Separate access control for managing bastions and bastion sessions

A computer-program product comprising one or more non-transitory machine-readable storage media, including stored instructions configured to cause a computing system to perform a set of actions including:

• storing a first set of authorization policies of a first tenancy of a multi-tenant cloud infrastructure, wherein the first set of authorization policies authorizes a first set of one or more users associated with the first tenancy for bastion service creation and authorizes a second set of one or more users associated with a second tenancy for bastion service access, wherein the first set of one or more users comprises a first user from the first tenancy and the second set of one or more users comprises second user from a second tenancy of the multi-tenant cloud infrastructure;
• storing a second set of authorization policies of the second tenancy, wherein the second set of authorization policies authorizes the first set of one or more users to delete a portion of the second tenancy from which bastion sessions may be accessed and authorizes the second set of one or more users for bastion session creation in the second tenancy;
• based on the first set of authorization policies, determining that the first user is authorized for bastion service creation in the first tenancy, and creating a bastion service in response to a request from the first user;
• wherein the bastion service is configured to use a recording destination that is not modifiable by the second user;
• based on the first set of authorization policies and the second set of authorization policies, determining that the second user is authorized for bastion session creation from the bastion service, and using the bastion service to create a bastion session for securely accessing one or more resources of the first tenancy;
• logging bastion session activity for the bastion session to the recording destination that is not modifiable by the second user, wherein the recording destination is accessible to one or more users other than the second user.

A system comprising:

• one or more processors;
• one or more non-transitory computer-readable media storing instructions, which, when executed by the system, cause the system to perform a set of actions including:
• storing a first set of authorization policies of a first tenancy of a multi-tenant cloud infrastructure, wherein the first set of authorization policies authorizes a first set of one or more users associated with the first tenancy for bastion service creation and authorizes a second set of one or more users associated with the second tenancy for bastion service access, wherein the first set of one or more users comprises a first user from the first tenancy and the second set of one or more users comprises a second user from a second tenancy of the multi-tenant cloud infrastructure;
• storing a second set of authorization policies of the second tenancy of the multi- tenant cloud infrastructure, wherein the second set of authorization policies authorizes the first set of one or more users to delete a portion of the second tenancy from which bastion sessions may be accessed and authorizes the second set of one or more users for bastion session creation in the second tenancy;
• based on the first set of authorization policies, determining that the first user is authorized for bastion service creation in the first tenancy, and creating a bastion service in response to a request from the first user;
• wherein the bastion service is configured to use a recording destination that is not modifiable by the second user;
• based on the second set of authorization policies, determining that the second user is authorized for bastion session creation from the bastion service, and using the bastion service to create a bastion session for securely accessing one or more resources of the first tenancy;
• logging bastion session activity for the bastion session to the recording destination that is not modifiable by the second user, wherein the recording destination is accessible to one or more users other than the second user.