Service-agnostic policy enforcement control engine

A system comprising:

• a processor;
• and
• memory storing instructions that, when executed by the processor, cause the processor to:
• receive, at a computing environment, a first request from a merchant server via an application programming interface (API), the API associated with a computing service of a plurality of computing services associated with the computing environment, the first request comprising information in a non-standardized format;
• convert, by a server in the computing environment, the information into a standardized format;
• receive, at an orchestrator in the computing environment, a second request to generate a license token for executing an action, the second request comprising the information in the standardized formal;
• invoke a policy-based controls engine in the computing environment to validate the second request, wherein the policy-based controls engine is automatically invoked upon receiving any request to generate a license token associated with any of the plurality of computing services;
• identify, by the policy-based controls engine, one or more policies applicable to the second request based on one or more of the plurality of attributes in the information in the standardized format, wherein the one or more policies are implemented as one or more computational constraint expressions;
• validate or deny, by the policy-based controls engine, the second request based on whether the plurality of attributes satisfy the one or more policies;
• generate a response based on whether the second request was validated or denied;
• and
• transmit the response to the orchestrator.

A non-transitory computer-readable medium storing instructions that, when executed by a processor, cause the processor to:

• receive, at a computing environment, a first request from a merchant server via an application programming interface (API), the API associated with a computing service of a plurality of computing services associated with the computing environment, the first request comprising information in a non-standardized format;
• convert, by a server in the computing environment, the information into a data package, the data package comprising a plurality of attributes in a standardized format;
• receive, at an orchestrator in the computing environment, a second request to generate a license token for executing an action, the second request comprising the data package;
• invoke a policy-based controls engine in the computing environment to validate the second request;
• identify, by the policy-based controls engine, one or more policies applicable to the second request based on one or more of the plurality of attributes in the data package, wherein the one or more policies are implemented as one or more computational constraint expressions;
• validate, by the policy-based controls engine, the second request based on the plurality of attributes satisfying the one or more policies;
• generate the license token based on successful validation of the second request;
• and
• execute the action using the license token.