Selectively replicating changes to hierarchial data structures

Patent metadata

Field	Value
Publication number	US-11860895-B2
Application number	US-202217723369-A
Country	US
Kind code	B2
Filing date	Apr 18, 2022
Priority date	Mar 30, 2017
Publication date	Jan 2, 2024
Grant date	Jan 2, 2024

Abstract

Updates to a hierarchical data structure may be selectively replicated to other replicas of the hierarchical data structure. An update for a hierarchical data structure may be received and committed to the hierarchical data structure. A determination as to whether any other replicas of the hierarchical data structure have permission to receive the update may be made. For those replicas of the hierarchical data structure with permission to receive the update, the update may be provided to the replicas and committed to the replicas. Different types of replication techniques may be implemented, such as pull-based replication techniques or push-based replication techniques. Replication permissions for objects of the hierarchical data structure may be individually defined, in some embodiments.

First claim

What is claimed is:

1. A system, comprising:
a plurality of computing devices, respectively implementing at least one processor and a memory, wherein the plurality of computing devices are configured to implement a directory storage service of a provider network, wherein the directory storage service is configured to:
receive, at a first geographic region of the provider network, a request to update a policy object applicable to one or more resource objects included in a directory structure of the directory storage service, wherein the directory structure is hosted in a first network in the first geographic region;
performing the requested update to the policy object applicable to the one or more resource objects included in the directory structure in the first network in the first geographic region;
identify a replica of the directory structure hosted in a second network in a second geographic region of the provider network; and
perform cross-region replication to replicate the update to the policy object received at the first geographic region to the replica of the directory structure in the second network in the second geographic region of the provider network.

2. The system of claim 1 , wherein cross-region replication is performed after determining that cross-region replication to the replica of the directory structure in the second geographic region is permitted according to a replication permission for the directory structure.

3. The system of claim 2 , wherein the directory storage service is further configured to:
receive, at the first geographic region of the provider network, a second request to update the directory structure;
perform the second requested update to the directory structure in the first network in the first geographic region; and
determine that cross-region replication to the replica of the directory structure in the second geographic region is not permitted according to the replication permission for the directory structure.

4. The system of claim 1 , wherein the replica of the directory structure is created in the second network of the second geographic region responsive to a request to create the replica of the directory structure.

5. The system of claim 1 , wherein access requests to the replica of the directory structure in the second geographic region do not have write permission and wherein other access requests to the directory structure in the first geographic region do have write permission.

6. The system of claim 1 , wherein the update to the directory structure is committed to a first transaction log for the directory structure as part of performing the requested updated and a second transaction log for the replica of the directory structure as part of performing the cross-region replication.

7. The system of claim 1 , wherein the update to the directory structure is an update to an attribute of the policy object in the directory structure.

8. A method, comprising:
receiving, at a first geographic region of a provider network, a request to update a policy object applicable to one or more resource objects included in a directory structure of a directory storage service, wherein the directory structure is hosted in a first network in the first geographic region;
performing, by the directory storage service, the requested update to the policy object applicable to the one or more resource objects included in the directory structure in the first network in the first geographic region;
identifying, by the directory storage service, a replica of the directory structure hosted in a second network in a second geographic region of the provider network; and
performing cross-region replication, by the directory storage service, to replicate the update to the policy object received at the first geographic region to the replica of the directory structure in the second network in the second geographic region of the provider network.

9. The method of claim 8 , wherein cross-region replication is performed after determining that cross-region replication to the replica of the directory structure in the second geographic region is permitted according to a replication permission for the directory structure.

10. The method of claim 9 , further comprising:
receiving, at the first geographic region of the provider network, a second request to update the directory structure;
performing, by the directory storage service, the second requested update to the directory structure in the first network in the first geographic region; and
determining that cross-region replication to the replica of the directory structure in the second geographic region is not permitted according to the replication permission for the directory structure.

11. The method of claim 8 , wherein the replica of the directory structure is created in the second network of the second geographic region responsive to a request to create the replica of the directory structure.

12. The method of claim 8 , wherein access requests to the replica of the directory structure in the second geographic region do not have write permission and wherein other access requests to the directory structure in the first geographic region do have write permission.

13. The method of claim 8 , wherein the update to the directory structure is committed to a first transaction log for the directory structure as part of performing the requested updated and a second transaction log for the replica of the directory structure as part of performing the cross-region replication.

14. The method of claim 8 , wherein the update to the directory structure is an update to an attribute of the policy object in the directory structure.

15. One or more non-transitory computer-readable storage media storing program instructions that, when executed on or across one or more processors, cause the one or more processors to:
receiving, at a first geographic region of a provider network, a request to update a policy object applicable to one or more resource objects included in a directory structure of a directory storage service, wherein the directory structure is hosted in a first network in the first geographic region;
performing, by the directory storage service, the requested update to the policy object applicable to the one or more resource objects included in the directory structure in the first network in the first geographic region;
identifying, by the directory storage service, a replica of the directory structure hosted in a second network in a second geographic region of the provider network; and
performing cross-region replication, by the directory storage service, to replicate the update to the policy object received at the first geographic region to the replica of the directory structure in the second network in the second geographic region of the provider network.

16. The one or more non-transitory computer-readable storage media of claim 15 , wherein cross-region replication is performed after determining that cross-region replication to the replica of the directory structure in the second geographic region is permitted according to a replication permission for the directory structure.

17. The one or more non-transitory computer-readable storage media of claim 16 , storing further program instructions that when executed on or across the one or more computing devices, cause the one or more computing devices to further implement:
receiving, at the first geographic region of the provider network, a second request to update the directory structure;
performing, by the directory storage service, the second requested update

Assignees

• Amazon Tech Inc

Inventors

• Acheson Alazel
• Baker Christopher Ryan
• Chheda Mahendra Manshi
• Englert James Robert
• Li Meng
• Mandadi Srikanth
• Praus Slavka
• Watson Colin

Classifications

• G06F16/273 Primary

  Asynchronous replication or reconciliation · CPC title

• G06F16/2246 Primary

  Trees, e.g. B+trees · CPC title

• G06F16/2379

  Updates performed during online database operations; commit processing · CPC title