Abstract: A method and apparatus for dynamic rotation of streaming protocols are disclosed. In the method and apparatus, a first portion of content is streamed to a client device in accordance with a first content delivery protocol. Further, information indicating client device attributes, network conditions or usage conditions is received. A plurality of content delivery protocols including the first content delivery protocol are evaluated based at least in part on the received information to identify a content delivery protocol for streaming the a second portion of the content.

Abstract: Computing resources are provided to a user by identifying applications used by the user, and provisioning virtual computing resources that are adapted to the resource requirements of the identified applications. The resource requirements of the identified applications can be combined into a single set of resource requirements and used to acquire a virtual machine that is able to host the identified applications. In other examples, virtual machines may be acquired for each identified application. Each virtual machine generates a display stream via a streaming agent. The display stream is received by an application streaming client on the user's client computer system, and is displayed to the user on a client display. Multiple virtual machines may generate multiple display streams which can be combined by the application streaming client and presented to the user on the single client display.

Abstract: A computer server controls access to a hosted service using digital certificates that are requested from each client attempting to access the service. When a particular client accesses the hosted service, the host service requests a digital certificate from the particular client and issues a challenge message. The particular client signs the challenge message and provides a client digital certificate to the hosted service. The hosted service confirms that the signature on the challenge message matches the client digital certificate, and that the client digital certificate is signed by a trusted entity. Trusted entities are defined by an administrator by uploading, to the hosted service, one or more trusted digital certificates associated with a trusted entities. Using the trusted digital certificates, the hosted service confirms that the digital certificate provided by the particular client is signed by at least one of the trusted entities.

Abstract: A computing system that provides virtual computing services may generate and manage remote computing sessions between client computing devices and virtual desktop instances hosted on the service provider's network. A computing resource instance manager may monitor connections to and disconnections from a virtual desktop instance during particular time periods, and may apply a resource management policy to determine whether and when to shut down an underlying virtualized computing resource instance following a disconnection (e.g., immediately, after some period of time, or only between certain hours). A storage volume for the virtual desktop instance may be detached during a shutdown. In response to a reconnection request, the virtualized computing resource instance (or another such instance) may be restarted and the storage volume may be reattached. The computing resource instance manager may develop a model for predicting when to shut down or restart an instance based on historical data or machine learning.

Abstract: A computing system that provides virtual computing services may generate and manage remote computing sessions between client computing devices and virtual desktop instances hosted on the service provider's network. A computing resource instance manager may monitor connections to and disconnections from a virtual desktop instance during particular time periods, and may apply a resource management policy to determine whether and when to shut down an underlying virtualized computing resource instance following a disconnection (e.g., immediately, after some period of time, or only between certain hours). A storage volume for the virtual desktop instance may be detached during a shutdown. In response to a reconnection request, the virtualized computing resource instance (or another such instance) may be restarted and the storage volume may be reattached. The computing resource instance manager may develop a model for predicting when to shut down or restart an instance based on historical data or machine learning.

Abstract: A method for selecting a communication protocol for a virtual desktop instance in a service provider environment may include providing to a client computing device, access to a virtual desktop instance running on a server computer using a first communication channel associated with a first communication protocol. A request for functionality from a user of the device is detected, the requested functionality being unsupported by the first communication protocol. A second communication protocol from a plurality of available communication protocols may be selecting based on the requested functionality. The second communication protocol may support the requested functionality. A user authorization for using the second communication protocol can be verified.

Abstract: Methods, systems, and computer-readable media for management of virtual desktop instance pools are disclosed. A plurality of virtual desktop instances are provisioned in a pool for a client organization. The number of virtual desktop instances does not exceed a number of virtual desktop slots for the client organization. To a first client device associated with a first user, access is provided to a particular virtual desktop instance based (at least in part) on a determination that a current number of connected virtual desktop instances is less than the number. To a second client device associated with a second user, access is denied to the plurality of virtual desktop instances based (at least in part) on a determination that a current number of connected virtual desktop instances meets the number.

Abstract: A method and apparatus for dynamic rotation of streaming protocols are disclosed. In the method and apparatus, a first portion of content is streamed to a client device in accordance with a first content delivery protocol. Further, information indicating client device attributes, network conditions or usage conditions is received. A plurality of content delivery protocols including the first content delivery protocol are evaluated based at least in part on the received information to identify a content delivery protocol for streaming the a second portion of the content.

Abstract: An operating system is configured to receive a request to store an object that does not specify the location at which the object should be stored. The request might also include an optimization factor and one or more object location factors. The operating system might also generate object location factors or retrieve object location factors from one or more external locations. Object location factors might also be utilized that are based upon properties of the object to be stored. Utilizing the object location factors, and the optimization factor if provided, the operating system dynamically selects an appropriate storage tier for storing the object. The tiers might include a local storage tier, a local network storage tier, a remote network storage tier, and other types of storage tiers. The object is then stored on the selected storage tier. The object may be retrieved from the storage tier at a later time.

Abstract: Virtual workspaces can be provided using shared resources and network-attached storage. A workspace client can access a virtual workspace created under a customer account. For specific types of data, such as pixel data used to render the display component of the workspace on the workspace client, the data can be prevented from being transmitted over a public network. Private security gateway interfaces can be created in the customer environment that can be attached to respective security gateways in the workspace environment. Routing rules are configured such that pixel data for a workspace is only transmitted to the workspace client through a security gateway and over a secure connection to the corresponding private gateway interface in the customer environment, which can direct the pixel data to the workspace client.

Abstract: Systems and methods for detecting deviating resources in a virtual environment are disclosed. In one embodiment, a method comprises monitoring tenant usage of a resource of the virtual environment to determine a tenant usage pattern of the resource. The resource is determined to be deviating based on the tenant usage pattern of the resource.

Abstract: A method and apparatus for dynamic rotation of streaming protocols are disclosed. In the method and apparatus, a first portion of content is streamed to a client device in accordance with a first content delivery protocol. Further, information indicating client device attributes, network conditions or usage conditions is received. A plurality of content delivery protocols including the first content delivery protocol are evaluated based at least in part on the received information to identify a content delivery protocol for streaming the a second portion of the content.

Abstract: A computing system that provides virtual computing services may generate and manage remote computing sessions between client computing devices and virtual desktop instances hosted on the service provider's network. A computing resource instance manager may monitor connections to and disconnections from a virtual desktop instance during particular time periods, and may apply a resource management policy to determine whether and when to shut down an underlying virtualized computing resource instance following a disconnection (e.g., immediately, after some period of time, or only between certain hours). A storage volume for the virtual desktop instance may be detached during a shutdown. In response to a reconnection request, the virtualized computing resource instance (or another such instance) may be restarted and the storage volume may be reattached. The computing resource instance manager may develop a model for predicting when to shut down or restart an instance based on historical data or machine learning.

Abstract: A streaming source sends streaming content to a display device. A camera captures images of the display device playing the streaming content and/or a user's interaction with the display device along with the displayed response to the user's interaction. The captured content is analyzed to determine, for example, image quality characteristics of the displayed content, a user experience associated with the displayed content or whether the displayed content matches an expected outcome associated with testing input. Information determined from the analysis of the captured content may be used to adjust characteristics of the streaming content, such as streaming parameters at the streaming source or configuration of the display device. A testing system may analyze the captured content to evaluate performance of the streaming system. Results of the testing may be sent to a data store and/or used to mitigate a poor user experience such as poor image quality.

Abstract: Systems and methods corresponding to a peripheral interface service that facilitates independent connection of peripheral devices to virtual desktop instances. The peripheral devices may utilize a network connection facilitated through a local computing device or have direct network communication capabilities. The peripheral interface service can facilitate configuration of peripheral devices. The peripheral interface service can then store the configuration information for processing subsequent connection requests from one or peripheral devices. Additionally, the peripheral interface service can facilitate connection requests for configured peripheral devices. Based on processing the request and identification of a virtual desktop instance, the peripheral interface service can then facilitate the connection request to the identified virtual desktop instance.

Abstract: Virtual workspaces can be provided using shared resources and network-attached storage. A workspace accessed under a customer account has a unique key generated using a combination of a customer master key and an encryption context. The encryption context is specific to the workspace, such as may include a hash of specific values for the workspace. When a new instance is generated, a first data volume is generated using a machine image and data snapshot encrypted under a current encryption key. The snapshot is copied to a new snapshot, and a new encryption key obtained that is based on the customer master key and the current encryption context. The snapshot is used to create a new data volume encrypted under the new encryption key. The new volume is attached to the workspace instance such that data transmitted between the workspace and the new volume is encrypted under the volume-specific encryption key.

Abstract: Methods, systems, and computer-readable media for virtual desktop access using device-native user interfaces are disclosed. A virtual desktop instance is implemented on behalf of a user. One or more applications are installed on the virtual desktop instance and executed using a virtualized computing resource instance. Data associated with the virtual desktop instance is sent to a first user device that implements a first device platform. A first graphical user interface (GUI) for the virtual desktop interface is generated using the data and displayed on a first display of the first device. The data is sent to a second user device that implements a second device platform differing from the first device platform. A second GUI for the virtual desktop interface is generated using the data and displayed on a second display of the second device. The second GUI differs at least in part from the first GUI.

Abstract: Systems and methods for providing computer system monitoring as a service of a computing resource service provider, monitoring capacity computer system of a customer of the computing resource service provider, and based on the request, launching a monitoring agent in a protected execution environment in which the monitoring agent is configured to generate an assessment of the computer system and provide the assessment of the computer system.

Abstract: A computing system that provides virtual computing services may generate and manage remote computing sessions between client computing devices and virtual desktop instances hosted on the service provider's network. A computing resource instance manager may monitor connections to and disconnections from a virtual desktop instance during particular time periods, and may apply a resource management policy to determine whether and when to shut down an underlying virtualized computing resource instance following a disconnection (e.g., immediately, after some period of time, or only between certain hours). A storage volume for the virtual desktop instance may be detached during a shutdown. In response to a reconnection request, the virtualized computing resource instance (or another such instance) may be restarted and the storage volume may be reattached. The computing resource instance manager may develop a model for predicting when to shut down or restart an instance based on historical data or machine learning.

Abstract: Systems and methods for managing deployment of an update to computing devices are provided. An update deployment manager determines one or more initial computing devices to receive and execute an update. The update deployment manager further monitors a set of performance metrics with respect to the initial computing devices or a collection of computing devices. The update deployment manager may modify the rate of deployment based on the monitored performance metrics. For example, the update deployment manager may select additional computing devices to receive and execute an update. Further, the update deployment manager may halt deployment of the update. Moreover, the update deployment manager may rollback the deployment of the update.