US 2026/0267758 A1 · DETECTING AND MANAGING RESOURCE DRIFT IN CLOUD COMPUTING ENVIRONMENTS

Abstract

Techniques discussed herein relate to automatically detecting and managing resource drift (e.g., differences between a requested/actual state and a predefined or approved state) corresponding to a set of resources of a cloud computing environment (e.g., resources of a landing zone environment). Requested changes may be intercepted before applied and a determination of whether to allow or reject the changes may be made based at least in part on contextual data corresponding to the user/entity/resource to which the requested change applies. Previously-applied changes may be detected (e.g., based on current/approved state data comparisons) and a determination of whether to allow the change to persist or to remediate the change may be similarly made based at least in part on contextual data. User interfaces may be provided to view the resource drift across a cloud computing environment. User input for allowing/rejecting/reverting resource changes may be obtained via these interfaces.

Claims20

Dependent claims

A computer-implemented method, comprising:

monitoring a cloud-computing environment comprising a set of resources, the set of resources being previously deployed to the cloud-computing environment as part of executing an automated deployment process, the set of resources being deployed by the automated deployment process based at least in part on a predefined cloud-computing architecture;
maintaining, for the set of resources of the cloud-computing environment, approved state data indicating an approved state of the set of resources of the cloud-computing environment;
receiving drift data indicating a difference between a requested state of the set of resources and the approved state of the set of resources;
identifying an entity to which the difference is attributable;
and
responsive to determining that the entity to which the difference is attributable is allowed to modify one or more resources corresponding to the difference, performing one or more operations to modify the set of resources in accordance with the requested state.

3 more elements

A non-transitory computer-readable medium comprising one or more memories storing computer-executable instructions that, when executed by one or more processors, cause the one or more processors to:

monitor a cloud-computing environment comprising a set of resources, the set of resources being previously deployed to the cloud-computing environment as part of executing an automated deployment process according to a predefined architectural template that specifies a post-deployment state of the set of resources and an architecture framework of the cloud-computing environment;
maintain, for the set of resources of the cloud-computing environment, expected state data indicating an expected state of the set of resources of the cloud-computing environment;
receive drift data that indicates a change to a resource of the set of resources of the cloud-computing environment;
determine that the change is attributable to an entity;
and
perform one or more operations based at least in part on determining that the change is attributable to the entity.

3 more elements

Dependencies are inferred from the claim text.

Detecting and managing resource drift in cloud computing environments

Life of this patent

Detecting and managing resource drift in cloud computing environments

Life of this patent

Abstract

Claims20