Application marketplace for virtual desktops

A system for accessing an application available from a data center of a program execution service, the system comprising:

• a Program Execution Service (PES) comprising a number of data centers, each data center including one or more physical computing systems configurable to execute one or more virtual desktop instances, each virtual desktop instance associated with a computing environment that includes an operating system configurable to execute one or more applications, each virtual desktop instance accessible by a computing device of a user of the PES via a network, the PES including an application marketplace accessible to search for one or more of the virtual desktop instances or one or more applications, the PES further comprising:
• a data center computer comprising a memory and a processor, the memory storing instructions that when executed by the processor cause the processor to:
• provide, to a user computing device associated with a user of the PES, access to the application marketplace for searching for an application to be executed by a virtual desktop instance;
• receive, by the application marketplace, a request from the user to access the application on the virtual desktop instance from the user computing device;
• determine an entity associated with the user, the entity one of a plurality of separate entities with access to the PES, each of the plurality of separate entities associated with entity-specific resource placement rules specific to the entity;
• select a resource placement rule from the entity-specific resource placement rules of the entity based at least in part on an identification of a user-group of the user, the user-group one of a plurality of user-groups determined by a role of the users included in the user-group, wherein different roles are associated with different resource placement rules within the entity-specific resource placement rules, wherein the resource placement rule specifies a maximum percentage of users from the user-group that are permitted to access computing resources on a first set of computing systems that share a physical computing resource, wherein additional users from the user-group access the computing resources on a second set of computing systems that do not share the physical computing resource reducing an amount of application down-time for the entity by managing distribution of the set of users among physical computing systems;
• access metadata associated with the user computing device, the metadata comprising information indicative of whether the user is authorized to access the application from the PES on the user computing device and whether the user is authorized to access the application;
• determine, based at least in part on the metadata and the resource placement rule, that the user is authorized to access the application on the user computing device;
• select the first set of computing systems of a data center to host the virtual desktop instance, the first set of computing systems selected based at least in part on the resource placement rule and an amount of users accessing the data center;
• determine that the maximum percentage of users from the user-group as specified in the resource placement rule are accessing the first set of computing systems, wherein users from other user-groups of the plurality of user-groups are permitted to access the computing resources on the first set of computing systems;
• and
• responsive to determining that the maximum percentage of users from the user-group are accessing the first set of computing systems, the data center computer is further programmed to:
• select the second set of computing systems of the data center to host the virtual desktop instance, the second computing system being accessed by less than the maximum percentage of users from the user-group;
• determine that an existing virtual desktop instance hosted by the second set of computing systems does not exist to satisfy the user request;
• instantiate the virtual desktop instance on a computing system from the second set of computing systems;
• cause the application to be executed from the virtual desktop instance on the on the computing system from the second set of computing systems;
• and
• provide, to the user computing device, access to at least a portion of the application from the virtual desktop instance on the computing system from the second set of computing systems.

Non-transitory physical computer storage comprising computer-executable instructions that when executed by a processor direct a computing system to perform a method for accessing an application available from a data center of a program execution service, the method comprising:

• providing, by a Program Execution Service (PES) to a user computing device associated with a user of the PES, access to an application marketplace for searching for an application to be executed by a virtual desktop instance, wherein the PES includes a plurality of data centers, each data center including one or more physical computing systems configurable to execute one or more virtual desktop instances, each virtual desktop instance associated with a computing environment that includes an operating system configurable to execute one or more applications;
• receiving, by the application marketplace, a request from the user to access the application on the virtual desktop instance from the user computing device;
• determining an entity associated with the user, the entity one of a plurality of separate entities with access to the PES, each of the plurality of separate entities associated with entity-specific resource placement rules specific to the entity;
• selecting a resource placement rule from the entity-specific resource placement rules of the entity based at least in part on an identification of a user-group of the user, the user-group one of a plurality of user-groups determined by a role of the users included in the user-group, wherein different roles are associated with different resource placement rules within the entity-specific resource placement rules, wherein the resource placement rule specifies a maximum percentage of users from the user-group that are permitted to access computing resources on a first set of computing systems that share a physical computing resource, wherein additional users from the user-group access the computing resources on a second set of computing systems that do not share the physical computing resource reducing an amount of application down-time for the entity by managing distribution of the set of users among physical computing systems;
• accessing metadata associated with the user computing device, the metadata comprising information indicative of whether the user is authorized to access the application from the PES and whether the user is authorized to access the application on the user computing device;
• determining, based at least in part on the metadata and the resource placement rule, that the user is authorized to access the application on the user computing device;
• selecting the first set of computing systems of a data center to host the virtual desktop instance, the first set of computing systems selected based at least in part on the resource placement rule and an amount of users accessing the data center;
• determining that the maximum percentage of users from the user-group as specified in the resource placement rule are accessing the first set of computing systems, wherein users from other user-groups of the plurality of user-groups are permitted to access the computing resources on the first set of computing systems;
• and
• responsive to determining that the maximum percentage of users from the user-group are accessing the first set of computing systems, the method further comprises:
• selecting the second set of computing systems of the data center to host the virtual desktop instance, the second computing system being accessed by less than the maximum percentage of users from the user-group;
• determining that an existing virtual desktop instance hosted by the second set of computing systems does not exist to satisfy the user request;
• instantiating the virtual desktop instance on a computing system from the second set of computing systems;
• causing the application to be executed from the virtual desktop instance on the second computing system of the data center;
• and
• providing, to the user computing device, access to at least a portion of the application from the virtual desktop instance on the computing system from the second set of computing systems.