Virtual machine host health monitoring with untrusted sources in a cloud provider network

Abstract

Techniques for monitoring virtual machine host system health with untrusted sources are described. An agent receives a request to terminate a first virtual machine, the request including an untrusted status indicator originating from an environment executing untrusted software. The agent sends first termination event data to a differential health service of the provider network, the first termination event data including an indication of a host computer system and the untrusted status indicator. The differential health service determines that a first metric associated with the first host computer system differs from a second metric associated with a pool of host computer systems by at least a first amount and based at least in part on the untrusted status indicator, wherein the pool of host computer systems includes the first host computer system. The differential health service sends a second request to cause a corrective action to be taken.