1. A method implemented in a non-transitory machine-readable storage medium and processed by one or more processors of a machine configured to perform the method, comprising: receiving, at the machine, a request for access to a portion of shared storage situated in a cloud environment, the request originates from a tenant and the storage services multiple other tenants from the cloud environment; instantiating, on the machine, a tenant storage machine (TSM) uniquely assigned to the tenant; dynamically allocating, on the machine, operating system (OS) resources for the TSM based on service level assurance (SLA) policies for the tenant, the OS resources accessible from within the TSM; and processing, on the machine, the request within the TSM using the OS resources and in accordance with the SLA policies.