公开(公告)号：US10996961B2

公开(公告)日：2021-05-04

申请号：US16586818

申请日：2019-09-27

Applicant: Amazon Technologies, Inc.

Inventor： Kevin C. Miller ,  Ramyanshu Datta ,  Robert Devers Wilson ,  Timothy Lawrence Harris

IPC: G06F9/44 ,  G06F9/445 ,  G06F16/22 ,  G06F13/16

Abstract: Systems and methods are described for modifying input and output (I/O) to an object storage service by implementing one or more owner-specified functions to I/O requests. A function can implement a data manipulation, such as filtering out sensitive data before reading or writing the data. The functions can be applied prior to implementing a request method (e.g., GET or PUT) specified within the I/O request, such that the data to which the method is applied may not match the object specified within the request. For example, a user may request to obtain (e.g., GET) a data set. The data set may be passed to a function that filters sensitive data to the data set, and the GET request method may then be applied to the output of the function. In this manner, owners of objects on an object storage service are provided with greater control of objects stored or retrieved from the service.

公开(公告)号：US11023311B2

公开(公告)日：2021-06-01

申请号：US16586825

申请日：2019-09-27

Applicant: Amazon Technologies, Inc.

Inventor： Ramyanshu Datta ,  Timothy Lawrence Harris ,  Kevin C. Miller ,  Haripriya Devnath ,  Robert Devers Wilson

IPC: G06F11/10 ,  G06F13/16 ,  G06F9/445

Abstract: Systems and methods are described for modifying input and output (I/O) to an object storage service by implementing one or more owner-specified functions to I/O requests. A function can implement a data manipulation, such as filtering out sensitive data before reading or writing the data. The functions can be applied prior to implementing a request method (e.g., GET or PUT) specified within the I/O request, such that the data to which the method is applied my not match the object specified within the request. For example, a user may request to obtain (e.g., GET) a data set. The data set may be passed to a function that filters sensitive data to the data set, and the GET request method may then be applied to the output of the function. In this manner, owners of objects on an object storage service are provided with greater control of objects stored or retrieved from the service.

公开(公告)号：US20210096944A1

公开(公告)日：2021-04-01

申请号：US16586825

申请日：2019-09-27

Applicant: Amazon Technologies, Inc.

Inventor： Ramyanshu Datta ,  Timothy Lawrence Harris ,  Kevin C. Miller ,  Haripriya Devnath ,  Robert Devers Wilson

IPC: G06F11/10 ,  G06F9/445 ,  G06F13/16

Abstract: Systems and methods are described for modifying input and output (I/O) to an object storage service by implementing one or more owner-specified functions to I/O requests. A function can implement a data manipulation, such as filtering out sensitive data before reading or writing the data. The functions can be applied prior to implementing a request method (e.g., GET or PUT) specified within the I/O request, such that the data to which the method is applied my not match the object specified within the request. For example, a user may request to obtain (e.g., GET) a data set. The data set may be passed to a function that filters sensitive data to the data set, and the GET request method may then be applied to the output of the function. In this manner, owners of objects on an object storage service are provided with greater control of objects stored or retrieved from the service.

公开(公告)号：US11954216B1

公开(公告)日：2024-04-09

申请号：US16781844

申请日：2020-02-04

Applicant: Amazon Technologies, Inc.

Inventor： Seth W. Markle ,  Gregory Scott Benjamin ,  Robert Devers Wilson

IPC: G06F21/62 ,  G06F8/65 ,  G06F11/14 ,  G06F16/95 ,  G06F21/52 ,  G06N20/00

CPC classification number: G06F21/6218 ,  G06F8/65 ,  G06F11/1402 ,  G06F16/95 ,  G06F21/52 ,  G06N20/00

Abstract: Systems and methods are described herein for detecting the inadvertent modification to or deletion of data in a data store and taking automated action to prevent the deletion of data from becoming permanent. The described techniques may also be utilized to detect anomalous changes to a policy or affecting storage of data and taking automated action to mitigate the effects of those changes. In one example, events generated as a result of requests to perform operations on data objects in a data storage service may be obtained, where at least some of the events indicate a failure to fulfill respective requests. Data from the events may be input into a model to detect an anomaly indicative of inadvertent modification of data. As a result of detection of the anomaly, a set of operations may be initiated or performed to prevent the inadvertent modification of data from becoming permanent.

公开(公告)号：US20210096884A1

公开(公告)日：2021-04-01

申请号：US16586818

申请日：2019-09-27

Applicant: Amazon Technologies, Inc.

Inventor： Kevin C. Miller ,  Ramyanshu Datta ,  Robert Devers Wilson ,  Timothy Lawrence Harris

IPC: G06F9/445 ,  G06F13/16 ,  G06F16/22

Abstract: Systems and methods are described for modifying input and output (I/O) to an object storage service by implementing one or more owner-specified functions to I/O requests. A function can implement a data manipulation, such as filtering out sensitive data before reading or writing the data. The functions can be applied prior to implementing a request method (e.g., GET or PUT) specified within the I/O request, such that the data to which the method is applied my not match the object specified within the request. For example, a user may request to obtain (e.g., GET) a data set. The data set may be passed to a function that filters sensitive data to the data set, and the GET request method may then be applied to the output of the function. In this manner, owners of objects on an object storage service are provided with greater control of objects stored or retrieved from the service.