US 11,818,134 B1
Validating application programming interface (API) requests to infrastructure systems hosted in a cloud computing environment
Alex Gibson, Sydney (AU); Md Maruful Hassan, Sydney (AU); Seongyeol Cho, Epping (AU); and Ethige Asin Kalmina Silva, Cranebrook (AU)
Assigned to Amazon Technologies, Inc., Seattle, WA (US)
Filed by Amazon Technologies, Inc., Seattle, WA (US)
Filed on Sep. 30, 2020, as Appl. No. 17/039,454.
Int. Cl. H04L 9/40 (2022.01); G06F 9/54 (2006.01)
CPC H04L 63/102 (2013.01) [G06F 9/547 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A computer-readable storage medium storing instructions, which, when executed on one or more computing systems, perform an operation for validating an application programming interface (API) request, the operation comprising:
obtaining, at a validation service in a cloud computing environment, an API request from a user to access a first cloud computing service in the cloud computing environment;
determining, by the validation service, at least one rule for determining whether the API request is valid, based on one or more parameters of the API request;
requesting, by the validation service, at least one second cloud computing service to determine, based on the at least one rule, a validation result indicating whether the API request is valid;
obtaining, by the validation service, an indication of the validation result from the at least one second cloud computing service;
determining, by the validation service, that the validation result indicates the API request is not valid;
determining, by the validation service, that an operating mode is a reporting mode in which the at least one rule is not being enforced; and
upon determining, by the validation service, that the validation result indicates the API request is not valid and the operating mode is a reporting mode in which the at least one rule is not being enforced:
forwarding, by the validation service, the API request to the first cloud computing service;
receiving, by the validation service, a first message in response to the API request from the first cloud computing service; and
sending, by the validation service, a second message based on the first message to the user.