Amazon Technologies, Inc.

Patrick James Ward

Eric Jason Brandwine

Gregory Branchek Roth

Graeme David Baer

Bradley Jeffery Behm

Nathan R Fitch

Nicholas Alexander Allen

Brian Irl Pratt

Kathryn Marie Shih

Raleigh Harrison Upshur

Gregory Alan Rubin

Nachiketh Rao Potlapally

Cristian Marius Ilac

Donald Lee Bailey, Jr

Andrew Paul Mikulski

Matthew Allen Estes

Bradley Jeffrey Behm

Matthew Paul Baranowski

James Leon Irving, Jr

Ian Wesley-Smith

Srinivas Guduru

Methods and systems for implementing custom access controls are disclosed. A first task is added to a first workflow. A first role is generated for the first workflow. The first role comprises a first set of one or more permissions for using one or more computing resources. The one or more permissions in the first role are selected based on the first task. The first task is performed using the one or more computing resources in accordance with the first role.

Custom access controls

Disclosed are various embodiments for a log monitoring system to monitor the health of server log files. The log monitoring system may generate at least one log health signal based on an analysis of the server log content generated by at least one host application. Furthermore, the application may generate a system integrity record based on the at least one log health signal and an external signal, wherein the external signal embodies a system health metric of the at least one host application.

Log monitoring system

Methods and systems for implementing versioned access controls are disclosed. A first task is added to a first workflow with a first version of a default role. A second version of the default role is generated after the first task is added. A second task is added to a second workflow with the second version of the default role. The first version and the second version each comprise one or more permissions for using one or more computing resources. The first task is performed using the permissions in the first version of the default role. The second task is performed using the permissions in the second version of the default role.

Versioned access controls

An application executing on a user device can receive a request to access a remote computer system. The application can automatically obtain an authentication code that is generated based at least in part on a seed value, which can be stored in the user device. The application can automatically generate an authentication request based at least in part on the access information and the authentication code, and transmit the authentication request to remote computer system.

User-friendly multifactor authentication

Access to an information technology resource may be provided to a user involved in a data center construction project. The information technology resource may be located on a secure network, but be made accessible to the user through one or more unsecure networks. Access to the information technology resource aids the user in performing tasks related to data center construction, such as tracking the receipt and installation of equipment.

Mobile work platform for remote data centers

A database access system may protect a field by storing the field as one or more underlying fields within a database. The database engine may not have access to keys used to protect the underlying fields within the database, such as by encryption, while the database access system may have access to the keys. Underlying fields may be used to store protected data and aid in the querying of protected data. The database access system may modify queries to use the underlying fields, which may include encrypting query terms and/or modifying query terms to fit the use of the underlying fields. The database access system may modify query results to match the format of the original query, which may include decrypting protected results and/or removing underlying fields.

Securing a remote database

Disclosed are various embodiments for a log monitoring system to monitor the health of server log files. The log monitoring system may comprise at least one computing device and at least one application executable in the at least one computing device, where the at least one application being configured to generate at least one log health signal based on an analysis of the server log content generated by at least one host application. Furthermore, the application may generate a system integrity record based the at least one log health signal and an external signal, wherein the external signal embodies a system health metric of the at least one host application.

Methods and apparatus for a security mechanism evaluation service are disclosed. A storage medium stores program instructions that when executed on a processor define a programmatic interface enabling a client to submit an evaluation request for a security mechanism. On receiving an evaluation request from a client indicating a particular security mechanism using public-key encryption, the instructions when executed, identify resources of a provider network to be used to respond. The instructions, when executed, provide to the client, one or more of: (a) a trustworthiness indicator for a certificate authority that issued a public-key certificate in accordance with the particular security mechanism; (b) a result of a syntax analysis of the public-key certificate; or (c) a vulnerability indicator for a key pair.

Security mechanism evaluation service

Client impersonation is recognized by an access control service using servicer credentials to allow a servicer to impersonate a user's context while requesting actions be performed on a computing resource. A servicer may be requested to perform an action through impersonation, granting access to the context of a user related to the computing resource. The computing resource receives servicer credentials and impersonation information from the servicer. After verifying the servicer's authorization to perform actions under the context of the user, the servicer may attempt to perform the requested action. The action may be logged as performed by the servicer impersonating the user. The user may also be billed for any costs incurred.

Growing community of inventors

Snoqualmie, WA, United States of America

Patrick James Ward