Patent ID: 11968241
Assignee: AMAZON TECHNOLOGIES, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 4:
5. A computer-implemented method, comprising:
providing a plurality of services and resources in a production environment of a multi-tenant provider network;
determining a plurality of access requests to the plurality of services and resources by a software product during execution of the software product in a learning mode associated with a pre-production environment in which the software product is isolated from client traffic in the production environment and tested using historical or synthetic traffic, wherein the pre-production environment enables the application to access the plurality of services and resources provided in the production environment;
determining which of the services and resources were used by the software product tested using the historical or synthetic traffic during the learning mode so as to generate a subset of the services and resources to include the determined one or more services and resources;
generating a set of permissions that permits access to the subset of the services and resources used by the software product during the learning mode; and
attaching the set of permissions to a role associated with the software product.