公开(公告)号：US10812537B1

公开(公告)日：2020-10-20

申请号：US16042895

申请日：2018-07-23

Applicant: Amazon Technologies, Inc.

Inventor： Peter Chung ,  Jason S. Bailey ,  Ryan S. Corlett

IPC: H04L29/06 ,  H04L29/12

Abstract: Disclosed are various embodiments for using network locality to automatically trigger arbitrary workflows either by assertion or implication. In one embodiment, a communication is received from a client device via an external network host connected to an external network. The client device is configured to initiate the communication to the external network host on a repeated basis. The external network host is unreachable from an internal network. Access by the client device to at least one resource on the internal network is then disabled in response to receiving the communication.

公开(公告)号：US11863528B1

公开(公告)日：2024-01-02

申请号：US16002966

申请日：2018-06-07

Applicant: Amazon Technologies, Inc.

Inventor： Peter Chung

IPC: G06F15/16 ,  H04L9/40 ,  H04L61/2521 ,  H04L69/22 ,  H04L67/1036 ,  H04L61/4511

CPC classification number: H04L63/0263 ,  H04L61/2528 ,  H04L61/4511 ,  H04L63/0236 ,  H04L63/0281 ,  H04L63/101 ,  H04L67/1036 ,  H04L69/22

Abstract: A system and method for generating a set of destination IP address to be added into a firewall whitelist. The system receives a network packet transmitted through a firewall and determines whether the destination address of the network packet corresponds to at least one of computing resource of a plurality of computing resources. If so, the system transforms the destination address of the packet to another destination address of the corresponding computing resource. The system forwards the network packet to the destination address of the corresponding computing resource.