US 12,192,245 B2
Control of cloud infrastructure configuration
Ganesh Parameshwar Bhat, Bangalore (IN); Ramkumar Devanathan, Bangalore (IN); and Meenakshi Parameswaran, Bangalore (IN)
Assigned to ServiceNow, Inc., Santa Clara, CA (US)
Filed by ServiceNow, Inc., Santa Clara, CA (US)
Filed on Jan. 23, 2023, as Appl. No. 18/100,172.
Prior Publication US 2024/0250990 A1, Jul. 25, 2024
Int. Cl. H04L 9/40 (2022.01); H04L 41/22 (2022.01)
CPC H04L 63/20 (2013.01) [H04L 41/22 (2013.01); H04L 63/0435 (2013.01)] 16 Claims
OG exemplary drawing
 
1. A method comprising:
determining, based on a predefined policy, one or more configuration settings, wherein the predefined policy specifies a permitted value of a key within the configuration settings;
obtaining, from a cloud-based service provider, an actual value of the key, wherein a collector application contains one or more collector routines that are configured to be able to obtain values of specific keys from the cloud-based service provider, and wherein obtaining the actual value of the key comprises:
determining, based on the configuration settings, a collector routine configured to request and receive the actual value of the key from the cloud-based service provider; and
storing a name of the key and the actual value of the key in a database;
identifying, after obtaining the actual value of the key, that the cloud-based service provider is no longer accessible;
determining, by applying the predefined policy, while the cloud-based service provider is no longer accessible, that the actual value of the key does not match the permitted value of the key, wherein a policy engine application is configured to apply the predefined policy to stored keys, and wherein determining that the actual value of the key does not match the permitted value of the key comprises:
loading, by the policy engine application, the predefined policy;
reading, by the policy engine application, the actual value of the key from the database;
comparing, by the policy engine application, the actual value of the key to the permitted value of the key; and
generating, by the policy engine application, a report indicating that the actual value of the key does not match the permitted value of the key;
identifying a remediation for the key that includes determining an updated value of the key, wherein the updated value of the key satisfies the predefined policy; and
causing the updated value to be applied to the key in the cloud-based service provider after the cloud-based service provider become accessible again.