Enforcing access to endpoint resources

A system to control access to resources, comprising:

• a hosted distributed intelligence (DI) application;
• and
• a network communications device, comprising:
• one or more resources;
• an agent container;
• and
• an agent operating within the agent container, wherein the agent is configured to include a certificate securely associating an access policy file with the agent, and wherein the agent is configured to perform acts comprising:
• communicating with the hosted DI application;
• receiving, based at least in part on permissions of the access policy file, resources from the network communications device;
• and
• providing access to the resources to the hosted DI application.

One or more non-transitory computer-readable media storing computer-executable instructions that, when executed by one or more processors, configure a system to control access to resources and perform acts comprising:

• by a hosted distributed intelligence (DI) application, communicating with an agent operating on a network communications device;
• by the agent on the network communications device, communicating with the hosted DI application, wherein an access policy file corresponding to the agent includes a certificate securely associating the access policy file with the agent;
• and
• by the network communications device, based at least in part on the access policy file, exposing one or more resources of the network communications device to the agent to provide the agent with access to the one or more resources indicated by the access policy file, wherein the hosted DI application is able to access the one or more resources through operation of the agent.