Approaches for deployment approval

摘要

A deployment approval system receives, from a deployment tool, a deployment request for performing a deployment to a particular resource. The deployment approval system can identify at least one rule for approving or rejecting the deployment request based on one or more criteria. The deployment approval system can determine whether the deployment request satisfies the one or more criteria in the at least one rule to approve or reject the request. If the deployment request is approved, the deployment approval system sends an approval to the deployment tool to perform the deployment. The deployment tool can then perform the deployment and, once the deployment is complete, the deployment approval system can receive a confirmation of the deployment. The deployment approval system can then store data describing the deployment in an audit repository.

主权项

1. A system, comprising:
at least one processor; and memory including instructions that, when executed by the at least one processor, cause the system to:
receive, through an application programming interface (API) and from a deployment tool, a first request for performing a first deployment to a particular resource and a second request for performing a second deployment to the particular resource, wherein each deployment includes a payload that is configured to mutate an aspect of the particular resource;determine, based on the request, that both the first deployment request and the second deployment request are attempting to perform respective deployments on the particular resource;identify at least one rule for approving or rejecting deployments that are directed to the particular resource, the at least one rule based at least in part upon a geographic region of the particular resource;determine that the first deployment request satisfies the at least one rule based at least in part upon the geographic region of the particular resource;send, to the deployment tool, an approval for performing the first deployment, the approval including a token usable to access the particular resource to perform the deployment, wherein access rights of the token are based on an entity associated with the deployment;determine that the second deployment request does not satisfy the at least one rule; andsend, to the deployment tool, a denial for performing the second deployment, wherein, in response to the denial, the deployment tool is prevented from being able to perform the second deployment to the particular resource.