This is also implemented in OpenStack / for HPCloud in Anchor: https://wiki.openstack.org/wiki/Security/Projects/Anchor

You can use it as a standalone project in your environment as well. There's a talk about it at https://youtu.be/Q_ZhrQq-_YM (ideas very similar to Netflix)