US 12,381,877 B2
User-defined network connectors between serverless functions and isolated cloud resources
Dharani Sankar Vijayakumar, Palo Alto, CA (US); Robert Laks, Seattle, WA (US); Sushant Bhatia, Kirkland, WA (US); Ravi S Nagayach, Aurora, IL (US); and Prashant Kumar Singh, Seattle, WA (US)
Assigned to Amazon Technologies, Inc., Seattle, WA (US)
Filed by Amazon Technologies, Inc., Seattle, WA (US)
Filed on Dec. 13, 2022, as Appl. No. 18/065,551.
Prior Publication US 2024/0195811 A1, Jun. 13, 2024
Int. Cl. H04L 9/40 (2022.01); G06F 9/455 (2018.01)
CPC H04L 63/10 (2013.01) [G06F 9/45558 (2013.01); H04L 63/0263 (2013.01); G06F 2009/45595 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A cloud provider system to enable communication between serverless function executions and virtualized network environments via user-defined connectors, the system comprising:
one or more computing devices hosting a user virtualized network environment containing one or more network accessible resources;
a serverless computing system configured to:
obtain a request to create a logical network connector enabling communication between executions of a serverless function and the user virtualized network environment, wherein the request specifies permissions permitting executions of the serverless function to access the logical network connector and permitting the logical network connector to join the user virtualized network environment;
obtain invocation of the serverless function;
initialize the logical network connector, wherein initializing the logical network connector comprises generating a first endpoint within the user virtualized network environment and a second endpoint within a second virtualized network environment corresponding to the serverless computing system and configuring a substrate physical network to route traffic between the first and second endpoints;
initiate an execution of user-defined code representing the serverless function in an execution environment within the second virtualized network environment;
obtain a network communication from the execution of the user-defined code at the first endpoint represented by the connector; and
route the network communication to the user virtualized network environment subject to the permissions of the request to create the logical network connector.