Customized command execution for a computing resource fleet

    公开(公告)号:US11108702B1

    公开(公告)日:2021-08-31

    申请号:US15838050

    申请日:2017-12-11

    Abstract: A virtual computer system management service receives input from a user specifying operations to be performed by a web-based service. The input includes an indication of a set of resources to be used to perform the operations and control information to control the set of resources to perform the operations. The virtual computer system management service configures the resources to perform the operations according to the control information. This causes the set of resources to perform the operations and provide a result. The virtual computer system management service provides this result to the user.

    Facilitation of secure communications between a client and computing instance

    公开(公告)号:US11038847B1

    公开(公告)日:2021-06-15

    申请号:US16000070

    申请日:2018-06-05

    Abstract: This disclosure is directed to one or more computing services that provide users with secure access to a computing instance, which is auditable and accessible via a cross-platform browser-based shell or command-line interface (CLI). The computing service(s) forego any need to open up inbound ports, thereby improving security. The computing service(s) employ centralized authentication and auditing to ensure compliance with policies and to log activities for auditing, forensics, or other purposes. A message gateway service creates secure channels with a client device and the computing instance to establish a secure communication tunnel between the client device and computing instance. Once the tunnel is established, a user can send a command via the client device to the computing instance, via the message gateway service. The command output is uploaded to this tunnel and is sent back to the client device, via the message gateway service.

    Multi-homed computing instance processes

    公开(公告)号:US10824476B1

    公开(公告)日:2020-11-03

    申请号:US15628108

    申请日:2017-06-20

    Abstract: Techniques for operating a multi-homed computing instance process are described herein. First credentials associated with a first attribute of a first account may be obtained. A process executing on a computing instance may communicate with the first account over a first communication channel based at least in part on the first credentials. Instructions may be received for the process to communicate with both the first account and a second account. Second credentials associated with a second attribute of the second account may be obtained. The second credentials may be obtained based, at least in part, on the first attribute acquiring the second attribute. The process may communicate with the second account over a second communication channel based at least in part on the second credentials. Additionally, the process may communicate with multiple different representations of a particular account, such as different representations that are hosted in different respective regions.

    Resolving configuration drift for computing resource stacks

    公开(公告)号:US10778539B1

    公开(公告)日:2020-09-15

    申请号:US16220719

    申请日:2018-12-14

    Abstract: This disclosure describes techniques for resolving discrepancies that occur to interrelated computing resources from computing resource drift. Users may describe computing resources in an infrastructure template. However, computing resource drift occurs when “out-of-band” modifications are made to the computing resources and are not reflected in the infrastructure template. To resolve discrepancies between the infrastructure template and the out-of-band modifications to the computing resources, a notification may be output to a user account associated with the computing resources detailing the differences. An updated infrastructure template may be received that resolves the differences, such as by including configuration settings that reflect a current state of the computing resources. The computing resources may then execute a workflow using the updated template, such that the workflow is executed on all of the computing resources in a current state.

    Controlling permissions for remote management of computing resources

    公开(公告)号:US10771337B1

    公开(公告)日:2020-09-08

    申请号:US15989836

    申请日:2018-05-25

    Abstract: This disclosure describes techniques for defining a set of permissions, or privileges, for users who manage resources of a network-based service provisioned in a network-based service platform managed by a service provider. The techniques may include mapping cloud identities of the users to operating system (OS) user groups defined local to the resources that specify the set of permissions for user group members. Systems-manager agents that execute locally on the resources may determine to which OS user group the user belongs based on their cloud identity, and launch shells that are restricted by the set of permissions. Using these shells, a network-based service platform may allow users to remotely manage resources of the network-based service in various ways, such as through batch run commands and/or remote user sessions, while ensuring that the users are unable to execute commands on the resources that are outside the set of permissions.

    RECONFIGURATION RATE-CONTROL
    40.
    发明申请

    公开(公告)号:US20200264909A1

    公开(公告)日:2020-08-20

    申请号:US16865927

    申请日:2020-05-04

    Abstract: A state management server applies configuration information to a set of virtual computer system instances in accordance with one or more limitations specified by an administrator. In an embodiment, the limitations include a velocity parameter that limits the number of virtual computer system instances to which the configuration may be applied concurrently. In an embodiment, the limitations include an error threshold that stops the application of the configuration if the number of configuration failures meets or exceeds the error threshold. In an embodiment, the set of virtual computer systems is identified by providing a list of the individual virtual computer system instances, or by specifying one or more tags that are associated with the virtual computer systems in the set. In an embodiment, the administrator is able to specify that an association be applied according to a predetermined schedule.

Patent Agency Ranking