公开(公告)号：US09715400B1

公开(公告)日：2017-07-25

申请号：US14754359

申请日：2015-06-29

Applicant: Amazon Technologies, Inc.

Inventor： Ekanth Sethuramalingam ,  Amita Ekbote ,  Hari Subramanian ,  Nagaraju Shiramshetti ,  Sudharsan Balakrishnan Sripadham ,  Raviprasad Venkatesha Murthy Mummidi ,  Sophia Yeemei Tsang

IPC: G06F9/455 ,  G06F9/48

CPC classification number: G06F9/45533 ,  G06F9/44505 ,  G06F9/4856

Abstract: Techniques are described for importing and using virtual machine images in configured manners, such as by a virtual machine image importation service on behalf of clients. An image may be retrieved based on a client-provided location, and various characteristics of the image may be identified via application of multiple heuristic or other assessment tests to various aspects of the retrieved image such as a master boot record, filesystem, or directory structure of the image to determine a testing vector that is compared to identification vectors associated with known operating systems, in order to automatically determine a specific operating system installed on the image to be imported. Modifications may be made to drivers, configuration and system files of the retrieved image based on the identified operating system and other image characteristics.

公开(公告)号：US20170099299A1

公开(公告)日：2017-04-06

申请号：US15384182

申请日：2016-12-19

Applicant: Amazon Technologies, Inc.

Inventor： Wesley Marlin Sutton ,  Apolak Borthakur ,  Derek Avery Lyon ,  Raviprasad Venkatesha Murthy Mummidi ,  Karthikeyan Natarajan

IPC: H04L29/06

CPC classification number: H04L63/105 ,  H04L63/0815 ,  H04L63/083 ,  H04L63/10

Abstract: A computing resource service provider may receive, from a user client connected to an on-premises network, a security document specifying one or more user roles defining a level of access to customer resources within the on-premises network. In response, the service provider may generate and provide the user client with a cookie specifying the user roles and including an address for an interface within the service provider network. The service provider may receive a request from the user client to access one or more customer resources hosted by the service provider. The request may include the cookie previously provided to the user client. Accordingly, the service provider may extract the user roles from the cookie and determine, based at least in part on these user roles, whether to fulfill the user client request.

公开(公告)号：US09531719B1

公开(公告)日：2016-12-27

申请号：US14265158

申请日：2014-04-29

Applicant: Amazon Technologies, Inc.

Inventor： Wesley Marlin Sutton ,  Apolak Borthakur ,  Derek Avery Lyon ,  Raviprasad Venkatesha Murthy Mummidi ,  Karthikeyan Natarajan

IPC: H04L29/06

CPC classification number: H04L63/105 ,  H04L63/0815 ,  H04L63/083 ,  H04L63/10

Abstract: A computing resource service provider may receive, from a user client connected to an on-premises network, a security document specifying one or more user roles defining a level of access to customer resources within the on-premises network. In response, the service provider may generate and provide the user client with a cookie specifying the user roles and including an address for an interface within the service provider network. The service provider may receive a request from the user client to access one or more customer resources hosted by the service provider. The request may include the cookie previously provided to the user client. Accordingly, the service provider may extract the user roles from the cookie and determine, based at least in part on these user roles, whether to fulfill the user client request.

Abstract translation: 计算资源服务提供商可以从连接到内部部署网络的用户客户端接收指定一个或多个用户角色的安全文档，该用户角色定义对本地网络内的客户资源的访问级别。 作为响应，服务提供商可以生成并向用户客户端提供指定用户角色并且包括服务提供商网络内的接口的地址的cookie。 服务提供商可以接收来自用户客户端的访问由服务提供商托管的一个或多个客户资源的请求。 该请求可以包括之前提供给用户客户端的cookie。 因此，服务提供商可以从cookie提取用户角色，并且至少部分地基于这些用户角色来确定是否满足用户客户端请求。

公开(公告)号：US20220164104A1

公开(公告)日：2022-05-26

申请号：US17670342

申请日：2022-02-11

Applicant: Amazon Technologies, Inc.

Inventor： Raviprasad Venkatesha Murthy Mummidi ,  Matthew Shawn Wilson ,  Anthony Nicholas Liguori ,  Nafea Bshara ,  Saar Gross ,  Jaspal Kohli

IPC: G06F3/06 ,  G06F12/14 ,  G06F13/20 ,  G06F13/40

Abstract: A peripheral device may implement storage virtualization for non-volatile storage devices connected to the peripheral device. A host system connected to the peripheral device may host one or multiple virtual machines. The peripheral device may implement different virtual interfaces for the virtual machines or the host system that present a storage partition at a non-volatile storage device to the virtual machine or host system for storage. Access requests from the virtual machines or host system are directed to the respective virtual interface at the peripheral device. The peripheral device may perform data encryption or decryption, or may perform throttling of access requests. The peripheral device may generate and send physical access requests to perform the access requests received via the virtual interfaces to the non-volatile storage devices. Completion of the access requests may be indicated to the virtual machines via the virtual interfaces.

公开(公告)号：US20190294328A1

公开(公告)日：2019-09-26

申请号：US16435372

申请日：2019-06-07

Applicant: Amazon Technologies, Inc.

Inventor： Raviprasad Venkatesha Murthy Mummidi ,  Matthew Shawn Wilson ,  Anthony Nicholas Liguori ,  Nafea Bshara ,  Saar Gross ,  Jaspal Kohli

IPC: G06F3/06 ,  G06F12/14 ,  G06F13/40 ,  G06F13/20

Abstract: A peripheral device may implement storage virtualization for non-volatile storage devices connected to the peripheral device. A host system connected to the peripheral device may host one or multiple virtual machines. The peripheral device may implement different virtual interfaces for the virtual machines or the host system that present a storage partition at a non-volatile storage device to the virtual machine or host system for storage. Access requests from the virtual machines or host system are directed to the respective virtual interface at the peripheral device. The peripheral device may perform data encryption or decryption, or may perform throttling of access requests. The peripheral device may generate and send physical access requests to perform the access requests received via the virtual interfaces to the non-volatile storage devices. Completion of the access requests may be indicated to the virtual machines via the virtual interfaces.

公开(公告)号：US10318162B2

公开(公告)日：2019-06-11

申请号：US15279352

申请日：2016-09-28

Applicant: Amazon Technologies, Inc.

Inventor： Raviprasad Venkatesha Murthy Mummidi ,  Matthew Shawn Wilson ,  Anthony Nicholas Liguori ,  Nafea Bshara ,  Saar Gross ,  Jaspal Kohli

IPC: G06F13/00 ,  G06F3/06 ,  G06F12/14 ,  G06F13/20 ,  G06F13/40

Abstract: A peripheral device may implement storage virtualization for non-volatile storage devices connected to the peripheral device. A host system connected to the peripheral device may host one or multiple virtual machines. The peripheral device may implement different virtual interfaces for the virtual machines or the host system that present a storage partition at a non-volatile storage device to the virtual machine or host system for storage. Access requests from the virtual machines or host system are directed to the respective virtual interface at the peripheral device. The peripheral device may perform data encryption or decryption, or may perform throttling of access requests. The peripheral device may generate and send physical access requests to perform the access requests received via the virtual interfaces to the non-volatile storage devices. Completion of the access requests may be indicated to the virtual machines via the virtual interfaces.

公开(公告)号：US20170322823A1

公开(公告)日：2017-11-09

申请号：US15658119

申请日：2017-07-24

Applicant: Amazon Technologies, Inc.

Inventor： Ekanth Sethuramalingam ,  Amita Ekbote ,  Hari Subramanian ,  Nagaraju Shiramshetti ,  Sudharsan Balakrishnan Sripadham ,  Raviprasad Venkatesha Murthy Mummidi ,  Sophia Yeemei Tsang

IPC: G06F9/455 ,  G06F9/48

CPC classification number: G06F9/45533 ,  G06F9/44505 ,  G06F9/4856

Abstract: Techniques are described for importing and using virtual machine images in configured manners, such as by a virtual machine image importation service on behalf of clients. An image may be retrieved based on a client-provided location, and various characteristics of the image may be identified via application of multiple heuristic or other assessment tests to various aspects of the retrieved image such as a master boot record, filesystem, or directory structure of the image to determine a testing vector that is compared to identification vectors associated with known operating systems, in order to automatically determine a specific operating system installed on the image to be imported. Modifications may be made to drivers, configuration and system files of the retrieved image based on the identified operating system and other image characteristics.

公开(公告)号：US09792141B1

公开(公告)日：2017-10-17

申请号：US14788221

申请日：2015-06-30

Applicant: Amazon Technologies, Inc.

Inventor： Ekanth Sethuramalingam ,  Raviprasad Venkatesha Murthy Mummidi ,  Derek Avery Lyon

IPC: G06F9/455

CPC classification number: G06F9/45558 ,  G06F8/63 ,  G06F2009/45562

Abstract: Techniques are described for generating and using virtual machine images and other software images in configured manners, such as by an image generating service on behalf of clients. An image may be configured to include or use multiple underlying components to construct the image, and specified configuration information may cause the generating process for the image to be triggered when underlying construction components change or otherwise when specified triggering conditions are satisfied. For example, an image to be manufactured may include a software program under development by a software developer client, with code files used to create the software program being among the construction components, such that client actions involving those code files (e.g., committing a new version with recent changes to a code repository) triggers a new version of the image to be manufactured that incorporates those changes.

公开(公告)号：US09424062B1

公开(公告)日：2016-08-23

申请号：US14223707

申请日：2014-03-24

Applicant: Amazon Technologies, Inc.

Inventor： Raviprasad Venkatesha Murthy Mummidi ,  Hariharan Subramanian ,  Bhagyalaxmi Bethala ,  Ekanth Sethuramalingam ,  Apolak Borthakur

IPC: G06F9/455

CPC classification number: G06F9/45558 ,  G06F2009/45575

Abstract: Remote computing resource service providers allow customers to execute one or more applications in a virtual environment on computer systems provided by the computing resource service provider. The customer applications are generally executed by multiple virtual machine instances working together. The virtual machines may be managed by a hypervisor executing on computer systems operated by the service provider. Different hypervisors may support different features and have different capabilities. Customers may wish to execute the one or more applications on a particular hypervisor in order to utilize certain features. A control plane may be used to facilitate management of the virtual environment by one or more services of the computing resource service provider.

Abstract translation: 远程计算资源服务提供商允许客户在由计算资源服务提供商提供的计算机系统上的虚拟环境中执行一个或多个应用。 客户应用程序通常由多个虚拟机实例一起执行。 虚拟机可以由在由服务提供商操作的计算机系统上执行的管理程序来管理。 不同的管理程序可能支持不同的功能，具有不同的功能。 客户可能希望在特定管理程序上执行一个或多个应用程序，以便利用某些功能。 可以使用控制平面来促进由计算资源服务提供商的一个或多个服务来管理虚拟环境。