Abstract: Systems and methods for implementing stateful services using cloud-based resources are described. A server computing system determines existence of a first volume based on a launch of a first instance by an auto-scaling group (ASG). The first volume is to have a resource tag having a value similar to a value of a resource tag of the ASG. The first volume was previously attached to a second instance terminated by the ASG. Based on a successful determination of the existence of the first volume, the server computing system attaches the first volume to the first instance. Based on a failed determination of the existence of the first volume, the server computing system generates a second volume, attaches the second volume to the first instance, and set a resource tag of the second volume to a value similar to the value of the resource tag of the ASG.

Abstract: Updating firewalls can be difficult if many devices need to be manually reconfigured. To assist, vendors provide management tools. If the tool requires manual adding/deleting known firewalls, this is problematic in networks with many devices. If devices are hosted within a virtual private cloud, the tool may adopt a centralized “star” configuration and maintain live contact with all firewalls. This exposes firewalls to risk if the central tool is compromised. An alternative to a central tool is to implement a tool local to an environment, secure the tool with multi-level authentication, and provide automatic active firewall discovery, e.g., automate adding/deleting firewalls in an environment defined with respect to criteria that may be used to define a collection of active firewalls. Configuration changes may be pushed to the collection. Authentication credentials to access the firewalls are ephemerally cached and flushed after use so the tool cannot be compromised.

Abstract: Systems and methods for updating an Operating System (OS) using cloud-based resources are described. A server computing system enables an auto-scaling group (ASG) to launch one or more instances based on a first machine image. The first machine image associated with a first Operating System (OS). The ASG is associated with a stateful service and configured with a resource tag having a value similar to a value assigned to the stateful service. The computer system receives a second machine image associated with a second OS generated based on the first OS. The computer system enables the ASG to terminate the one or more instances launched based on the first machine image and to launch one or more instances based on the second machine image. The instances launched based on the first machine image and based on the second machine image are associated with persistent volumes.

Abstract: Updating firewalls can be difficult if many devices need to be manually reconfigured. To assist, vendors provide management tools. If the tool requires manual adding/deleting known firewalls, this is problematic in networks with many devices. If devices are hosted within a virtual private cloud, the tool may adopt a centralized “star” configuration and maintain live contact with all firewalls. This exposes firewalls to risk if the central tool is compromised. An alternative to a central tool is to implement a tool local to an environment, secure the tool with multi-level authentication, and provide automatic active firewall discovery, e.g., automate adding/deleting firewalls in an environment defined with respect to criteria that may be used to define a collection of active firewalls. Configuration changes may be pushed to the collection. Authentication credentials to access the firewalls are ephemerally cached and flushed after use so the tool cannot be compromised.

Abstract: Systems and methods for updating an Operating System (OS) using cloud-based resources are described. A server computing system enables an auto-scaling group (ASG) to launch one or more instances based on a first machine image. The first machine image associated with a first Operating System (OS). The ASG is associated with a stateful service and configured with a resource tag having a value similar to a value assigned to the stateful service. The computer system receives a second machine image associated with a second OS generated based on the first OS. The computer system enables the ASG to terminate the one or more instances launched based on the first machine image and to launch one or more instances based on the second machine image. The instances launched based on the first machine image and based on the second machine image are associated with persistent volumes.

Abstract: Systems and methods for implementing stateful services using cloud-based resources are described. A server computing system determines existence of a first volume based on a launch of a first instance by an auto-scaling group (ASG). The first volume is to have a resource tag having a value similar to a value of a resource tag of the ASG. The first volume was previously attached to a second instance terminated by the ASG. Based on a successful determination of the existence of the first volume, the server computing system attaches the first volume to the first instance. Based on a failed determination of the existence of the first volume, the server computing system generates a second volume, attaches the second volume to the first instance, and set a resource tag of the second volume to a value similar to the value of the resource tag of the ASG.