Abstract: Systems and methods are described for providing a secure network connection between a serverless instance and an external environment with respect to a serverless execution environment hosting the serverless instance. A secure connection management system may be implemented in a serverless execution environment with at least one host device hosting the one or more function execution environments. The secure connection management system may facilitate establishment and management of a secure network connection between the serverless instance and the external environment in accordance with the connection configuration. The secure connection management system may also be isolated from the function execution environments in a separate execution environment such that the secure connection management system may take action to reduce risk to the external environment against issues with the execution of serverless function code on the serverless instance.

Abstract: Systems and methods are provided for allowing service providers to take actions based on identifying a function invoker executing a function via an on-demand code execution service. The service provider may receive an IP address or header information from the on-demand code execution service along with information regarding a function invoked by a function invoker. The service provider may determine the function invoker based on reviewing the IP address or header information. Once identifying the function invoker, the service provider may take actions based at least on information regarding the function invoked and the function invoker.

Abstract: Systems and methods are described for creating a serverless network interface for serverless functionalities. The present disclosure provides for creation of user-defined serverless network interfaces that facilitate creation, modification, and re-use of network configurations across one or more serverless functionalities via network interfaces associated with each function.

Abstract: In some implementations, a method of facilitating pointing of a mobile device at a satellite of a satellite constellation for satellite-based data communication, may comprise obtaining, at a first time point, historical orbital data indicative of orbital movement of a plurality of satellites of a satellite constellation over a period of time. The method may also comprise assigning a reference orbital dataset of the plurality orbital datasets determined at a reference time point to corresponding control boxes of a reference grid covering the satellite constellation, wherein each control box of the reference grid corresponds to a satellite of the satellite constellation. The method may also comprise mapping the plurality orbital datasets to the reference grid for an orbital model based on the assignment of the reference orbital dataset.

Abstract: Systems and methods are provided for managing computing services for an application comprising a plurality of virtual computing components executing on one or more host computing devices, wherein a service virtual computing component is to perform application functionality, and wherein a system computing component is to perform system functionality including management of the application virtual computing component; determining the service virtual computing component is to execute using a first access credential to provide a first computing service to the application virtual computing component, and the service virtual computing component is to execute using a second access credential to provide a second computing service to the system computing component, wherein the first access credential is assigned a different set of computing resource access permissions than the second access credential.

Abstract: Systems and methods are described for creating a serverless network interface for serverless functionalities. The present disclosure provides for creation of user-defined serverless network interfaces that facilitate creation, modification, and re-use of network configurations across one or more serverless functionalities via network interfaces associated with each function.

Abstract: Systems and methods are provided for assigning, to a host computing device of an on-demand code execution system comprising a plurality of host computing devices, a set of network addresses available for virtual computing components instantiated on the host computing device, wherein a prefix of each network address of the set of network addresses comprises a same host computing device-specific prefix, and wherein each network address of the set of network addresses is to be accessible from outside the on-demand code execution system; determining to configure a virtual computing component on the host computing device for execution of application code, wherein the virtual computing component is associated with an identifier; and assigning, to the virtual computing component, a network address of the set of network addresses, wherein the network address comprises the prefix and is based on the identifier.

Abstract: Systems and methods are described for facilitating network traffic between serverless function executions and isolated cloud resources within virtualized network environments. Virtualized network environments, by default, may be isolated such that external traffic is not permitted to enter the environment. Permissions for traffic that may enter the environment are often set on the basis of network addresses. In the context of serverless functions, such permissions may be difficult to establish because executions of serverless functions can occur on a dynamically selected environment without a fixed network address. The present disclosure provides for creation of user-defined connectors that facilitate routing of network traffic between executions of serverless functions and user virtualized network environments without requiring that routing occur on the bases of network addresses.

Abstract: Systems and methods are provided for allowing function-initiated traffic of an on-demand code execution system within a cloud provider network to be routed to a private path such based on opt-in settings. An opt-in request may be received indicating a desire of a function invoker to use a private path. Subsequent to the opt-in request, a function invocation request may be received to send communication to a service within the cloud provider network and external to the on-demand code execution system. Subsequent to the function invocation request, a virtual execution environment may be configured to execute the function with mapping of a network-based service to an IP address of a private endpoint. The function is then executed with its traffic sent to the private endpoint.

Abstract: A serverless computing system executes user-submitted code in sandboxed environments such as virtual machines or containers. To support execution of parallel applications that require data transfer between instances of the application, the serverless computing system implements an ephemeral mesh network that allows instances of the parallel application to communicate with each other while executing in their respective sandboxes. In some embodiments, a controller or parent application may also connect to the ephemeral mesh network to coordinate execution of the parallel applications. In other embodiments, the parent application may be external to the serverless computing system. The serverless computing system may connect and disconnect sandboxed environments from the ephemeral mesh network as parallel applications start and stop executing, and may remove the network and terminate the parallel applications when the parent application stops executing.

Abstract: Systems and methods are described for facilitating network traffic between serverless function executions and isolated cloud resources within virtualized network environments. Virtualized network environments, by default, may be isolated such that external traffic is not permitted to enter the environment. Permissions for traffic that may enter the environment are often set on the basis of network addresses. In the context of serverless functions, such permissions may be difficult to establish because executions of serverless functions can occur on a dynamically selected environment without a fixed network address. The present disclosure provides for creation of user-defined connectors that facilitate routing of network traffic between executions of serverless functions and user virtualized network environments without requiring that routing occur on the bases of network addresses.

Abstract: Systems and methods are provided for an on-demand code execution service comprising a set of computing devices for on-demand execution of function code while continuing to facilitate executing long-running background processes. A subset of resources may be initialized based, at least in part, on the application configuration data including at least a request-response process, a background process, and a lesser set of computing resources for the background process. After the execution of the background process has begun, a first request may be received. The on-demand code execution service may increase computing resources to a larger set of computing resources to generate a first response to the first request. The first response may then be provided to an external set of computing resources. After determining that the queue contains no additional requests, the on-demand code execution service may decrease the level of computing resources to the lesser set of computing resources.

Abstract: Systems and methods are provided for managing computing services for an application comprising a plurality of virtual computing components executing on one or more host computing devices, wherein a service virtual computing component is to perform application functionality, and wherein a system computing component is to perform system functionality including management of the application virtual computing component; determining the service virtual computing component is to execute using a first access credential to provide a first computing service to the application virtual computing component, and the service virtual computing component is to execute using a second access credential to provide a second computing service to the system computing component, wherein the first access credential is assigned a different set of computing resource access permissions than the second access credential.

Abstract: Systems and methods are provided for managing provision of network-stored data sets among instances of function code executing in an on-demand manner. Provision of the data sets may be managed such that the data sets are available efficiently and are able to be accessed within function invocations in a manner that is similar or identical to accessing locally-stored data sets. Moreover, the data sets may, when desired, be made available persistently across function invocations.

Abstract: Systems and methods are provided for managing provision of—and access to—data sets among instances of function code executing in an on-demand manner. An API is provided by which functions can store data sets to be shared with other functions, and by which functions can access data sets shared by other functions.

Abstract: Systems and methods are described for facilitating network traffic between serverless function executions and isolated cloud resources within virtualized network environments. Virtualized network environments, by default, may be isolated such that external traffic is not permitted to enter the environment. Permissions for traffic that may enter the environment are often set on the basis of network addresses. In the context of serverless functions, such permissions may be difficult to establish because executions of serverless functions can occur on a dynamically selected environment without a fixed network address. The present disclosure provides for creation of user-defined connectors that facilitate routing of network traffic between executions of serverless functions and user virtualized network environments without requiring that routing occur on the bases of network addresses.

Abstract: Systems and methods are provided for managing provision of—and access to—data sets among instances of function code executing in an on-demand manner. An API is provided by which functions can store data sets to be shared with other functions, and by which functions can access data sets shared by other functions.

Abstract: In some implementations, a method of facilitating pointing of a mobile device at a satellite of a satellite constellation for satellite-based data communication, may comprise obtaining, at a first time point, historical orbital data indicative of orbital movement of a plurality of satellites of a satellite constellation over a period of time. The method may also comprise assigning a reference orbital dataset of the plurality orbital datasets determined at a reference time point to corresponding control boxes of a reference grid covering the satellite constellation, wherein each control box of the reference grid corresponds to a satellite of the satellite constellation. The method may also comprise mapping the plurality orbital datasets to the reference grid for an orbital model based on the assignment of the reference orbital dataset.

Abstract: Systems and methods are described for executing tightly coupled parallel applications on a serverless computing system. A serverless computing system executes user-submitted code in sandboxed environments such as virtual machines or containers. To support execution of parallel applications that require data transfer between instances of the application, the serverless computing system implements an ephemeral mesh network that allows instances of the parallel application to communicate with each other while executing in their respective sandboxes. In some embodiments, a controller or parent application may also connect to the ephemeral mesh network to coordinate execution of the parallel applications. In other embodiments, the parent application may be external to the serverless computing system.

Abstract: Systems and methods are described for executing tightly coupled parallel applications on a serverless computing system. A serverless computing system executes user-submitted code in sandboxed environments such as virtual machines or containers. To support execution of parallel applications that require data transfer between instances of the application, the serverless computing system implements an ephemeral mesh network that allows instances of the parallel application to communicate with each other while executing in their respective sandboxes. In some embodiments, a controller or parent application may also connect to the ephemeral mesh network to coordinate execution of the parallel applications. In other embodiments, the parent application may be external to the serverless computing system.