Patent ID: 9590854
Date: 2017-03-07
CPC Classifications: H04L

Claim:
1. A computer-implemented method, comprising: maintaining, by a computing system, information about a first network configuration associated with a first network of computer resources; obtaining metadata by interacting with a programmatic interface of a control plane associated with a second network of computer resources distinct from the first network of computer resources associated with the first network configuration, the metadata including configuration data about a second network configuration of the second network of computer resources that is configured to execute untrusted computer program code; maintaining a plurality of policies, the plurality of policies organized according to a hierarchical standard with respect to network configurations of computer resources, an individual policy of the plurality of policies applying to the second network of computer resources; determining, by the computing system, a difference between the first network configuration and the second network configuration based at least in part on a comparison of the maintained information, the plurality of policies, and the obtained metadata; generating a report of the difference between the first network configuration and the second network configuration; providing the report for presentation; and responsive to receiving input from an administrator of the second network of computer resources, interacting with the control plane via the programmatic interface to update the second network of computer resources based at least in part on the received input, the plurality of policies, and the maintained information.