Application centric compliance management system and method for a multi-level computing environment

An application centric compliance management system comprising:

• a computing system comprising at least one processor and at least one memory to store instructions that are executed by the at least one processor to:
• receive a notification message indicating that one or more of a plurality of resources of a multi-tier computing environment has changed, wherein the plurality of resources are being used to execute an application;
• for each of the plurality of resources, obtain a service chain policy associated with the application, the service chain policy specifying that a first of the plurality of resources is restricted to interaction with a second of the plurality of resources in a second tier of the multi-tier computing environment, the first resource configured in a first tier of the multi-tier computing environment;
• determine whether the first resource meets the service chain policy, wherein the determination is performed each time the notification message is received;
• and
• when the first resource does not meet the service chain policy, perform one or more remedial actions to make the first resource compliant with the unmet service chain policy.

Code implemented in a non-transitory, computer readable medium that when executed by at least one processor, is operable to perform at least the following:

• receiving a notification message indicating that one or more of a plurality of resources of a multi-tier computing environment has changed, wherein the plurality of resources are being used to execute an application;
• for each of the plurality of resources, obtaining a service chain policy associated with the application, the service chain policy specifying that a first of the plurality of resources is restricted to interaction with a second of the plurality of resources in a second tier of the multi-tier computing environment, the first resource configured in a first tier of the multi-tier computing environment;
• determining, whether the first resource meets the service chain policy, wherein the determination is performed each time the notification message is received;
• and
• when the first resource does not meet the service chain policy, performing one or more remedial actions to make the first resource compliant with the unmet service chain policy.