Microsoft Technology Licensing, LLC

Amazon Technologies, Inc.

Vadim Meleshuk

Alexander Thomas Weinert

Craig V McMurtry

Mark E Gabarra

Rebecca Claire Weiss

Todd J Abel

Ronald Andrew Hoskinson

Steven Patterson Burns

Yohanes Santoso

Jack Kabat

Yu Gu

Lee-Ming Zen

Gavin Derek McCullagh

Dov Sheinker

Weiqing Tu

Minli Lai

Andrey Mizik

Yi Cheng Chen

Ivan Mistrianu

Amit Flashner

Imran S Patel

Prashanth A Acharya

Nima Ganjeh

Lee B Rosen

Martin Cornelis Frederik Slot

Valeri Liborski

Darren H Mutz

Jasjeet Gill

Dmitry Sonkin

Stephen J Pek

Craig Mcmurtry

Craig V Mccurtry

Systems and methods are described to enable adaptive handling of domain resolution requests originating from a virtual private cloud (VPC) networking environment. An administrator of the VPC can provide a set of rules specific to the VPC that designates how requests for a domain name should be handled. The rules may specify, for example, that a request for a given domain name should be routed to a particular domain name server, which may include a private domain name server, should be dropped, or should be routed according to a default behavior (e.g., a public domain name system). Resolution requests originating in the VPC can be associated with a VPC identifier. When an adaptive resolution system receives the request, it can retrieve rules associated with the VPC identifier, and apply the rules to determine further routing for the request.

Adaptive resolution of domain name requests in virtual private cloud network environments

Requests for access to Web service resources are evaluated based on the type of request that is received. Requests are not granted unless sufficient proof of authentication is provided to grant that request. An authentication service evaluates one or more factors to determine whether or not to authenticate the client. After being authenticated by the authentication service, proof of authentication is provided to the Web service, which grants access to the Web service resource.

Request-specific authentication for accessing web service resources

A system, method and computer-readable medium for request routing based on prioritization and load information are provided. A client request processing a resource identifier for requested content transmits a DNS query to a content delivery network service provider. Based on a content provider identifier included in the DNS query, a receiving DNS nameserver determines a selection from a hierarchical organization of POPs and the relative capacity for a selected POP to process a subsequent request for resources. Based on the processing of the prioritization information and load information, the receiving DNS nameserver resolves the DNS query.

Request routing utilizing point of presence load information

The present invention extends to methods, systems, and computer program products for managing technology resources across multiple platforms. Embodiments of the invention can be used to manage the configuration of a plurality of different devices. A management server/service can utilize native management capabilities of different devices to provide configuration management without requiring agents to be installed on the devices. In general, the management server/service adapts to the unique characteristics and behaviors of different devices, platforms, and external systems to provide configuration management for the different devices, platforms, and external systems. As such, configuration management can be provided in a unified fashion across different platforms, both on-premise and off-premise, and indirectly. When client agents are present, the management server/service can adjust to compatibly operate with the client agents.

Managing technology resources across multiple platforms

Request-specific authentication for accessing Web service resources

Defining a unified access management policy expression that unifies access control policy with events or workflows. Unified management policy information is stored. The unified management policy information defines permissions for access to resources together with events or workflows. A request is received to execute the one or more operations on one or more objects. The requested operation is verified against the unified management rules. Verifying includes performing a single retrieval, retrieving both the access control information and the events or workflows and calculating the applicability of the rule to the conditions represented by the request. Matching rules are applied, access control decisions performed and associated workflows are executed.

Unified management policy

The present invention extends to methods, systems, and computer program products for managing set membership. A set definition is translated into one or more membership conditions. Each membership condition includes statements about the attributes of a resource that are to be true if the resource is to be included in the set. For any given resource request, resources touched by the request are compared to membership conditions applicable to the touched resources. Thus, embodiments of the invention minimize the work that is done to determine which sets a resource may or may not belong to whenever a resource is modified. Accordingly, based on available resources, embodiments of the invention can scale to accommodate larger numbers of sets and larger numbers of potential members of sets.

Managing set membership

Enforcing access control based on resource state. A method includes receiving a request for an operation on one or more objects stored on computer readable media. One or more pre-operation states of the one or more objects are determined. One or more post-operation states of the one or more objects are determined. One or more access control rules are referenced. The access control rules control access to resources based on pre-operation state and post operation state. It can then be determined that the one or more access control rules allow the operation to succeed based on the one or more pre-operation states and the one or more post operation states. Based on determining that the one or more access control rules allow the operation to succeed, the operation is allowed to succeed.

Resource state transition based access control system

A web service includes a protected resource. A requester requests access to the protected resource by sending a request to the web service. The web service prevents access to the web service until the request has been authorized by an authorizer. After the request has been authorized by the authorizer, the web service allows the requester to access the protected resource.

Authorization for access to web service resources

Growing community of inventors

Seattle, WA, United States of America

Vadim Meleshuk