Patent ID: 11954220
Assignee: PURE STORAGE, INC.
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 0:
1. A method comprising:
assigning, by a computing device comprising at least one processor and memory, to a container storage volume, a volume-level access policy that indicates one or more allowable storage operations, wherein the container storage volume is presented to one or more containers by a storage management service;
receiving, by the computing device, a request to access the container storage volume;
determining, by the computing device, whether to allow access to the container storage volume based on the volume-level access policy and one or more attributes that comprise a type of storage operation of the request;
responsive to determining to allow access to the container storage volume, issuing, by the computing device, from the storage management service to a storage resource, the request;
responsive to determining not to allow access to the container storage volume, preventing, by the computing device, the request from being serviced by the storage resource;
receiving, by the computing device, a request to modify the volume-level access policy to an updated volume-level access policy; and
denying, by the computing device, the request responsive to the updated volume-level access policy being less restrictive than the volume-level access policy.