Managing security in isolated network environments

    公开(公告)号:US11496519B1

    公开(公告)日:2022-11-08

    申请号:US16699320

    申请日:2019-11-29

    IPC分类号: H04L9/40 H04L9/08

    摘要: Security can be provided for data stored using resources that are deployed in an environment managed by a third party. Physical and logical detection mechanisms can be used to monitor various security aspects, and the resulting security data can be used to identify potential threats to these resources. In some embodiments, suspicious activity can cause resources such as data servers to be automatically and remotely rebooted such that keys stored in volatile memory on those data servers will be lost from those servers, such that an attacker will be unable to decrypt data stored on those servers. Once a determination of safety is made, the keys can be provided to the respective data servers such that data operations can resume.

    Managed virtual networks for computing cloud edge locations

    公开(公告)号:US11470047B1

    公开(公告)日:2022-10-11

    申请号:US16699306

    申请日:2019-11-29

    摘要: Techniques are described for a cloud provider to provide a managed experience related to the use of virtual networks and subnets to logically group user computing resources deployed at provider substrate extensions. A cloud provider enables users to create virtual network templates used when deploying computing resources at provider substrate extensions, where such virtual network templates may include various networking, security, and other configurations to be applied to network traffic and other activity of resources deployed within an associated virtual network. Once a virtual network template is defined, a user can use the template as the basis to launch resources into the virtual network and, by extension, into provider substrate extensions associated with the virtual network. Upon receiving such a request, the provider network can manage the creation and configuration of underlying subnets, route tables, and other resource, as needed, at each of the relevant provider substrate extensions.