公开(公告)号：US10523714B2

公开(公告)日：2019-12-31

申请号：US16167137

申请日：2018-10-22

Applicant: Amazon Technologies, Inc.

Inventor： Amjad Hussain ,  Anand Doshi ,  Xiong Wang ,  Sivaprasad Padisetty

IPC: H04L29/06

Abstract: A policy management system is described herein that allows an administrator to compose custom policies that can be applied to target devices and that achieve tasks specific to the administrator's organization and network. The composed policies can be standalone policies that are applied independently or sequenced policies that are applied in a specified order. A composed policy may be associated with one or more targets and stored in a policy database. A target device may periodically query the policy management system for any policies that pertain to the target device. If policies have been composed that pertain to the target device and such policies have been updated or have not been previously transmitted to the target device, the policy management system can retrieve the policies from the policy database, merge the policies, and transmit the merged policies to the target device. The target device can then apply the merged policies.

公开(公告)号：US20190068646A1

公开(公告)日：2019-02-28

申请号：US16167137

申请日：2018-10-22

Applicant: Amazon Technologies, Inc.

Inventor： Amjad Hussain ,  Anand Doshi ,  Xiong Wang ,  Sivaprasad Padisetty

IPC: H04L29/06

Abstract: A policy management system is described herein that allows an administrator to compose custom policies that can be applied to target devices and that achieve tasks specific to the administrator's organization and network. The composed policies can be standalone policies that are applied independently or sequenced policies that are applied in a specified order. A composed policy may be associated with one or more targets and stored in a policy database. A target device may periodically query the policy management system for any policies that pertain to the target device. If policies have been composed that pertain to the target device and such policies have been updated or have not been previously transmitted to the target device, the policy management system can retrieve the policies from the policy database, merge the policies, and transmit the merged policies to the target device. The target device can then apply the merged policies.

公开(公告)号：US20220229657A1

公开(公告)日：2022-07-21

申请号：US17665260

申请日：2022-02-04

Applicant: Amazon Technologies, Inc.

Inventor： Amjad Hussain ,  Ananth Vaidyanathan ,  Sivaprasad Venkata Padisetty ,  Xiong Wang ,  Anand Doshi

IPC: G06F8/65 ,  G06F9/455 ,  G06F16/903

Abstract: Compliance schemes may be associated with compliance types to provide resource compliance management. Compliance types may be created and associated with different compliance schemes. Compliance state for the compliance types may be generated and provided in response to requests to access the compliance state. Queries for compliance state, for example, may request compliance state, and query predicates or other criteria may be applied to the compliance state in order to perform the query.

公开(公告)号：US10514932B2

公开(公告)日：2019-12-24

申请号：US15276700

申请日：2016-09-26

Applicant: Amazon Technologies, Inc.

Inventor： Amjad Hussain ,  Anand Doshi ,  Xiong Wang ,  Sivaprasad Venkata Padisetty

IPC: G06F15/177 ,  G06F9/4401 ,  G06F9/50

Abstract: Methods, systems, and computer-readable media for resource configuration based on dynamic group membership are disclosed. An association between a group of computing resources and an intended state is stored. The intended state represents a computing resource configuration. During operation of a computing resource, whether the computing resource belongs to the group of computing resources is determined based at least in part on analysis of one or more attributes associated with the computing resource. Based at least in part on determining that the computing resource belongs to the group of computing resources, one or more actions are caused be performed to bring the computing resource into the intended state. The computing resource is executed while having the computing resource configuration represented by the intended state.

公开(公告)号：US11243756B1

公开(公告)日：2022-02-08

申请号：US15676908

申请日：2017-08-14

Applicant: Amazon Technologies, Inc.

Inventor： Amjad Hussain ,  Ananth Vaidyanathan ,  Sivaprasad Venkata Padisetty ,  Xiong Wang ,  Anand Doshi

IPC: G06F21/57 ,  G06F8/65 ,  G06F9/455 ,  G06F16/903 ,  G06F9/50 ,  H04L29/06 ,  H04L12/24

Abstract: Compliance schemes may be associated with compliance types to provide resource compliance management. Compliance types may be created and associated with different compliance schemes. Compliance state for the compliance types may be generated and provided in response to requests to access the compliance state. Queries for compliance state, for example, may request compliance state, and query predicates or other criteria may be applied to the compliance state in order to perform the query.

公开(公告)号：US11093257B2

公开(公告)日：2021-08-17

申请号：US16723562

申请日：2019-12-20

Applicant: Amazon Technologies, Inc.

Inventor： Amjad Hussain ,  Anand Doshi ,  Xiong Wang ,  Sivaprasad Venkata Padisetty

IPC: G06F15/177 ,  G06F9/4401 ,  G06F9/50

Abstract: Methods, systems, and computer-readable media for resource configuration based on dynamic group membership are disclosed. An association between a group of computing resources and an intended state is stored. The intended state represents a computing resource configuration. During operation of a computing resource, whether the computing resource belongs to the group of computing resources is determined based at least in part on analysis of one or more attributes associated with the computing resource. Based at least in part on determining that the computing resource belongs to the group of computing resources, one or more actions are caused be performed to bring the computing resource into the intended state. The computing resource is executed while having the computing resource configuration represented by the intended state.

公开(公告)号：US10110635B1

公开(公告)日：2018-10-23

申请号：US15279122

申请日：2016-09-28

Applicant: Amazon Technologies, Inc.

Inventor： Amjad Hussain ,  Anand Doshi ,  Xiong Wang ,  Sivaprasad Padisetty

IPC: H04L29/06 ,  G06F9/455

Abstract: A policy management system is described herein that allows an administrator to compose custom policies that can be applied to target devices and that achieve tasks specific to the administrator's organization and network. The composed policies can be standalone policies that are applied independently or sequenced policies that are applied in a specified order. A composed policy may be associated with one or more targets and stored in a policy database. A target device may periodically query the policy management system for any policies that pertain to the target device. If policies have been composed that pertain to the target device and such policies have been updated or have not been previously transmitted to the target device, the policy management system can retrieve the policies from the policy database, merge the policies, and transmit the merged policies to the target device. The target device can then apply the merged policies.

公开(公告)号：US20180088964A1

公开(公告)日：2018-03-29

申请号：US15276700

申请日：2016-09-26

Applicant: Amazon Technologies, Inc.

Inventor： Amjad Hussain ,  Anand Doshi ,  Xiong Wang ,  Sivaprasad Venkata Padisetty

IPC: G06F9/44

Abstract: Methods, systems, and computer-readable media for resource configuration based on dynamic group membership are disclosed. An association between a group of computing resources and an intended state is stored. The intended state represents a computing resource configuration. During operation of a computing resource, whether the computing resource belongs to the group of computing resources is determined based at least in part on analysis of one or more attributes associated with the computing resource. Based at least in part on determining that the computing resource belongs to the group of computing resources, one or more actions are caused be performed to bring the computing resource into the intended state. The computing resource is executed while having the computing resource configuration represented by the intended state.