METHOD FOR DEFINING NETWORK APPLICATION SECURITY BASED ON DECLARATIVE PROPERTIES

One or more embodiments provide techniques for processing a request for generating a network diagram for a multi-tier application to be deployed on a cloud computing environment. A deployment director receives a request to deploy the multi-tier application to the cloud computing environment. Deployment director receives an application blueprint of the multi-tier application from an application director. The application blueprint includes logical attributes and logical connections of each component. Deployment director receives an identification of the cloud computing environment. Deployment director generates a network diagram compatible with the cloud computing environment based on at least the application blueprint. The network diagram illustrates physical network structure of the cloud computing environment. Deployment director displays the network diagram.