Amazon Technologies, Inc.

Apple Inc.

Align Technology, Inc.

Pavel Sokolov

Dominic Benjamin Giampaolo

Pavel Cisler

Rene M Sterental

William Michael McCreedy

Ippokratis Pandis

Vivek Ramamoorthy

Vladimir Ponomarenko

Neeraja Rentachintala

Maximiliano Maccanti

Eric P Meyer

Eric Ray Hotinger

Mohammad Foyzur Rahman

Naresh Chainani

Jingyi Qing

Dengfeng Li

Eric Brandon Tamura

Pierre-Olivier J Martel

Damien Pascal Sorresso

Eric A Weiss

Christopher A Wolf

Venkatraman Govindaraju

Michael Flanagan

William R Stouder-Studenmund

Purvaja Narayanaswamy

Karsten Jancke

Behnam J Foroodian

Naga Raju Bhanoori

Bruce William McGaughy

Sanjay Wangoo

Krishnaditya Kandregula

Sachet Saurabh

Vinay Singh

Yoni Baron

Chao Duan

Jason Ramos

Ramy Nazier

Dmytro Lebedyev

Venkata Naga Raja Sri Harsha Kesapragada

Kostiantyn Dymov

Sharda Kishin Khubchandani

Sushim Mitra

John Thomas

Monish Gupta

Weihang Song

Mengyang Li

Zhixing Ma

Pulkit Jagdishchandra Bhavsar

Chenqin Xu

Vivek Verma

Wenchuan An

Anton Lapshin

Adi Levin

Evgeniy Malashkin

Anna Sivakova

Konstantin Tenzin

Andrey Chekhonin

A system for delegation of authorization management of a shared database of a database service is described. The database service includes a control plane and a producer database engine. The producer database engine receives a creation request to create a datashare for a database. The creation request delegates, to a data exchange service, authorization management to access the datashare. The control plane is configured to update permission data for the datashare to indicate that authorization to the datashare is managed by the data exchange service. The producer database engine is further configured to receive a request, from a consumer database engine, to obtain metadata used to perform a query to the database of the datashare, determine that the data exchange service authorized the consumer database engine to access the datashare based on the permission data for the datashare, and return the metadata to the consumer database engine.

Delegated authorization for consumers of shared databases

Database data of a database service may be privately shared across provider network regions. A database producer can authorize an account of to access a database in another region of the provider network. The consumer of the database can associate the database in order to accept the permission to access the database. The database can then be created as an external table at a consumer database engine and metadata for the database privately shared between producer and consumer database engines that can be used to query the external table.

Privately sharing database data across provider network regions

Improved crash resilience is implemented in shared memory processing systems. A processing application including a plurality processing groups may be configured, and a processing group including a plurality of processes may allocate memory from a global shared memory to a group-private shared memory arena. Then, an abnormal execution condition for a failing process of the processing group may be detected during execution of a processing job. Responsive to the detection, a recovery of execution of the processing group may be performed while continuing execution of processing groups of the application. The recovery may include restoring the processing group to a normal execution state and returning the allocated memory of the group-private memory arena to the global shared memory.

Crash resilience in shared memory processing systems

A federated permission management service provides clients with customized access to a data set using customized authorization metadata. The federated permission management service may define and apply permissions that are defined at a data lake that provides access to many different data sets from many different sources, as well as those permissions that may be defined at the source of the data set, which may be provided when performing a data sharing request. By allowing for permissions to be specified at the data lake in addition to permissions specified at a source of a data set, the permission management service can provide a fine-grained access control to specific objects of the data set, such as specific columns, specific rows, or specific cells of a database to be shared, even for those data sets in the data lake having different sources.

Data sharing with federated access permissions

Idle periods may be for management actions at processing clusters for managed databases. A leader node of a processing cluster for a managed database may monitor a network endpoint at a proxy service associated with a database managed by the database service. An idle period for the database may be detected. A management action for the processing cluster may be determined to be performed during the detected idle period. The leader node may cause the determined management action to be performed.

Detecting idle periods at network endpoints for management actions at processing clusters for managed databases

Authorization is divided between a control plane and a data plane for sharing database data. A producer database engine can create a shared database via a data plane interface. A producer can then authorize access to the shared database via a control plane interface to a consumer. A consumer can associate the authorization granted to the consumer with a consumer database engine via the control plane interface.

Dividing authorization between a control plane and a data plane for sharing database data

The embodiments set forth techniques for performing incremental backups of a source file system volume (FSV) managed by a source computing device. According to some embodiments, the source computing device can be configured to generate a current snapshot of the source FSV, where the current snapshot complements a previous snapshot of the source FSV (e.g., established during a previous backup). In some cases, to free up storage space, the data for files belonging to the source FSV can be stripped from the previous snapshot (where metadata for the files remains intact). Next, the source computing device can generate, within a destination storage device, a second snapshot of a destination FSV (that corresponds to the source FSV). In turn, the source computing device identifies changes made to the source FSV based on the current snapshot and the previous snapshot, and reflects the changes within the second snapshot of the destination FSV.

Techniques for performing incremental data backups

Representative embodiments set forth herein disclose techniques for implementing improved links between paths of one or more file systems. According to some embodiments, techniques are disclosed for establishing a system volume and a data volume within a container. According to other embodiments, techniques are disclosed for establishing a link from a source path of a system volume within a container to a target path of a data volume within the container. According to yet other embodiments, techniques are disclosed for determining whether to allow a file system operation on a data volume of a container based on at least determining whether a target path is associated with a reference to a source path.

Systems and methods for implementing improved links between paths of one or more file systems

The described embodiments set forth techniques for managing the fragmentation of files at a computing device. Specifically, the techniques involve, for a given file, analyzing different extents of the file under a 'segment window' basis to identify whether a fragmentation threshold is satisfied between the extents that correspond to the scope of the segment window. In turn, for each segment window that satisfies the threshold level of fragmentation, (1) the data for the extents is copied into an allocated area of contiguous memory, and (2) the extents are updated to reference the copied data. Additionally, the original data referred to by the extents can be freed for usage within the computing device, thereby increasing storage space. In this manner, the overall fragmentation of the file is substantially reduced under the segment window basis, thereby improving the overall performance of the computing device.

Techniques for managing file fragmentation at a computing device

Growing community of inventors

Menlo Park, CA, United States of America

Pavel Sokolov