Abstract: In one embodiment, a software is operable when executed to identify a log indicating executions of commands of a secure shell (SSH) session, wherein a user accesses an instance through the SSH session, identify a generic prompt that specifies a generic set of commands of interest, identify a customized prompt that specifies a customized set of commands of interest, the customized set of commands of interest being specific to an attribute associated with one or more of the user, the instance, or the SSH session, input the generic prompt, the customized prompt, and the log to a generative AI model, and generate, using the generative AI model, a risk assessment for the SSH session based on one or more executions of the generic set of commands of interest and one or more executions of the customized set of commands of interest from the executions of the commands in the log.

Abstract: Techniques for providing user access to cloud environments through an administrative tenancy to comply with sovereignty requirements are disclosed. The administrative tenancy is one of multiple tenancies in the cloud environment. The administrative tenancy includes tools for communicating with services running outside of the administrative tenancy. The user may only be able to access these services through the administrative tenancy. User access to the administrative tenancy requires the user to satisfy one or more sovereignty requirements. After determining that the user satisfies the sovereignty requirements for the cloud environment, the system grants the user access to the tools within the administrative tenancy to communicate with services outside the administrative tenancy.

Abstract: A framework for establishing ephemeral privileged access workstations for providing access to production workstations is described. For example, an ephemeral privileged access workstation may be provisioned just in time at a request from a client device for accessing a production workstation.

Abstract: Techniques for providing dedicated or private label cloud (PLC) environments for use by tenants of a cloud infrastructure environment in accessing software products, services, or other offerings associated with the environment are disclosed. An operator, authenticated with respect to a provider identity domain, makes a request to access a resource associated with an operator tenancy without being associated with the operator identity domain. A cross-domain approval process is executed to determine whether or not to provide access to the operator.

Abstract: Techniques for providing user access to cloud environments through an administrative tenancy to comply with sovereignty requirements are disclosed. The administrative tenancy is one of multiple tenancies in the cloud environment. The administrative tenancy includes tools for communicating with services running outside of the administrative tenancy. The user may only be able to access these services through the administrative tenancy. User access to the administrative tenancy requires the user to satisfy one or more sovereignty requirements. After determining that the user satisfies the sovereignty requirements for the cloud environment, the system grants the user access to the tools within the administrative tenancy to communicate with services outside the administrative tenancy.