Amazon Technologies, Inc.

Microsoft Technology Licensing, LLC

Xerox Corporation

Other

Marvin Michael Theimer

Eric Jason Brandwine

John R Douceur

William J Bolosky

Atul Adya

Benjamin Warren Mercier

Joseph E Fitzgerald

Don Johnson

Michael J Spreitzer

Roy Want

Gaurav D Ghare

John David Dunagan

David Everard Brown

Anders Samuelsson

William Noah Schilit

Peter Nicholas Desantis

Douglas Brian Terry

Mark D Weiser

Richard J Goldstein

Ying Xiong

Allan Henry Vermeulen

Michael J Hart

Michael B Jones

Marc J Brooker

Zachary Mohamed Shalla

Daniel C Swinehart

Brent B Welch

Brian Joseph Collins

John Petry

Serge Hairanian

Salvador Salazar Sepulveda

Ji Luo

Luis Felipe Cabrera

Scott Alan Elrod

Christopher Richard Jacques De Kadt

Alan J Demers

Julien Jacques Ellie

Colin Watson

Karin Petersen

Terrence R Nightingale

Sameer R Rajyaguru

Swapandeep Singh

Ullas Sankhla

Paul Anderson

Brian Dahmen

Yuxin Xie

Fengjia Xiong

Kerry Hart

Suchi Nandini

Yunhan Chen

Shu Liu

Marc John Brooker

Robert Thomas Krivacic

Gerald Cermak

Abhinav Agrawal

Alan Stuart Robbins

Roger Wattenhofer

Maxim E Fateev

Swaminathan Sivasubramanian

James Robert Hamilton

Jonathan A Jenkins

Alastair Wolman

Jacob Adam Gabrielson

Paul David Franklin

Khaled Salah Sedky

Roland Alexander Paterson-Jones

Rebecca Claire Weiss

Quinton Robin Hoole

Nathaniel Martin Glass

Srikanth Mandadi

Slavka Praus

Léon Thrane

Cornelle Christiaan Pretorius Janse Van Rensburg

Adam David Gray

Matthew William Berry

Christopher G Kaler

Daniel H Greene

Bryan James Donlan

Stefan Saroiu

Roger Shane Barga

Peter Sven Vosshall

Neha Rungta

David John Ward, Jr

Brad Eugene Marshall

Jonathan Paul Thompson

Joshua Marc Burgin

Timothy William Bray

James P Dourish

Roland Paterson-Jones

Zachary Thomas Crowell

Andrew Jude Gacek

Daniel George Peebles

William M Newman

Mihir Rajendrabhai Patel

William J Vass

Mustafa Ugur Torun

Erik James Fuller

Richard Shawn Bice

Vaibhav Sharma

David A Nichols

A distributed data store may maintain versioned hierarchical data structures. Different versions of a hierarchical data structure may be maintained consistent with a transaction log for the hierarchical data structure. When access requests directed to the hierarchical data structure are received, a version of the hierarchical data structure may be identified for processing an access request. For access requests with snapshot isolation, the identified version alone may be sufficient to consistently process the access request. For access requests with higher isolation requirements, such as serializable isolation, transactions based on the access request may be submitted to the transaction log so that access requests resulting in committed transactions may be allowed, whereas access requests resulting in conflicting transactions may be denied.

Versioned hierarchical data structures in a distributed data store

Virtual resources may be provisioned in a manner that is aware of, and respects, underlying implementation resource boundaries. A customer of the virtual resource provider may specify that particular virtual resources are to be implemented with implementation resources that are dedicated to the customer. Dedicating an implementation resource to a particular customer of a virtual resource provider may establish one or more information barriers between the particular customer and other customers of the virtual resource provider. Implementation resources may require transition procedures, including custom transition procedures, to enter and exit dedicated implementation resource pools. Costs corresponding to active and inactive implementation resources in a dedicated pools associated with a particular customer may be accounted for, and presented to, the customer in a variety of ways including explicit, adjusted per customer and adjusted per type of virtual resource and/or implementation resource.

Virtual provisioning with implementation resource boundary awareness

Methods, systems, and computer-readable media for orchestration of computations using a remote repository are disclosed. A representation of one or more inputs to a computation is stored in a repository. The computation is assigned to one or more hosts of a plurality of hosts. A representation of program code executable to perform the computation is stored in the repository. A local copy of the one or more inputs is stored on the one or more hosts. The computation is initiated on the one or more hosts using the program code and the local copy of the one or more inputs. The computation is initiated for a plurality of keys. The computation succeeds for one or more keys after the computation has failed for one or more other keys. A representation of one or more outputs of the computation is stored in the repository.

Orchestration of computations using a remote repository

With the advent of virtualization technologies, networks and routing for those networks can now be simulated using commodity hardware. For example, virtualization technologies can be adapted to allow a single physical computing machine to be shared among multiple virtual networks by providing one or more virtual machines simulated in software by the single physical computing machine, with each virtual machine acting as a distinct logical computing system. In addition, as routing can be accomplished through software, additional network setup flexibility can be provided to the virtual network in comparison with hardware-based routing. In some implementations, virtual network setup can be abstracted through the use of resource placement templates, allowing users to create virtual networks compliant with a customer's networking policies without necessarily having knowledge of what those policies are.

Resource placement templates for virtual networks

Techniques are described for facilitating use of software components by software applications in a configurable manner. In some situations, the software components are fee-based components that are made available by providers of the components for use by others in exchange for fees defined by the components providers, and in at least some situations, the software components may have various associated restrictions or other non-price conditions related to their use. The described techniques facilitate use of such software components by software applications in a configured manner. Furthermore, in at least some situation, the execution of such software applications is managed by an application deployment system that controls and tracks the execution of the software application on one or more computing nodes, including to manage the execution of any software components that are part of the software application.

Managing use of software components

At a managed control plane service, end-user application programming interfaces (APIs) of an application to be implemented at a provider network are determined. A set of common operational requirements of the application, to be fulfilled without obtaining program code for the requirements, are identified. In response to an invocation of an end-user API of the application, computations are performed at a resource selected by the managed control plane service, and one or more tasks to satisfy a common operational requirement are initiated by the managed control plane service.

Managed control plane service

Methods, systems, and computer-readable media for a client-side filesystem for a remote repository are disclosed. One or more files of a repository are sent from a storage service to a client device. The file(s) are obtained by the client using a credential sent by a repository manager. Local copies of the file(s) are accessible via a local filesystem mounted at the client device. One or more new files associated with the repository are generated at the client device. Using the credential, the one or more new files are obtained at the storage service from the client device. The one or more new files are added to the repository.

Client-side filesystem for a remote repository

Techniques for intent-based access control are described. A method of intent-based access control may include receiving, via a user interface of an intent-based governance service, one or more intent statements associated with user resources in a provider network, the one or more intent statements expressing at least one type of action allowed to be performed on the user resources, compiling the one or more intent statements into at least one access control policy, and associating the at least one access control policy with the user resources.

Intent-based governance

Distributed system resources may be managed by applying user created policies to the resources. To ensure that valid policies are applied, remote validation for the policies may be implemented. A validation event for a policy may be detected. A remote validation agent may be identified for the policy and a validation request sent to the remote validation agent that includes information for validating the policy. The remote validation agent may return a validation result for the policy. If valid, a policy action that triggered the remote validation event for the policy may be allowed. If invalid, the policy action that triggered the remote validation event for the policy may be denied.

Remote policy validation for managing distributed system resources

The deployment of content and computing resources for implementing a distributed software application can be optimized based upon customer location. The volume and geographic origin of incoming requests for a distributed software application are determined. Based upon the volume and geographic origin of the incoming requests, content and/or one or more instances of the distributed software application may be deployed to a geographic region generating a significant volume of requests for the distributed software application. Content and/or instances of a distributed software application might also be speculatively deployed to a geographic region in an attempt to optimize the performance, cost, or other attribute of a distributed software application.

Optimized deployment based upon customer locality

An event detection system for detecting events related to vehicles based on sensor data from the vehicles. An event detection service on a network may receive streams of sensor data from vehicles and apply machine learning techniques to train models and to analyze the data to detect vehicle-related events. Supervised and unsupervised techniques may be used to train the models and to detect known as well as anomalous events. Events may be detected based on data from one or from multiple vehicles. The system may respond to events by alerting entities and/or signaling vehicle control systems to respond to the events. Trained models may be downloaded to vehicles; the vehicle computer systems can then locally detect events. The downloaded models can be further trained on the vehicles, uploaded to the network, and integrated into the network-based models to improve the performance of the models.

Network-based vehicle event detection system

Multiple edits to a hierarchical data structure may be atomically applied. A request to perform modifications with respect to a portion or the entire hierarchical data structure may be received. A copy of the requested portion of the hierarchical data structure may be created separate from the hierarchical data structure. The portion of the hierarchical data structure may remain available for read access. Modifications may be applied to the copy of the portion of the hierarchical data structure. In response to a request to commit the modifications to the portion of the hierarchical data structure, the copy of the portion of the hierarchical data structure may atomically replace the portion of the hierarchical data structure.

Atomic application of multiple updates to a hierarchical data structure

Growing community of inventors

Bellevue, WA, United States of America

Marvin Michael Theimer