Amazon Technologies, Inc.

Ioannis Aslanidis

Filippo Sironi

Deepak K Gupta

Jan Hendrik Schoenherr

Karimallah Ahmed Mohammed Raslan

Rolf Peter Neugebauer

Jan Hendrik Schönherr

Alexander Graf

Milan Pandurov

Jonathan Daniel Bean

An isolated accelerator management intermediary running at a virtualization host uses a management interface exposed by a hardware accelerator to perform a set of operations to enable access to the hardware accelerator from a guest virtual machine. The operations include configuring a guest-accessible interface of the accelerator. A virtualization management component of the host launches the guest virtual machine after the set of operations is completed.

Isolated accelerator management intermediaries for virtualization hosts

A virtualized computing service provides a computing instance capable of requesting attestation of the authenticity of the hypervisor implementing the computing instances. An attestation device included in a virtualization host maintains a log of hash values representing hypervisor versions that have been implemented at the virtualization host. Also, an independent auditor (e.g., attestation service) is provided software configurations that are known to be authentic. The independent auditor generates hash values for the authentic hypervisor versions. The computing instance receives a response from the local attestation device indicating hash values of hypervisor versions currently and/or previously deployed on the virtualization host, and the computing instance forwards the hash values to the independent auditor to authenticate that they match the hash values of the known authentic hypervisor versions. In some embodiments, a similar process may also be used to attest to the authenticity of operating systems used by the computing instance.

Virtualization management system and/or operating system attestation from within a virtualized computing instance

An interrupt recovery manager detects that a compute instance has exited a state in which interrupts from one or more interrupt sources were not processed at the compute instance. The recovery manager identifies a source from which interrupts may have been missed by the compute instance, and causes an indication of a potential missed interrupt from that source to be delivered to the compute instance.

Interrupt recovery management

Growing community of inventors

Dresden, Germany

Ioannis Aslanidis