a set of software vulnerabilities exists in an in-use software package of the set of in-use software packages corresponding to the cloud workload in the production environment based on the search, determining a set of target software update times to apply a set of software updates corresponding to the set of software vulnerabilities in the in-use software package of the cloud workload based on customer preference settings and compliance objectives to at least one of minimize disruption and maximize security of the cloud workload;
• and
• applying the set of software updates to the in-use software package of the cloud workload in the production environment to mitigate the set of software vulnerabilities in the in-use software package in accordance with the set of target software update times determined for the set of software updates based on the customer preference settings and the compliance objectives to at least one of minimize the disruption and maximize the security of the cloud workload.

A computer program product comprising:

• one or more computer-readable storage media;
• and
• program instructions stored on the one or more computer-readable storage media to perform operations comprising:
• determining whether a set of software vulnerabilities exists in an in-use software package of a set of in-use software packages corresponding to a cloud workload in a production environment based on a search of a set of software vulnerability databases;
• responsive to determining that a set of software vulnerabilities exists in an in-use software package of the set of in-use software packages corresponding to the cloud workload in the production environment based on the search, determining a set of target software update times to apply a set of software updates corresponding to the set of software vulnerabilities in the in-use software package of the cloud workload based on customer preference settings and compliance objectives to at least one of minimize disruption and maximize security of the cloud workload;
• and
• applying the set of software updates to the in-use software package of the cloud workload in the production environment to mitigate the set of software vulnerabilities in the in-use software package in accordance with the set of target software update times determined for the set of software updates based on the customer preference settings and the compliance objectives to at least one of minimize the disruption and maximize the security of the cloud workload.