Patent attributes
An apparatus in one embodiment comprises at least one processing device having a processor coupled to a memory configured to implement a plurality of virtual computing resources including a first subset providing a management network, a second subset providing partner zones, and a third subset providing customer service enclaves. The management network is configured to provision and control communication between partner zones and customer service enclaves. A given partner zone associated with a given partner is configured to provision partner-controlled services of the given partner to customer environments via the customer service enclaves. A given customer service enclave associated with a given customer is configured to activate the given partner for a given customer environment associated with the given customer to enable provisioning of the partner-controlled services of the given partner from the given partner zone to the given customer environment.

