Abstract: A system can maintain a first data store that stores first associations between subjects and first attributes, and a second data store that stores second associations between second attributes and permissions. The system can receive a query that identifies a user account and a resource. The system can determine, from the first data store and a context of the user account in initiating the query, first permissions for the user account with respect to the resource and given the context. The system can determine, from the second data store and the context, second permissions that are a precondition to access the resource given the context. The system can determine, based on whether there is an overlap between the first permissions and the second permissions, whether to approve the query. The system can respond to the query based on a result of the determining whether to approve the query.

Abstract: One or more multi-service network traffic controllers are established for a distributed system. The controllers are connected to traffic control implementation units at a first service and a second service. Based at least in part on data collected from a traffic control implementation unit deployed at the second service, a modification to be made to a parameter of a traffic control implementation unit deployed at the first service is determined at the controllers. The modification is applied at the first service, and results in a change to a traffic flow of the second service.

Abstract: One or more multi-service network traffic controllers are established for a distributed system. The controllers are connected to traffic control implementation units at a first service and a second service. Based at least in part on data collected from a traffic control implementation unit deployed at the second service, a modification to be made to a parameter of a traffic control implementation unit deployed at the first service is determined at the controllers. The modification is applied at the first service, and results in a change to a traffic flow of the second service.

Abstract: Some implementations include displaying media content items on a home screen of a computing device. A display order for a list of media content items may be determined based, at least in part, on a predicted likelihood that an individual one of the plurality of media content items will be selected. A home screen of a user interface may be displayed, according to the determined display order, with a list of a plurality of media content items that are available to the computing device.