Dynamic updates to cloud access policies

A system comprising:

• a processing system;
• and
• a computer-readable storage medium having encoded thereon computer-readable instructions that when executed by the processing system cause the system to:
• receive a request to connect to a resource, wherein the request identifies an account and includes a connection parameter;
• map the request to a policy associated with the account, wherein the policy defines a policy parameter useable to allow or reject access to the resource;
• identify an anomalous parameter by determining that the connection parameter is anomalous to the policy parameter;
• associate the anomalous parameter with a risk value computed based on a change to a user status profile associated with the account, the change legitimizing a connection to the resource in association with the anomalous parameter;
• determine that the risk value satisfies a risk tolerance threshold value;
• in response to determining that the risk value satisfies the risk tolerance threshold value, update the policy to accommodate the anomalous parameter by adding, to the policy, information associated with the connection parameter that is determined to be anomalous to the policy parameter;
• and
• allow the connection to the resource based on the updating the policy to accommodate the anomalous parameter.

A computer-readable storage medium having encoded thereon computer- readable instructions that when executed by a processing system cause a system to:

• receive a request to connect to a resource, wherein the request identifies an account and includes a connection parameter;
• map the request to a policy associated with the account, wherein the policy defines a policy parameter useable to allow or reject access to the resource;
• identify an anomalous parameter by determining that the connection parameter is anomalous to the policy parameter;
• associate the anomalous parameter with a risk value computed based on a change to a user status profile associated with the account, the change legitimizing a connection to the resource in association with the anomalous parameter;
• determine that the risk value satisfies a risk tolerance threshold value;
• in response to determining that the risk value satisfies the risk tolerance threshold value, update the policy to accommodate the anomalous parameter by adding, to the policy, information associated with the connection parameter that is determined to be anomalous to the policy parameter;
• and
• allow the connection to the resource based on the updating the policy to accommodate the anomalous parameter.