Deployment feedback for system updates to resources in private networks

Patent metadata

Field	Value
Publication number	US-9503351-B1
Application number	US-201414565168-A
Country	US
Kind code	B1
Filing date	Dec 9, 2014
Priority date	Dec 9, 2014
Publication date	Nov 22, 2016
Grant date	Nov 22, 2016

Abstract

Deployment feedback for updates to resources implemented in a private network may be implemented. Feedback codes may be generated and included in deployments sent to a private network for deployment at resources implemented in the private network. One or more of the included feedback codes may be selected based on the performance of the deployment and provided via a feedback communication channel that is disconnected and distinct from the private network. Once received, a current status of the deployment may be determined based on the one or more feedback codes provided via the feedback communication channel.

First claim

What is claimed is:

1. A system, comprising:
a plurality of compute nodes respectively comprising at least one processor and a memory that together implement a system deployment manager that performs one or more system updates to system resources implemented at a private network, wherein the private network is disconnected from outbound communication in order to isolate the private network from external networks;
the system deployment manager, configured to:
for a given system deployment to update one or more system resources implemented at the private network:
generate one or more feedback codes for the given system deployment, wherein the one or more feedback codes are generated to satisfy one or more communication restrictions for a feedback communication channel for the private network, wherein the feedback communication channel is isolated and disconnected from the private network;
send the system deployment including the one or more feedback codes via a one-way inbound connection through an external network from the system deployment manager to the private network in order to initiate performance of the update to the one or more system resources implemented at the private network;
receive an indication of at least one of the feedback codes for the given system deployment, wherein the at least one feedback code is communicated via the feedback communication channel for the private network; and
based, at least in part, on the received indication of the at least one feedback code, determine a current status of the system deployment.

2. The system of claim 1 ,
wherein to generate the one or more feedback codes for the given system deployment, the system deployment manager is configured to update mapping information to link the one or more feedback codes to metadata describing the given system deployment; and
wherein to determine the current status of the system deployment, the deployment system manager is configured to access the metadata describing the given system deployment.

3. The system of claim 1 , wherein to generate the one or more feedback codes for the given system deployment, the system deployment manager is configured to:
based, at least in part, on the update to the one or more resources performed as part of the system deployment, identify a plurality of different potential system deployment statuses as a result of the performance of the update; and
generate a corresponding feedback code to indicate each of the identified potential system statuses to be included with the system deployment.

4. The system of claim 1 ,
wherein to generate the one or more feedback codes for the given system deployment, the system deployment manager is configured to update mapping information to link the one or more feedback codes to metadata describing the given system deployment; and
wherein the generation and the send are performed for multiple system deployments; and
wherein to determine the current status of the given system deployment, the deployment system manager is configured to:
evaluate the mapping information to identify the given system deployment; and
access the metadata describing the given system deployment to translate the at least one feedback code of the given system deployment into the current status for the given system deployment.

5. A method, comprising:
performing, by one or more computing devices:
for a given system deployment to update one or more system resources implemented at a private network:
generating one or more feedback codes for the given system deployment, wherein the one or more feedback codes are generated to satisfy one or more communication restrictions for a feedback communication channel for the private network, wherein the feedback communication channel is isolated and disconnected from the private network;
sending the system deployment including the one or more feedback codes through an external network to the private network in order to initiate performance of the update to the one or more system resources implemented at the private network;
receiving an indication of at least one of the feedback codes for the given system deployment, wherein the at least one feedback code is communicated via the feedback communication channel for the private network; and
based, at least in part, on the received indication of the at least one feedback code, determining a current status of the system deployment.

6. The method of claim 5 , wherein generating one or more feedback codes for the given system deployment comprises:
generating one or more candidate feedback codes;
evaluating a history of previously sent feedback codes to determine that the one or more feedback codes are not duplicates such that the one or more candidate feedback codes are included with the given system deployment as the one or more feedback codes.

7. The method of claim 5 , wherein generating one or more feedback codes for the given system deployment comprises:
wherein generating the one or more feedback codes for the given system deployment, comprises updating mapping information to link the one or more feedback codes to metadata describing the given system deployment; and
wherein determining the current status of the system deployment, comprises accessing the metadata describing the given system deployment.

8. The method of claim 5 , wherein generating the one or more feedback codes for the given system deployment, comprises:
based, at least in part, on the update to the one or more resources performed as part of the system deployment, identifying a plurality of different potential system deployment statuses as a result of the performance of the update; and
generating a corresponding feedback code to indicate each of the identified potential system statuses to be included with the system deployment.

9. The method of claim 5 , wherein the one or more computing devices implement a system deployment manager, and wherein the method further comprises:
performing, by at least one computing device implementing a deployment agent located in the private network:
receiving the system deployment;
performing the update to the one or more system resources implemented at the private network;
based on the performance of the update, selecting a feedback code from the one or more feedback codes included with the system deployment; and
providing a notification of the selected feedback via a input/output (I/O) interface local to the private network.

10. The method of claim 9 , wherein the I/O interface local to the private network is a graphical display.

11. The method of claim 5 , wherein the private network implements a network-based platform offering a plurality of different network-based services, wherein the one or more system resources are one or more network-based resources implemented as part of the one or more of the different network-based services.

12. The method of claim 5 , wherein the at least one feedback code indicates that the given system deployment successfully updated the one or more system resources implemented at the private network, and wherein the method further comprises:
updating metadata describing the one or more system resources to include the update to describe a new current version of the one or more system resources.

13. The method of claim 5 ,
wherein generating the one or more feedback codes for the given system deployment, comprises updating mapping information to link the one or more feedback codes to metadata describing the given system deployment; and
wherein the generating and the sending are performed for multiple system deployments; and
wherein determining the current status of th

Assignees

• Amazon Tech Inc

Inventors

• Gabrielson Jacob Adam
• Bauer Jean-Paul
• Quinn Michael Phillip
• Hua Weizhong
• Huggins Casey Thomas

Classifications

• H04L41/28 Primary

  Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration · CPC title

• H04L67/34

  involving the movement of software or configuration parameters  (network booting or remote initial program loading [RIPL] G06F9/4416) · CPC title

• H04L63/18

  using different networks or channels, e.g. using out of band channels (cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215) · CPC title

• H04L63/02

  for separating internal from external traffic, e.g. firewalls · CPC title

• H04L43/0876

  Network utilisation, e.g. volume of load or congestion level · CPC title