Functional discovery and mapping of serverless resources

Patent metadata

Field	Value
Publication number	US-11611489-B2
Application number	US-202017080369-A
Country	US
Kind code	B2
Filing date	Oct 26, 2020
Priority date	Oct 17, 2018
Publication date	Mar 21, 2023
Grant date	Mar 21, 2023

Abstract

A computing system may include a database disposed within a remote network management platform that manages a managed network, and a software application associated with the platform and configured to: obtain, from an external computing system, information about a function-application arranged to execute source code segment(s) on demand; determine that the obtained information relates to (i) a plurality of authorization-keys each respectively arranged to authorize on-demand execution of one of the source code segments, (ii) a first key-value string pair that enables establishment of connectivity to a service of the external computing system or of another computing system, and/or (iii) a second key-value string pair that enables establishment of connectivity to a data source of the external computing system or of another computing system, and responsively determine association(s) between the source code segment(s), the function-application, the service, and/or the data source; and store the association(s) in the database.

First claim

What is claimed is:

1. A computing system comprising:
a hardware processor; and
a non-transitory memory, accessible by the processor, storing instructions that, when executed by the processor, cause the processor to perform operations comprising:
obtaining, from an external computing system, information about an application configured to execute a plurality of source code segments on demand using computing resources of the external computing system, wherein the external computing system hosts the plurality of source code segments and the application on behalf of a managed network, wherein the obtaining the information about the application comprises:
transmitting, to the external computing system, a request for the information about the application, wherein the application has access to an application programming interface (API) associated with the external computing system, and

wherein transmitting the request comprises using the API to trigger a single representational state transfer (REST) call requesting the information about the application, and
receiving, from the external computing system, the information about the application in response to the request;

identifying, based on the obtained information, an association between two or more of:

the plurality of source code segments, the application, a service of the external computing system, or a data source of the external computing system; and
storing the association, in a database, as a configuration item.

2. The computing system of claim 1 , wherein the obtained information relates to one or more authorization-keys used to authorize execution of respective source code segments of the plurality of source code segments.

3. The computing system of claim 1 , wherein the obtained information relates to a key-value string pair used to establish connectivity to the service of the external computing system or to the data source of the external computing system, or a combination thereof.

4. The computing system of claim 3 , wherein the key-value string pair is used to establish connectivity to the service of the external computing system, and wherein the key-value string pair comprises a mapping between a dynamically-named variable indicative of the service and a value that identifies the service.

5. The computing system of claim 3 , wherein the key-value string pair is used to establish connectivity to the data source of the external computing system, and wherein the key-value string pair comprises a mapping between a dynamically-named variable indicative of the data source and a value that identifies the data source.

6. The computing system of claim 1 , wherein the application is configured to execute on a server device disposed within a remote network management platform, or on a server device disposed within the managed network, or a combination thereof.

7. The computing system of claim 1 , wherein the application is configured to execute one or more of the plurality of source code segments in response to a trigger event, and wherein the trigger event is initiated by a different application associated with a remote network management platform, by a different application associated with the external computing system, or by a different application operating on a client device remotely accessing the external computing system, or a combination thereof.

8. The computing system of claim 1 , wherein the data source of the external computing system comprises a data storage device, a server device, a spreadsheet application, a word processing application, a presentation application, or a text file, or a combination thereof.

9. A method comprising:
obtaining, from an external computing system, information about an application configured to execute a plurality of source code segments on demand using computing resources of the external computing system, wherein the external computing system hosts the plurality of source code segments and the application on behalf of a managed network, wherein the obtaining the information about the application comprises:
transmitting, to the external computing system, a request for the information about the application, wherein the application has access to an application programming interface (API) associated with the external computing system, and wherein transmitting the request comprises using the API to trigger a single representational state transfer (REST) call requesting the information about the application, and
receiving, from the external computing system, the information about the application in response to the request;

identifying, based on the obtained information, an association between two or more of: the plurality of source code segments, the application, a service of the external computing system, or a data source of the external computing system; and
storing, the association, in a database, as a configuration item.

10. The method of claim 9 , wherein the obtained information relates a plurality of authorization-keys used to authorize execution of respective source code segments of the plurality of source code segments.

11. The method of claim 10 , wherein identifying the association comprises determining that the obtained information indicates that a particular authorization-key of the plurality of authorization-keys is configured to authorize execution of a particular source code segment of the plurality of source code segments by the application.

12. The method of claim 10 , wherein identifying the association comprises:
determining that the obtained information indicates that a first authorization-key of the plurality of authorization-keys is configured to authorize execution of a first source code segment of the plurality of source code segments by the application and that a second authorization-key of the plurality of authorization-keys is configured to authorize execution of a second source code segment of the plurality of source code segments by the application; and
identifying, based on the determination, the first and second source code segments as both being executable by the application.

13. The method of claim 9 , wherein the obtained information relates to a key-value string pair used to establish connectivity to the service of the external computing system or to the data source of the external computing system, or a combination thereof.

14. The method of claim 13 , wherein the key-value string pair is used to establish connectivity to the service of the external computing system, and wherein the key-value string pair comprises a mapping between a dynamically-named variable indicative of the service and a value that identifies the service.

15. The method of claim 13 , wherein the key-value string pair is used to establish connectivity to the data source of the external computing system, and wherein the key-value string pair comprises a mapping between a dynamically-named variable indicative of the data source and a value that identifies the data source.

16. A non-transitory computer-readable medium, having stored thereon program instructions that, upon execution by a hardware processor, cause the processor to perform operations comprising:
obtaining, from an external computing system, information about an application configured to execute a plurality of source code segments on demand using computing resources of the external computing system, wherein the external computing system hosts the plurality of source code segments and the application on behalf of a managed network, wherein the obtaining the information about the application comprises:
transmitting, to the external computin

Assignees

• Servicenow Inc

Inventors

• Biran Noam
• Tal Hail
• Bitterfeld Robert
• Garty Asaf
• Solomon Bary

Classifications

• H04L63/10 Primary

  for controlling access to devices or network resources · CPC title

• H04L63/062

  for key distribution, e.g. centrally by trusted party (cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819) · CPC title

• H04L41/28 Primary

  Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration · CPC title

• G06F16/22

  Indexing; Data structures therefor; Storage structures · CPC title

• G06F9/547

  Remote procedure calls [RPC]; Web services · CPC title