Automated desktop placement

• US 9,288,262 B2
• Filed: 03/26/2015
• Issued: 03/15/2016
• Est. Priority Date: 03/11/2013
• Status: Active Grant

• Current Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Original Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Inventors: Suryanarayanan, Deepak, Brown, David Everard, Ah Kun, Malcolm Russell, Farrell, Eugene Michael
• Primary Examiner(s): KATSIKIS, KOSTAS J
• Application Number:
  US14/670,267
• Publication Number:
  US 20150201009A1
• Time in Patent Office: 355 Days
• Field of Search: 709/217
• US Class Current: 1/1
• CPC Class Codes: H04L 47/70 Admission control; Resource allocation
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 67/63 Routing a service request depending on the request content or context

Abstract

Systems and methods are presented for enabling a user to provide rules for the placement of computing resources at a data center for an entity that employs or is associated with the user. The data center can use the placement rules to select a data center computer system to host computing resources for a user. The rules can be used to establish diversity in computing resource placement at the data center thereby reducing the number of users who lose access to computing resources when a specific data center computer suffers a failure. Further, the placement rules can be used to facilitate configuration of the computer resources for the user based, for example, on the user'"'"'s employment responsibilities.

Claims

1. A computer-implemented method, the method comprising:

as implemented by one or more computing devices configured with specific computer-executable instructions,

receiving a request at a data center comprising a plurality of computing resources to obtain access to a computing resource from the plurality of computing resources, wherein the request is received from a computing device of an entity that is separate from the one or more computing devices;

determining a set of resource access rules based at least in part on an identity of the entity, wherein the set of resource access rules comprises one or more rules for providing the entity with access to the computing resource, and wherein the set of resource access rules are configured to reduce the effect of a system failure at the data center on access to the computing resource by the entity;

determining whether an active instance of the computing resource associated with the entity exists;

in response to determining that the active instance of the computing resource exists, determining whether the active instance satisfies the set of resource access rules; and

in response to determining that the active instance satisfies the set of resource access rules, providing the entity with access to the active instance of the computing resource,

wherein the set of resource access rules are received from a user associated with the entity who is authorized to provide the set of resource access rules for a sub-entity of the entity,

wherein the identity of the entity corresponds to the sub-entity and the set of resource access rules corresponds to the sub-entity, and

wherein providing the entity with access to the active instance of the computing resource comprises providing the sub-entity with access to the active instance of the computing resource.

2. The computer-implemented method of claim 1, wherein providing the entity with access to the active instance of the computing resource comprises providing a second user associated with the sub-entity with access to the active instance of the computing resource.

3. The computer-implemented method of claim 1, wherein, in response to determining that the active instance of the computing resource does not exist, the method further comprises:

instantiating a new instance of the computing resource based at least in part on the set of resource access rules; and

providing the entity with access to the new instance of the computing resource.

4. The computer-implemented method of claim 3, wherein instantiating the new instance of the computing resource comprises:

identifying a computing system at the datacenter based at least in part on the set of resource access rules; and

instantiating the new instance of the computing resource on the identified computing system.

5. The computer-implemented method of claim 1, wherein the request is associated with a second user of the entity and the active instance of the computing resource is located at a computing system of the data center, and wherein determining whether the active instance satisfies the set of resource access rules comprises:

determining whether a number of additional users of the entity accessing the computing system satisfies a user threshold; and

in response to determining that the number of additional users of the entity accessing the computing system satisfies the user threshold, designating the active instance of the computing resource as failing to satisfy the set of resource access rules.

6. The computer-implemented method of claim 5, wherein the second user and the number of additional users share a designation at the entity.

7. The computer-implemented method of claim 1, wherein the data center is one of a plurality of data centers associated with a program execution service, and wherein the program execution service is managed by a different entity than the entity.

8. A system comprising:

an electronic data store configured to at least store a set of resource access rules; and

a management computing system comprising computer hardware in communication with the electronic data store, the management computing system configured to execute computer-executable instructions to at least;

receive the set of resource access rules from a first user associated with an entity;

determine whether the first user is authorized to provide the set of resource access rules for the entity and for a sub-entity of the entity;

in response to determining that the first user is authorized to provide the set of resource access rules, associate the set of resource access rules with the entity and with the sub-entity at the electronic data store;

receive a request to obtain access to a computing resource from a plurality of computing resources hosted by a data center, wherein the request is received from a computing device of the entity, the computing device external to the data center;

identify the set of resource access rules based at least in part on an identity of the entity, wherein the set of resource access rules comprises one or more rules for providing the entity with access to the computing resource, and wherein the set of resource access rules are configured to reduce the effect of a system failure at the data center on access to the computing resource by the entity;

select, based at least in part on the identified set of resource access rules, a host computing system from a plurality of host computing systems at the data center capable of hosting the computing resource; and

provide a second user associated with the entity with access to the computing resource on the selected host computing system.

9. The system of claim 8, wherein the set of resource access rules is one set of a plurality of sets of resource access rules and wherein at least one set of resource access rules from the plurality of sets of resource access rules is associated with a different entity than the entity associated with the set of resource access rules.

10. The system of claim 8, wherein the management computing system is further configured to execute computer-executable instructions to at least:

identify a classification for the second user; and

identify the set of resource access rules based at least in part on the classification for the second user.

11. The system of claim 10, wherein the classification for the second user is based at least in part on an employment role at the entity or a user profile for the second user, wherein the user profile relates to historical computer resource usage by the second user.

12. The system of claim 8, wherein the management computing system is further configured to execute computer-executable instructions to at least instantiate an instance of the computing resource on the selected host computing system, wherein providing the second user associated with the entity with access to the computing resource comprises providing the second user with access to the instance of the computing resource on the selected host computing system.

13. The system of claim 8, wherein the management computing system is further configured to execute computer-executable instructions to at least:

determine whether an active instance of the computing resource associated with the entity exists;

in response to determining that the active instance of the computing resource exists, determine whether the active instance satisfies the set of resource access rules; and

in response to determining that the active instance satisfies the set of resource access rules, select a computing system with the active instance as the host computing system.

14. The system of claim 13, wherein the active instance comprises a cached instance of the computing resource.

15. A computer-readable, non-transitory storage medium storing computer executable instructions that, when executed by one or more computing devices, configure the one or more computing devices to perform operations comprising:

receiving a set of resource access rules from a first user associated with an entity;

determining whether the first user is authorized to provide the set of resource access rules for the entity and for a sub-entity of the entity;

in response to determining that the first user is authorized to provide the set of resource access rules, associating the set of resource access rules with the entity and with the sub-entity;

receiving a request to obtain access to a computing resource from a plurality of computing resources hosted by at least one data center from a plurality of data centers, wherein the request is received from a computing device of an entity, the computing device external to the plurality of data centers;

selecting the set of resource access rules based at least in part on an identity of the entity, wherein the set of resource access rules comprises one or more rules for providing a second user from a plurality of users associated with the entity with access to the computing resource;

selecting a data center from the plurality of data centers based at least in part on the computing resource and the identified set of resource access rules;

selecting a host computing system from a plurality of host computing systems at the selected data center based at least in part on the set of resource access rules; and

providing the second user with access to the computing resource on the selected host computing system.

16. The computer-readable, non-transitory storage medium of claim 15, wherein the plurality of data centers are geographically distributed, and wherein the plurality of data centers are associated with a program execution service.

17. The computer-readable, non-transitory storage medium of claim 15, wherein selecting the set of resource access rules based at least in part on an identity of the entity comprises selecting the set of resource access rules based at least in part on an organizational unit associated with the second user at the entity.

18. The computer-readable, non-transitory storage medium of claim 15, wherein the set of resource access rules are configured to distribute computing resource access by the plurality of users among multiple data centers of the plurality of data centers.