Abstract: A data pipeline architecture provides for efficient and scalable data collection within a 5G wireless network. The data pipeline includes a data collection engine that receives streaming and/or query-based data. The data collection engine collects the data, amalgamates the streaming and the querly-based data into a common format, and provides the amalgamated data for delivery to a data reporting engine. The data reporting engine provides dashboards, reports, alerts or other information about the collected data. The data reporting engine may also interface with a database system for longer-term storage of collected data, report generation and/or the like.

Abstract: IP prefix lists are used as a source for filtering with near real-time updates to prefix lists associated with particular network functions. Network functions are deployed with one or more prefix lists based on communication need, a messaging queue for receiving work to updates for the prefix list, a maintenance worker, and a notification service. When a network function expands or contracts and has a change in IP scope, the listening network functions are alerted. When the event is detected, a message is transmitted by the network function's notification service. Listener queues subscribed to the upstream network function receive the change notification and invoke the maintenance worker to update the prefix list based on the message. The invoked process digests the message and adjusts the prefix list for the listening load balancer accordingly, resulting in adding or removing permitted traffic flow.

Abstract: Systems, methods, and devices for managing permissions generate a first list of excess permissions of a first user account belonging to a group, score a first account drift of the first user account based on the list of excess permissions, and generate a second list of excess permissions associated with a second user account belonging to the group. A second account drift of the second user account is scored based on the second list of excess permissions. A group consistency is scored based on the first account drift and the second account drift. A first new configuration of permissions for the first user account and the second user account is determined to increase the group consistency. Removing a permission from the first user account and the second user account implements the first new configuration. Removing the permission may include removing the first and second user accounts from the group.

Abstract: An automated process for managing groups in a cloud-based environment receives a request to create a permission group. The permission group is built in a directory system, wherein the directory system is nonnative to the cloud-based environment. The permission group from the directory system is synced with an identity management system that is nonnative to the cloud-based environment. The process includes stashing a group creation job to a queue, wherein the group creation job is configured to create the group in the cloud-based environment. The system provisions the permission group in response to consuming the group creation job from the queue.