公开(公告)号：US11245717B1

公开(公告)日：2022-02-08

申请号：US16585615

申请日：2019-09-27

Applicant: Amazon Technologies, Inc.

Inventor： Zak Aaron Edwards ,  William Frederick Kruse ,  Ryan Pickren ,  Guifre Ruiz Utges

IPC: G06F15/173 ,  H04L29/06 ,  H04W4/14 ,  H04L29/08 ,  H04L29/12

Abstract: Techniques for automated detection and mitigation of subdomain takeovers are described. A method for automated detection and mitigation of subdomain takeovers comprises receiving, by a subdomain manager, a request to monitor one or more resources associated with one or more mapping records, periodically scanning each resource from the one or more resources, receiving a response from at least one resource indicating that the at least one resource does not exist or is invalid, and sending a notification indicating that the at least one resource does not exist or is invalid using a notification service.

公开(公告)号：US10587653B2

公开(公告)日：2020-03-10

申请号：US15091493

申请日：2016-04-05

Applicant: Amazon Technologies, Inc.

Inventor： William Frederick Kruse ,  Nima Sharifi Mehr

IPC: H04L29/06 ,  G06F11/00 ,  G06Q10/10

Abstract: A customer of a policy management service may use an interface with a configuration and management service to interact with policies that may be applicable to the customer's one or more resources. The customer may create and/or modify the policies and the configuration and management service may notify one or more other entities of the created and/or modified policies. The one or more other entities may be operated by user authorized to approve the created and/or modified policies. Interactions with the configuration and management service may be the same as the interactions with the policy management service.

公开(公告)号：US10243945B1

公开(公告)日：2019-03-26

申请号：US14065106

申请日：2013-10-28

Applicant: Amazon Technologies, Inc.

Inventor： William Frederick Kruse ,  Bradley Jeffery Behm

IPC: H04L29/06

Abstract: Managed identity federation provides numerous options for authentication to access one or more services. A user authenticates with an identity verification provider and provides proof of authentication to a service of a service provider. The service of the service provider is configured to verify the user's identity using a centrally managed identity provider configuration. This configuration is distributed without intervention of the service's administrators. This centrally-managed configuration allows a variety of enterprise and third-party services to utilize the service provider's billing, security, and other administrative services.

公开(公告)号：US09575979B1

公开(公告)日：2017-02-21

申请号：US14107950

申请日：2013-12-16

Applicant: AMAZON TECHNOLOGIES, INC.

Inventor： Jon Arron McClintock ,  Shailendra Batra ,  Thibault Candebat ,  Scott Gerard Carmack ,  Sachin Purushottam Joglekar ,  Alun Mark Jones ,  William Frederick Kruse ,  Narasimha Rao Lakkakula ,  Sunu Aby Mathew

IPC: G06F17/30 ,  G06F21/62

CPC classification number: G06F17/30109 ,  G06F21/604 ,  G06F21/6218 ,  G06F2221/034

Abstract: Techniques are described for automatically determining application composition and application ownership of an application that may include a plurality of files deployed to a plurality of host devices. The determination of application composition may be based on analyzing various types of metadata that may provide evidence of associations between deployed files, such as metadata describing the deployment of files to host devices, metadata describing the files tracked within a source control system, or other types of metadata. The determination of application ownership may also be based on analyzing the various types of metadata that provide evidence of associations between files and individuals or groups of individuals within an organization.

Abstract translation: 描述了用于自动确定应用程序的应用程序组成和应用程序所有权的技术，其中可能包括部署到多个主机设备的多个文件。 应用程序组合的确定可以基于分析可以提供部署文件之间的关联的各种类型的元数据，例如描述向主机设备部署文件的元数据，描述在源控制系统中跟踪的文件的元数据或其他类型 的元数据。 应用程序所有权的确定也可以基于分析各种类型的元数据，这些元数据提供文件与组织内的个人或个人组之间的关联的证据。

公开(公告)号：US20160219081A1

公开(公告)日：2016-07-28

申请号：US15091493

申请日：2016-04-05

Applicant: Amazon Technologies, Inc.

Inventor： William Frederick Kruse ,  Nima Sharifi Mehr

IPC: H04L29/06

Abstract: A customer of a policy management service may use an interface with a configuration and management service to interact with policies that may be applicable to the customer's one or more resources. The customer may create and/or modify the policies and the configuration and management service may notify one or more other entities of the created and/or modified policies. The one or more other entities may be operated by user authorized to approve the created and/or modified policies. Interactions with the configuration and management service may be the same as the interactions with the policy management service.

Abstract translation: 策略管理服务的客户可以使用与配置和管理服务的接口与可能适用于客户的一个或多个资源的策略进行交互。 客户可以创建和/或修改策略，配置和管理服务可以通知一个或多个其他实体创建和/或修改的策略。 一个或多个其他实体可以由被授权以批准所创建和/或修改的策略的用户操作。 与配置和管理服务的交互可能与与策略管理服务的交互相同。