Asynchronous task management in an on-demand network code execution environment

    公开(公告)号:US09952896B2

    公开(公告)日:2018-04-24

    申请号:US15195897

    申请日:2016-06-28

    CPC classification number: G06F9/52 G06F9/485

    Abstract: Systems and methods are described for managing asynchronous code executions in an on-demand code execution system or other distributed code execution environment, in which multiple execution environments, such as virtual machine instances, can be used to enable rapid execution of user-submitted code. When asynchronous executions occur, one execution may become blocked while waiting for completion of another execution. Because the on-demand code execution system contains multiple execution environments, the system can efficiently handle a blocked execution by saving a state of the execution, and removing it from its execution environment. When a blocking dependency operation completes, the system can resume the blocked execution using the state information, in the same or different execution environment.

    ASYNCHRONOUS TASK MANAGEMENT IN AN ON-DEMAND NETWORK CODE EXECUTION ENVIRONMENT

    公开(公告)号:US20170371703A1

    公开(公告)日:2017-12-28

    申请号:US15195920

    申请日:2016-06-28

    CPC classification number: G06F9/485 G06F9/4887 G06F9/5038

    Abstract: Systems and methods are described for managing asynchronous code executions in an on-demand code execution system or other distributed code execution environment, in which multiple execution environments, such as virtual machine instances, can be used to enable rapid execution of user-submitted code. When asynchronous executions occur, a first execution may call a second execution, but not immediately need the second execution to complete. To efficiently allocate computing resources, this disclosure enables the second execution to be scheduled accordingly to a state of the on-demand code execution system, while still ensuring the second execution completes prior to the time required by the first execution. Scheduling of executions can, for example, enable more efficient load balancing on the on-demand code execution system.

    SECURITY PROTOCOLS FOR LOW LATENCY EXECUTION OF PROGRAM CODE
    13.
    发明申请
    SECURITY PROTOCOLS FOR LOW LATENCY EXECUTION OF PROGRAM CODE 有权
    “程序代码低执行执行安全议案”

    公开(公告)号:US20160224785A1

    公开(公告)日:2016-08-04

    申请号:US14613723

    申请日:2015-02-04

    Abstract: A system for providing security mechanisms for secure execution of program code is described. The system may be configured to maintain a plurality of virtual machine instances. The system may be further configured to receive a request to execute a program code and allocate computing resources for executing the program code on one of the virtual machine instances. One mechanism involves executing program code according to a user-specified security policy. Another mechanism involves executing program code that may be configured to communicate or interface with an auxiliary service. Another mechanism involves splitting and executing program code in a plurality of portions, where some portions of the program code are executed in association with a first level of trust and some portions of the program code are executed with different levels of trust.

    Abstract translation: 描述了一种用于提供用于安全执行程序代码的安全机制的系统。 该系统可以被配置为维护多个虚拟机实例。 该系统还可以被配置为接收执行程序代码的请求,并且分配用于在虚拟机实例之一上执行程序代码的计算资源。 一种机制涉及根据用户指定的安全策略执行程序代码。 另一种机制涉及执行可配置为与辅助服务通信或接口的程序代码。 另一种机制涉及在多个部分中分割和执行程序代码,其中程序代码的一些部分与第一级别的信任相关联执行,并且程序代码的一些部分以不同的信任级别执行。

    Idempotent task execution in on-demand network code execution systems

    公开(公告)号:US10061613B1

    公开(公告)日:2018-08-28

    申请号:US15275228

    申请日:2016-09-23

    CPC classification number: G06F9/5005 G06F9/445

    Abstract: Systems and methods are described for handling requests to execute idempotent code in an on-demand code execution system or other distributed code execution environment. Idempotent code can generally include code that produces the same outcome even when executed multiple times, so long as dependencies for the code are in the same state as during a prior execution. Due to this feature, multiple executions of idempotent code may inefficiently use computing resources, particularly in on-demand code execution system (which may require, for example, generation and provisioning of an appropriate execution environment for the code). Aspects of the present disclosure enable the on-demand code execution system to process requests to execute code by verifying whether dependency states associated with the code have changed since a prior execution. If dependency states have not changed, no execution need occur, and the overall computing resource us of the on-demand code execution system is decreased.

    ON-DEMAND NETWORK CODE EXECUTION WITH CROSS-ACCOUNT ALIASES

    公开(公告)号:US20180004572A1

    公开(公告)日:2018-01-04

    申请号:US15199490

    申请日:2016-06-30

    CPC classification number: H04L67/303 G06F9/468 H04L67/1004

    Abstract: Systems and methods are described for managing cross-account access to tasks on an on-demand code execution environment or other distributed code execution environment. Such environments utilize pre-initialized virtual machine instances to enable execution of user-specified code in a rapid manner, without delays typically caused by initialization of the virtual machine instances. However, to ensure security, the code of different users is generally maintained separately, and executed on separate virtual machines. Embodiments described herein enable users of a first account to execute code of a second account, without gaining access to the code itself and while maintaining the privacy and security of each account. Specifically, aliases for a task of a first account can be created on a task of a second account, and used to invoke that task on behalf of the first account. Aliases may also allow users to customize how the task is executed.

    ON-DEMAND NETWORK CODE EXECUTION WITH CROSS-ACCOUNT ALIASES

    公开(公告)号:US20180004553A1

    公开(公告)日:2018-01-04

    申请号:US15199613

    申请日:2016-06-30

    CPC classification number: G06F9/5077 G06F9/485 G06F9/5072 G06F2209/5011

    Abstract: Systems and methods are described for utilizing cross-account access to tasks on an on-demand code execution environment or other distributed code execution environment to implement an application programming interface (API) on a network-accessible service. An on-demand code execution environment can utilize pre-initialized virtual machine instances to enable execution of user-specified code in a rapid manner, without delays typically caused by initialization of the virtual machine instances. While users may generally execute their own code, the present application enables code of a first user to be executed by a second user, while maintaining the privacy and security of the code and associated accounts. Further, the present application enables a set of tasks to be grouped together as an API, enabling any user to create an API for a service, while the on-demand code execution environment manages execution of the tasks and allocation of underlying computing resources.

    PROCESSING PRE-EXISTING DATA SETS AT AN ON DEMAND CODE EXECUTION ENVIRONMENT

    公开(公告)号:US20170286143A1

    公开(公告)日:2017-10-05

    申请号:US15085902

    申请日:2016-03-30

    Abstract: Systems and methods are described for transforming a data set within a data source into a series of task calls to an on-demand code execution environment or other distributed code execution environment. Such environments utilize pre-initialized virtual machine instances to enable execution of user-specified code in a rapid manner, without delays typically caused by initialization of the virtual machine instances, and are often used to process data in near-real time, as it is created. However, limitations in computing resources may inhibit a user from utilizing an on-demand code execution environment to simultaneously process a large, existing data set. The present application provides a task generation system that can iteratively retrieve data items from an existing data set and generate corresponding task calls to the on-demand computing environment, while ensuring that at least one task call for each data item within the existing data set is made.

    Dependency-based process of pre-existing data sets at an on demand code execution environment

    公开(公告)号:US11132213B1

    公开(公告)日:2021-09-28

    申请号:US15085912

    申请日:2016-03-30

    Abstract: Systems and methods are described for transforming a data set within a data source into a series of task calls to an on-demand code execution environment. The environment can utilize pre-initialized virtual machine instances to enable execution of user-specified code in a rapid manner, without delays typically caused by initialization of the virtual machine instances, and are often used to process data in near-real time, as it is created. However, limitations in computing resources may inhibit a user from utilizing an on-demand code execution environment to simultaneously process a large, existing data set. The present application provides a task generation system that can iteratively retrieve data items from an existing data set and generate corresponding task calls to the on-demand computing environment. The calls can be ordered to address dependencies of the data items, such as when a first data item depends on prior processing of a second data item.

Patent Agency Ranking