Authentication for an API request

摘要

Technology for managing an API request is described. In an example implementation, an authentication service may receive a request to access a service. The authentication service may be configured to determine a proximity of a client device from which the request originated to the service. The authentication service may be further configured to grant the request based in part on the determined proximity of the client device to the service with respect to a policy.

主权项

1. A system, comprising:
a plurality of computing nodes, each of which comprises at least one processor and a memory, wherein the plurality of computing nodes are configured to collectively implement: a local network usable to access a service provider environment offered by a service provider external to the local network; a first communication protocol for the local network to use to reach the service provider environment; a token service hosted on the local network to generate authentication material for inclusion with an API request for the service provider environment and to communicate the authentication material over a second communication protocol, the second communication protocol being unusable to communicate with devices external to the local network; and a client to receive the authentication material using the second protocol and to send the API request containing the authentication material to the service provider environment using the first protocol.