Amazon Technologies, Inc.

Microsoft Technology Licensing, LLC

Eric Ray Hotinger

Ippokratis Pandis

William Michael McCreedy

Pavel Sokolov

Naresh Chainani

Mohammad Foyzur Rahman

Jingyi Qing

Vivek Ramamoorthy

Bruce William McGaughy

Steven M Lasker

Bin Du

Dengfeng Li

Neeraja Rentachintala

Chao Duan

Sajay Antony

Yan Valerie Leshinsky

Yu Wang

Maximiliano Maccanti

Samarth Harish Shah

Davide Pagano

Sanjay Wangoo

Christos Stavrakakis

Vladimir Ponomarenko

Yousuf Hussain Syed Mohammad

Arvind Jayasundar

Wenchuan An

Mengyang Li

Chenqin Xu

Sushim Mitra

John Thomas

Monish Gupta

Weihang Song

Dongjiang You

Siva Garudayagari

Brian Timothy Goff

Shiwei Zhang

Sebastian Hillig

Pulkit Jagdishchandra Bhavsar

Zhixing Ma

Kathiravan Kalimuthu

Hitenkumar Sonani

Bin Zhang

Nagalakshmi Duggaraju

Bradley Thomas Haverstein

A system for delegation of authorization management of a shared database of a database service is described. The database service includes a control plane and a producer database engine. The producer database engine receives a creation request to create a datashare for a database. The creation request delegates, to a data exchange service, authorization management to access the datashare. The control plane is configured to update permission data for the datashare to indicate that authorization to the datashare is managed by the data exchange service. The producer database engine is further configured to receive a request, from a consumer database engine, to obtain metadata used to perform a query to the database of the datashare, determine that the data exchange service authorized the consumer database engine to access the datashare based on the permission data for the datashare, and return the metadata to the consumer database engine.

Delegated authorization for consumers of shared databases

Database data of a database service may be privately shared across provider network regions. A database producer can authorize an account of to access a database in another region of the provider network. The consumer of the database can associate the database in order to accept the permission to access the database. The database can then be created as an external table at a consumer database engine and metadata for the database privately shared between producer and consumer database engines that can be used to query the external table.

Privately sharing database data across provider network regions

Idle periods may be for management actions at processing clusters for managed databases. A leader node of a processing cluster for a managed database may monitor a network endpoint at a proxy service associated with a database managed by the database service. An idle period for the database may be detected. A management action for the processing cluster may be determined to be performed during the detected idle period. The leader node may cause the determined management action to be performed.

Detecting idle periods at network endpoints for management actions at processing clusters for managed databases

Database query processing may be scaled using additional processing clusters. A database query is received at a processing cluster. A determination is made as to whether additional processing clusters will be used to process the database query. Operations to cause compute nodes of the processing cluster to instruct operations at the additional processing clusters are included in a plan generated to perform database queries determined to use additional processing clusters. The plan is executed to be perform the database query causing compute nodes of the processing cluster to send instructions to corresponding additional processing clusters in order to generate and return a response to the database query.

Scaling database query processing using additional processing clusters

Computing system enhancements make container instantiation faster, reduce layer content storage demands, and make more container image formats available. A container instantiation location sends a container image pull request to a container registry, receives an image manifest, sends a layer mount request to the registry instead of a layer content download request, receives a layer mount, optionally repeats for additional layers, creates a union file system spanning the layers, and launches a container process based on the union file system without first downloading all the layer content. Inefficiencies and technical limitations of some other approaches are avoided, such as loopback mounts for snapshot expansion, creation or transmission of extra snapshots or extra container image clones, cluttering layer content with virtual machine settings, container system vendor lock-in, lack of container instantiation at a local system due to insufficient local storage, and lack of syscall optimization due to storage driver plugin usage.

Container instantiation with union file system layer mounts

Authorization is divided between a control plane and a data plane for sharing database data. A producer database engine can create a shared database via a data plane interface. A producer can then authorize access to the shared database via a control plane interface to a consumer. A consumer can associate the authorization granted to the consumer with a consumer database engine via the control plane interface.

Dividing authorization between a control plane and a data plane for sharing database data

A database service may distribute resources across different geographic locations or other infrastructures to increase availability of the resources and may provide multiple locations to access resources and isolate failure of resources to a respective location or infrastructure. The processing resources in differing fault tolerance zones may be able to continue operating in the event of an outage impacting an entire fault tolerance zone. The database service may generate a supporting processing cluster in the differing fault tolerance zone that handles at least a portion of the access requests of an initial processing cluster. The database service may provision the supporting processing cluster in a separate fault tolerance zone that has a similar capacity and may provision and maintain the cluster in order to preclude the potential of not having sufficient capacity to recover upon failure of a single fault tolerance zone.

Access requests processing and failover handling across multiple fault tolerance zones

A cloud-based fleet of sandboxes is scalable along two tiers. Additional sandboxes may be added to a particular sandbox network in a particular sandbox stack, or additional sandbox stacks may be added. Isolation of individual sandboxes within a sandbox network is provided by virtual switches or routers, and subnetting. Isolation of sandbox networks is provided by network or port address translation, and by running hypervisors in respective infrastructure-as-a-service virtual machines. Provisioning efficiency can be provided by the two-tiered architecture, by use of differencing disks, by use of virtual machine scale sets, and by hybrid core-count sandboxes. Sandboxes may be secured but still have outgoing internet connectivity. Workloads run in the sandbox may include builds, tests of development code, investigations of possible malware, and other tasks.

Tiered scalability sandbox fleet with internet access

Growing community of inventors

Redmond, WA, United States of America

Eric Ray Hotinger