System and method for configuration management service

• US 9,350,610 B2
• Filed: 07/03/2014
• Issued: 05/24/2016
• Est. Priority Date: 12/18/2007
• Status: Active Grant

• Current Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Original Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Inventors: Alford, William J., Lohia, Sumit, Whitcomb, Thomas William, Hamer, Kenneth L., McLain, Evan Michael
• Primary Examiner(s): Shepperd, Eric W
• Application Number:
  US14/323,610
• Publication Number:
  US 20140317253A1
• Time in Patent Office: 691 Days
• US Class Current: 1/1
• CPC Class Codes: H04L 41/082 the condition being updates or upgrades of network functionality
• CPC Class Codes: H04L 41/20 Network management software packages
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416

Abstract

System and method for agentless computing system configuration management in networked environments. A configuration management service may be implemented as a service on a network with a standard network interface. A client may communicate with the service to specify a configuration for a target system, for example through a browser interface. The specified configuration may be stored by the service. The service may generate a package according to the specified configuration. The package may be delivered to the target system via the network. The package may then install the configuration, for example, one or more software, data, or other digital components, on the target systems in accordance with the specified configuration. The clients may request that the service verify and/or update the installed configuration on the target system. The service may, in response, generate an update package for the installed configuration. Target systems may include computer systems and virtual machines.

Claims

1. A system, comprising:

at least one processor;

a memory comprising program instructions, wherein the program instructions are executable by the processor to implement a configuration management service configured to;

receive via a network, from a plurality of clients, a plurality of configuration requests in accordance with a standard network interface to the configuration management service, wherein each of the plurality of configuration requests specifies a configuration for one or more target systems indicated by the configuration request and includes a client identifier that uniquely identifies a client of the configuration management service that initiated the corresponding configuration request;

for each received configuration request;

generate a package comprising one or more components for implementing the configuration specified by the configuration request on the one or more target systems indicated by the configuration request; and

send the package to the one or more target systems indicated by the configuration request via a network;

receive via the network, from a client of the configuration management service, a configuration verification request in accordance with the standard network interface to the configuration management service, wherein the configuration verification request specifies an installed configuration on a target system to be verified;

determine, via the network and in response to the configuration verification request, that the installed configuration on the target system is not correct according to a stored configuration specification corresponding to the installed configuration on the target system;

generate an update package comprising one or more components for correcting the installed configuration on the target system; and

send the update package to the target system via the network.

2. The system as recited in claim 1, wherein at least two of the generated packages include different sets of components for implementing the same specified configuration on respectively indicated heterogeneous target systems.

3. The system as recited in claim 1, wherein the system further comprises a data storage, and wherein the configuration management service is further configured to store configuration specifications to the data storage, wherein the configuration specifications comprise information indicating the specified configurations.

4. The system as recited in claim 1, wherein each package is configured to install the specified configuration on the one or more target systems after the package is received on the one or more target systems.

5. The system as recited in claim 1, wherein each package is configured to:

determine that the target system does not include one or more components necessary to install the specified configuration; and

obtain the missing components for installation on the target system.

6. The system as recited in claim 5, wherein the package is configured to obtain the missing components from the configuration management service.

7. The system as recited in claim 1, wherein the system further comprises a data storage, wherein the configuration management service is further configured to store configuration specifications to the data storage, wherein the configuration specifications comprise information indicating the specified configurations, and wherein the stored configuration specifications are indexed according to the client identifiers.

8. The system as recited in claim 1, wherein at least two of the generated packages include different sets of components for implementing different configurations on the respectively indicated target systems.

9. The system as recited in claim 1, wherein the package is encrypted for secure transmission over the network to the one or more target systems.

10. The system as recited in claim 1, wherein at least one of the one or more target systems is a virtual machine, wherein a virtual machine is a virtual, non-physical computing environment created within a host environment, wherein the host environment comprises one or more computing systems.

11. The system as recited in claim 1, wherein the configuration management service is implemented as a web service, and wherein the standard network interface is a web service interface.

12. A computer-implemented method, comprising:

receiving, by a configuration management service implemented on one or more computing devices via a network, from a plurality of clients, a plurality of configuration requests in accordance with a standard network interface to the configuration management service, wherein;

each of the plurality of configuration requests indicate one or more target systems and specifies a configuration for the one or more target systems indicated by the configuration request,

the plurality of clients of the configuration management service excludes the one or more computing devices that implement the configuration management service, and

the configuration to be installed does not require any instances of agent software on the one or more target systems to implement the configuration on the one or more target systems;

for each received configuration request;

generating a package comprising one or more components for implementing the configuration specified by the configuration request on the one or more target systems indicated by the configuration request independently of any agent software residing on the one or more target systems; and

sending the package to the one or more target systems indicated by the configuration request via a network, wherein the package is encrypted for secure transmission over the network to the one or more target systems;

receiving via the network, from a client of the configuration management service, a configuration verification request in accordance with the standard network interface to the configuration management service, wherein the configuration verification request specifies an installed configuration on a target system to be verified;

determining, via the network and in response to the configuration verification request, and independently of any agent software residing on the one or more target systems, that the installed configuration on the target system is not correct according to a stored configuration specification corresponding to the installed configuration on the target system;

generating an update package comprising one or more components for correcting the installed configuration on the target system; and

sending the update package to the target system via the network.

13. The method as recited in claim 12, wherein:

the configuration management service is configured to communicate with one or more of the plurality of clients and the one or more target systems, via one or more networks, in accordance with one or more standard network interfaces which each use standardized web protocols for network communication, such that said configuration management service is configured to communicate through one or more firewalls or network address translation servers.

14. The method as recited in claim 12, further comprising each package installing the specified configuration on the one or more target systems, independently of any agent software residing on the one or more target systems, after the package is received on the one or more target systems.

15. The method as recited in claim 12, wherein each package is configured to:

determine, independently of any agent software residing on the one or more target systems, that the target system does not include one or more components necessary to install the specified configuration; and

obtain the missing components from the configuration management service for installation on the target system.

16. The method as recited in claim 12, wherein at least one of the one or more target systems is a virtual machine, wherein a virtual machine is a virtual, non-physical computing environment created within a host environment, wherein the host environment comprises one or more computing systems.

17. A system, comprising:

a server computer system comprising one or more processors and memory and configured to couple to a network, wherein the server computer system is configured to implement a configuration management service configured to;

receive via the network, from a client of the configuration management service, a configuration request in accordance with a standard network interface to the configuration management service, wherein;

the configuration request indicates one or more target systems and specifies a configuration to be installed on one or more target systems indicated by the configuration request, wherein the configuration request includes a client identifier that uniquely identifies the client of the configuration management service that initiated the configuration request, and

the configuration to be installed does not require any instances of agent software running on the one or more target systems to implement the configuration on the one or more target systems;

in response to the configuration request, generate a package comprising one or more components for implementing the specified configuration on the one or more target systems indicated by the configuration request independently of any agent software residing on the one or more target systems;

send the package to the one or more target systems indicated by the configuration request via a network;

receive via the network, from the client of the configuration management service, a configuration verification request in accordance with the standard network interface to the configuration management service, wherein the configuration verification request specifies an installed configuration on a target system to be verified;

determine, via the network and in response to the configuration verification request, that the installed configuration on the target system is not correct according to a stored configuration specification corresponding to the installed configuration on the target system;

generate an update package comprising one or more components for correcting the installed configuration on the target system; and

send the update package to the target system via the network.

18. The system as recited in claim 17, wherein:

the configuration management service is configured to communicate with the client and the one or more target systems, via one or more networks, in accordance with one or more standard network interfaces which each use standardized web protocols for network communication, such that said configuration management service is configured to communicate through one or more firewalls or network address translation servers.