Amazon Technologies, Inc.

Salman Aftab Paracha

Calvin Yue-Ren Kuo

Nathan Bartholomew Thomas

Christopher Andrew Stephens

Varun Verma

Gaurang Pankaj Mehta

Chirag Pravin Pandya

Sameer Palande

Lawrence Hun-Gi Aung

Malcolm Russell Ah Kun

Shuo Wang

Prasanna Subash

Nakul Namdeo Dhande

Zhenghong Sun

Anshuk Chakraborty

Gopala Krishna Ambareesh

Raghavendra Reddy Madakkagari

Methods, systems, and computer-readable media for management of virtual desktop instance pools are disclosed. A plurality of virtual desktop instances are provisioned in a pool for a client organization. The number of virtual desktop instances does not exceed a number of virtual desktop slots for the client organization. To a first client device associated with a first user, access is provided to a particular virtual desktop instance based (at least in part) on a determination that a current number of connected virtual desktop instances is less than the number. To a second client device associated with a second user, access is denied to the plurality of virtual desktop instances based (at least in part) on a determination that a current number of connected virtual desktop instances meets the number.

Management of virtual desktop instance pools

A user transmits a request to an authentication service to access a managed directory. The request may include a first set of credentials usable by a managed directory service to authenticate the user. As a result of the first set of credentials being valid, the authentication service may prompt the user to provide a multi-factor authentication code, which may be used by an authentication server to further authenticate the user and enable the user to access the managed directory. The authentication service subsequently provides the multi-factor authentication code to the authentication server for validation. If the multi-factor authentication code is valid, the authentication service may enable the user to access the managed directory through an encrypted communications session.

Multi-factor authentication for managed directories

A computing device executes an application that is configured to call a sharing service application programming interface ('API') to create a sharing session via a sharing service. The application can call the sharing service API to utilize one or more methods exposed by the sharing service API to connect to the sharing service and initiated the creation of the sharing session. The computing device can join the sharing session with one or more other computing devices. The computing device can receive data via the sharing session from one or more of the other computing devices. The data can include screen data and/or application data.

Application programming interface for a sharing service

Virtual workspaces can be provided using shared resources and network-attached storage. A workspace accessed under a customer account has a unique key generated using a combination of a customer master key and an encryption context. The encryption context is specific to the workspace, such as may include a hash of specific values for the workspace. When a new instance is generated, a first data volume is generated using a machine image and data snapshot encrypted under a current encryption key. The snapshot is copied to a new snapshot, and a new encryption key obtained that is based on the customer master key and the current encryption context. The snapshot is used to create a new data volume encrypted under the new encryption key. The new volume is attached to the workspace instance such that data transmitted between the workspace and the new volume is encrypted under the volume-specific encryption key.

Data encryption for virtual workspaces

Video game tasks are delegated using a sharing service. A first computing device is configured to execute a game application. The first computing device can receive a request from a first user to delegate play of the game application to a second user so that the second user can attempt to complete a game task on behalf of the first user by controlling the game application from a second computing device that is associated with the second user. Control of the game application can be made available from the second computing device to the first computing device via a sharing session that is created and managed by a sharing service to which the first computing device and the second computing device are connected.

Delegating video game tasks via a sharing service

Growing community of inventors

Redmond, WA, United States of America

Salman Aftab Paracha