Patent ID: 11914696
Assignee: AMAZON TECHNOLOGIES, INC.
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 4:
5. A computer-implemented method, comprising:
receive a request, from a user of a plurality of users of an account of one or more systems, to create a quorum control for the account in place of a root user for the account when approving one or more access control operations that modify an access control system as part of performing a privileged task reserved for the root user for the account according to a policy for the quorum control, wherein the request identifies users of the plurality of users of the account as quorum members for approving the one or more access control operations for the quorum control and includes an identification of the user making the request;
determine whether the user is authorized to initiate the quorum control based on the identification of the user making the request;
in response to determining that the user is authorized to initiate the quorum control, creating the quorum control for performing the one or more access control operations to permit an access control system to perform the privileged task on the account when approved according to the policy specified for the quorum control, wherein the quorum control utilizes the users of the account identified in the request as the quorum members for approving the one or more access control operations for performing the privileged task by the access control system according to the policy;
applying the quorum control to determine approval for a request to perform an access control operation, comprising:
obtaining one or more approvals from one or more quorum members of the quorum members of the quorum control;
evaluating the one or more approvals with respect to the policy specified for the quorum control to determine that the request is approved; and

providing, the approval of the access control operation.