Policy based management for key-value pairs
AssigneeAmazon Technologies, Inc.
InventorsSivaprasad Venkata Padisetty, Projesh Chowdhary, Volodymyr Drozdenko, Manivannan Sundaram, Jun He
Life of this patent
Estimating the term…
Abstract
A processing device determines that a parameter in a data store is associated with a parameter policy, wherein the parameter comprises a key-value pair and the parameter policy comprises metadata that affects a behavioral characteristic of the parameter. The processing device determines that a criterion included in the parameter policy is satisfied. The processing device determines one or more operations specified in the parameter policy and performs the one or more operations.
Claims20
A method comprising:
- determining, by a processing device, that a parameter in a data store for configuration data management and secrets management of a computer system is associated with a parameter policy, wherein the parameter comprises a key-value pair and the parameter policy comprises metadata about the parameter and one or more operations that at least one of add, remove, change, or identify, a behavioral characteristic of the parameter, wherein the parameter policy is managed directly without modifying the parameter, and wherein the parameter is one of a plurality of parameters stored in the data store;
- receiving instructions to attach the parameter policy to the parameter;
- receiving configuration information for the parameter policy;
- generating the parameter policy from a parameter policy base class having a parameter policy type, the parameter policy having the configuration information;
- attaching the parameter policy to the parameter wherein the parameter policy is specific to the parameter such that the parameter policy comprises one or more operations only associated with the parameter;
- determining, by the processing device, a criterion included in the parameter policy, wherein the criterion comprises a first value;
- determining, by the processing device, that the criterion is satisfied by determining a value included in the metadata meets, exceeds, or fails to meet the first value;
- determining, by the processing device, the one or more operations in the parameter policy;
- and
- performing the one or more operations.
A system, comprising:
- a hierarchical data store to store a plurality of parameters for configuration data management and secrets management of a computer system, a first parameter of the plurality of parameters comprising at least one of a secret or a configuration parameter associated with the computer system, wherein the secret or configuration parameter is represented as a key-value pair;
- and
- a processing device connected to the hierarchical data store, the processing device to:
- determine that the first parameter in the hierarchical data store is associated with a parameter policy, wherein the parameter policy comprises metadata about the parameter and one or more operations that at least one of add, remove, change, or identify a behavioral characteristic of the parameter, and wherein first parameter policy is managed directly without modifying the parameter;
- receive instructions to attach the parameter policy to the parameter;
- receive configuration information for the parameter policy;
- generate the parameter policy from a parameter policy base class comprising a predefined parameter policy type, the parameter policy having the configuration information;
- attach the parameter policy to the parameter, wherein the parameter policy is specific to the parameter, such that the parameter policy comprises one or more operations only associated with the parameter;
- determine a criterion and a first value associated with the criterion included in the parameter policy;
- determine that the criterion is satisfied by determining a value included in the metadata meets, exceeds, or fails to meet the first value;
- determine the one or more operations in the parameter policy;
- and
- perform the one or more operations.
A non-transitory machine-readable storage medium comprising instructions that, when executed by a processing device, cause the processing device to:
- determine, that a parameter in a data store for configuration data management and secrets management of a computer system is associated with a parameter policy, wherein the parameter comprises a key-value pair and the parameter policy comprises metadata about the parameter and one or more operations that at least one of add, remove, change, or identify, a behavioral characteristic of the parameter, and wherein the parameter policy is managed directly without modifying the parameter, and wherein the parameter is one of a plurality of parameters stored in the data store;
- receive a first request to attach the parameter policy to the parameter;
- receive first configuration information for the parameter policy;
- generate the parameter policy from a parameter policy base class having a parameter policy type, the parameter policy having the configuration information;
- attach the parameter policy to the parameter wherein the parameter policy is specific to the parameter such that the parameter policy comprises one or more operations only associated with the parameter;
- determine, a first criterion included in the parameter policy, wherein the first criterion comprises a first value;
- determine that the first criterion is satisfied by determining a value included in the metadata meets, exceeds, or fails to meet the first value;
- determine the one or more operations in the parameter policy;
- and
- perform the one or more operations in the parameter policy.
Dependencies are inferred from the claim text.