Controlling operator access to customer cloud infrastructure environments

A method comprising:

• receiving, from a customer operator associated with a customer of a cloud service provider (CSP), a command to disable CSP operator access to a first set of resources in a customer cloud environment;
• wherein the CSP operator access to the first set of resources in the customer cloud environment is permitted based on a set of permissions;
• and
• responsive to the command, performing one or more operations that disable the CSP operator access to the first set of resources, comprising one or more of:
• terminating one or more existing sessions that provide the CSP operator access to the first set of resources in the customer cloud environment, wherein the one or more existing sessions were established based at least in part on the set of permissions;
• rejecting one or more new requests for credentials to establish sessions that provide the CSP operator access to the first set of resources in the customer cloud environment, wherein the one or more new requests for credentials are made based at least in part on the set of permissions;
• or
• revoking existing credentials used to establish the one or more existing sessions that provide the CSP operator access to the first set of resources in the customer cloud environment, wherein the existing credentials were granted based at least in part on the set of permissions;
• wherein the command to disable the CSP operator access to the first set of resources in the customer cloud environment is associated with a designated time period;
• and
• responsive to detecting a conclusion of the designated time period, reversing the one or more operations that disable the CSP operator access to the first set of resources;
• wherein the method is performed by at least one device including a hardware processor.

A system comprising:

• at least one device including a hardware processor;
• the system being configured to perform operations comprising:
• receiving, from a customer operator associated with a customer of a cloud service provider (CSP), a command to disable CSP operator access to a first set of resources in a customer cloud environment;
• wherein the CSP operator access to the first set of resources in the customer cloud environment is permitted based on a set of permissions;
• and
• responsive to the command, performing one or more operations that disable the CSP operator access to the first set of resources, comprising one or more of:
• terminating one or more existing sessions that provide the CSP operator access to the first set of resources in the customer cloud environment, wherein the one or more existing sessions were established based at least in part on the set of permissions;
• rejecting one or more new requests for credentials to establish sessions that provide the CSP operator access to the first set of resources in the customer cloud environment, wherein the one or more new requests for credentials are made based at least in part on the set of permissions;
• or
• revoking existing credentials used to establish the one or more existing sessions that provide the CSP operator access to the first set of resources in the customer cloud environment, wherein the existing credentials were granted based at least in part on the set of permissions;
• wherein the command to disable the CSP operator access to the first set of resources in the customer cloud environment is associated with a designated time period;
• and
• responsive to detecting a conclusion of the designated time period, reversing the one or more operations that disable the CSP operator access to the first set of resources.