Temporarily providing a software product access to a resource
AssigneeAmazon Technologies, Inc.
InventorsGregory Branchek Roth, Graeme David Baer, Jacques Daniel Thomas, Nicholas Andrew Gochenaur
Life of this patent
Estimating the term…
Abstract
Functionality is disclosed herein for providing temporary access to a resource. A software product that is executing in response to a request from a customer may access one or more resources of a software provider. The resources that may be accessed by a software product may be identified within an access policy. The customer is prevented from accessing the resource when the software product is not executing.
Claims15
A system, comprising:
- one or more computing devices operative to:
- receive a first request, from a first computing device associated with a first customer of a service provider network, to execute a software product;
- execute an instance of the software product within the service provider network on behalf of the first customer;
- receive a second request, from the instance of the software product, to access a resource of the service provider network, wherein the first customer is not authorized to access the resource;
- determine that a configuration provided by a second customer of the service provider network permits the instance of the software product to access the resource;
- provide credentials to the instance of the software product to access the resource, wherein the credentials are used by the instance of the software product to access the resource, and
- at least partly in response to a request from the first customer to access the resource, prevent the first customer access to the resource during a time the software product is not executing within the service provider network on behalf of the first customer.
A computer-implemented method to provide access to a resource during execution of a software product, the method comprising:
- executing the software product on a first computing device in a service provider network on behalf of a customer of the service provider network;
- receiving, at a second computing device operating in the service provider network, a second request from the software product to access a resource that is made available to the software product when executing in the service provider network, wherein access to the resource is based at least in part on a configuration of a third party, wherein the customer is not authorized to access the resource;
- determining, by the second computing device, that the software product is authorized to access the resource;
- providing to the software product, by the second computing device, credentials, usable to sign requests, to access to the resource;
- providing, by one or more computing devices, the software product access to the resource while the software product is executing in the service provider network at least partly in response to receiving the credentials from the software product;
- and
- at least partly in response to receiving a request from the first customer to access the resource, preventing the customer access to the resource during a time the software product is not executing in the service provider network on behalf of the customer.
Dependencies are inferred from the claim text.