Abstract: Methods and apparatus for a tree-oriented configuration service are disclosed. A system includes computing devices that generate a tree-structured representation of a plurality of configuration elements of a distributed application. The devices implement a programmatic interface allowing a client to request an operation on a configuration element via a network request that indicates a path from a root node of the tree to one or more nodes corresponding to the configuration element. In response to (a) a network request received via the programmatic interface to perform a particular operation on a configuration element associated with a specified node and (b) a determination that authorization information associated with the specified node permits the requested operation, the operation is performed.

Abstract: One or more bookkeeping nodes may receive a request to deploy update information from a requesting node. The bookkeeping node(s) may determine whether to authorize the requesting node to deploy the update information based at least in part on one or more deployment parameters. If authorized, the requesting node may download the update information from one or more download nodes.