Patent ID: 9154479
Filing Date: 2015-10-06
Classification: H04L

Abstract:
1. A computer-implemented method for providing secure communication with computing resources, comprising: receiving, by one or more computer systems configured with executable instructions, at a secure proxy of a trusted environment, a request from an application to access a computing resource service in an untrusted environment provided by a computing resource service provider, the secure proxy of the trusted environment including a secure endpoint resolver, the request specifying at least an endpoint associated with the computing resource service, the endpoint indicating a location of the computer resource service within a network of the untrusted environment; determining, by the secure endpoint resolver of the secure proxy, a set of network addresses currently associated with the endpoint based at least in part on a set of policies, the network addresses of the set being distinct from the endpoint; providing a network address from the set of network addresses to the application; allowing network traffic between the application and at least a subset of the set of network addresses currently associated with the endpoint at least by updating one or more of the set of policies, the subset including at least the network address provided to the application; establishing a secure connection between the application and the computing resource service located at the network address; and after establishing the secure connection, enforcing at least some of the set of policies on network traffic from the application to the computing resource service located at the network address.