Credential vending to processes
    12.
    发明授权

    公开(公告)号:US10298577B1

    公开(公告)日:2019-05-21

    申请号:US15087913

    申请日:2016-03-31

    Abstract: An application is comprised of a plurality of processes. A process is able to accesses a remote service using a service access credential which is adapted to the particular requirements of the process. By providing a process with customized credential, the process is constrained from performing unnecessary operations, and the overall security of the application is improved. When processes are deployed to a host computer, an agent on a host computer collects credential information and other metadata associated with the processes running on the host computer. The agent makes the metadata available to a credential provider running on the host, and the credential provider exposes an interface that is accessible to the processes. The processes include a credential proxy which communicates with the credential provider. The credential proxies relay credential requests to the credential provider, and return the provided credentials from the credential provider to the processes.

    Container telemetry
    14.
    发明授权

    公开(公告)号:US10782990B1

    公开(公告)日:2020-09-22

    申请号:US14951334

    申请日:2015-11-24

    Abstract: At least one instance of an application is launched in a set of software containers that are distributed among a set of virtual machine instances. A set of measurements corresponding to resource utilization by a software container of the set of software containers is obtained and a timestamp is generated for the set of measurements. The set of measurements is aggregated, with other sets of measurements corresponding to the set of software containers for the application, into a set of aggregated measurements grouped in a time window group, based at least in part on the timestamp, and, as a result of fulfillment of a condition, the time window group is outputted.

    Automated firmware settings management

    公开(公告)号:US10423398B1

    公开(公告)日:2019-09-24

    申请号:US15293669

    申请日:2016-10-14

    Abstract: Systems and methods are described for managing computing resources. In one embodiment, groupings of computer resources having common firmware settings are maintained based on an abstraction firmware framework representing associations between vendor-specific firmware settings and abstracted firmware settings that provide a degree of independence from specific vendor-specific firmware settings. In response to a request for a computer resource with a specified abstracted firmware configuration, it is determined which of the groupings can support the specified abstracted firmware configuration based on at least one criterion for managing the computer resources in accordance with the abstraction firmware framework.

    Automated firmware settings verification
    17.
    发明授权
    Automated firmware settings verification 有权
    自动固件设置验证

    公开(公告)号:US09471784B1

    公开(公告)日:2016-10-18

    申请号:US13706839

    申请日:2012-12-06

    CPC classification number: G06F21/572

    Abstract: Systems and methods are described for managing computing resources. In one embodiment, data representative of an abstracted firmware framework is maintained. The data may comprise computing firmware settings and determined based on standardized associations between vendor-specific firmware settings and abstracted firmware settings that are independent of the vendor-specific firmware settings. In response to receiving a request for a computing firmware setting, the requested computing firmware setting is translated to one or more vendor-specific firmware settings based on the data. A computing resource capable of implementing the one or more vendor-specific firmware settings is identified.

    Abstract translation: 描述了管理计算资源的系统和方法。 在一个实施例中,维护表示抽象固件框架的数据。 数据可以包括计算固件设置并且基于独特于供应商特定固件设置的供应商特定固件设置和抽象固件设置之间的标准化关联来确定。 响应于接收到计算固件设置的请求,所请求的计算固件设置被转换为基于该数据的一个或多个供应商特定的固件设置。 识别能够实现一个或多个供应商特定固件设置的计算资源。

    Task pool for managed compute instances

    公开(公告)号:US11669365B1

    公开(公告)日:2023-06-06

    申请号:US16551555

    申请日:2019-08-26

    CPC classification number: G06F9/4881 G06F9/5027 G06F11/1448 G06F2201/84

    Abstract: A task pool may be created and maintained, in association with a container management service, which stores a snapshot of a one or more tasks, the performance of which is suspended or paused. Tasks may be defined as applications executable in one or more software containers instantiated on a virtual machine or compute instance, where the snapshot of a task may include an image of the one or more containers associated with the task container and state information of the one or more containers. A task may be initially provisioned in a paused state or paused after executing at least a portion of the task. Paused tasks in the task pool may be readily restarted or resumed by loading the snapshot onto a compute instance. The task pool may manage provisioning new tasks and pause tasks based on changes in demand.

    Sharing prepopulated container image caches among container execution environments

    公开(公告)号:US11573814B1

    公开(公告)日:2023-02-07

    申请号:US16217454

    申请日:2018-12-12

    Abstract: Techniques are described for sharing prepopulated container image caches among container execution environments to improve the performance of container launches. The container images used to prepopulate such a cache at a computing device supporting one or more container execution environments can include various container images that are used as the basis for a wide range of user-created containers such as, for example, container images representing popular operating system distributions, database servers, web-application frameworks, and so forth. Existing systems typically obtain these container images as needed at runtime when launching containers (for example, from a container registry or other external source), often incurring significant overhead in the container launch process. The use of a prepopulated container image cache can significantly improve the performance of container launches by making such commonly used container images available to container execution environments running at a computing device ahead of time.

Patent Agency Ranking