US 12,242,591 B2
Managed lifecycle roles for secure credential vending
Varun Jayant Oswal, Seattle, WA (US); Liam Simon Hewitt, Seattle, WA (US); and Rachit Jain, Bothell, WA (US)
Assigned to Amazon Technologies, Inc., Seattle, WA (US)
Filed by Amazon Technologies, Inc., Seattle, WA (US)
Filed on May 8, 2023, as Appl. No. 18/314,076.
Application 18/314,076 is a continuation of application No. 16/915,753, filed on Jun. 29, 2020, granted, now 11,790,075.
Prior Publication US 2023/0281294 A1, Sep. 7, 2023
This patent is subject to a terminal disclaimer.
Int. Cl. G06F 21/45 (2013.01); G06F 21/00 (2013.01); G06F 21/60 (2013.01); H04L 9/40 (2022.01)
CPC G06F 21/45 (2013.01) [G06F 21/604 (2013.01); H04L 63/101 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A computer-implemented method, comprising:
providing an interface for receiving requests for management of first roles, at least some of which comprise managed lifecycle roles having role access information and role definitions that include one or more attributes and lifecycle definitions, wherein the interface provides for management of the first roles, and wherein for at least some of the first roles, the role access information or the one or more attributes for respective first roles are useable to determine whether requesting identities are authorized to use the respective first roles;
receiving, via the interface and for individual ones of the requests that request creation of a managed lifecycle role, specification of role definitions that include lifecycle definitions, wherein role access information or one or more attributes for respective ones of the managed lifecycle roles are changed over time, based on the respective lifecycle definitions included in the role definitions specified via the interface, and wherein determinations whether requesting identities are authorized to use respective ones of the managed lifecycle roles are based at least in part on the role access information or the one or more attributes for the respective managed lifecycle roles; and
responding to requests to validate individual ones of the managed lifecycle roles for identities with indications of whether, based on respective role access information or respective one or more attributes, the respective identities are authorized to use the respective managed lifecycle roles.