Key reuse in a cloud environment

A non-transitory computer-readable medium including instructions that when executed by one or more processors, cause the one or more processors to perform operations including:

• accessing a database maintained within a cloud environment, the database storing a plurality of public keys, wherein each public key has a corresponding fingerprint, and the database further storing a plurality of fingerprints corresponding to the plurality of public keys, and wherein each public key is associated with either (i) a corresponding user account of a corresponding tenancy of the cloud environment or (ii) a compute instance hosted within a corresponding tenancy of the cloud environment;
• determining a number of occurrences of a first public key or a first fingerprint corresponding to the first public key within the database, wherein each occurrence corresponds to a current association of the first public key or the first fingerprint for a respective cloud resource, such that the number of occurrences corresponds to a number of different cloud resources with which the first public key or the first fingerprint is simultaneously associated, each cloud resource comprising a distinct user account or a distinct compute instance, and wherein each occurrence corresponds to association of a user-provided version of the first public key with a respective cloud resource;
• determining that the number of occurrences is equal to or greater than a threshold number;
• tagging the first public key as being reused for at least the threshold number of occurrences;
• and
• generating an output indicating that the first public key is being reused for at least the threshold number of occurrences.

A system comprising:

• one or more processors;
• a storage repository including a database for storing a plurality of public keys, wherein each public key has a corresponding fingerprint, and the database for further storing a plurality of fingerprints corresponding to the plurality of public keys, and wherein each public key is associated with either (i) a corresponding user account of a corresponding tenancy of a cloud environment or (ii) a compute instance hosted within a corresponding tenancy of the cloud environment;
• and
• one or more non-transitory computer-readable media storing instructions, which, when executed by the system, cause the system to perform a set of actions including:
• accessing the database;
• determining a number of occurrences of a first public key or a first fingerprint corresponding to the first public key within the database, wherein each occurrence corresponds to a current association of the first public key or the first fingerprint for a respective cloud resource, such that the number of occurrences corresponds to a number of different cloud resources with which the first public key or the first fingerprint is simultaneously associated, each cloud resource comprising a distinct user account or a distinct compute instance, and wherein each occurrence corresponds to association of a user-provided version of the first public key with a respective cloud resource;
• determining that the number of occurrences is equal to or greater than a threshold number;
• tagging the first public key as being reused for at least the threshold number of occurrences;
• and
• generating an output indicating that the first public key is being reused for at least the threshold number of occurrences.