公开(公告)号：US20190278928A1

公开(公告)日：2019-09-12

申请号：US15913741

申请日：2018-03-06

Applicant: Amazon Technologies, Inc.

Inventor： Neha RUNGTA ,  Pauline Virginie BOLIGNANO ,  Catherine DODGE ,  Carsten VARMING ,  John COOK ,  Rajesh VISWANATHAN ,  Daryl Stephen COOKE ,  Santosh KALYANKRISHNAN

IPC: G06F21/62 ,  G06F9/445 ,  G06F9/455

Abstract: A security assessment system of a computing resource service provider performs security analyses of virtual resource instances, such as virtual machine instances and virtual data store instances, to verify that certain invariable security requirements are satisfied by the instances' corresponding configurations; these analyses are performed before the instances are provisioned and deployed. If the security checks, which can be selected by the administrator of the resources, fail, the requested resources are denied deployment. Notifications identifying the faulty configuration(s) may be send to the administrative user. A template for launching virtual resource instances may be transformed into an optimized template for performing the pre-deployment security checks, such as by storing information needed to perform the checks within the optimized template itself.