Systems and methods for optimizing security controls for virtual data centers

摘要

A computer-implemented method for optimizing security controls for virtual data centers may include 1) identifying a security policy that applies to at least one workload configured to store data on a first storage appliance, 2) identifying at least one storage-appliance functionality capable of implementing at least a part of the security policy, 3) identifying a second storage appliance that possesses the storage-appliance functionality, and 4) migrating the data from the first storage appliance to the second storage appliance in response to identifying the security policy and the storage-appliance functionality. Variants include methods, systems, and computer-readable media.

主权项

1. A computer-implemented method for optimizing security controls for virtual data centers, at least a portion of the method being performed by a computing device comprising at least one processor, the method comprising:
identifying a security policy that applies to at least one workload, operating within a virtual data center, that is configured to store data on a first storage appliance and to execute on a host system; determining that the first storage appliance does not natively implement a data security requirement specified by the security policy on data stored on the first storage appliance; identifying a second storage appliance that natively implements the data security requirement specified by the security policy on data stored on the second storage appliance; migrating the data from the first storage appliance to the second storage appliance for access by the workload from the host system in response to determining that the first storage appliance does not natively implement the data security requirement specified by the security policy and further in response to determining that the second storage appliance natively implements the data security requirement specified by the security policy.