Amazon Technologies, Inc.

Ross Bevan Engers

Stefan Letz

Joshua Dawie Mentz

Ronen Dov Agranat

Willem Jacob Buys

Timothy Ralph Sjoberg

Jaco Hermanus Gabriel Le Roux

Brian Frederick Mulder

Aidan Musnitzky

Daniel Bauman

James Alfred Gordon Greenfield

Benjamin Van Der Merwe

David Daniel De Bruyn

Natu Lauchande

Christo Pierre Langenhoven

Oliver Nigel Nightingale

An application programming interface (API) as a service is disclosed. In embodiments, a client provides code to be executed along with a configuration file for that code. Based on that, virtual machine(s) and load balancer(s) may be selected, a domain name service configured, and throttling and scaling configured. Through this, an API as a service may be provided on behalf of a client with minimal configuration required by the client or an administrator of a web service platform that provides the API as a service.

Application programming interface as a service

A database management system may be configured to receive requests related to storing and retrieving network address information. Requests may be represented in a query language as a native data type. Network address information may be stored using a data format indicative of ranges of network addresses, including bit fields indexed by a hash function and range trees. Network addresses may be located based on traversing rows in a table and traversing network address ranges stored in rows. A network address may be validated by locating the stored address and examining properties associated with the address.

Network address range storage and retrieval

A method for data aggregation of declassified sensitive data may include obtaining a policy associated with an isolated region of a service provider. The policy may identify a plurality of rules for declassifying sensitive data accessible within the isolated region. At least a portion of the plurality of rules identified by the policy may be obtained. A file with the sensitive data may be identified, the file being generated within the isolated region. An output file may be generated based on applying the obtained rules to the file. At least a portion of the sensitive data may be filtered out using the obtained rules. The generated output file may be provided for access outside of the isolated region. The sensitive data may be inaccessible by at least another region of the service provider.

Policy based data aggregation

An application programming interface (API) may be provided by a service. A client of the service may provide computer instructions to the service. Configuration information may also be provided by the client. An API may be generated for the client based on the computing instructions. A number of virtual machines may be associated with the API based on the configuration information. The API may be used to process requests.

Techniques are disclosed for providing an application programming interface (API) as a service. In embodiments, a client provides code to be executed along with a configuration file for that code. Based on that, virtual machine(s) and load balancer(s) may be selected, a domain name service configured, and throttling and scaling configured. Through this, an API as a service may be provided on behalf of a client with minimal configuration required by the client or an administrator of a web service platform that provides the API as a service.

A fleet rebuild service examines hosts in a fleet to determine whether any of the hosts in the fleet are to be rebuilt. If a host is to be rebuilt, the fleet rebuild service moves the host to a vetting pool. The fleet rebuild service, or another service, may cause automated testing to be performed on the hardware and/or software of hosts in the vetting pool. If a host passes the automated testing, the fleet rebuild service may move the host from the vetting pool to a provisioning pool. If a host does not pass the automated testing, the host may be moved from the vetting pool to a diagnostics pool for further testing. The fleet rebuild service may select hosts from the provisioning pool for automated configuration and deployment to the fleet.

Fleet host rebuild service implementing vetting, diagnostics, and provisioning pools

Techniques are described for providing a file system interface for use with network-accessible computing resources (e.g., located in a data center). A client computing device of a user may display information regarding at least some such computing resources to the user using a visual representation of a hierarchical file system (e.g., with the computing resources organized hierarchically), and allow standard file system commands to manipulate the computing resources, despite them not actually being part of a file system. Particular combinations of a file system command and a type of computing resource may be mapped to associated operations, which implement actions for computing resources of that type corresponding to functionality of that file system command. In some situations, the computing resources are provided by an online service, such as a configurable network service providing virtual computer networks to clients.

Providing a file system interface to network-accessible computing resources

A distributed execution environment provides resources such as computing resources, hardware resources, and software resources. Resource action rules ('rules') may be defined and associated with resources in the distributed execution environment. The rules may be evaluated based upon resource state data defining the state of one or more resources. The results of the evaluation of the rules may be utilized to take various actions. For example, the results of the evaluation of rules may be utilized to generate a user interface (UI) object for providing information regarding the evaluation of the rule, to initiate a workflow, and/or perform another type of action. The results might also be utilized to prohibit certain types of operations from being performed with regard to a resource. The results might be propagated to other resources. A UI might also be provided for use in defining the rules.

Rule-based actions for resources in a distributed execution environment

In a provider network, attributes of one of a plurality of storage devices of the provider network are identified for failure monitoring. Based on a failure prediction model, a predicted probability of failure of the selected storage device is determined. The failure prediction model is based on historical and current data associated with failures of the storage devices of the provider network that have common attributes. The selected storage device is deactivated in response to determining that the predicted probability of failure of the selected storage device meets a criterion.

Disk replacement using a predictive statistical model

A distributed database management system may comprise a group of partitions that includes a master writeable partition and one or more additional partitions that act as read-only replicas of the master. A rotational mechanism for performing maintenance operations on non-master partitions may be employed to transition a second partition, selected for undergoing maintenance, into a role as the new master following performance of the maintenance operation.

Rotational maintenance of database partitions

Entities such as resource and service providers can utilize a ticketing system to define operational actions as primitives that can be stored, combined into more complex workflows, and executed in a restricted zone wherein a portion of the resources or services are not directly accessible to those providers. These primitives can be stored in the provider environment and shared with the restricted zone, in order to provide a structured approach to the sharing of operational knowledge. When a primitive is first received to the restricted zone, a person vetted by the customer associated with the restricted zone can review and approve the primitive, and can cause the primitive to be executed in the restricted zone. When that same primitive is subsequently received to the restricted zone, a lookup can be performed to determine that an approval exists, whereby the primitive can be executed in the restricted zone without another review.

Managing restricted access resources

A computer-implemented method includes recording one or more actions being performed by an agent using at least one resource of a resource provider environment, the at least one resource being associated with a non-restricted zone in the resource provider environment. The method includes creating a primitive that describes the one or more actions. The primitive is able to be executed on at least one different resource in a restricted zone in the resource provider environment to perform the one or more actions using the different resource. The restricted zone includes resources associated with a customer that are directly accessible only to at least one authorized entity. The method includes submitting the primitive to the restricted zone in the resource provider environment. The primitive is able to be executed by the at least one authorized entity on the at least one different resource in the restricted zone.

Growing community of inventors

Cape Town, South Africa

Ross Bevan Engers