Api access to security-sensitive computing system

An access control system for controlling an application programming interface (API) access action, the system comprising:

• a processor(s) set;
• a machine readable storage device;
• and
• computer code stored on the machine readable storage device, with the computer code including instructions and data for causing the processor(s) set to perform operations including the following:
• select from an operator account database an available operator account,
• generate a unique action tag which encompasses an identifier for the API access action and a unique API access key for executing the API access action,
• maintain a dynamic access list which has a mapping of the identifier of the API access action and the unique API access key and a selected operator account,
• grant, via the dynamic access list and the unique action tag, to the selected operator account an authorization for the API access action to the security-sensitive computing system limited to performing the mapped API access action, and
• revoke a further API access action based on the unique action tag, after the operator has performed the API access action.

A computer program product for controlling an application programming interface (API) access action, the computer program product comprising:

• a machine readable storage device;
• and
• computer code stored on the machine readable storage device, with the computer code including instructions and data for causing a processor(s) set to perform operations including the following:
• select, one or more computing systems or controllers, from an operator account database an available operator account,
• generate, one or more computing systems or controllers, a unique action tag which encompasses an identifier for the API access action and a unique API access key for executing the API access action,
• maintain, one or more computing systems or controllers, a dynamic access list which has a mapping of the identifier of the API access action and the unique API access key and a selected operator account,
• grant, one or more computing systems or controllers, via the dynamic access list and the unique action tag, to the selected operator account an authorization for the API access action to the security-sensitive computing system limited to performing the mapped API access action, and
• revoke, one or more computing systems or controllers, a further API access action based on the unique action tag, after the operator has performed the API access action.