TWI833501B - Assets and configuration management system and method for multi-cloud and computer program product thereof - Google Patents

Abstract

An assets and configuration management system and an assets and configuration method for multi-cloud and a computer program thereof are disclosed. A multi-cloud assets management core unit is configured to acquire a public cloud account of a user and an asset enquiry strategy according to an asset enquiry request. An asset enquiry strategy unit is configured to query assets in public clouds according to the public cloud account and the asset enquiry strategy, so that the multi-cloud assets management core unit collates the queried assets query results into asset information and then stores the asset information in a multi-cloud asset management database. A multi-cloud configuration management core unit is configured to query configuration in the public clouds in response to a configuration enquiry request for a given asset in the asset information, so as to collate the queried configuration query results into configuration information and then reply the user with the queried configuration information of the given asset.

Description

Asset and configuration management systems, asset and configuration management methods and computer program products for multiple public clouds

This case is about an asset and configuration management technology for multi-cloud. Specifically, it is about an asset and configuration management system, asset and configuration management method and computer program product for multiple public clouds.

Current cloud platforms include Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP), etc., which allow users to use cloud resources on public clouds through the Internet, such as virtual machines (VM), Storage space, applications, etc.

Different cloud platforms provide different management mechanisms for users to understand the operating environment or software services they use on the cloud. However, when a user or enterprise has multiple public cloud accounts, and there are different types of services or resources on the multiple public clouds, it provides integration and real-time management of the assets of these services or resources and their configuration. Management systems and methods are very important to users.

Therefore, how to provide a convenient management technology that allows users to easily manage their assets and configurations on multiple public clouds is an issue that needs to be solved.

In order to solve the above problems and other problems, this case discloses an asset and configuration management system, asset and configuration management method and computer program product for multiple public clouds.

The asset and configuration management system for multiple public clouds disclosed in this case includes: a multi-cloud asset management database; a multi-cloud asset management core unit used to obtain the user's public cloud account and assets based on an asset query request Query strategy; the asset query strategy unit performs asset query on the public cloud based on the public cloud account and the asset query strategy obtained by the multi-cloud asset management core unit, so as to transmit the queried asset query results to the multi-cloud asset The management core unit collects asset information and stores it in the multi-cloud asset management database; and the multi-cloud configuration management core unit responds to a configuration query request for a given asset in the asset information, and performs the configuration query on Configuration query is performed on the public cloud, and the configuration query results are compiled into configuration information and the configuration information is returned.

The asset and configuration management system used in multiple public clouds disclosed in this case also includes: an external public cloud event receiving unit, which is used to receive update events; and a work scheduling and event management unit, which is generated by the work schedule The asset query request initiated and the asset query request driven by the update event, wherein the multi-cloud asset management core unit obtains the asset query request from the multi-cloud asset management database according to the asset query request initiated by the work schedule. The public cloud account and the asset query strategy, or the multi-cloud asset management core unit obtains the public cloud account and the asset query strategy from the activity record of the update event based on the asset query request driven by the update event , wherein the work scheduling and event management unit, the multi-cloud asset management core unit, and the asset query strategy unit constitute a multi-cloud Asset management subsystem, and the multi-cloud asset management subsystem is based on clustered container technology and is part of the electronic device.

The asset and configuration management system for multiple public clouds disclosed in this case also includes: an external public cloud interface unit for connecting multiple public clouds; and a configuration big data processing unit for configuration management of the multi-cloud When the configuration query results queried by the core unit in the public cloud through the external public cloud interface unit are batches, the configuration big data processing unit combines the configuration query results of the batches into complete configuration information. Among them, the multi-cloud configuration management core unit and the configuration big data processing unit constitute a multi-cloud configuration management subsystem, and the multi-cloud configuration management subsystem is based on clustered container technology and is part of an electronic device.

In one embodiment, the asset query strategy unit includes: a configuration file (Config) asset management unit, which is used to call an external public cloud interface corresponding to the configuration file (Config) asset to query the configuration file (Config) type asset. Information; resource group and tag (Resource Group & Tag) asset management unit, which is used to call the external public cloud interface corresponding to the resource group and tag (Resource Group & Tag) assets to query the resource group and tag ( Resource Group & Tag) type asset information; a software development kit (SDK) asset management unit, which is used to query SDK type asset information in the public cloud; and a Resource Graph (Resource Graph) asset management unit, which is used to query SDK type asset information in the public cloud. Call the external public cloud interface corresponding to the resource graph (Resource Graph) product to query the resource graph (Resource Graph) type asset information.

In one embodiment, the multi-cloud asset management database stores a public cloud region list data table, a public cloud asset query strategy data table, a public cloud service or resource type data table, a public cloud platform type data table, and user multi-cloud account data. table, multi-cloud account asset schedule activation and event-driven management record table, and/or service or resource identification data table of asset query results, and among them, the asset query result If the service or resource identifier data table has a many-to-many relationship with the multi-cloud account asset schedule activation and event-driven management record table, the multi-cloud account asset schedule activation and event-driven management record table has the user multi-cloud account information. The table has a many-to-one relationship, the user multi-cloud account data table and the public cloud platform type data table have a many-to-one relationship, and the public cloud platform type data table and the public cloud asset query strategy data table have a one-to-one relationship. There is a many-to-many relationship. The public cloud platform type data table has a one-to-many relationship with the public cloud region list data table. The public cloud platform type data table has a one-to-many relationship with the public cloud service or resource type data table.

The asset and configuration management method for multiple public clouds disclosed in this case includes: obtaining the user's public cloud account and asset query strategy based on an asset query request; based on the public cloud account and the asset query strategy, Perform asset query on the public cloud; compile the queried asset query results into asset information and store them in the multi-cloud asset management database; respond to a configuration query request for a given asset in the asset information, query according to the configuration Request a configuration query on the public cloud; and compile the configuration query results into configuration information to return the configuration information of the given asset.

In one embodiment, the step of obtaining the user's public cloud account and asset query strategy according to an asset query request includes: when the asset query request is initiated by a work schedule, according to the work schedule The initiated asset query request obtains the public cloud account and the asset query policy from the multi-cloud asset management database; and when the asset query request is driven by an update event, the The asset query request obtains the public cloud account and the asset query policy from the activity record of the update event.

In one embodiment, the step of compiling the queried configuration query results into configuration information to return the configuration information of the given asset includes: when the queried configuration information is When batching, combine the configuration information of the batch into complete configuration information and then return it.

In one embodiment, the step of performing asset query on the public cloud according to the public cloud account and the asset query strategy includes: when the asset query strategy includes a configuration file (Config) asset query strategy, calling the configuration file (Config) The external public cloud interface corresponding to the asset to query the configuration file (Config) asset information; when the asset query strategy includes the resource group and tag (Resource Group & Tag) asset query strategy, call the resource group The external public cloud interface corresponding to the resource group & tag asset is used to query resource group and tag asset information; the asset query strategy includes software development kit (SDK) ) asset query strategy, query SDK asset information in the public cloud; and when the asset query strategy includes a Resource Graph asset query strategy, call the external public cloud interface corresponding to the Resource Graph product. , to query resource graph (Resource Graph) asset information.

In one embodiment, the multi-cloud asset management database stores a public cloud region list data table, a public cloud asset query strategy data table, a public cloud service or resource type data table, a public cloud platform type data table, and user multi-cloud account data. table, the multi-cloud account asset schedule activation and event-driven management record table, and/or the service or resource identification code data table of the asset query results, and among them, the service or resource identification code data table of the asset query results and the multi-cloud account assets The schedule activation and event-driven management record table are in a many-to-many relationship. The multi-cloud account asset schedule activation and event-driven management record table are in a many-to-one relationship with the user multi-cloud account data table. The user multi-cloud account data is in a many-to-one relationship. The table has a many-to-one relationship with the public cloud platform type data table, and the public cloud platform type data table has a one-to-many relationship with the public cloud asset query strategy data table. The public cloud platform type data table has a one-to-one relationship with the public cloud platform type data table. The cloud region list data table has a one-to-many relationship, and the public cloud platform type data table has a one-to-many relationship with the public cloud service or resource type data table.

The computer program product disclosed in this case is loaded into the computer to execute the asset and configuration management method disclosed in this case for multiple public clouds.

The computer-readable media disclosed in this case stores the computer program product disclosed in this case.

Through the asset and configuration management system, asset and configuration management methods and computer program products for multiple public clouds disclosed in this case, a set of multi-cloud assets and configuration management services are designed. State management provides the ability to query the identification, quantity, and configuration of heterogeneous services or resources in multiple regions on the public cloud. First, the query can be triggered when the work schedule is started, obtain the public cloud account authorized by the user, refer to the list of available public cloud regions recorded in the database, and continue to query the asset quantity and asset query for different types of services or resources in each region. Strategies can include but are not limited to SDK-type assets, ResourceGroup&Tag-type assets, Config-type assets, and Resource Graph-type assets. The results of asset quantity query also provide classification query and management based on service or resource type. When services on multiple public cloud regions Or when the quantity of resource assets is updated, it will also trigger an update of the quantity of the latest services or resources to provide users with the latest multi-cloud asset results. In addition, configuration data query can be further provided for specific services or resources that have been recorded. Configuration information will be processed through big data processing mechanisms to improve query efficiency and provide real-time multi-cloud asset and configuration management services.

100:Asset and configuration management system

1: Multi-cloud asset management subsystem

2: Multi-cloud configuration management subsystem

10, 10A, 10B, 10C: User terminal device

11: External public cloud event collection unit

12: Work scheduling and event management unit

13: Multi-cloud asset management core unit

14: Asset query strategy unit

141:Config asset management unit

142: Resource Group & Tag asset management unit

143: Software development kit (SDK) asset management unit

144: Resource Graph asset management unit

15:Multi-cloud asset management database

16: Multi-cloud configuration management core unit

17:Configuring big data processing unit

18:External public cloud interface unit

200: Asset and configuration management methods

S21~S23, S231~S234, S24, S241~S244, S25~S27: steps

300: Multi-cloud Asset Management Fact Sheet

31: Public cloud region list information table

32: Public cloud asset query strategy data sheet

33: Public cloud service or resource type information table

34: Public cloud platform type information table

35: User multi-cloud account information table

36: Multi-cloud account asset schedule activation and event-driven management record table

37: Service or resource identification code data table of asset query results

400:Process

S401~S416: steps

500:Process

S501~S523: steps

600:Process

S601~S612: steps

700:Process

S701~S711: steps

Figure 1 is a block diagram of an embodiment of the asset and configuration management system for multiple public clouds in this case.

Figure 2 is a schematic flowchart of a step embodiment of the asset and configuration management method for multiple public clouds in this case.

Figure 3 is a schematic diagram of the structural relationship of the multi-cloud asset management data table in the asset and configuration management system for multiple public clouds in this case.

Figure 4 is a flow diagram of an embodiment of the asset and configuration management system and method for multiple public clouds in this case.

Figure 5 is a schematic flowchart of scheduled startup in an embodiment of the asset and configuration management system and method for multiple public clouds in this case.

Figure 6 is a schematic diagram of an event-driven process in an embodiment of the asset and configuration management system and method for multiple public clouds in this case.

Figure 7 is a schematic flowchart of configuration query in an embodiment of the asset and configuration management system and method for multiple public clouds in this case.

The following uses specific examples to illustrate the implementation of the present invention. People familiar with this art can easily understand other advantages and effects of the present invention from the content disclosed in this article. The structures, ratios, sizes, etc. shown in the drawings attached to this manual are only used to coordinate with the content disclosed in the manual for the understanding and reading of those familiar with this art. They are not used to limit the conditions for the implementation of this case. Therefore, any modification, change or adjustment, without affecting the effectiveness and purpose of this case, should still fall within the scope of the technical content disclosed in this case.

As used herein, the terms "includes," "includes," "has," "contains" or any other variations thereof are intended to cover a non-exclusive inclusion. Unless stated otherwise, singular terms such as "a", "an" and "the" also apply to the plural form and terms such as "or", "and/or" are used interchangeably.

Please refer to Figure 1, which schematically illustrates an embodiment of the asset and configuration management system for multiple public clouds in this case.

The asset and configuration management system 100 in this case includes an external public cloud event collection unit 11, a work scheduling and event management unit 12, a multi-cloud asset management core unit 13, an asset query strategy unit 14, a multi-cloud asset management database 15, and a multi-cloud configuration Management core unit 16, configuration big data processing unit 17, external public cloud interface unit 18.

The external public cloud event collection unit 11 is configured to receive update events, that is, responsible for receiving update events for services or resources of public cloud accounts of multiple users on the public cloud.

The external public cloud interface unit 18 is used to interface with multiple public clouds, that is, responsible for interfacing with interfaces on multiple public clouds.

The multi-cloud asset management database 15 is mainly used to store asset query strategies and asset query results. In one embodiment, the multi-cloud asset management database 15 stores: public cloud area list data table 31, public cloud asset query strategy data table 32, public cloud service or resource type data table 33, public cloud platform type data table 34, usage The multi-cloud account data table 35, the multi-cloud account asset schedule activation and event-driven management record table 36, and/or the service or resource identification code data table 37 of the asset query results are shown in Figure 3.

The work scheduling and event management unit 12 is used to generate asset query requests. In one embodiment, the work schedule and event management unit 12 may generate an asset query request initiated by the work schedule. In another embodiment, the work scheduling and event management unit 12 may generate asset query requests driven by update events collected by the external public cloud event collection unit 11 . In other words, the work schedule and event management unit 12 accepts two modes: schedule start and event drive to trigger the asset query task.

The multi-cloud asset management core unit 13 is configured to receive an asset query request from the work schedule and event management unit 12, and obtain the user's public cloud account and asset query policy according to the asset query request. In one embodiment, the asset query request can be initiated by a work schedule, and the multi-cloud asset management core unit 13 obtains the public cloud account from the multi-cloud asset management database 15 according to the asset query request initiated by the work schedule. and the asset query strategy. In another embodiment, the asset query request may be driven by an update event. The multi-cloud asset management core unit 13 obtains the public cloud account and the asset from the activity record of the update event based on the asset query request driven by the update event. Query strategy.

The asset query strategy unit 14 performs asset query on the public cloud according to the public cloud account and the asset query strategy, with or without the external public cloud interface unit 18, to deliver the queried asset query results to multi-cloud asset management. The core unit 13 compiles the asset information and stores it in the multi-cloud asset management database 15, so that the multi-cloud asset management core unit 13 can retrieve the asset information from the multi-cloud asset management database 15 and return the asset information of the user's public cloud account.

In other words, the multi-cloud asset management core unit 13 and the asset query strategy unit 14 are responsible for querying or updating the asset information under the user's public cloud account, obtaining or determining the asset query strategy, and then integrating the query or updated results to store them in the multi-cloud asset The management database 15 is so that when the user queries, it can be retrieved from the multi-cloud asset management database 15 and returned.

In addition, as shown in Figure 5, the asset query strategy unit 14 further includes but is not limited to: a configuration file (Config) asset management unit 141, a resource group and tag (Resource Group & Tag) asset management unit 142, a software development tool suite ( software development kit (SDK) asset management unit 143 and resource graph (Resource Graph) asset management unit 144.

The configuration file (Config) asset management unit 141 is used to call the external public cloud interface corresponding to the configuration file (Config) asset to query the configuration file (Config) type asset information. The Resource Group & Tag asset management unit 142 calls the external public cloud interface corresponding to the Resource Group & Tag asset to query the Resource Group & Tag ) type asset information. The software development kit (SDK) asset management unit 143 is used to query SDK asset information in the public cloud. The resource graph (Resource Graph) asset management unit 144 is used to call the external public cloud interface corresponding to the resource graph (Resource Graph) product to query resource graph (Resource Graph) type asset information.

The multi-cloud configuration management core unit 16 responds to a configuration query request for a given asset in the asset information, performs a configuration query on the public cloud according to the configuration query request, and summarizes the queried configuration query results as Configuration information and return the configuration information. In other words, the multi-cloud configuration management core unit 16 is responsible for instantly querying the configuration information of the services or resources specified by the user, so as to compile the configuration query results into configuration information.

When the configuration query result queried by the multi-cloud configuration management core unit 16 in the public cloud through the external public cloud interface unit 18 is a batch, the configuration big data processing unit 17 configures the big data processing unit 17 to process the batch. The configuration query results are combined into complete configuration information. That is, when the amount of configuration query results is large, the big data mechanism is used to process them, which can effectively improve the real-time query efficiency.

In one embodiment, the work scheduling and event management unit 12, the multi-cloud asset management core unit 13, and the asset query strategy unit 14 may constitute the multi-cloud asset management subsystem 1, and the multi-cloud asset management subsystem 1 is based on clustered container technology. Part of the electronic device.

In another embodiment, the multi-cloud configuration management core unit 16 and the configuration big data processing unit 17 may constitute the multi-cloud configuration management subsystem 2, and the multi-cloud configuration management subsystem 2 is part of the electronic device using clustered container technology. middle.

Briefly, in the embodiment of the asset and configuration management system 100 for multiple public clouds shown in FIG. 1 , the asset and configuration management system 100 of the present invention and its subsystems and units are configured as clustered containers. The technical method is deployed in electronic devices and is responsible for providing the identification code, quantity and configuration query and management mechanism of heterogeneous services or resources in multiple regions on the public cloud in the field of multi-cloud asset and configuration management services, including the multi-cloud asset management subsystem. 1 and multi-cloud configuration management subsystem 2. Among them, multi-cloud asset management subsystem 1 allows users to query the latest multi-cloud asset information on multiple public clouds. Multi-cloud asset information can include but is not limited to: asset services or resource types, Quantity and unique identifying information.

In the multi-cloud asset management subsystem 1, the work schedule and event management unit 12 is first responsible for driving the task of asset query or update based on the user's account on the public cloud. Subsequently, the multi-cloud asset management core unit 13 is responsible for managing asset information. The life cycle of the query, including the update of asset information, will also obtain a plurality of appropriate asset query strategies based on the user's public cloud account and assign them to the Config asset management unit or ResourceGroup&Tag in the asset query strategy unit 14 respectively. The asset management unit or SDK queries the asset management unit or Resource Graph asset management unit for query. The operations are as follows. The Config asset management unit needs to apply for or activate the Config service on the public cloud, such as but not limited to AWS Config service, so the user's public cloud The account must enable the Config service in the public cloud area where all assets are located, and enable the Config service receiver Recorder, which can be used with the external public cloud interface unit 18 to obtain Config-type assets. The ResourceGroup&Tag asset management unit does not need to apply for a separate public cloud service. It is responsible for conducting asset queries for services or resources that have been tagged in the user's public cloud account. The same as above, and can be used with external public cloud services. There is a cloud interface unit 18 that obtains ResourceGroup&Tag type assets. The SDK query asset management unit does not need to apply for a separate public cloud service. It focuses on locking a single service or resource and uses the interface query tool (SDK) provided by the service or resource in the public cloud. It does not need to be matched with an external public cloud interface unit 18, that is SDK-type asset query can be performed. The Resource Graph asset management unit does not need to apply for rent or activate public cloud services, but it must be paired with the Resource Graph service on the public cloud. It needs to be paired with an external public cloud interface unit 18 to obtain the supported services of the Resource Graph type. Or resource assets, but Resource Graph has interface call quota limit, so when the quota is exceeded, Resource Graph type asset information will not be obtained in time. After the distributed query results are compiled, they will be stored in the multi-cloud asset management database 15 for users to query asset results.

In addition, the multi-cloud configuration management subsystem 2 provides users with real-time query of configuration information of specified services or resources in public cloud accounts. The multi-cloud configuration management core unit 16 is responsible for receiving configuration query requests for specified services or resources, and continues to coordinate with external public cloud accounts. The cloud interface unit 18 will retrieve the configuration information based on the identification code of the designated service or resource. If the retrieved configuration information is too large, the configuration big data processing unit 17 will be assigned to return the configuration result and convert it into big data. Streaming is received sequentially and divided into smaller streaming units, and then the complete configuration data is assembled back to provide real-time multi-cloud configuration management query function.

Please refer to Figure 2, which schematically illustrates an embodiment of the steps of the asset and configuration management method for multiple public clouds in this case. The asset and configuration management method 200 includes steps S21 to S27, which can be executed by an electronic device, such as a server on which the asset and configuration management system 100 is deployed using clustered container technology.

In step S21, an asset query request is received, where the asset query request may be initiated by a work schedule or driven by an update event.

In step S22, the user's public cloud account is obtained.

In step S23, the asset query policy corresponding to the public cloud account is obtained.

It should be noted that if the asset query request is initiated by a work schedule, the user's public cloud account is first obtained from the multi-cloud asset management database 15, and then the corresponding data is obtained from the multi-cloud asset management database 15 based on the public cloud account. Asset query strategy. If the asset query request is driven by an update event, and if the activity record of the update event contains the user's public cloud account and the corresponding asset query policy, there is no need to go to the multi-cloud asset management database 15. However, if the update event If the user's public cloud account and corresponding asset query policy are not included in the activity record, the operation of the asset query request initiated by the work schedule will be compared.

In step S24, asset query is performed on the public cloud according to the user's public cloud account and asset query policy.

In one embodiment, including steps S231 and S241, the multi-cloud asset management database is queried to see if there is a ResourceGroup&Tag asset type in the asset query policy. If so, the ResourceGroup&Tag asset information is obtained, and then returns to step S23; if not, proceeds to step S232. In another embodiment, steps S232 and S242 are included to query whether the type of Config asset exists in the asset query policy in the multi-cloud asset management database. If so, obtain the Config asset information, and then return to step S23; if not, proceed to step S232. . In yet another embodiment, steps S233 and S243 are included to query whether the asset query policy contains the type of SDK asset in the multi-cloud asset management database. If so, obtain the SDK asset information and then return to step S23; if not, proceed to step S234. . In another embodiment, steps S234 and S244 are included to query whether the resource graph asset type exists in the asset query policy in the multi-cloud asset management database. If so, obtain the ResourceGraph asset information; if not, proceed to step S25. It should be noted that there is no order restriction on steps S231, S232, S233, and S234, as long as each type of asset has been judged.

In step S25, the asset query results are collected and stored, that is, the asset query results queried in step S24 are collected and stored or updated in the multi-cloud asset management database.

In step S26, whether to query configuration information, if yes, proceed to step S27, if not, complete the query.

In step S27, the configuration information is queried, and then the query is completed.

In short, in the embodiment of the asset and configuration management method 200 for multiple public clouds shown in FIG. 2 , first of all, the asset query request in step S21 can be initiated by a multi-cloud asset query work schedule or a multi-cloud asset update. Event-driven triggering. After triggering, the user's public cloud account obtained in step S22 is connected and the asset query strategy is obtained. After judging in step S231, whether the queried asset is a ResourceGroup&Tag type asset, then proceed to step S232 of obtaining the ResourceGroup&Tag asset. , if it is not a ResourceGroup&Tag type asset, go to the following judgment formula, and similarly complete the judgment and query of steps S232 and S242, step S233 and step S243, step S234 and step S244, then the above asset query results are compiled and processed in step S25 Store, and then determine whether real-time query of configuration information is required in step S26. If not, the process ends. If yes, proceed to further step S27 configuration query, in which the query can be completed through step big data configuration information processing. Improve the efficiency of configuration query to complete the query.

It should be noted that the method in this case can be executed on, for example, a server, computer, or other equipment with data processing, computing, storage, network communication, etc. functions as a single or multiple collections, where the server, computer, or Equipment includes central processing unit, hard drive, memory, etc.

In one embodiment, the modules and units can be software, hardware or firmware; if they are hardware, they can be a processing unit, processor, computer or server with data processing and computing capabilities. Server; if it is software or firmware, it may include instructions executable by a processing unit, processor, computer or server, and may be installed on the same hardware device or distributed across multiple different hardware devices.

In addition, the computer program product in this case executes the method after loading the program on the computer. In addition, in addition to being stored in recording media, computer programs (products) can also be directly transmitted and provided over the Internet. Computer programs (products) are things that contain computer-readable programs and are not limited to external forms. The computer includes but is not limited to an electronic device with a processor, such as a mobile phone or a tablet.

In addition, this case also provides a computer-readable recording medium, which is used in a computing device or computer with a processor and/or memory. The computer-readable recording medium stores instructions and can be used by the computing device or computer. The processor and/or memory executes the computer-readable recording medium to execute the above method and/or content when executing the computer-readable recording medium. The computer-readable recording medium (such as a hard disk, a floppy disk, an optical disk, a USB flash drive) stores the computer program (product).

Please refer to Figure 3, which schematically illustrates the structural relationship between the assets used in multiple public clouds and the multi-cloud asset management data table in the configuration management system in this case.

The multi-cloud asset management database 15 stores various data tables, lists or record tables. The data structure relationship is shown in Figure 3. The user multi-cloud account data table 35 records the user's multiple public cloud authorized accounts and the public cloud to which the account belongs. The cloud platform type can be related to a record of the public cloud platform type data table 34 through the recorded public cloud platform type, and one record in the public cloud platform type data table 34 can be related to multiple sets of public cloud region list data tables 31, and It is related to a plurality of sets of public cloud asset query strategy data tables 32 and is related to a plurality of sets of public cloud service or resource type data tables 33.

In addition, the public cloud region list data table 31, the public cloud asset query strategy data table 32, and the public cloud service or resource type data table 33 respectively record the attributes of the public cloud to provide necessary parameters for the asset query process. The user multi-cloud account data table 35 can also be related to multiple multi-cloud account assets. Records in the schedule startup and event-driven management record table 36, which respectively record the schedule startup or event-driven asset query records and timestamps of the user's multi-cloud account, and then store the query results in the service or resource identification code data of the asset query results. Table 37, Service or Resource Identification Code Data of Asset Query Result The asset query result information recorded in Table 37 is also related to the record corresponding to the multi-cloud account asset schedule activation and event-driven management record table 36 to provide users with time stamps Check the latest asset information.

It should be noted that "1" and "n" on the connection lines between the blocks in Figure 3 represent "one" and "many" respectively. For example, the user multi-cloud account data table 35 and the public cloud platform type data table 34 are many pairs. There is a one-to-one relationship, and the public cloud platform type data table 34 and the public cloud asset query strategy data table 32 are a one-to-many relationship, and so on. In one embodiment, the service or resource identification code data table 37 of the asset query result and the multi-cloud account asset schedule activation and event-driven management record table 36 have a many-to-many relationship. The multi-cloud account asset schedule activation and event The driver management record table 36 has a many-to-one relationship with the user multi-cloud account data table 35. The public cloud platform type data table 34 has a one-to-many relationship with the public cloud region list data table 31. The public cloud platform type The data table 34 has a one-to-many relationship with the public cloud service or resource type data table 33 .

Please refer to Figure 4, which schematically illustrates a flow chart of an embodiment of the asset and configuration management system and method for multiple public clouds in this case. The process 400 shown in Figure 4 may include steps S401 to S416.

In the asset query stage, the asset query request may be initiated by the work schedule or driven by the update event. That is, the work schedule and event management unit 12 may generate an asset query request initiated by the work schedule, as shown in step S401; Alternatively, the external public cloud event collection unit 11 may receive the update event, as shown in step S402, and then trigger the work scheduling and event management unit 12 to generate an asset query request driven by the update event, as shown in step S403. Thereafter, multi-cloud asset management core unit 13 at least The cloud asset management database 15 obtains the user's public cloud account and determines the asset query strategy, as shown in steps S404 and S405. If the determined asset query strategy is a Config-type asset, the Config asset management unit 141 is assigned to be responsible for subsequent asset query, as shown in step S406, and the remaining ResourceGroup&Tag asset management unit 142, SDK query asset management unit 143, and Resource Graph asset management unit 144 The operation process of the Config asset management unit 141 is the same, so the Config asset management unit 141 is used as an example for illustration. The Config asset management unit 141 calls the external public cloud interface unit 18 to obtain the query results required by the Config asset external interface and transmit them back to the multi-cloud asset management core unit 13, as shown in steps S407, S408 and S409. The multi-cloud asset management core unit 13 summarizes the asset results and stores them in the multi-cloud asset management database 15, as shown in step S410. Next, the multi-cloud asset management core unit 13 provides the asset information of the user's public cloud account compiled in the multi-cloud asset management database 15 to the user terminal device 10, as shown in steps S411 and S412.

In the configuration query stage, the user terminal device 10 can issue a configuration query request to further obtain specified services or resources based on the asset information, in which services or resources are collectively referred to as assets, as shown in step S413. The multi-cloud configuration management core unit 16 is responsible for receiving the configuration query request, and then calling the external public cloud interface unit 18 to obtain the configuration query result, processing the result, and returning the configuration information of the specified service or resource to the user terminal device. 10, as shown in steps S414, S415 and S416.

Please refer to Figure 5, which schematically illustrates the process of scheduled startup in the embodiment of the asset and configuration management system and method for multiple public clouds in this case. The process 500 shown in FIG. 5 may include steps S501 to S523. This flow chart illustrates the scheduled query process for user A to obtain X asset information of the public cloud authorized account he owns.

In step S501, the work schedule and event management unit 12 starts asset query with a schedule frequency of every plurality of hours (eg, 4 hours).

In steps S502 and 503, after receiving the asset query request, the multi-cloud asset management core unit 13 obtains the public cloud account X of the target query of the user terminal device 10A, and obtains the asset query policy according to the public cloud characteristics of the public account, such as Config type, There are four types: ResourceGroup&Tag type, SDK type and ResourceGraph type.

In steps S504, S505, S506 and S507, the multi-cloud asset management core unit 13 assigns the Config asset management unit 141 to query, and then obtains the Config asset information through the external public cloud interface unit 18.

In steps S508, S509, S510 and S511, the multi-cloud asset management core unit 13 assigns the ResourceGroup&Tag asset management unit 142 to query, and then obtains the ResourceGroup&Tag type asset information through the external public cloud interface unit 18.

In steps S512 and S513, the multi-cloud asset management core unit 13 assigns the SDK query asset management unit 143 to perform query, and the SDK query can directly obtain SDK-type asset information.

In steps S514, S515, S516 and S517, the multi-cloud asset management core unit 13 assigns the Resource Graph asset management unit 144 to query, and then obtains the Resource Graph type asset information through the external public cloud interface unit 11418.

In steps S518 and S519, the multi-cloud asset management core unit 13 aggregates the above four types of asset information and stores the aggregated asset information in the multi-cloud asset management database 15.

In steps S520, S521, S522 and S523, the user terminal device 10A can retrieve the asset information of the public cloud account X.

Please refer to Figure 6, which schematically illustrates the event-driven process in the embodiment of the asset and configuration management system and method for multiple public clouds in this case. The process 600 shown in Figure 6 may include the steps S601~S612, this flow chart describes the event-driven query process for user B to obtain the asset information of the public cloud authorized account Y that he owns.

In step S601, the external public cloud event collection unit 11 receives resource change events of activity records (eg, Azure Activity logs) of user B's account Y on the public cloud (eg, Azure).

In step S602, the external public cloud event collection unit 11 triggers the multi-cloud asset management core unit 13.

In step S603, the multi-cloud asset management core unit 13 determines that the asset query strategy is Resource Graph type according to the event.

In step S604, the multi-cloud asset management core unit 13 assigns the Resource Graph asset management unit 144 to query the Account Y asset information of the Resource Graph type.

In steps S605, S606, and S607, the Resource Graph asset management unit 144 calls the external public cloud interface required by the Resource Graph type asset through the external public cloud interface unit 18 to obtain the Resource Graph type asset result.

In step S608, the multi-cloud asset management core unit 13 obtains the existing asset information of account Y from the multi-cloud asset management database 15, and updates it to the multi-cloud asset management database 15 based on the asset result in the previous step.

In steps S609, S610, S611 and S622, the user terminal device 10B can retrieve the asset information of the public cloud account Y.

Please refer to Figure 7, which schematically illustrates the configuration query process in the embodiment of the asset and configuration management system and method for multiple public clouds in this case. The process 700 shown in Figure 7 may include the steps S701~S711, this flow chart describes the query process for user C to obtain specified resource or service configuration information.

In steps S701, S702, S703 and S704, the user terminal device 10C queries the multi-cloud asset management database 14 through the multi-cloud asset management core unit 13 to obtain asset information of a specific resource or service type.

In step S705, the user terminal device 10C uses the asset information to confirm the identification code I belonging to the designated resource or service for which the configuration information is to be obtained.

In step S706, the user terminal device 10C queries the configuration information according to the resource or service specified by the identification code I, and performs the query through the multi-cloud configuration management core unit 16.

In step S707, the multi-cloud configuration management core unit 16 calls the configuration query interface required by the external public cloud interface unit 18.

In step S708, the external public cloud interface unit 18 transmits the batch retrieved data to the configuration big data processing unit 17.

In step S709, the configuration big data processing unit 17 combines the returned data into complete configuration information batch by batch.

In steps S710 and S711, the configuration query result of the specified resource or service identification code I is returned to the user terminal device 10C, that is, the configuration information.

In one embodiment, for detailed information about a certain service or resource, data on the public cloud, such as a virtual machine, is called an instance on AWS. Each instance has its own identification code and is exclusively configured with its own corresponding configuration information. , including the configuration information of the virtual machine's region, network subnet segment, external network interface and IP, computing specifications, storage device specifications, security setting information, source image file and current running status and other comprehensive information.

To sum up, the asset and configuration management system, asset and configuration management methods and computer program products for multiple public clouds disclosed in this case are within the scope of multi-cloud asset and configuration management services, providing users with multi-cloud The asset information query function first obtains multiple different accounts on the public cloud that the user has authorized. The accounts are not limited to accounts, subscriptions, projects, etc. After obtaining the different accounts on the public cloud that the user has authorized, the multi-cloud asset management service can The system will have sufficient permissions to query the user's service or resource information in the public cloud account, and then conduct query and statistics on the number of services or resources in different regions according to the plurality of public cloud accounts to which the user belongs, so as to provide the user with the ability to query the plurality of public cloud accounts to which the user belongs. Accumulated information of different regions and various services or resources of public cloud accounts to provide multi-cloud asset information query function. When querying assets, select the most suitable asset query strategy based on the characteristics of the public cloud. The asset query strategies include: Config asset query strategy, ResourceGroup&Tag asset query strategy, SDK asset query strategy and ResourceGraph asset query strategy, which are respectively entrusted to the Config asset management unit. , ResourceGroup&Tag asset management unit, SDK asset management unit and ResourceGraph asset management unit individually execute public cloud user service or resource quantity query tasks, integrate and collect statistics on individual query results, and store records to support multiple public cloud asset query functions. .

In addition, in order to ensure that the multi-cloud asset query results are the latest information, the work schedule and event management unit are updated in two modes: scheduled polling and event-driven. One mode will be selected based on the most suitable mode of the asset query strategy. If In the scheduled polling mode, the work schedule and event management unit actively triggers the asset query results to be updated periodically in a scheduled manner. If the asset query strategy supports the event-driven update mode, it is passively received by the external event collection center unit. The transmitted asset update event drives the multi-cloud asset management core unit to update the asset query results. The updated query results will be summarized and counted before being stored and recorded to provide the latest multi-cloud asset management query function. Therefore, the multi-cloud asset management database records and provides the settings and asset query results required for accessing multi-cloud assets and configuration management. The multi-cloud asset management database stores and manages user authorized public cloud accounts, public cloud asset query policies, public cloud region lists, public cloud service or resource type lists, and service or resource identification codes of asset query results, and associates them. To provide multi-cloud asset management subsystem and configuration management subsystem call query.

Furthermore, the asset and configuration management system, asset and configuration management method and computer program product for multiple public clouds disclosed in this case also provide users with multi-cloud configuration information query functions. Users can query through the above assets As a result, a specific group of services or resources can be further specified for configuration information query based on the service or resource type. The multi-cloud configuration management subsystem will perform real-time configuration information query tasks. If the query result contains a large amount of configuration information, In order to effectively provide real-time query, the big data processing unit will be used to convert the configuration into a big data stream, which will be divided into smaller streaming units before being combined back to the complete data, and then consolidated into an effective configuration. information to provide real-time multi-cloud configuration management query capabilities.

100:Asset and configuration management system

1: Multi-cloud asset management subsystem

2: Multi-cloud configuration management subsystem

11: External public cloud event collection unit

12: Work scheduling and event management unit

13: Multi-cloud asset management core unit

14: Asset query strategy unit

15:Multi-cloud asset management database

16: Multi-cloud configuration management core unit

17:Configuring big data processing unit

18:External public cloud interface unit

Claims (9)

An asset and configuration management system for multiple public clouds, including: a multi-cloud asset management database; a multi-cloud asset management core unit used to obtain the user's public cloud account and asset query strategy according to an asset query request; The asset query strategy unit performs asset query on the public cloud based on the public cloud account and the asset query strategy obtained by the multi-cloud asset management core unit, and transmits the queried asset query results to the multi-cloud asset management core unit. The asset information is collected and stored in the multi-cloud asset management database. The asset query strategy unit includes: a configuration file (Config) asset management unit, which is used to call the external public cloud interface corresponding to the configuration file asset to query. Profile asset information; Resource Group & Tag asset management unit, which is used to call the external public cloud interface corresponding to the resource group and tag assets to query resource group and tag asset information ; a software development kit (SDK) asset management unit, which is used to query SDK-type asset information in the public cloud; and a resource graph (Resource Graph) asset management unit, which is used to call the corresponding resource graph product The external public cloud interface is used to query resource map-type asset information; and the multi-cloud configuration management core unit responds to a configuration query request for a given asset in the asset information, and performs a configuration query on the public cloud according to the configuration query request. Perform configuration query to compile the configuration query results into configuration information and return the configuration information. The asset and configuration management system as described in request item 1 further includes: an external public cloud event receiving unit for receiving update events; and The work schedule and event management unit generates the asset query request initiated by the work schedule and the asset query request driven by the update event, wherein the multi-cloud asset management core unit generates the asset query request initiated by the work schedule. The asset query request is to obtain the public cloud account and the asset query policy from the multi-cloud asset management database, or the multi-cloud asset management core unit obtains the asset query request from the update event based on the asset query request driven by the update event. The public cloud account and the asset query strategy are obtained from the activity records of The asset management subsystem is based on clustered container technology and is part of the electronic device. The asset and configuration management system as described in claim 1 further includes: an external public cloud interface unit for interfacing with multiple public clouds; and a configuration big data processing unit, in which the multi-cloud configuration management core unit uses When the configuration query results queried by the external public cloud interface unit in the public cloud are batches, the configuration big data processing unit combines the configuration query results of the batches into complete configuration information, wherein the multi-cloud The configuration management core unit and the configuration big data processing unit constitute a multi-cloud configuration management subsystem, and the multi-cloud configuration management subsystem is part of the electronic device using clustered container technology. The asset and configuration management system as described in request item 1, wherein the multi-cloud asset management database stores a public cloud region list data table, a public cloud asset query strategy data table, a public cloud service or resource type data table, a public cloud Platform type data table, user multi-cloud account data table, multi-cloud account asset schedule activation and event-driven management record table, and/or service or resource identification code data table of asset query results, and among them, the service or resource identification code data table of the asset query results The resource identification code data table has a many-to-many relationship with the multi-cloud account asset schedule activation and event-driven management record table. The multi-cloud account asset schedule activation The event-driven management record table has a many-to-one relationship with the user multi-cloud account data table, the user multi-cloud account data table has a many-to-one relationship with the public cloud platform type data table, and the public cloud platform type data The table has a one-to-many relationship with the public cloud asset query strategy data table. The public cloud platform type data table has a one-to-many relationship with the public cloud region list data table. The public cloud platform type data table has a one-to-many relationship with the public cloud region list data table. The service or resource type data table has a one-to-many relationship. An asset and configuration management method for multiple public clouds, which includes: obtaining the user's public cloud account and asset query strategy based on an asset query request; and obtaining the user's public cloud account and asset query strategy on the public cloud based on the public cloud account and the asset query strategy. Perform asset query, wherein the step of performing asset query on the public cloud based on the public cloud account and the asset query strategy includes: when the asset query strategy includes a configuration file (Config) asset query strategy, call the profile asset The corresponding external public cloud interface is used to query profile asset information; when the asset query strategy includes the resource group and tag (Resource Group & Tag) asset query strategy, call the external server corresponding to the resource group and tag assets. A public cloud interface to query resource group and tag asset information; when the asset query strategy includes a software development kit (SDK) asset query strategy, query SDK asset information in the public cloud; and in the When the asset query strategy includes a resource graph (Resource Graph) asset query strategy, the external public cloud interface corresponding to the resource graph product is called to query the resource graph asset information; the queried asset query results are compiled into asset information and stored In a multi-cloud asset management repository; In response to a configuration query request for a given asset in the asset information, perform a configuration query on the public cloud according to the configuration query request; and compile the queried configuration query results into configuration information to return Pass the configuration information for the given asset. The asset and configuration management method as described in claim 5, wherein the step of obtaining the user's public cloud account and asset query strategy according to an asset query request includes: when the asset query request is processed by a work schedule When activated, obtain the public cloud account and the asset query strategy from the multi-cloud asset management database according to the asset query request initiated by the work schedule; and when the asset query request is driven by an update event , according to the asset query request driven by the update event, obtain the public cloud account and the asset query policy from the activity record of the update event. The asset and configuration management method as described in request item 5, wherein the step of compiling the queried configuration query results into configuration information to return the configuration information of the given asset includes: When the configuration query result is a batch, the configuration query results of the batch are combined into complete configuration information and then returned. The asset and configuration management method as described in claim 5, wherein the multi-cloud asset management database stores a public cloud region list data table, a public cloud asset query strategy data table, a public cloud service or resource type data table, a public cloud Platform type data table, user multi-cloud account data table, multi-cloud account asset schedule activation and event-driven management record table, and/or asset query result service or resource identification code data table, and among them, the service or resource identification code data table of the asset query result The resource identification code data table has a many-to-many relationship with the multi-cloud account asset schedule activation and event-driven management record table. The multi-cloud account asset schedule activation The event-driven management record table has a many-to-one relationship with the user multi-cloud account data table, the user multi-cloud account data table has a many-to-one relationship with the public cloud platform type data table, and the public cloud platform type data The table has a one-to-many relationship with the public cloud asset query strategy data table. The public cloud platform type data table has a one-to-many relationship with the public cloud region list data table. The public cloud platform type data table has a one-to-many relationship with the public cloud region list data table. The service or resource type data table has a one-to-many relationship. A computer program product that is loaded into a computer to execute the asset and configuration management method for multiple public clouds as described in any one of claims 5-8.

Images