Abstract: Aspects described herein relate to securely performing cross-boundary backup operations. A service of a computing resource service provider may enable backup operations between a source account and a destination account of an organization based at least in part on a security policy allowing such operations.

Abstract: Methods, systems, and computer-readable media for compliance lifecycle management for cloud-based resources are disclosed. A selection is received of a compliance pack from a plurality of compliance packs. The compliance pack comprises a plurality of rules associated with policy compliance. The compliance pack is selected from the plurality of compliance packs via a user interface. The selection is associated with one or more resources hosted in one or more provider networks. An evaluation is performed of compliance of the one or more resources with respect to the plurality of rules of the compliance pack. Data describing the evaluation is generated and displayed. The data comprises an aggregate compliance status for at least one of the one or more resources, and the aggregate compliance status represents an aggregate compliance with the plurality of rules.

Abstract: A configuration policy applicable to one or more target resources is identified. An indication of a non-compliance remediation workflow corresponding to the policy, indicating an automated action, is obtained via a programmatic interface. In response to detecting that a particular target resource does not comply with the configuration policy, implementation of the automated action is initiated.

Abstract: Methods, systems, and computer-readable media for compliance lifecycle management for cloud-based resources are disclosed. A selection is received of a compliance pack from a plurality of compliance packs. The compliance pack comprises a plurality of rules associated with policy compliance. The compliance pack is selected from the plurality of compliance packs via a user interface. The selection is associated with one or more resources hosted in one or more provider networks. An evaluation is performed of compliance of the one or more resources with respect to the plurality of rules of the compliance pack. Data describing the evaluation is generated and displayed. The data comprises an aggregate compliance status for at least one of the one or more resources, and the aggregate compliance status represents an aggregate compliance with the plurality of rules.

Abstract: A configuration policy applicable to one or more target resources is determined. An indication of a non-compliance workflow corresponding to the policy, indicating an action, is obtained via a programmatic interface. In response to detecting that a particular target resource does not comply with the configuration policy, implementation of the action is initiated.

Abstract: Methods, systems, and computer-readable media for compliance lifecycle management for cloud-based resources are disclosed. A selection is received of a compliance pack from a plurality of compliance packs. The compliance pack comprises a plurality of rules associated with policy compliance. The compliance pack is selected from the plurality of compliance packs via a user interface. The selection is associated with one or more resources hosted in one or more provider networks. An evaluation is performed of compliance of the one or more resources with respect to the plurality of rules of the compliance pack. Data describing the evaluation is generated and displayed. The data comprises an aggregate compliance status for at least one of the one or more resources, and the aggregate compliance status represents an aggregate compliance with the plurality of rules.

Abstract: Methods, systems, and computer-readable media for compliance lifecycle management for cloud-based resources are disclosed. A selection is received of a compliance pack from a plurality of compliance packs. The compliance pack comprises a plurality of rules associated with policy compliance. The compliance pack is selected from the plurality of compliance packs via a user interface. The selection is associated with one or more resources hosted in one or more provider networks. An evaluation is performed of compliance of the one or more resources with respect to the plurality of rules of the compliance pack. Data describing the evaluation is generated and displayed. The data comprises an aggregate compliance status for at least one of the one or more resources, and the aggregate compliance status represents an aggregate compliance with the plurality of rules.

Abstract: This disclosure describes techniques for a configuration-monitoring service of a service provider network to provide users with the ability to access to configuration data across multiple accounts using a single account or other centralized access point. The configuration-monitoring service may allow users with multiple accounts registered with the service provider network to designate a central account (or “aggregator account”) through which the users can access and review configuration data across multiple accounts (or “source accounts”) and/or multiple regions (or “source regions”). After determining an aggregator account, the configuration-monitoring service may begin collecting configuration data from the source accounts and/or source regions, and transporting the configuration data to the aggregator region to be accessed using the aggregator account.

Abstract: Simultaneous tamper-proofing and anti-piracy protection of software is provided by splitting applications into two parts: an application, and an application launcher. The application is subject to the tamper-proofing protections deployed by a networked service, while the application launcher is subject to anti-piracy protections. To ensure that the application benefits from the anti-piracy protection of the application launcher, the application and application launcher share a trusted challenge-response relationship. The application includes a challenger library for issuing challenges to the application launcher, and the application launcher includes a responder library for responding to such challenges.

Abstract: Simultaneous tamper-proofing and anti-piracy protection of software is provided by splitting applications into two parts: an application, and an application launcher. The application is subject to the tamper-proofing protections deployed by a networked service, while the application launcher is subject to anti-piracy protections. To ensure that the application benefits from the anti-piracy protection of the application launcher, the application and application launcher share a trusted challenge-response relationship. The application includes a challenger library for issuing challenges to the application launcher, and the application launcher includes a responder library for responding to such challenges.