公开(公告)号：US11818174B1

公开(公告)日：2023-11-14

申请号：US17104984

申请日：2020-11-25

Applicant: Amazon Technologies, Inc.

Inventor： Homer Strong

IPC: H04L9/40 ,  G06F16/903

CPC classification number: H04L63/20 ,  G06F16/90335

Abstract: An indication to perform a permissions policy search may be received by an interface of an identity management service. A context may be determined associated with the permissions policy search. A plurality of weights for a plurality of permissions policies may be calculated based on the context. An order for display of the plurality of permissions policies may be determined based on the plurality of weights. The plurality of permissions policies may be presented, in a display area within the interface, in the order that is based on the plurality of weights. A selection of a first permissions policy from the plurality of permissions policies may be received by the interface. The first permissions policy may be attached to a first identity based at least in part on the selection of the first permissions policy.

公开(公告)号：US11777991B2

公开(公告)日：2023-10-03

申请号：US17107082

申请日：2020-11-30

Applicant: Amazon Technologies, Inc.

Inventor： Homer Strong ,  Brigid Ann Johnson ,  Mathangi Ramesh

IPC: H04L9/40 ,  G06N7/01

CPC classification number: H04L63/20 ,  G06N7/01

Abstract: A first permission allocated to a first identity may be identified. Permission usage information may be analyzed. The permission usage information may include permission usage history information and permission usage pattern data. An estimated probability of a future usage of the first permission by the first identity may be forecasted based, at least in part, on the permission usage information. A first recommendation relating to allocation of the first permission to the first identity may be determined based, at least in part, on the estimated probability. The first recommendation may be a recommendation for the first identity to retain the first permission or a recommendation to deallocate the first permission from the first identity. An indication of the first recommendation may be provided to a user.

公开(公告)号：US11483353B1

公开(公告)日：2022-10-25

申请号：US17112849

申请日：2020-12-04

Applicant: Amazon Technologies, Inc.

Inventor： Jiasi Shen ,  Homer Strong ,  Daniel George Peebles ,  Neha Rungta

IPC: G06F15/173 ,  H04L9/40

Abstract: Access management policies may be generated from example requests. An access management policy may be received. One or more example requests that have expected results when evaluated with respect to the access management policy may be received. Updates to the access management policy may be determined that cause the expected results to occur when a new version of the access management policy based on the updates is enforced. The new version of the access management policy may be generated based on the updates.