Amazon Technologies, Inc.

Carl Jay Moses

Eric Jason Brandwine

Andrew J Doane

Daniel Todd Cohn

Thomas Charles Stickle

Stephen Edward Schmidt

Clarissa Loree Cook Brandwine

Ryan Holland

Terrence Wise

Christopher Albert Gorski

Terrence Patrick Wise

Techniques are described for providing users with access to computer networks, such as to enable users to interact with a remote configurable network service in order to create and configure computer networks that are provided by the configurable network service for use by the users. Computer networks provided by the configurable network service may be configured to be private computer networks that are accessible only by the users who create them, and may each be created and configured by a client of the configurable network service to be an extension to an existing computer network of the client, such as a private computer network extension to an existing private computer network of the client. If so, secure private access between an existing computer network and new computer network extension that is being provided may be enabled using one or more VPN connections or other private access mechanisms.

Providing access to configurable private computer networks

A technology is described for a virtual secure region. An example method may include receiving a request for data stored in a secure computing service environment executing on computing resources used to provide a public computing service environment, where the secure computing service environment may be separated from the public computing environment using encryption. In response to the request, a secure region account that corresponds to a public region account may be identified using a translation table that maps the secure region account to the public region account. A storage location for the data may be identified within the secure computing service environment specified by the secure region account, and the data may be obtained from the storage location within the secure computing service environment. The data may then be transferred to the public computing service environment.

Secure computing service environment

A computer security threat sharing technology is described. A computer security threat is recognized at an organization. A partner network graph is queried for security nodes connected to a first security node representing the organization. The first security node is connected to at least a second security node representing a trusted security partner of the organization. The second security node is associated with identification information. The computer security threat recognized by the organization is communicated to the trusted security partner using the identification information associated with the second security node.

Computer security threat sharing

A technology is described for an electronic market for network-accessible computing resources located on a partner-owned data center that is external to a service provider network. An example method may include receiving a request for a network-accessible computing resource from a customer of a computing service provider. A network-accessible computing resource may then be identified on a partner-owned data center as specified in the request. A network connection may then be established that allows the customer to access the network-accessible computing resource.

Computing resource market

A computer security threat sharing technology is described. An example method may include receiving security threat information transmitted over a computing network via a multi-streaming data service. The security threat information may relate to a recognized computer security threat detected by a first network component. The security threat information may then be correlated with additional security threat information received via the multi-streaming data service that may be detected by a second network component that may be interconnected to the first network component by way of the multi-streaming data service. A computer security threat associated with correlated security threat information may then be identified, and the computer security threat may be communicated to a plurality of network components via the multi-streaming data service.

Computer security threat correlation

Methods and apparatus for client-premise resource control using provider-defined interfaces are described. A set of programmatic interfaces enabling clients to submit registration requests is implemented. A registration request indicates resources located at a data center external to a provider network as candidate targets for control operation requests issued via a different set of programmatic interfaces associated with a service of the provider network. A network connection is established between a particular resource indicated in a registration request, and an administrative resource located within a data center of the provider network. In response to a particular control operation request received via a programmatic interface of the different set, a control command is transmitted from the administrative resource to the particular resource via the network connection.

Client-premise resource control via provider-defined interfaces

Methods and apparatus for managing pooled client-premise resources via provider-defined interfaces are described. A pool management request is received from a client via a programmatic interface implemented at a provider network, indicating at least one resource located at a data center external to the provider network. An activation status of the resource within a pool is to be managed by a service of the provider network. A network connection between an administrative resource of the service, located within the provider network, and a control module instantiated on behalf of the service at the external data center is established. A command is transmitted from the administrative resource to the control module to activate the particular resource.

Growing community of inventors

Gainesville, VA, United States of America

Carl Jay Moses