Amazon Technologies, Inc.

Cisco Technology, Inc.

Cloudendure Ltd.

Ophir Setter

Sigal Weiner

Ofir Ehrlich

Leonid Feinberg

Yoram Cohen

Roman Zeyde

Alexei Kravtsov

Ron Kimchi

Yaniv Ptashnik

Ran Ilany

Ilya Surdin

Eran Weiss

Gal Tamir

Ori Pugatzky

A system and method for an infrastructure as code (IaC) environment includes automatically generating different infrastructure code for different timepoints based at least in part on changes in infrastructure configurations at the different timepoints of a first virtual private cloud (VPC) so as to execute one of the different infrastructure code for a second VPC to cause deployment of one of the infrastructure configurations; and includes automatically generating or updating a script based at least in part on changes in the infrastructure code, the script to be used to deploy at least a version of the infrastructure configurations with the changes in a second VPC of a different geographical location than associated with the first VPC.

Cross-regional infrastructure configurations for disaster recovery

Dynamic configuration of storage volumes based on data usage metrics is provided. Data may be initially written to a relatively low-throughput storage volume that is managed according to a usage metric. For example, a burst balance metric may be monitored and, if it falls below a threshold or reduces at a rate exceeding a threshold, the system can dynamically change to writing data to a higher-throughput data storage volume. After a period of time and/or if performance criteria are satisfied, the system can dynamically change to writing data to a lower-throughput data storage volume.

Dynamic usage-metric-based configuration of storage volumes

Dynamic configuration of backups of production volumes based on desired recovery objectives is provided. A system may obtain a recovery point objective ('RPO') for a particular production volume. The system may initially back up data, written to the production volume, to a storage volume with certain performance parameters. However, if the write operations to the production volume occur at a high enough rate and/or affect a large enough amount of data, there may be a lag in writing that data to the backup volume. The system may monitor the lag with respect to the specified RPO for backup of the production volume. If the lag approaches the RPO, then the system may dynamically change the configuration of the backup volume to better satisfy the RPO.

Dynamic recovery-objective-based configuration of backup volumes

A method and system for securing instantiates. The method includes determining at least one signable file among a plurality of files of an instantiate, wherein determining the at least one signable file further comprises classifying each of the plurality of files with respect to whether the file is changed at runtime; signing each of the at least one signable file to create at least one first signature, wherein signing the plurality of files further comprises computing a cryptographic hash for each file, wherein each encrypted hash is signed using a private key; and verifying an identity of the instantiate using the at least one first signature, wherein verifying the identity of the instantiate further comprises comparing the at least one first signature to the at least one second signature, wherein each of the at least one second signature is a signature of one of the at least one signable file at runtime.

Identity-based security platform and methods

A system and method for disk replication over a network with network failover, the method including: generating at least one write packet when a write instruction is detected from a first computing environment, where the at least one write packet includes: metadata associated with a data block, and a packet identifier; storing the at least one write packet in a cache; sending the at least one write packet from the cache to a second computing environment for storage; and determining if the at least one write packet has been successfully stored in the second computing environment.

Replication system with network failover

A method and system for restoring an original component from a replicated component are provided. The method includes instructing the original component in a first computing environment to boot from a restoration boot disk; synchronizing at least one original disk of the original component with at least one corresponding replicated disk of a replicated component in a second computing environment, wherein the at least one original disk maintains at least an original operating system of the original component, wherein the replicated component is configured to function in place of the original component; receiving a request to restore the original component; and instructing the original component to boot from the at least one original disk, upon determination the at least one original disk and the at least one corresponding replicated disk are consistent.

Growing community of inventors

Ramat Gan, Israel

Ophir Setter