US 12,015,635 B2
Infrastructure as code pre-deployment compliance testing
James Witschey, Falls Church, VA (US); John Jason Senich, Silver Springs, MD (US); Jun Park, Arlington, VA (US); Val Komarov, Fairfax, VA (US); Miguel Ledezma, Alexandria, VA (US); and Chris DeRamus, Ashburn, VA (US)
Assigned to Rapid7, Inc., Boston, MA (US)
Filed by Rapid7, Inc., Boston, MA (US)
Filed on Feb. 9, 2022, as Appl. No. 17/668,005.
Claims priority of provisional application 63/181,269, filed on Apr. 29, 2021.
Prior Publication US 2022/0353289 A1, Nov. 3, 2022
Int. Cl. H04L 29/06 (2006.01); G06F 9/445 (2018.01); G06F 9/50 (2006.01); H04L 9/40 (2022.01)
CPC H04L 63/1433 (2013.01) [G06F 9/44505 (2013.01); G06F 9/5072 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A system comprising:
one or more computer devices configured to implement a unified cloud configuration evaluation (UCCE) system; and
one or more non-transitory computer-readable storage media storing executable instructions that, when executed by the one or more computer devices cause the one or more computer devices to:
obtain, from a cloud computing infrastructure provider service, live asset configuration data about assets in a cloud environment hosted by the cloud computing infrastructure provider service, the live asset configuration data being in a first format associated with the cloud computing infrastructure provider service;
convert the live asset configuration data from the first format to a second format associated with the UCCE system;
generate a first model of the cloud environment using the live asset configuration data in the second format associated with the UCCE system;
obtain a cloud configuration definition created in a cloud configuration development (CCD) system specifying proposed configuration changes to the cloud environment, the cloud configuration definition being in a third format associated with the CCD system;
convert the cloud configuration definition from the third format associated with the CCD system to the second format associated with the UCCE system;
generate a second model reflecting the proposed configuration changes using the cloud configuration definition in the second format associated with the UCCE system; and
evaluate compliance of the live asset configuration data and the proposed configuration changes using a set of compliance rules by:
evaluating compliance of the live asset configuration data by applying the set of compliance rules to the first model, and
evaluating compliance of the proposed configuration changes by applying the set of compliance rules to the second model.