Amazon Technologies, Inc.

Damian Gorman Wylie

James Alfred Gordon Greenfield

Sivaprasad Venkata Padisetty

Georgios Elissaios

Michael Groenewald

Scott Anthony Roberts

Anand Rajender Kumar

Rajnesh Umeshraya Pai

Sayantan Chakravorty

Dennis Tighe

Carlos Alessandro Chiconato

Gokul Ramanan Subramanian

A connection-based service impersonates request-based security for requests from clients that do not include credentials for the requests (e.g., data plane requests made via a connection-oriented security). A connection between a client and a connection-based service is established based on connection credentials that are based on security credentials from a request-based security service. The credentials are sent by a security component of the service to a local agent of the remote security service to be authenticated by the security service. An impersonation token is returned by the security service and cached by the local agent. Requests from the client to perform operations do not include credentials. For each request, the service passes an identifier for the client and the operation to a local authorization component that calls the agent for authorization of the requested operation. The agent uses the impersonation token to obtain authorization for the requested operation.

Impersonating request-based security in connection-based security environment

A virtual computer system service receives a request from a customer to provision a dedicated server for the exclusive use of the customer. The dedicated server may be used to launch one or more virtual machine instances. The virtual computer system service subsequently selects, from a pool of available servers, a server that can be dedicated to the customer and that does not have capacity allocated to any other customer. The virtual computer system service may update a database to specify, in an entry corresponding to the selected server, that the server has been dedicated for the exclusive use of the customer. Once the database has been updated, the virtual computer system service will enable the customer to launch a virtual machine instance using the dedicated server.

Dedicated virtual computing system servers

Growing community of inventors

Seattle, WA, United States of America

Damian Gorman Wylie