US 12,141,112 B2
Compliance lifecycle management for cloud-based resources
Angel Calvo, Seattle, WA (US); Boo Boon Khoo, Bellevue, WA (US); Himanshu Sharma, Bellevue, WA (US); and Siddharth Gupta, Bellevue, WA (US)
Assigned to Amazon Technologies, Inc., Seattle, WA (US)
Filed by Amazon Technologies, Inc., Seattle, WA (US)
Filed on Feb. 4, 2022, as Appl. No. 17/665,363.
Application 17/665,363 is a continuation of application No. 17/200,597, filed on Mar. 12, 2021, granted, now 11,243,926.
Application 17/200,597 is a continuation of application No. 16/364,006, filed on Mar. 25, 2019, granted, now 10,949,406, issued on Mar. 16, 2021.
Prior Publication US 2022/0229824 A1, Jul. 21, 2022
This patent is subject to a terminal disclaimer.
Int. Cl. G06F 16/215 (2019.01); G06F 21/55 (2013.01); H04L 9/40 (2022.01); H04L 41/084 (2022.01); H04L 41/0853 (2022.01); H04L 41/0869 (2022.01); H04L 41/0893 (2022.01); H04L 67/1001 (2022.01); G06F 9/48 (2006.01); G06F 9/50 (2006.01); H04L 12/64 (2006.01)
CPC G06F 16/215 (2019.01) [G06F 21/552 (2013.01); H04L 41/0843 (2013.01); H04L 41/0853 (2013.01); H04L 41/0869 (2013.01); H04L 41/0893 (2013.01); H04L 63/0823 (2013.01); H04L 63/0876 (2013.01); H04L 67/1001 (2022.05); G06F 9/4856 (2013.01); G06F 9/5072 (2013.01); H04L 12/6418 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A system, comprising:
one or more processors; and
a memory, that stores program instructions that, when executed by the at least one processor, cause the one or more processors to implement a compliance management system, configured to:
assign a compliance pack to a resource group hosted by a cloud provider, wherein the compliance pack comprises one or more rules, wherein the resource group includes one or more virtualized compute resources that use or access data, and wherein the resource group is subject to the one or more rules;
in response to a determination that one or more resources is to be provisioned in the resource group hosted by the cloud provider, perform an evaluation of compliance of the one or more resources with respect to the one or more rules of the compliance pack to determine that the one or more resources violates at least one of the one or more rules of the compliance pack; and
in response to the determination that the one or more resources violates at least one of the one or more rules:
prevent the one or more resources from being provisioned; and
generate display data describing the evaluation, wherein the display data describing the evaluation indicates a non-compliance status of the one or more resources with respect to at least one of the one or more rules of the compliance pack.