CONTROLLING USER ACCESS TO COMMAND EXECUTION

摘要

Techniques are described for providing users with access to perform commands on network-accessible computing resources. In some situations, permissions are established for user(s) to execute command(s) on computing node(s) provided by an online service, such as by maintaining various permission information externally to those provided computing nodes for use in controlling users' ability to access, use, and/or modify the provided computing nodes. An interface component may use such external permissions information to determine if a particular user is authorized to execute one or more particular commands on one or more particular computing nodes, and to initiate simultaneous and independent execution of the command(s) on the computing node(s) when authorized. The interface component may further aggregate results from each computing node that executed the command(s), prior to providing the results to the user.

主权项

1. A computer-implemented method comprising:
receiving, by a shell aggregator executing on one or more computing systems, a request from a first user that indicates a command to be executed by one or more computing nodes provided by a network-accessible service for use by the first user; determining, by the shell aggregator and based at least in part on stored permissions information, that the first user is authorized to have the command executed by the one or more computing nodes; and initiating, by the shell aggregator and in response to the determining, execution of the command by the one or more computing nodes.