Abstract: Disclosed are various embodiments for resource allocation policies for a hosted computing environment that can be configured by organizations that use the hosted computing environment under a utility computing model. In one embodiment, a resource allocation request to allocate a computing resource within a hosted computing environment is received. The resource allocation request is associated with an account of an organization. It is determined that a fulfillment of the resource allocation request would violate a resource allocation policy configured by the organization within the hosted computing environment. The resource allocation request is prevented from being automatically fulfilled in response to determining that the fulfillment of the resource allocation request would violate the resource allocation policy.

Abstract: A first request to reserve a quantity of resources that comply with a constraint specified in the first request is obtained. A set of available resources that fulfills the constraint is determined based on current capacity usage. A token is associated with the set of available resources, with the token being associated with an expiration. The quantity of resources from the set of available resources is reserved, where the quantity allocated is unavailable, until the expiration, to fulfill resource requests that lack the token. The token is provided in response to the first request.

Abstract: A method and system for enabling authenticated communications between a local device and a remote device over a network. An authentication service verifies user credentials and transmits an identity token to the local device. The local device transmits the identity token to the device manager, and receives an associated channel identifier for a device specific channel. The local device transmits to the device message relay a request to receive data on the device specific channel. The local device listens for approval on an approval channel and transmits to the device message relay the channel identifier and the identity token. The device message relay transmits an approval via the approval channel if the identity token is authentic and the user has permission to receive data on the device specific channel. Data from the remote device can be transmitted via the device specific channel.