International Business Machines Corporation

Archana Kumar

Vijay K Sukthankar

Naveen G Balani

Nataraj Nagaratnam

Sreekanth Ramakrishna Iyer

Sridhar R Muppidi

William Alexander Bird

A secure tag generation service is associated with a cloud infrastructure. This service establishes a security context for a particular cloud tenant based on a tenant's security requirements, one or more cloud resource attributes, and the like. The security content is encoded into a data structure, such as a tag that uniquely identifies that security context. The tag is then encrypted. The encrypted tag is then propagated to one or more cloud management services, such as a logging service. When one or more cloud resources are then used, such use is associated with the encrypted security context tag. In this manner, the encrypted tag is used to monitor activities that are required to meet the security context. When it comes time to perform a security or compliance management task, any cloud system logs that reference the encrypted security context tag are correlated to generate a report for the security context.

Providing context-based visibility of cloud resources in a multi-tenant environment

A method, system, and program product for identifying cloud resources are provided, and further a method, system, and program product for configuring cloud resources are provided. The method for identifying cloud resources may include receiving a request with respect to at least one resource in a cloud and determining a set of resources among the at least one resource in the cloud in accordance with the received request. Determining the set of resources may include consulting an ontology including metadata associated with the at least one resource in the cloud and computing the set of resources based on the metadata and the received request. Additionally, the method may include computing a cost factor with respect to the determined set of resources. Furthermore, the method may include rendering, in response to the received request, the determined set of resources and the cost factor with respect to the determined set of resources.

Configuring cloud resources

A computer implemented method, system and/or program product configure cloud resources. A request is received for a specific set of cloud resources. The set of cloud resources comprises at least one cloud resource that has been associated with an ontological database. The ontological database defines descriptive terms for the cloud resource and describes relationships between the descriptive terms used by different cloud resources. An optimal set of cloud resources that satisfies the request is configured and saved for future usage in responding to requests for the specific set of cloud resources.

Growing community of inventors

Bengaluru, India

Archana Kumar