Patent ID: 11914877
Assignee: RED HAT, INC.
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 0:
1. A method comprising:
capturing, by a processing device monitoring network traffic from an entity of a plurality of entities operating in a cloud-computing environment, a memory access command of a particular type, the memory access command referencing an address range;
determining that the address range is associated with a block device of a distributed storage system that is accessible by the plurality of entities;
identifying a data structure associated with the block device, wherein the data structure identifies entities of the cloud-computing environment that are allowed access to the block device;
determining, in view of first metadata maintained in the data structure, whether the entity is allowed access to the block device by the memory access command;
responsive to determining that the entity is allowed access to the block device by the memory access command, determining, in view of second metadata maintained in the data structure, whether the entity is allowed access to the block device by the type of the memory access command; and
responsive to determining that the entity is allowed access to the block device by the type of the memory access command, executing the memory access command.