Functional discovery and mapping of serverless resources

• US 10,425,292 B1
• Filed: 03/27/2019
• Issued: 09/24/2019
• Est. Priority Date: 10/17/2018
• Status: Active Grant

• Current Assignee: ServiceNow Incorporated
• Original Assignee: ServiceNow Incorporated
• Inventors: Biran, Noam, Tal, Hail, Bitterfeld, Robert, Garty, Asaf, Solomon, Bary
• Primary Examiner(s): Schwartz, Darren B
• Application Number:
  US16/366,988
• Time in Patent Office: 181 Days
• CPC Class Codes: G06F 16/22 Indexing; Data structures therefor; Storage structures
• CPC Class Codes: G06F 9/547 Remote procedure calls [RPC]; Web services
• CPC Class Codes: H04L 41/28 Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

A computing system may include a database disposed within a remote network management platform that manages a managed network, and a software application associated with the platform and configured to: obtain, from an external computing system, information about a function-application arranged to execute source code segment(s) on demand; determine that the obtained information relates to (i) a plurality of authorization-keys each respectively arranged to authorize on-demand execution of one of the source code segments, (ii) a first key-value string pair that enables establishment of connectivity to a service of the external computing system or of another computing system, and/or (iii) a second key-value string pair that enables establishment of connectivity to a data source of the external computing system or of another computing system, and responsively determine association(s) between the source code segment(s), the function-application, the service, and/or the data source; and store the association(s) in the database.

Claims

1. A computing system comprising:

persistent hardware storage; and

a software application configured to carry out operations including;

transmitting, to an external computing system, a request for information about a function-application configured to execute a plurality of source code segments, wherein the software application has access to an application programming interface (API) associated with the external computing system, and wherein transmitting the request comprises using the API to trigger a single representational state transfer (REST) call requesting the information about the function-application;

receiving, from the external computing system, the information about the function-application, wherein the information comprises;

a first authorization-key indicating that the function-application is authorized to execute a first source code segment of the plurality of source code segments using computing resources that are assigned on-demand, and

a first key-value string pair configured to enable establishment of connectivity to a resource of the external computing system or of another computing system during execution of the first source code segment by the function-application,

wherein the external computing system is physically separated from the computing system by one or more networks; and

based on the obtained information, storing, in the persistent storage, an association between the function-application, the first source code, and the resource, wherein the association comprises an indication that the function-application is authorized to execute the first source code segment and connect to the resource during execution of the first source code segment.

2. The computing system of claim 1, wherein the software application is configured to execute on one or more of:

(i) a first server device disposed within a remote network management platform that manages a managed network, or (ii) a second server device disposed within the managed network.

3. The computing system of claim 1, wherein the function-application is arranged to execute one or more of the plurality of source code segments in response to a trigger event, and wherein the trigger event is initiated by a different software application that is:

(i) associated with a remote network management platform that manages a managed network, (ii) associated with the external computing system, or (iii) operating on a client device remotely accessing the external computing system.

4. The computing system of claim 1, wherein the resource comprises a service, wherein the first key-value string pair comprises a mapping between:

(i) a dynamically-named variable indicative of the service, and (ii) a value that identifies the service in a format that enables establishment of connectivity to the service.

5. The computing system of claim 4, wherein the service comprises one or more of:

(i) a different function-application, (ii) a different software application, (iii) one of the plurality of source code segments, or (iv) a different source code segment executable by the different function-application.

6. The computing system of claim 1, wherein the resource comprises a data source, wherein the first key-value string pair comprises a mapping between:

(i) a dynamically-named variable indicative of the data source, and (ii) a value that identifies the data source in a format that enables establishment of connectivity to the data source.

7. The computing system of claim 6, wherein the data source comprises one or more of:

(i) a data storage device, (ii) a server device, (iii) a spreadsheet application, (iv) a word processing application, (v) a presentation application, or (vi) a text file.

8. The computing system of claim 1, wherein the information comprises a second authorization-key indicating that the function application is authorized to execute a second source code segment of the plurality of source code segments using computing resources that are assigned on-demand, and wherein storing the association based on the obtained information comprises:

identifying the first and second source code segments as both being executable by the function-application.

9. A method comprising:

transmitting, by a software application to an external computing system, a request for information about a function-application configured to execute a plurality of source code segments, wherein the software application has access to an application programming interface (API) associated with the external computing system, and wherein transmitting the request comprises using the API to trigger a single representational state transfer (REST) call requesting the information about the function-application;

receiving, by the software application and from the external computing system, the information about the function-application, wherein the information comprises;

a first authorization-key indicating that the function-application is authorized to execute a first source code segment of the plurality of source code segments using computing resources that are assigned on-demand, and

a first key-value string pair configured to enable establishment of connectivity to a resource of the external computing system or of another computing system during execution of the first source code segment by the function-application; and

based on the obtained information, storing, by the software application and in persistent storage, an association between the function-application, the first source code segment, and the resource, wherein the association comprises an indication that the function-application is authorized to execute the first source code segment and connect to the resource during execution of the first source code segment.

10. The method of claim 9, wherein the information comprises a second authorization-key indicating that the function application is authorized to execute a second source code segment of the plurality of source code segments using computing resources that are assigned on-demand, and wherein storing the association based on the obtained information comprises:

identifying the first and second source code segments as both being executable by the function-application.

11. An article of manufacture including a non-transitory computer-readable medium, having stored thereon program instructions that, upon execution by a software application, cause the software application to perform operations comprising:

transmitting, to an external computing system, a request for information about a function-application configured to execute a plurality of source code segments, wherein the software application has access to an application programming interface (API) associated with the external computing system, and wherein transmitting the request comprises using the API to trigger a single representational state transfer (REST) call requesting the information about the function-application;

receiving, from the external computing system, the information about the function-application, wherein the information comprises;

a first authorization-key indicating that the function-application is authorized to execute a first source code segment of the plurality of source code segments using computing resources that are assigned on-demand, and

a first key-value string pair configured to enable establishment of connectivity to a resource of the external computing system or of another computing system during execution of the first source code segment by the function-application,

wherein the external computing system is physically separated from the computing system by one or more networks; and

based on the obtained information, storing, in the persistent storage, an association between the function-application, the first source code, and the resource, wherein the association comprises an indication that the function-application is authorized to execute the first source code segment and connect to the resource during execution of the first source code segment.