×

Providing fine-grained access remote command execution for virtual machine instances in a distributed computing environment

  • US 9,794,292 B2
  • Filed: 12/18/2015
  • Issued: 10/17/2017
  • Est. Priority Date: 10/26/2015
  • Status: Active Grant
First Claim
Patent Images

1. A computer-implemented method, comprising:

  • under the control of one or more computer systems that execute instructions,receiving, from an administrator of an account provided by a computing resource service provider, a first selection of a command document, the first selection received through a first application programming interface, the command document including;

    a set of commands for performing one or more operations against a virtual machine instance provided by the computing resource service provider; and

    a set of parameters, the set of parameters including a parameter that specifies a virtual machine instance to which the one or more operations are to be performed;

    obtaining a policy that grants permission to execute the set of commands included in the command document;

    as a result of receiving, from the administrator, a request to associate an entity with the policy, causing a policy management service of the computing resource service provider to associate the entity with the policy;

    receiving, from the entity through a second application programming interface, a second selection of the command document;

    the second selection specifying at least one value for the set of parameters, the at least one value including an identity of the virtual machine instance;

    as a result of verifying that the virtual machine instance is capable of executing the set of commands on behalf of the entity according to the policy, causing the set of commands to be executed at the virtual machine instance by providing the set of commands to a software agent running on the virtual machine instance;

    receiving a response from the software agent, the response indicating an execution status of the set of commands; and

    providing the status to an interface of the entity.

View all claims
  • 1 Assignment
Timeline View
Assignment View
    ×
    ×