Amazon Technologies, Inc.

Michael Sturgis Terkowitz

Seema Pradeep Degwekar

Donna Yinghui Xu

Daryl Melvin Joel Harrison

Nathan David Weill Nadel

Katrina Shackelford

A system for providing a mapping service for distributed data storage systems includes a plurality of computing devices configured to implement a service provider network. The service provider network includes a plurality of endpoints corresponding to a plurality of data servers. Each data server of the plurality of data servers is configured to receive, from a client, a request for client data stored at the plurality of data servers and send, to a mapping service, a mapping request. The data server receives, from the mapping service, a list of a subset of the plurality of data servers, where each data server of the subset stores at least a portion of the client data. The data server generates a response to the client data request including a data portion and a server identifier portion and sends the generated response to the client.

Access management for a multi-endpoint data store

A service provider receives a request to obtain a text-based transmission. In response to the request, the service provider generates an identifier corresponding to the request and, based at least in part on the identifier and text to be included in the transmission, determines a set of textual transformations to associate with the identifier. The service provider modifies the text in accordance with the set of textual transformations and provides the modified text to the requestor as the text-based transmission.

Detection of access to text-based transmissions

A permission vector comprising a plurality of permission sets is used to manage permissions to resources of a resource provider. Each of the plurality of permission sets may correspond to a different resource of the resource provider, wherein each resource of the resource provider has an orthogonal relationship to the other resources. Each permission set may include one or more permission elements that define permissions granted to a user for accessing a corresponding resource element of a resource. The permission vector may be used to determine whether to fulfill user requests submitted to the resource provider to perform an operation that includes accessing a set of requested resources.

Permission vector access control with linear scaling factor

Disclosed are various embodiments for automated determination of application privileges. An application testing service executes an application in a testing computing environment that replicates a production computing environment. The application is given a set of permissions in the testing computing environment. A set of use cases for the application is performed while the application is executing in the testing computing environment. A set of operations invoked by the application to perform the set of use cases is determined. A subset of the set of permissions is generated that corresponds to a minimal set of permissions necessary to invoke the set of operations.

Growing community of inventors

Seattle, WA, United States of America

Michael Sturgis Terkowitz