Techniques for auditing and controlling network services

1. A method, comprising:

monitoring, via a proxy, an interaction between a principal and a remote network resource, wherein monitoring further includes suspending the interaction for occurring between the principal and the remote resource until the policy can be evaluated;

assigning, at the proxy, an audit event that is linked to the interaction; and

evaluating, at the proxy, a policy based on the audit event that determines an action to take by the proxy with respect to the interaction, wherein evaluating further includes preventing the interaction when the policy evaluation dictates, wherein evaluating further includes passing the interaction through to the remote network resource when the policy evaluation permits, wherein passing further includes establishing a first secure session with the principal, which appears to the principal to be a connection to the remote network service, wherein establishing further includes creating a second secure session with the remote network service, which appears to the remote network service to be a connection to the principal; and

monitoring subsequent transactions between the principal over the first secure session and the remote network service over the second secure session, wherein monitoring further includes evaluating one or more additional policy conditions during each transaction, and wherein evaluating further includes denying a number of the transactions based on evaluation of the policy conditions and passing a number of the transactions from and to die first secure session to and from the second secure session based on evaluation of the policy conditions.