公开(公告)号：US20180088964A1

公开(公告)日：2018-03-29

申请号：US15276700

申请日：2016-09-26

Applicant: Amazon Technologies, Inc.

Inventor： Amjad Hussain ,  Anand Doshi ,  Xiong Wang ,  Sivaprasad Venkata Padisetty

IPC: G06F9/44

Abstract: Methods, systems, and computer-readable media for resource configuration based on dynamic group membership are disclosed. An association between a group of computing resources and an intended state is stored. The intended state represents a computing resource configuration. During operation of a computing resource, whether the computing resource belongs to the group of computing resources is determined based at least in part on analysis of one or more attributes associated with the computing resource. Based at least in part on determining that the computing resource belongs to the group of computing resources, one or more actions are caused be performed to bring the computing resource into the intended state. The computing resource is executed while having the computing resource configuration represented by the intended state.

公开(公告)号：US09882855B1

公开(公告)日：2018-01-30

申请号：US14725364

申请日：2015-05-29

Applicant: Amazon Technologies, Inc.

Inventor： Steven Merlin Twitchell ,  Emily Grace Aimette Freebairn ,  Amjad Hussain ,  Sivaprasad Venkata Padisetty ,  Manivannan Sundaram ,  Aaron Jeremiah Sheldon

IPC: G06F15/16 ,  H04L12/58 ,  G06F9/455

CPC classification number: G06F9/45558 ,  G06F9/54 ,  G06F2009/4557 ,  G06F2009/45595 ,  H04L51/30 ,  H04L51/34

Abstract: A method for communicating messages between a service and a virtual machine instance may include receiving a message from a service. The message includes a target instance identification of at least one virtual machine instance (VMI) to receive the message. A notification of the message and the target instance identification is stored in a message queue for each of a plurality of host servers associated with a plurality of VMIs. The message is stored in a message store without storing at least a portion of the message in the message queue. A request for undelivered messages is received from a VMI associated with a customer account. In response to the request, it is determined that a local cache contains an indication that the message is undelivered, where the local cache is within at least one of the plurality of host server computers associated with the VMI sending the request.

公开(公告)号：US20170118247A1

公开(公告)日：2017-04-27

申请号：US14975376

申请日：2015-12-18

Applicant: Amazon Technologies, Inc.

Inventor： Amjad Hussain ,  Manivannan Sundaram ,  Sivaprasad Venkata Padisetty ,  Nikolaos Pamboukas ,  Alan Hadley Goodman

IPC: H04L29/06 ,  H04L12/24

CPC classification number: H04L63/20 ,  G06F21/62 ,  H04L41/22 ,  H04L41/28 ,  H04L63/105

Abstract: A selection of a document that includes a command and a parameter is received, and a user is caused to be associated with a policy that grants permission to execute the document. A request is received, from a requestor, to execute the document, the request including a parameter value, and the requestor is determined to be the user associated with the policy. The user is validated to have access to a resource indicated by the parameter value, and the command is caused to be executed against the resource.

公开(公告)号：US12061920B2

公开(公告)日：2024-08-13

申请号：US16715992

申请日：2019-12-16

Applicant: Amazon Technologies, Inc.

Inventor： Lekshmi Unnikrishnan ,  Manivannan Sundaram ,  Martin Chen Mao ,  Sivaprasad Venkata Padisetty ,  Praerit Garg ,  Sameer Palande ,  Bradley Scott Murphy ,  Manoj Krishna Ghosh

IPC: G06F9/455

CPC classification number: G06F9/45558 ,  G06F2009/4557

Abstract: A customer submits a request to a virtual computer system service to launch a virtual machine instance and to join this instance to a managed directory. The service may obtain, from the customer, a domain name and Internet Protocol addresses for the selected directory, which is then stored within a systems management server. When launched, the instance may initiate an agent, which may communicate with the systems management server to obtain the configuration information. The agent may use this configuration information to establish a communications channel with the managed directory and create a temporary set of computer credentials that may be used to verify that the customer is authorized to join the virtual machine instance to the managed directory. If the credentials are valid, the managed directory may generate a computer account within the managed directory, which may be used to join the virtual machine instance to the managed directory.

公开(公告)号：US11144513B1

公开(公告)日：2021-10-12

申请号：US15934792

申请日：2018-03-23

Applicant: Amazon Technologies, Inc.

Inventor： Sivaprasad Venkata Padisetty ,  Projesh Chowdhary ,  Volodymyr Drozdenko ,  Manivannan Sundaram ,  Jun He

IPC: G06F16/185 ,  G06F16/11 ,  G06F16/23 ,  G06F16/28

Abstract: A processing device determines that a parameter in a data store is associated with a parameter policy, wherein the parameter comprises a key-value pair and the parameter policy comprises metadata that affects a behavioral characteristic of the parameter. The processing device determines that a criterion included in the parameter policy is satisfied. The processing device determines one or more operations specified in the parameter policy and performs the one or more operations.

公开(公告)号：US20210160132A1

公开(公告)日：2021-05-27

申请号：US17111199

申请日：2020-12-03

Applicant: Amazon Technologies, Inc.

Inventor： Damian Gorman Wylie ,  James Alfred Gordon Greenfield ,  Michael Groenewald ,  Anand Rajender Kumar ,  Rajnesh Umeshraya Pai ,  Sivaprasad Venkata Padisetty ,  Georgios Elissaios ,  Scott Anthony Roberts

IPC: H04L12/24 ,  H04L29/08 ,  G06F9/50

Abstract: A virtual computer system service receives a request from a customer to provision a dedicated server for the exclusive use of the customer. The dedicated server may be used to launch one or more virtual machine instances. The virtual computer system service subsequently selects, from a pool of available servers, a server that can be dedicated to the customer and that does not have capacity allocated to any other customer. The virtual computer system service may update a database to specify, in an entry corresponding to the selected server, that the server has been dedicated for the exclusive use of the customer. Once the database has been updated, the virtual computer system service will enable the customer to launch a virtual machine instance using the dedicated server.

公开(公告)号：US10691501B1

公开(公告)日：2020-06-23

申请号：US15334124

申请日：2016-10-25

Applicant: Amazon Technologies, Inc.

Inventor： Amjad Hussain ,  Steven Merlin Twitchell ,  Emily Grace Aimette Freebairn ,  Sung Wook Kim ,  Sivaprasad Venkata Padisetty

IPC: G06F9/46 ,  G06F9/50 ,  G06F9/48

Abstract: A technology is described for invoking a command over a set of computing instances. An example method may include receiving a request to invoke a command over a set of computing instances managed within a service provider environment. In response, the computing instances included in the set of computing instances having an attribute may be identified and the command may be sent to the computing instances according to a send rate parameter specifying a rate at which the command is sent to a portion of the computing instances. Execution status indications may be received from the computing instances, wherein a number of errors indicated by the computing instances that exceeds an error threshold terminates execution of the command.

公开(公告)号：US10684840B1

公开(公告)日：2020-06-16

申请号：US15449208

申请日：2017-03-03

Applicant: Amazon Technologies, Inc.

Inventor： Amjad Hussain ,  Patrick McFalls ,  Matthew Adam Ford ,  Sivaprasad Venkata Padisetty

IPC: G06F8/61 ,  G06F9/455 ,  H04L29/08

Abstract: Software packages may be installed, uninstalled and/or updated across a group of computing instances by way of a single issuance of a user request. The request may include information such as a software package name, a software package version, an action (e.g., install or uninstall), and one or more operating constraints for the software package. For an installation request, an agent on a given computing instance may process the request by accessing a manifest that indicates various computing instance characteristics (e.g., operating system types, architecture types, etc.) and various respective available versions of the software package. The agent may then select, based on characteristics of the computing instance, a package type for the computing instance. An installation request may also allow operating constraints (e.g. regarding usage of processing, memory, I/O and other resources) to be set and enforced for the software package.

公开(公告)号：US10536332B1

公开(公告)日：2020-01-14

申请号：US15814104

申请日：2017-11-15

Applicant: Amazon Technologies, Inc.

Inventor： Amjad Hussain ,  Sivaprasad Venkata Padisetty ,  Steven Merlin Twitchell

IPC: H04L12/24 ,  G06F9/455 ,  H04L12/26

Abstract: A system for managing configuration of multiple computing systems associated with a customer in a cloud computing environment. A command associated with the desired configuration is identified for execution on a total quantity of instances associated with the customer system to be configured. An invocation rate parameter selected by the customer system is used to control a rate in which the configuration command is invoked on the targeted instances. Based on the invocation rate parameter, the system invokes the configuration command on identified portions or sets of the targeted instances during different stages of the configuration invocation.

公开(公告)号：US10509663B1

公开(公告)日：2019-12-17

申请号：US14614230

申请日：2015-02-04

Applicant: Amazon Technologies, Inc.

Inventor： Lekshmi Unnikrishnan ,  Manivannan Sundaram ,  Martin Chen Mao ,  Sivaprasad Venkata Padisetty ,  Praerit Garg ,  Sameer Palande ,  Bradley Scott Murphy ,  Manoj Krishna Ghosh

IPC: G06F9/455

Abstract: A customer submits a request to a virtual computer system service to launch a virtual machine instance and to join this instance to a managed directory. The service may obtain, from the customer, a domain name and Internet Protocol addresses for the selected directory, which is then stored within a systems management server. When launched, the instance may initiate an agent, which may communicate with the systems management server to obtain the configuration information. The agent may use this configuration information to establish a communications channel with the managed directory and create a temporary set of computer credentials that may be used to verify that the customer is authorized to join the virtual machine instance to the managed directory. If the credentials are valid, the managed directory may generate a computer account within the managed directory, which may be used to join the virtual machine instance to the managed directory.