Amazon Technologies, Inc.

Jingyi Qing

Ippokratis Pandis

Pavel Sokolov

Eric Ray Hotinger

William Michael McCreedy

Mohammad Foyzur Rahman

Vivek Ramamoorthy

Dengfeng Li

Maximiliano Maccanti

Naresh Chainani

Neeraja Rentachintala

Vladimir Ponomarenko

Mengyang Li

Weihang Song

Monish Gupta

John Thomas

Sushim Mitra

Wenchuan An

Chenqin Xu

A system for delegation of authorization management of a shared database of a database service is described. The database service includes a control plane and a producer database engine. The producer database engine receives a creation request to create a datashare for a database. The creation request delegates, to a data exchange service, authorization management to access the datashare. The control plane is configured to update permission data for the datashare to indicate that authorization to the datashare is managed by the data exchange service. The producer database engine is further configured to receive a request, from a consumer database engine, to obtain metadata used to perform a query to the database of the datashare, determine that the data exchange service authorized the consumer database engine to access the datashare based on the permission data for the datashare, and return the metadata to the consumer database engine.

Delegated authorization for consumers of shared databases

Database data of a database service may be privately shared across provider network regions. A database producer can authorize an account of to access a database in another region of the provider network. The consumer of the database can associate the database in order to accept the permission to access the database. The database can then be created as an external table at a consumer database engine and metadata for the database privately shared between producer and consumer database engines that can be used to query the external table.

Privately sharing database data across provider network regions

Authorization is divided between a control plane and a data plane for sharing database data. A producer database engine can create a shared database via a data plane interface. A producer can then authorize access to the shared database via a control plane interface to a consumer. A consumer can associate the authorization granted to the consumer with a consumer database engine via the control plane interface.

Dividing authorization between a control plane and a data plane for sharing database data

Growing community of inventors

Newcastle, WA, United States of America

Jingyi Qing