Policy engine for cloud platform

A non-transitory computer-readable storage medium including instructions that, when executed on a computer processor, causes the computer processor to set organizational policies for web applications deployed in a cloud computing environment, by performing the steps of:

• receiving authentication credentials of a user of the cloud computing environment;
• authenticating the user;
• intercepting a communications packet from the user intended for a component of the cloud computing environment configured to orchestrate deployment of a web application in the cloud computing environment;
• identifying a command to manage deployment of the web application in the cloud computing environment in the intercepted communications packet;
• dispatching the intercepted communications packet to a rules engine corresponding to the identified command;
• executing a set of rules in the rules engine that implements a policy set by an organization desiring to deploy web applications in the cloud computing environment;
• forwarding the communications packet to the component of the cloud computing environment when completion of execution of the set of rules indicates compliance of the intercepted communications packet with the policy;
• and
• rejecting the communications packet when completion of execution of the set of rules indicates non-compliance of the communications packet with the policy.

A proxy server for setting organizational policies for web applications deployed in a cloud computing environment, the server comprising one or more central processing units (CPUs) configured to perform the steps of:

• receiving authentication credentials of a user of the cloud computing environment;
• authenticating the user;
• intercepting a communications packet from the user intended for a component of the cloud computing environment configured to orchestrate deployment of a web application in the cloud computing environment;
• identifying a command to manage deployment of the web application in the cloud computing environment in the intercepted communications packet;
• dispatching the intercepted communications packet to a rules engine corresponding to the identified command;
• executing, by operation of the one or more CPUs, a set of rules in the rules engine that implements a policy set by an organization desiring to deploy web applications in the cloud computing environment;
• forwarding the communications packet to the component of the cloud computing environment when completion of execution of the set of rules indicates compliance of the intercepted communications packet with the policy;
• and
• rejecting the communications packet when completion of execution of the set of rules indicates non-compliance of the communications packet with the policy.