Amazon Technologies, Inc.

Xiong Wang

Amjad Hussain

Sivaprasad Venkata Padisetty

Anand Doshi

Ananth Vaidyanathan

Boyuan Feng

Compliance schemes may be associated with compliance types to provide resource compliance management. Compliance types may be created and associated with different compliance schemes. Compliance state for the compliance types may be generated and provided in response to requests to access the compliance state. Queries for compliance state, for example, may request compliance state, and query predicates or other criteria may be applied to the compliance state in order to perform the query.

Extensible resource compliance management

Methods, systems, and computer-readable media for resource configuration based on dynamic group membership are disclosed. An association between a group of computing resources and an intended state is stored. The intended state represents a computing resource configuration. During operation of a computing resource, whether the computing resource belongs to the group of computing resources is determined based at least in part on analysis of one or more attributes associated with the computing resource. Based at least in part on determining that the computing resource belongs to the group of computing resources, one or more actions are caused be performed to bring the computing resource into the intended state. The computing resource is executed while having the computing resource configuration represented by the intended state.

Resource configuration based on dynamic group membership

A customer of a shared resource environment can generate script to be executed by one or more virtual machines, or other such instances or resources, and share that script with other users. The script can relate to administrative or other such tasks, and can be encapsulated into a document, or other such expression, and stored to a network-accessible location. The owner of the document can designate permissions as to which users have rights to access and/or execute the script against their own virtual machines. An owner can grant permission to all users, no other users, or specific users. The script can include parameter values that can be set by the other users or links to specific executables or other objects, among other such options.

Script manager for distributed systems

A policy management system is described herein that allows an administrator to compose custom policies that can be applied to target devices and that achieve tasks specific to the administrator's organization and network. The composed policies can be standalone policies that are applied independently or sequenced policies that are applied in a specified order. A composed policy may be associated with one or more targets and stored in a policy database. A target device may periodically query the policy management system for any policies that pertain to the target device. If policies have been composed that pertain to the target device and such policies have been updated or have not been previously transmitted to the target device, the policy management system can retrieve the policies from the policy database, merge the policies, and transmit the merged policies to the target device. The target device can then apply the merged policies.

Growing community of inventors

Redmond, WA, United States of America

Xiong Wang