# US 2019/0379747 A1 · Private service endpoints in isolated virtual networks > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2019/0379747 A1 - Document ID: US20190379747A1 - Status: Published application - Kind: A1 - Application number: 16/549,246 - Filed: 2019-08-23 - Published: 2019-12-12 - Earliest claimed: 2015-06-22 - Assignees: Amazon Technologies, Inc. - Applicants: Amazon Technologies, Inc. - Inventors: Kyle Tailor Akers; Michael Siaosi Voegele; Kevin Christopher Miller; Chao Yuan; David Brian Lennon; Patrick Stephenson - Web page: https://patentgrep.com/patent/US20190379747A1 ## CPC - H04L 67/51: Discovery or management thereof, e.g. service location protocol [SLP] or web services - H04L 63/0272: {Virtual private networks} - H04L 67/10: in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46) - H04L 12/4641: {Virtual LANs, VLANs, e.g. virtual private networks [VPN] (LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272)} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A service implemented at a first isolated virtual network of a provider network is added to a database of privately-accessible services. Configuration changes that enable network packets to flow between the first isolated virtual network and a second isolated virtual network without utilizing a network address accessible from the public Internet are implemented. Service requests originating at the second isolated virtual network are transmitted to the first isolated virtual network via private pathways of the provider network. Metrics corresponding to service requests directed from the second isolated network to the service are collected and provided to the respective owners of one or both isolated virtual networks. ## Claims ### Claim at position 1 -20. (canceled) ### Claim 21 A system, comprising: one or more computing devices comprising one or more respective hardware processors and memory, wherein the one or more computing devices are configured to: obtain, via one or more programmatic interfaces, one or more criteria to be used to select a network-accessible service from among a plurality of network-accessible services, wherein at least one service of the plurality of network-accessible services is configured to receive service requests via one or more private network pathways of a provider network; provide an indication, via the one or more programmatic interfaces, of at least a first network-accessible service which satisfies the one or more criteria; and cause a service request to be directed to the first network-accessible service via a particular private network pathway of the provider network. ### Claim 22 (depends on 21) The system as recited in claim 21, wherein the first network-accessible service is implemented at least in part at a first isolated virtual network of the provider network. ### Claim 23 (depends on 21) The system as recited in claim 21, wherein the service request originates at a first isolated virtual network of the provider network. ### Claim 24 (depends on 21) The system as recited in claim 21, wherein a criterion of the one or more criteria indicates an identifier of a service provider. ### Claim 25 (depends on 21) The system as recited in claim 21, wherein a criterion of the one or more criteria indicates a price associated with a service request. ### Claim 26 (depends on 21) The system as recited in claim 21, wherein the one or more computing devices are further configured to: present, via the one or more programmatic interfaces, an indication of one or more categories of network-accessible services which are (a) implemented at the provider network and (b) accessible via private network pathways of the provider network, wherein a criterion of the one or more criteria indicates a category of the one or more categories. ### Claim 27 (depends on 21) The system as recited in claim 21, wherein the one or more computing devices are further configured to: assign a network address to enable the service request to be directed to the first network-accessible service via the particular private network pathway. ### Claim 28 A method, comprising: performing, by one or more computing devices that comprise one or more respective hardware processors and memory: obtaining, via one or more programmatic interfaces, one or more criteria to be used to select a network-accessible service from among a plurality of network-accessible services, wherein at least one service of the plurality of network-accessible services is configured to receive service requests via one or more private network pathways of a provider network; providing an indication, via the one or more programmatic interfaces, of at least a first network-accessible service which satisfies the one or more criteria; and causing a service request to be directed to the first network-accessible service via a particular private network pathway of the provider network. ### Claim 29 (depends on 28) The method as recited in claim 28, wherein the first network-accessible service is implemented at least in part at a first isolated virtual network of the provider network. ### Claim 30 (depends on 28) The method as recited in claim 28, wherein the service request originates at a first isolated virtual network of the provider network. ### Claim 31 (depends on 28) The method as recited in claim 28, wherein a criterion of the one or more criteria indicates an identifier of a service provider. ### Claim 32 (depends on 28) The method as recited in claim 28, wherein a criterion of the one or more criteria indicates a price associated with a service request. ### Claim 33 (depends on 28) The method as recited in claim 28, further comprising performing, by the one or more computing devices: presenting, via the one or more programmatic interfaces, an indication of one or more categories of network-accessible services which are (a) implemented at the provider network and (b) accessible via private network pathways of the provider network, wherein a criterion of the one or more criteria indicates a category of the one or more categories. ### Claim 34 (depends on 21) The method as recited in claim 21, further comprising performing, by the one or more computing devices: modifying a routing table to enable the service request to be directed to the first network-accessible service via the particular private network pathway. ### Claim 35 One or more non-transitory computer-accessible storage media storing program instructions that when executed on or across one or more processors cause one or more computer systems to: obtain, via one or more programmatic interfaces, one or more criteria to be used to select a network-accessible service from among a plurality of network-accessible services, wherein at least one service of the plurality of network-accessible services is configured to receive service requests via one or more private network pathways of a provider network; provide an indication, via the one or more programmatic interfaces, of at least a first network-accessible service which satisfies the one or more criteria; and cause a service request to be directed to the first network-accessible service via a particular private network pathway of the provider network. ### Claim 36 (depends on 35) The one or more non-transitory computer-accessible storage media as recited in claim 35, wherein the first network-accessible service is implemented at least in part at a first isolated virtual network of the provider network. ### Claim 37 (depends on 35) The one or more non-transitory computer-accessible storage media as recited in claim 35, wherein the service request originates at a first isolated virtual network of the provider network. ### Claim 38 (depends on 35) The one or more non-transitory computer-accessible storage media as recited in claim 35, wherein a criterion of the one or more criteria indicates an identifier of a service provider. ### Claim 39 (depends on 35) The one or more non-transitory computer-accessible storage media as recited in claim 35, wherein a criterion of the one or more criteria indicates a price associated with a service request. ### Claim 40 (depends on 35) The one or more non-transitory computer-accessible storage media as recited in claim 35, storing further program instructions that when executed on or across the one or more processors further cause one or more computer systems to: present, via the one or more programmatic interfaces, an indication of one or more categories of network-accessible services which are (a) implemented at the provider network and (b) accessible via private network pathways of the provider network, wherein a criterion of the one or more criteria indicates a category of the one or more categories.