Patent ID: 11860855
Assignee: AMAZON TECHNOLOGIES, INC.
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 5:
6. A method, comprising:
receiving an access policy for a storage bucket from a client of a storage virtualization service of a provider network configured to store a plurality of data sets in a plurality of storage buckets, the storage buckets configured to store an arbitrary number of data sets, and the access policy for the storage bucket specifying,
a first type of transformation to be applied, based on a first destination location outside of the storage bucket, to a particular data set, wherein the particular data set is stored in the storage bucket, and wherein the storage buckets is allocated to an account of the client, the account comprising one or more storage buckets, wherein the first destination location for the particular data set is outside of the one or more storage buckets of the client's account but inside the provider network, and wherein application of the first type of transformation produces a first version of particular data that is to be made available at the first destination location outside of the storage bucket, the first version of the particular data representing a transformed version of the particular data set transformed according to the first type of transformation; and
a second type of transformation to be applied, based on a second destination location outside of the storage bucket, to the particular data set, wherein the second destination location is a network location inside or outside the provider network that is different than the first destination location, wherein application of the second type of transformation produces a second version of particular data that is to be made available at the second destination location, the second version of the particular data representing a transformed version of the particular data set transformed according to the second type of transformation;

in response to an event requesting the data representing the transformed version of the particular data set be made available at a particular destination location outside of the storage bucket that is one of the first or second destination location, automatically performing, according to the received access policy for the storage bucket and based on the particular destination location, a transformation having a corresponding one of the first or second type of transformation specified by the access policy, on the particular data set to produce a corresponding one of the first or second version of the data representing the transformed version of the particular data set, prior to making the data representing the transformed version of the particular data set available at the particular destination location outside of the storage bucket; and
providing a consumer of the particular data set a pre-signed Uniform Resource Locator (URL) comprising credentials for accessing the data representing the transformed version of the particular data set during a defined time window,
wherein the consumer of the particular data set reads or downloads the data representing the transformed version of the particular data set via the pre-signed URL.