Oracle International Corporation

A M Helali Mortuza Bhuiyan

Sahitya Gollapudi

Jyotishman Nag

Girish Nagaraja

Daniel Music Vogel

Johannes Klein

Thomas James Andrews

Sreedhar Katti

Jason Anthony Slepicka

Ayman Mohammed Aly Hassan Elmenshawy

Jakub Karol Wojciak

Kenneth Choi Kil

Pritesh Kiritkumar Patel

Techniques are disclosed for restricting operations between two attached two compute instances. An infrastructure and a generalized method is described for attaching two or more cloud resources (e.g., two compute instances) in spite of the compute resources being provisioned by two different services from different cloud tenancies, and then modifying the allowed operations that can be performed due to the attachment.

Restricted operations due to attachment of compute instances owned by different tenancies

A system is disclosed that includes capabilities by which a nested sub-resource residing in a service tenancy can access a customer-owned resource residing in a customer tenancy without the use of a cross-tenant policy. The disclosed system provides the ability for a nested sub-resource residing in a service tenancy to obtain the resource principal identity of a higher-level resource residing in the customer tenancy and use the identity of the higher-level resource to access a customer-owned resource residing in the customer tenancy. Using the resource principal identity of its higher-level resource, the sub-resource can access a customer-owned resource that resides in a customer tenancy in a seamless way without having to write a cross-tenancy policy statement that provides permission to the sub-resource to access the customer-owned resource.

Nested resource identity management for cloud resources

Techniques are disclosed for creating an attachment between two compute instances. An infrastructure and a generalized method is described for attaching two or more cloud resources (e.g., two compute instances) in spite of the compute resources being provisioned by two different services from different cloud tenancies. An automated process is described that is executed for wiring the compute instances. The automated process can be generally applied to attach any two compute instances providing two different services and provisioned from two different service tenancies.

Attachment and detachment of compute instances owned by different tenancies

Growing community of inventors

Redmond, WA, United States of America

A M Helali Mortuza Bhuiyan