Cloud Asset Governance Architecture

Let's take a simple look at how the Cloud Asset Governance feature works. This feature helps keep things organized in the cloud.

How It Works:

• Worker Microservice:

  - This is like the main worker. It does the main job of making sure rules are followed.

  - It uses a tool called Cloud Custodian to do different tasks in the cloud.

• Logging and Storage:

  - Logs from doing things like enforcing rules are kept safe in a place called Google Cloud Storage (GCS).

  - Important data that helps us understand what's happening is stored in BigQuery.

• Job Queue:

  - Tasks to do are put in a line to keep things organized.

  - The worker microservice takes tasks from this line and does them.

Other Important Services:

• CCM Manager:

  - Helps organize and manage different parts of the Cloud Asset Governance feature.

• Scheduler Service:

  - Makes sure tasks are done on time according to a schedule. This helps keep things running smoothly.

• MongoDB:

  - Keeps track of important information about rules and what happened when they were enforced.

How It All Works Together:

• Getting Tasks:

  - Tasks related to following rules are put in the line to be done.

• Doing Tasks:

  - The worker microservice, with the help of Cloud Custodian, does tasks from the line.

• Following Rules:

  - Cloud Custodian makes sure rules are followed in the cloud.

• Keeping Track:

  - Logs from doing tasks are kept safe in GCS.

  - Important data about what happened is stored in BigQuery for later checking.

• Managing Information:

  - MongoDB keeps track of important information about rules and what happened when they were enforced.

• Watching Everything:

  - The CCM Manager makes sure everything works well together.