Amazon Technologies, Inc.

David M Hulme

Graeme David Baer

Benjamin Elias Seidenberg

Meng Li

Ankit Kumar

Dan Popick

Sandesh Sanjeev

Techniques for incremental stream switching in a distributed system with flip events are described. A special-purpose flip event is inserted into an event stream that indicates, to recipients of the stream, whether they are to switch to use of an alternate event stream. The flip event may identify which other event stream to use, how to obtain events of that event stream, when to switch to the other event stream, and/or whether that particular recipient is to switch. The recipients may be selectively or iteratively migrated using flip events targeting different recipients, limiting the blast radius of a switch. Via use of a tracking data structure, event replay and event skips can be avoided.

Incremental stream switching in distributed systems

A material set, such as an asymmetric keypair, is processed using an associated workflow to prepare the material set for activation and/or use. In one embodiment, a material set is generated and information about the material set is communicated to a workflow manager. Based at least on the information, the workflow manager generates a workflow that when accomplished will allow the material set to be activated and/or used. In another embodiment, a service provider provides a key manager, workflow manager and destination for the key, such as a load balancer that terminates SSL connections. A key can be generated by the key manager, sent through the workflow manager for processing (potentially communicated to third parties such as a certificate authority, if needed) and installed at a destination.

Key rotation with external workflows

Automating key rotation in a distributed system

Growing community of inventors

Seattle, WA, United States of America

David M Hulme