Service-level authorization policy management

A computer-implemented method implemented by an authorization service configured to utilize access policies to control authorization to a network-accessible service, the computer-implemented method comprising:

• receiving a set of access policy guidelines for access policies of a network-accessible service, wherein the network-accessible service provides a plurality of instances of the network-accessible service, individual instances of the plurality of instances associated with individual service users of a plurality of service users, wherein the set of access policy guidelines define guidelines for determining compliance or non-compliance of access policies;
• receiving a plurality of access policies complying with the set of access policy guidelines, individual access policies of the plurality of access polices corresponding to individual instances of the network-accessible service and designating authorization results for requests to access the individual instances that fall within criteria of the individual access policies;
• receiving an updated set of access policy guidelines for the network-accessible service, the updated set of access policy guidelines representing a modification to the guidelines for determining compliance or non-compliance of access policies;
• identifying an access policy of the plurality of access policies that does not comply with the updated set of access policy guidelines;
• identifying an instance, from the plurality of instances, corresponding to the access policy;
• and
• transmitting a notification to a service user associated with the instance that the access policy is non-compliant with the updated set of access policy guidelines.

Non-transitory computer-readable media comprising instructions that, when executed by an authorization computing system, cause the authorization computing system to:

• receive a set of access policy guidelines for access policies of a network-accessible service, wherein the network-accessible service provides a plurality of instances of the network-accessible service, individual instances of the plurality of instances associated with individual service users of a plurality of service users, wherein the set of access policy guidelines define guidelines for determining compliance or non-compliance of access policies;
• receive a plurality of access policies complying with the set of access policy guidelines, individual access policies of the plurality of access polices corresponding to individual instances of the network-accessible service and designating authorization results for requests to access the individual instances that fall within criteria of the individual access policies;
• receive an updated set of access policy guidelines for the network-accessible service, the updated set of access policy guidelines representing a modification to the guidelines for determining compliance or non-compliance of access policies;
• identify an access policy of the plurality of access policies that does not comply with the updated set of access policy guidelines;
• identify an instance, from the plurality of instances, corresponding to the access policy;
• and
• transmit a notification to a service user associated with the instance that the access policy is non-compliant with the updated set of access policy guidelines.