Back to results
US 12,591,464 B1Granted
Managing service policies based on context
AssigneeAmazon Technologies, Inc.
InventorsHart Matthew Rossman, Tyson Campbell Garrett, James Jacob Obi
Life of this patent
Estimating the term…
Abstract
The present disclosure generally relates to a policy management service that can receive control policy inputs from customers that correspond to a service context. The policy management service parses the control policy input to identify at least one network service and a control policy corresponding to the identified network service. Additionally, the policy management service then identifies one additional network service that has been characterized as a complimentary function to the identified network service. The policy management service can translate or generate additional control policies for the identified additional network service that correspond to the previously identified control policy.
Claims23
A system for managing control policies in network-based services, the system comprising:
- one or more computing devices associated with a processor and a memory for executing computer-executable instructions to implement a policy management service, wherein the policy management service is configured to:
- obtain a control policy input from a user related to a plurality of network services hosted on behalf of the user;
- parse the control policy input to identify a service context, wherein the service context includes an identified network service of the plurality of network services and at least one control policy to be implemented by the identified network service;
- configure the identified network service according to the control policy input to implement the at least one control policy;
- and
- configure at least one additional network service, not specified within the control policy input, to implement an additional control policy not specified within the control policy input, wherein the additional control policy is programmatically generated responsive to the control policy input, and wherein to configure at least one additional network service to implement the additional control policy the policy management service is configured to:
- identify the at least one additional network service not specified within the control policy input based on the identified network service, wherein the at least one additional network service is identified as having a complimentary function to the identified network service;
- translate the at least one control policy to be implemented by the identified network service into the additional control policy not specified within the control policy input;
- validate the additional control policy for compatibility with the at least one additional network service;
- and
- cause implementation of the additional control policy on the at least one additional network service.
8 more elements
A method for managing network-based services comprising:
- parsing a control policy input associated with a network service user to identify a service context for a plurality of network services hosted on behalf of the network service user, wherein the service context includes an identified network service of the plurality of network services and at least one control policy to be implemented by the identified network service;
- configuring the identified network service according to the control policy input to implement the at least one control policy;
- and
- configuring at least one additional network service, not specified within the control policy input, to implement an additional control policy not specified within the control policy input, wherein the additional control policy is programmatically generated responsive to the control policy input, and wherein configuring the at least one additional network service to implement the additional control policy the policy management service comprises:
- identifying the at least one additional network service not specified within the control policy input based on the identified network service, wherein the at least one additional network service is identified as having a complimentary function to the identified network service corresponding to the identified service context;
- translating the at least one control policy to be implemented by the identified network services into the additional control policy not specified within the control policy input;
- and
- causing implementation of the additional control policy on the at least one additional network service.
5 more elements
A method for managing network-based services comprising:
- obtaining a control policy input from one or more users related to a plurality of network services, wherein the control policy input user corresponds to a service context and wherein the service context includes an identified network service of the plurality of network services and at least one control policy to be implemented by the identified network service;
- configuring the identified network service according to the control policy input to implement the at least one control policy;
- and
- configuring at least one additional network service, not specified within the control policy input, to implement an additional control policy not specified within the control policy input, wherein the additional control policy is programmatically generated responsive to the control policy input, and wherein configuring the at least one additional network service to implement the additional control policy the policy management service comprises:
- identifying the at least one additional network service not specified within the control policy input based on the identified network service, wherein the at least one additional network service is identified as having a complimentary function to the identified network service;
- translating the at least one control policy to be implemented by the identified network service into the additional control policy not specified within the control policy input;
- and
- causing implementation of the additional control policy on the at least one additional network service.
5 more elements
Dependencies are inferred from the claim text.