Methods and apparatus for using credentials to access computing resources

1. A method, comprising:

receiving, by a computing device, at a first time a request associated with a user to initiate a plurality of actions against a plurality of computing resources, the request including a credential identifier that identifies a credential;

accessing a memory, based on the credential identifier, to retrieve the credential identified by the credential identifier that was stored in the memory at a time prior to the first time, the credential comprising authentication information configured to authenticate the plurality of actions to the plurality of computing resources; and

communicating, by the computing device, the request and the authentication information to an orchestration engine for execution of the plurality of actions against the plurality of computing resources without presenting the authentication information to the user such that the user is prevented from viewing the authentication information.

2. The method of claim 1 , further comprising:

accessing the memory to identify a set of credentials that comprises one or more credentials designated as being associated with the user and one or more credentials designated as being associated with a team of which the user is a member; and

determining, based on the set of credentials, that the user has a right to utilize the credential.

3. The method of claim 1 , wherein the credential is not designated as being associated with the user, and the credential is designated as being associated with the team of which the user is a member.

4. The method of claim 1 , further comprising:

receiving, prior to the first time, a request from a second user to generate the credential, the request including the credential identifier and the authentication information;

generating the credential; and

storing the credential in the memory.

5. The method of claim 4 , further comprising:

encrypting the authentication information prior to storing the credential in the memory.

6. The method of claim 5 , further comprising:

decrypting the authentication information prior to communicating the authentication information to the orchestration engine.

7. The method of claim 1 , further comprising:

accessing, by the computing device, a plurality of permission definitions stored in the memory that identifies a plurality of corresponding permissions that grant access to the plurality of computing resources; and

based on a set of permissions comprising at least one permission associated with the user and at least one permission associated with a team of which the user is a member, determining that at least one permission in the set of permissions grants the user access to the plurality of computing resources.

8. The method of claim 1 , further comprising:

receiving, by the computing device, a request to identify credentials which the first user has a right to use;

accessing the memory to identify a set of credentials that comprises each credential designated as being associated with the user and each credential designated as being associated with a team of which the user is a member;

effecting presentation of credential identifiers that identify the credentials in the set of credentials to the user.

9. The method of claim 8 , wherein each credential of the set of credentials comprises a particular credential type of a plurality of credential types, and further comprising:

receiving, by the computing device, a request to identify credentials of a first credential type which the first user has a right to use;

accessing the memory to identify a set of credentials that comprises each credential of the first credential type that is designated as being associated with the user and each credential of the first credential type that is designated as being associated with a team of which the user is a member;

effecting presentation of credential identifiers that identify the credentials of the first credential type in the set of credentials to the user.

10. The method of claim 1 , wherein the plurality of computing resources comprises a cloud computing resource, and the credential comprises a cloud-type credential that authenticates the plurality of actions with the cloud computing resource.

11. A computing device, comprising:

a communications interface configured to communicate with a network; and

a processor coupled to the communications interface, and configured to:

receive at a first time a request associated with a first user to initiate a plurality of actions against a plurality of computing resources, the request including a credential identifier that identifies a credential;

access a memory, based on the credential identifier, to retrieve the credential identified by the credential identifier that was stored in the memory at a time prior to the first time, the credential comprising authentication information configured to authenticate the plurality of actions to the plurality of computing resources; and

communicate the request and the authentication information to an orchestration engine for execution of the plurality of actions against the plurality of computing resources without presenting the authentication information to the user such that the user is prevented from viewing the authentication information.

12. The computing device of claim 11 , wherein the processor is further configured to:

access the memory to identify a set of credentials that comprises one or more credentials designated as being associated with the user and one or more credentials designated as being associated with a team of which the user is a member; and

determine, based on the set of credentials, that the user has a right to utilize the credential.

13. The computing device of claim 11 , wherein the credential is not designated as being associated with the user, and the credential is designated as being associated with the team of which the user is a member.

14. The computing device of claim 11 , wherein the processor is further configured to:

receive a request to identify credentials which the first user has a right to use;

access the memory to identify a set of credentials that comprises each credential designated as being associated with the user and each credential designated as being associated with a team of which the user is a member;

effect presentation of credential identifiers that identify the credentials in the set of credentials to the user.

15. A computer program product stored on a non-transitory computer-readable storage medium and including instructions configured to cause a processor to carry out the steps of:

receiving at a first time a request associated with a first user to initiate a plurality of actions against a plurality of computing resources, the request including a credential identifier that identifies a credential;

accessing a memory, based on the credential identifier, to retrieve the credential identified by the credential identifier that was stored in the memory at a time prior to the first time, the credential comprising authentication information configured to authenticate the plurality of actions to the plurality of computing resources; and

communicating the request and the authentication information to an orchestration engine for execution of the plurality of computing resources without presenting the authentication information to the user such that the user is prevented from viewing the authentication information.

16. The computer program product of claim 15 , wherein the instructions are further configured to cause the processor to carry out the steps of:

accessing the memory to identify a set of credentials that comprises one or more credentials designated as being associated with the user and one or more credentials designated as being associated with a team of which the user is a member; and

determining, based on the set of credentials, that the user has a right to utilize the credential.

17. The computer program product of claim 15 , wherein the credential is not designated as being associated with the user, and the credential is designated as being associated with the team of which the user is a member.

18. The computer program product of claim 15 , wherein the instructions are further configured to cause the processor to carry out the steps of:

receiving a request to identify credentials which the first user has a right to use;

accessing the memory to identify a set of credentials that comprises each credential designated as being associated with the user and each credential designated as being associated with a team of which the user is a member;

effecting presentation of credential identifiers that identify the credentials in the set of credentials to the user.