Amazon Technologies, Inc.

Michael Siaosi Voegele

Kevin Christopher Miller

Kyle Tailor Akers

David Brian Lennon

Chao Yuan

Patrick Stephenson

Andrew Bruce Dickinson

Yohanes Santoso

Daniel Lee McCarriar

Rebecca Claire Weiss

Avichai Mendle Lissack

Christopher Thomas

Andriy Palamarchuk

Leonid Valentinovich Nikolayev

Justin Canfield Crites

John Robert Kerl

Nolen Clark Royalty

Christopher Carson Thomas

A service implemented at a first isolated virtual network of a provider network is added to a database of privately-accessible services. Configuration changes that enable network packets to flow between the first isolated virtual network and a second isolated virtual network without utilizing a network address accessible from the public Internet are implemented. Service requests originating at the second isolated virtual network are transmitted to the first isolated virtual network via private pathways of the provider network. Metrics corresponding to service requests directed from the second isolated network to the service are collected and provided to the respective owners of one or both isolated virtual networks.

Private service endpoints in isolated virtual networks

Techniques are described for managing customer-specified routing policies for network-accessible computing resources. In some situations, the customer-specified routing policies may be based at least in part on DNS ('Domain Name System') information specified by a customer, such as if the customer specifies one or more target destinations to use with an indicated DNS domain name that are different from the destination IP address(es) provided for that DNS domain name by DNS servers&#x2014;if so, the managing of such a DNS-based routing policy for that customer may include identifying when network-accessible computing resources provided to the customer send electronic communications to that DNS domain name, and causing those electronic communications to be redirected to the customer-specified target destination(s). Such customer-specified target destinations may include, in different situations, final destinations, intermediate destinations, etc., as well as identify particular routes.

Customer-specified routing policies

Various systems and processes may be used to manage Internet Protocol (IP) addresses that are dynamically assigned. In particular implementations, systems and processes for managing IP addresses that are dynamically assigned may include the ability to determine whether an identifier for a web service has been received from a customer having one or more virtual machines in a service provider network, the web service being accessible by the customer's virtual machines over an external communication network. The systems and processes may also include the ability to determine a number of IP addresses for the web service, identify virtual machines of the customer that are allowed to communicate with the web service, generate one or more IP address lists for the identified virtual machines, and update security tables for the identified virtual machines with the IP address lists at server computers hosting the identified virtual machines.

Managing dynamic IP address assignments

A customer may request a service endpoint for a service in their virtual network on a provider network. In response, a service endpoint is generated in the customer's virtual network, a local IP address in the IP address range of the customer's virtual network is assigned to the service endpoint, and a DNS name is assigned to the service endpoint. Resources on the customer's virtual network resolve the DNS name of the service endpoint to obtain the local IP address of the service endpoint and send service requests for the service to the local IP address of the service endpoint. The service endpoint adds routing information to the service requests and sends the service requests over the network substrate to be routed to the service.

Virtual private network service endpoints

A centralized networking configuration in a distributed system includes a plurality of computing devices implementing a networking configuration server and a plurality of nodes of a service provider network. The computing devices are configured to obtain, at the networking configuration server, client input throttling instructions and client billing information, determine, at the networking configuration server, based on the client input throttling instruction and client billing information, to apply a networking configuration option provided by the client input throttling instructions to a particular category of traffic associated with a service instance of a network-accessible service of the service provider network, transmit, from the networking configuration server to a particular node of the provider network, the networking configuration option, and implement, at the particular node, the networking configuration option.

Customer defined bandwidth limitations in distributed systems

Growing community of inventors

Bethesda, MD, United States of America

Michael Siaosi Voegele