Preventing masquerading service attacks

A computer-implemented method comprising:

• receiving, at a server in a cloud environment, a request for component deployment from an administrator of the cloud environment, wherein the request comprises an identifier for a component within the server;
• sending, from the server, server data comprising the request for component deployment and a server identifier to an identity and access management (TAM) server of the cloud environment;
• receiving, at the server, an acknowledgment from the TAM server comprising a component application programming interface (API) key;
• and
• sending, from the server, an acknowledgment to the administrator that does not include the API key.

A computer-implemented method comprising:

• sending, from a first server in a cloud environment, a communication request comprising an application programming interface (API) key and a first server identifier to an identity and access management (IAM) server of the cloud environment, wherein the API key is assigned by the IAM server to a first component of the first server;
• receiving, at the first server, a credential comprising a token for the first component;
• sending, from the first server, the credential to a second server in the cloud environment;
• sending, from the second server, server data comprising the credential, a second server identifier, and an identifier for a second component of the second server to the IAM server;
• receiving, at the second server, an acknowledgment from the IAM server;
• and
• sending, from the second server, the acknowledgment to the first server.