Abstract: Methods and apparatus for client-directed placement of remotely configured service instances are described. One or more placement target options are selected for a client of a network-accessible service based on criteria such as service characteristics of the placement targets. The selected options, including a particular placement target that includes instance hosts configurable from remote control servers, are indicated programmatically to the client. A determination is made that a service instance is to be configured at the particular placement target on behalf of the client. A remote control server is configured to issue administrative commands to an instance host at the particular placement target to configure the service instance.

Abstract: Methods and apparatus for client-directed placement of remotely configured service instances are described. One or more placement target options are selected for a client of a network-accessible service based on criteria such as service characteristics of the placement targets. The selected options, including a particular placement target that includes instance hosts configurable from remote control servers, are indicated programmatically to the client. A determination is made that a service instance is to be configured at the particular placement target on behalf of the client. A remote control server is configured to issue administrative commands to an instance host at the particular placement target to configure the service instance.

Abstract: Methods and apparatus for client-directed placement of remotely configured service instances are described. One or more placement target options are selected for a client of a network-accessible service based on criteria such as service characteristics of the placement targets. The selected options, including a particular placement target that includes instance hosts configurable from remote control servers, are indicated programmatically to the client. A determination is made that a service instance is to be configured at the particular placement target on behalf of the client. A remote control server is configured to issue administrative commands to an instance host at the particular placement target to configure the service instance.

Abstract: Methods and apparatus for client-directed placement of remotely configured service instances are described. One or more placement target options are selected for a client of a network-accessible service based on criteria such as service characteristics of the placement targets. The selected options, including a particular placement target that includes instance hosts configurable from remote control servers, are indicated programmatically to the client. A determination is made that a service instance is to be configured at the particular placement target on behalf of the client. A remote control server is configured to issue administrative commands to an instance host at the particular placement target to configure the service instance.

Abstract: Systems and methods for providing on-demand diagnostics in a virtual environment are disclosed. In one embodiment, a method comprises storing a list of approved diagnostic tests. A diagnostic service can be running in the multi-tenant environment. The diagnostic service can receive a request to run a selected diagnostic test from the list of approved diagnostic tests on one or more hardware resources in the virtual environment. In response to the request, the selected diagnostic test can be transmitted to the one or more hardware resources.

Abstract: Attacks, such as MITM and DoS attacks, on a distributed computing system may be detected by sending a work assignment to an execution device through a first communication channel. A report may then be received through a second communication channel of the work assignment received by the execution device. Information regarding the received work assignment may then be in view of information regarding the sent work assignment to determine whether an error, such as an MITM or DoS attack, has occurred. If the analysis indicates that the report does not include the sent work assignment, then a DoS attack may have occurred. If the analysis indicates that the work assignment received by the recipient does not correspond to the sent work assignment, then a MITM attack may have occurred. If an error has occurred, an indication might be recorded and/or other types of actions might also be taken.

Abstract: Methods and apparatus for enhancing control-plane security of a network-accessible service are described. In accordance with a security policy, one or more control servers are selected to perform administrative operations associated with configuration of a service instance at a particular instance host of a network-accessible service. The control servers may differ in security properties from the instance host. In response to a configuration request directed at the instance host, administrative operations are implemented at the selected control servers. A low-level command is issued for execution to the instance host from a control server. A result of the low-level command is obtained at the control server and is used to determine a response to the configuration request.