Dynamic computing resource access authorization

A non-transitory computer readable medium including instructions that, when executed by at least one processor, cause the at least one processor to perform operations for securing access to a target network resource in a cloud computing environment, the operations comprising:

• authenticating an identity in a cloud computing environment;
• providing, by an access authority and based on the authentication of the identity, a token to the identity;
• receiving, at the access authority and from an access layer resource, the token that was transmitted to the identity, the token having been included by the identity in an access request to a target resource in the cloud computing environment;
• and
• determining, based on the received token, whether to permit the identity to access the target resource in the cloud computing environment.

A computer-implemented method for securing access to a target network resource in a cloud computing environment, the method comprising:

• authenticating an identity in a cloud computing environment;
• providing, by an access authority and based on the authentication of the identity, a token to the identity;
• receiving, at the access authority and from an access layer resource, the token that was transmitted to the identity, the token having been included by the identity in an access request to a target resource in the cloud computing environment;
• and
• determining, based on the received token, whether to permit the identity to access the target resource in the cloud computing environment.