Abstract: A replication coordination service may be implemented to coordinate data transfers between distributed databases according to a canonical data format. A coordination request may be received at a replication coordination service to transfer data between a primary distributed database and a recipient distributed database. Configuration information may be obtained for the primary and recipient distributed database to generate a data transfer scheme to be maintained at the replication coordination service. The primary distributed database may be provided with access to the data transfer scheme in order to perform the data transfer. In some embodiments, the replication coordination service may be implemented as part of the same provider network as the distributed databases.

Abstract: Technology for rapid deployment of computing instances from images is provided. In one example, a method may include instantiating a base computing instance and building an application layer on the base computing instance to create a modified computing instance. A machine image of the modified computing instance may be saved. The modified computing instance may be instantiated based on the machine image and a customer-defined configuration may be applied to the modified computing instance to obtain a configured computing instance.

Abstract: A technology for providing a test environment is provided. In one example, a method may include defining a macro task for an unstructured lab in a service provider environment, the macro task including a task definition and expected values for a plurality of sub-tasks within the macro task. A request to participate in the unstructured lab may be received from a client device and the macro task may be provided to the client device in response to the request. Metrics may be collected from the unstructured lab using a metrics collector. Completion of the macro task may be analyzed by comparing the metrics to the expected values and a report indicative of performance of the macro task may be provided.

Abstract: A technology is described for detecting a failure of a distributed system component. An example method may include registering a declarative file that may identify a distributed computing cluster in a service provider environment and provide failure criteria used to detect a failure of a distributed system component included in the distributed computing cluster. Distributed system components included in the distributed computing cluster may then be identified using information included in the declarative file. A distributed system component included in the distributed computing cluster may then be queried according to query criteria provided by the declarative file and a failure state of the distributed system component included in the distributed computing cluster may be identified based in part on a result of querying the distributed system component.

Abstract: A computer security threat sharing technology is described. An example method may include receiving security threat information transmitted over a computing network via a multi-streaming data service. The security threat information may relate to a recognized computer security threat detected by a first network component. The security threat information may then be correlated with additional security threat information received via the multi-streaming data service that may be detected by a second network component that may be interconnected to the first network component by way of the multi-streaming data service. A computer security threat associated with correlated security threat information may then be identified, and the computer security threat may be communicated to a plurality of network components via the multi-streaming data service.

Abstract: A method is described for distributing a data set. The method may include dividing a data set into a number of data groupings based on a data set attribute value. The groupings of data may be stored in a data store and may be associated with metadata that describes a grouping of data. A grouping of data may be distributed by generating a reference that may be used to access the grouping of data in the data store. The reference may include information that enables access to the grouping of data. When presented, the information included in the reference may be authenticated whereupon the grouping of data may be provided.

Abstract: Technology is described for providing a secure transfer of a virtual computing resource between at least two entities in a computing environment. An ownership transfer account is created and configured to enable a transfer of virtual computing resources between a first customer account and a second customer account of a service provider network hosted within a service provider environment, using one or more computing systems. Virtual computing resources owned by the first customer account are tagged using the one or more computer systems. The ownership of the virtual computing resources that are tagged is transferred to the ownership transfer account, using the one or more computer systems. The transfer of the virtual computing resources to the ownership transfer account is verified. The ownership of the virtual computing resources is transferred from the ownership transfer account to the second customer account.

Abstract: Technology is described for providing data exchange services. A set of definitions for a data exchange service that is accessible via a data exchange domain may be received. The data exchange service may be configured to facilitate an exchange of device reporting information transformed using the set of definitions. The exchange may be between a first device and a second device. The device reporting information may be received from the first device. The first device may be registered with the data exchange service. The device reporting information may be in accordance with the set of definitions. The device reporting information may be forwarded to a second device via the data exchange service. The device reporting information may be converted to a data format that is readable by the second device, and the device reporting information may be forwarded to a second device via the data exchange service.

Abstract: A technology for a streaming data marketplace is provided. In one example, a method may include requesting to receive a first stream of data from a first source via the streaming data marketplace. The first stream of data may be received and then correlated and combined with data from a second source as a combined stream. The combined stream may then be published to the streaming data marketplace.

Abstract: Methods and apparatus for a secure time service are disclosed. A time server including a time source, a cryptographic key and a cryptographic engine is instantiated within a provider network. A time service endpoint receives a timestamp request from a client. The endpoint transmits a representation of the request to the time server, and receives, from the time server, an encryption of at least a timestamp generated using the time source. A response comprising the encryption of at least the timestamp is transmitted to the requesting client.

Abstract: Technology for laser communications is provided. In one example, a method may include generating a communication for transmission from a first terrestrial computing device to a second terrestrial computing device and encoding the communication as an optical transmission from a first laser array in communication with the first terrestrial computing device. The optical transmission may be transmitted, using the first laser array, to a first satellite and relayed from the first satellite to a second satellite using a second laser array at the first satellite. The optical transmission may be further relayed from the second satellite to the second terrestrial computing device using a third laser array at the second satellite. The lasers in the first, second and third laser arrays may be low power laser diodes configured for a power level less than 1 kW.

Abstract: Technology is described for modifying user service environments. A geographical location of a mobile device may be received. The geographical location of the mobile device may trigger a modification to a user service environment that is associated with the mobile device. The user service environment may be modified based on the geographical location of the mobile device.

Abstract: A technology is described for a software container recommendation service. An example method may include collecting utilization metrics for an application hosted on a computing instance. The utilization metrics may be a measure of computing resources used by the application. The utilization metrics may be analyzed to determine a level of computing resources for the computing instance used by the application. A software container configuration for the application may be determined based at least in part on the utilization metrics when analysis of the utilization metrics indicates an underutilization of computing resources by the application. The specifications of the software container configuration may then be provided to a customer.

Abstract: Methods and apparatus for client-premise resource control using provider-defined interfaces are described. A set of programmatic interfaces enabling clients to submit registration requests is implemented. A registration request indicates resources located at a data center external to a provider network as candidate targets for control operation requests issued via a different set of programmatic interfaces associated with a service of the provider network. A network connection is established between a particular resource indicated in a registration request, and an administrative resource located within a data center of the provider network. In response to a particular control operation request received via a programmatic interface of the different set, a control command is transmitted from the administrative resource to the particular resource via the network connection.

Abstract: Systems and methods are disclosed which facilitate monitoring of usage information associated with services implemented within a hosted computing environment. Providers of a service, or other authorized parties, may be enabled to associate one or more descriptors with a service. Thereafter, each service instances may be monitored for such descriptors. By correlating usage information of instances with specific descriptors, usage information for the descriptor may be generated. In some instances, usage information corresponding to a descriptor may be utilized to monitor license agreements associated with services including the descriptor. Further, use of descriptors may reduce or eliminate the need to associate services with physical attributes of hosting computing devices, such as media access control addresses.

Abstract: Methods and apparatus for managing pooled client-premise resources via provider-defined interfaces are described. A pool management request is received from a client via a programmatic interface implemented at a provider network, indicating at least one resource located at a data center external to the provider network. An activation status of the resource within a pool is to be managed by a service of the provider network. A network connection between an administrative resource of the service, located within the provider network, and a control module instantiated on behalf of the service at the external data center is established. A command is transmitted from the administrative resource to the control module to activate the particular resource.

Abstract: Disclosed are various embodiments for an application inventory application. Computing resource usage data and configuration data is obtained for machine instances executed in a cloud computing architecture. The usage data and configuration data are used as factors to identify applications executed in the machine instance. Reports embodying the application identifications are generated.

Abstract: A computer security threat sharing technology is described. A computer security threat is recognized at an organization. A partner network graph is queried for security nodes connected to a first security node representing the organization. The first security node is connected to at least a second security node representing a trusted security partner of the organization. The second security node is associated with identification information. The computer security threat recognized by the organization is communicated to the trusted security partner using the identification information associated with the second security node.

Abstract: In an application runtime environment, an application may have multiple components that are loaded at or prior to execution of the application. An online storage service is used to store up-to-date versions of the components, along with a source manifest that indicates version numbers of the up-to-date versions. Upon application startup, the application retrieves the source manifest to determine whether updated versions are available. Upon identifying updated versions, the application downloads the updated versions and loads or reloads them into the runtime environment prior to initiating the main functionality of the application.

Abstract: A data licensing technology is described. A dataset is provided with license tags attached to data items in the dataset. A license file is deployed having a license tag. A query is run against the dataset with the license file, and data items are filtered out that do not have the license tag attached.