Article in Proceedings INPROC-2022-04

BibliographyFalazi, Ghareeb; Breitenbücher, Uwe; Leymann, Frank; Stötzner, Miles; Ntentos, Evangelos; Zdun, Uwe; Becker, Martin; Heldwein, Elena: On Unifying the Compliance Management of Applications Based on IaC Automation.
In: 2022 IEEE 19th International Conference on Software Architecture Companion (ICSA-C).
University of Stuttgart, Faculty of Computer Science, Electrical Engineering, and Information Technology.
pp. 226-229, english.
IEEE, March 2022.
DOI: 10.1109/ICSA-C54293.2022.00050.
Article in Proceedings (Workshop Paper).
CR-SchemaD.2.2 (Software Engineering Design Tools and Techniques)
D.2.11 (Software Engineering Software Architectures)
KeywordsInfrastructure-as-Code; Compliance; IaC
Abstract

Infrastructure-as-Code (IaC) technologies are used to automate the deployment of cloud applications. They promote the usage of code to define and configure the IT infrastructure of cloud applications allowing them to benefit from conventional software development practices, which facilitates the rapid deployment of new versions of application infrastructures without sacrificing quality or stability. On the other hand, enterprise applications need to conform to compliance regarding external regulations and internal policies. Many of these compliance rules affect the application architecture on which IaC code operates. However, managing the architectural compliance of IaC-based application deployments faces a number of challenges, such as configuration drift and the heterogeneity of IaC technologies. Therefore, in this work, we present a vision on how to uniformly manage the compliance of the infrastructure of applications that utilize heterogeneous IaC technologies for deployment automation. To this end, we introduce an initial design for the IaC-based Architectural Compliance Management Framework and discuss how it addresses the corresponding challenges.

Full text and
other links
FIST 2022
Contactghareeb.falazi@iaas.uni-stuttgart.de
Department(s)University of Stuttgart, Institute of Architecture of Application Systems
Project(s)IAC2
Entry dateJune 10, 2022
   Publ. Institute   Publ. Computer Science