公开(公告)号：US09537938B2

公开(公告)日：2017-01-03

申请号：US14494157

申请日：2014-09-23

Applicant: Amazon Technologies, Inc.

Inventor： Nathan Bartholomew Thomas ,  Eugene Michael Farrell ,  Erik Jonathon Tellvik ,  Gaurang Pankaj Mehta ,  Deepak Suryanarayanan

IPC: G06F15/16 ,  H04L29/08 ,  H04L12/26 ,  G06F9/48 ,  G06F9/44

CPC classification number: H04L67/148 ,  G06F9/452 ,  G06F9/4856 ,  H04L43/08 ,  H04L43/16 ,  H04L67/10 ,  H04L67/1095 ,  H04L67/18

Abstract: It may be determined that a cloud desktop should be migrated from a current region. A destination region to which the cloud desktop will be migrated can be identified. A data volume of the cloud desktop may be copied from the current region to the destination region. The data volume at the current region and the data volume at the destination region may be maintained in sync during the copying. Upon completion of the copying, a current user session associated with the cloud desktop at the current region may be frozen, a current memory and processor state of the current user session may be copied to the destination region, and a second cloud desktop instance at the destination region may be started using the copied data volume and current memory and processor state. The current user session may be connected to the second cloud desktop instance.

Abstract translation: 可能会确定云桌面应该从当前区域迁移。 可以识别云桌面将迁移到的目的地区域。 可以将云桌面的数据卷从当前区域复制到目的地区域。 在复制期间，当前区域的数据量和目的地区域的数据量可以保持同步。 在完成复制时，与当前区域的云桌面相关联的当前用户会话可能被冻结，当前用户会话的当前存储器和处理器状态可以被复制到目的地区域，并且第二云桌面实例在 可以使用复制的数据量和当前存储器和处理器状态来启动目的地区域。 当前用户会话可能连接到第二个云桌面实例。

公开(公告)号：US09313193B1

公开(公告)日：2016-04-12

申请号：US14500865

申请日：2014-09-29

Applicant: Amazon Technologies, Inc.

Inventor： Gaurang Pankaj Mehta ,  Neelam Satish Agrawal ,  Lawrence Hun-Gi Aung ,  Guruprakash Bangalore Rao ,  Shuo Wang ,  Sameer Palande ,  Krithi Rai ,  Chirag Pravin Pandya

IPC: H04L29/06 ,  G06F17/30

CPC classification number: H04L63/0853 ,  G06F17/30386 ,  G06F21/6218 ,  H04L63/06 ,  H04L63/08 ,  H04L63/0807 ,  H04L63/0815 ,  H04L63/083 ,  H04L63/0838 ,  H04L63/102 ,  H04L63/105

Abstract: A user, group, and device management and authentication system allows administrators to manage one or more directories with devices that are not associated with a domain of the one or more directories via a set of APIs. The system also allows applications and services that do not have direct access to a list of directory users to access the one or more directories. The user, group, and device management and authentication system may be an add-on system that works in conjunction with a centrally-managed directory service to provide such functionality. For example, the system may generate an access token associated with a particular directory that can be used by a service accessed by an administrator to call an API provided by the system. The API call may be translated into a directory-specific API call that can be used to perform an action in the particular directory.

Abstract translation: 用户，组和设备管理和认证系统允许管理员通过一组API来管理与一个或多个目录的域不相关联的设备的一个或多个目录。 该系统还允许不能直接访问目录用户列表的应用程序和服务来访问一个或多个目录。 用户，组和设备管理和认证系统可以是与中央管理的目录服务一起工作以提供这样的功能的附加系统。 例如，系统可以生成与特定目录相关联的访问令牌，该目录可由管理员访问的服务使用以调用由系统提供的API。 API调用可能会转换为特定于目录的API调用，该调用可用于在特定目录中执行操作。

公开(公告)号：US20160099924A1

公开(公告)日：2016-04-07

申请号：US14506342

申请日：2014-10-03

Applicant: Amazon Technologies, Inc.

Inventor： Gaurang Pankaj Mehta ,  Neelam Satish Agrawal ,  Lawrence Hun-Gi Aung ,  Chirag Pravin Pandya

IPC: H04L29/06 ,  H04L29/08

CPC classification number: H04L63/08 ,  G06F21/31 ,  H04L61/15 ,  H04L61/1511 ,  H04L61/1523 ,  H04L61/1552 ,  H04L61/1576 ,  H04L63/0815 ,  H04L63/083 ,  H04L63/107 ,  H04L67/10 ,  H04L67/1002 ,  H04L67/1021 ,  H04L67/16 ,  H04L67/18

Abstract: A global endpoint may be associated with an organization name and a plurality of directories located in different geographic regions. The global endpoint may be a computing system that hosts a page used by users to access an application or service. A user may be able to access the application or service using already existing credentials. For example, the user may access the application or service using credentials stored and maintained by an entity with which the user is affiliated. Users having credentials stored in different geographic regions may be able to access the application or service via the same global endpoint.

Abstract translation: 全局端点可以与组织名称和位于不同地理区域中的多个目录相关联。 全局端点可以是托管用户访问应用或服务所使用的页面的计算系统。 用户可能能够使用已有的凭证访问应用程序或服务。 例如，用户可以使用由用户附属的实体存储和维护的凭证来访问应用或服务。 存储在不同地理区域中的凭据的用户可能能够通过相同的全局端点访问应用或服务。

公开(公告)号：US20150135272A1

公开(公告)日：2015-05-14

申请号：US14098298

申请日：2013-12-05

Applicant: Amazon Technologies, Inc.

Inventor： Shon Kiran Shah ,  Guruprakash Bangalore Rao ,  Thomas Christopher Rizzo ,  Gaurang Pankaj Mehta

IPC: H04L29/06

CPC classification number: H04L63/10 ,  G06F2221/2113 ,  H04L63/08 ,  H04L67/025

Abstract: A customer of a computing resource service provider may utilize a set of credentials to request creation of an identity pool within a managed directory service. Accordingly, the managed directory service may create the identity pool. Instead of having the customer create a separate account within this identity pool, the managed directory service may create a shadow administrator account within the identity pool, which may be used to manage other users and resources in the identity pool within the managed directory service. The managed directory service further exposes an application programming interface command that may be used to obtain a set of credentials for accessing the shadow administrator account. The customer may use this command to receive the set of credentials and access the shadow administrator account. Accordingly, the customer can manage users and resources in the identity pool within the managed directory service.

Abstract translation: 计算资源服务提供商的客户可以使用一组凭证来请求在受管理目录服务内创建身份池。 因此，托管目录服务可以创建身份池。 托管目录服务可以在身份池内创建一个影子管理员帐户，而不是让客户在该身份池中创建一个单独的帐户，而这可以用于管理托管目录服务中的身份池中的其他用户和资源。 托管目录服务进一步公开一个应用程序编程接口命令，该命令可用于获取一组用于访问影子管理员帐户的凭据。 客户可以使用此命令来接收一组凭据并访问影子管理员帐户。 因此，客户可以管理托管目录服务内的身份池中的用户和资源。

公开(公告)号：US20150134800A1

公开(公告)日：2015-05-14

申请号：US14098445

申请日：2013-12-05

Applicant: Amazon Technologies, Inc.

Inventor： Shon Kiran Shah ,  Guruprakash Bangalore Rao ,  Gaurang Pankaj Mehta ,  Thomas Christopher Rizzo ,  Sameer Palande ,  Krithi Rai

IPC: H04L12/24

Abstract: Techniques for connecting computer system entities to remote computer system resources are described herein. A computer system entity that requests access to a remote computer system resource has that request fulfilled by a managed directory service which receives the request and connects the computer system entity to the remote computer system resource. While connected, the managed directory service receives commands to perform operations on the remote computer system resource and, if the computer system entity is authorized to perform the operations on the remote computer system resource, the managed directory service performs the operation on the remote computer system resource.

Abstract translation: 本文描述了将计算机系统实体连接到远程计算机系统资源的技术。 请求访问远程计算机系统资源的计算机系统实体具有由接收请求并将计算机系统实体连接到远程计算机系统资源的受管目录服务实现的请求。 管理目录服务连接时，接收对远程计算机系统资源执行操作的命令，如果计算机系统实体被授权对远程计算机系统资源执行操作，则托管目录服务会在远程计算机系统上执行操作 资源。