Region management for distirbuted services in provider networks
AssigneeAmazon Technologies, Inc.
InventorsJasmeet Chhabra, Ankit Kumar, Dan Popick
Life of this patent
Estimating the term…
Abstract
Techniques for region management for distributed services in provider networks are described. A region management service (RMS) receives requests to enable or disable regions a provider network for users. The RMS identifies what services operate within the involved regions and transmits requests to configure resources within the regions that are specific to the users to the services. The RMS also receives messages indicating whether the transmitting services have successfully configured user resources pertaining to the services for the region.
Claims20
A computer-implemented method comprising:
- receiving, at a computing device of a provider network, a request to enable a region of a plurality of regions of the provider network for a user, the plurality of regions collectively implementing a plurality of services, wherein the plurality of regions represent geographic areas;
- identifying one or more services of the plurality of services that operate within the region, comprising performing a lookup in a database using a region identifier of the region;
- transmitting, to each of the one or more services, a request to configure resources within the region that are specific to the user, wherein for at least one of the one or more services the one service configures the resources by performing operations comprising one or more of:
- transmitting a set of one or more encryption keys or access control policies for the user to a computing device of the region;
- causing one or more database tables associated with the user to be replicated within the region;
- deriving an encryption key to be used within the region;
- or
- configuring a set of networking or security resources within the region for the user;
- receiving, from each of the one or more services, a message indicating that the service has successfully configured resources pertaining to the service for the region;
- and
- transmitting an indication that the region has been enabled for the user.
A system comprising:
- a plurality of services implemented by a plurality of electronic devices in a plurality of regions of a provider network, the plurality of regions representing geographic areas;
- and
- a region management service implemented by one or more electronic devices of the provider network, the region management service including instructions that upon execution cause the region management service to:
- receive a request to enable a region of the plurality of regions of the provider network for a user, the plurality of regions collectively implementing a plurality of services;
- identify one or more services of the plurality of services that operate within the region, the identification comprising performing a lookup in a database using a region identifier of the region;
- transmit, to each of the one or more services, a request to configure resources within the region that are specific to the user, wherein for at least one of the one or more services the one service configures the resources by performing operations comprising one or more of:
- transmitting a set of one or more encryption keys or access control policies for the user to a computing device of the region;
- causing one or more database tables associated with the user to be replicated within the region;
- deriving an encryption key to be used within the region;
- or
- configuring a set of networking or security resources within the region for the user;
- receive, from each of the one or more services, a message indicating that the service has successfully configured resources pertaining to the service for the region;
- and
- transmit an indication that the region has been enabled for the user.
A non-transitory computer-readable storage medium storing instructions that upon execution by one or more processors of one or more computing devices cause the one or more computing devices to implement a region management service (RMS) of a provider network, the RMS to perform operations comprising:
- receiving a request to enable a region of a plurality of regions of the provider network for a user, the plurality of regions collectively implementing a plurality of services, wherein the plurality of regions represent geographic areas;
- identifying one or more services of the plurality of services that operate within the region, comprising performing a lookup in a database using a region identifier of the region;
- transmitting, to each of the one or more services, a request to configure resources within the region that are specific to the user, wherein for at least one of the one or more services the one service configures the resources by performing operations comprising one or more of:
- transmitting a set of one or more encryption keys or access control policies for the user to a computing device of the region;
- causing one or more database tables associated with the user to be replicated within the region;
- deriving an encryption key to be used within the region;
- or
- configuring a set of networking or security resources within the region for the user;
- receiving, from each of the one or more services, a message indicating that the service has successfully configured resources pertaining to the service for the region;
- and
- transmitting an indication that the region has been enabled for the user.
Dependencies are inferred from the claim text.