Amazon Technologies, Inc.

Kenneth L Hamer

William J Alford

Jesper Mikael Johansson

Sumit Lohia

Thomas William Whitcomb

Evan Michael McLain

Dominique Imjya Brezinski

Beau J Hunter

Jeffrey Joseph Busch

A system and method of deploying operating environments in an enterprise computing environment comprised of managed virtual or hardware servers is disclosed. A library of operating environments, each environment including at least one package including an operating system image and an application, is provided. A user controlling a cluster of servers may request creation of a test environment using an operating environment from the library, and test the environment with applications to ensure the user's needs are met. The user may request all servers within the user's cluster be provisioned with the operating environment through a deployment manager.

User controlled environment updates in server cluster

A system and method of deploying applications to networked computing environments is disclosed. Application packages and installation instructions are received by a deployment manager. The installation instructions include test instructions. Application packages are distributed in response to requests by developers and installation instructions executed on a target computing environment. Failure of an installation test provides an indication of issues with the application in the target environment. Records of failures received are stored for use by application developers.

Installation testing in automated application distribution

System and method for agentless computing system configuration management in networked environments. A configuration management service may be implemented as a service on a network with a standard network interface. A client may communicate with the service to specify a configuration for a target system, for example through a browser interface. The specified configuration may be stored by the service. The service may generate a package according to the specified configuration. The package may be delivered to the target system via the network. The package may then install the configuration, for example, one or more software, data, or other digital components, on the target systems in accordance with the specified configuration. The clients may request that the service verify and/or update the installed configuration on the target system. The service may, in response, generate an update package for the installed configuration. Target systems may include computer systems and virtual machines.

System and method for configuration management service

A password application system receives a credential for a first privilege of a plurality of privileges whereby the first privilege corresponds to a first set of credential requirements and the plurality of privileges have a second privilege that corresponds to a different set of credential requirements. The system determines whether the credential for the first privilege satisfies the first set of credential requirements. If the credential satisfies this set of credential requirements, the system enables the credential to be used for access in accordance with the first privilege.

Strength-based password expiration

Disclosed are various embodiments for assessing risk associated with a software application on a user computing device in an enterprise networked environment. An application rating is generated for the software application based at least in part on application characteristics. A risk analysis for the installation of the application is generated based at least in part on the application rating, the user computing device, and user information.

Risk assessment for software applications

This disclosure is directed to, in part, determining an expiration of a password or other security data based on a measured complexity of the password or the security data. A user may enter a password to be associated with an account or a resource (e.g., a login for a user account, etc.). The password may be analyzed to determine an entropy value of the password, which is a measure of complexity of the password. A password manager may then determine an expiration of the password based on the entropy value of the password. Thus, a more complex password may be assigned an expiration date that is longer than an expiration date assigned to a less complex password. In some aspects, the expiration date may be dynamically updated as a user continues to enter inputs for a new password.

Disclosed are various embodiments for assessing risk associated with different software applications which are installed on user computing devices in an enterprise networked environment. Ratings are generated for the different software applications based at least in part on respective characteristics of the different software applications. Risk profiles are generated for the installations of the different software applications on the user computing devices in the networked environment. The risk profiles are generated based at least in part on the respective ratings, the respective user computing devices, and the respective end users associated with the respective user computing devices.

Growing community of inventors

Seattle, WA, United States of America

Kenneth L Hamer