The invention addresses method, apparatus, system and computer program product for controlling virtualized resources, comprising receiving a request to implement a network service at a network element, looking up key parameters of the network service, selecting at least one compute resource according to the network service, deploying at least one application as required to fulfill the network service, selecting at least one transport resource to interconnect the network element with the at least one application, instructing an access control conductor that a transport access manager has exclusive access to at least part of the network element's resources, and instructing the transport access manager to establish a transport path at the network element.