Automated evaluation and reporting of microservice regulatory compliance

摘要

Automated evaluation and reporting of microservice regulatory compliance during development and operation are provided. The method includes parsing, by a natural language parser, the set of regulations for which microservice compliance is to be evaluated, and generating an ontology including attributes, rules and policies obtained from parsing the set of regulations. A rules engine is created according to the ontology. The rules engine includes compliance rules, and an application program interface (API) that allows responses to compliance queries derived from one or more of the compliance rules. The rules engine receives responses to the compliance queries, with the microservice being instrumented with a message queue invocation as one or more annotations to facilitate processing the compliance queries. The rules engine generates a regulation-compliance report for the microservice based on the received responses to the compliance queries.