Network-accessible service for executing virtual machines using client-provided virtual machine images

A system, comprising:

• one or more computing systems having one or more processors;
• and
• at least one memory including instructions that upon execution by at least one of the one or more processors enable the system to:
• receive a request to execute a virtual machine of a customer of a program execution service, wherein the request specifies a group of the virtual machines, wherein the group is identified by one or more network address ranges, and wherein the group is associated with a set of access policies for managing incoming and outgoing communications for virtual machines in the group;
• select a physical host of the program execution service to use for execution of the virtual machine;
• and
• manage, based at least in part on the set of access policies, incoming and outgoing communications for the virtual machine executing on the physical host, wherein said management provides the network isolation.

One or more non-transitory computer readable media storing program instructions that when executed on one or more processors enable the one or more processors to implement at least a portion of a program execution service and to:

• receive a request to execute a virtual machine of a customer of the program execution service, wherein the request specifies a group of the virtual machines, wherein the group is identified by one or more network address ranges, and wherein the group is associated with a set of access policies for managing incoming and outgoing communications for virtual machines in the group;
• select a physical host of the program execution service to use for execution of the virtual machine;
• and
• manage, based at least in part on the set of access policies, incoming and outgoing communications for the virtual machine executing on the physical host,
• wherein said management provides the network isolation.