Managed directory service

Patent metadata

Field	Value
Publication number	US-10530742-B2
Application number	US-201314098445-A
Country	US
Kind code	B2
Filing date	Dec 5, 2013
Priority date	Nov 11, 2013
Publication date	Jan 7, 2020
Grant date	Jan 7, 2020

Abstract

Techniques for connecting computer system entities to remote computer system resources are described herein. A computer system entity that requests access to a remote computer system resource has that request fulfilled by a managed directory service which receives the request and connects the computer system entity to the remote computer system resource. While connected, the managed directory service receives commands to perform operations on the remote computer system resource and, if the computer system entity is authorized to perform the operations on the remote computer system resource, the managed directory service performs the operation on the remote computer system resource.

First claim

What is claimed is:

1. A computer-implemented method, comprising:
receiving, at a managed directory service, an application programming interface call from a customer of a computing resource service provider, the application programming interface call at least including a request to create a computer system directory within an isolated virtual network of the customer, the isolated virtual network of the customer hosted in a computing environment of the computing resource service provider;
creating, in response to the request, the computer system directory in the isolated virtual network of the customer, the computing system directory being inaccessible to computing resources of the computing resource service provider outside the isolated virtual network without provision of access by the managed directory service, the computer system directory configured to at least join virtual machines within the isolated virtual network to a domain of the computer system directory; and
managing, using the managed directory service, the computer system directory on behalf of the customer, wherein the managed directory service is configured to access the computer system directory.

2. The computer-implemented method of claim 1 , wherein managing the computer system directory includes:
creating a replica of the computer system directory to be usable in an event of unavailability of the computer system directory; and
synchronizing the replica of the computer system directory and the computer system directory in accordance with changes made to the computer system directory.

3. The computer-implemented method of claim 1 , wherein:
the customer hosts one or more customer computer systems in a computing environment of the customer;
the computing environment of the customer is configured to communicate with the isolated virtual network via a virtual private network connection; and
the computer system directory is further configured to join one or more customer computer systems in the computing environment of the customer to the computer system directory.

4. The computer-implemented method of claim 1 , wherein managing the computer system directory includes obtaining one or more snapshots of the computer system directory.

5. The computer-implemented method of claim 4 , further comprising:
receiving a request to obtain a snapshot of the computer system directory; and
obtaining at least one of the one or more snapshots as a result of receiving the request to obtain the snapshot.

6. A system, comprising:
one or more processors; and
memory including executable instructions that, when executed by the one or more processors, cause the system to:
receive, at a managed directory service, from a customer of a computing resource service provider, a request using an application programming interface call to create a computer system directory in a computing environment of the computing resource service provider in accordance with one or more parameters specified by the customer;
fulfill the request by at least creating the computer system directory in the computing environment of the computing resource service provider so that the computer system directory is configured to join, to the computer system directory, computing resources from the computing resource service provider, the computer system directory being created in a virtual network hosted by the computing resource service provider in the computing environment of the computing resource service provider, the virtual network being inaccessible by entities of the computing resource service provider outside the virtual network without provision of access by the managed directory service; and
manage, using the managed directory service, the computer system directory on behalf of the customer, wherein the managed directory service is configured to access the computer system directory.

7. The system of claim 6 , wherein the one or more parameters specify the virtual network of the customer where the computer system directory is created.

8. The system of claim 6 , wherein the instructions that cause the system to manage the computer system directory include instructions that, when executed by the one or more processors, cause the system to maintain a replica of the computer system directory in accordance with changes made to the computer system directory over time.

9. The system of claim 6 , wherein the computer system directory is created to at least join computer system instances to the computer system directory, the computer instances located in a computing environment outside of the computing environment of the computing resource service provider.

10. The system of claim 9 , wherein the computing environment outside of the computing environment of the computing resource service provider is hosted on premises of the customer.

11. The system of claim 6 , wherein the instructions that cause the system to manage the computer system directory include instructions that, when executed by the one or more processors, cause the system to patch executable code for operating the computer system directory.

12. The system of claim 6 , wherein the instructions that cause the system to manage the computer system directory include instructions that, when executed by the one or more processors, cause the system to obtain one or more snapshots of the computer system directory.

13. The system of claim 12 , wherein the instructions that cause the system to manage the computer system directory include instructions that, when executed by the one or more processors, cause the system to instantiate a version of the computer system directory from an obtained snapshot of the one or more snapshots.

14. A non-transitory computer-readable storage medium comprising executable instructions that, if executed by one or more processors of a computer system, cause the computer system to at least:
receive, at a managed directory service, from a customer of a computing resource service provider, a request using an application programming interface call to create a computer system directory in a computing environment of the computing resource service provider in accordance with one or more parameters specified by the customer;
fulfill the received request by at least creating the computer system directory in the computing environment of the computing resource service provider so that the computer system directory is configured to join, to the computer system directory, computing resources of the computing resource service provider, the computer system directory being created in a virtual network of the computing resource service provider where the computing resources are inaccessible to entities of the computing resource service provider outside the virtual network without provision of access by the managed directory service; and
manage, using the managed directory service, the computer system directory on behalf of the customer, wherein the managed directory service is configured to access the computer system directory.

15. The non-transitory computer-readable storage medium of claim 14 , wherein the one or more parameters specify the virtual network of the customer, the virtual network of the customer hosted by the computing resource service provider in the computing environment of the computing resource service provider.

16. The non-transitory computer-readable storage medium of claim 15 , wherein the one or more parameters specify a sub-network of the virtual network of the customer in which the computer system directory is to be created.

17. The non-transitory computer-readable stor

Assignees

• Amazon Tech Inc

Inventors

• Shah Shon Kiran
• Rao Guruprakash Bangalore
• Mehta Gaurang Pankaj
• Rizzo Thomas Christopher
• Palande Sameer
• Rai Krithi

Classifications

• H04L63/08

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• G06F2009/45595

  Network integration; Enabling network access in virtual machine instances · CPC title

• H04L41/5083

  wherein the managed service relates to web hosting · CPC title

• H04L41/5041

  characterised by the time relationship between creation and deployment of a service · CPC title

• G06F2009/45562

  Creating, deleting, cloning virtual machine instances · CPC title