Abstract: A resource tagging service allows resource tags to be created and associated with computing resources in a service provider network. The resource tags can be utilized to search, collect, filter, organize and otherwise manage computing resources in the service provider network having matching tags, and/or to perform other types of functionality. A resource groups service allows customers and/or other users of the service provider network to view and access collections of computing resources that share common resource tags and/or other attributes. Resource groups can also be evaluated in order to identify computing resources in a service provider network for which certain types of actions or other functionality is to be performed. Membership of resource groups can also be evaluated over time and inferences can be drawn from the membership and from operational information associated with the member computing resources.

Abstract: A self-encrypting drive (SED) comprises an SED controller and a nonvolatile storage medium (NVSM) responsive to the SED controller. The SED controller enables the SED to perform operations comprising: (a) receiving an encrypted media encryption key (eMEK) for a client; (b) decrypting the eMEK into an unencrypted media encryption key (MEK); (c) receiving a write request from the client, wherein the write request includes data to be stored and a key tag value associated with the MEK; (d) using the key tag value to select the MEK for the write request; (e) using the MEK for the write request to encrypt the data from the client; and (f) storing the encrypted data in a region of the NVSM allocated to the client. Other embodiments are described and claimed.

Abstract: A self-encrypting drive (SED) comprises an SED controller and a nonvolatile storage medium (NVSM) responsive to the SED controller. The SED controller enables the SED to perform operations comprising: (a) receiving an encrypted media encryption key (eMEK) for a client; (b) decrypting the eMEK into an unencrypted media encryption key (MEK); (c) receiving a write request from the client, wherein the write request includes data to be stored and a key tag value associated with the MEK; (d) using the key tag value to select the MEK for the write request; (e) using the MEK for the write request to encrypt the data from the client; and (f) storing the encrypted data in a region of the NVSM allocated to the client. Other embodiments are described and claimed.