FIELD

The field relates generally to information processing, and more particularly to techniques for managing information processing systems comprising cloud infrastructure.

BACKGROUND

Information processing systems increasingly utilize reconfigurable virtual resources to meet changing user needs in an efficient, flexible and cost-effective manner. For example, cloud computing environments implemented using various types of virtualization techniques are known. These illustratively include operating system level virtualization techniques such as Linux containers. Such containers may be used to provide at least a portion of the cloud infrastructure of a given information processing system. Other types of virtualization such as virtual machines implemented using a hypervisor can additionally or alternatively be used. However, significant challenges remain in implementation of cloud infrastructure. For example, it is often unduly difficult to provision cloud services in multi-cloud environments.

SUMMARY

Illustrative embodiments disclosed herein provide techniques for access management for multi-cloud workloads.

In one embodiment, an apparatus comprises at least one processing device comprising a processor coupled to a memory. The at least one processing device is configured to perform the step of receiving, at a user interface of a trust platform configured to manage a plurality of cloud assets operating in clouds of two or more cloud service providers, a request by a user to access a given one of a subset of the plurality of cloud assets operating in the clouds of the two or more cloud service providers on which one or more workloads of a given entity run. The at least one processing device is also configured to perform the steps of determining, utilizing one or more application programming interfaces of the trust platform, whether the requesting user is registered with the trust platform as an authorized user for the given entity and the given asset and generating, on the given cloud asset utilizing the one or more application programming interfaces of the trust platform, a temporary user account for the requesting user responsive to determining that the requesting user is registered with the trust platform as an authorized user for the given entity and the given asset. The at least one processing device is further configured to perform the steps of providing, via the user interface of the trust platform, access credentials for the temporary user account to the requesting user, monitoring, utilizing the one or more application programming interfaces of the trust platform, use of the temporary user account on the given cloud asset, and removing, utilizing the one or more application programming interfaces of the trust platform, the temporary user account from the given cloud asset based at least in part on the monitored use of the temporary user account on the given cloud asset.

These and other illustrative embodiments include, without limitation, methods, apparatus, networks, systems and processor-readable storage media.

