Amazon Technologies, Inc.

Boo Boon Khoo

Siddharth Gupta

Angel Calvo

Himanshu Sharma

Thomas H Smith

Lisa A Winn

Dennis Ono Tjandra

Jamie Layne White

Archana Sridhar Mungara

Wayne William Duso

Alexander Sirotin

Ravikanth Repaka

Zhicong Wang

Steven Robert DeVos

Christopher John Schilling

Syed-Faraz-Ul Hassan Kazmi

Ivan Velickovic

Yao Li

Mohammad Ali Shatnawi

Methods, systems, and computer-readable media for compliance lifecycle management for cloud-based resources are disclosed. A selection is received of a compliance pack from a plurality of compliance packs. The compliance pack comprises a plurality of rules associated with policy compliance. The compliance pack is selected from the plurality of compliance packs via a user interface. The selection is associated with one or more resources hosted in one or more provider networks. An evaluation is performed of compliance of the one or more resources with respect to the plurality of rules of the compliance pack. Data describing the evaluation is generated and displayed. The data comprises an aggregate compliance status for at least one of the one or more resources, and the aggregate compliance status represents an aggregate compliance with the plurality of rules.

Compliance lifecycle management for cloud-based resources

A configuration policy applicable to one or more target resources is identified. An indication of a non-compliance remediation workflow corresponding to the policy, indicating an automated action, is obtained via a programmatic interface. In response to detecting that a particular target resource does not comply with the configuration policy, implementation of the automated action is initiated.

Managed remediation of non-compliant resources

Aspects described herein relate to securely performing cross-boundary backup operations. A service of a computing resource service provider may enable backup operations between a source account and a destination account of an organization based at least in part on a security policy allowing such operations.

Cross-boundary data backup background

A configuration policy applicable to one or more target resources is determined. An indication of a non-compliance workflow corresponding to the policy, indicating an action, is obtained via a programmatic interface. In response to detecting that a particular target resource does not comply with the configuration policy, implementation of the action is initiated.

This disclosure describes techniques for a configuration-monitoring service of a service provider network to provide users with the ability to access to configuration data across multiple accounts using a single account or other centralized access point. The configuration-monitoring service may allow users with multiple accounts registered with the service provider network to designate a central account (or 'aggregator account') through which the users can access and review configuration data across multiple accounts (or 'source accounts') and/or multiple regions (or &#x201c;source regions&#x201d;). After determining an aggregator account, the configuration-monitoring service may begin collecting configuration data from the source accounts and/or source regions, and transporting the configuration data to the aggregator region to be accessed using the aggregator account. The user may use their aggregator account to view a dashboard that presents the configuration data from the source accounts and/or source regions along with configuration data for the aggregator account.

Centralized access of configuration data for computing resources

Growing community of inventors

Bellevue, WA, United States of America

Boo Boon Khoo