Automated association of computing resources with resource creators for usage allocation

• US 10,277,522 B1
• Filed: 11/26/2014
• Issued: 04/30/2019
• Est. Priority Date: 11/26/2014
• Status: Active Grant

• Current Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Original Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Inventors: Canton, Jeffrey Cicero, Krishnan, Prasad, Kulkarni, Harshad Vasant, Watson, Colin
• Primary Examiner(s): Nano, Sargon N
• Assistant Examiner(s): Robinson, Christopher B
• Application Number:
  US14/555,306
• Time in Patent Office: 1,616 Days
• Field of Search: None
• CPC Class Codes: H04L 47/70 Admission control; Resource allocation
• CPC Class Codes: H04L 47/826 Involving periods of time

Abstract

In a network-based services platform, customer resources may be automatically associated with a resource creator. Upon receipt of a request to create a computing resource, the computing resource may be created and thereafter executed within the network-based services platform. In response to the request, an entity associated with the request may be identified. In response to the identification of the entity, the computing resource may be automatically associated with the identified entity specifying the entity as the creator of the computing resource. In some embodiments, a cost of operating the resource over a period of time may be calculated, and the cost allocated to the identified entity based at least in part on the creator-to-resource association that was automatically generated upon creation of the resource. In this manner, a usage allocation report may be provided to the customer that shows the cost associated with the entity.

Claims

1. One or more non-transitory computer-readable media storing computer-executable instructions that, when executed, cause one or more processors to perform acts comprising:

invoking a resource creation application programming interface (API) to create a computing resource to be executed within a network-based services platform on behalf of a customer having a customer account with the network-based services platform, the customer account specifying a plurality of customer entities;

creating the computing resource in response to the invoking of the resource creation API;

identifying a customer entity of the plurality of customer entities that is associated with the invoking of the resource creation API;

at least partly in response to identifying the customer entity, automatically associating the customer entity with the computing resource by specifying the customer entity as a creator of the computing resource, wherein the automatically associating comprises automatically persisting a creator tag for the computing resource, the creator tag comprising a tag name and a tag value, wherein the tag value identifies the customer entity and the tag name indicates that the computing resource was created by the customer entity identified by the tag value;

metering the computing resource as it executes within the network-based services platform;

determining a usage of the computing resource over a period of time based at least in part on the metering;

determining, based at least in part on the creator tag, that the customer entity is associated with the computing resource as the creator of the computing resource;

retrieving one or more entity tags associated with one or more business dimensions of the customer entity, wherein the one or more business dimensions comprises an organizational sub-group within the customer entity;

allocating the usage to the one or more business dimensions of the customer entity based at least in part on the determining that the customer entity is associated with the computing resource; and

reporting the usage to the customer in association with the customer entity.

2. The one or more non-transitory computer-readable media of claim 1, the acts further comprising, prior to the automatically associating and in response to the invoking of the resource creation API:

creating a log entry for a resource creation event, the log entry specifying the customer entity as the creator of the computing resource;

adding the resource creation event to a repository of tracked events;

reading out a plurality of events from the repository of the tracked events;

filtering the plurality of events to identify at least the resource creation event; and

extracting at least a unique identifier (ID) of the customer entity based at least in part on the resource creation event, wherein the automatically associating is based at least in part on the unique ID.

3. The one or more non-transitory computer-readable media of claim 2, wherein the tag value of the creator tag specifies the unique ID of the customer entity.

4. A method comprising:

maintaining a customer account on behalf of a customer of a network-based services platform, the customer account specifying a plurality of customer entities;

creating, by one or more computing devices of the network-based services platform, a resource in response to a request to create the resource, the resource to be executed within the network-based services platform;

identifying, by at least one of the one or more computing devices, a first customer entity of the plurality of customer entities that is associated with the request to create the resource;

at least partly in response to the identifying of the first customer entity, generating, by at least one of the one or more computing devices, a first association between the first customer entity and the resource, the first association specifying the first customer entity as a creator of the resource;

receiving, from a computing device of the customer, a request to allocate future usage of the resource to a second customer entity of the plurality of customer entities;

at least partly in response to the receiving of the request to allocate the future usage, generating, by at least one of the one or more computing devices, a second association between the second customer entity and the resource, the second association superseding the first association;

determining a total usage of the resource over a predetermined period of time after the creating of the resource;

retrieving one or more entity tags associated with one or more business dimensions of the customer entity, wherein the one or more business dimensions comprises an organizational sub-group within the customer entity;

apportioning a first portion of the total usage that occurred prior to the receiving of the request to allocate the future usage to the one or more business dimensions of the first customer entity based at least in part on the first association;

apportioning a second portion of the total usage that occurred after the receiving of the request to allocate the future usage to the second customer entity based at least in part on the second association superseding the first association; and

reporting the first portion of the total usage and the second portion of the total usage to the customer.

5. The method of claim 4, wherein the total usage is determined based on metering at least one of an amount of time that the resource is used, an amount of data consumed while operating the resource, or a number of requests to access the resource.

6. The method of claim 4, wherein the generating of the second association comprises:

tagging the resource with a usage allocation tag.

7. The method of claim 4, further comprising retrieving a user name for the first customer entity, wherein the reporting includes presenting the user name for the first customer entity.

8. The method of claim 4, wherein the request to create the resource causes invoking of a resource creation application programming interface (API), and wherein the first customer entity is identified based at least in part on an association of the first customer entity with the invoking of the resource creation API.

9. The method of claim 4, wherein the request to create the resource is programmatically provided by a parent resource on behalf of the customer, and the first customer entity is identified based at least in part on the first customer entity having initiated a workflow for the parent resource.

10. The method of claim 4, further comprising, prior to the generating of the first association and in response to receipt of the request to create the resource:

creating a log entry for a resource creation event, the log entry specifying the first customer entity as the creator of the resource;

adding the resource creation event to a repository of tracked events;

reading out a plurality of events from the repository of the tracked events;

filtering the plurality of events to identify at least the resource creation event; and

extracting at least a unique identifier (ID) of the first customer entity based at least in part on the resource creation event, wherein the generating of the first association is based at least in part on the unique ID.

11. The method of claim 4, wherein the generating of the first association comprises automatically tagging the resource with a creator tag specifying the first customer entity as the creator of the resource.

12. The method of claim 11, further comprising:

receiving a request for access to the resource;

examining the creator tag to determine compliance with a security policy that specifies access rights of the plurality of customer entities to resources that are operated by the network-based services platform on behalf of the customer; and

enforcing compliance with the security policy based at least in part on the examining.

13. The method of claim 11, further comprising:

receiving a notification of a problem involving the resource;

retrieving the creator tag associated with the resource;

retrieving contact information of the first customer entity based at least in part on the creator tag; and

notifying the first customer entity of the problem using the contact information.

14. A network-based services platform comprising:

one or more computing devices including one or more processors; and

memory storing computer-executable instructions that, when executed, cause the one or more processors to;

create a resource in response to a request to create the resource, the resource to be executed within the network-based services platform;

operate the resource on behalf of a customer having a customer account specifying a plurality of customer entities;

identify a first customer entity of the plurality of customer entities that is associated with the request to create the resource;

at least partly in response to identifying the first customer entity, generate a first association between the first customer entity and the resource, the first association specifying the first customer entity as a creator of the resource;

receive, from a computing device of the customer during a predetermined period of time after the resource is created, a request to allocate future usage of the resource to a second customer entity of the plurality of customer entities;

at least partly in response to receiving the request to allocate the future usage, generate a second association between the second customer entity and the resource, the second association superseding the first association;

determine a total usage of the resource over the predetermined period of time;

retrieve one or more entity tags associated with one or more business dimensions of the customer entity, wherein the one or more business dimensions comprises an organizational sub-group within the customer entity;

apportion a first portion of the total usage to the one or more business dimensions of the first customer entity based at least in part on the first association;

apportion a second portion of the total usage to the second customer entity; and

report the first portion of the total usage and the second portion of the total usage to the customer.

15. The network-based services platform of claim 14,

wherein the total usage is determined based on metering at least one of an amount of time that the resource is used, an amount of data consumed while operating the resource, or a number of requests to access the resource.

16. The network-based services platform of claim 14, wherein the generating the first association comprises automatically tagging the resource with a creator tag specifying the first customer entity as the creator of the resource.

17. The network-based services platform of claim 14, wherein the request to create the resource causes invoking of a resource creation application programming interface (API), and wherein the first customer entity is identified based on an association of the first customer entity with the invoking of the resource creation API.

18. The network-based services platform of claim 14, wherein the request to create the resource is programmatically provided by a parent resource on behalf of the customer, and the first customer entity is identified as having initiated a workflow for the parent resource.

19. The network-based services platform of claim 14, wherein the computer-executable instructions, when executed, further cause the one or more processors to:

receive a log entry for a resource creation event, the log entry specifying the first customer entity as the creator of the resource;

add the resource creation event to a repository of tracked events,

read out a plurality of events from the repository of the tracked events;

filter the plurality of events to identify at least the resource creation event; and

extract at least a unique identifier (ID) of the first customer entity based on the resource creation event, wherein generating the first association is based at least in part on the unique ID.