Method for sensitive infrastructure protection

A system for managing access to computing environments, the system comprising:

• a storage device that stores program instructions;
• one or more processors operably connected to the storage device and configured to execute the program instructions to cause the system to:
• configure a number of infrastructure as code (IAC) configurations, wherein the IAC configurations are related to a same project;
• group the IAC configurations into a number of environments, wherein the environments represent project stages or deployment situations, and wherein the environments have respective access privileges and allowed modifications for the respective IAC configurations within each environment, and wherein the IAC configuration has no prerequisite environment, or the IAC configuration has been successfully deployed in a prerequisite environment;
• and
• automatically create a number of user trusted profiles that are linked to the access privileges and allowed modifications for the environments, wherein each trusted profile is specific to one of the environments.

A computer program product for managing access to computing environments, the computer program product comprising:

• a computer readable storage medium having program instructions configured to cause one or more processors to:
• configure a number of infrastructure as code (IAC) configurations, wherein the IAC configurations are related to a same project;
• group the IAC configurations into a number of environments, wherein the environments represent project stages or deployment situations, and wherein the environments have respective access privileges and allowed modifications for the respective IAC configurations within each environment, and wherein the IAC configuration has no prerequisite environment, or the IAC configuration has been successfully deployed in a prerequisite environment;
• and
• automatically create a number of user trusted profiles that are linked to the access privileges and allowed modifications for the environments, wherein each trusted profile is specific to one of the environments.