Amazon Technologies, Inc.

Yang Lin

Sheshadri Supreeth Koushik

Vikram Vijay Sahijwani

Jaimin Paresh Shah

Abhinav Shrivastava

David Pessis

Prasad Renake

Hao Peng

Anthony Nicholas Liguori

Nathan Bartholomew Thomas

Deepak Suryanarayanan

Eric Samuel Stone

Richard Hazen Galliher, Iii

David James Goodell

Himanshu Agrawal

Steven Anthony Kady

William Ashley

Chenghsien Jason Lu

Ameya Sadashiv Potadar

Patrick John Lawrence

Rohit Krishna Kumar

Sunil Gaba

Murali Rathinasamy

Gevorg Karapetyan

Himanshu Agarwal

Colin Stone

Jeffrey Norbert Coonen

Methods, systems, and computer-readable media for persisting user settings for non-persistent application streaming environments are disclosed. An application streaming service may receive a selection of an application for a user and assign a compute instance to the user. An agent provided by the compute instance obtains a storage location of a user settings file associated with the user (e.g., based on use of the application during a previous session). The agent downloads the user settings file from the storage location to the compute instance and mounts the user settings file at a file system location associated with an execution environment of the compute instance. The application is executed and the user settings file is updated during use of the application. In response to termination of the session, the agent uploads the updated user settings file to a storage location. The user settings file is not persisted on the compute instance.

Persisting user settings for non-persistent application streaming environments

A first service of a provider network obtains an identification of one or more substrate addressable devices included in an extension of the provider network. Based on the identification, a launch of one or more compute instances within the provider network is initiated. The one or more compute instances are to connect the provider network to the extension of the provider network across at least a third-party network by receiving a first control plane message directed to a first substrate addressable device of the one or more substrate addressable devices, by updating a message state data store based at least in part on the first control plane message, and by sending a second control plane message to the first substrate addressable device via a secure tunnel.

Provider network connectivity management for provider network substrate extensions

Techniques for secure remote access of computing resources are described herein. In some examples, when a client requests to access a computing resource, a computing service may generate a first password value for the computing resource and transmit the first password value to the client. The client may then generate and transmit key data for entry of the first password value back to the computing service. The client may generate and transmit the key data on the user's behalf, without requiring any activation or selection of keys by the user. Upon receiving the key data, the computing service may enter the first password value into the computing resource, thereby allowing the client to access the computing resource. The computing service may detect the accessing of the computing resource and may change the first password value to a second password value.

Secure remote access of computing resources

Techniques for providing remote access to application content are described herein. A virtual computing node may be leased to a first user requesting access to an application. On the virtual computing node, a virtualization process may spawn the application as a child process. In response to a second request, by the same user, to access an additional application, the virtual computing node may be identified. The virtualization process may spawn the second application as a child process in the process space of the first application. Data may be exchanged between the applications within the process space.

Multiple application remoting

A first message of a first type and having a first destination address is received in a provider network. The first destination address is associated with a virtual network address of the provider network and an address of a first device in an extension of the provider network, the extension of the provider network in communication with the provider network via at least a third-party network. A message state data store is updated based on at least a portion of the first message. A first payload of the first message is sent to the first device a first secure tunnel through the third-party network.

Provider network connectivity to provider network substrate extensions

Computing resources are provided to a user by identifying applications used by the user, and provisioning virtual computing resources that are adapted to the resource requirements of the identified applications. The resource requirements of the identified applications can be combined into a single set of resource requirements and used to acquire a virtual machine that is able to host the identified applications. In other examples, virtual machines may be acquired for each identified application. Each virtual machine generates a display stream via a streaming agent. The display stream is received by an application streaming client on the user's client computer system, and is displayed to the user on a client display. Multiple virtual machines may generate multiple display streams which can be combined by the application streaming client and presented to the user on the single client display.

Application-based computing resource management

A service provider system may include an application fulfillment platform that delivers desktop applications from a variety of sources to desktops on physical computing devices or to virtual desktop instances. An entitlement service of the platform may create and store entitlement records indicating which desktop applications each end user is entitled to and may manage the allocation of license activation slots for the desktop applications that are fulfilled through the platform. Licenses may be fixed for an end user or for a device, or may be floating licenses in a pool of licenses. An administrator in a service provider customer organization may specify the entitlements for its end users and may specify constraints on the allocation of licenses. Required applications may be pushed to end user devices. An end user's desktop applications, entitlements, and/or license activations may be retained or restored following the rebuilding of their computing resource instance.

Application fulfillment platform with automated license management mechanisms

A service provider system may include an application fulfillment platform that delivers desktop applications on demand to desktops on physical computing devices or virtual desktop instances of end users. An application delivery agent installed on an end user's computing resource instance may store application state data (e.g., configuration data, runtime settings, or application templates) or scratch data that is generated by an application executing on the computing resource instance to a secure location on service provider storage resources. After a machine failure or change, or a rebuilding of a virtualized computing resource instance or virtual desktop instance, an application delivery agent installed on the new machine or instance may reinstall the application, retrieve the stored application state or scratch data from service provider resources, and restore the application to the last known persisted state. Upon request, the application delivery agent may restore the application to any earlier persisted state.

Dynamic reconstruction of application state upon application re-launch

Image data associated with a number of launched application windows may be streamed from a remote service to client over a network and displayed by a browser application at the client. In some examples, a control for switching between applications may be provided by the browser application and may not be included in the image data that is streamed from the remote service. In some examples, while a first application window is being displayed, the control may be selected to allow switching the display to another application window. Upon selection of this control, selectable representations, such as thumbnail images, of the launched application windows may be generated and displayed. Selection of a particular representation may cause the display to switch to an application window associated with the selected representation.

Window switching for networked computing sessions

A service provider system may include an application fulfillment platform that delivers desktop applications to desktops on physical computing devices or virtual desktop instances. A computing resource instance may be registered with the platform, which generates a unique identifier and a security token for the computing resource instance using multiple authentication mechanisms. An end user of a customer organization may be registered with the platform, which generates a unique identifier and a security token for the end user using multiple authentication mechanisms. An application delivery agent may submit service requests to the platform on behalf of itself or the given user. The identity and security credentials included in the requests may be dependent on the request type and the entities on whose behalf they are submitted. A proxy service on the platform may receive the requests and validate the credentials, then dispatch the requests to other services on the platform.

Desktop application fulfillment platform with multiple authentication mechanisms

A service provider system may include an application fulfillment platform that delivers desktop applications on demand to desktops on physical computing devices or virtual desktop instances. The applications may be selected for delivery from a catalog of applications, and may be required to be installed on the destination computing resource instance, or may be assigned to a customer's end user on whose behalf the resource instance was provisioned. A workflow for deploying a selected application may invoke services implemented on the platform. The desktop application may be delivered as a virtualized application package that is subsequently executed by a runtime engine installed on the end user's resource instance, without installing the selected application itself on the computing resource instance. A customer's IT administrators may create and populate the catalog, add customer-generated or customer-licensed applications, assign applications to users, apply constraints on application use, and monitor application usage.

On-demand delivery of applications to virtual desktops

A service provider system may include an application fulfillment platform that delivers desktop applications to end users (e.g., to physical computing devices or virtual desktop instances). An application delivery agent installed on an end user's device may send requests to access platform control plane services on behalf of the agent or the end user (along with security credentials) and may retrieve messages directed to the device from a queue on the platform. Messages may be placed in the queue by control plane services in response to agent requests. Messages may include instructions for the agent to perform installing, uninstalling, updating, or reinstalling a virtualized desktop application package on the device. The agent may request and retrieve (from the queue) information about the intended (or assumed) installation state of applications on the device, compare it to locally stored information about the actual state, and initiate corrective action, if needed.

Growing community of inventors

Seattle, WA, United States of America

Yang Lin