Patent ID: 11909719
Assignee: AMAZON TECHNOLOGIES, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 0:
1. A method for an Internet Protocol (IP) address manager to manage allocation of a plurality of IP addresses to resources in a first virtual network and a second virtual network of a cloud provider network, the method comprising:
receiving, from an administrator account registered with the cloud provider network, a management request for the IP address manager to manage the plurality of IP addresses that are allocated for use in the first virtual network and the second virtual network, the first virtual network and second virtual network being registered with the administrator account;
assigning first IP addresses, of the plurality of IP addresses, to a first address group that is assigned to the first virtual network, the first virtual network being disposed in a first geographic region of the cloud provider network;
assigning second IP addresses, of the plurality of IP addresses, to a second address group that is assigned to the second virtual network, the second virtual network being disposed in a second geographic region of the cloud provider network;
receiving, from the administrator account, input defining (i) a first allocation policy that defines first allocation rules for allocating the first IP addresses and (ii) a group of user accounts that are permitted to allocate the first IP addresses to computing resources located in the first virtual network;
attaching the first allocation policy to the first address group;
attaching a second allocation policy to second address group, the second allocation policy defining second allocation rules for allocating the second IP addresses in the second virtual network;
receiving, from a user account, an allocation request for allocation of one or more IP addresses of the first IP addresses in the first address group for use by one or more resources deployed in the first virtual resource network;
determining that a resource type of the one or more resources has a purpose that is permitted under the first allocation rules for use of the first IP addresses;
determining that the user account is included in the group of user accounts that are permitted to allocate the first IP addresses to the computing resources located in the first virtual network according to the first allocation policy;
determining, based at least in part on the user account being permitted to allocate the first IP addresses to the computing resources located in the first virtual network, that the allocation of the one or more IP addresses from the first address group is permitted by the first allocation policy; and
allocating the one or more IP addresses to the one or more resources located in the first virtual network.