US 9,438,599 B1Granted

Approaches for deployment approval

AssigneeAmazon Technologies, Inc.

InventorsJohn Sandeep Yuhan, Jean-Paul Bauer, David Everard Brown

Life of this patent

Estimating the term…

Loading patent…

Abstract

A deployment approval system receives, from a deployment tool, a deployment request for performing a deployment to a particular resource. The deployment approval system can identify at least one rule for approving or rejecting the deployment request based on one or more criteria. The deployment approval system can determine whether the deployment request satisfies the one or more criteria in the at least one rule to approve or reject the request. If the deployment request is approved, the deployment approval system sends an approval to the deployment tool to perform the deployment. The deployment tool can then perform the deployment and, once the deployment is complete, the deployment approval system can receive a confirmation of the deployment. The deployment approval system can then store data describing the deployment in an audit repository.

Claims20

Dependent claims

A system, comprising:

at least one processor;
and
memory including instructions that, when executed by the at least one processor, cause the system to:
receive, through an application programming interface (API) and from a deployment tool, a first request for performing a first deployment to a particular resource and a second request for performing a second deployment to the particular resource, wherein each deployment includes a payload that is configured to mutate an aspect of the particular resource;
determine, based on the request, that both the first deployment request and the second deployment request are attempting to perform respective deployments on the particular resource;
identify at least one rule for approving or rejecting deployments that are directed to the particular resource, the at least one rule based at least in part upon a geographic region of the particular resource;
determine that the first deployment request satisfies the at least one rule based at least in part upon the geographic region of the particular resource;
send, to the deployment tool, an approval for performing the first deployment, the approval including a token usable to access the particular resource to perform the deployment, wherein access rights of the token are based on an entity associated with the deployment;
determine that the second deployment request does not satisfy the at least one rule;
and
send, to the deployment tool, a denial for performing the second deployment, wherein, in response to the denial, the deployment tool is prevented from being able to perform the second deployment to the particular resource.

8 more elements

A computer-implemented method, the method comprising:

receiving, through an application programming interface (API) and from a deployment tool, a deployment request for performing a deployment to a particular resource, wherein each deployment includes a payload that is configured to mutate an aspect of the particular resource;
identifying at least one rule for approving or rejecting the deployment request based on one or more criteria, the one or more criteria including a geographic region of the particular resource;
determining that the deployment request satisfies the one or more criteria in the at least one rule based at least in part upon the geographic region of the particular resource;
and
sending, through the API to the deployment tool, an approval for performing the deployment, the approval including a set of credentials usable to access the particular resource to perform the deployment, wherein access rights of the set of credentials are based on an entity associated with the deployment.

2 more elements

A non-transitory computer readable storage medium storing instructions, the instructions when executed by a processor causing the processor to:

send, to a deployment approval system and through at least one application programming interface (API), a deployment request for performing a deployment to a particular resource, wherein the deployment includes a payload that is configured to mutate an aspect of the particular resource;
receive, from the deployment approval system, an approval for performing the deployment to the particular resource, wherein the approval includes at least one credential having access rights based on an entity associated with the deployment, and wherein the approval for the deployment request is determined based at least in part on at least one rule for approving or rejecting the deployment based on one or more criteria, at least one rule based at least in part upon a geographic region of the particular resource;
access the particular resource to perform the deployment using the at least one credential;
and
send, to the deployment approval system and through the at least one application programming interface (API), information confirming that the deployment was successful.

2 more elements

Dependencies are inferred from the claim text.

Facts

Application: 14/231,109Filed 31 Mar 2014
Granted: 6 Sep 2016
Term ends: Not estimatedThe source records don’t support an estimate.

Classification6 codes

H04L 63/10
Network architectures or network communication protocols for network security: for controlling access to devices or network resources
H04L 63/107
For controlling access to devices or network resources: wherein the security policies are location-dependent, e.g. entities privileges depend on…
H04L 63/108
For controlling access to devices or network resources: when the policy decisions are valid for a limited amount of time
H04L 63/0838
Using passwords: using one-time-passwords

Family

No related US applications are recorded in the indexed filing history.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key