Deployment using a context-based cloud security assurance system

Apparatus, comprising:

• a processor;
• computer memory holding computer program instructions executed by the processor to provide context-based security assurance in a cloud application environment, the computer program instructions comprising:
• program code, operative as an application is being deployed in the cloud application environment, to present a set of templates in an editor, wherein a template is pre-defined and includes a security assurance level that is specified by a set of general security requirements that have been discovered for the cloud application environment in an automated manner, at least one of the set of general security requirements being specified in a manner that does not expose at least some specific security tooling requirements necessary to implement the security assurance level security requirement;
• program code, operative in response to receipt of a selection of a template, and based at least in part on a security context of the deployment, to automatically apply configuration changes, via automation, to a set of security resources present in the cloud application environment to create a cloud application zone, the set of security resources including the at least one specific tooling requirement necessary to implement the security assurance level security requirement, the configuration changes including one of:
• a missing configuration, and a missing product;
• and
• program code operative upon receipt of an indication that the set of security resources have been configured, to complete the deployment of the application into the cloud application zone.

A computer program product in a non-transitory computer readable medium for use in a data processing system, the computer program product holding computer program instructions executed by the data processing system to provide context-based security assurance in a cloud application environment, the computer program instructions comprising:

• program code, operative as an application is being deployed in the cloud application environment, to present a set of templates in an editor, wherein a template is pre-defined and includes a security assurance level that is specified by a set of general security requirements that have been discovered for the cloud application environment in an automated manner, at least one of the set of general security requirements being specified in a manner that does not expose at least some specific security tooling requirements necessary to implement the security assurance level security requirement;
• program code, operative in response to receipt of a selection of a template, and based at least in part on a security context of the deployment, to automatically apply configuration changes, via automation, to a set of security resources present in the cloud application environment to create a cloud application zone, the set of security resources including the at least one specific tooling requirement necessary to implement the security assurance level security requirement, the configuration changes including one of:
• a missing configuration, and a missing product;
• and
• program code operative upon receipt of an indication that the set of security resources have been configured, to complete the deployment of the application into the cloud application zone.