公开(公告)号：US11165783B1

公开(公告)日：2021-11-02

申请号：US16714079

申请日：2019-12-13

Applicant: Amazon Technologies, Inc.

Inventor： William Joel Eiers ,  Liana Sorina Hadarean ,  Kasper Soe Luckow ,  Neha Rungta

IPC: H04L29/06 ,  H04L12/24

Abstract: Systems and methods for quantifying permissiveness of access control policies using model counting techniques and automated policy downscaling are disclosed. A policy service receives an initial access policy and transforms the access policy into an access constraint compatible with a constraint solver. The policy service determines a degree of permissiveness of the policy based on a number of distinct solutions to the access constraint identified by the constraint solver. Using data associated with access requests precisely allowed by the initial access policy and the initial access policy, the policy service generates a modified policy by adding additional constraints to the access policy and determining that the modified policy is less permissive than the initial access policy.

公开(公告)号：US10977111B2

公开(公告)日：2021-04-13

申请号：US16115408

申请日：2018-08-28

Applicant: Amazon Technologies, Inc.

Inventor： Neha Rungta ,  Temesghen Kahsai Azene ,  Pauline Virginie Bolignano ,  Kasper Soe Luckow ,  Sean McLaughlin ,  Catherine Dodge ,  Andrew Jude Gacek ,  Carsten Varming ,  John Byron Cook ,  Daniel Schwartz-Narbonne ,  Juan Rodriguez Hortala

IPC: G06F11/07 ,  G06F11/14 ,  G06F9/50 ,  G06F9/451 ,  G06F8/60 ,  G06F9/455 ,  G06F11/36

Abstract: A constraint solver service of a computing resource service provider performs evaluations of logic problems provided by the service provider's users and/or services by deploying a plurality of constraint solvers to concurrently evaluate the logic problem. Each deployed solver has, or is configured with, different characteristics and/or capabilities than the other solvers; thus, the solvers can have varying execution times and ways of finding a solution. The service may control execution of the solvers using virtual computing resources, such as by installing and configuring a solver to execute in a software container instance. The service receives solver results and delivers them according to a solution strategy such as “first received” to reduce latency or “check for agreement” to validate the solution. An interface allows the provider of the logic problem to select and configure solvers, issue commands and modifications during solver execution, select the solution strategy, and receive the solution.