Abstract: A system receives a configuration request comprising an infrastructure definition that defines a set of resources, to be selected from a set of tenant-managed resources implemented on a tenant's premises, for implementing the compute target entity. The system generates a compute target entity associated with an addressable identifier. The compute target entity corresponds to the set of resources selected from the set of tenant-managed resources. The system receives an execution request for execution of a set of operations, where the execution request specifies the addressable identifier associated with the compute target entity for execution of the set of operations. The system maps the addressable identifier of the compute target entity to the set of resources. The system causes execution of the set of operations on the set of resources on the tenant's premises via the compute target entity.

Abstract: A system is disclosed that provides the ability for a resource residing in one tenancy of a cloud service provider infrastructure (CSPI) to use the identity of a higher-level resource upon which the resource is built to access other resources residing in another tenancy of the CSPI. The system obtains a first identity associated with the first resource that is provisioned in a first tenancy of the CSPI and obtains a first token for the first resource. The system executes instructions to obtain a second identity associated with a second resource upon which the first resource is built. The second resource resides in a second tenancy of the CSPI. The system obtains a second identity associated with the second resource and obtains a second token for the first resource. The first resource uses the second token to access resources that reside in the second tenancy of the CSPI.