US 11,115,404 B2Granted

Facilitating service connections in serverless code executions

AssigneeAmazon Technologies, Inc.

InventorsAdam Charles Siefker, Sean Oczkowski, David Richardson, Samvid H. Dwarakanath, Marc John Brooker, Orr Weinstein

Life of this patent

Estimating the term…

patentgrep

Loading patent…

Abstract

Systems and methods are described for facilitating service connections by user-defined code executing on an on-demand code execution system. Rather than hard code state information used by network services into the code, the code can be provided with an interface that augments requests for network services with state information. When the user-defined code is executed by the on-demand code execution system, additional code can also be executed that provides the interface. The user-defined code may access the target network service through the interface, as if the target network service existed locally to an environment of the code. The interface can then augment requests to the target network service with state information. Because state information is maintained outside the user-defined code, portability of the user-defined code can be increased.

Claims20

Dependent claims

A system comprising:

a hosting system associated with an on-demand code execution system, the hosting system comprising one or more computing devices configured to:
receive a request to execute user-defined code implementing a task on the on-demand code execution system, wherein the task is associated with metadata including an authentication role under which the task should be executed;
in response to the request, execute, within an execution environment of the on-demand code execution system, the user-defined code implementing the task and additional code implementing an interface to a network-accessible service;
and
pass to the interface an authentication token corresponding to the authentication role for the task;
wherein the user-defined code causes the computing device to request access to the network-accessible service from the interface;
and
wherein the additional code providing the interface causes the computing device to:
receive the request to access the network-accessible service;
encapsulate the request with a header including the authentication token for the task to result in an encapsulated request;
and
transmit the encapsulated request to a router, wherein the router is configured to authenticate the request based on the authentication token.

9 more elements

A system comprising:

a hosting system associated with an on-demand code execution system, the hosting system comprising one or more computing devices configured to:
receive a request to execute user-defined code implementing a task on the on-demand code execution system, wherein the task is associated with metadata specifying that calls to a network-accessible service originating from executions of the task are to be augmented with information regarding a state of an execution environment in which the task is executed;
in response to the request, execute, within an execution environment of the on-demand code execution system, the user-defined code implementing the task and additional code implementing an interface to the network-accessible service;
and
pass to the interface the information regarding the state of the execution environment in which the task is executed;
wherein the user-defined code causes the computing device to request access to a network-accessible service from the interface;
and
wherein the additional code providing the interface causes the computing device to:
receive the request to access the network-accessible service;
augment the request with the information regarding the state of the execution environment in which the task is executed to result in an augmented request;
transmit the augmented request to the network-accessible service.

8 more elements

Dependencies are inferred from the claim text.

Facts

Application: 16/457,537Filed 28 Jun 2019
Published: US 2020/0412707 A131 Dec 2020
Granted: 7 Sep 2021
Term ends: Not estimatedThe source records don’t support an estimate.

Classification14 codes

H04L 63/083
For authentication of entities: using passwords
G06F 9/45533
Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines:…
H04L 63/0272
For separating internal from external traffic, e.g. firewalls: virtual private networks
H04L 63/0281
For separating internal from external traffic, e.g. firewalls: proxies

Family

US 2020/0412707 A1Pre-grant publication · published 31 Dec 2020
US 11,115,404 B2This patent

From the US filing history. Foreign family members aren’t listed.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key