-
公开(公告)号:US10545950B2
公开(公告)日:2020-01-28
申请号:US15276714
申请日:2016-09-26
Applicant: Amazon Technologies, Inc.
Inventor: Brian Collins , Zachary Mohamed Shalla , Marvin Michael Theimer , John Petry , Michael Hart , Serge Hairanian , Anders Samuelsson , Salvador Salazar Sepulveda , Ji Luo
Abstract: Multiple edits to a hierarchical data structure may be atomically applied. A request to perform modifications with respect to a portion or the entire hierarchical data structure may be received. A copy of the requested portion of the hierarchical data structure may be created separate from the hierarchical data structure. The portion of the hierarchical data structure may remain available for read access. Modifications may be applied to the copy of the portion of the hierarchical data structure. In response to a request to commit the modifications to the portion of the hierarchical data structure, the copy of the portion of the hierarchical data structure may atomically replace the portion of the hierarchical data structure.
-
公开(公告)号:US20200159719A1
公开(公告)日:2020-05-21
申请号:US16751727
申请日:2020-01-24
Applicant: Amazon Technologies, Inc.
Inventor: Brian Collins , Zachary Mohamed Shalla , Marvin Michael Theimer , John Petry , Michael Hart , Serge Hairanian , Anders Samuelsson , Salvador Salazar Sepulveda , Ji Luo
Abstract: Multiple edits to a hierarchical data structure may be atomically applied. A request to perform modifications with respect to a portion or the entire hierarchical data structure may be received. A copy of the requested portion of the hierarchical data structure may be created separate from the hierarchical data structure. The portion of the hierarchical data structure may remain available for read access. Modifications may be applied to the copy of the portion of the hierarchical data structure. In response to a request to commit the modifications to the portion of the hierarchical data structure, the copy of the portion of the hierarchical data structure may atomically replace the portion of the hierarchical data structure
-
公开(公告)号:US20180089249A1
公开(公告)日:2018-03-29
申请号:US15275219
申请日:2016-09-23
Applicant: Amazon Technologies, Inc.
Inventor: Brian Collins , Zachary Mohamed Shalla , MARVIN MICHAEL THEIMER , John Petry , Michael Hart , Serge Hairanian , Anders Samuelsson , Salvador Salazar Sepulveda , Ji Luo
CPC classification number: G06F16/2365 , G06F16/282 , H04L67/1095 , H04L67/1097
Abstract: Distributed system resources may be managed by applying user created policies to the resources. To ensure that valid policies are applied, remote validation for the policies may be implemented. A validation event for a policy may be detected. A remote validation agent may be identified for the policy and a validation request sent to the remote validation agent that includes information for validating the policy. The remote validation agent may return a validation result for the policy. If valid, a policy action that triggered the remote validation event for the policy may be allowed. If invalid, the policy action that triggered the remote validation event for the policy may be denied.
-
公开(公告)号:US11341118B2
公开(公告)日:2022-05-24
申请号:US16751727
申请日:2020-01-24
Applicant: Amazon Technologies, Inc.
Inventor: Brian Collins , Zachary Mohamed Shalla , Marvin Michael Theimer , John Petry , Michael Hart , Serge Hairanian , Anders Samuelsson , Salvador Salazar Sepulveda , Ji Luo
Abstract: Multiple edits to a hierarchical data structure may be atomically applied. A request to perform modifications with respect to a portion or the entire hierarchical data structure may be received. A copy of the requested portion of the hierarchical data structure may be created separate from the hierarchical data structure. The portion of the hierarchical data structure may remain available for read access. Modifications may be applied to the copy of the portion of the hierarchical data structure. In response to a request to commit the modifications to the portion of the hierarchical data structure, the copy of the portion of the hierarchical data structure may atomically replace the portion of the hierarchical data structure.
-
公开(公告)号:US20180089299A1
公开(公告)日:2018-03-29
申请号:US15276708
申请日:2016-09-26
Applicant: Amazon Technologies, Inc.
Inventor: Brian Collins , Zachary Mohamed Shalla , MARVIN MICHAEL THEIMER , John Petry , Michael Hart , Serge Hairanian , Anders Samuelsson , Salvador Salazar Sepulveda , Ji Luo
CPC classification number: G06F16/282 , G06F9/5061 , G06F9/546 , G06F16/2365
Abstract: Resource data objects describing resources in a system may be maintained in multiple different hierarchies for applying policies to manage the resources. Lookup requests may access the different hierarchies to determine which policies are applicable to a given resource based on the policies identified in each of the hierarchies. Modifications to hierarchies may be performed in isolation so that the application of policies in other hierarchies is unchanged by modifications to a different hierarchy. Access restrictions may be enforced with respect to hierarchies so that different users may be permitted access to different hierarchies for system resource management.
-
公开(公告)号:US20200097489A1
公开(公告)日:2020-03-26
申请号:US16692073
申请日:2019-11-22
Applicant: Amazon Technologies, Inc.
Inventor: Brian Collins , Zachary Mohamed Shalla , Marvin Michael Theimer , John Petry , Michael Hart , Serge Hairanian , Anders Samuelsson , Salvador Salazar Sepulveda , Ji Luo
Abstract: Resource data objects describing resources in a system may be maintained in multiple different hierarchies for applying policies to manage the resources. Lookup requests may access the different hierarchies to determine which policies are applicable to a given resource based on the policies identified in each of the hierarchies. Modifications to hierarchies may be performed in isolation so that the application of policies in other hierarchies is unchanged by modifications to a different hierarchy. Access restrictions may be enforced with respect to hierarchies so that different users may be permitted access to different hierarchies for system resource management.
-
公开(公告)号:US20180091583A1
公开(公告)日:2018-03-29
申请号:US15276711
申请日:2016-09-26
Applicant: Amazon Technologies, Inc.
Inventor: Brian Collins , Zachary Mohamed Shalla , MARVIN MICHAEL THEIMER , John Petry , Michael Hart , Serge Hairanian , Anders Samuelsson , Salvador Salazar Sepulveda , Ji Luo
CPC classification number: H04L41/5003 , H04L41/0813 , H04L41/28 , H04L63/20 , H04L67/1097 , H04L67/30
Abstract: Multi-party updates may be performed for distributed systems. An agreement request may be received that proposes updates to a distributed system. An authorization scheme for the agreement request may be determined and approvers for the proposed updates identified according to the authorization scheme. Notifications may be provided to the approvers indicating the proposed updates to the distributed system. Responses from the approvers may be evaluated to determine whether the authorization scheme is satisfied for the proposed updates. If the authorizations scheme is satisfied, then the proposed updates may be performed to the distributed system.
-
公开(公告)号:US11675774B2
公开(公告)日:2023-06-13
申请号:US15275219
申请日:2016-09-23
Applicant: Amazon Technologies, Inc.
Inventor: Brian Collins , Zachary Mohamed Shalla , Marvin Michael Theimer , John Petry , Michael Hart , Serge Hairanian , Anders Samuelsson , Salvador Salazar Sepulveda , Ji Luo
IPC: G06F16/23 , G06F16/28 , H04L41/0894 , H04L67/1095
CPC classification number: G06F16/2365 , G06F16/282 , H04L41/0894 , H04L67/1095
Abstract: Distributed system resources may be managed by applying user created policies to the resources. To ensure that valid policies are applied, remote validation for the policies may be implemented. A validation event for a policy may be detected. A remote validation agent may be identified for the policy and a validation request sent to the remote validation agent that includes information for validating the policy. The remote validation agent may return a validation result for the policy. If valid, a policy action that triggered the remote validation event for the policy may be allowed. If invalid, the policy action that triggered the remote validation event for the policy may be denied.
-
公开(公告)号:US11308126B2
公开(公告)日:2022-04-19
申请号:US16692073
申请日:2019-11-22
Applicant: Amazon Technologies, Inc.
Inventor: Brian Collins , Zachary Mohamed Shalla , Marvin Michael Theimer , John Petry , Michael Hart , Serge Hairanian , Anders Samuelsson , Salvador Salazar Sepulveda , Ji Luo
Abstract: Resource data objects describing resources in a system may be maintained in multiple different hierarchies for applying policies to manage the resources. Lookup requests may access the different hierarchies to determine which policies are applicable to a given resource based on the policies identified in each of the hierarchies. Modifications to hierarchies may be performed in isolation so that the application of policies in other hierarchies is unchanged by modifications to a different hierarchy. Access restrictions may be enforced with respect to hierarchies so that different users may be permitted access to different hierarchies for system resource management.
-
公开(公告)号:US10454786B2
公开(公告)日:2019-10-22
申请号:US15276711
申请日:2016-09-26
Applicant: Amazon Technologies, Inc.
Inventor: Brian Collins , Zachary Mohamed Shalla , Marvin Michael Theimer , John Petry , Michael Hart , Serge Hairanian , Anders Samuelsson , Salvador Salazar Sepulveda , Ji Luo
Abstract: Multi-party updates may be performed for distributed systems. An agreement request may be received that proposes updates to a distributed system. An authorization scheme for the agreement request may be determined and approvers for the proposed updates identified according to the authorization scheme. Notifications may be provided to the approvers indicating the proposed updates to the distributed system. Responses from the approvers may be evaluated to determine whether the authorization scheme is satisfied for the proposed updates. If the authorizations scheme is satisfied, then the proposed updates may be performed to the distributed system.
-
-
-
-
-
-
-
-
-