Virtual infrastructure provisioning on government certification compliant and non-compliant endpoints based on configuration

Patent metadata

Field	Value
Publication number	US-2025037078-A1
Application number	US-202318225458-A
Country	US
Kind code	A1
Filing date	Jul 24, 2023
Priority date	Jul 24, 2023
Publication date	Jan 30, 2025
Grant date	—

Abstract

The present disclosure is related to devices, systems, and methods for virtual infrastructure provisioning on government compliant and non-compliant endpoints based on configuration. One embodiment includes receiving a request made by a user to provision a catalog item in a cloud computing environment, determining that the user is assigned to a project required to comply with governmental requirements concerning virtual infrastructure, selecting a cloud zone of a cloud region in which to provision the catalog item, wherein the cloud region is configured to provide compliance with the governmental requirements, and deploying the provisioned catalog item in the selected cloud zone.

First claim

What is claimed is:

1 . A method, comprising:
receiving a request made by a user to provision a catalog item in a cloud computing environment; determining that the user is assigned to a project required to comply with governmental requirements concerning virtual infrastructure; selecting a cloud zone of a cloud region in which to provision the catalog item, wherein the cloud region is configured to provide compliance with the governmental requirements; and deploying the provisioned catalog item in the selected cloud zone.

2 . The method of claim 1 , wherein selecting the cloud zone of the cloud region in which to provision the catalog item includes selecting the cloud zone from among a plurality of available cloud zones, and wherein the plurality of available cloud zones include a cloud zone of a cloud region that is not configured to provide compliance with the governmental requirements.

3 . The method of claim 1 , wherein the request does not specify the cloud zone.

4 . The method of claim 1 , wherein the method includes providing compliance with the governmental requirements irrespective of any user selection.

5 . The method of claim 1 , wherein the governmental requirements concerning virtual infrastructure are Federal Risk and Authorization Management Program (FedRAMP) requirements.

6 . The method of claim 1 , wherein the method includes:
receiving another request made by a different user to provision the catalog item in the cloud computing environment; determining that the different user is not assigned to a project required to comply with governmental requirements concerning virtual infrastructure; selecting a cloud zone of a different cloud region in which to provision the catalog item, wherein the different cloud region is not configured to provide compliance with the governmental requirements; and deploying the provisioned catalog item in the selected cloud zone of the different cloud region.

7 . The method of claim 1 , wherein determining that the user is assigned to a project required to comply with governmental requirements concerning virtual infrastructure includes determining a role of the user within an organization.

8 . The method of claim 1 , wherein determining that the user is assigned to a project required to comply with governmental requirements concerning virtual infrastructure includes consulting a Lightweight Directory Access Protocol (LDAP) server.

9 . A non-transitory machine-readable medium having instructions stored thereon which, when executed by a processor, cause the processor to:
provide an administrator user interface (UI), wherein the administrator UI is configured to:
receive an input to define a first cloud zone linked to a first cloud region configured to provide compliance with governmental requirements concerning virtual infrastructure;
receive an input to define a second cloud zone linked to a second cloud region not configured to provide compliance with the governmental requirements;
receive an input to associate a first project with the first cloud zone;
receive an input to associate a second project with the second cloud zone;
receive an input to assign a first user to the first project;
receive an input to assign a second user to the second project; and
provide a catalog UI, wherein the catalog UI is configured to:
receive a request made by the first user to provision a catalog item in a cloud computing environment;
select the first cloud zone in which to provision the catalog item responsive to a determination that the first user is assigned to the first project; and
deploy the provisioned catalog item in the first cloud zone.

10 . The medium of claim 9 , wherein the catalog UI is configured to:
receive a request made by the second user to provision the catalog item in the cloud computing environment; select the second cloud zone in which to provision the catalog item responsive to a determination that the second user is assigned to the second project; and deploy the provisioned catalog item in the second cloud zone.

11 . The medium of claim 10 , wherein the first user is a member of a first department of an organization and the second user is a member of a second department of the organization.

12 . The system of claim 9 , wherein the request made by the first user does not specify any cloud zone for provisioning the catalog item.

13 . The medium of claim 9 , wherein the catalog UI is configured to:
receive a request made by the second user to provision the catalog item in the cloud computing environment; select the first cloud zone in which to provision the catalog item responsive to a determination that the catalog item exceeds a threshold; and deploy the provisioned catalog item in the first cloud zone.

14 . The medium of claim 13 , wherein the catalog item exceeding the threshold includes the catalog item exceeding a particular graphics processing unit (GPU) quantity.

15 . The medium of claim 13 , wherein the catalog item exceeding the threshold includes the catalog item exceeding a particular memory size.

16 . A system, comprising:
an admin UI engine configured to provide an administrator user interface (UI), wherein the administrator UI is configured to:
receive an input to define a first cloud zone linked to a first cloud region configured to provide compliance with governmental requirements concerning virtual infrastructure;
receive an input to define a second cloud zone linked to a second cloud region not configured to provide compliance with the governmental requirements;
receive an input to associate a first project with the first cloud zone;
receive an input to associate a second project with the second cloud zone;
receive an input to assign a first user to the first project;
receive an input to assign a second user to the second project; and
a catalog UI engine configured to provide a catalog UI, wherein the catalog UI is configured to:
receive a request made by the first user to provision a catalog item in a cloud computing environment;
select the first cloud zone in which to provision the catalog item responsive to a determination that the first user is assigned to the first project; and
deploy the provisioned catalog item in the first cloud zone.

17 . The system of claim 16 , wherein the request made by the first user does not specify any cloud zone.

18 . The system of claim 16 , wherein the request made by the first user does not specify any cloud region.

19 . The system of claim 16 , wherein the catalog UI engine is configured to display a plurality of catalog items.

20 . The system of claim 19 , wherein the catalog UI engine is configured to display to the first user only catalog items of the plurality of catalog items that are in compliance with the governmental requirements.

Assignees

• VMware LLC

Inventors

• Dimitrov Alexander
• Delcheva Anna
• Pavlov Daniel
• Draganchev Martin
• Aronov Evgeny

Classifications

• G06Q50/26

  Government or public services (business processes related to the transportation industry G06Q50/40) · CPC title

• G06Q10/105

  Human resources · CPC title

• G06F9/45558

  Hypervisor-specific management and integration aspects · CPC title

• G06Q10/103 Primary

  Workflow collaboration or project management · CPC title

• G06F2209/506

  Constraint · CPC title