Patent ID: 11880483
Assignee: AMAZON TECHNOLOGIES, INC.
Field: Computer technology (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 12:
13. A non-transitory computer-readable storage medium storing executable instructions that, as a result of being executed by one or more processors of a computer system, cause the computer system to:
obtain, at a database management system, a database request;
determine, based on the database request, a set of database resources to be accessed as part of fulfilling the database request;
determine a request context for the database request, wherein the request context comprises:
a principal identifier associated with a database user making the database request;
a set of resource identifiers associated with the set of database resources; and
an action corresponding to a statement type of the database request;

determine one or more applicable security policies managed by a policy management service;
perform a policy evaluation based on the one or more applicable security policies and the request context to determine an indication of whether to grant access to the set of database resources; and
contingent upon the indication providing an approval, access the set of database resources to fulfill the database request.