公开(公告)号：US11368403B2

公开(公告)日：2022-06-21

申请号：US17028756

申请日：2020-09-22

Applicant: Amazon Technologies, Inc.

Inventor： Jasmeet Chhabra ,  Jing Zhuang ,  Uzma Arjuman ,  Ajith Harshana Ranabahu ,  Travis William Hickey

IPC: G06F15/16 ,  H04L47/70 ,  H04L41/0893

Abstract: Tags may be used in decisions by an access management service regarding access of computing resources (“resources”) by principals (e.g., users, roles, etc.). The tags may also be used to determine cost information, for grouping resources and/or principals, and for other reasons. The tags may be assigned to principals, to resources, or both. The resource may be a virtual or physical type of computing resource. Tags may be metadata, which may include a key-value pair. Tags may include email addresses, cost centers, project identifiers, location, team name, etc. The value may be a number, letters, or a combination of both. In some embodiments, the values may be limited to certain numbers or bytes, and some numbers and/or letter combinations may be excluded for special use.

公开(公告)号：US20200007455A1

公开(公告)日：2020-01-02

申请号：US16183484

申请日：2018-11-07

Applicant: Amazon Technologies, Inc.

Inventor： Jasmeet Chhabra ,  Jing Zhuang ,  Uzma Arjuman ,  Ajith Harshana Ranabahu ,  Travis William Hickey

IPC: H04L12/911 ,  H04L12/24

Abstract: Tags may be used in decisions by an access management service regarding access of computing resources (“resources”) by principals (e.g., users, roles, etc.). The tags may also be used to determine cost information, for grouping resources and/or principals, and for other reasons. The tags may be assigned to principals, to resources, or both. The resource may be a virtual or physical type of computing resource. Tags may be metadata, which may include a key-value pair. Tags may include email addresses, cost centers, project identifiers, location, team name, etc. The value may be a number, letters, or a combination of both. In some embodiments, the values may be limited to certain numbers or bytes, and some numbers and/or letter combinations may be excluded for special use.

公开(公告)号：US11868494B1

公开(公告)日：2024-01-09

申请号：US16200348

申请日：2018-11-26

Applicant: Amazon Technologies, Inc.

Inventor： Jing Zhuang ,  Uzma Arjuman ,  Travis William Hickey ,  Jasmeet Chhabra

IPC: H04L29/08 ,  G06F21/62 ,  G06F21/41 ,  G06F21/60 ,  G06F16/22 ,  G06F16/27 ,  G06F16/23 ,  H04L67/125 ,  H04L67/1095

CPC classification number: G06F21/6218 ,  G06F16/22 ,  G06F16/27 ,  G06F16/2308 ,  G06F16/275 ,  G06F21/41 ,  G06F21/60 ,  G06F21/62 ,  H04L67/1095 ,  H04L67/125

Abstract: A method to synchronize tags between two databases comprises receiving a first command to add a tag to a resource in a first database, the tag comprising a key value pair that defines an access privilege associated with the resource. A determination is made that the tag satisfies validation criteria associated with a second database. The tag is stored in the first database, and an entry for the tag is added to a synchronization table, wherein the entry lacks a synchronized flag. A synchronization process is performed between the first database and the second database. A determination is made that the entry of the synchronization table lacks the synchronized flag. A copy of the tag is then written to the second database, and the synchronized flag for the entry in the synchronization table is set.

公开(公告)号：US10819652B2

公开(公告)日：2020-10-27

申请号：US16183484

申请日：2018-11-07

Applicant: Amazon Technologies, Inc.

Inventor： Jasmeet Chhabra ,  Jing Zhuang ,  Uzma Arjuman ,  Ajith Harshana Ranabahu ,  Travis William Hickey

IPC: G06F15/16 ,  H04L12/911 ,  H04L12/24

Abstract: Tags may be used in decisions by an access management service regarding access of computing resources (“resources”) by principals (e.g., users, roles, etc.). The tags may also be used to determine cost information, for grouping resources and/or principals, and for other reasons. The tags may be assigned to principals, to resources, or both. The resource may be a virtual or physical type of computing resource. Tags may be metadata, which may include a key-value pair. Tags may include email addresses, cost centers, project identifiers, location, team name, etc. The value may be a number, letters, or a combination of both. In some embodiments, the values may be limited to certain numbers or bytes, and some numbers and/or letter combinations may be excluded for special use.

公开(公告)号：US11847241B1

公开(公告)日：2023-12-19

申请号：US15958520

申请日：2018-04-20

Applicant: Amazon Technologies, Inc.

Inventor： Conor Patrick Cahill ,  Jasmeet Chhabra ,  Travis William Hickey ,  Ahmad Kayed Kamel Aljolani ,  Daniel Stephen Popick ,  Akshay Mohan Sumant

IPC: G06F21/62 ,  H04L9/40 ,  G06F21/60 ,  H04L67/10

CPC classification number: G06F21/6218 ,  G06F21/604 ,  H04L63/102 ,  H04L63/20 ,  G06F2221/2141 ,  H04L67/10

Abstract: A request to modify a set of permissions (e.g., delete the permissions, replace the set of permissions with a different set of permissions) is received at a computing device. A set of services are prevented from using the set of permissions to access resources. The set of permissions are changed while the set of services are prevented from using the set of permissions to access resources.

公开(公告)号：US20210014172A1

公开(公告)日：2021-01-14

申请号：US17028756

申请日：2020-09-22

Applicant: Amazon Technologies, Inc.

Inventor： Jasmeet Chhabra ,  Jing Zhuang ,  Uzma Arjuman ,  Ajith Harshana Ranabahu ,  Travis William Hickey

IPC: H04L12/911 ,  H04L12/24

Abstract: Tags may be used in decisions by an access management service regarding access of computing resources (“resources”) by principals (e.g., users, roles, etc.). The tags may also be used to determine cost information, for grouping resources and/or principals, and for other reasons. The tags may be assigned to principals, to resources, or both. The resource may be a virtual or physical type of computing resource. Tags may be metadata, which may include a key-value pair. Tags may include email addresses, cost centers, project identifiers, location, team name, etc. The value may be a number, letters, or a combination of both. In some embodiments, the values may be limited to certain numbers or bytes, and some numbers and/or letter combinations may be excluded for special use.