公开(公告)号：US10057374B2

公开(公告)日：2018-08-21

申请号：US14930482

申请日：2015-11-02

Applicant: Amazon Technologies, Inc.

Inventor： Reto Kramer ,  Daniel Lee Osiecki ,  Nishanth Shankaran ,  Venkates P. Balakrishnan ,  Geoffrey Scott Pare ,  Blake Meike ,  Christopher Whitaker

IPC: H04L12/24 ,  H04L29/08

CPC classification number: H04L67/34 ,  H04L41/0843 ,  H04L67/1097

Abstract: A resource provisioning service allows users to provision multiple, different network resources in an atomic manner and with a single call to a resource provisioning service. In some instances, the multiple, different network resources comprise individual types of resources that form a portion of one or more cloud-computing platforms. For instance, one or more entities may host and operate a cloud-computing platform that includes different types of network resources, such a storage service, a load balancing service, a compute service, a security service, or any other similar or different type of network-accessible service.

公开(公告)号：US20190007526A1

公开(公告)日：2019-01-03

申请号：US16105449

申请日：2018-08-20

Applicant: Amazon Technologies, Inc.

Inventor： Reto Kramer ,  Daniel Lee Osiecki ,  Nishanth Shankaran ,  Venkates P. Balakrishnan ,  Geoffrey Scott Pare ,  Blake Meike ,  Christopher Whitaker

IPC: H04L29/08 ,  H04L12/24

Abstract: A resource provisioning service allows users to provision multiple, different network resources in an atomic manner and with a single call to a resource provisioning service. In some instances, the multiple, different network resources comprise individual types of resources that form a portion of one or more cloud-computing platforms. For instance, one or more entities may host and operate a cloud-computing platform that includes different types of network resources, such a storage service, a load balancing service, a compute service, a security service, or any other similar or different type of network-accessible service.

公开(公告)号：US20240040006A1

公开(公告)日：2024-02-01

申请号：US18359837

申请日：2023-07-26

Applicant: Amazon Technologies, Inc.

Inventor： Reto Kramer ,  Daniel Lee Osiecki ,  Nishanth Shankaran ,  Venkates P. Balakrishnan ,  Geoffrey Scott Pare ,  Blake Meike ,  Christopher Whitaker

IPC: H04L67/00 ,  H04L41/084 ,  H04L67/1097

CPC classification number: H04L67/34 ,  H04L41/0843 ,  H04L67/1097

Abstract: A resource provisioning service allows users to provision multiple, different network resources in an atomic manner and with a single call to a resource provisioning service. In some instances, the multiple, different network resources comprise individual types of resources that form a portion of one or more cloud-computing platforms. For instance, one or more entities may host and operate a cloud-computing platform that includes different types of network resources, such a storage service, a load balancing service, a compute service, a security service, or any other similar or different type of network-accessible service.

公开(公告)号：US11882154B2

公开(公告)日：2024-01-23

申请号：US15162323

申请日：2016-05-23

Applicant: Amazon Technologies, Inc.

Inventor： Avinash Jaisinghani ,  Reto Kramer ,  Christopher Whitaker ,  Venkates P. Balakrishnan ,  Prashant Jayaraman ,  Richard Curtis Edwards, Jr.

IPC: H04L29/06 ,  H04L9/40 ,  H04L41/0806

CPC classification number: H04L63/20 ,  H04L41/0806 ,  H04L63/06 ,  H04L63/0823 ,  H04L63/10 ,  H04L63/102

Abstract: Systems and methods are described for enabling users to model security resources and user access keys as resources in a template language. The template can be used to create and update a stack of resources that will provide a network-accessible service. The security resources and access keys can be referred to in the template during both stack creation process and the stack update process. The security resources can include users, groups and policies. Additionally, users can refer to access keys in the template as dynamic parameters without any need to refer to the access keys in plaintext. The system securely stores access keys within the system and allows for templates to refer to them once defined. These key references can then be passed within a template to resources that need them as well as passing them on securely to resources like server instances through the use of the user-data field.

公开(公告)号：US11758006B2

公开(公告)日：2023-09-12

申请号：US16105449

申请日：2018-08-20

Applicant: Amazon Technologies, Inc.

Inventor： Reto Kramer ,  Daniel Lee Osiecki ,  Nishanth Shankaran ,  Venkates P. Balakrishnan ,  Geoffrey Scott Pare ,  Blake Meike ,  Christopher Whitaker

IPC: H04L67/00 ,  H04L41/084 ,  H04L67/1097

CPC classification number: H04L67/34 ,  H04L41/0843 ,  H04L67/1097

Abstract: A resource provisioning service allows users to provision multiple, different network resources in an atomic manner and with a single call to a resource provisioning service. In some instances, the multiple, different network resources comprise individual types of resources that form a portion of one or more cloud-computing platforms. For instance, one or more entities may host and operate a cloud-computing platform that includes different types of network resources, such a storage service, a load balancing service, a compute service, a security service, or any other similar or different type of network-accessible service.

公开(公告)号：US09350738B2

公开(公告)日：2016-05-24

申请号：US14611933

申请日：2015-02-02

Applicant: Amazon Technologies, Inc.

Inventor： Avinash Jaisinghani ,  Reto Kramer ,  Christopher Whitaker ,  Venkates P. Balakrishnan ,  Prashant Jayaraman ,  Richard Curtis Edwards, Jr.

IPC: H04L29/06 ,  H04L12/24

CPC classification number: H04L63/20 ,  H04L41/0806 ,  H04L63/06 ,  H04L63/0823 ,  H04L63/10 ,  H04L63/102

Abstract: Systems and methods are described for enabling users to model security resources and user access keys as resources in a template language. The template can be used to create and update a stack of resources that will provide a network-accessible service. The security resources and access keys can be referred to in the template during both stack creation process and the stack update process. The security resources can include users, groups and policies. Additionally, users can refer to access keys in the template as dynamic parameters without any need to refer to the access keys in plaintext. The system securely stores access keys within the system and allows for templates to refer to them once defined. These key references can then be passed within a template to resources that need them as well as passing them on securely to resources like server instances through the use of the user-data field.

公开(公告)号：US10257110B2

公开(公告)日：2019-04-09

申请号：US14473037

申请日：2014-08-29

Applicant: Amazon Technologies, Inc.

Inventor： Avinash Jaisinghani ,  Reto Kramer ,  Christopher Whitaker ,  Nishanth Shankaran ,  Jaykumar H. Gosar ,  Jeffrey L. Baker ,  Daniel Osiecki ,  Danny Rabbani ,  Prashant Jayaraman ,  Venkates P. Balakrishnan ,  Adam M. Thomas

IPC: G06F15/16 ,  H04L12/923 ,  H04L12/24 ,  G06F8/65

Abstract: Techniques are described that enable a user to upgrade a stack of resources by providing a template that reflects the desired end state of the stack. Upon receiving a new template, the system automatically detects changes that should be performed and determines the order in which the changes should be performed. The system can also detect if the desired changes to the stack are a result of direct modifications; because parameters to the resources have changed; or the changes are indirectly caused by other dependency/attribute changing. Additionally, the system determines whether the changes require creating new resources or if the changes can be made to the resources live. In case of replacement of resources, the system will first create the new resource, move that new resource into the stack and remove the old resource(s). In case of failures, the system ensures that the stack rolls back to the initial state.