Oracle International Corporation

Amazon Technologies, Inc.

Jun Tong

Jonathan Jorge Nadal

Thoulfekar Alrahem

Girish Nagaraja

Nathaniel Martin Glass

Leonid Kuperman

Nachiketh Rao Potlapally

Igor Dozorets

Brian Pratt

Bala Ganesh Chandran

Chao Liu

Deepak Bhatia

Ali Sadighian

Patrick Ludvig Bajari

Salal Humair

Di Wu

Xiaochang Hu

Sreenivas Gattu

Mahmoud Ahmed Bishr

Qian Wei

Travis Francis Brayak

A cloud-based security solution that provides a robust and secure framework for managing and enforcing security policies related to various resources managed in the cloud is disclosed. The cloud-based security solution is implemented by a security zone policy enforcement system in a cloud service provider infrastructure. The system receives a request to perform an operation on a resource and determines a compartment associated with the resource. The system determines that the compartment is associated with a security zone and determines a set of one or more security zone policies applicable to the resource. The system then determines that the operation on the resource is permitted based on the set of one or more security zone policies and responsive to determining that the operation on the resource is permitted, allows the operation to be performed on the resource.

Security zone policy enforcement in a cloud infrastructure system

A cloud-based security solution that provides a robust and secure framework for managing and enforcing security policies related to various resources managed in the cloud is disclosed. The cloud-based security solution is implemented by a centralized application programming Interface (API) system and a security zone policy enforcement system in a cloud service provider infrastructure. The centralized API system receives an API request that identifies an operation to be performed on a resource in the CSPI. The system determines, from the API request, compartment information and context information associated with the resource. Responsive to determining the compartment information and the context information associated with the resource, the system determines that the resource resides in a compartment that is associated with a security zone. The system then processes the API request and transmits a result of processing of the API request to a user of the centralized API processing system.

Centralized request processing and security zone policy enforcement in a cloud infrastructure system

Techniques for managing a removal channel may be described. In an example, a first estimate may be generated. The first estimate may be associated with removing a volume of items from an inventory space within a planning horizon through a removal channel. A decision to remove the volume of items may be accessed. The decision may be based on the first estimate and a second estimate associated with adding a capacity for inventorying an equivalent volume of items. Based on the decision, a constraint may be generated and imposed on an inventory level of an item during a time period of the planning horizon. A quantity of the item to remove within the time period through the removal channel may be estimated based on the constraint. Usage of the removal channel during the time period may be set based on the quantity of the item to remove.

Managing a removal channel based on inventory capacity

Growing community of inventors

Bellevue, WA, United States of America

Jun Tong