Nested resource identity management for cloud resources

A system comprising:

• a memory;
• and
• one or more processors configured to perform processing, the processing comprising:
• enabling a first resource to assert a first identity associated with the first resource, wherein the first resource resides in a first tenancy provided by a cloud service provider (CSP);
• enabling the first resource to assert a second identity associated with a second resource residing in a tenancy of a customer of the CSP, wherein the first resource is a sub-resource of the second resource;
• and
• accessing, by the first resource, a third resource by asserting the second identity, wherein the third resource resides in the tenancy of the customer.

A non-transitory computer-readable medium storing instructions executable by a computer system that, when executed by one or more processors of the computer system, cause the one or more processors to perform operations comprising:

• enabling a first resource to assert a first identity associated with the first resource, wherein the first resource resides in a first tenancy provided by a cloud service provider (CSP);
• enabling the first resource to assert a second identity associated with a second resource residing in a tenancy of a customer of the CSP, wherein the first resource is a sub-resource of the second resource;
• and
• accessing, by the first resource, a third resource by asserting the second identity, wherein the third resource resides in the tenancy of the customer.