US 12,476,978 B2
Management of computing services for applications composed of service virtual computing components
Hari Ohm Prasath Rajagopal, Tracy, CA (US); and Prashant Kumar Singh, Seattle, WA (US)
Assigned to Amazon Technologies, Inc., Seattle, WA (US)
Filed by Amazon Technologies, Inc., Seattle, WA (US)
Filed on Sep. 29, 2023, as Appl. No. 18/478,375.
Prior Publication US 2025/0112929 A1, Apr. 3, 2025
Int. Cl. H04L 9/40 (2022.01)
CPC H04L 63/105 (2013.01) [H04L 63/083 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A system comprising:
a credential vending service comprising one or more computing device configured to obtain access credentials for use by service virtual computing components; and
an on-demand code execution service comprising a plurality of host computing devices, wherein the on-demand code execution service is configured to provide on-demand execution of function code, and wherein a host computing device of the plurality of host computing devices is configured to:
receive an instruction to launch a service virtual computing component configured to provide one or more computing services to an application virtual computing component and a system computing component, wherein the application virtual computing component is to perform application functionality, and wherein the system computing component is to perform system functionality including management of the application virtual computing component;
determine, based on configuration data, the service virtual computing component is to execute using a first access credential to provide a first computing service to the application virtual computing component, and the service virtual computing component is to execute using a second access credential to provide a second computing service to the system computing component, wherein the first access credential is assigned a different set of computing resource access permissions than the second access credential;
obtain the first access credential and the second access credential from the credential vending service; and
initiate execution of the service virtual computing component using the first access credential and the second access credential, wherein the credential vending service is configured to:
receive, from the host computing device, a request for the first access credential, wherein the request is associated with an access role to which the first access credential is assigned;
retrieve the first access credential from an authentication and authorization service based at least partly on the credential vending service assuming the access role; and
send the first access credential to the host computing device.