1. An attestation system in a cloud computing environment configured to: allow a plurality of users and applications of the cloud computing environment to issue attestations regarding attributes of other users and applications; control access to said attestations; and allow a plurality of users and applications of the cloud computing environment to query the authorization system to determine whether a specified user or application has a specified attribute.