公开(公告)号：US20180089299A1

公开(公告)日：2018-03-29

申请号：US15276708

申请日：2016-09-26

Applicant: Amazon Technologies, Inc.

Inventor： Brian Collins ,  Zachary Mohamed Shalla ,  MARVIN MICHAEL THEIMER ,  John Petry ,  Michael Hart ,  Serge Hairanian ,  Anders Samuelsson ,  Salvador Salazar Sepulveda ,  Ji Luo

IPC: G06F17/30 ,  G06F9/50

CPC classification number: G06F16/282 ,  G06F9/5061 ,  G06F9/546 ,  G06F16/2365

Abstract: Resource data objects describing resources in a system may be maintained in multiple different hierarchies for applying policies to manage the resources. Lookup requests may access the different hierarchies to determine which policies are applicable to a given resource based on the policies identified in each of the hierarchies. Modifications to hierarchies may be performed in isolation so that the application of policies in other hierarchies is unchanged by modifications to a different hierarchy. Access restrictions may be enforced with respect to hierarchies so that different users may be permitted access to different hierarchies for system resource management.