Techniques for automatically configuring minimal cloud service access rights for container applications

A non-transitory computer-readable medium storing a set of instructions, the set of instructions comprising:

• one or more instructions that, when executed by one or more processors of a computer system, cause the computer system to:
• receive one or more requests for access to one or more cloud services;
• store the one or more requests in a request log;
• receive one or more access rules applicable to cloud service access rights for the one or more cloud services;
• aggregate the one or more requests of the request log to determine access requirements for a container, the container being configured to store one or more applications;
• generate container access policies that define access rights for containers to the one or more cloud services, the container access policies generated based at least in part on the aggregated one or more requests and the one or more access rules;
• generate node access policies, the node access policies defining a combined access right for one or more containers on a node comprising a group of compute instances;
• and
• store the node access policies in a memory;
• store the container access policies in the memory;
• and
• send the container access policies to a request forwarder of a compute instance in a production environment, the request forwarder accessing the container access policies to grant the access rights for the one or more containers to the one or more cloud services.

A computer system, comprising:

• one or more memories;
• and
• one or more processors, communicatively coupled to the one or more memories, configured to perform operations comprising:
• receiving one or more requests for access to one or more cloud services;
• storing the one or more requests in a request log;
• receiving one or more access rules applicable to cloud service access rights for the one or more cloud services;
• aggregating the one or more requests of the request log to determine access requirements for a container, the container being configured to store one or more applications;
• generating container access policies that define access rights for containers and to the one or more cloud services, the container access policies generated based at least in part on the aggregated one or more requests and the one or more access rules;
• generating node access policies, the node access policies defining a combined access right for one or more containers on a node comprising a group of compute instances;
• and
• storing the node access policies in a memory;
• storing the container access policies in the memory;
• and
• sending the container access policies to a request forwarder of a compute instance in a production environment, the request forwarder accessing the container access policies to grant the access rights for the containers to the one or more cloud services.