Abstract: A virtual network verification service for provider networks that leverages a declarative logic programming language to allow clients to pose queries about their virtual networks as constraint problems; the queries may be resolved using a constraint solver engine. Semantics and logic for networking primitives of virtual networks in the provider network environment may be encoded as a set of rules according to the logic programming language; networking security standards and/or client-defined rules may also be encoded in the rules. A description of a virtual network may be obtained and encoded. A constraint problem expressed by a query may then be resolved for the encoded description according to the encoded rules using the constraint solver engine; the results may be provided to the client.

Abstract: Methods and apparatus for a client account versioning metadata manager for cloud computing environments are disclosed. A system includes a plurality of resources, a plurality of service managers coordinating respective multitenant network-accessible services, and a metadata manager. The metadata manager receives a multi-service account state view request. The metadata manager generates a representation of an administrative state of a client account indicated by the request with respect a plurality of services accessible by the client account, as of a time indicated in the request. The administrative state with respect to a particular service comprises an indication of an assignment to the client account of resources participating in implementation of the particular service.

Abstract: Technologies are provided for partially updating shingled magnetic recording (SMR) zones in SMR storage devices. An SMR storage device can receive and process a command to update a write pointer for an SMR zone to point to an arbitrary write position within the SMR zone. A partial SMR zone update command can be received and processed to modify part of the data stored in the SMR zone. A write position within the SMR zone where data to be modified is stored can be identified. Data stored in the SMR zone following the identified write position can be read to a temporary location and modified. A write pointer for the SMR zone can be updated to point to the identified write position. The modified data can then be written to the SMR zone, starting at the write position identified by the write pointer, or to another SMR zone of the storage device.

Abstract: Respective correlation metrics between token groups of a particular text attribute of a data set and a prediction target attribute are computed. Based on the correlation metrics, a predictive token group list is created. For various observation records of the data set, values of a derived categorical attribute corresponding to the particular text attribute are determined based on matches between the particular text attribute value and the predictive token group list. A measure of the predictive utility of the particular text attribute is obtained using correlations between the categorical attribute and the prediction target attribute.

Abstract: A system, method and computer-readable medium for request routing based on content popularity information are provided. A client computer transmits a request for content from a content provider. The content provider utilizes executable code, such as translation request code, for facilitating request routing utilizing popularity information. The translation request code, may direct a client computing device to request further translation request code and/or translation information. Thereafter, the client issues a DNS query with the translated information including popularity information. The content delivery network service provider can then either resolve the DNS query with an IP address of a cache component or transmit another alternative resource identifier that will resolve to the content delivery network service provider. The process can repeat until a DNS nameserver resolves a DNS query from the client computing device.

Abstract: Techniques are described for delivering one or more first resources of a page using a first security level, and delivering one or more second resources of a page using a second, different security level. A page is generated to include elements identifying resources to be presented in the page, and the elements may include security level identifiers indicating a security level to be employed in communicating the corresponding resource. Each security level may be associated with a set of security measures that ensure the integrity or confidentiality of the resource while it is communicated. The use of multiple security levels to communicate multiple resources may provide appropriate security for each resource, reducing latency and overhead in page generation, communication, and rendering.

Abstract: An extendable augmented reality (AR) system for recognizing objects. The AR system may incorporate plugins to improve the AR system's ability to recognize objects, such as by adding external matchable data or using external recognition algorithms. The plugins may be installed/activated dynamically by a user to expand the system's AR capabilities. The AR system may also incorporate plugins to improve the AR system's post-recognition features such as supplying a user with supplemental content or follow-up functionality. The AR system may filter communications with the plugins to centralize identification processes, to shield plugins, and to ensure plugins are only activated at appropriate times.

Abstract: A system includes a rack and one or more server systems mounted in the rack. A server system includes at least one sever node and each server node includes an array of devices including mass storage devices and at least one server device. Segments of the array of devices of a particular server node are mounted in sub-node chassis that include intra node connectors. Multiple sub-node chassis that each include devices such as mass storage devices or server devices of the sever node couple together via the intra node connectors when installed in a server system chassis to form a server node. Each server node of a server system may be a separate logical node. Also, the sub-node chassis of a server node may be configured for vertical airflow through the sub-node chassis in addition to cross airflow.

Abstract: A contribution encoder receives media from a source, encodes the media, and transmits the encoded media to a network-adaptive encoding system for eventual distribution to end users. The network-adaptive encoding system tests a network connection between the contribution encoder and the network-adaptive encoding system before transmission of the encoded media begins. The network-adaptive encoding system uses the results of the test to select appropriate values for parameters that define the encoding and transmission of the media. The selected parameter values are transmitted by the network-adaptive encoding system to the contribution encoder for use in encoding and transmitting the media.

Abstract: A technology is described for prioritizing a plurality of interruptible computing instances. An example method may include receiving a request to interrupt an executing interruptible computing instance that may be included in a group of interruptible computing instances having assigned instance priority values. The instance priority values may establish an order in which the interruptible computing instances may be interrupted. The interruptible computing instance may be identified that has a lower instance priority value as compared to other instance priority values assigned to the interruptible computing instances. The interruptible computing instance identified may then be terminated.

Abstract: Described are techniques for establishing communications sessions between devices. A command from a sender device to initiate a communications session with a recipient device may include information indicative of a recipient user profile. Correspondence between recipient information and sender contact data may be used to determine the recipient user profile. Prior to providing a communication request to the recipient device, recipient contact data may be determined using the recipient user profile. Correspondence between the sender user profile and the recipient contact data may be used to determine sender information indicative of the sender. This information may be provided to the recipient device in advance of the communication request to enable more rapid acceptance of the communication request and eliminate the delay that would be incurred if the recipient device determined the sender information responsive to the communication request.

Abstract: Methods and apparatus for shutting down a conveyor when an article moves past a discharge point are provided. A shutdown device includes a contact member disposed in a spaced relationship with a discharge end of a conveyor comprising a conveyor belt, wherein the contact member extends substantially across a width of the conveyor belt, wherein the contact member is positionable between a first position and a second position, a force regulator coupled to the contact member configured to set a minimum threshold force for moving the contact member from the first position to the second position, and a switch operably connected to the contact member, wherein the contact member causes the switch to toggle the conveyor between an operating mode when the contact member is in the first position and a shutdown mode when the contact member is in the second position.

Abstract: Embodiments herein describe a control system that determines a location of an item on a first conveyor belt which affects the transfer of the item from the first conveyor belt onto a second conveyor belt. The control system includes a distance sensor which determines a location of the item on the first conveyor (or a location of the item on a queue belt that provides the item to the first conveyor). Using the distance sensor, the control system can identify the offset of the item relative to the center of the first conveyor belt. The control system can then control the time at which the item transfers from the first conveyor belt to the second conveyor belt by, for example, speeding up or slow down the first conveyor belt to compensate for the offset or adjusting an induct time.

Abstract: Disclosed are various embodiments for predictive caching of content to facilitate instantaneous use of the content. If a user is likely to commence use of a content item through a client, and if the client has available resources to facilitate instantaneous use, the client is configured to predictively cache the content item before the user commences use. In doing so, the client may obtain metadata for the content item from a server. The client may then initialize various resources to facilitate instantaneous use of the content item by the client based at least in part on the metadata.

Abstract: An object-based data storage service receives a request to store a data object in association with a smart data storage tier. Based at least in part on characteristics of the data object, the object-based data storage service identifies and stores the data object in a first location corresponding to a first data storage tier. The object-based data storage service monitors access to the data object to identify a second set of characteristics of the data object. This second set of characteristics is used to determine that the data object is to be transitioned to a second data storage tier. The object-based data storage service, based at least in part on this determination, stores the data object in a second location corresponding to the second data storage tier.

Abstract: Techniques for automated application footprint discovery for application migration to containers are described. A snapshot of an application instance can be stored, the snapshot including the application instance and resources used by the application instance at runtime. The application instance can be run in an intermediate virtual machine, the intermediate virtual machine including at least one interceptor. At least one dependency of the application instance can be determined using the at least one interceptor while the application instance executes on the intermediate virtual machine. A template including the at least one dependency can be created and an application environment can be generated using the template.

Abstract: Technologies are provided for dynamically changing a size of a cache region of a storage device. A storage device controller writes data to the cache region of the storage device using a particular storage format. The storage device controller then migrates the cached data to a storage region of the device, where the data is written using a different storage format. A dynamic cache manager monitors input and output activity for the storage device and dynamically adjusts a size of the cache region to adapt to changes in the input and/or output activity. The dynamic cache manager can also adjust a size of the storage region. The storage device controller can automatically detect that the storage device has dynamic cache support and configure the storage device by creating the cache region and the storage region on the device.

Abstract: A posture assessment system is provided that uses an application programming interface (“API”), integrated into a computing device operating system, to assess the posture of the computing device. The API provides temporarily heightened access to the operating system, and executes code provided by the posture assessment system. The code may cause performance of various operations on the computing device, such as generating encoded representations of operating system components, performing computationally-expensive functions to verify execution of the code, and the like. The output of these operations can be sent to the posture assessment system for verification.

Abstract: A solid state storage card includes flash storage devices for storing user data and a serial peripheral interface (SPI) flash storage storing a first set of machine instructions. The solid state card also includes a plurality of processor cores coupled to the flash storage devices and SPI flash storage device. Each processor includes storage for storage of a second set of machine instructions configured to cause one of the processor cores to respond to access requests for the flash storage devices. Upon power-up, no storage in the solid state card contains any of the second set of machine instructions. When executed by one of the processor cores, the first set of machine instructions causes the processor core to initiate a download of the second set of instructions from a device external to the solid state card.

Abstract: A particular portion of a program which can be read from on-disk representations of the program as well as from memory images of the program is identified for use as a version discriminator. A first representation of the portion may be obtained from a first memory image of the program, corresponding to a first running instance of the program. The first representation may be compared to a second representation obtained at a development environment. Based on the results of the comparison, a particular version of the program corresponding to the first running instance may be identified. An indication of the particular version may be stored.

Abstract: Technologies are provided for secure sanitization of a storage device. A storage device can be configured to support an operational mode, into which the storage device is placed by default, and in which requests to cryptographically erase the storage device are rejected. The storage device can support a separate sanitization mode in which a request to cryptographically erase the storage device will be processed. Access to the sanitization mode can be restricted to trusted sources (such as a boot firmware of a computer connected to the storage device). The storage device can be configured to reject a command to place the storage device in the sanitization mode, unless the command is received during an initialization of the storage device. In at least some embodiments, the storage device can reject data access commands while it is in the sanitization mode.

Abstract: A processor configured to reduce the amount of time necessary for a mobile device to resume from a hibernation state is described. While in the hibernation state, power to all components of a mobile, except a motion sensor, may be powered off. The processor, upon receiving a signal from a wakeup sensor, causes the mobile device to initiate a transition from the hibernation mode to an awake mode. A validation sensor on the mobile device detects a user contact with the mobile device or user proximity with respect to the mobile device. Upon receiving a validation signal confirming validation of the transition from the hibernation state to the awake state, the processor resumes the transition to the awake mode. In the awake mode the mobile device may detect user input indicative of activating the mobile device. Upon receiving a signal indicating user input to activate the device, the processor may cause the device to become fully active, and ready for user interaction.

Abstract: A user may interact with a control interface in the course of interacting with electronic content. The control interface may include any user interface utilized to adjust various aspects of an application, including, but not limited to, scroll bars, sliders, and/or navigation windows. Input at the control interface may be received from the user indicating that the user desires to manipulate the electronic content (e.g., jump to another location in a movie) or, alternatively, that the user wishes to manipulate the control interface. Upon determining that the input is intended to manipulate the control interface, the control interface may be adjusted to display a control interface view that provides finer or coarser granularity, allowing the user to interact with the control interface with more accuracy.

Abstract: Systems and methods are provided for configuring and deploying decoy content over a network. The methods generate decoy content, including identifying information, based on information about network traffic in a virtual network associated with a user. Cause the decoy content to be sent in the virtual network. Determine, based at least in part on the identifying information, that at least the portion of the decoy content was used. In response to determining that the portion of the decoy content was used, alert the user that the decoy content was used.

Abstract: Components associated with application entities can be grouped into one or more component groupings. A grouping can include, for example, components that include or specify parameters and settings for a gameplay entity of a gaming application. The grouping of components enables a single component group to be displayed through an editor interface instead of all the individual grouped components, which simplifies the view through the interface. A user can select important parameters to be exposed at the group level, such that those parameters can be accessed and set without having to access and search through the individual grouped components. The grouping can also be saved and used to develop subsequent entities, which can simplify the development process and ensure that necessary components are included for specific entity types.

Abstract: Systems and methods are described for providing a predictive session-based search engine. A predictive session-based search engine may identify and pre-fetch data from various data sources that is likely to be accessed during a particular session. Data sources may include other search engines, databases, web servers, and other sources of information. A plug-in controller architecture, which may include templates, computer-executable instructions, application programming interface (API) calls, or other information that enables access to a particular data source, may be used to allow the predictive session-based search engine to obtain data from the data sources. The predictive session-based search engine may store and index the data it obtains, and may answer search queries during the session with data that is stored and indexed locally rather than retrieving data from the original sources.

Abstract: User interfaces may enable users to initiate voice-communications with voice-controlled devices via a Wi-Fi network or other network via an Internet Protocol (IP) address. The user interfaces may include controls to enable users to initiate voice communications, such as Voice over Internet Protocol (VoIP) calls, with devices that do not have connectivity with traditional mobile telephone networks, such as traditional circuit transmissions of a Public Switched Telephone Network (PSTN). For example, the user interface may enable initiating a voice communication with a voice-controlled device that includes network connectivity via a home Wi-Fi network. The user interfaces may indicate availability of devices and/or contacts for voice communications and/or recent activity of devices or contact.

Abstract: A method and system for analyzing text in an image is disclosed. A text localization and classification system accesses an annotated image comprising a plurality of text location identifiers for a given item of text. A neural network predicts the location of the given item of text using at least a first location identifier and a second location identifier. Optionally, the first location identifier comprises a first shape and the second location identifier comprises a second shape. A first loss is generated using a first loss function, the first loss corresponding to the predicated location using the first location identifier. A second loss is generated using a second loss function, the second loss corresponding to the predicated location using the second location identifier. The neural network is enhanced with backpropagation using the first loss and the second loss.

Abstract: Techniques for providing and servicing listed repository items such as algorithms, data, models, pipelines, and/or notebooks are described. In some examples, web services provider receives a request for a listed repository item from a requester, the request indicating at least a category of the repository item and each listing of a repository item includes an indication of a category that the listed repository item belongs to and a storage location of the listed repository item, determines a suggestion of at least one listed repository item based on the request, and provides the suggestion of the at least one listed repository item to the requester.

Abstract: An electrical system for a vehicle may include a main power supply and a power supply controller electrically connected to the main power supply and configured to selectively electrically connect the main power supply to, and disconnect the main power supply from, a vehicle subsystem. The electrical system may also include a supervisor power supply controller configured to receive signals indicative of an operational status of the vehicle, and determine, based at least in part on the signals, expected signals associated with operation of a plurality of vehicle subsystems. The supervisor power supply controller may also receive signals associated with operation of a vehicle subsystem, and determine that the signals associated with operation of the vehicle subsystem are indicative of a fault. The supervisor power supply controller may cause the power supply controller associated with the vehicle subsystem to disconnect the vehicle subsystem from the main power supply.

Abstract: An API gateway hosts one or more APIs for use by client applications. The API gateway includes facilities for maintaining state information on behalf of a client application, a backend service, or an API. The state information may include cached information retrieved from backend services as well as cached results returned from the API to the customer applications. Cached results generated by the API may be shared across a number of customers or across a set of APIs managed by a single API gateway. Cached information associated with a backend service may be shared across a number of APIs that access the backend service. In some examples, session information associated with secure connections between an API gateway service and a backend service provider is maintained by the API gateway service and shared among APIs hosted by the API gateway service.

Abstract: A service provider system may implement a notification service that manages actionable notification messages received from other services on behalf of a customer organization and its end users. An IT administrator of the customer organization may create and configure message inboxes to be maintained by the notification service. The messages stored in each inbox may be partitioned by source, type, targeted (authorized) recipients, or an associated message topic. Each message may include an identifier of the inbox to which it is directed, and active elements that, when selected by a recipient, cause a corresponding action to be performed. The service from which a message is received may, in response to a message recipient taking one of the available actions, submit a request to the notification service to update the message state. The notification service may provide APIs through which the other services and message recipients interact with the notification service.

Abstract: A device includes a first radio controller, a second radio controller, and a processor. The processor is configured to execute instructions for determining that a first signal strength of a signal received from a remote device by a first antenna electrically connected to the first radio controller is less than a minimum signal strength threshold for communications using the first antenna, identifying a network process configured to communicate with a remote device using the first radio controller or the second radio controller, and determining that the processor is not executing the network process. The processor is further configured to execute instructions for, determining a second signal strength of a second signal received from the remote device by a second antenna, determining the second signal strength is greater than the first signal strength, and causing the first radio controller to communicate using the second antenna.

Abstract: Methods and systems for performing MapReduce optimization for partitioned intermediate output are disclosed. Partitions of a set of input data are provided to a plurality of worker nodes. Each worker node performs a first stage of computation on a respective partition of the input data to produce a respective partition of intermediate output data. Each worker node performs a sort operation on the respective partition of intermediate output data to produce a respective partition of sorted intermediate output data. Each worker node performs a second stage of computation on the respective partition of sorted intermediate output data to produce a respective partition of final output data.

Abstract: Artificial intelligence is used to identify significant records in a computer database. The records in the database are ordered in accordance with a first factor. Records in the database which have a position less than a first threshold are identified to provide second-level records. At least some of the second-level records, but only the second-level records, are arranged into a plurality of groups based on a second factor. For at least one of the groups, the second-level records in the group are then ordered in accordance with a third factor. At least one second-level record in the group is selected, where the selected second-level record has a position greater than a second threshold. Information regarding the selected second-level record is then provided, such as to a client device.

Abstract: A computing device can obtain a session key for encrypting data that is communicated between a client device and the computing device. The computing device can receive, from the client device, an encrypted request for data. The encrypted request can be encrypted by the client device using the session key. The data requested can be stored on a second computing device. The computing device can send, to the second computing device, a copy of the session key and the encrypted request for data. The second computing device can decrypt the data using the session key and can also encrypt data responsive to the request using the session key.

Abstract: A pool of virtual environments, such as virtual machine instances and containers, can be maintained by an intermediary service, where the virtual environments can execute a specified application or service. When a request is received from a client for a connection to a resource, the intermediary service can allocate one of the virtual environments for the client and enable the client and virtual environment to communicate as if the virtual environment is executing on dedicated hardware. The virtual environment can be virtually isolated on a host machine, whereby session data for the client is stored locally in memory and then deleted at the end of the session when the virtual environment is destroyed, in order to prevent the data from being accessible between sessions and preventing multiple clients or customers from sharing the same environment over time.

Abstract: Techniques providing an email service for particular activities may be described. For example, an email message sent by an entity to an email address of a user may be received. The email address may identify an email box accessible to the user via a user interface of the email box. The email message may describe a status of an item ordered by the user from the entity. The description may use a format specific to the entity. A summary may be generated based on the email message. The summary may describe the status of the item in a different format. This format may be common to generated summaries, such that the summary may include fields common to another summary generated for another email message of another entity. The summary may be provided for presentation in the user interface of the email box.

Abstract: An intermediary device may be configured to allow an authorized visitor to access a secure facility (such as a home) on behalf of an owner. The intermediary device may generate an authenticator and provide the authenticator to a service provider, who may then present the authenticator to the intermediary device upon arriving at the facility. The intermediary device may unlock or open, or lock and close, any doors within the facility as necessary in order to grant access to a specific portion of the facility and restrict access to other portions of the facility. The intermediary device may also capture, or cause the capture of, images or other data regarding actions taken by the service provider, and establish a communications channel with the owner for the exchange of information or data regarding such actions, or any events or conditions of the facility.

Abstract: A communication system and method for the utilization of social networks to provide computing devices operational information. The computing devices access one or more social networks and associate with an account of a specified user. The computing devices can maintain social network profiles that provide configuration information of the computing device. The computing devices can process information provided profile updates to cause a configuration of the client device. The computing devices can also process social network communications to process operational parameters of the client device.

Abstract: Described herein are systems and methods of determining a distance between an object depicted in an image and an imaging device that captured that image. In particular, the disclosure discusses that an image may be separated into multiple derivative images, each of which is associated with a different wavelength of light. In some embodiments, an image may be separated into images associated with wavelengths of primary colors (e.g., red, green, and blue). Once separate images have been created, a sharpness value may be determined for each image. A distance between the object and the imaging device may then be calculated based on sharpness values associated with each of the separate images.

Abstract: Systems and methods are described for conducting static analysis of code invoking network-based services to identify, without requiring execution of the code, errors that may be introduced due to the invocations of the network-based services. A system is provided that may analyze code to detect both direct invocations of services, as well as indirect invocations caused by the direct invocations. The system can model inputs and outputs of directly or indirectly invoked services to identify errors in parameters passed to those services, even when the errors are not apparent from an analysis of the code in isolation. In some instances, the system can traverse a “call graph” of all services invoked by code either directly or indirectly to trace parameter errors through multiple levels of indirection.

Abstract: A system assesses a security configuration proposed for production on a target computer system. The system may receive the security configuration proposed for production and obtain telemetry metrics generated based on security configurations implemented on one or more computer systems of the service provider. The system may assess a security configuration proposed for deployment based on telemetry metrics and generate status information based on the assessment. An authorization recommendation may be provided based whether the status information indicates that the proposed security configuration satisfies one or more conditions.

Abstract: A web services system includes a plurality of computing devices configurable to implement a plurality of compute instances of a provider network. One or more of the computing devices is configured to implement a network device and a resource manager. The network device is configured to receive traffic directed to an application. The resource manager is configured to determine an amount of computing resources employed by the network device to process a first workload presented to the network device over a predetermined precedent time interval, to determine, based on the amount of computing resources employed by the network device, an amount of computing resources needed by the network device to process a second workload; and to allocate the amount of computing resources to the network device.

Abstract: Techniques are described for providing virtual networking functionality for managed computer networks. In some situations, a user may configure or otherwise specify a logical network topology for a managed computer network with multiple computing nodes that includes one or more virtual networking devices each associated with a specified group of the multiple computing nodes. Corresponding networking functionality may be provided for communications between the multiple computing nodes by emulating functionality that would be provided by the networking devices if they were physically present and configured to support the specified network topology. In some situations, the managed computer network is a virtual computer network overlaid on a substrate network, and the networking device functionality emulating includes receiving routing communications directed to the networking devices and using included routing information to update the specified network topology for the managed computer network.

Abstract: A user interface is provided that displays hierarchical and/or relational information, such as information related to the topology of a computer network. The user interface provides a set of enclosed shapes arranged to present a set of nested regions to a network administrator. Each nested region represents a level of a hierarchy, and each region is segmented to represent individual elements within the hierarchy level. In one embodiment, the outmost ring is segmented to represent various networks. The middle ring is segmented to represent various subnets, with the arc of each network segmented to represent one or more subnets associated with a corresponding network. The innermost ring includes elements that represent individual data element. Connections between data elements are shown with lines extending across a shared interior region. In various embodiments, the lines may be given colors, animations, or patterns to indicate various properties of a relationship.

Abstract: Disclosed are systems, methods, and other embodiments relating to event processing. A plurality of events from a plurality of services are buffered in a server, each of the services being implemented in at least one service server. An indexed storage of the events is performed in a data store. Metrics are generated from the events, where a condition associated with an operation of the services may be determined from the metrics.