公开(公告)号：US20240211461A1

公开(公告)日：2024-06-27

申请号：US18601916

申请日：2024-03-11

Applicant: Amazon Technologies, Inc.

Inventor： Timothy Daniel Cole ,  John Michael Morkel ,  Tate Andrew Certain ,  Christopher Richard Jacques de Kadt ,  Artem Danilov ,  Andrew Wayne Ross ,  Allan Henry Vermeulen

IPC: G06F16/23 ,  G06F16/27 ,  G06F16/28

CPC classification number: G06F16/2315 ,  G06F16/2372 ,  G06F16/2393 ,  G06F16/27 ,  G06F16/278 ,  G06F16/284

Abstract: A materialization configuration request is received via a programmatic interface from a client of a journal-based multi-data-store database. The request indicates a partitioning rule to be used to select, for respective writes indicated in committed transaction entries of a journal, the materialization node at which the writes are to be stored. A control plane component of the database verifies that a set of materialization nodes corresponding to the partitioning rule has been established, and initiates the propagation of writes from the journal to the materialization nodes by respective write appliers.

公开(公告)号：US20220231860A1

公开(公告)日：2022-07-21

申请号：US17517577

申请日：2021-11-02

Applicant: Amazon Technologies, Inc.

Inventor： Tate Andrew Certain ,  Yannis Papakonstantinou ,  Allan Henry Vermeulen ,  Christopher Richard Jacques de Kadt

IPC: H04L9/32 ,  G06F16/22 ,  G06F16/23 ,  G06F16/27

Abstract: A database management system receives a request to perform a transaction. The database management system commits the transaction, and in response to committing the transaction, generates a cryptographic hash based on an attribute of the transaction. The cryptographic hash is stored in a leaf-region of a hash tree. In response to a request to verify the transaction, signatures are retrieved from the tree based on a traversal of the tree to locate the node corresponding to the transaction. The retrieved signatures are used to verify the transaction.

公开(公告)号：US20200167424A1

公开(公告)日：2020-05-28

申请号：US16200600

申请日：2018-11-26

Applicant: Amazon Technologies, Inc.

Inventor： Tate A. Certain ,  Yannis Papakonstantinou ,  Allan Henry Vermeulen ,  Christopher Richard Jacques de Kadt

IPC: G06F17/30

Abstract: A database management system receives a request to create an index for a virtual view of a database table. In response to the request, the database management system identifies relationships between the columns of the virtual view and columns of the database table. The database management system generates an index on the database table, where columns are included in the generated index based on the identified relationships and the definition of the virtual view. Queries of the virtual view are assisted by the generated index of the underlying table.

公开(公告)号：US10666569B1

公开(公告)日：2020-05-26

申请号：US15275296

申请日：2016-09-23

Applicant: Amazon Technologies, Inc.

Inventor： Christopher Richard Jacques de Kadt ,  Benjamin Warren Mercier ,  Carlos Vara Callau ,  Timothy Daniel Cole ,  Aaron Gifford Freshwater ,  Sayantan Chakravorty ,  Allan Henry Vermeulen

IPC: G06F11/14 ,  G06F16/18 ,  G06F16/23 ,  H04L12/911 ,  H04L29/08

Abstract: A journal service manages a journal that holds a number of journal entries. Journal entries are provided to the journal service by one or more producer services, and the journal service provides journal entries to one or more consumer services. Lead consumers retrieve journal entries from the journal service by specifying a named cursor which identifies a location within the journal from which the journal entries are retrieved. The journal service may select a lead producer and a lead consumer from a collection of candidate producers and consumers using a fitness score determined for each candidate producer and consumer. The fitness score may be based at least in part on the processing capability, predicted reliability, and cost of each candidate producer and consumer. The journal service may replace a lead consumer or producer with an alternate consumer or producer in response to a variety of events.

公开(公告)号：US10601683B1

公开(公告)日：2020-03-24

申请号：US15382856

申请日：2016-12-19

Applicant: Amazon Technologies, Inc.

Inventor： Rohit Kulshreshtha ,  Christopher Richard Jacques de Kadt ,  Carlos Vara Callau

IPC: H04L29/08 ,  G06F11/00 ,  H04L12/24 ,  G06F11/07 ,  G06F11/20 ,  G06F9/50

Abstract: Technologies are disclosed for improving the availability of a distributed application by computing scores for the application that indicate the extent to which the configuration of hosts implementing the application complies with best practices for maximizing availability. One score can be generated for the application based upon the physical location of the hosts used to implement the application and the components upon which the application is dependent. Another score can be generated for the application based upon the number of data centers that hosts executing the application are located in as compared to a minimum required number of data centers. Another score can be generated for the application based upon the distribution of hosts utilized to execute the application across data centers. Operations can be initiated for improving the scores, such as migrating a host to a new rack or server, or migrating a host to a different data center.

公开(公告)号：US10469500B1

公开(公告)日：2019-11-05

申请号：US15470495

申请日：2017-03-27

Applicant: Amazon Technologies, Inc.

Inventor： Marvin M. Theimer ,  Eric Jason Brandwine ,  Marc J. Brooker ,  David Everard Brown ,  Christopher Richard Jacques de Kadt

IPC: G06F15/173 ,  H04L29/06 ,  G06F9/445 ,  G06F9/455

Abstract: Users intending to launch instances or otherwise access virtual resources in a multi-tenant environment can specify a launch configuration. For each type of instance or each type of user, at least one launch configuration is created that includes parameters and values to be used in instantiating an instance of that type, the values being optimized for the current environment and type of instance. Launch configurations can be optimized for different types of users, such as to account for security credentials and access levels. Such an approach enables users to launch instances by contacting the resource provider directly without need for a proxy, which can function as a choke point under heavy load. The use of an appropriate launch configuration can be enforced for any type of user at any level, such as at the sub-net level, by modifying a request that does not specify an appropriate launch configuration.

公开(公告)号：US10097531B2

公开(公告)日：2018-10-09

申请号：US15276691

申请日：2016-09-26

Applicant: Amazon Technologies, Inc.

Inventor： Marc J. Brooker ,  Mark Joseph Cavage ,  David Brown ,  Kevin Ross O'Neill ,  Eric Jason Brandwine ,  Christopher Richard Jacques de Kadt

IPC: H04L29/06 ,  G06F21/45 ,  G06F21/44 ,  H04L9/32

Abstract: A plurality of virtual computing resources is detected to have been provisioned. Credentials are distributed to the plurality of virtual computing resources. A credentials map that maps the credentials to the plurality of virtual computing resources is updated. The credentials for the plurality of virtual computing resources are activated to enable the plurality of virtual computing resources to use the credentials to authenticate to a second computer system that manages a resource service, with the credentials being inaccessible to resources of the resource service. A virtual computing resource of the plurality of virtual computing resources is detected to been deprovisioned, and the credentials for the virtual computing resource are deactivated.

公开(公告)号：US20170012958A1

公开(公告)日：2017-01-12

申请号：US15276691

申请日：2016-09-26

Applicant: Amazon Technologies, Inc.

Inventor： Marc J. Brooker ,  Mark Joseph Cavage ,  David Brown ,  Kevin Ross O'Neill ,  Eric Jason Brandwine ,  Christopher Richard Jacques de Kadt

IPC: H04L29/06 ,  G06F21/44

CPC classification number: H04L63/08 ,  G06F21/44 ,  H04L9/3247 ,  H04L63/10 ,  H04L63/20

Abstract: A plurality of virtual computing resources is detected to have been provisioned. Credentials are distributed to the plurality of virtual computing resources. A credentials map that maps the credentials to the plurality of virtual computing resources is updated. The credentials for the plurality of virtual computing resources are activated to enable the plurality of virtual computing resources to use the credentials to authenticate to a second computer system that manages a resource service, with the credentials being inaccessible to resources of the resource service. A virtual computing resource of the plurality of virtual computing resources is detected to been deprovisioned, and the credentials for the virtual computing resource are deactivated.

Abstract translation: 检测到多个虚拟计算资源被提供。 凭证分配给多个虚拟计算资源。 更新将凭证映射到多个虚拟计算资源的凭证图。 多个虚拟计算资源的凭证被激活，以使得多个虚拟计算资源能够使用证书来对管理资源服务的第二计算机系统进行身份验证，其中凭证对于资源服务的资源是不可访问的。 检测到多个虚拟计算资源的虚拟计算资源被取消配置，并且虚拟计算资源的凭证被去激活。

公开(公告)号：US09471352B1

公开(公告)日：2016-10-18

申请号：US14089644

申请日：2013-11-25

Applicant: Amazon Technologies, Inc.

Inventor： Gustav Karl Mauer ,  André Mostert ,  Christopher Richard Jacques de Kadt ,  Christopher Anthony Romanzin ,  James Alfred Gordon Greenfield

IPC: G06F9/46 ,  G06F9/455

CPC classification number: G06F9/45558 ,  G06F2009/45562 ,  G06F2009/4557 ,  G06F2009/45591

Abstract: Capability based placement can be used for placing virtual machine instances on server computers (which can be configured to support one or more virtual machine slots) that are capable of running the instances in an efficient manner. For example, capability tags can be determined from the detailed characteristics (e.g., detailed hardware, software, and/or other characteristics) of the server computer and/or slots. For example, capability tags can indicate capabilities such as disk throughput, network bandwidth, database support, encryption support, video editing support, etc. Requests to launch virtual machine instances can be received and capability tags can be determined from the requests. Servers and/or slots that match the determined capability tags can be identified and used for launching the instances.

Abstract translation: 基于能力的布局可用于将虚拟机实例放置在能够以有效方式运行实例的服务器计算机（可配置为支持一个或多个虚拟机插槽）上。 例如，可以从服务器计算机和/或时隙的详细特征（例如，详细的硬件，软件和/或其它特征）来确定能力标签。 例如，能力标签可以指示诸如磁盘吞吐量，网络带宽，数据库支持，加密支持，视频编辑支持等功能。可以接收启动虚拟机实例的请求，并且可以根据请求确定能力标签。 可以识别与确定的能力标签匹配的服务器和/或时隙，并用于启动实例。

公开(公告)号：US09009323B1

公开(公告)日：2015-04-14

申请号：US13967146

申请日：2013-08-14

Applicant: Amazon Technologies, Inc.

Inventor： Marvin M. Theimer ,  Eric Jason Brandwine ,  Marc J. Brooker ,  David Everard Brown ,  Christopher Richard Jacques de Kadt

IPC: G06F15/173 ,  H04L29/06

CPC classification number: H04L63/20 ,  G06F9/44505

Abstract: Users intending to launch instances or otherwise access virtual resources in a multi-tenant environment can specify a launch configuration. For each type of instance or each type of user, at least one launch configuration is created that includes parameters and values to be used in instantiating an instance of that type, the values being optimized for the current environment and type of instance. Launch configurations can be optimized for different types of users, such as to account for security credentials and access levels. Such an approach enables users to launch instances by contacting the resource provider directly without need for a proxy, which can function as a choke point under heavy load. The use of an appropriate launch configuration can be enforced for any type of user at any level, such as at the sub-net level, by modifying a request that does not specify an appropriate launch configuration.

Abstract translation: 有意在多租户环境中启动实例或以其他方式访问虚拟资源的用户可以指定启动配置。 对于每种类型的实例或每种类型的用户，至少创建一个启动配置，其中包括要在实例化该类型的实例时使用的参数和值，为当前环境和实例类型进行优化的值。 可以针对不同类型的用户优化启动配置，例如考虑安全凭证和访问级别。 这种方法使用户能够通过直接联系资源提供者来启动实例，而不需要代理服务器，该代理可以在负载较重的情况下作为阻塞点。 可以通过修改不指定适当的启动配置的请求来为任何级别的任何类型的用户（例如，在子网级别）强制执行适当的启动配置。