Remote Cloud Function Invocation via Event Bridge
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current cloud service providers do not support integration of serverless functions with events/notifications from different cloud environments, limiting customers' ability to leverage cheaper resources across cloud environments.
Innovation Solution
A framework for remote function invocation (RFI) that allows serverless functions to be invoked in a target cloud environment based on notifications from a source cloud environment, using a target agent to obtain notifications, determine the appropriate function, verify permissions, and invoke the function if permitted.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If serverless functions are tightly integrated with services in the same cloud environment, then ease of operation is improved, but adaptability deteriorates
Solution Approach 1:
The patent introduces an event bridge service as an intermediary component that receives events from source cloud services and routes them to target serverless functions in a different cloud environment. This mediator enables cross-cloud integration while maintaining the operational simplicity of serverless architecture, resolving the contradiction between ease of operation and adaptability.
2Device complexity
If cloud service providers offer local function invocation only, then device complexity is reduced, but adaptability deteriorates
Solution Approach 1:
The patent creates a universal event bridge service that can handle multiple cloud providers and various types of cloud services (storage, compute, database, etc.) through a single standardized interface. This multi-functional approach enables cross-cloud serverless integration without increasing the complexity of individual cloud provider systems, resolving the contradiction between device complexity and adaptability.
3Adaptability or versatility
If cross-cloud function invocation is not supported, then security risks are minimized, but adaptability deteriorates
Solution Approach 1:
The patent implements a token-based authentication system where the event bridge service obtains security tokens from the target cloud's identity management service for each function invocation. This feedback mechanism ensures that only authorized events can trigger functions, providing real-time security verification while enabling cross-cloud adaptability, thus resolving the contradiction between adaptability and security risks.
Data Source
AI summary
The present disclosure relates to a framework that provides execution of serverless functions in a cloud environment based on occurrence of events/notifications from services in an entirely different cloud environment. A target agent obtains a notification from a source agent, where the target agent is deployed in a target cloud environment and the source agent is deployed in a source cloud environment that is different than the target cloud environment. The target agent determines a function that is to be invoked based on the notification. Upon successfully verifying whether the target agent is permitted to invoke the function that is deployed in a target customer tenancy of the target cloud environment, the target agent invokes the function in the target customer tenancy of the target cloud environment.