Abstract: A system is disclosed that includes capabilities by which a nested sub-resource residing in a service tenancy can access a customer-owned resource residing in a customer tenancy without the use of a cross-tenant policy. The disclosed system provides the ability for a nested sub-resource residing in a service tenancy to obtain the resource principal identity of a higher-level resource residing in the customer tenancy and use the identity of the higher-level resource to access a customer-owned resource residing in the customer tenancy. Using the resource principal identity of its higher-level resource, the sub-resource can access a customer-owned resource that resides in a customer tenancy in a seamless way without having to write a cross-tenancy policy statement that provides permission to the sub-resource to access the customer-owned resource.

Abstract: A system is disclosed that provides the ability for a resource residing in one tenancy of a cloud service provider infrastructure (CSPI) to use the identity of a higher-level resource upon which the resource is built to access other resources residing in another tenancy of the CSPI. The system obtains a first identity associated with the first resource that is provisioned in a first tenancy of the CSPI and obtains a first token for the first resource. The system executes instructions to obtain a second identity associated with a second resource upon which the first resource is built. The second resource resides in a second tenancy of the CSPI. The system obtains a second identity associated with the second resource and obtains a second token for the first resource. The first resource uses the second token to access resources that reside in the second tenancy of the CSPI.

Abstract: A system receives a configuration request comprising an infrastructure definition that defines a set of resources, to be selected from a set of tenant-managed resources implemented on a tenant's premises, for implementing the compute target entity. The system generates a compute target entity associated with an addressable identifier. The compute target entity corresponds to the set of resources selected from the set of tenant-managed resources. The system receives an execution request for execution of a set of operations, where the execution request specifies the addressable identifier associated with the compute target entity for execution of the set of operations. The system maps the addressable identifier of the compute target entity to the set of resources. The system causes execution of the set of operations on the set of resources on the tenant's premises via the compute target entity.

Abstract: A system is disclosed that includes capabilities by which a nested sub-resource residing in a service tenancy can access a customer-owned resource residing in a customer tenancy without the use of a cross-tenant policy. The disclosed system provides the ability for a nested sub-resource residing in a service tenancy to obtain the resource principal identity of a higher-level resource residing in the customer tenancy and use the identity of the higher-level resource to access a customer-owned resource residing in the customer tenancy. Using the resource principal identity of its higher-level resource, the sub-resource can access a customer-owned resource that resides in a customer tenancy in a seamless way without having to write a cross-tenancy policy statement that provides permission to the sub-resource to access the customer-owned resource.

Abstract: A system for query optimization by a federation engine is provided. When a data source supports a target feature of an expression of a query in the common query language, the system executes a converter for the data source to convert the target feature to the corresponding feature of the data source query language. The system then submits to the data source a query with the expression with the converted target feature so that the expression is evaluated at the data source and receives query results. When a data source does not support the target feature of the expression, the system submits to the data source a query without the expression and evaluates the expression on the query results returned by the data source. The system then combines the query results based on the evaluation of the expression as the query results of the query.

Abstract: A system for query optimization by a federation engine is provided. When a data source supports a target feature of an expression of a query in the common query language, the system executes a converter for the data source to convert the target feature to the corresponding feature of the data source query language. The system then submits to the data source a query with the expression with the converted target feature so that the expression is evaluated at the data source and receives query results. When a data source does not support the target feature of the expression, the system submits to the data source a query without the expression and evaluates the expression on the query results returned by the data source. The system then combines the query results based on the evaluation of the expression as the query results of the query.

Abstract: A system for query optimization by a federation engine is provided. When a data source supports a target feature of an expression of a query in the common query language, the system executes a converter for the data source to convert the target feature to the corresponding feature of the data source query language. The system then submits to the data source a query with the expression with the converted target feature so that the expression is evaluated at the data source and receives query results. When a data source does not support the target feature of the expression, the system submits to the data source a query without the expression and evaluates the expression on the query results returned by the data source. The system then combines the query results based on the evaluation of the expression as the query results of the query.

Abstract: A system for query optimization by a federation engine is provided. When a data source supports a target feature of an expression of a query in the common query language, the system executes a converter for the data source to convert the target feature to the corresponding feature of the data source query language. The system then submits to the data source a query with the expression with the converted target feature so that the expression is evaluated at the data source and receives query results. When a data source does not support the target feature of the expression, the system submits to the data source a query without the expression and evaluates the expression on the query results returned by the data source. The system then combines the query results based on the evaluation of the expression as the query results of the query.