Amazon Technologies, Inc.

Servicenow, Inc.

Vmware, Inc.

Apolak Borthakur

Manish Srivastava

Raviprasad Venkatesha Murthy Mummidi

Yu Xia

Karthikeyan Natarajan

Derek Avery Lyon

Wesley Marlin Sutton

Darren Brown

Paul Pedersen

Ekanth Sethuramalingam

Hariharan Subramanian

Xing Wang

Jinyi Lu

Bhagyalaxmi Bethala

Shafi Khan

Gopal Harikumar

Automated methods and systems described herein are directed to identifying potential root causes of a problem in a data center. Methods and systems receipt an alert or other notification of a problem occurring in a data center and a time when the problem was noticed. A search window is created based on the time and a stream of log messages generated in the search window is converted into a time dependent metric. An anomaly detection technique is applied to the metric to determine a start time of a problem. Logging events and key phrases in the log messages are identified in the search window and presented as potential root causes of the problem. The potential root cause may then be used by system administrators and/or tenants to diagnose the problem and execute remedial measures to correct the problem.

Methods and systems for determining potential root causes of problems in a data center using log streams

Systems and methods are disclosed for provisioning software in computing networks. For example, methods may include invoking one or more discovery probes; retrieving software usage data based at least on the one or more discovery probes; determining software usage predictions based on the software usage data; allocating, based on the software usage predictions, per user software entitlements and per device software entitlements to obtain an allocation of software entitlements; and invoking installation or uninstallation of software responsive to the allocation of software entitlements.

Software asset management

Systems and methods are disclosed for computing network operations. For example, methods may include identifying one or more partial matches between a value associated with a configuration item and a value associated with one or more computing resource types from a set of computing resource types; forming a search query based on the one or more partial matches; invoking a search of one or more information sources using the search query to obtain ranked search results; selecting one computing resource type from the set of computing resource types based on a ranking of the search results; and updating the configuration item to associate the configuration item with the selected computing resource type.

Computing resource identification

Techniques for identifying a candidate workload which may be a suitable candidate for migration from a first location to a second location are described herein. A set of suitability measurements associated with a computer system resource operating in the first location is received, the set of suitability measurements including, for example, resource usage values for one or more resources associated with the workload. Based at least in part on one or more statistical calculations on the set of suitability measurements exceeding one or more thresholds, recommendations are made about whether to migrate the workload from the first location to the second location.

Identifying candidate workloads for migration

A computing resource service provider may receive, from a user client connected to an on-premises network, a security document specifying one or more user roles defining a level of access to customer resources within the on-premises network. In response, the service provider may generate and provide the user client with a cookie specifying the user roles and including an address for an interface within the service provider network. The service provider may receive a request from the user client to access one or more customer resources hosted by the service provider. The request may include the cookie previously provided to the user client. Accordingly, the service provider may extract the user roles from the cookie and determine, based at least in part on these user roles, whether to fulfill the user client request.

Permissions for hybrid distributed network resources

A method of migrating applications from an enterprise-based network to a multi-tenant network of a compute service provider may include receiving a request to migrate an application running on a first virtual machine instance within the enterprise-based network. Dependencies of the application may be determined by identifying at least a second virtual machine instance within the enterprise-based network, where the at least second virtual machine instance associated with the application. Resource monitoring metrics associated with hardware resources used by the first virtual machine instance and the at least second virtual machine instance may be received. The first and at least second virtual machine instances may be migrated from the enterprise-based network to at least one virtual machine at a server within the multi-tenant network based on the monitoring metrics, thereby migrating the application from the enterprise-based network to the multi-tenant network.

Migration of applications between an enterprise-based network and a multi-tenant network

Remote computing resource service providers allow customers to execute one or more applications in a virtual environment on computer systems provided by the computing resource service provider. The virtual machines may be managed by a hypervisor executing on computer systems operated by the service provider. The virtual machines' memory may be protected by a memory obfuscation service and the hypervisor. The memory obfuscation service may enable the virtual machines to maintain at least a portion of sensitive information in an obfuscated format. The virtual machines may request access to the virtual machines' memory, the memory obfuscation service may obtain the requested memory in an obfuscated format and un-obfuscate the memory such that it may be used by the virtual machines.

Hypervisor assisted virtual memory obfuscation

Remote computing resource service providers allow customers to execute one or more applications in a virtual environment on computer systems provided by the computing resource service provider. The customer applications are generally executed by multiple virtual machine instances working together. The virtual machines may be managed by a hypervisor executing on computer systems operated by the service provider. Different hypervisors may support different features and have different capabilities. Customers may wish to execute the one or more applications on a particular hypervisor in order to utilize certain features. A control plane may be used to facilitate management of the virtual environment by one or more services of the computing resource service provider.

Virtualization infrastructure support

At least one workflow comprising end-user interactions with an application implemented using provider network resources is identified by a resource allocation service of the provider network. The service collects performance metrics associated with the end-user workflow. If a performance metric meets a threshold criterion, a re-evaluation of the resources assigned to the application is initiated. Configuration changes to modify the set of provider network resources assigned to the application are implemented in accordance with a result of the resource re-evaluation.

Growing community of inventors

Palo Alto, CA, United States of America

Apolak Borthakur