Authorization Policy Federation in Heterogeneous Multicloud Environments

This article proposes a solution for clients with accounts with multiple cloud providers: an Authorization Policy Federation (APF) of heterogeneous cloud accounts. These federated accounts share a centrally managed policy written in Disjunctive Normal Form (DNF) using a cloud-independent ontology. This shared abstract policy can be translated to local cloud formats and back again.