Amazon Technologies, Inc.

Varun Verma

Nathan Bartholomew Thomas

Sandeep Kumar

Deepak Suryanarayanan

Daniel Rabinovich

Shobha Agrawal

Ajit Nagendra Padukone

Ankit Singh

Rucha Nene

Nakul Namdeo Dhande

Josephine Reiko Gibney

Danny Wei

Sriram Venugopal

Kristina Kraemer Brenneman

Salman Aftab Paracha

Lalit Jain

Arvind Chandrasekar

Oscar Allen Grim Courchaine

Hakimuddin Hanif

Gaurang Pankaj Mehta

Nelamangal Krishnaswamy Srinivas

Eugene Michael Farrell

Malcolm Russell Ah Kun

Erik Jonathon Tellvik

David Pessis

Prasanna Subash

Divij Vaidya

Anirudha Singh Bhadoriya

Alok Nath Katiyar

Ankur Choudhary

Gopala Krishna Ambareesh

Rajkrishnan Parameswaran

Stephen James Oglesby

James Henry Baker, Iii

A computing system that provides virtual computing services may generate and manage remote computing sessions between client computing devices and virtual desktop instances hosted on the service provider's network. A computing resource instance manager may monitor connections to and disconnections from a virtual desktop instance during particular time periods, and may apply a resource management policy to determine whether and when to shut down an underlying virtualized computing resource instance following a disconnection (e.g., immediately, after some period of time, or only between certain hours). A storage volume for the virtual desktop instance may be detached during a shutdown. In response to a reconnection request, the virtualized computing resource instance (or another such instance) may be restarted and the storage volume may be reattached. The computing resource instance manager may develop a model for predicting when to shut down or restart an instance based on historical data or machine learning.

Connection-based resource management for virtual desktop instances

Policies can be applied to, and enforced for, specific resources by applying a corresponding tag to those resources. An entity, such as a customer of a resource provider, can generate one or more policies to be applied to a set of resources, where those policies can relate to data retention, backup, lifecycle events, and other such aspects. Each policy can be associated with a particular tag, which may comprise a key-value pair to be applied to various resources. A policy enforcement manager can determine the tagged resources and ensure that the relevant policies are applied. The policies can include logic or intelligence for performing a variety of tasks with respect to resources, groups of resources, or types of resources, as identified using the tags.

Resource lifecycle automation

Generally described, one or more aspects of the present application correspond to techniques for creating encrypted block store volumes of data from unencrypted object storage snapshots of the volumes. These encryption techniques use a special pool of servers for performing the encryption. These encryption servers are not accessible to users, and they perform encryption and pass encrypted volumes to other block store servers for user access. The encryption context for the volumes can be persisted on the encryption severs for as long as needed for encryption and not shared with the user-facing servers in order to prevent user access to encryption context.

Encryption by default in an elastic computing system

Systems and methods are provided to implement a metadata record migration system that schedules the migrations of metadata records that are frequently mutated. In embodiments, the scheduler collects timing data of jobs that modify the metadata records, including the timing of various mutation operations within the jobs. In embodiments, when it is determined that a metadata record is to be migrated to a different storage location, the scheduler determines a time to migrate the metadata record. The migration time may lie within a migration window, selected based on an expected migration time needed for the metadata record and the collected time data in order to reduce a probability that record mutations will occur during the migration. In embodiments, the jobs may be snapshot jobs that modify a snapshot record, and the migration may be performed as a result of a cell partitioning operation occurring within the snapshotting system.

Migration scheduling for fast-mutating metadata records

A method for selecting a communication protocol for a virtual desktop instance in a service provider environment may include providing to a client computing device, access to a virtual desktop instance running on a server computer using a first communication channel associated with a first communication protocol. A request for functionality from a user of the device is detected, the requested functionality being unsupported by the first communication protocol. A second communication protocol from a plurality of available communication protocols may be selecting based on the requested functionality. The second communication protocol may support the requested functionality. A user authorization for using the second communication protocol can be verified. Upon successful verification, a second communication channel is established between the server computer and the device using the second communication protocol for performing the functionality, while maintaining access to the virtual desktop instance using the first communication channel.

Using multiple protocols in a virtual desktop infrastructure

Methods, systems, and computer-readable media for management of virtual desktop instance pools are disclosed. A plurality of virtual desktop instances are provisioned in a pool for a client organization. The number of virtual desktop instances does not exceed a number of virtual desktop slots for the client organization. To a first client device associated with a first user, access is provided to a particular virtual desktop instance based (at least in part) on a determination that a current number of connected virtual desktop instances is less than the number. To a second client device associated with a second user, access is denied to the plurality of virtual desktop instances based (at least in part) on a determination that a current number of connected virtual desktop instances meets the number.

Management of virtual desktop instance pools

A router receives a request to access a resource. In response to the request, the router identifies routing metadata comprising first metadata specifying a first location of the resource and a first merit value and second metadata specifying a second location of the resource and a second merit value. The router determines, based at least in part on the first merit value of the first metadata and the second merit value of the second metadata, an authoritative state of the resource associated with the first location or the second location. Based at least in part on the determination, the router identifies a preferred location for a new resource. In the event of a rollback, merit values are assigned to cause a reversal of the preferred path for the creation of new resources.

Reversible representation-based partitioning of distributed computing environments

A virtual desktop service may receive a request from a user to provision a virtual desktop and establish a secure communications connection between the virtual desktop service, a user client device, and additional client devices via a proxy server in order to stream same feed or virtual screens from the virtual desktop to multiple client devices. The virtual desktop service may provide for natively sharing or multiplexing an entire data stream from a virtual desktop to multiple client devices or natively sharing or multiplexing portions of a data stream from a virtual desktop to render each portion on a different client device.

Sending virtual desktop information to multiple devices

A system partitions a graph representation of relationships between block devices and associated snapshots into a plurality of cells to more evenly distribute computing resource usage attributable to the block devices and snapshots. The relationships may be analyzed to determine resource usage associated with the block devices and/or the snapshots wherein the resource usage corresponds to a mutation operation rate or number of mutation operations performed (or scheduled for performance). As a result of determining that the resource usage for a given cell exceeds a predetermined threshold for resource usage, the cell may be partitioned into a plurality of cells, and a portion of the corresponding block device(s), and subsequent snapshot(s) generated therefrom, may be assigned to the new cell.

Representation-based partitioning of distributed computing environments

Virtual workspaces can be provided using shared resources and network-attached storage. A workspace client can access a virtual workspace created under a customer account. For specific types of data, such as pixel data used to render the display component of the workspace on the workspace client, the data can be prevented from being transmitted over a public network. Private security gateway interfaces can be created in the customer environment that can be attached to respective security gateways in the workspace environment. Routing rules are configured such that pixel data for a workspace is only transmitted to the workspace client through a security gateway and over a secure connection to the corresponding private gateway interface in the customer environment, which can direct the pixel data to the workspace client.

Secure data flow for virtual workspaces

A metrics subsystem determines the utilization of computing resources of server computer systems. The metrics subsystem may obtain metadata associated with a plurality of computing resources used to provide a service. The metrics subsystem determines a set of references to data included in the metadata and aggregates references of the set of references to determine utilization of computing resources and provides the utilization to a metering service.

Determining computing resource utilization in distributed systems

Growing community of inventors

Newcastle, WA, United States of America

Varun Verma