Accessing external resources using remotely stored credentials

    公开(公告)号:US11736483B2

    公开(公告)日:2023-08-22

    申请号:US18050909

    申请日:2022-10-28

    Applicant: Snowflake Inc.

    CPC classification number: H04L63/0884 G06F21/31 H04L63/083 H04L63/10

    Abstract: A credentials store definition identifying a remote credential store is received. The credential store definition includes access information to enable access to the remote credentials store. A credentials object is created in an internal database based on a credentials object definition. The credentials object identifies a security credential to retrieve from the remote credentials store to access an external resource. At runtime, a request to access the external resource is received, and based on receiving the request, the security credentials identified by the credentials object are retrieved from the remote credential store using the access information. The retrieved security credential is provided to a processing component to access the external resource.

    ACCESSING EXTERNAL RESOURCES USING REMOTELY STORED CREDENTIALS

    公开(公告)号:US20230076680A1

    公开(公告)日:2023-03-09

    申请号:US18050909

    申请日:2022-10-28

    Applicant: Snowflake Inc.

    Abstract: A credentials store definition identifying a remote credential store is received. The credential store definition includes access information to enable access to the remote credentials store. A credentials object is created in an internal database based on a credentials object definition. The credentials object identifies a security credential to retrieve from the remote credentials store to access an external resource. At runtime, a request to access the external resource is received, and based on receiving the request, the security credentials identified by the credentials object are retrieved from the remote credential store using the access information. The retrieved security credential is provided to a processing component to access the external resource.

    INLINE COMPILATION OF USER DEFINED FUNCTIONS

    公开(公告)号:US20220413816A1

    公开(公告)日:2022-12-29

    申请号:US17823621

    申请日:2022-08-31

    Applicant: Snowflake Inc.

    Abstract: Embodiments described herein provide techniques for in-line compiling of UDFs in other programming languages. These techniques enable faster programming iterations because it allows users to compile directly in the cloud processing system. Moreover, it allows the UDFs to tie into existing libraries. The compiled results are treated as sensitive and handled with appropriate security policies, as with any other user data in the system.

    Stored procedures in a network based database system

    公开(公告)号:US11216322B1

    公开(公告)日:2022-01-04

    申请号:US17390930

    申请日:2021-07-31

    Applicant: Snowflake Inc.

    Abstract: Disclosed are systems, methods, and non-transitory computer-readable media for a providing stored procedures in a network-based database system. A database system executes a stored procedure within a sandbox process. The sandbox process separates the stored procedure from the other services and processes of the database system and may also limit the resources (e.g., storage, memory, etc.) and functionality available to the stored procedure. Stored procedures are commonly designed to execute database queries that are processed by other components of the database system. To provide for secure communication between the stored procedure and the other components of the database system, the sandbox process is loaded with java database connectivity (JDBC) libraries (e.g., JDBC instance) that is modified to limit the communication abilities of the stored procedure.

    REFRESHING SECURITY CREDENTIALS USED TO INVOKE AN EXTERNAL FUNCTION

    公开(公告)号:US20210390007A1

    公开(公告)日:2021-12-16

    申请号:US17461576

    申请日:2021-08-30

    Applicant: Snowflake Inc.

    Abstract: A query referencing a function associated with a remote software component is received by a network-based data warehouse system. Temporary security credentials corresponding to a role at a cloud computing service platform are obtained. The role has permission to send calls to a web endpoint corresponding to the remote software component. A request comprising input data and electronically signed using the temporary security credentials is sent to a web Application Programming Interface (API) management system of the cloud computing service platform. The request, when received by the web API management system, causes the web API management system to invoke external functionality provided by the remote software component at the web endpoint with respect to the input data. A response comprising a result of invoking the external functionality is received from the web API management system, and the result data is processed according to the query.

    Autoscaling external function requests

    公开(公告)号:US12242475B2

    公开(公告)日:2025-03-04

    申请号:US17039473

    申请日:2020-09-30

    Applicant: Snowflake Inc.

    Abstract: External functions can provide users of a database system the ability to invoke external services while operating from inside the database system. The techniques described herein address may detect throttling by the external system and automatically adjust or modify a request rate accordingly. Also, the techniques described herein may increase the request rate to optimize the use of the resources provided by the external system. These techniques allow the database system to improve efficiency when working with external services, which may or may not be elastic or scalable. Moreover, these techniques can decrease query execution times and reduce costs.

    External function invocation by a data system

    公开(公告)号:US11675640B2

    公开(公告)日:2023-06-13

    申请号:US17572205

    申请日:2022-01-10

    Applicant: Snowflake Inc.

    Abstract: A query referencing a function associated with a remote software component is received by a network-based data warehouse system. Temporary security credentials corresponding to a role at a cloud computing service platform are obtained. The role has permission to send calls to a web endpoint corresponding to the remote software component. A request comprising input data and electronically signed using the temporary security credentials is sent to a web Application Programming Interface (API) management system of the cloud computing service platform. The request, when received by the web API management system, causes the web API management system to invoke external functionality provided by the remote software component at the web endpoint with respect to the input data. A response comprising a result of invoking the external functionality is received from the web API management system, and the result data is processed according to the query.

Patent Agency Ranking