Abstract: A computing system comprises, in one example, a service deployment system configured to deploy one or more service instances into a service instance pool, wherein each service instance comprises a computing resource configured in accordance with a service topology and allocable in response to a service request, and a pool management system configured to monitor consumption information related to consumption of the service instance pool and to determine whether to deploy one or more additional service instances to the service instance pool based on the consumption information relative to a threshold metric, wherein the pool management system comprises a deployment controller configured to control the service deployment system to deploy the one or more additional service instances to the service instance pool.

Abstract: A computing system comprises, in one example, a service deployment system configured to deploy one or more service instances into a service instance pool, wherein each service instance comprises a computing resource configured in accordance with a service topology and allocable in response to a service request, and a pool management system configured to monitor consumption information related to consumption of the service instance pool and to determine whether to deploy one or more additional service instances to the service instance pool based on the consumption information relative to a threshold metric, wherein the pool management system comprises a deployment controller configured to control the service deployment system to deploy the one or more additional service instances to the service instance pool.

Abstract: A computing system comprises, in one example, a service deployment system configured to deploy one or more service instances into a service instance pool, wherein each service instance comprises a computing resource configured in accordance with a service topology and allocable in response to a service request, and a pool management system configured to monitor consumption information related to consumption of the service instance pool and to determine whether to deploy one or more additional service instances to the service instance pool based on the consumption information relative to a threshold metric, wherein the pool management system comprises a deployment controller configured to control the service deployment system to deploy the one or more additional service instances to the service instance pool.

Abstract: A computing system for managing storage relative to a storage subsystem is provided. The computing system includes a processor and a first interface configured to interact with a deployed software system using a representational state transfer communication technique. A second interface is configured to interact with the storage subsystem in accordance with the representational state transfer technique. The computing system is configured to interact with the storage subsystem via the second interface in response to a request from the deployed software system via the first interface and to provide an output to the deployed software system through the first interface based on the interaction with the storage subsystem.

Abstract: A computing system comprises, in one example, a service deployment system configured to deploy one or more service instances into a service instance pool, wherein each service instance comprises a computing resource configured in accordance with a service topology and allocable in response to a service request, and a pool management system configured to monitor consumption information related to consumption of the service instance pool and to determine whether to deploy one or more additional service instances to the service instance pool based on the consumption information relative to a threshold metric, wherein the pool management system comprises a deployment controller configured to control the service deployment system to deploy the one or more additional service instances to the service instance pool.

Abstract: A computing system comprises, in one example, a service deployment system configured to generate a service instance pool comprising a plurality of service instances, each service instance being generated from a computing resource in accordance with a pre-defined service topology and being allocable in response to a service request, and a service controller system configured to receive a service request and to allocate one or more of the service instances in the service instance pool to an end user.

Abstract: A computing system for managing storage relative to a storage subsystem is provided. The computing system includes a processor and a first interface configured to interact with a deployed software system using a representational state transfer communication technique. A second interface is configured to interact with the storage subsystem in accordance with the representational state transfer technique. The computing system is configured to interact with the storage subsystem via the second interface in response to a request from the deployed software system via the first interface and to provide an output to the deployed software system through the first interface based on the interaction with the storage subsystem.

Abstract: A secure storage system secures information of a client by first encrypting the information with a first key to generate first-key encrypted data. The secure storage system then encrypts with a second key the first-key encrypted data and the first key to generate second-key encrypted data. The system provides the client with a first portion of the second-key encrypted data. The system stores a second portion of the second-key encrypted data and the second key. When the confidential information is needed, the client provides the first portion. The system retrieves the second portion. The system then decrypts with the second key the first portion and the second portion to generate the first-key encrypted data and the first key. The system then decrypts with the first key the first-key encrypted data to generate the unsecure confidential information.

Abstract: A secure storage system secures information of a client by first encrypting the information with a first key to generate first-key encrypted data. The secure storage system then encrypts with a second key the first-key encrypted data and the first key to generate second-key encrypted data. The system provides the client with a first portion of the second-key encrypted data. The system stores a second portion of the second-key encrypted data and the second key. When the confidential information is needed, the client provides the first portion. The system retrieves the second portion. The system then decrypts with the second key the first portion and the second portion to generate the first-key encrypted data and the first key. The system then decrypts with the first key the first-key encrypted data to generate the unsecure confidential information.

Abstract: Providing access to a resource via authorization data that conditionally defines the access by an expression that identifies the resource by name and by at least one property of the resource. An authorization service issues the authorization data (e.g., as a token) and evaluating authorization data received from a client. The authorization service evaluates the expression in the authorization data to identify the resource and determine the rights associated with the user for the resource. The authorization service implements role-based access control to control access to resources in a distributed, multi-site network.

Abstract: A method, system, and computer-readable medium are provided for enforcing online identities consent policies. The consent policy is enforced by creating and approving corresponding associations between an online identity manager and a managed online identity. The online identity manager has authority to consent to a task requested on behalf of the managed online identity. An application module implements a consent policy. A consent policy engine evaluates a consent policy to determine if the consent policy applies to user profile information for an online identity. An association service creates and approves an association between a manager online identity and a managed online identity based on the consent policy. The association service creates and approves an association by proposing an association, obtaining validation data for the proposed association, determining if the association validation data meets requirements of the consent policy and, if so, approving the proposed association.