Amazon Technologies, Inc.

Travis William Hickey

Jasmeet Chhabra

Jing Zhuang

Uzma Arjuman

Ajith Harshana Ranabahu

Conor Patrick Cahill

Daniel Stephen Popick

Akshay Mohan Sumant

Ahmad Kayed Kamel Aljolani

A method to synchronize tags between two databases comprises receiving a first command to add a tag to a resource in a first database, the tag comprising a key value pair that defines an access privilege associated with the resource. A determination is made that the tag satisfies validation criteria associated with a second database. The tag is stored in the first database, and an entry for the tag is added to a synchronization table, wherein the entry lacks a synchronized flag. A synchronization process is performed between the first database and the second database. A determination is made that the entry of the synchronization table lacks the synchronized flag. A copy of the tag is then written to the second database, and the synchronized flag for the entry in the synchronization table is set.

Synchronization of access management tags between databases

A request to modify a set of permissions (e.g., delete the permissions, replace the set of permissions with a different set of permissions) is received at a computing device. A set of services are prevented from using the set of permissions to access resources. The set of permissions are changed while the set of services are prevented from using the set of permissions to access resources.

Management of service permissions

Tags may be used in decisions by an access management service regarding access of computing resources ('resources') by principals (e.g., users, roles, etc.). The tags may also be used to determine cost information, for grouping resources and/or principals, and for other reasons. The tags may be assigned to principals, to resources, or both. The resource may be a virtual or physical type of computing resource. Tags may be metadata, which may include a key-value pair. Tags may include email addresses, cost centers, project identifiers, location, team name, etc. The value may be a number, letters, or a combination of both. In some embodiments, the values may be limited to certain numbers or bytes, and some numbers and/or letter combinations may be excluded for special use.

Access management tags

Growing community of inventors

Snoqualmie, WA, United States of America

Travis William Hickey