Amazon Technologies, Inc.

Michael Tyler Borgerding

David Brian Lennon

Daniel Robert Fuller

Piyush Mathur

Andrew Bruce Dickinson

Rebecca Claire Weiss

Mahmoud Ali Abuelela

Steven Gerard Betten

Siddartha Saddala

Techniques for defining and enforcing a set of rules that regulate network activity on a virtual network within a provider are described. An activity rule that regulates network activity on a virtual network within a provider network is received, the virtual network shared by a first customer of the provider network to allow other customers of the provider network to connect resource instances to the virtual network. Network activity data is received from a monitoring agent within the provider network, the network activity data relating to an activity of a first resource instance of a first other customer on the virtual network. The activity of the first resource instance is determined to violate the activity rule. The first resource instance is isolated from at least a portion of the virtual network.

Device isolation within a shared virtual network

A subnet of a logically isolated network within a provider network may be shared between client accounts of the provider network. A request to share a subnet of a logically isolated network created for one client account with another client account may be received. A link between an account object for the other client account and a shared subnet object for the subnet may be stored. When a request to host a resource with the subnet is received, an evaluation of the graph may indicate whether the request to place the host is permitted. If permitted, the resource for the other client host may be hosted within the subnet.

Sharing a subnet of a logically isolated network between client accounts of a provider network

Growing community of inventors

Herndon, VA, United States of America

Michael Tyler Borgerding