Amazon Technologies, Inc.

Kiran Kumar Meduri

Anirudh Balachandra Aithal

Diwakar Gupta

Chih-Jen Huang

Anthony Joseph Suarez

Paul C Schattauer

Deepak Singh

Muhammad Umer Azad

Daniel Robert Gerdesmeier

William Andrew Thurston

Euan Skyler Kemp

David John Ward, Jr

Shubha Shree Bheemarao

Joseph Elmar Magerramov

Ammar Chinoy

Geoffrey Scott Pare

Philip Yuen

Alireza Farhangi

Jia Bi Zhang

Samuel Benjamin Karp

Mohammed Samir Alabsi

Alec Peterson

Peng Zhai

Fernando Paiva Zandona

Ryan John Marchand

Karthigeyan Seetharaman

Karan Kumar Vasnani

Ivan Vitjuk

James Joseph Straub

Yathish Sudhakara Gangolli

Mengye Gong

Alexandr Moroz

Juan Rhenals

Marcel Jon Van Rensberg

David Stephen Bell

Scott Howard La Vigne

A task definition is received. The task definition indicates at least a location from which one or more software image can be obtained and information usable to determine an amount of resources to allocate to one or more software containers for the one or more software image. A set of virtual machine instances in which to launch the one or more software containers is determined, the one or more software image is obtained from the location included in the task definition and is launched as the one or more of software containers within the set of virtual machine instances.

System for managing and scheduling containers

A system, method, and computer readable medium for managing service mesh for container instances. The method includes generating a service mesh that includes a plurality of computing resources. The method further includes obtaining, from an instantiated computing resource, a request to associate the computing resource with another computing resource in the service mesh, where the request comprising a set of constraints that allows the other computing resource to be identified. Based on the set of constraints, the computing resources in the service mesh are connected in which the computing resources communicate with each other through a dedicated proxy.

Service mesh management

A determination is made that messages from a first constituent service of an application are to be processed at a second constituent service. Networking configuration settings are generated such that a message originating at the first constituent service is directed to a traffic processing agent established by a traffic management service. In response to a receipt of a message from the first constituent service at the agent, one or more packets are delivered to the second constituent service.

Managed traffic processing for applications with multiple constituent services

In a multi-tenant web services platform, a request is received from a first customer requesting that a second customer be allowed to use a computing resource associated with the first customer. Control of the computing resource is transferred to the second customer based on a constraint selected by the first customer. A first portion of a cost associated with the computing resource is billed to the first customer. The control of the computing resource by the second customer is terminated in accordance with the constraint selected by the first customer.

Lendable computing resources

An event applier service obtains state change information for a plurality of software containers from a transaction journal. Based at least in part on operations specified in the state change information for the plurality of software containers, the event applier service generates event data for the plurality of containers. The event applier service updates a database to indicate that the state change information has been processed to generate the event data. The event applier service provides the event data.

Software container event monitoring systems

A scalable configuration management system manages distribution of data representing changes to configuration parameters in a network computing environment. The system uses a scalable pool of configuration management components to generate sequential update data for the configuration state of service providers, and distribute the sequential update data to service consumers. The service consumers can subscribe to and receive updates to the configuration state of service providers. In some embodiments, the system can provide snapshots of the complete current state of a service provider.

Streaming configuration management

Systems for provisioning virtual network interfaces (VNIs) for tasks running on a virtual machine instance in a distributed computing environment are provided. The systems receive a request to launch a task corresponding to a plurality of containers in an instance in association with an instruction to provide a VNI for the task with a set of network security rules. The system may select an instance with sufficient resources to launch the task and enable communication using the VNI. The system may inhibit processes running on the instance other than containers associated with the task from communicating via the VNI.

Network interfaces for containers running on a virtual machine instance in a distributed computing environment

An application is comprised of a plurality of processes. A process is able to accesses a remote service using a service access credential which is adapted to the particular requirements of the process. By providing a process with customized credential, the process is constrained from performing unnecessary operations, and the overall security of the application is improved. When processes are deployed to a host computer, an agent on a host computer collects credential information and other metadata associated with the processes running on the host computer. The agent makes the metadata available to a credential provider running on the host, and the credential provider exposes an interface that is accessible to the processes. The processes include a credential proxy which communicates with the credential provider. The credential proxies relay credential requests to the credential provider, and return the provided credentials from the credential provider to the processes.

Credential vending to processes

A mobile payment network receives location information from mobile devices used to conduct transactions between two account holders, and qualifies any requested transactions based on the physical proximity of the two devices relative to each other.

Location aware transaction authorization

Technologies are described herein for providing a marketplace for the remaining term of reserved instances. A selling customer identifies a reserved instance of a computing resource for which the customer wishes to sell a remainder of their term and specifies an asking price. A reserved instance listing associated with the identified reserved instance and asking price is created. A buying customer provides a specification of reserved instances that they wish to purchase, including a term. The specification may also include size, platform, tenancy, availability zone, and other parameters of the reserved instances. The reserved instance listings are searched to find associated reserved instances matching the specification and having a remaining term equal to or greater than the term in the specification. The reserved instances associated with the reserved instance listings having the lowest asking price may then be transferred from the selling customer to the buying customer.

Reserved instance marketplace

A system and method for a container service that obtains a software image of a software container that has been configured to be executed within a computer system instance registered to a cluster by one or more processors. The container service is configured to receive a request to launch the software image in accordance with a task definition, wherein the task definition specifies an allocation of resources for the software container. The container service may then determine, according to a placement scheme, a subset of a set of container instances registered to the cluster in which to launch the software image in accordance with the task definition. Upon determining the subset of the set of container instances, the container service may launch the software image as one or more running software containers in the set of container instances in accordance with the task definition.

A mobile payment network may include a server receiving a request for payment from a device, where the request may include information related to a location for the device. The information related to location information for the device that is included within the request may then be used for deriving location information for the device. Given the location information for the device, a distance between the location information and a geographic area may be determined. The distance between the location information for the device and the geographic area may then serve, at least in part, as the basis for approving the request for payment.

Growing community of inventors

Bellevue, WA, United States of America

Kiran Kumar Meduri