Abstract: A data catalog system is disclosed that provides capabilities for uniquely identifying and retrieving data entities stored in diverse data sources managed by an organization. The data catalog system includes capabilities for generating a unique external identifier for a data entity (e.g., a data asset or a data object) by identifying a set of immutable configuration parameters associated with the data asset and identifying a set of data object attributes that uniquely identify data objects within the data asset. The generated unique external identifiers are stored as part of the metadata harvested by the data catalog system. The external identifiers are used to enforce a single representation of the data assets and the data objects in the data catalog system. The external object identifiers are used to perform data lookups and reconcile states of data entities during the metadata harvesting process.

Abstract: Techniques for configuring an enriched data metrics pipeline (DMP) include: obtaining node configuration data associated with an unenriched DMP for nodes of a heterogeneous computing platform, including (a) a first kind of node including an application programming interface (API) for obtaining unenriched data associated with the first kind of node and (b) a second kind of node including an API for obtaining unenriched data associated with the second kind of node; the unenriched DMP being configured to provide node-level unenriched data to a service according to a first schedule; the service being configured to generate node-level data metrics based on the unenriched data; based on the node configuration data, configuring an enriched DMP to provide node-level enriched data to the service according to a second schedule that is less frequent than the first schedule; the service being configured to generate fleet-level data metrics based on the node-level enriched data.

Abstract: Techniques are described for implementing a container environment where each pod within the container environment is provided with a unique IP address and a virtual communication device such as an IPvlan device. Communications from source pods are directly routed to destination pods within the container environment by one or more virtualized network interface cards (VNICs) utilizing the unique IP addresses of the destination pods, without the need for bridging and encapsulation. This reduces a size of data being transmitted and also eliminates a compute cost necessary to perform encapsulation of data during transmission.

Abstract: Techniques are described for providing a multi-cloud control plane (MCCP) in a first cloud infrastructure (included in a first cloud environment provided by a first cloud services provider) that enables services and/or resources provided in the first cloud infrastructure to be utilized by users of a second cloud environment, where the second cloud environment is different than the first cloud environment. The multi-cloud infrastructure enables a user associated with an account with a second cloud services provider to use, from the second cloud infrastructure, a first service from the set of one or more cloud services. The multi-cloud infrastructure creates a link between the account with the second cloud service provider and a tenancy created in the first cloud infrastructure for enabling using the first service by the user.

Abstract: Techniques are described herein for analyzing and tuning database workloads to optimize application performance. In some embodiments, a workload analyzer identifies a captured workload that includes a set of database queries executed within a particular timeframe. The workload analyzer compares the workload within one or more other workloads executed within a previous timeframe to determine differences between the different workloads. For example, the workload analyzer may identify changes in the distributions of queries, including how many queries are unchanged, missing, and/or new. The workload analyzer may further detect changes in the performance of individual queries. The workload analyzer may determine the overall performance impact of such changes on the total workload. Based on the analysis, the workload analyzer may generate reports, alerts, tuning advice, and/or recommendations to boost performance.

Abstract: A computer-implemented method includes obtaining, from text corpus including article-summary pairs in a plurality of languages, a plurality of article-summary pairs in a target language among the plurality of languages, to form an article-summary pairs dataset in which each article corresponds to a summary; inputting articles from the article-summary pairs to a machine learning model; generating, by the machine learning model, embeddings for sentences of the articles; extracting, by the machine learning model, keywords from the articles with a probability that varies based on lengths of the sentences, respectively; outputting, by the machine learning model, the keywords; applying a maximal marginal relevance algorithm to the extracted keywords, to select relevant keywords; and generating a keyword-text pairs dataset that includes the relevant keywords and text from the articles, the text corresponding to the relevant keywords in each of keyword-text pairs of the keyword-text pairs dataset.

Abstract: The present disclosure relates to a system and techniques for resolving dangling references resulting from a dependency relationship between computing resource objects uncovered during a harvesting process. In embodiments, a harvester application adds computing resource objects associated with a client to a resource collection as those computing resource objects are identified. Dependencies are identified as each computing resource object is added to the resource collection, which are resolved only if the computing resource objects associated with those dependencies have already been added to the resource collection. If the computing resource objects associated with the dependencies have not already been added to the resource collection, then the dependency is added to an observer pool. Observer modules are configured to check each computing resource object as it is processed during the harvest process in order to match those computing resource objects to unresolved dependencies.

Abstract: Techniques are described for providing a multi-cloud control plane (MCCP) in a first cloud infrastructure (included in a first cloud environment provided by a first cloud services provider) that enables services and/or resources provided in the first cloud infrastructure to be utilized by users of a second cloud environment, where the second cloud environment is different than the first cloud environment. The multi-cloud infrastructure enables a user associated with an account with a second cloud services provider to use, from the second cloud infrastructure, a first service from the set of one or more cloud services. The multi-cloud infrastructure creates a link between the account with the second cloud service provider and a tenancy created in the first cloud infrastructure for enabling using the first service by the user.

Abstract: A method includes preparing a base model using an input model pretrained on at least three languages different from each other and a base vocabulary including words corresponding to two languages among the at least three languages, where the preparing the base model includes constraining the input model to the words included in the base vocabulary; training the base model using a first enhanced training dataset generated from public data, to generate a text summarization model; training the base model using a second enhanced training dataset generated from the first enhanced training dataset, to generate a text generation model; and training the base model using a third enhanced training dataset that is generated using the second enhanced training dataset and the text summarization model, to generate a next sentence generation model.

Abstract: Techniques are described for providing a multi-cloud control plane (MCCP) in a first cloud infrastructure (included in a first cloud environment provided by a first cloud services provider) that enables services and/or resources provided in the first cloud infrastructure to be utilized by users of a second cloud environment, where the second cloud environment is different than the first cloud environment. The multi-cloud infrastructure enables a user associated with an account with a second cloud services provider to use, from the second cloud infrastructure, a first service from the set of one or more cloud services. The multi-cloud infrastructure creates a link between the account with the second cloud service provider and a tenancy created in the first cloud infrastructure for enabling using the first service by the user.

Abstract: Techniques for managing task assignments to workers in a work environment are disclosed. A system identifies one or more workers with qualifications that match recommended qualifications to perform a task in a work environment. The system applies a trained machine learning model to task performance data associated with the worker, such as a past history of tasks performed and statistics associated with the performance of the task. The machine learning model generates a prediction of downstream effects associated with assigning the task to the user. The downstream effects include delays and performance improvements on subsequent tasks performed by the worker, as well as effects on tasks performed by other workers, at work centers in the work environment.

Abstract: Techniques are described for creating a network-link between a first virtual network in a first cloud environment and a second virtual network in a second cloud environment. The first virtual network in the first cloud environment is created to enable a user associated with a customer tenancy in the second cloud environment to access one or more services provided in the first cloud environment. The network-link is created based on network resources and one or more link-enabling virtual networks being deployed in the first cloud environment and the second cloud environment.

Abstract: In one or more embodiments, a metadata-driven user interface is implemented for presenting a set of available services, provided by a plurality of vendors, to a particular service consumer. The system queries metadata associated with of a set of candidate vendors to identify services provided by the candidate vendors that are available to a service consumer. The system generates and customizes the meta-driven interface for the service consumer based on the services available. The system receives user input selecting at least one of the services provided by a vendor. The system then queries configuration information associated with the particular service. The configuration information includes, for example, a workflow associated with the service, and identification of the service consumer's information to be used in execution of the workflow associated with the service. The system obtains the service consumer's information and uses the service consumer's information to cause execution of the workflow.

Abstract: Described are improved systems, computer program products, and methods for obtaining space usage information within a clustered database system. Some approaches provide an improved algorithm and structure that gives the ability to compute the latest and accurate space usage with only in-memory operations.

Abstract: Method includes populating fake value for each of entities, to generate string of fake entity values that correspond to entities; inserting sentinel token between adjacent fake values included in the string to generate first input data; generating, by natural language generation model, natural language sentences based on first input data, natural language sentences including one or more fake values from the string; analyzing natural language sentences to determine whether any fake value from the string is missing; based on the fake value missing, summarizing, using text summarization model, natural language sentences to generate text summary; concatenating the text summary with the fake value, to generate second input data; and generating, by a next sentence generation model, additional natural language sentence using the second input data, the additional natural language sentence including the fake value.

Abstract: Techniques for managing anomalies in a software system include monitoring the software system for anomalies via a plurality of signals and determining that signal results associated with the signals indicate a presence of an anomaly in the software system. The techniques also include identifying a hierarchy of sensors associated with the anomaly, where the hierarchy includes a parent sensor and a set of child sensors that are direct or indirect descendants of the parent sensor. The techniques additionally include executing the parent and child sensors to analyze the software system for one or more causes of the anomaly, and determining the cause(s) of the anomaly based on sensor results generated by the parent and child sensors. Finally, the techniques include causing remediation of the cause(s) of the anomaly based on one or more child sensors associated with the cause(s) and one or more resolutions mapped to the child sensor(s).

Abstract: The present embodiments relate to data processing model recommendation and review of a portion of data using a recommended model. A model catalog executing on a cloud infrastructure (CI) system can parse data from an obtained dataset identifying aspects of the dataset. The parsed data from the dataset can be compared with a plurality of potential models stored in a domain ontology store of the model catalog to identify one or more recommended models. Review output data can be generated using the dataset and any of the recommended models. The review output data resulting from the recommended model can be provided to the client for the client to either accept or reject the model.

Abstract: Techniques for lazy compaction are disclosed, including: selecting, by a garbage collector, multiple regions of a memory for inclusion in a relocation set; populating, by the garbage collector, a lazy free list (LFL) with the multiple regions selected for inclusion in the relocation set; subsequent to populating the LFL: determining, by an allocator, that an ordinary free list managed by the garbage collector is depleted; responsive to determining that the ordinary free list is depleted: selecting a region in the LFL; executing one or more load barriers associated respectively with one or more objects marked as live in the region, each respective load barrier being configured to relocate the associated object from the region if the associated object is still live; subsequent to executing the one or more load barriers: allocating the region.

Abstract: Techniques for managing digital messages to and from a proxy message address are disclosed. A system receives a message directed to a particular destination address. The system replaces any source address included in the message with a proxy address. When the system receives a reply to the message, the reply is directed to the proxy address. The system analyzes message data to identify a target address for the reply message. The system identifies contextual data associated with the reply message. The system transmits the reply message, and the contextual data, to the target address.

Abstract: Disclosed is an improved approach to integrate distributed applications into an XA transaction. A transaction manager library is integrated into a distributed application, where the transaction manager library provides the benefit of implementing optimizations for the XA transaction, as well as minimizing or eliminating the need to create custom software code to make the application operable with the transaction manager for the XA transaction.

Abstract: Techniques are disclosed herein for integrating document question answering in an artificial intelligence-based platform, such as a chatbot system. The techniques include receiving a query from a user, rewriting the query to include one or more specific descriptors, computing an embedding vector for the rewritten query, retrieving one or more textual passages from a document store utilizing the embedding vector for the rewritten query, determining one or more answers to the rewritten query within the one or more textual passages, and returning the one or more answers.

Abstract: Techniques for generating recommendations for re-ordering scheduled tasks to improve completion times of one or more tasks are disclosed. A system displays a representation of a schedule for performing tasks among work centers in a work environment. The system identifies performance metrics associated with a current configuration of tasks in the work environment. The system further analyzes performance metrics for alternative task schedules in the work environment. The system displays interface elements to allow a user to re-order tasks among the work centers in the work environment. The system also displays predicted performance metrics associated with the alternative task schedules. When a user selects a particular interface element to implement an alternative task schedule, the system generates instructions to work centers to reorder tasks in the work environment.

Abstract: Techniques for maintaining list-type text formatting when converting content from a source content format to a destination content format are disclosed. A system generates text content by applying text formatting tags to segments of characters obtained from a source electronic document. The system parses a static-display type source electronic document to obtain character data of the characters in the source document. The system analyzes the parsed data to identify text arranged in a list-type text format in the source document. The system generates text content in a destination content format different from the source format by applying tags to segments of the text content designating the segments items in a list.

Abstract: Techniques are described for providing a multi-cloud control plane (MCCP) in a first cloud infrastructure (included in a first cloud environment provided by a first cloud services provider) that enables services and/or resources provided in the first cloud infrastructure to be utilized by users of a second cloud environment, where the second cloud environment is different than the first cloud environment. The multi-cloud infrastructure enables a user associated with an account with a second cloud services provider to use, from the second cloud infrastructure, a first service from the set of one or more cloud services. The multi-cloud infrastructure creates a link between the account with the second cloud service provider and a tenancy created in the first cloud infrastructure for enabling using the first service by the user.

Abstract: Described are improved systems, computer program products, and methods for a new local rolling online patching solution to a database server with minimized disruption to other instances during patching. For a one-node database server, it achieves single rolling online patching by starting a new instance of the same database from the newly patched home before shutting down the collocated instance running out of the old home.

Abstract: Techniques for using logit values for classifying utterances and messages input to chatbot systems in natural language processing. A method can include a chatbot system receiving an utterance generated by a user interacting with the chatbot system. The chatbot system can input the utterance into a machine-learning model including a set of binary classifiers. Each binary classifier of the set of binary classifiers can be associated with a modified logit function. The method can also include the machine-learning model using the modified logit function to generate a set of distance-based logit values for the utterance. The method can also include the machine-learning model applying an enhanced activation function to the set of distance-based logit values to generate a predicted output. The method can also include the chatbot system classifying, based on the predicted output, the utterance as being associated with the particular class.

Abstract: An expense report generation system receives transaction authorization data from a card issuer and compares the data with expense report generation criteria to determine whether to generate an expense report, prior to settlement of the transaction, based on the authorization data. The expense report generation system evaluates additional data obtained from other data sources including contextual information of the employee, transaction authorization, location, and other employees to generate the expense report. The expense report generation system subsequently updates the generated expense report based on updated transaction authorization data and/or transaction settlement data. The expense report generation system trains and uses a machine learning model for efficiency and accuracy in generating expense reports from transaction authorization data while reducing an employee's burden in manually inputting expense information and the approval process burden.

Abstract: In one or more embodiments, a software service allows software providers to implement machine learning (ML) features into products offered by the software providers. Each ML feature may be referred to as an encapsulated ML application, which may be defined and maintained in a central repository, while also being provisioned for each user of the software provider on an as-needed basis. Advantageously, embodiments allow for a central definition for an ML application that encapsulates data science and processing capabilities and routines of the software provider. This central ML application delivers a ML deployment pipeline template that may be replicated multiple times as separate, tailored runtime pipeline instances on a per-user basis. Each runtime pipeline instance accounts for differences in the specific data of each user, resulting in user-specific ML models and predictions based on the same central ML application.

Abstract: Techniques for implementing a qualification-based task management system in a work environment are disclosed. When a user logs in to a work center terminal, a system identifies a set of pending tasks that need to be completed. The system filters the tasks available to the user based on the user's qualifications and the equipment present at the work center. When the system identifies a task for which there is not a set of users with matching qualifications, the system applies a machine learning model to the task parameters to identify candidate users or recommended qualifications for performing the task.

Abstract: A secure private network connectivity system (SNCS) within a cloud service provider infrastructure (CSPI) is described that provides secure private network connectivity between external resources residing in a customer's on-premise environment and the customer's resources residing in the cloud. The SNCS provides secure private bi-directional network connectivity between external resources residing in a customer's external site representation and resources and services residing in the customer's VCN in the cloud without a user (e.g., an administrator) of the enterprise having to explicitly configure the external resources, advertise routes or set up site-to-site network connectivity.

Abstract: The present disclosure relates to systems and methods for providing cloud-based services securely to on-premises networks or other infrastructure. More particularly, the present disclosure relates to systems and methods for enriching first-party data (e.g., data collected directly by an on-premises server) stored within on-premises networks by enabling the on-premises networks to retrieve and process third-party data stored on cloud-based networks. As a technical benefit, cloud-based services can be performed on the first-party data within the on-premises networks.

Abstract: Techniques for managing digital messages to and from a shared mailbox are disclosed. A system receives a message directed to a shared mailbox. The system analyzes contextual data in the message to identify a set of users with access to the shared mailbox who are recipients of the message. The system performs notification operations to notify different users with access to the shared mailbox of different messages. Notification operations include sending a notification to a particular communications platform, such as email, instant message, or text, that a message in the shared mailbox is associated with the recipient, tagging the message in the shared mailbox with names of recipients associated with the message, and/or categorizing the messages in the shared mailbox according to users.

Abstract: Techniques are described for creating a network-link between a virtual network in a cloud environment and a service endpoint associated with a service provided by another cloud environment. The network-link is created based on network resources and one or more link-enabling virtual networks being deployed in the first cloud environment and the second cloud environment.

Abstract: Techniques are described for providing a multi-cloud control plane (MCCP) in a first cloud infrastructure (included in a first cloud environment provided by a first cloud services provider) that enables services and/or resources provided in the first cloud infrastructure to be utilized by users of a second cloud environment, where the second cloud environment is different than the first cloud environment. The multi-cloud infrastructure enables a user associated with an account with a second cloud services provider to use, from the second cloud infrastructure, a first service from the set of one or more cloud services. The multi-cloud infrastructure creates a link between the account with the second cloud service provider and a tenancy created in the first cloud infrastructure for enabling using the first service by the user.

Abstract: For end-to-end encryption of a virtual cloud network, a VPN tunnel from a customer device is terminated at a host network headend device using encryption keys secured in hardware and managed by the customer. The network headend device can be a card in a bare-metal server with one or more network virtualization devices. The network headend device is configured to receive a first key provisioned by a customer; receive a first data packet sent from a device of the customer; and decrypt the first data packet using the first key to obtain information. A network virtualization device is configured to receive the information from the network headend device; ascertain that the information is to be sent to a virtual machine in a virtual cloud network; ascertain that data in the virtual cloud network is configured to be encrypted; and encrypt the information with a second key to generate a second data packet before routing the second data packet to the virtual machine.

Abstract: Techniques for implementing user interfaces, systems, and processes for multidimensional clustering and analysis are described herein. In one aspect, an application or cloud service receives a request to cluster a set of records where the request identifies a first set of one or more dimensions to use for clustering and a second set of one or more dimensions to analyze for correlation patterns. Responsive to receiving the request to cluster the set of records, the system generates clusters based at least in part on variances in the first set of one or more dimensions, wherein each cluster includes at least one record from the set of records. The system may generate, for each respective cluster, an analytic result that identifies how strongly the second set of one or more dimensions correlate to the respective cluster. The system may present the clusters and analytic results for further processing.

Abstract: Techniques are provided for block-level fail atomicity on byte-level non-volatile media. In one technique, an offset table and application data that stores content of a file are stored for a file. The offset table includes multiple entries, each entry being associated with a different offset value and storing a logical block address (LBA) that references a location in the application data. In response to receiving a request, that includes an input buffer and an offset value, to update the file: (a) an entry, in the offset table, that corresponds to the offset value and comprises a first LBA is identified; (b) a second LBA that is considered free is identified; (c) the second LBA is replaced with the first LBA; (d) the input buffer is written to a location, in the application data, that the second LBA references; and (e) the second LBA is added in the entry.

Abstract: A computer system may receive one or more requests for access to one or more cloud services and may store the one or more requests in a request log. The computer system may receive one or more access rules applicable to cloud service access rights. The computer system may aggregate the one or more requests of the request log to determine access requirements for a container, the container being configured to store one or more applications. The computer system may generate and store container access policies that define access of a container and the one or more cloud services, the container access policies based at least in part on the aggregated one or more requests and the one or more access rules. The computer system may send the container access policies to a request forwarder of a compute instance in a production environment.

Abstract: The present disclosure relates to a system and techniques for preventing corruption of snapshot data by limiting the visibility of committed data. To do this, the system may maintain an index that indicates the highest transaction identifier value such that no future commits will have a transaction identifier less than or equal to the indexed transaction identifier value. In embodiments, if a read is performed, only transactions having a transaction identifier less than or equal to the index value can be read. Each time that a transaction is committed, the index value is updated to the transaction identifier for the transaction having the highest transaction identifier without any intermediary transactions.

Abstract: Techniques for recommending runbook operations during a runbook generation process are disclosed. A system recommends operations for including in the runbook based on attributes of a detected event. The system presents event attributes associated with the detected event to a user in a runbook generation interface. When the user selects an event attribute, the system presents a set of candidate runbook operations associated with the event attribute. Based on user selections of runbook operations to include in a runbook, the system generates and stores a template of the runbook in which the attribute values associated with the detected event are omitted. Upon execution of the runbook at a future time, the system, or a user, may populate the event attributes in the runbook with values that correspond to the future event of the same event type.

Abstract: Techniques for recommending runbook operations during a runbook generation process are disclosed. The system recommends operations for including in the runbook based on user activity. Generating operations of a runbook based on user activity generates a runbook that captures a user's behavior. The recommended operations may be different than any operations performed by the user. The recommended operations may be based in part on data sets accessed by the user frequently, periodically, or continuously.

Abstract: Techniques for enhancing actionable opportunities through machine learning are disclosed. In some embodiments, a system includes an event listener for detecting an opportunity to perform an action using one or more computing resources. When a new opportunity is detected, the system generates a set of search criteria, which is used to search a set of external web resources for current events. The system may then generate, using a machine learning model as a function of one or more features extracted from current events satisfying the search criteria, a score representing a likelihood of success that the action leads to an optimal result. The system may tune the machine learning model based on feedback received that is indicative of how the current events affected the likelihood of success for the action.

Abstract: Techniques are described herein for managing transactions between data consumers and data providers using a blockchain. In some embodiments, a blockchain network receive smart contracts that govern access rights to data sets provided by blockchain members and smart contracts that execute blockchain transactions based on the usage of data sets. When a data set is provided to a blockchain member through the blockchain network, usage of the data set may be tracked. Responsive to detecting usage of the data set, one or more smart contracts may execute one or more blockchain transactions within the blockchain network.

Abstract: Systems and methods for cloud security monitoring and threat intelligence in accordance with embodiments of the invention are disclosed. In one embodiment, a process for monitoring and remediation of security threats includes generating a threat model using a first portion of activity data, identifying, based upon the threat model, a threat using a second portion of activity data, selecting a security policy to implement in response to the identified threat, identifying cloud security controls in a remotely hosted cloud application server system to modify in accordance with the selected security policy, establishing a secure connection to the remotely hosted cloud application server system using login credentials associated with a tenant account with the cloud application, and sending instructions to the remotely hosted cloud application server system to set the identified cloud security controls with respect to the tenant account in accordance with the selected security policy.

Abstract: Systems, devices, and methods of the present invention involve discourse trees. In some aspects, a system creates a discourse tree by identifying elementary discourse units in text. The discourse tree includes nodes, each nonterminal node representing a rhetorical relationship between two elementary discourse units and each terminal node associated with an elementary discourse unit. The system identifies, in a reference sentence of the discourse tree, a rhetorical relation of type elaboration or joint. The system selects a candidate sentence having a highest syntactic generalization score of a set of syntactic generalization scores. The system identifies a semantic relation corresponding to the candidate sentence. The semantic relation corresponds to a word in the candidate sentence and defines a role in the candidate sentence.

Abstract: Aspects of the present disclosure are directed to extracting textual information from image documents. In one embodiment, a system, upon receiving a request to extract textual information from an image document, a digital processing system performs character recognition based on content of the image document using multiple approaches to generate corresponding texts. The texts are then combined to determine a result text representing the textual information contained in the image document. The result is then provided as a response to the request.

Abstract: A computer program product, system, and computer implemented method for scalable specification and self-governance for autonomous databases, cluster databases, and multi-tenant databases in cloud and on-prem environments. The approach disclosed herein enables management of a consolidated databases using a template-based process that allows for the consolidated databases (CDBs) and pluggable databases (PBDs) to be reconfigured automatically. In some embodiments, the approach instantiates one or more monitoring modules and one or more CDB/PDB configuration managers. These elements can detect relevant changes in the conditions in which CDB instances and open PDBs operate and adjust the configurations thereof in response.

Abstract: Disclosed is a system for positioning fiber and electronics cables within a server room, which includes a wire-pulley system which includes a wire operably coupled to a first pulley wheel and a second pulley wheel. The wire is looped around the first and second pulley wheel such that a point in the wire is laterally movable between the first and second pulley wheels when the first and second pulley wheels are rotated. The system for positioning cables includes a cable carrier which is removably coupled to the point in the wire. The cable carrier includes a first panel, and a second panel hingedly coupled to the first panel. The first panel and second panel each include a plurality of receiving slots, where the receiving slots are configured to removably receive a distal end of various cables.

Abstract: Techniques described herein relate to authorization between integrated cloud products. An example includes receiving, by a computing device and from a first resource, a first request for permission to access a certificate to verify a requestor's identity. The computing device can transmit a second request to a second resource to authorize permitting access to the certificate. The computing device can receive a response from the second resource comprising an authorization to permit access to the certificate. The computing device can grant permission to the first resource to access the certificate, wherein the first resource is configured to verify the requestor's identity based on accessing the certificate. The computing device can receive a third request from the first resource to generate an association object between the first resource and the certificate. The computing device can generate the association object, wherein the association object associates the first resource and the certificate.

Abstract: Embodiments include systems and methods for generating a data throughput estimation model. A system may be monitored to measure both (a) data throughput and (b) computing statistics of one or more computing resources to generate an initial data set. The relationship between the data throughput and the computing statistics, in the initial data set, is used to generate a data throughput estimation model. The data throughput estimation model may be generated using a machine learning model, a neural network algorithm, boosting decision tree algorithm, and/or a random forest decision tree algorithm. Additional measurements of the computing resource statistics may be applied to the data throughput estimation model to estimate data throughput.