Patent ID: 11915026
Assignee: AMAZON TECHNOLOGIES, INC.
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 5:
6. A computer-implemented method, comprising:
determining that a targeted security level of a first software container of a task to be executed exceeds a targeted security level of a second software container of the task;
identifying a first virtual machine and a second virtual machine to execute the first and second software containers respectively, wherein, in accordance with the respective targeted security levels of the first and second software containers:
(a) a first number of devices emulated for the first virtual machine is smaller than a second number of devices emulated for the second virtual machine, and
(b) a first number of operating system calls (syscalls) supported by an operating system kernel of the first virtual machine is smaller than a second number of syscalls supported by an operating system kernel of the second virtual machine; and

causing (a) the first software container to be executed within the first virtual machine and (b) the second software container to be executed within the second virtual machine, wherein one or more configuration settings of the first virtual machine prevent communication between the first software container and entities external to the first virtual machine via channels other than a secure communication channel established between the first virtual machine and the second virtual machine.