USER-SPECIFIC DATA MANIPULATION SYSTEM FOR OBJECT STORAGE SERVICE BASED ON USER-SUBMITTED CODE

摘要

Systems and methods are described for modifying input and output (I/O) to an object storage service by implementing one or more owner-specified functions to I/O requests. Different data manipulation functions can be placed in different I/O paths depending on the request method or user access level. For example, a user having full access may be returned the unaltered version of the object, whereas a user having modified or reduced access may be returned a modified or redacted version of the object. Additionally, data access control functions can be used to grant or deny access based on a variety of factors such as user identity, time window, prior access, keywords, geographical region, etc., or to allow access to external services or the requesting user's private resources. In this manner, owners of the object collection are provided with greater control over how the object collection is accessed.