Resource access control for virtual machines

A computing system in a cloud computing environment for providing individualized secure access to instantiated virtual machines, the system comprising:

• a memory device storing a shared virtual machine image and a set of instructions;
• and
• a processor configured to execute the set of instructions to:
• instantiate on demand, based on the shared virtual machine image, a plurality of instances of virtual machines in the cloud computing environment;
• and
• execute, from the shared virtual machine image, a security application as a shared executable to execute on an instantiated virtual machine in response to instantiation of the instantiated virtual machine;
• wherein the security application is configurable, when executing on the instantiated virtual machine, to establish, based on a token sent from an end user system, credentials that are unique to the instantiated virtual machine for allowing the instantiated virtual machine individualized and secure access to an access-controlled resource in the cloud computing environment.

A method for providing individualized secure access to instantiated virtual machines in a cloud computing environment, the method comprising:

• accessing a memory device storing a shared virtual machine image;
• instantiating on demand, based on the shared virtual machine image, a plurality of instances of virtual machines in the cloud computing environment;
• and
• executing, from the shared virtual machine image, a security application as a shared executable to execute on an instantiated virtual machine in response to instantiation of the instantiated virtual machine;
• wherein the security application is configurable, when executing on the instantiated virtual machine, to establish, based on a token sent from an end user system, credentials that are unique to the instantiated virtual machine for allowing the instantiated virtual machine individualized and secure access to an access-controlled resource in the cloud computing environment.

A computing system for auditing activity of instantiated virtual machines in a cloud computing environment, the system comprising:

• a memory device storing a set of instructions;
• and
• a processor configured to execute the set of instructions to:
• receive, from an instantiated virtual machine among a plurality of instantiated virtual machines that have been instantiated from a shared virtual machine image, a prompt for transfer of audit data associated with operation of the instantiated virtual machine, the prompt comprising individualized audit credentials that are unique to the instantiated virtual machine and are based at least in part on a unique identity of the instantiated virtual machine;
• and
• responsive to the prompt, selectively authorize storage, in the memory device, of the audit data transferred by the instantiated virtual machine based at least in part on the individualized audit credentials.