Securing services and intra-service communications

A system comprising:

• at least one computing device that implements one or more services, wherein the one or more services:
• define an access policy that defines a first subset of a quantity of information available to a first service consumer from a service provider via one or more APIs, with the first subset being different than a second subset of the quantity of information available to a second service consumer via the one or more APIs related to a computing service, the one or more APIs providing portions of a quantity of information in response to access requests from service consumers.

A non-transitory computer-readable storage medium having stored thereon executable instructions that, if executed by one or more processors of a computer system, cause the computer system to at least:

• define an access policy based at least in part on a request to access a service provided by a service provider, the access policy defining a first subset of a quantity of information available to a first service consumer from the service provider via one or more APIs, with the first subset being different than a second subset of the quantity of information available to a second service consumer via the one or more APIs related to the service.