Abstract: A distributed system hosts a plurality of programming interfaces managed according to a hierarchy of security policies. In response to receiving a request from a client to invoke one of the programming interfaces, the system determines whether the client is authorized to call the programming interface by mapping from an attribute of the client to a location in the hierarchy. The system calls the interface in response to determining that the client is authorized to call programming interfaces associated with the location. The programming interface implements the security policy that corresponds to the location.

Abstract: An identity mapping service receives, from an administrator of an account via a federated identity generated through an identity broker of a datacenter, a request to add a new user to the account. The identity mapping service validates the federated identity and generates a link that can be used by the user authorized to utilize the new user to access the new user. The identity mapping service uses the electronic address of the user to transmit the link to the user of authorized to utilize the new user to enable the user authorized to utilize the new user to access the new user. The identity mapping service associates the new user with the account and enables the new user to access one or more computing resources associated with the account via a second federated identity generated through the identity broker of the datacenter.