-
公开(公告)号:US11809735B1
公开(公告)日:2023-11-07
申请号:US16698446
申请日:2019-11-27
Applicant: Amazon Technologies, Inc.
Inventor: Sandeep Kumar , Frank Harris , Oscar Allen Grim Courchaine
CPC classification number: G06F3/065 , G06F3/0619 , G06F3/067 , G06F21/602 , H04L9/0819
Abstract: Systems and methods for efficient and secure management of encrypted “snapshots” for a remote provider substrate extension (“PSE”) of a cloud provider network substrate are provided. The PSE may request and obtain a snapshot from the cloud provider network substrate, restore a volume from the snapshot, make changes to data in the restored volume, and/or initiate the creation and storage of a new snapshot that includes incremental updates to the original snapshot to reflect the changes made to data in the volume. An encrypted snapshot stored within the cloud provider network substrate may be decrypted using a cloud provider key designed for internal use only, and then re-encrypted using a PSE-specific key before providing the snapshot to the PSE, thereby avoiding the sharing of the cloud provider internal use only key outside the cloud provider network substrate.
-
公开(公告)号:US11556659B1
公开(公告)日:2023-01-17
申请号:US17249514
申请日:2021-03-03
Applicant: Amazon Technologies, Inc.
Inventor: Sandeep Kumar , Daniel Rabinovich
Abstract: Generally described, one or more aspects of the present application correspond to techniques for managing snapshots in a partially encrypted state and providing access to partially encrypted snapshots. These snapshot management techniques allow a snapshot that is being encrypted to be accessed prior to the encryption being completed. Such a snapshot may have some blocks that have been encrypted, and other blocks that have not yet been encrypted. In order to provide access to such a snapshot in a partially encrypted state, a system may allow the encryption status of the blocks in the snapshot to be checked at the block level instead of at the snapshot level (or at some other intermediary level therebetween), according to some embodiments. By doing so, the system can reduce the delays resulting from snapshots that are locked during the encryption process.
-
公开(公告)号:US11032156B1
公开(公告)日:2021-06-08
申请号:US16370074
申请日:2019-03-29
Applicant: Amazon Technologies, Inc.
Inventor: Lalit Jain , Sandeep Kumar , Ankit Singh , James Pinkerton , Marc Stephen Olson
Abstract: Aspects relate to a framework for utilizing a single API request to manage the creation of consistent snapshots for a set of volumes attached an individual instance in a distributed computing environment. Responsive to receipt of an API request identifying the instance, the multi-volume snapshot service identifies a set of volumes attached to the identified instance. The identified set of volumes can be processed or filtered to eliminate specific volumes or types of volumes, such as boot volumes. In the event that any snapshot creation attempt fails, the multi-volume snapshot service fails the API request and can delete any snapshot data generated prior to the failure.
-
公开(公告)号:US20190319785A1
公开(公告)日:2019-10-17
申请号:US15952743
申请日:2018-04-13
Applicant: Amazon Technologies, Inc.
Inventor: Sandeep Kumar , Danny Wei , Lalit Jain , Varun Verma , Oscar Allen Grim Courchaine , Kristina Kraemer Brenneman , Sriram Venugopal , Arvind Chandrasekar
Abstract: Generally described, one or more aspects of the present application correspond to techniques for creating encrypted block store volumes of data from unencrypted object storage snapshots of the volumes. These encryption techniques use a special pool of servers for performing the encryption. These encryption servers are not accessible to users, and they perform encryption and pass encrypted volumes to other block store servers for user access. The encryption context for the volumes can be persisted on the encryption severs for as long as needed for encryption and not shared with the user-facing servers in order to prevent user access to encryption context.
-
公开(公告)号:US11544156B1
公开(公告)日:2023-01-03
申请号:US17304929
申请日:2021-06-28
Applicant: Amazon Technologies, Inc.
Inventor: Sandeep Kumar , Venkatesh Nagapudi
Abstract: Systems and methods are provided for conducting incremental restore operations on block storage volumes using an object-based snapshot. A full restore from an object-based snapshot can include copying all blocks of a data set from the object-based snapshot to a destination volume. For high capacity volumes, full restores may take large amounts of time. Moreover, full restores may be inefficient where a destination volume already contains some data of the snapshot. Embodiments of the present disclosure provide for incremental restore operations, where a delta data set is transferred from the snapshot to the destination volume, representing data in the snapshot is not known to already exist on the volume or another available volume.
-
公开(公告)号:US11537431B1
公开(公告)日:2022-12-27
申请号:US15791062
申请日:2017-10-23
Applicant: Amazon Technologies, Inc.
Inventor: Sandeep Kumar , Anirudha Singh Bhadoriya
Abstract: A system implements task contention reduction via policy-based selection. Tasks waiting to be performed are indexed in a task data structure that groups the tasks based on the resources to which the tasks pertain. Workers request batches of tasks for the workers to perform. A scan cycle includes building multiple batches of tasks by scanning the task data structure for a requesting worker. A policy (e.g., random or some other form of optimization) determines where the scan cycle starts in the data structure. Each batch of tasks is delivered to a worker along with a token that keeps the state of the scan cycle (e.g., where the scan cycle started, and where the next scan to build the next batch within the scan cycle begins). The worker returns the token with the next request for the next batch and the next batch is built based on the token's state information.
-
公开(公告)号:US11372811B1
公开(公告)日:2022-06-28
申请号:US16836203
申请日:2020-03-31
Applicant: Amazon Technologies, Inc.
Inventor: Mircea Ciubotariu , Sandeep Kumar , Shlomo Yehezkel , Chakravarthi Kalyana Valicherla , Tal Eidelman , Shane Pereira
IPC: G06F16/11 , G06F16/17 , G06F21/56 , G06F16/13 , G06F16/182
Abstract: Techniques for optimizing disk volume scanning using snapshot metadata are described. A method of optimizing disk volume scanning using snapshot metadata may include determining, by a scanning service of a provider network, a plurality of changed blocks between a current snapshot of a storage volume in a storage service of the provider network and a reference snapshot of the storage volume, determining one or more files that overlap at least one of the plurality of changed blocks, and scanning the one or more files for threats.
-
公开(公告)号:US11360856B2
公开(公告)日:2022-06-14
申请号:US16586410
申请日:2019-09-27
Applicant: Amazon Technologies, Inc.
Inventor: Sandeep Kumar , Shobha Agrawal , Sahil Doshi , Suresh Babu Sajja
Abstract: Generally described, one or more aspects of the present application relate to a public snapshot service for creating and managing block-level snapshots on a cloud provider network. Storage locations for each block that comprise the snapshot can be enumerated on a snapshot manifest. Identification of storage location for a requested snapshot block can be improved using a manifest index.
-
公开(公告)号:US11029851B2
公开(公告)日:2021-06-08
申请号:US16586565
申请日:2019-09-27
Applicant: Amazon Technologies, Inc.
Inventor: Sandeep Kumar , Shobha Agrawal , Sahil Doshi , Suresh Babu Sajja , Shuvabrata Ganguly
IPC: G06F3/06
Abstract: Generally described, one or more aspects of the present application relate to a public snapshot service for creating and managing block-level snapshots. Snapshots can be configured to enable writing at the sub-block level. Subsequent modifications made to blocks storage volume that forms the basis of the snapshots can be backed up as a sub-block level operations.
-
公开(公告)号:US20210097022A1
公开(公告)日:2021-04-01
申请号:US16586565
申请日:2019-09-27
Applicant: Amazon Technologies, Inc.
Inventor: Sandeep Kumar , Shobha Agrawal , Sahil Doshi , Suresh Babu Sajja , Shuvabrata Ganguly
Abstract: Generally described, one or more aspects of the present application relate to a public snapshot service for creating and managing block-level snapshots. Snapshots can be configured to enable writing at the sub-block level. Subsequent modifications made to blocks storage volume that forms the basis of the snapshots can be backed up as a sub-block level operations.
-
-
-
-
-
-
-
-
-