Abstract: Methods, systems, and computer-readable media for decentralized task execution that bypasses a task execution service are disclosed. A connection is established over one or more communication channels between a task execution interface and agent software of a compute instance. The agent software is executable to receive task execution documents from a task execution service and initiate local task execution based (at least in part) on the task execution documents. A task execution document is sent from the task execution interface to the agent software over the one or more channels. In sending the task execution document from the task execution interface to the compute instance, the task execution service is bypassed. Execution of one or more tasks is initiated on the compute instance by the agent software based (at least in part) on the task execution document.

Abstract: A system for managing configuration of multiple computing systems associated with a customer in a cloud computing environment. A command associated with the desired configuration is identified for execution on a total quantity of instances associated with the customer system to be configured. An invocation rate parameter selected by the customer system is used to control a rate in which the configuration command is invoked on the targeted instances. Based on the invocation rate parameter, the system invokes the configuration command on identified portions or sets of the targeted instances during different stages of the configuration invocation.

Abstract: Methods, systems, and computer-readable media for resource configuration based on dynamic group membership are disclosed. An association between a group of computing resources and an intended state is stored. The intended state represents a computing resource configuration. During operation of a computing resource, whether the computing resource belongs to the group of computing resources is determined based at least in part on analysis of one or more attributes associated with the computing resource. Based at least in part on determining that the computing resource belongs to the group of computing resources, one or more actions are caused be performed to bring the computing resource into the intended state. The computing resource is executed while having the computing resource configuration represented by the intended state.

Abstract: A customer submits a request to a virtual computer system service to launch a virtual machine instance and to join this instance to a managed directory. The service may obtain, from the customer, a domain name and Internet Protocol addresses for the selected directory, which is then stored within a systems management server. When launched, the instance may initiate an agent, which may communicate with the systems management server to obtain the configuration information. The agent may use this configuration information to establish a communications channel with the managed directory and create a temporary set of computer credentials that may be used to verify that the customer is authorized to join the virtual machine instance to the managed directory. If the credentials are valid, the managed directory may generate a computer account within the managed directory, which may be used to join the virtual machine instance to the managed directory.

Abstract: A processing device executes a first script, wherein the first script comprises one or more actions to be performed. The processing device determines that the first script comprises a reference to a second script stored in a remote data store. The processing device retrieves the second script over a network from the remote data store and executes the second script. The first script and the second script may be stand-alone scripts or scripts encapsulated within documents.

Abstract: Software packages may be installed, uninstalled and/or updated across a group of computing instances by way of a single issuance of a user request. The request may include information such as a software package name, a software package version, an action (e.g., install or uninstall), and one or more operating constraints for the software package. For an installation request, an agent on a given computing instance may process the request by accessing a manifest that indicates various computing instance characteristics (e.g., operating system types, architecture types, etc.) and various respective available versions of the software package. The agent may then select, based on characteristics of the computing instance, a package type for the computing instance. An installation request may also allow operating constraints (e.g. regarding usage of processing, memory, I/O and other resources) to be set and enforced for the software package.

Abstract: A technology is described for resolving command parameter that are included in command invocations. An example method may include receiving a request to invoke a command that includes a command parameter. The command may be executed by a software agent hosted on a computing resource managed within a service provider environment. In response to the request, a parameter value for the command parameter may be obtained from a parameter data store using a parameter ID. A command message having command instructions to execute the command the parameter value may be generated and the command message may be encrypted using a cryptographic key associated with the software agent. The command message may then be sent to the software agent, enabling the software agent to decrypt the command message and execute the command.

Abstract: Mechanisms are presented by which a customer of a resource provider can determine information about the portions of shared resources that are allocated to the customer. The information can include, for example, the software, operating systems software versions, software updates, software patches, and other such packages installed and/or executing on the various resources. In at least some embodiments, a customer can select one of a set of predefined actions that enables the customer to query the allocations, or resource instances, to obtain the information, such as through a series of inventory reports stored to a central location. In at least some embodiments the information can be obtained using a set of gatherers each configured to obtain a specific type of information.

Abstract: This disclosure describes techniques for providing users of services provided by network-based service platforms with additional control for approving patches that are to be deployed to computing resources that support their services. In some examples, the techniques include generating and using a “snapshot,” or list, of patches that are preliminarily approved for deployment. Prior to deploying the patches to the computing resources, users are provided with access to the snapshot and are able to modify the snapshot. For example, users can modify the snapshot by adding patches, removing patches, specifying a sequence in which the patches are to be deployed, and so forth. The snapshot of patches may be “frozen” for a period of time, meaning that patches that during the period of time, only patches in the snapshot are deployed, and patches that are not included in the snapshot are not permitted to be deployed to computing resources.

Abstract: Methods, systems, and computer-readable media for fleet-wide management of software packages are disclosed. A package management service is offered to a plurality of clients in a multi-tenant environment. Using the package management service, a package set is determined that comprises metadata identifying a plurality of software packages and desired states associated with the software packages. The software packages are from a catalog. Deployment of the package set is initiated to a plurality of computing devices. The deployment comprises reaching the desired states for the software packages in the package set for the computing devices.

Abstract: A virtual computer system service receives a request from a customer to provision a dedicated server for the exclusive use of the customer. The dedicated server may be used to launch one or more virtual machine instances. The virtual computer system service subsequently selects, from a pool of available servers, a server that can be dedicated to the customer and that does not have capacity allocated to any other customer. The virtual computer system service may update a database to specify, in an entry corresponding to the selected server, that the server has been dedicated for the exclusive use of the customer. Once the database has been updated, the virtual computer system service will enable the customer to launch a virtual machine instance using the dedicated server.

Abstract: A service is disclosed that allows configuration, management and deployment of instances. A configuration document can be stored by the service and one or more instance identifiers can be linked to the configuration document. As a result, multiple instances can be launched and configured using a single configuration document allowing for a consistent result across instances. Local agents running on the instances can execute plug-ins in order to effectuate the configuration. As a result, administrators of instances can configure, manage and easily deploy their unique instance configurations. Customers who manage their instances can scale and manage their entire fleet with repeatable configuration tasks that seamlessly integrate into their instance workflow.

Abstract: A virtual computer system service receives a request from a customer to provision a dedicated server for the exclusive use of the customer. The dedicated server may be used to launch one or more virtual machine instances. The virtual computer system service subsequently selects, from a pool of available servers, a server that can be dedicated to the customer and that does not have capacity allocated to any other customer. The virtual computer system service may update a database to specify, in an entry corresponding to the selected server, that the server has been dedicated for the exclusive use of the customer. Once the database has been updated, the virtual computer system service will enable the customer to launch a virtual machine instance using the dedicated server.

Abstract: Technology is described for selecting parameter combinations corresponding to virtual instance configurations to be tested in a virtual computing environment and for performing tests in a plurality of parallel test pipelines. Throttling constraints can be applied so that resources used by the test pipelines in the testing process do not exceed predefined limits.

Abstract: Technology is described for resuming testing operations after a destructive event occurs. A runner agent and tests may be executed on an operating system. A test state may be stored in a persistent storage location. Another operation may be setting a scheduled task to run on occurrence of a start event for a portion of the operating system. The scheduled task may be configured re-execute or re-launch the runner agent upon occurrence of the start event. In addition, the start event may be received for the portion of the operating system for which a destructive event occurred, and the runner agent that was affected by the destructive event may be re-started as directed by the scheduled task. The test state may be identified from the persistent storage location. Further, a portion of test code may be selected to execute based on the test state.

Abstract: A selection of a document that includes a command and a parameter is received, and a user is caused to be associated with a policy that grants permission to execute the document. A request is received, from a requestor, to execute the document, the request including a parameter value, and the requestor is determined to be the user associated with the policy. The user is validated to have access to a resource indicated by the parameter value, and the command is caused to be executed against the resource.

Abstract: Methods, systems, and computer-readable media for resource configuration based on dynamic group membership are disclosed. An association between a group of computing resources and an intended state is stored. The intended state represents a computing resource configuration. During operation of a computing resource, whether the computing resource belongs to the group of computing resources is determined based at least in part on analysis of one or more attributes associated with the computing resource. Based at least in part on determining that the computing resource belongs to the group of computing resources, one or more actions are caused be performed to bring the computing resource into the intended state. The computing resource is executed while having the computing resource configuration represented by the intended state.

Abstract: A method for communicating messages between a service and a virtual machine instance may include receiving a message from a service. The message includes a target instance identification of at least one virtual machine instance (VMI) to receive the message. A notification of the message and the target instance identification is stored in a message queue for each of a plurality of host servers associated with a plurality of VMIs. The message is stored in a message store without storing at least a portion of the message in the message queue. A request for undelivered messages is received from a VMI associated with a customer account. In response to the request, it is determined that a local cache contains an indication that the message is undelivered, where the local cache is within at least one of the plurality of host server computers associated with the VMI sending the request.

Abstract: A virtual machine image service is disclosed in a compute service environment to support management of virtual machine images. The virtual machine image service uses the customer input to generate a new virtual machine image with customization applied. In a simple example, the customer can provide information regarding which virtual machine image requires software updates. In turn, the service can retrieve the virtual machine image, install the updates, reduce the volume of the virtual machine image, run tests to confirm the virtual machine image runs properly, scan the virtual machine image for viruses, and update any desired configuration tools and device drivers. Using customer control features (e.g., a definition file, a script, and/or API parameters), the customer can control what operations are performed on the virtual machine image.

Abstract: A customer of a shared resource environment can generate script to be executed by one or more virtual machines, or other such instances or resources, and share that script with other users. The script can relate to administrative or other such tasks, and can be encapsulated into a document, or other such expression, and stored to a network-accessible location. The owner of the document can designate permissions as to which users have rights to access and/or execute the script against their own virtual machines. An owner can grant permission to all users, no other users, or specific users. The script can include parameter values that can be set by the other users or links to specific executables or other objects, among other such options.