Search Patents
  • Deriving system architecture from security group relationships
    Patent number: 10652283
    Abstract: Techniques for deriving system architecture from security group relationships are described. One or more security group rules can be obtained for an application, the one or more security group rules controlling communication of one or more security groups. The one or more security group rules can be analyzed to determine placement data for the one or more security groups. The placement data can be provided to a placement service, and the placement service can be caused to deploy at least one virtual machine using the placement data.
    Type: Grant
    Filed: December 6, 2017
    Date of Patent: May 12, 2020
    Assignee: Amazon Technologies, Inc.
    Inventor: Elaine Harvey
  • Managing content delivery network service providers
    Patent number: 8583776
    Abstract: A system, method, and computer readable medium for managing CDN service providers are provided. A network storage provider storing one or more resources on behalf of a content provider obtains client computing device requests for content. The network storage provider processes the client computing device requests and determines whether a subsequent request for the resource should be directed to a CDN service provider as a function of the updated or processed by the network storage provider storage component.
    Type: Grant
    Filed: August 6, 2012
    Date of Patent: November 12, 2013
    Assignee: Amazon Technologies, Inc.
    Inventors: David R. Richardson, Bradley E. Marshall, Swaminathan Sivasubramanian, Tal Saraf
  • Resilient consistent hashing for a distributed cache
    Patent number: 11652746
    Abstract: Resilient consistent hashing techniques are implemented to perform requests among nodes of a distributed system. Different load balancers are assigned different groups of request handling nodes that cache data to perform request. Requests are assigned to different load balancers according to a consistent hashing scheme. Load balancers distribute requests among assigned nodes using a load balancing scheme. Different numbers of nodes can be assigned to different load balancers.
    Type: Grant
    Filed: March 27, 2020
    Date of Patent: May 16, 2023
    Assignee: Amazon Technologies, Inc.
    Inventors: James Christopher Sorenson, III, Akhilesh Mritunjai
  • Automated tuning of a service configuration
    Patent number: 10748083
    Abstract: Methods and systems for automated tuning of a service configuration are disclosed. An optimal configuration for a test computer is selected by performing one or more load tests using the test computer for each of a plurality of test configurations. The performance of a plurality of additional test computers configured with the optimal configuration is automatically determined by performing additional load tests using the additional test computers. A plurality of production computers are automatically configured with the optimal configuration if the performance of the additional test computers is improved with the optimal configuration.
    Type: Grant
    Filed: June 21, 2019
    Date of Patent: August 18, 2020
    Assignee: Amazon Technologies, Inc.
    Inventor: Carlos Alejandro Arguelles
  • Comparing networking access control lists
    Patent number: 10057291
    Abstract: Techniques and solutions are provided for assessing the semantic difference between networking access control lists (ACLs). For example, a semantic difference can be determined between an ACL that is currently deployed on a network device and an ACL that is a candidate for deployment. The semantic difference can be presented to a user to better understand what changes would be made to network traffic flow if the candidate ACL is deployed. The semantic difference can also be used in an automated manner to perform automatic deployment of the candidate ACL.
    Type: Grant
    Filed: November 11, 2015
    Date of Patent: August 21, 2018
    Assignee: Amazon Technologies, Inc.
    Inventors: John Mark Glotzer, Apisak Darakananda, Xiongwei Xie
  • Detecting network attacks based on network requests
    Patent number: 9756058
    Abstract: Techniques for analyzing access to a network-based document may be provided. For example, the network-based document may be configured for direct access from client device. Based on an access of a client device to the network-based document, information associated with this access may be recorded. The information may be analyzed to determine whether a condition associated with the direct access may be violated. An issue may be detected with the client device access based on a determination that the condition may be violated.
    Type: Grant
    Filed: September 29, 2014
    Date of Patent: September 5, 2017
    Assignee: Amazon Technologies, Inc.
    Inventors: Matthew Ryan Jezorek, Maarten Van Horenbeeck, Richie Lai
  • Managing network connections for processing network resources
    Patent number: 9197505
    Abstract: Systems and methods for the generation and management of content requests generated by client computing devices are provided. A client computing device initiates a browse session with a content provider by establishing a remote browse session between the client computing device and a network computing provider. The network computing provider can utilize profile information corresponding to the content provider to determine a number of concurrent network connections to establish with a content provider. The network computing provider and the client computing device exchange browse session state data and client interaction data.
    Type: Grant
    Filed: February 22, 2012
    Date of Patent: November 24, 2015
    Assignee: Amazon Technologies, Inc.
    Inventor: Peter F. Hill
  • Interfaces To Manage Direct Network Peerings
    Publication number: 20140250217
    Abstract: Methods and apparatus for interfaces to manage direct network peerings. A system may include a data center, endpoint routers and a connectivity coordinator. The coordinator implements a programmatic interface defining connectivity operations. The coordinator receives a request for dedicated connectivity to data center resources, formatted according to the interface. The coordinator selects a target endpoint router at which to establish a physical link to implement the dedicated connectivity, and transmits a response identifying the target endpoint router and including configuration instructions for setting up a physical link for the dedicated connectivity.
    Type: Application
    Filed: May 12, 2014
    Publication date: September 4, 2014
    Applicant: Amazon Technologies, Inc.
    Inventors: Kevin Christopher Miller, Andrew J. Doane, Mahmoud A. Abuelela, Michael B. Furr
  • Shared queue management utilizing shuffle sharding
    Patent number: 11102139
    Abstract: Techniques for performing shared queue management utilizing shuffle sharding are described. For an event, one shared queue can be selected by first identifying a shard of a pool of queues, selecting two or more queues from the shard, and selecting the one queue that has a minimum queue load from those queues in the selected two or more queues. The selection significantly reduces or eliminates negative impacts upon a user or user function from activity of other users that utilize the shared queues.
    Type: Grant
    Filed: September 5, 2018
    Date of Patent: August 24, 2021
    Assignee: Amazon Technologies, Inc.
    Inventors: Cecilia Deng, Bharatkumar Chatla, Marc John Brooker, David J. Carroll
  • Hosted network management
    Patent number: 8838764
    Abstract: Systems and methods are disclosed that facilitate the evaluation of hosted computing devices in accordance with target patterns. A set of target patterns can be developed for elements common to a plurality of hosted computing networks. The set of target patterns can be defined utilizing a detailed pattern language to describe elements of a hosted computing device network and relationships between the elements. Thereafter, a hosted computing device network management component can utilize the set of target patterns to verify and validate a deployed hosted computing network or to process purposed modifications/configurations to a deployed hosted computing network.
    Type: Grant
    Filed: September 13, 2011
    Date of Patent: September 16, 2014
    Assignee: Amazon Technologies, Inc.
    Inventor: Simon K. Johnston
  • Allocating shared resources
    Patent number: 8695079
    Abstract: Disclosed are various embodiments for allocating shared resources. A request to allocate a shared isolating resource is received. The shared isolating resource operates to isolate a plurality of customer resources in a multi-tenant environment. In response to the request to allocate, a least recently deallocated shared isolating resource is removed from a pool of available shared isolating resources. The least recently deallocated shared isolating resource is provided to at least one device using the shared isolating resource.
    Type: Grant
    Filed: September 29, 2010
    Date of Patent: April 8, 2014
    Assignee: Amazon Technologies, Inc.
    Inventors: Kevin C. Miller, Mahmoud A. Abuelela, David Schneider-Joseph, Eric J. Brandwine
  • Large-scale authorization data collection and aggregation
    Patent number: 10043030
    Abstract: Techniques for large-scale authorization data collection and aggregation are disclosed herein. An authorization data service may first receive a set of usage data records, may next aggregate the set of usage data records to reduce the number of usage data records, may next store the aggregated set of usage data records in a usage data repository, and may next provide subsets of the aggregated set of usage data records in response to an application processing request to inform policy decisions associated with a computer system.
    Type: Grant
    Filed: February 5, 2015
    Date of Patent: August 7, 2018
    Assignee: Amazon Technologies, Inc.
    Inventors: William Frederick Hingle Kruse, Ashish Rangole
  • Measuring spread of compute capacity
    Patent number: 8966037
    Abstract: Disclosed are various embodiments for provisioning computing units. A spread request is received. The spread request relates to a class of assigned computing units residing within a plurality of networked computing units. The spread request is associated with a spread criteria. In response to the request, a plurality of networked computing units is provisioned based on failure correlation data and in accordance with the spread criteria, to produce a final spread score. Success is indicated in response to the request if the final spread score meets the spread criteria.
    Type: Grant
    Filed: January 18, 2011
    Date of Patent: February 24, 2015
    Assignee: Amazon Technologies, Inc.
    Inventors: Jacob S. Carr, Eric Brandwine, Christopher Richard Jacques de Kadt
  • Multiple instance types serving a single workload or application
    Patent number: 10362099
    Abstract: An instance service of a computing resource service provider may provide computing system instances to customers of the computing resource service provider. The computing system instances may be used by the customer to execute various customer workloads. Furthermore, the computing system instances may include an instance type indicating an amount of computing resources allocated to computing system instance of the instance type. The instance service may obtain requirement and/or constraints associated with the workload and determine a configuration of instance types to include in a set of instances configured to execute the customer workload.
    Type: Grant
    Filed: June 23, 2015
    Date of Patent: July 23, 2019
    Assignee: Amazon Technologies, Inc.
    Inventor: Derek Solomon Pai
  • Automated reconfiguration of real time data stream processing
    Patent number: 11392416
    Abstract: Automated reconfiguration of real time data stream processing may be implemented. A processing function that describes one or more operations to be performed with respect to one or more data streams may be executed at one or more processing nodes. Performance metrics describing the performance of the processing function at the processing nodes may be collected and monitored. A reconfiguration event may be detected for the processing function. A different execution configuration for the processing function may be determined and initiated in response to detecting the reconfiguration event.
    Type: Grant
    Filed: March 20, 2020
    Date of Patent: July 19, 2022
    Assignee: Amazon Technologies, Inc.
    Inventors: Gaurav D. Ghare, Roger Shane Barga
  • Opportunistic routing
    Patent number: 9118680
    Abstract: When a client requests content from a Content Delivery Network (or other system), a first portion of the content is transmitted to the client from a source capable of providing high performance to that client. When the client has a sufficient amount of the content to perform its function, then additional portions of the content can be transmitted to the client from a source that provides a lower performance to that client with a minimal or no performance penalty to the user of the client.
    Type: Grant
    Filed: June 30, 2009
    Date of Patent: August 25, 2015
    Assignee: Amazon Technologies, Inc.
    Inventors: David Alexander Dunlap, Tal Saraf, Nicholas J. Maniscalco, Benjamin W. S. Redman, Martin Cornelis Frederik Slot, Bradley E. Marshall
  • Client based opportunistic routing
    Patent number: 9137301
    Abstract: When a client requests content from a Content Delivery Network (or other system), a first portion of the content is requested from a source capable of providing high performance to that client. When the client has a sufficient amount of the content to perform its function, then additional portions of the content can be requested from a source that provides a lower performance to that client with a minimal or no performance penalty to the user of the client.
    Type: Grant
    Filed: June 30, 2009
    Date of Patent: September 15, 2015
    Assignee: Amazon Technologies, Inc.
    Inventors: David Alexander Dunlap, Tal Saraf, Nicholas J. Maniscalco, Benjamin W. S. Redman, Martin Cornelis Frederik Slot, Bradley E. Marshall
  • Managing content delivery network service providers by a content broker
    Patent number: 8788671
    Abstract: A system, method, and computer readable medium for managing network storage provider and CDN service providers are provided. A content broker component obtains client computing device requests for content provided by a content provider. The content broker processes the client computing device requests and determines whether a subsequent request for the resource should be directed to a network storage provider or a CDN service provider as a function of the updated or processed by the content broker.
    Type: Grant
    Filed: January 25, 2012
    Date of Patent: July 22, 2014
    Assignee: Amazon Technologies, Inc.
    Inventors: David R. Richardson, Bradley E. Marshall, Swaminathan Sivasubramanian, Tal Saraf, Imran S. Patel
  • Data center life-cycle tracking and integration
    Patent number: 9886677
    Abstract: Disclosed are various embodiments for monitoring, maintaining, tracking, and/or integrating inventory items in one or more systems. An inventory integration system may monitor the states, dependencies, and/or locations of inventory items across one or more data centers and/or similar structures. Issues detected may be escalated and remedial actions to the issues may be generated. The inventory integration system may communicate with various external resources in order to convey various information associated with the items of inventory and/or the data centers.
    Type: Grant
    Filed: November 21, 2012
    Date of Patent: February 6, 2018
    Assignee: Amazon Technologies, Inc.
    Inventors: Michael David Marr, Matthew D. Klein
  • Systems and methods providing format data
    Patent number: 9021606
    Abstract: Computer applications may generate event data based on a large volume of different types of record data. Described herein are systems, methods, and devices for enabling a computing node to implement new functions for dynamically consuming the event data. In one example, the computing node may implement a new function using an expression language, without modifying predefined hard coded functions.
    Type: Grant
    Filed: September 27, 2013
    Date of Patent: April 28, 2015
    Assignee: Amazon Technologies, Inc.
    Inventors: Miles Childs Kaufmann, Melissa Elaine Davis, Thomas Lowell Keller, Muhammad Ali Siddiqui, Gregory Richard Swensen, Amos Dylan Vance