Rules engine for selectively granting access to secured resources

A method for providing least privilege access to a resource within a secured server, the method comprising:

• receiving, at a transceiver associated with a rules module, an access request from a client requesting access to the resource in the secured server, the access request comprising a role or policy associated with the client and one or more actions associated with the resource;
• normalizing, via a processor associated with the rules module, the role or policy to extract an identity of the secured server, an account associated with the client, and a list of actions or resources approved for the client;
• initializing, via the processor, a rules engine defining one or more rules usable by the rules module to determine whether the access request complies with a least privilege policy;
• analyzing, via the processor, the role or policy and the access request with the rules engine to determine whether the access request complies with the least privilege policy;
• and
• selectively granting, via the processor, access to the secured server and resource based on the analysis of the role or policy with the rules engine.

A system for providing least privilege access to a secured server, the system comprising:

• one or more processors;
• and
• memory in communication with the one or more processors and storing instructions that, when executed by the one or more processors, are configured to cause the system to:
• receive an access request from a client requesting access to a resource in the secured server, the access request explicitly enumerating a role or policy associated with the client and one or more actions associated with the resource;
• initialize a rules engine defining one or more rules usable by the system to determine whether the access request complies with a least privilege policy and configured to selectively permit access to the resource based on the role or policy and the one or more actions associated with the resource;
• and
• approve or deny the one or more actions based at least in part on a comparison of the one or more actions and the one or more rules such that the instructions are configured to cause the system to provision the access request within the secured server such that the client can perform the one or more actions within the secured server when the access request complies with the least privilege policy.