Cloud resource credential provisioning for services running in virtual machines and containers

1. A system associated with a cloud computing environment, comprising:

a cloud resource credential management system that is separate from a hypervisor running a virtual machine, associated with a cloud orchestrator, provisioned as part of deploying the virtual machine in the hypervisor to access information associated with an application or a service configuration file and establish a cloud resource credential provisioning system external to the application to be executed in connection with the virtual machine, wherein the cloud resource credential provisioning system executes in the hypervisor external to the virtual machine executing the application and maps a cloud resource policy and a cloud resource credential; and

the cloud resource credential provisioning system to:

(i) intercept a cloud resource call from the application to a cloud resource provider,

(ii) validate that the cloud resource call complies with the cloud resource policy, and

(iii) if the cloud resource call complies with the cloud resource policy, extend the cloud resource call with the cloud resource credential and forward the extended cloud resource call to the cloud resource provider.

2. The system of claim 1 , wherein the cloud resource call is associated with at least one of: (i) object storage, (ii) a control plane Application Programming Interface (“API”), and (iii) virtual Internet Protocol (“IP”) attachment.

3. The system of claim 1 , wherein the cloud orchestrator establishes the cloud resource provisioning system via an attach resource Application Programming Interface (“API”).

4. The system of claim 3 , wherein the attach resource API includes a resource name, an application identifier, and a cloud resource access type.

5. The system of claim 4 , wherein the access type is associated with at least one of create, delete, bind, and a role-based access type.

6. The system of claim 1 , wherein the cloud resource call comprises a Hyper Text Transfer Protocol (“HTTP”) call from the application to the cloud provider.

7. The system of claim 1 , wherein the cloud resource credential management system is further to implement a credential policy across a plurality of virtual machines.

8. The system of claim 7 , wherein the credential policy comprises a credential rotation policy.

9. A computer-implemented method associated with a cloud computing environment, comprising:

provisioning a cloud resource credential management system that is separate from a hypervisor running a virtual machine, associated with a cloud orchestrator, as part of deploying the virtual machine in the hypervisor;

accessing, by the cloud resource credential management system, information associated with an application or a service configuration file;

establishing, by the cloud resource credential management system, a cloud resource credential provisioning system external to the application to be executed in connection with the virtual machine, wherein the cloud resource credential provisioning system executes in the hypervisor external to the virtual machine executing the application and maps a cloud resource policy and a cloud resource credential;

intercepting, by the cloud resource credential provisioning system, a cloud resource call from the application to a cloud resource provider, wherein the cloud resource call is associated with a virtual Internet Protocol (“IP”) attachment;

validating, by the cloud resource credential provisioning system, that the cloud resource call complies with the cloud resource policy; and

if the cloud resource call complies with the cloud resource policy, extending, by the cloud resource credential provisioning system, the cloud resource call with the cloud resource credential and forward the extended cloud resource call to the cloud resource provider.

10. The method of claim 9 , wherein the cloud orchestrator establishes the cloud resource provisioning system via an attach resource Application Programming Interface (“API”).

11. The method of claim 10 , wherein the attach resource API includes a resource name, an application identifier, and a cloud resource access type.

12. The method of claim 11 , wherein the access type is associated with at least one of create, delete, bind, and a role-based access type.

13. A non-transitory, computer readable medium having executable instructions stored therein, the medium comprising:

instruction to provision a cloud resource credential management system that is separate from a hypervisor running a virtual machine, associated with a cloud orchestrator, as part of deploying the virtual machine in the hypervisor;

instruction to access, by the cloud resource credential management system, information associated with an application or a service configuration file;

instruction to establish, by the cloud resource credential management system, a cloud resource credential provisioning system external to the application to be executed in connection with the virtual machine, wherein the cloud resource credential provisioning system (1) executes in the hypervisor external to the virtual machine executing the application and (2) maps a cloud resource policy and a cloud resource credential;

instruction to intercept, by the cloud resource credential provisioning system, a cloud resource call from the application to a cloud resource provider;

instruction to validate, by the cloud resource credential provisioning system, that the cloud resource call complies with the cloud resource policy; and

if the cloud resource call complies with the cloud resource policy, instruction to extend, by the cloud resource credential provisioning system, the cloud resource call with the cloud resource credential and forward the extended cloud resource call to the cloud resource provider.