Emc IP Holding Company LLC

Emc Corporation

Dell Products Inc.

Ameer Jabbar

Anoop George Ninan

Thomas L Watson

William J Elliott, Iv

Evgeny Roytman

Ching-Yun Chao

Wai Chuen Yim

David Gillam

Hala Salim El-Ali

Anurag Jain

Sukesh Kumar Biddappa

Stephen A Mendes

Xiaojun Yang

Ruchika Goyal

Ashfaq Ahmed

A system can receive a request, and identify an attribute-based access control policy comprising a permission policy and a condition policy that is associated with performing an operation with respect to a group of computing resources with a first scope of the operation. The system can determine whether the account satisfies the permission policy for the operation, wherein determining whether the account satisfies the condition policy evaluates to true based on account attributes of the account and resource attributes of the group of computing resources in the first scope of the query operation. The system can, in response to determining that the account satisfies the condition policy, send an indication of the request as constrained by the first scope and a second scope that is based on the condition policy to a service, the service performing the operation to produce a result, and responding to the request with the result.

Authorization decisions using conditioned permissions for resource collections

A system, method, and computer program product for storage provisioning in a data storage environment comprising protecting, through an orchestration API, a source volume at a source site by setting the source volume to be replicated to a target volume at a target site through the use of a replication appliance; wherein the API is enabled to create network zones between the source site and the target site for replication from the source site to the target site and wherein the network zone is configured to include the replication appliance; wherein the API is enabled to mask storage devices used to store data on the source volume and the target volume.

Storage provisioning in a data storage environment

A method, system, and computer program product for allocating one or more available ports on a data storage system, the data storage system having one or more data storage volumes, to enable communication with the one or more data storage volumes on the data storage system, the method, system, and computer program comprising filtering the one or more available ports on the data storage system to determine a balanced allocation of a port of the one or more available ports through one or more storage components on the data storage system, and allocating the port to the data storage volume thereby enabling access to the data storage volume through the one or more storage components.

Computer-executable method, system, and computer program product for balanced port provisioning using filtering in a data storage system

Methods and apparatus to create zones for ports from a storage layer to a compute layer both coupled to a storage area network switch. In one embodiment, the storage layer includes ports in field replaceable unit (FRU) port groups, the port groups in FRU adapters, and the adapters in FRU adapter groups. The ports can be selected to minimize single points of failure.

Method and apparatus for topology driven zoning

A method, apparatus and computer-program product for determining the status of a connection among a plurality of elements in a distributed system is disclosed. The method comprising the steps of determining an initial configuration of the connections among selected ones of the plurality of elements as a relationship of one of said selected elements to another of said elements, wherein at least one of said relationships is associated with a root element of an associated connection, responsive to a stimulus, determining a second configuration of the connections among the selected elements, determining a current condition of the connections among the selected elements is based on at least the second configuration; and providing an indication when at least a significant change has occurred. The device discloses, in one aspect, a processor executing code for implementing the method steps described and the computer product providing code to a processor for implementing the method steps described.

Method and apparatus for diagnosing host to storage data path loss due to FibreChannel switch fabric splits

Growing community of inventors

Lilburn, GA, United States of America

Ameer Jabbar