FIG. 1 illustrates an aspect of a system 100 in which various embodiments may be practiced. As illustrated in FIG. 1, the system 100 may include a client 102 that communicates with a resource container service 106 that in turn communicates with a data plane service 104. The resource container service 106 may comprise a resource container client 110 and an authorization runtime client 108. The data plane service 104 may comprise a platform data store 112 usable to store and retrieve information related to resource containers as described in the present disclosure.