Patent ID: 9237155
Filing Date: 2016-01-12
CPC Classification: G06F,H04L

Claim Text:
1. A computer-implemented method for distributed policy enforcement, comprising: under control of one or more computer systems configured with executable instructions, incorporating the user-specified policy into a first set of normal form policies at least in part by determining whether the user-specified policy is redundant with respect to the first set of normal form policies by generating a second set of normal form policies having a common form that correspond to the user-specified policy, each of the first set of normal form policies having the common form; generating an index of the first set of normal form policies based at least in part on a common set of policy elements of the common form; identifying, based at least in part on the index, at least one subset of the first set of normal form policies that is relevant to at least one of a plurality of policy enforcement components; providing said at least one subset of the first set of normal form policies to at least one of the plurality of policy enforcement components of the virtual resource provider identified as relevant; receiving a request to perform said at least one action at a user interface of the virtual resource provider; and enforcing the user-specified policy received at the policy management component at least in part by evaluating the request with respect to said at least one subset of the first set of normal form policies at said at least one of the plurality of policy enforcement components.