Emulation of cloud computing service regions
Systems and techniques are provided for the emulation of cloud computing service regions. An emulation system receives an API request including an indication of an endpoint associated with a target region of a cloud computing service from a system in a virtual private cloud. Attributes are extracted from the API request. A manipulated API request is generated from the extracted attributes of the API request. The manipulated API request includes an indication of an endpoint located in a standard region of the cloud computing service. The manipulated API request is transmitted to the endpoint located in the standard region of the cloud computing service.
1. A computer-implemented method performed by a data processing apparatus, the method comprising:
receiving, at an emulation system, an Application Programming Interface (API) request response comprising an indication of an endpoint located in a standard region of a cloud computing service;
extracting one or more attributes from the API request response for validating the standard region, wherein the one or more attributes includes a host, a body, a query string, a service name, and a service availability zone;
generating a manipulated API request response from the extracted one or more attributes of the API request response, wherein the manipulated API request response comprises an indication of an endpoint located in a target region of a cloud computing service; and
transmitting the manipulated API request response to a system in a virtual private cloud.
2. The computer-implemented method of claim 1 , wherein the generating step comprises replacing the indication of the endpoint located in the standard region of the cloud computing service of the API request response with the indication of the endpoint associated with the target region.
3. The computer-implemented method of claim 1 , further comprising:
receiving, before receipt of the API request response at the emulation system from the system in the virtual private cloud, an API request comprising the indication of the endpoint associated with the target region of the cloud computing service;
extracting one or more attributes from the API request;
generating a manipulated API request from the extracted one or more attributes of the API request, wherein the manipulated API request comprises the indication of the endpoint located in the standard region of the cloud computing service; and
transmitting the manipulated API request to the endpoint located in the standard region of the cloud computing service.
4. The computer-implemented method of claim 3 , wherein the generating step comprises replacing the indication of the endpoint associated with the target region of the API request with the indication of the endpoint located in the standard region of the cloud computing service.
5. The computer-implemented method of claim 3 , further comprising:
receiving, at the emulation system, from the system in the virtual private cloud, a Domain Name System (DNS) query comprising a name associated with an endpoint associated with the target region, wherein the system in the virtual private cloud is configured to send DNS queries to a DNS service of the emulation system;
resolving the DNS query to an IP address of the emulation system; and
transmitting the IP address to the system in the virtual private cloud.
6. The computer-implemented method of claim 3 , further comprising:
performing one or more tests on the API request received from the system in the virtual private cloud, wherein results of the tests are based on whether the API request is properly formed to be used with the target region of the cloud computing service; and
storing the results of the one or more tests in a database.
7. The computer-implemented method of claim 3 , further comprising:
receiving, at the emulation system, a Public Key Infrastructure (PKI) certificate and a query string indicating a cloud computing service account and a cloud computing service role;
authenticating, by federation service of the emulation system, a sender of the PKI certificate based on one or more attributes of the PKI certificate;
requesting, by the federation service, temporary credentials for the cloud computing service using the PKI certificate, wherein the temporary credentials comprise credentials for access to the cloud computing service account with the cloud computing service role;
receiving, by the emulation system, the temporary credentials; and
sending the temporary credentials to the sender of the PKI certificate.
8. The computer-implemented method of claim 3 , further comprising testing one or more logs generated by a region of the cloud computing service.
9. A computer-implemented system comprising:
one or more storage devices including instructions stored thereon; and
one or more processors operably coupled to the one or more storage devices, wherein the one or more processors is configured to execute the stored instructions to:
receive an Application Programming Interface (API) request response comprising an indication of an endpoint located in a standard region of a cloud computing service,
extract one or more attributes from the API request response to validate the standard region, wherein the one or more attributes includes a host, a body, a query string, a service name, and a service availability zone,
generate a manipulated API request response from the extracted one or more attributes of the API request response, wherein the manipulated API request response comprises an indication of an endpoint located in a target region of a cloud computing service, and
transmit the manipulated API request response to a system in a virtual private cloud.
10. The computer-implemented system of claim 9 , wherein the generating instructions comprise replacing the indication of the endpoint located in the standard region of the cloud computing service of the API request response with the indication of the endpoint associated with the target region.
11. The computer-implemented system of claim 9 , wherein the one or more processors is further configured to execute the stored instructions to:
receive from the system in the virtual private cloud, an API request comprising the indication of the endpoint associated with a target region of a cloud computing service,
extract one or more attributes from the API request,
store the API request in the one or more storage devices,
generate a manipulated API request from the extracted one or more attributes of the API request, wherein the manipulated API request comprises the indication of the endpoint located in the standard region of the cloud computing service, and
transmit the manipulated API request to the endpoint located in the standard region of the cloud computing service.
12. The computer-implemented system of claim 11 , wherein the one or more processors is further configured to execute the stored instructions to generate a manipulated API request from the extracted one or more attributes of the API request by replacing the indication of the endpoint associated with the target region of the API request with the indication of the endpoint located in the standard region of the cloud computing service.
13. The computer-implemented system of claim 11 , wherein the one or more processors is further configured to execute the stored instructions to:
receive, from the system in the virtual private cloud, a Domain Name System (DNS) query comprising a name associated with an endpoint associated with the target region, wherein the system in the virtual private cloud is configured to send DNS queries to a DNS service of the system,
resolve the DNS query to an IP address of an emulation system comprising the one or more processors, and
transmit the IP address to the system in the virtual private cloud.
14. The computer-implemented system of claim 11 , wherein the one or more processors is further configured to execute the stored instructions to:
perform one or more tests on the API request received from the system in the virtual private cloud, wherein results of the tests are based on whether the API request is properly formed to be used with the target region of the cloud computing service and
store the results of the one or more tests in a database in the one or more storage devices.
15. The computer-implemented system of claim 11 , wherein the one or more processors is further configured to execute the stored instructions to
receive a Public Key Infrastructure (PKI) certificate and a query string indicating a cloud computing service account and a cloud computing service role,
authenticate a sender of the PKI certificate based on one or more attributes of the PKI certificate,
request temporary credentials for the cloud computing service using the PKI certificate, wherein the temporary credentials comprise credentials for access to the cloud computing service account with the cloud computing service role,
receive the temporary credentials, and
send the temporary credentials to the sender of the PKI certificate.
16. The computer-implemented system of claim 11 , wherein the one or more processors is further configured to execute the stored instructions to test one or more logs generated by a region of the cloud computing service.
17. A system comprising:
one or more storage devices storing instructions thereon that, when executed by one or more computers effectuate:
receiving, at an emulation system, an Application Programming Interface (API) request response comprising an indication of an endpoint located in a standard region of a cloud computing service;
extracting one or more attributes from the API request response for validating the standard region, wherein the one or more attributes includes a host, a body, a query string, a service name, and a service availability zone;
generating a manipulated API request response from the extracted one or more attributes of the API request response, wherein the manipulated API request response comprises an indication of an endpoint located in a target region of a cloud computing service; and
transmitting the manipulated API request response to a system in a virtual private cloud.
18. The system of claim 17 , wherein the generating instructions further comprise replacing the indication of the endpoint located in the standard region of the cloud computing service of the API request response with the indication of the endpoint associated with the target region.
19. The system of claim 17 , wherein the stored instructions which, when executed by the one or more computers, further effectuate:
receiving, at the emulation system from the system in the virtual private cloud, an API request comprising the indication of the endpoint associated with the target region of the cloud computing service;
extracting one or more attributes from the API request;
generating a manipulated API request from the extracted one or more attributes of the API request, wherein the manipulated API request comprises the indication of the endpoint located in the standard region of the cloud computing service; and
transmitting the manipulated API request to the endpoint located in the standard region of the cloud computing service.
20. The system of claim 19 , wherein the generating instructions further comprise replacing the indication of the endpoint associated with the target region of the API request with the indication of the endpoint located in the standard region of the cloud computing service.