-
公开(公告)号:US11799742B2
公开(公告)日:2023-10-24
申请号:US17897524
申请日:2022-08-29
Applicant: Amazon Technologies, Inc.
Inventor: Amjad Hussain , Anil Kumar , Ryan John Lohan , Diwakar Chakravarthy , Julio Cesar dos Santos Lins , Prabhu Anand Nakkeeran
IPC: H04L41/5025 , H04L41/5041 , H04L41/5054 , H04L41/22 , H04L41/0813 , H04L47/70 , H04L41/0866
CPC classification number: H04L41/5025 , H04L41/0813 , H04L41/0866 , H04L41/22 , H04L41/5048 , H04L41/5054 , H04L47/70
Abstract: This disclosure describes techniques for resolving discrepancies that occur to interrelated computing resources from computing resource drift. Users may describe computing resources in an infrastructure template. However, computing resource drift occurs when “out-of-band” modifications are made to the computing resources and are not reflected in the infrastructure template. To resolve discrepancies between the infrastructure template and the out-of-band modifications to the computing resources, a notification may be output to a user account associated with the computing resources detailing the differences. An updated infrastructure template may be received that resolves the differences, such as by including configuration settings that reflect a current state of the computing resources. The computing resources may then execute a workflow using the updated template, such that the workflow is executed on all of the computing resources in a current state.
-
公开(公告)号:US11620121B1
公开(公告)日:2023-04-04
申请号:US17033503
申请日:2020-09-25
Applicant: Amazon Technologies, Inc.
Inventor: Mats Erik Lanner , Derek Ying Chen Kwiatkowski , Katherine Elizabeth Shaffer , Sivaprasad Venkata Padisetty , Sundaresan Ramamoorthy , Robert Glenn Hearn , Amjad Hussain , Daniel Francis Conde , Lavanya Krishnan
IPC: G06F9/445 , G06F8/65 , H04L67/75 , H04L67/306
Abstract: This disclosure describes techniques for providing users of services provided by network-based service platforms with additional control for approving patches that are to be deployed to computing resources that support their services. In some examples, the techniques include generating and using a “snapshot,” or list, of patches that are preliminarily approved for deployment. Prior to deploying the patches to the computing resources, users are provided with access to the snapshot and are able to modify the snapshot. For example, users can modify the snapshot by adding patches, removing patches, specifying a sequence in which the patches are to be deployed, and so forth. The snapshot of patches may be “frozen” for a period of time, meaning that patches that during the period of time, only patches in the snapshot are deployed, and patches that are not included in the snapshot are not permitted to be deployed to computing resources.
-
公开(公告)号:US20230044491A1
公开(公告)日:2023-02-09
申请号:US17897524
申请日:2022-08-29
Applicant: Amazon Technologies, Inc.
Inventor: Amjad Hussain , Anil Kumar , Ryan John Lohan , Diwakar Chakravarthy , Julio Cesar dos Santos Lins , Prabhu Anand Nakkeeran
IPC: H04L41/5025 , H04L41/5041 , H04L41/5054 , H04L41/22 , H04L41/0813 , H04L47/70 , H04L41/0866
Abstract: This disclosure describes techniques for resolving discrepancies that occur to interrelated computing resources from computing resource drift. Users may describe computing resources in an infrastructure template. However, computing resource drift occurs when “out-of-band” modifications are made to the computing resources and are not reflected in the infrastructure template. To resolve discrepancies between the infrastructure template and the out-of-band modifications to the computing resources, a notification may be output to a user account associated with the computing resources detailing the differences. An updated infrastructure template may be received that resolves the differences, such as by including configuration settings that reflect a current state of the computing resources. The computing resources may then execute a workflow using the updated template, such that the workflow is executed on all of the computing resources in a current state.
-
公开(公告)号:US11113186B1
公开(公告)日:2021-09-07
申请号:US16714399
申请日:2019-12-13
Applicant: Amazon Technologies, Inc.
Inventor: Amjad Hussain , Diwakar Chakravarthy , Ryan John Lohan , Sayali Suhas Deshpande , Xiaodong Ma , Bharath Swaminathan
IPC: G06F9/44 , G06F8/41 , G06F11/36 , G06F8/71 , G06F8/34 , G06F11/34 , G06F11/07 , G06F11/20 , G06F8/36 , G06F8/60 , G06F8/33
Abstract: This disclosure describes techniques for testing and publishing of resource handlers in a cloud environment. For example, a code-development interface may be utilized to generate initial code for the building of resource handlers. The initial code may be verified and the resource handlers may be built and deployed to a test platform. One or more execution tests may be run on the resource handlers in the test platform to determine if the resource handlers execute successfully. The resource type associated with the resource handlers may be published to a registry service and the resource type may be made available for provisioning.
-
公开(公告)号:US11108702B1
公开(公告)日:2021-08-31
申请号:US15838050
申请日:2017-12-11
Applicant: Amazon Technologies, Inc.
Inventor: Steven Merlin Twitchell , Amjad Hussain , Sivaprasad Venkata Padisetty
IPC: H04L12/911 , G06F9/455
Abstract: A virtual computer system management service receives input from a user specifying operations to be performed by a web-based service. The input includes an indication of a set of resources to be used to perform the operations and control information to control the set of resources to perform the operations. The virtual computer system management service configures the resources to perform the operations according to the control information. This causes the set of resources to perform the operations and provide a result. The virtual computer system management service provides this result to the user.
-
公开(公告)号:US11038847B1
公开(公告)日:2021-06-15
申请号:US16000070
申请日:2018-06-05
Applicant: Amazon Technologies, Inc.
IPC: H04L29/06
Abstract: This disclosure is directed to one or more computing services that provide users with secure access to a computing instance, which is auditable and accessible via a cross-platform browser-based shell or command-line interface (CLI). The computing service(s) forego any need to open up inbound ports, thereby improving security. The computing service(s) employ centralized authentication and auditing to ensure compliance with policies and to log activities for auditing, forensics, or other purposes. A message gateway service creates secure channels with a client device and the computing instance to establish a secure communication tunnel between the client device and computing instance. Once the tunnel is established, a user can send a command via the client device to the computing instance, via the message gateway service. The command output is uploaded to this tunnel and is sent back to the client device, via the message gateway service.
-
公开(公告)号:US10824476B1
公开(公告)日:2020-11-03
申请号:US15628108
申请日:2017-06-20
Applicant: Amazon Technologies, Inc.
Inventor: Shihua Zhang , Patrick McFalls , Amjad Hussain , Sivaprasad Venkata Padisetty
Abstract: Techniques for operating a multi-homed computing instance process are described herein. First credentials associated with a first attribute of a first account may be obtained. A process executing on a computing instance may communicate with the first account over a first communication channel based at least in part on the first credentials. Instructions may be received for the process to communicate with both the first account and a second account. Second credentials associated with a second attribute of the second account may be obtained. The second credentials may be obtained based, at least in part, on the first attribute acquiring the second attribute. The process may communicate with the second account over a second communication channel based at least in part on the second credentials. Additionally, the process may communicate with multiple different representations of a particular account, such as different representations that are hosted in different respective regions.
-
公开(公告)号:US10778539B1
公开(公告)日:2020-09-15
申请号:US16220719
申请日:2018-12-14
Applicant: Amazon Technologies, Inc.
Inventor: Amjad Hussain , Anil Kumar , Ryan John Lohan , Diwakar Chakravarthy , Julio Cesar dos Santos Lins , Prabhu Anand Nakkeeran
IPC: H04L12/24 , H04L12/911
Abstract: This disclosure describes techniques for resolving discrepancies that occur to interrelated computing resources from computing resource drift. Users may describe computing resources in an infrastructure template. However, computing resource drift occurs when “out-of-band” modifications are made to the computing resources and are not reflected in the infrastructure template. To resolve discrepancies between the infrastructure template and the out-of-band modifications to the computing resources, a notification may be output to a user account associated with the computing resources detailing the differences. An updated infrastructure template may be received that resolves the differences, such as by including configuration settings that reflect a current state of the computing resources. The computing resources may then execute a workflow using the updated template, such that the workflow is executed on all of the computing resources in a current state.
-
公开(公告)号:US10771337B1
公开(公告)日:2020-09-08
申请号:US15989836
申请日:2018-05-25
Applicant: Amazon Technologies, Inc.
Inventor: Munindra N. Das , Patrick McFalls , Amjad Hussain , Anantharam Vaidyanathan
IPC: G06F15/173 , H04L12/24 , H04L12/911 , H04L29/06 , G06F9/455
Abstract: This disclosure describes techniques for defining a set of permissions, or privileges, for users who manage resources of a network-based service provisioned in a network-based service platform managed by a service provider. The techniques may include mapping cloud identities of the users to operating system (OS) user groups defined local to the resources that specify the set of permissions for user group members. Systems-manager agents that execute locally on the resources may determine to which OS user group the user belongs based on their cloud identity, and launch shells that are restricted by the set of permissions. Using these shells, a network-based service platform may allow users to remotely manage resources of the network-based service in various ways, such as through batch run commands and/or remote user sessions, while ensuring that the users are unable to execute commands on the resources that are outside the set of permissions.
-
公开(公告)号:US20200264909A1
公开(公告)日:2020-08-20
申请号:US16865927
申请日:2020-05-04
Applicant: Amazon Technologies, Inc.
Inventor: Samuel Seung Keun Carl , Amjad Hussain , Upender Sandadi , Anupam Shrivastava
Abstract: A state management server applies configuration information to a set of virtual computer system instances in accordance with one or more limitations specified by an administrator. In an embodiment, the limitations include a velocity parameter that limits the number of virtual computer system instances to which the configuration may be applied concurrently. In an embodiment, the limitations include an error threshold that stops the application of the configuration if the number of configuration failures meets or exceeds the error threshold. In an embodiment, the set of virtual computer systems is identified by providing a list of the individual virtual computer system instances, or by specifying one or more tags that are associated with the virtual computer systems in the set. In an embodiment, the administrator is able to specify that an association be applied according to a predetermined schedule.
-
-
-
-
-
-
-
-
-