US 10,567,388 B1Granted

Automatic account resource and policy decommissioning

AssigneeAmazon Technologies, Inc.

InventorsWilliam Frederick Hingle Kruse, Jeffrey John Wierer, Nima Sharifi Mehr, Ashish Rangole, Kunal Chadha, Bharath Mukkati Prakash, Radu Mihai Berciu, Kai Zhao, Hardik Nagda, Chenxi Zhang

Life of this patent

Estimating the term…

patentgrep

Loading patent…

Abstract

A policy/resource decommissioning service determines whether a resource has been inactive for a period of time greater than at least one period of time threshold for decommissioning. If the resource has been inactive greater than a first period of time threshold, the service disables the resource such that requests to access the resource are denied. If the resource has been inactive for a period of time greater than a second threshold, longer than the first period of time threshold, the service archives the resource. The service deletes the resource if the inactivity period of the resource is greater than a third period of time threshold, where the third period of time threshold is longer than the first and the second period of time thresholds.

Claims20

Dependent claims

A computer-implemented method, comprising:

obtaining a first request to monitor one or more computing resources, the first request specifying a plurality of temporal thresholds for decommissioning of the one or more computing resources;
obtaining, for the one or more computing resources, usage data records specifying activity associated with the one or more computing resources;
determining, for each computing resource of the one or more computing resources, a period of inactivity;
determining, for each computing resource of the one or more computing resources, if the period of inactivity is greater than any temporal threshold of the plurality of temporal thresholds such that:
when the period of inactivity is greater than a first temporal threshold, one or more policies associated with the computing resource are modified to specify a level of access to the computing resource;
when the period of inactivity is greater than a second temporal threshold, whereby the second temporal threshold is greater than the first temporal threshold, the computing resource is archived;
and
when the period of inactivity is greater than a third temporal threshold, whereby the third temporal threshold is greater than the first temporal threshold and the second temporal threshold, the computing resource is deleted;
obtaining a second request to re-activate a particular computing resource of the one or more computing resources, the particular computing resource disabled or archived due to the period of inactivity being greater than the second temporal threshold;
and
as a result of the particular computing resource being disabled or archived due to the period of inactivity of the particular computing resource being greater than any of the plurality of temporal thresholds, reactivating, upon receipt of the second request, the particular computing resource.

8 more elements

A system, comprising:

one or more processors;
and
memory including instructions that, if executed by the one or more processors, cause the system to:
one or more processors;
and
memory including instructions that, when executed by the one or more processors, cause the system to:
obtain a first request to monitor a first resource, the first request specifying a plurality of temporal thresholds for decommissioning the first resource;
obtain, for the first resource, usage data records specifying activity associated with the first resource;
determine, for the first resource, a period of inactivity;
determine whether the period of inactivity is greater than a temporal threshold such that:
when the period of inactivity is greater than
a first temporal threshold, one or more policies associated with the first resource are modified to specify a level of access to the first resource;
when the period of inactivity is greater than a second temporal threshold, whereby the second temporal threshold is greater than the first temporal threshold, the first resource is archived;
and
when the period of inactivity is greater than a third temporal threshold, whereby the third temporal threshold is greater than the first temporal threshold and the second temporal threshold, the first resource is deleted;
obtain a second request to reactivate a second resource;
and
as a result of the second resource being disabled or archived due to the period of inactivity being greater than the period of time second temporal threshold, reactivate, upon receipt of the second request,
the second resource.

16 more elements

A non-transitory computer-readable storage medium

storing thereon executable instructions that, as a result of being executed by one or more processors of a computer system, cause the computer system to:
obtain a first request to monitor a first resource, the first request specifying a plurality of temporal thresholds for decommissioning the first resource;
obtain, for the first resource, usage data records specifying activity associated with the first resource;
determine, for the first resource, a period of inactivity;
determine whether the period of inactivity is greater than a temporal threshold such that:
when the period of inactivity is greater than a first temporal threshold, one or more policies associated with the first resource are modified to specify a level of access to the first resource;
when the period of inactivity is greater than a second temporal threshold, whereby the second temporal threshold is greater than the first temporal threshold, the first resource is archived;
and
when the period of inactivity is greater than a third temporal threshold, whereby the third temporal threshold is greater than the first temporal threshold and the second temporal threshold, the first resource is deleted;
obtain a second request to reactivate a second resource;
and
as a result of the second resource being disabled or archived due to the period of inactivity being greater than the second temporal threshold, reactivate, upon receipt of the second request, the second resource.

9 more elements

Dependencies are inferred from the claim text.