Domain name service information propagation

• US 10,326,731 B2
• Filed: 08/31/2017
• Issued: 06/18/2019
• Est. Priority Date: 06/16/2014
• Status: Active Grant

• Current Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Original Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Inventors: Pandya, Chirag Pravin, Yorks, Connor John, Rai, Krithi, Aung, Lawrence Hun-Gi
• Primary Examiner(s): Baturay, Alicia
• Application Number:
  US15/693,089
• Publication Number:
  US 20170366501A1
• Time in Patent Office: 656 Days
• Field of Search: 709220
• CPC Class Codes: H04L 61/3025 Domain name generation or assignment
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]

Abstract

A computing resource service receives a request from a customer to assign a domain name to a computing resource. The computing resource service may submit a query to a domain name system service to determine whether the domain name has been reserved for the customer. The domain name system service may provide an encrypted alias record corresponding to the requested domain name and specifying one or more identifiers of customers for whom the domain name has been reserved. The computing resource service may decrypt the alias record and determine whether the customer corresponds to one of the one or more identifiers within the alias record. If the customer does correspond to one of the one or more identifiers within the alias record, the computing resource service may assign the domain name to the computing resource.

Claims

1. A computer-implemented method, comprising:

receiving, from a customer of a computing resource service provider, a request to assign an alias for a computing resource, the alias usable to determine a domain name for the computing resource;

determining that the alias has been previously reserved for the customer;

obtaining a domain name service record, the domain name service record specifying entities authorized to utilize the alias;

determining whether the customer corresponds to an entity specified in the domain name service record; and

on a condition that it is determined that the customer corresponds to an entity specified in the domain name service record, causing a domain name service to assign the alias to the computing resource.

2. The computer-implemented method of claim 1, wherein:

the domain name service record is encrypted; and

the method further comprises utilizing a cryptographic key to decrypt the domain name service record to determine whether the customer corresponds to an entity specified in the domain name service record.

3. The computer-implemented method of claim 1, wherein:

the domain name service record is obtained from a domain name service database cache; and

further comprising updating the domain name service database cache in response to the domain name service assigning the alias to the computing resource.

4. The computer-implemented method of claim 1, wherein the domain name service record corresponding to the alias is obtained from a domain name service in response to a domain name service query to the domain name service.

5. The computer-implemented method of claim 1, further comprising receiving a request from the customer to release the alias.

6. A system, comprising:

one or more processors; and

memory having stored thereon instructions that, as a result of being executed by the one or more processors, cause the system to;

prior to receipt of a request to cause a domain name service to perform an operation, store, with the domain name service, a record in association with a domain name, the record specifying entities authorized to cause a service to perform the operation, the operation being associated with assignment of the domain name;

receive, from an entity, the request to cause the domain name service to perform the operation;

determine, based at least in part on the record, whether the entity is authorized to cause the service to perform the operation; and

as a result of determining that the entity is authorized to cause the service to perform the operation, enable the entity to cause the service to perform the operation.

7. The system of claim 6, wherein:

the record is encrypted; and

the instructions further cause the system to utilize a cryptographic key to decrypt the record to determine whether the entity is authorized to cause the service to perform the operation.

8. The system of claim 6, wherein the record is stored in association with the domain name by an association with a domain name placeholder that is constructed based at least in part on the domain name and one or more control characters.

9. The system of claim 8, wherein the instructions further cause the system to utilize a string specifying the operation and the one or more control characters to identify the domain name placeholder and obtain the record to determine whether the entity is authorized to cause the service to perform the operation.

10. The system of claim 6, wherein the operation includes assigning the domain name to a computing resource in response to the request from the entity.

11. The system of claim 10, wherein the instructions further cause the system to specify, within a domain name system database, that the domain name has been assigned as a result of detecting that the entity has reserved the domain name.

12. The system of claim 6, wherein the entities authorized to cause the service to perform the operation are specified within the record as a result of computing resource usage by the entities satisfying a set of criteria.

13. The system of claim 6, wherein the instructions further cause the system to provide the record in association with the domain name to other services in response to a request from the other services to obtain the record.

14. A non-transitory computer-readable storage medium having collectively stored thereon executable instructions that, as a result of being executed by one or more processors of a computer system, cause the computer system to at least:

reserve, prior to receipt of a request from an entity to cause the computer system to perform an operation, a domain name in association with the entity;

in response to the receipt of the request, perform, to a domain name service, a query to obtain a record that specifies entities authorized to cause the computer system to perform the operation;

determine, based at least in part on the record, whether the entity corresponds to the entities specified in the record; and

as a result of determining that the entity is authorized to cause the computer system to perform the operation, cause the operation to be performed.

15. The non-transitory computer-readable storage medium of claim 14, wherein the record is stored, within the domain name service, in association with a domain name by an association with a domain name placeholder that is constructed based at least in part on the domain name and one or more control characters.

16. The non-transitory computer-readable storage medium of claim 15, wherein the instructions further comprise instructions that, as a result of being executed by the one or more processors, cause the computer system to utilize a string specifying the operation and the one or more control characters to perform the query to cause the domain name service to identify the domain name placeholder and provide the record.

17. The non-transitory computer-readable storage medium of claim 14, wherein the operation includes assigning the domain name to a computing resource in response to the request from the entity.

18. The non-transitory computer-readable storage medium of claim 17, wherein the record specifies that the domain name is available to the entity and that the entity is authorized to obtain the domain name.

19. The non-transitory computer-readable storage medium of claim 14, wherein:

the record is encrypted; and

the instructions further comprise instructions that, as a result of being executed by the one or more processors, cause the computer system to utilize a cryptographic key to decrypt the record to determine whether the entity is authorized to perform the operation.

20. The non-transitory computer-readable storage medium of claim 14, wherein the instructions further comprise instructions that, as a result of being executed by the one or more processors, cause the computer system to deny the request from the entity as a result of determining that the entity is not authorized to cause the computer system to perform the operation.

21. The non-transitory computer-readable storage medium of claim 14, wherein the domain name service provides an entry for the domain name to other services in response to a request from the other services to obtain the entry.