System and methods for minimizing security key exposure using dynamically administered bounds to cloud access

Abstract

Provisioned Capacity Access Broker (PCAB) intercepts each access from every user to the cloud vendor and checks if this access credential is generated by the system. Once the software system determines, that the access credential has been generated within the system, PCAB also checks the access resources usage. Access is allowed if the cumulative resource demand is within the granted limits per the information. Successful access causes the PCAB the system with the revised cumulative resource consumption by the user. After performing these checks, it strips the user's credentials such and substitutes them with the cloud vendor's credentials for the organization and if the access involves creating or deleting an IT resource, the metadata information about the new resource is created in the system before relaying the request to the cloud vendor.

Dependencies are inferred from the claim text.