Patent ID: 8868710

Claim:
A system, comprising: a plurality of resource instances implemented by one or more computers including a first resource instance and a second resource instance; and a network interface virtualization coordinator implemented by one or more computers; wherein the network interface virtualization coordinator is operable to: in response to an interface record creation request, generate an interface record comprising a first Internet Protocol (IP) address, a subnet identifier of a first subnet containing the first IP address, and a first set of security properties, and store the interface record in a repository; in response to a first attachment request to attach the interface record to the first resource instance, enable the first resource instance to receive traffic targeted at the first IP address through a first network interface card in accordance with the first set of security properties; in response to a detachment request to detach the interface record from the first resource instance, prevent the first resource instance from receiving traffic targeted at the first IP address; and in response to a second attachment request to attach the interface record to the second resource instance, enable the second resource instance to receive traffic targeted at the first IP address through a second network interface card in accordance with the first set of security properties.