Abstract: A method or system for dynamic network security control. The system discovers multiple external network addresses (ENAs) associated with multiple services in a trusted public cloud environment (TPCE), and records the discovered ENAs in a first storage. The system also accesses multiple network security policies stored in the TPCE. The system then maps the ENAs to the network security policies based on contextual relationships therebetween, and stores mappings between the ENAs and the network security policies in the TPCE. The system causes a network access control list to be update based in part on the mappings. The network access control list contains rules that specify which entities are granted or denied access to the ENAs associated with the services.

Abstract: A system performs automated network address synchronization in a multi-cloud environment. The system instantiates a trusted public cloud environment (TPCE) based on a specification in a first public cloud environment (PCE). The TPCE offers a set of services. The system discovers a set of external network addresses (ENAs) associated with the set of services, and records the set of ENAs in a storage in the TPCE. The system synchronizes the set of ENAs with another set of ENAs associated with a set of services in another TPCE, causing the services in the two TPCEs to have access to both ENAs associated with services in the two TPCEs.