Managed Directory Service

• US 20150134800A1
• Filed: 12/05/2013
• Published: 05/14/2015
• Est. Priority Date: 11/11/2013
• Status: Active Grant

• Current Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Original Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Inventors: Shah, Shon Kiran, Rao, Guruprakash Bangalore, Mehta, Gaurang Pankaj, Rizzo, Thomas Christopher, Palande, Sameer, Rai, Krithi
• Granted Patent: US 10,530,742 B2
• Time in Patent Office: Days
• US Class Current: 709/223
• CPC Class Codes: G06F 16/955 using information identifiers, e.g. uniform resource locators [URL]
• CPC Class Codes: G06F 16/9566 URL specific, e.g. using aliases, detecting broken or misspelled links
• CPC Class Codes: G06F 2009/45562 Creating, deleting, cloning virtual machine instances
• CPC Class Codes: G06F 2009/45587 Isolation or security of virtual machine instances
• CPC Class Codes: G06F 2009/45595 Network integration; Enabling network access in virtual machine instances
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 40/134 Hyperlinking
• CPC Class Codes: G06F 9/455 Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
• CPC Class Codes: G06F 9/45558 Hypervisor-specific management and integration aspects
• CPC Class Codes: H04L 2101/30 Types of network names
• CPC Class Codes: H04L 41/50 Network service management, e.g. ensuring proper service fulfilment according to agreements
• CPC Class Codes: H04L 41/5009 Determining service level performance parameters or violations of service level contracts, e.g. violations of agreed response time or mean time between failures [MTBF]
• CPC Class Codes: H04L 41/5041 characterised by the time relationship between creation and deployment of a service
• CPC Class Codes: H04L 41/5058 Service discovery by the service manager
• CPC Class Codes: H04L 41/5083 wherein the managed service relates to web hosting
• CPC Class Codes: H04L 47/70 Admission control; Resource allocation
• CPC Class Codes: H04L 61/10 of different types
• CPC Class Codes: H04L 61/4541 Directories for service discovery
• CPC Class Codes: H04L 61/4547 for personal communications, i.e. using a personal identifier
• CPC Class Codes: H04L 61/50 : Address allocation
• CPC Class Codes: H04L 61/5007 : Internet protocol [IP] addresses
• CPC Class Codes: H04L 63/08 : for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/102 : Entity profiles
• CPC Class Codes: H04L 63/104 : Grouping of entities
• CPC Class Codes: H04L 67/02 : based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/10 : in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/1095 : Replication or mirroring of data, e.g. scheduling or transport for data synchronisation between network nodes
• CPC Class Codes: H04L 67/51 : Discovery or management thereof, e.g. service location protocol [SLP] or web services

Abstract

Techniques for connecting computer system entities to remote computer system resources are described herein. A computer system entity that requests access to a remote computer system resource has that request fulfilled by a managed directory service which receives the request and connects the computer system entity to the remote computer system resource. While connected, the managed directory service receives commands to perform operations on the remote computer system resource and, if the computer system entity is authorized to perform the operations on the remote computer system resource, the managed directory service performs the operation on the remote computer system resource.

Claims

1. A computer-implemented method, comprising:

under the control of one or more computer systems of a managed directory service of a computing resource service provider, the one or more computer systems configured with executable instructions,

receiving, from a customer of the computing resources service provider and in the form of an application programming interface call, a request to create a computer system directory within an isolated virtual network of the customer that is hosted in a computing environment of the computing resource service provider;

in response to the request, creating the computer system directory in the isolated virtual network of the customer, wherein the created computer system directory is configured to join at least virtual machines within the virtual network to a domain of the computer system directory; and

managing, by the managed directory service, the created computer system directory on behalf of the customer.

2. The computer-implemented method of claim 1, wherein managing the created computer system directory includes:

creating a replica of the created directory to be usable in an event of unavailability of the created computer system directory; and

synchronizing the replica and the created directory in accordance with changes to the created computer system directory.

3. The computer-implemented method of claim 1, wherein:

the customer hosts one or more customer computer systems in a computing environment of the customer;

the computing environment of the customer is configured to communicate with the isolated virtual network via a virtual private network connection; and

the created computer system directory is further configured to join one or more customer computer systems of the computing environment of the customer to the created computer system directory.

4. The computer-implemented method of claim 1, wherein managing the created computer system directory includes obtaining snapshots of the created computer system directory at different times.

5. The computer-implemented method of claim 4, further comprising:

receiving a request to snapshot the created computer system directory; and

wherein at least one of the snapshots is obtained as a result of receiving the request to snapshot the computer system directory.

6. A system, comprising:

one or more processors; and

memory including executable instructions that, when executed by the one or more processors, cause the system to;

receive, from a customer of a computing resource service provider, a request a computer system directory in a computing environment of the computing resource service provider in accordance with one or more parameters specified by the customer;

fulfill the received request by at least creating the computer system directory in the computing environment of the computing resource service provider so that the created computer system directory is configured to join, to the created computer system directory, computing resources from the computing resource service provider; and

manage the created computer system directory on behalf of the customer.

7. The system of claim 6, wherein the one or more parameters specify a virtual network of the customer hosted by the computing resource service provider in the computing environment of the computing resource service provider.

8. The system of claim 6, wherein the instructions that cause the system to manage the created computer system directory include instructions that, when executed by the one or more processors, cause the system to maintain a replica of the created computer system directory in accordance with changes made to the created computer system directory over time.

9. The system of claim 6, wherein the computer system directory is created with an ability to join computer system instances in a computing environment outside of the computing environment of the computing resource service provider to the created computer system directory.

10. The system of claim 9, wherein the computing environment outside of the computing environment of the computing resource service provider is hosted on premises of the customer.

11. The system of claim 6, wherein the instructions that cause the system to manage the created computer system directory include instructions that, when executed by the one or more processors, cause the system to patch executable code for operating the created computer system directory.

12. The system of claim 11, wherein the instructions that cause the system to manage the created computer system directory include instructions that, when executed by the one or more processors, cause the system to obtain snapshots of the created computer system directory at different times.

13. The computer system of claim 12, wherein the instructions that cause the system to manage the created computer system directory include instructions that, when executed by the one or more processors, cause the system to instantiate a version of the created computer system directory from an obtained snap shot from the obtained snapshots.

14. A non-transitory computer-readable storage medium having collectively stored thereon executable instructions that, when executed by one or more processors of a computer system, cause the computer system to at least:

receive, from a customer of a computing resource service provider, a request a computer system directory in a computing environment of the computing resource service provider in accordance with one or more parameters specified by the customer;

fulfill the received request by at least creating the computer system directory in the computing environment of the computing resource service provider so that the created computer system directory is configured to join, to the created computer system directory, computing resources from the computing resource service provider; and

manage the created computer system directory on behalf of the customer.

15. The non-transitory computer-readable storage medium of claim 14, the one or more parameters specify a virtual network of the customer hosted by the computing resource service provider in the computing environment of the computing resource service provider.

16. The non-transitory computer-readable storage medium of claim 14, wherein the one or more parameters specify a sub-network of the specified virtual network in which the directory is to be created.

17. The non-transitory computer-readable storage medium of claim 14, wherein the instructions that cause the computer system to manage the created computer system directory include instructions that, when executed by the one or more processors, cause the computer system to receive and fulfill application programming interface calls to perform management operations on the created computer system directory.

18. The non-transitory computer-readable storage medium of claim 14, wherein the instructions that cause the computer system to manage the created computer system directory include instructions that, when executed by the one or more processors, cause the computer system to synchronize a replica of the created computer system directory for use in a failover event.

19. The non-transitory computer-readable storage medium of claim 14, wherein the computer system directory is created with an ability to join to the created computer system directory computer system instances in a computing environment hosted by an entity different from the computing resource service provider.

20. The non-transitory computer-readable storage medium of claim 14, wherein the instructions that cause the computer system to manage the created computer system directory include instructions that, when executed by the one or more processors, cause the computer system to perform updates to executable code used to operate the created computer system directory.