1. A computer-implemented method, comprising: under the control of one or more computer systems configured with executable instructions, receiving, at an interface of a data storage service, a request to interact with a data object maintained by the data storage service; determining that the request violates one or more constraint conditions based at least in part on the request by at least determining that the request lacks a value indicated by the one or more constraint conditions as to be included in requests; and providing, in response to the request, obfuscated active decoy data, as a result of the determination, where the obfuscated active decoy data comprises a payload containing code that is configured to cause depletion of one or more resources used by a computer system executing the code.