Patent ID: 11914696
Assignee: AMAZON TECHNOLOGIES, INC.
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 0:
1. A system, comprising:
at least one processor; and
a memory, storing program instructions that when executed by the at least one processor, cause the at least one processor to implement an access control system, the access control system configured to:
receive a request, from a user of a plurality of users of an account of one or more systems, to create a quorum control for the account in place of a root user for the account when approving access control operations that modify an access control system as part of performing a privileged task reserved to the root user for the account according to a policy for the quorum control, wherein the request identifies users of the plurality of users of the account as quorum members for approving access control operations for the quorum control and includes an identification of the user making the request;
determine whether the user is authorized to initiate the quorum control based on the identification of the user making the request;
in response to determining that the user is authorized to initiate the quorum control, create the quorum control for the account according to the request to create the quorum control, wherein the quorum control utilizes the quorum members for approving access control operations for performing the privileged task for the account according to the policy;
receive a request to perform an access control operation;
request approval of the access control operation from the quorum members identified for approving access control operations for the quorum control;
evaluate one or more approvals received from the quorum members with respect to the policy specified for the quorum control to determine that the request is approved; and
perform the approved access control operation to perform the privileged task for the account.