US 11,386,041 B1Granted

Policy tag management for data migration

AssigneeAmazon Technologies, Inc.

InventorsSyed Omair Zafar Gillani, Carl Wesley Summers, Jonathan Jorge Nadal

Life of this patent

Estimating the term…

Loading patent…

Abstract

Data tags, such as may be used to classify data, can be automatically applied at appropriate times in a resource environment. A customer can provide an auto-tagging configuration file that can be used to determine tags to be applied to specific data objects based upon properties of those objects. The customer can also provide policies that indicate which actions can be performed for those objects based at least in part upon the applied tags. The tags can be automatically applied at any appropriate time, such as upon storage into the environment, upon modification of the auto-tagging configuration, or upon modification or the data object. In some embodiments, an auto-tagging process can also be performed in response to a request for access to the data object in order to ensure that the correct tags are applied before determining the permitted actions.

Claims20

Dependent claims

A computer-implemented method, comprising:

receiving a request to transfer a data object from a local storage to a resource provider environment, the data object associated with at least one local tag comprising an indication of one or more actions permissible in the local storage for the data object;
receiving, to the resource provider environment, a tag configuration file associated with a customer of the resource provider environment, the tag configuration file including criteria for applying tags to data objects;
storing the tag configuration file to persistent storage in the resource provider environment;
receiving, to the resource provider environment, the data object;
retrieving the criteria from the tag configuration file;
evaluating, using a tag evaluation engine, at least metadata for the data object against the criteria from the tag configuration file;
determining at least one tag, associated with the at least one local tag, to be applied to the data object;
automatically applying the at least one tag to the data object;
evaluating, using a policy evaluation engine, the at least one tag automatically applied to the object;
and
storing, to permissible storage upon determination that the storage is permissible per the policy evaluation engine, the data object with the at least one tag, the at least one tag providing at least a data classification for the data object.

8 more elements

Dependencies are inferred from the claim text.