-
公开(公告)号:US10552193B2
公开(公告)日:2020-02-04
申请号:US15676777
申请日:2017-08-14
Applicant: Amazon Technologies, Inc.
Inventor: Timothy Allen Wagner , Dylan Chandler Thomas , Ajay Nair
IPC: G06F9/455
Abstract: A system for providing security mechanisms for secure execution of program code is described. The system may be configured to maintain a plurality of virtual machine instances. The system may be further configured to receive a request to execute a program code and allocate computing resources for executing the program code on one of the virtual machine instances. One mechanism involves executing program code according to a user-specified security policy. Another mechanism involves executing program code that may be configured to communicate or interface with an auxiliary service. Another mechanism involves splitting and executing program code in a plurality of portions, where some portions of the program code are executed in association with a first level of trust and some portions of the program code are executed with different levels of trust.
-
公开(公告)号:US09715402B2
公开(公告)日:2017-07-25
申请号:US14502620
申请日:2014-09-30
Applicant: Amazon Technologies, Inc.
Inventor: Timothy Allen Wagner , Sean Philip Reque , Derek Steven Manwaring , Xin Zhao , Dylan Chandler Thomas
CPC classification number: G06F9/45558 , G06F9/44536 , G06F9/44552 , G06F2009/4557 , G06F2009/45575
Abstract: A system for providing dynamic code deployment and versioning is provided. The system may be configured to receive a first request to execute a newer program code on a virtual compute system, determine, based on the first request, that the newer program code is a newer version of an older program code loaded onto an existing container on a virtual machine instance on the virtual compute system, initiate a download of the newer program code onto a second container on the same virtual machine instance, and causing the first request to be processed with the older program code in the existing container.
-
公开(公告)号:US09678773B1
公开(公告)日:2017-06-13
申请号:US14502810
申请日:2014-09-30
Applicant: Amazon Technologies, Inc.
Inventor: Timothy Allen Wagner , Dylan Chandler Thomas , Sean Philip Reque
CPC classification number: G06F9/5005 , G06F9/44521 , G06F9/45533 , G06F9/45545 , G06F9/45558 , G06F9/5077 , G06F2009/45562
Abstract: A system for providing low latency computational capacity is provided. The system may be configured to maintain a pool of virtual machine instances, which may be assigned to users to service the requests associated with the users. The system may further be configured to receive a request to acquire compute capacity for executing a program code associated with a particular user, determine whether the pool of virtual machine instances includes a container that may be used to execute the program code therein, and cause the program code of the particular user to be executed in the container.
-
4.
公开(公告)号:US20160224785A1
公开(公告)日:2016-08-04
申请号:US14613723
申请日:2015-02-04
Applicant: Amazon Technologies, Inc.
Inventor: Timothy Allen Wagner , Dylan Chandler Thomas , Ajay Nair
CPC classification number: G06F21/53 , G06F9/45533 , G06F9/45558 , G06F9/5027 , G06F21/44 , G06F21/552 , G06F2009/45562
Abstract: A system for providing security mechanisms for secure execution of program code is described. The system may be configured to maintain a plurality of virtual machine instances. The system may be further configured to receive a request to execute a program code and allocate computing resources for executing the program code on one of the virtual machine instances. One mechanism involves executing program code according to a user-specified security policy. Another mechanism involves executing program code that may be configured to communicate or interface with an auxiliary service. Another mechanism involves splitting and executing program code in a plurality of portions, where some portions of the program code are executed in association with a first level of trust and some portions of the program code are executed with different levels of trust.
Abstract translation: 描述了一种用于提供用于安全执行程序代码的安全机制的系统。 该系统可以被配置为维护多个虚拟机实例。 该系统还可以被配置为接收执行程序代码的请求,并且分配用于在虚拟机实例之一上执行程序代码的计算资源。 一种机制涉及根据用户指定的安全策略执行程序代码。 另一种机制涉及执行可配置为与辅助服务通信或接口的程序代码。 另一种机制涉及在多个部分中分割和执行程序代码,其中程序代码的一些部分与第一级别的信任相关联执行,并且程序代码的一些部分以不同的信任级别执行。
-
公开(公告)号:US11461124B2
公开(公告)日:2022-10-04
申请号:US16778437
申请日:2020-01-31
Applicant: Amazon Technologies, Inc.
Inventor: Timothy Allen Wagner , Dylan Chandler Thomas , Ajay Nair
IPC: G06F9/455
Abstract: A system for providing security mechanisms for secure execution of program code is described. The system may be configured to maintain a plurality of virtual machine instances. The system may be further configured to receive a request to execute a program code and allocate computing resources for executing the program code on one of the virtual machine instances. One mechanism involves executing program code according to a user-specified security policy. Another mechanism involves executing program code that may be configured to communicate or interface with an auxiliary service. Another mechanism involves splitting and executing program code in a plurality of portions, where some portions of the program code are executed in association with a first level of trust and some portions of the program code are executed with different levels of trust.
-
公开(公告)号:US20180039506A1
公开(公告)日:2018-02-08
申请号:US15658038
申请日:2017-07-24
Applicant: Amazon Technologies, Inc.
Inventor: Timothy Allen Wagner , Sean Philip Reque , Derek Steven Manwaring , Xin Zhao , Dylan Chandler Thomas
Abstract: A system for providing dynamic code deployment and versioning is provided. The system may be configured to receive a first request to execute a newer program code on a virtual compute system, determine, based on the first request, that the newer program code is a newer version of an older program code loaded onto an existing container on a virtual machine instance on the virtual compute system, initiate a download of the newer program code onto a second container on the same virtual machine instance, and causing the first request to be processed with the older program code in the existing container.
-
公开(公告)号:US20170199766A1
公开(公告)日:2017-07-13
申请号:US15468724
申请日:2017-03-24
Applicant: Amazon Technologies, Inc.
Inventor: Timothy Allen Wagner , Dylan Chandler Thomas , Sean Philip Reque
CPC classification number: G06F9/5005 , G06F9/44521 , G06F9/45533 , G06F9/45545 , G06F9/45558 , G06F9/5077 , G06F2009/45562
Abstract: A system for providing low latency computational capacity is provided. The system may be configured to maintain a pool of virtual machine instances, which may be assigned to users to service the requests associated with the users. The system may further be configured to receive a request to acquire compute capacity for executing a program code associated with a particular user, determine whether the pool of virtual machine instances includes a container that may be used to execute the program code therein, and cause the program code of the particular user to be executed in the container.
-
公开(公告)号:US09413626B2
公开(公告)日:2016-08-09
申请号:US14562577
申请日:2014-12-05
Applicant: Amazon Technologies, Inc.
Inventor: Sean Philip Reque , Derek Steven Manwaring , Dylan Chandler Thomas , Timothy Allen Wagner , Xin Zhao
CPC classification number: G06F9/5077 , G06F9/445 , G06F9/45533 , G06F9/50 , G06F2009/45562 , H04L43/0876 , H04L47/70 , H04L47/808
Abstract: A system for providing automatic resource resizing is provided. The system may be configured to maintain a plurality of virtual machine instances. The system may be further configured to receive a request to execute a program code and allocate computing resources for executing the program code on one of the virtual machine instances. The amount of resources allocated for executing the program code may be specified by the request and adjusted as needed.
Abstract translation: 提供了一种用于提供自动资源调整大小的系统。 该系统可以被配置为维护多个虚拟机实例。 该系统还可以被配置为接收执行程序代码的请求,并且分配用于在虚拟机实例之一上执行程序代码的计算资源。 分配用于执行程序代码的资源量可以由请求指定并根据需要进行调整。
-
公开(公告)号:US20160224360A1
公开(公告)日:2016-08-04
申请号:US14613735
申请日:2015-02-04
Applicant: Amazon Technologies, Inc.
Inventor: Timothy Allen Wagner , Dylan Chandler Thomas , Ajay Nair
CPC classification number: G06F9/45558 , G06F2009/4557
Abstract: A system for providing security mechanisms for secure execution of program code is described. The system may be configured to maintain a plurality of virtual machine instances. The system may be further configured to receive a request to execute a program code and allocate computing resources for executing the program code on one of the virtual machine instances. One mechanism involves executing program code according to a user-specified security policy. Another mechanism involves executing program code that may be configured to communicate or interface with an auxiliary service. Another mechanism involves splitting and executing program code in a plurality of portions, where some portions of the program code are executed in association with a first level of trust and some portions of the program code are executed with different levels of trust.
-
公开(公告)号:US11126469B2
公开(公告)日:2021-09-21
申请号:US16512063
申请日:2019-07-15
Applicant: Amazon Technologies, Inc.
Inventor: Sean Philip Reque , Derek Steven Manwaring , Dylan Chandler Thomas , Timothy Allen Wagner , Xin Zhao
IPC: G06F9/50 , G06F9/455 , H04L12/26 , H04L12/911 , H04L12/927 , G06F9/445
Abstract: A system for providing automatic resource resizing is provided. The system may be configured to maintain a plurality of virtual machine instances. The system may be further configured to receive a request to execute a program code and allocate computing resources for executing the program code on one of the virtual machine instances. The amount of resources allocated for executing the program code may be specified by the request and adjusted as needed.
-
-
-
-
-
-
-
-
-