Back to results
US 11,108,777 B1Granted
Temporarily providing a software product access to a resource
AssigneeAmazon Technologies, Inc.
InventorsGregory Branchek Roth, Graeme David Baer, Jacques Daniel Thomas, Nicholas Andrew Gochenaur
Life of this patent
Estimating the term…
Abstract
Functionality is disclosed herein for providing temporary access to a resource. A software product that is executing in response to a request from a customer may access one or more resources of a software provider. The resources that may be accessed by a software product may be identified within an access policy. The customer is prevented from accessing the resource when the software product is not executing.
Claims20
A non-transitory computer-readable storage medium having computer-executable instructions stored thereupon which, when executed by a computer, cause the computer to:
- receive, at a service provider network, a request from a first customer of an electronic marketplace associated with the service provider network to execute an instance of a software product in the service provider network, wherein the software product is available through the electronic marketplace and is supplied to the electronic marketplace by a third-party software provider;
- cause the instance of the software product to execute in the service provider network in response to the request, wherein the instance of the software product sends a request to access a role;
- determine that the software product is authorized to access the role based, at least in part, on an access policy specified by the third-party software provider, wherein the access policy is used by the service provider network to manage access to a resource,
- provide credentials to the instance of the software product, the credentials associated with authorization of the third-party software provider to access the resource and usable by the instance of the software product to access the resource;
- and
- provide the instance of the software product access to the resource based at least in part on receipt of a request from the instance of the software product using the credentials.
3 more elements
A system, comprising:
- one or more processors of a service provider network;
- and
- memory to store computer-executable instructions that, when executed, cause the one or more processors to perform acts, comprising:
- receiving a request from a first customer of an electronic marketplace associated with the service provider network to execute an instance of a software product in the service provider network, wherein the software product is available through the electronic marketplace and is supplied to the electronic marketplace by a software provider;
- causing the instance of the software product to execute in the service provider network in response to the request, the instance of the software product configured to send a request to access a role;
- determining that the software product is authorized to access the role, the role associated with an access policy used by the service provider network to manage access to a resource, wherein the access policy is specified by the software provider;
- providing credentials to the instance of the software product, the credentials associated with authorization of the software provider to access the resource and usable by the software product to access the resource;
- and
- providing the instance of the software product access to the resource based at least in part on receipt of a request from the instance of the software product using the credentials.
6 more elements
A computer-implemented method, comprising:
- receiving a request from a first customer of an electronic marketplace associated with a service provider network to execute an instance of a software product in the service provider network, wherein the software product is available through the electronic marketplace and is supplied to the electronic marketplace by a software provider;
- causing the instance of the software product to execute in the service provider network in response to the request, the instance of the software product configured to send a request to access a role;
- determining that the software product is authorized to access the role, the role associated with an access policy used by the service provider network to manage access to a resource, wherein the access policy is specified by the software provider;
- providing credentials to the instance of the software product, the credentials associated with authorization of the software provider to access the resource and usable by the software product to access the resource;
- and
- providing the instance of the software product access to the resource based at least in part on receipt of a request from the instance of the software product using the credentials.
3 more elements
Dependencies are inferred from the claim text.