Amazon.com, Inc.
Authorization orchestration for distributed systems

Abstract:

A workflow orchestration system obtains a plurality of documents for execution of a workflow on a plurality of different sub-systems. A document from the plurality of documents indicates an action to be executed by a corresponding sub-system and comprises an authorization for execution of the action by the corresponding sub-system. The authorization specified in the document can be verified by the corresponding sub-system. Based on the obtained plurality of documents, the workflow orchestration system determines whether these documents provide sufficient authorizations for execution of the workflow. If so, the workflow orchestration system executes the workflow by transmitting the documents to the corresponding sub-systems for execution of the actions specified therein.