公开(公告)号：US11777995B2

公开(公告)日：2023-10-03

申请号：US17567318

申请日：2022-01-03

Applicant: Amazon Technologies, Inc.

Inventor： Ujjwal Rajkumar Pugalia ,  Sean McLaughlin ,  Neha Rungta ,  Andrew Jude Gacek ,  Matthias Schlaipfer ,  John Michael Renner ,  Jihong Chen ,  Alex Li ,  Erin Westfall ,  Daniel George Peebles ,  Himanshu Gupta

IPC: G06F15/16 ,  H04L9/40

CPC classification number: H04L63/20 ,  H04L63/08 ,  H04L63/102 ,  H04L63/105

Abstract: Resource state validation may be performed for access management policies by an identity and access management system. An access management policy associated with an account for network-based services may be received and validated according to resource state obtained for resources associated with the account. A correction for a portion of the access management policy may be identified according to the validation and provided via an interface for the identity and access management system.

公开(公告)号：US11483350B2

公开(公告)日：2022-10-25

申请号：US16369215

申请日：2019-03-29

Applicant: Amazon Technologies, Inc.

Inventor： Pauline Virginie Bolignano ,  Tyler Bray ,  John Byron Cook ,  Andrew Jude Gacek ,  Kasper Søe Luckow ,  Andrea Nedic ,  Neha Rungta ,  Cole Schlesinger ,  Carsten Varming

IPC: H04L9/40 ,  G06F8/41 ,  G06F9/54

Abstract: Techniques for intent-based governance are described. For example, in some instances a method of receiving an indication of a change involving of one or more of code, a policy, a network configuration, or a governance requirement rule impacting a resource in a provider network for an account that is to be analyzed using one or more governance requirement rules; determining one or more governance requirement rules to evaluate for compliance after the update; evaluating the determined one or more governance requirement rules for compliance using one or more reasoning engines according to one or more policies; and making a result of the evaluating available to a user provides such governance.