Amazon Technologies, Inc.

Ross Engers

Daniel Lin

Luke Curley

Andrew Francis

Selvanayagam Sendurpandian

Nikhil Purushe

Shuhan Jin

Levi Lovelock

Berk Taner

Yann Landry

Neeraj Satish Joshi

Jean-Sebastien Royer

Tarek Amara

Jaco Le Roux

A processing service of a provider network may protect media content from being tampered with when it is transmitted from the provider network/transcoder to untrusted networks (e.g., third-party networks/CDNs) and to a media player. The processing service (e.g., the transcoder) generates a public and a private key. The service uses the private key to digitally sign content portions (e.g., video frames) before distribution to untrusted CDNs. The provider network creates a manifest that includes the public key. To play the media content, the media player obtains a manifest that includes the public key (via a secure/trusted connection with the provider network). The media player may then obtain the media content from an untrusted edge server/CDN and validate it using the public key that was separately obtained from the manifest (to verify the content was not tampered with).

Protecting media content integrity across untrusted networks

Validating media content retrieved from untrusted networks

Techniques for parameterized trust and permission policies between entities for cloud resources are described. A method of parameterized trust and permission policies between entities for cloud resources may include receiving, by an access control service of a provider network, a request to generate a parameterized policy template, the parameterized policy template including characteristics of at least one action or at least one resource to be specified by a user, receiving a parameterized action list or a parameterized resource list from the user, validating the parameterized action list or the parameterized resource list based on the characteristics defined in the parameterized policy template, and generating a parameterized role based on the parameterized policy template and the parameterized action list or the parameterized resource list.

Parameterized trust and permission policies between entities for cloud resources

Growing community of inventors

San Francisco, CA, United States of America

Ross Engers