Resource authorization system and method

1. A resource authorization method comprising:

authenticating, using instructions stored in a non-transitory medium and executed on at least one processor, a client to form a client login session;

receiving, using the instructions executed by the processor, a request to establish a plurality of connections between the client and a plurality of target resources that are used to execute a distributed application, the plurality of target resources being configured in a distributed computing system;

obtaining, using the instructions executed by the processor, a list indicating one or more authorized resources that the client is authorized to manage in the distributed computing system;

authenticating, using the instructions executed by the processor, the plurality of target resources to form a plurality of resource login sessions, wherein authenticating each target resource comprises:

determining, based at least in part on the obtained list, that the client is authorized to manage the target resource;

in response to determining that the client is authorized, retrieving an authentication credential for the target resource; and

authenticating the target resource, using the retrieved authentication credential, to form a resource login session with the target resource, wherein the resource login session is established independently of the client login session; and

establishing, using the instructions executed by the processor, the plurality of requested connections between the client and the target resources by using a switch matrix to communicatively couple the client login session to one or more of the resource login sessions such that network traffic between the client and the target resources is forwarded irrespective of any particular communication protocol;

wherein using the switch matrix to communicatively couple the client login session to one or more of the resource login sessions further comprises using a dynamic routing table.

2. The resource authorization method of claim 1 , further comprising updating the list when at least one of an additional resource is allocated to be used by the distributed application, an existing resource is de-allocated from use by the distributed application, or an existing resource is modified.

3. The resource authorization method of claim 1 , further comprising updating credential information associated with at least one of the resources when the credential information is modified using a rotating credential service.

4. The resource authorization method of claim 1 , further comprising restricting the client login session from connecting to another resource when the other resource is not in the list.

5. The resource authorization method of claim 1 , further comprising generating a session logfile for the client login session.

6. The resource authorization method of claim 1 , further comprising obtaining the list from an at least one memory, the memory communicatively coupled with one or more of the client and the at least one processor.

7. The resource authorization method of claim 1 , further comprising obtaining the list from a credentials server that executes other instructions external to the instructions.

8. A resource authorization system for a distributed computing system, the resource authorization system comprising:

a computing system in communication with a client computing device and a distributed computing system, the computing system comprising at least one processor and at least one memory to store instructions that, when executed by the at least one processor, are configured to:

authenticate a client to form a client login session;

receive a request to establish a plurality of connections between the client and a plurality of target resources that are used to execute a distributed application, the plurality of target resources being configured in a distributed computing system;

obtain a list indicating one or more authorized resources that the client is authorized to manage in the distributed computing system;

authenticate the plurality of target resources to form a plurality of resource login sessions, wherein authenticating each target resource comprises:

determining, based at least in part on the obtained list, that the client is authorized to manage the target resource;

in response to determining that the client is authorized,

retrieving an application credential for the target resource; and

authenticating the target resource, using the retrieved authentication credential, to form a resource login session with the target resource, wherein the resource login session is established independently of the client login session; and

establish the plurality of requested connections between the client and the target resources by using a switch matrix to communicatively couple the client login session to one or more of the resource login sessions such that network traffic between the client and the target resources is forwarded irrespective of any particular communication protocol;

wherein the instructions are configured to communicatively couple the client login session to the resource login session using a routing table.

9. The resource authorization system of claim 8 , wherein the instructions are configured to update the list when at least one of an additional resource is allocated to be used by the distributed application, an existing resource is de-allocated from use by the distributed application, or an existing resource is modified.

10. The resource authorization system of claim 8 , wherein the instructions are configured to update credential information associated with at least one of the resources when the credential information is modified using a rotating credential service.

11. The resource authorization system of claim 8 , wherein the instructions are configured to restrict the client login session from connecting to another resource when the other resource is not in the list.

12. The resource authorization system of claim 8 , wherein the instructions are configured to generate a session logfile for the client login session.

13. The resource authorization system of claim 8 , wherein the instructions are configured to obtain the list from the at least one memory.

14. The resource authorization system of claim 8 , wherein the instructions are configured to obtain the list from a credentials server that executes other instructions external to the resource authorization system.

15. A non-transitory, computer readable medium including computer executable instructions that, when executed by at least one processor, are configured to perform at least the following:

receive a request to establish a plurality of connections from an authenticated client login session to a plurality of target resources that are used to execute a distributed application, the plurality of target resources being configured in a distributed computing system;

obtain a list indicating one or more authorized resources that the client login session is authorized to manage in the distributed computing system;

authenticate the plurality of target resources to form a plurality of resource login sessions, wherein authenticating each target resource comprises:

determining that the client is authorized to manage the target resource;

retrieving an authentication credential for the target resource; and

authenticating the target resource, using the retrieved authentication credential, to thereby form a resource login session with the target resource, such that the resource login session is established independently of the client login session;

establish the plurality of requested connections by communicatively coupling the client login session and each one of the plurality of resource login sessions, the connections forwarding network traffic between a client of the authenticated client login session and the plurality of resources irrespective of any particular communication protocol, at least one of the connections established by using a switch matrix; and

communicatively couple the client login session to the resource login session using a routing table.