Patent ID: 9614737
Date: 2017-04-04
CPC Classifications: H04L

Claim:
1. A computer-implemented method of providing an isolated portion of a dedicated network space, comprising: providing, by one or more computer systems, a dedicated network space for a customer, the dedicated network space including one or more dedicated resource instances in a distributed computing environment; receiving a request to activate an application within the dedicated network space, the application requiring communication access to at least one first endpoint within the dedicated network space; upon obtaining permission from the customer to activate the application, assigning the communication access to the application, and assigning run-in delegation to a requesting entity with respect to the application, the run-in delegation including an ability to startup the application; creating an isolated portion of the dedicated network space, wherein the customer is prevented from interacting with resources within the isolated portion; activating an instance of the application operating on resources within the isolated portion; and establishing a communication channel between the instance of the application and a second endpoint external to the dedicated network space using the communication access, the communication channel enabling communication between the instance of the application and a separate entity at the second endpoint, the separate entity being prevented from interacting with the resources within the dedicated network space and outside of the isolated portion.