As shown in the example 200, the customer A 202A may attach the bucket 222 to the resource container 216. The customer A 202A may utilize an appropriately configured API request, such as an AttachResource(ResourceContainerURN, ResourceURN) request configured with the following parameters: AttachResource(ProjectPhobosURN, BucketPhobos) to attach the bucket 222; in the example 200, the bucket 222 is specified by the URN: “BucketPhobos.” The resource policy 218 may specify that the customer B 202B may access the resource container 216. The resource policy 218 may further specify that the customer B 202B may add resources to the resource container 216; additionally, the resource policy 218 may specify constraints on the customer B 202B, such as restricting the resources the customer B 202B may add to the resource container 216. In some examples, the customer B 202B may be restricted to only adding database or virtual machine based resources to the resource container 216.