Abstract: A system and supporting method enable receipt of a computer-coded policy for execution in a control plane associated with a cloud environment to provide data governance in a data plane using one or more data assets of the cloud environment, where the one or more data assets are automatically associated to the computer-coded policy using a set of pre-determined rules associated with the computer-coded policy and using annotations associated with the one or more data assets, and where dynamic changes are to be performed with respect to the annotations based in part on real-time changes to the computer-coded policy to allow monitoring contents of the one or more data assets in accordance with the computer-coded policy and to perform a remediation action that is associated with the one or more data assets in response to a violation associated with the computer-coded policy.

Abstract: Techniques for reducing latency between resources of a cloud provider network and end user devices are described. In one embodiment, a system includes a cloud provider network including a first control plane service to manage customer compute instances hosted on resources of the cloud provider network. The system further includes a first provider substrate extension of the cloud provider network connected to a first communications service provider network. The first provider substrate extension includes a first computer system having capacity for executing customer compute instances, is controlled at least in part by the first control plane service via a connection through at least a portion of the first communications service provider network, executes at least a first customer compute instance using the first computer system, wherein the first customer compute instance communicates with a first mobile computer system connected via the first communications service provider network.