Amazon Technologies, Inc.

Brad Eugene Marshall

Elmore Eugene Pope

Christopher Laurence Scofield

Eric B Merritt

Swaminathan Sivasubramanian

Tate Andrew Certain

Nicholas J Maniscalco

Danny Wei

Marc Stephen Olson

Rebecca Claire Weiss

Joseph Elmar Magerramov

Harvo Reyzell Jones

Hardeep Singh Uppal

Asawaree Kalavade

Colin M Saunders

Jiong Wang

Paul C Reed

Marvin Michael Theimer

Allan Henry Vermeulen

Paul G Nordstrom

Neha Rungta

Andrew Kent Warfield

Peter Sven Vosshall

Christopher Richard Jacques De Kadt

Joshua Marc Burgin

Akhilesh Mritunjai

Nikita Pinski

Dennis Tighe

Didier Germain Durand

Amit Goel

Chungha Sung

Mary Southern

Zhe Li

Christoph Bartenstein

Jerry Connolly

Techniques for role-based permission delegation in a provider network. The techniques include an assuming service in the provider network sending a request to a temporary credential service in the provider network to assume a delegation role. The assuming service, acting in the delegation role, sending a request to the temporary credential service to assume the customer role in accordance with a down scoping policy. The assuming service, acting in the customer role, performing an action in a strict subset of actions on a customer resource. The techniques improve the operation of the provider network by allowing a permission to perform an action on the customer resource that is granted by the customer to a delegating service in the provider network to be delegated to the assuming service while complying with the access control principle of least privilege.

Role-based permission delegation in a provider network

Computer-implemented techniques for verifying translated access controls for application modernization include an application modernization service of a provider network obtaining a source access control. The service translates the source access control to a target access control. The service compiles the source access control and the target access control into respective automated reasoning solver encodings. The service uses the automated reasoning solver encoding to query an automated reasoning solver such as a Satisfiability Modulo Theories (SMT) solver to determine whether the source access control is less or more permissive than the target access control representing a security issue or an availability issue with the target access control, respectively.

Verifying translated access controls for application modernization

The present disclosure generally relates to a first network device in a primary region that can failover network traffic into a second network device in a failover region. The first network device can receive routing criteria identifying how traffic originating in the primary region should be routed. The first network device can transmit this routing criteria to the second network device in the failover region. Based on determining the occurrence of a failover event, the first network device may transmit network traffic originating in the primary region to the second network device in the failover region. The second network device can determine how to route the network traffic based on the routing criteria of the primary region. In some embodiments, the second network device can determine how to route the network traffic based on the routing criteria of the failover region.

Systems and methods for enabling a failover service for block-storage volumes

An object compression system of a storage service may provide a user-friendly and cost-efficient solution to manage stored objects for users of the storage service. The object compression system may automatically monitor individual objects in an object-based storage system of the storage service. Based on one or more characteristics and additional features of the objects, the object compression system may generate respective determinations whether to compress the individual objects. Responsive to determinations to compress the objects, the object compression system may determine compression algorithms for individual objects. The object compression system may compress the objects according to respective compression algorithms to create compressed files. The object compression system may store the compressed files in a tier different from the objects and delete the objects from the storage service.

Storage medium and compression for object stores

A block storage service provides block-level storage to a plurality of distinct computing instances for a plurality of distinct users. For each of one or more of the plurality of distinct computing instances, information about data being stored in the block storage service is determined. Based on the information about the data being stored in the block storage service, a block storage transaction enhancement for the data being stored in the block storage service is determined. The block storage service performs the selected block storage transaction enhancement with respect to the data being stored in the block storage service.

System and method for providing enhancements of block-level storage

One or more configuration parameters for an object gateway instance are received at an interface to a provider network, the parameters including an identifier of a first object store of the provider network for which to cache objects in a first object cache of the object gateway instance and an indication of a data transfer mode that controls when objects written to the first object cache are written to the first object store. The one or more configuration parameters are stored in a data store of the provider network and sent to the object gateway instance. A read request that includes the identifier of the first object store and a first object identifier is received from the object gateway instance, and a first object associated with the first object identifier and stored in the first object store is sent to the object gateway instance.

Data caching in provider network substrate extensions

A collection of fault categories, including faults associated with internal resources at a provider network, is presented via an interface of a fault injection service. A fault injection mode, selected from a set which comprises a non-randomized mode, to be used to inject faults into a target environment is determined. Fault injection agents introduce faults into the target environment in accordance with the fault injection mode.

Fault injection service

Mobile device users may be tracked either via mobile-signal triangulation or via Global Positioning Satellite information. A mobile device user's recent movements may be analyzed to determine trails or traffic patterns for device user among various locations. Mobile device trail information, either for an individual user or aggregated for multiple users, may be analyzed to determine a next destination for the user. Electronic advertising content, such as advertisements, coupons and/or other communications, associated with the next destination may be sent to the mobile device. Additionally, the identity of the mobile device use may be known and the advertisements or coupons may be tailored according to demographic information regarding the mobile device user. In addition, destinations may be recommended to mobile device users based on the recent locations the users have visited.

System and method for providing advertising based on mobile device travel patterns

A group of computers is configured to implement a block storage service. The block storage service includes a block-level storage for storing data from a set of distinct computing instances for a set of distinct users. An interface is configured to allow the set of distinct users to specify respective destinations for storing backup copies of respective data stored in the block-level storage for the distinct users. At least some of the respective destinations are for different storage systems remote from one another. A backup copy function is provided for creating backup copies of data stored in the block-level storage by the set of distinct computing instances for the set of distinct users. The backup copies are stored in different destination locations specified by respective ones of the plurality of distinct users via the interface.

System and method for providing flexible storage and retrieval of snapshot archives

A web browser is implemented to receive a document from a server. The document may include one or more embedded Uniform Resource Locator (URL) references. The web browser may display the document on a user interface. A user associated with the web browser may determine one or more of the original embedded URL references should be replaced. In response to user input, the web browser may change at least one of the original embedded URL references to a corresponding replacement embedded URL reference and display the document with the replacement embedded URL reference. The web browser may save an association of the original embedded URL reference with the replacement embedded URL reference and subsequently, when receiving the document with the original embedded URL reference, automatically replace the original embedded URL reference with the corresponding replacement embedded URL reference before displaying the document.

System and method for dynamically changing web uniform resource locators

A method and system for determining interest levels of online content based on rates of change of content access traffic. According to one embodiment, a method may include detecting content request traffic directed to a content source, determining a time rate of change of said content request traffic, and determining an indication of content interest associated with the content source, where the indication is dependent upon the time rate of change of the content request traffic. The method may further include storing the indication of content interest on a computer-accessible medium.

Method and system for determining interest levels of online content based on rates of change of content access

A method and system for associating search keywords with interest spaces. According to one embodiment, a method may include detecting a request to access a given online content source, where the request includes referral information specifying one or more search keywords associated with the given online content source, where the given online content source is one of a plurality of online content sources included within an interest space, and where the interest space is identified dependent upon indications of user navigation activity among the plurality of online content sources. The method may further include extracting the one or more search keywords from the request and creating an association of the one or more search keywords with the interest space.

Method and system for associating search keywords with interest spaces

Growing community of inventors

Bainbridge Island, WA, United States of America

Brad Eugene Marshall