Patent ID: 11914696
Assignee: AMAZON TECHNOLOGIES, INC.
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 13:
14. One or more non-transitory, computer-readable storage media, storing program instructions that when executed on or across one or more computing devices cause the one or more computing devices to implement:
receive a request, from a user of a plurality of users of an account of one or more systems, to create a quorum control for the account in place of a root user for the account when approving one or more access control operations that modify an access control system as part of performing a privileged task reserved to the root user for the account according to a policy for the quorum control, wherein the request identifies users of the plurality of users of the account as quorum members for approving the one or more access control operations for the quorum control and includes an identification of the user making the request;
determine whether the user is authorized to initiate the quorum control based on the identification of the user making the request;
in response to determining that the user is authorized to initiate the quorum control, creating the quorum control for performing the one or more access control operations to permit an access control system to perform the privileged task on the account when approved according to the policy specified for the quorum control, wherein the quorum control utilizes the users of the account identified in the request as the quorum members for approving the one or more access control operations for performing the privileged task by the access control system according to the policy;
receiving a request to approve performance of an access control operation;
requesting approval of the access control operation from one or more quorum members of the quorum members identified for the quorum control;
evaluating one or more approvals received from the one or more quorum members with respect to the policy specified for the quorum control to determine that the request is approved; and
providing the approval of the access control operation.