For example, some or all of process 500 may be performed by any suitable system, such as a server in a data center, by various components of the system 800 described in conjunction with FIG. 8, such as the web server 806 or the application server 808, by multiple computing devices in a distributed system of a computing resource service provider, or by any electronic client device such as the electronic client device 802. In an embodiment, the customer 502, authorization runtime client 508, resource container client 510, and platform data store 512 are the same as the client 102, authorization runtime client 108, resource container client 110, and platform data store 112, respectively, as described in connection with FIG. 1. The process 500 includes a series of operations wherein access to a resource container is authorized.