Platform Architecture
This guide provides a platform-level view of Cloudaware architecture: the CMDB backbone, data ingestion pipelines, core services that operate on unified data, and common integrations.
CMDB Backbone
- Relationship-aware data model: assets, configurations, and dependencies across clouds and on‑prem mapped into a unified CMDB.
- Normalization and identity: provider-specific fields and IDs harmonized to consistent schemas with stable identifiers.
- Versioning and change history: configuration deltas recorded to enable audit, troubleshooting, and roll-up reporting.
- Access controls: role-based access (RBAC) and object-scoped permissions for least-privilege operations.
- Extensibility: custom objects/attributes, enrichment rules, and calculated fields.
Data Ingestion Pipelines
- Sources: cloud provider inventory/config APIs, VMware vCenter, billing exports, Breeze Agent telemetry, and security/log streams.
- Modes: scheduled polling combined with event-driven updates where supported; throttling and retry for rate limits.
- Processing: deduplication, mapping, normalization, relationship inference, and quality checks.
- Health & freshness: freshness SLOs, ingestion diagnostics, and backfill controls.
See also:
Core Services (Built on CMDB)
- Cost Management: normalize billing datasets, allocate costs, forecast, detect anomalies, and drive optimization.
- Compliance Engine: evaluate policies (e.g., CIS benchmarks) and produce findings with remediation context.
- Vulnerability Management and Patch Management: prioritize exposure and orchestrate patching workflows for Windows/Linux fleets.
- Log Management (Conflux) and Intrusion Detection (Wazuh): centralize logs and host-based IDS events for detection and investigation.
- Unified Monitoring: collect key metrics/events and route alerts enriched with CMDB context.
- Backup & Replication: track coverage, objectives, and recovery validation.
Integrations & Extensibility
- Cloud connectors: AWS, Azure, Google, Oracle, Alibaba Cloud; VMware vCenter for virtualization estates.
- Agents & telemetry: Breeze Agent for OS-level visibility on Windows/Linux/macOS.
- APIs and webhooks: automate workflows, export data, and integrate with internal tools.
- ITSM & collaboration: integrate with systems like ServiceNow and route notifications to Slack Notification.
- Advanced dashboards: built on Salesforce CRM Analytics and available for sharing/exporting.
- BI/Finance: exports/APIs for data warehouses, BI tools, and ITFM/ERP systems.
See also:
End-to-End Flow
- Ingestion: connectors collect inventory, configuration, telemetry, and billing data from clouds, on‑prem, and agents.
- Normalization: provider-specific fields are harmonized into Cloudaware’s CMDB schema with relationship mapping.
- Analysis: policy evaluation, anomaly detection, cost allocation/forecasting, and posture scoring.
- Action: alerts, tickets, workflows, and APIs to remediate and automate.
- Reporting: dashboards, KPIs, and exports for stakeholders across security, engineering, and finance.
Operations & Non-Functionals
- Scalability & performance: schedule design, rate management, and data partitioning for large estates.
- Resilience: fault-tolerant ingestion and service components; backup and recovery validation.
- Security & governance: RBAC, least privilege, data retention, and audit logging.
- Observability: platform health dashboards and diagnostics for ingestion and evaluation services.