System And Method For Organizational Governance Enforced By Advanced Links In Cloud Environments

A system, comprising:

• at least one device including a hardware processor;
• the system being configured to perform operations comprising:
• receiving, from a first service, a first request for a resource principal token;
• wherein the first request comprises:
• a resource principal;
• a first service identifier that identifies the first service;
• and
• a link identifier that identifies a first governance link associated with a governing tenancy and a subject tenancy;
• evaluating the first governance link to determine if the first governance link is active;
• and
• in response, at least in part, to determining that the first governance link is active, responding to the first service with a first resource principal token, wherein the first resource principal token forms a basis for authorizing the first service to perform operations corresponding to the subject tenancy on behalf of the governing tenancy.

A method, comprising:

• receiving, from a first service, a first request for a resource principal token;
• wherein the first request comprises:
• a resource principal;
• a first service identifier that identifies the first service;
• and
• a link identifier that identifies a first governance link associated with a governing tenancy and a subject tenancy;
• evaluating the first governance link to determine if the first governance link is active;
• in response, at least in part, to determining that the first governance link is active, responding to the first service with a first resource principal token, wherein the first resource principal token forms a basis for authorizing the first service to perform operations corresponding to the subject tenancy on behalf of the governing tenancy;
• and
• wherein the method is performed by at least one device including a hardware processor.