Abstract: Methods and apparatus for flexible capacity pool reservations for network-accessible resources are disclosed. A system includes a plurality of resources of a provider network, and a resource manager. The resource manager receives a reservation modification request from a client that has an existing reservation for an original resource capacity and an original reservation duration. The modification request specifies a desired resource capacity. The reservation manager identifies resources to provide the desired capacity, and determines pricing components for the requested modification based on the difference between the desires resource capacity and the original capacity and on the remaining portion of the duration of the existing reservation. The resource manager modifies the reservation as requested and notifies the client regarding the pricing components.

Abstract: A network address assigned to a virtual network interface of a packet transformation node of a flow management service is identified. A packet of a particular network flow associated with an application implemented at an isolated virtual network is sent to the network address. Using a rewrite directive generated at a rewriting decisions node of the service and cached at the packet transformation node, a transformed packet corresponding to a packet received at the packet transformation node is generated and transmitted to a destination.

Abstract: Disclosed are various embodiments for an instance monitoring service. Instances are associated with alarm conditions indicating a deviation in the operational health of the instance. Upon an alarm condition being satisfied, a remedy operation may be applied to restore the operational health of the instance. A notification system may let customers know of satisfied alarms, and confirm or cancel remedy operations.

Abstract: An audio/video (A/V) recording and communication doorbell comprises a camera, a front button, and a motion sensor. The camera and the motion sensor are configured to work in tandem to detect motion in a field of view of the A/V recording and communication doorbell, such that a first one of the camera and the motion sensor detects motion and the other one of the camera and the motion sensor independently verifies the motion detection before an alert is sent to a user's client device. In this manner, user alerts from false alarm motion detections are reduced.

Abstract: Disclosed are various embodiments for synchronizing authentication sessions between applications. A token exchange service receives a first authentication token from a client computing device. The first authentication token corresponds to a registration of an application of the client computing device for a user account. The first authentication token is validated. A second authentication token is generated, corresponding to a browser-based session for the user account. The second authentication token is sent to the client computing device.

Abstract: Techniques are generally described for catch-up pacing for video streaming. In various examples, a camera may capture first video data representing a physical environment. In some examples, motion in the physical environment may be detected from the first video data. A communication channel may be established with a remote computing device. In some examples, the camera may capture second video data. In various examples, the second video data may be captured during a period of time corresponding to the establishment of the communication channel. An available bandwidth of the communication channel may be determined. The available bandwidth may comprise a first bitrate. Third video data may be captured by the camera. The third video data may be encoded at a second bitrate lower than the first bitrate. The first video data, second video data and third video data may be sent to the remote computing device.

Abstract: Timecode is encoded in video using colored regions of pixels. Pixels in adjacent regions in frames of a video are color-coded to encode timecode. For example, two adjacent regions might both be colored red to encode the numeral ‘0.’ As another example, two adjacent regions might be colored red and purple, respectively, to encode the numeral ‘1.’ The regions can be the same size as a macroblock (e.g. 16×16 pixels) used by a video encoder and aligned to macroblock boundaries for efficient encoding. The colors of the adjacent regions can be decoded to obtain the timecode. The timecode might then be burned into frames of the video, displayed non-destructively over the video, or used in another manner.

Abstract: Described are techniques for maintaining the accuracy of a precomputed output by determining sets of instructions for accessing and extracting values from individual data sources used to determine the output. Responsive to the determination of a modification to data in the data source, the data sources may be accessed to determine values that may be used to modify the precomputed output. The sets of instructions for accessing the data sources may be determined based on the relationships between different data sources and between one or more data sources and the output.

Abstract: Technologies to improve band edge channel performance for radios are described. One device includes a baseband processor with an Orthogonal Frequency Division Multiplexing (OFDM) physical layer (PHY) parameter structure. The OFDM PHY layer parameter structure includes first parameter information that controls operation of an OFDM PHY in a first mode. The baseband processor establishes a wireless communication link with a second device and transmits first data to the second device in the first mode using a transmit power level. The baseband processor determines that the device is connected with the second device on a band edge channel that is adjacent to a restricted frequency band. The baseband processor modifies the first parameter information to second parameter information, the second parameter information controls operation of the OFDM PHY in a second mode. The baseband processor transmits transmit second data to the second device in the second mode using the transmit power level.

Abstract: Generally described, systems and methods are provided for monitoring and detecting causes of failures of network paths. The system collects performance information from a plurality of nodes and links in a network, aggregates the collected performance information across paths in the network, processes the aggregated performance information for detecting failures on the paths, analyzes each of the detected failures to determine at least one root cause, and initiates a remedial workflow for the at least one root cause determined. In some aspects, processing the aggregated information may include performing a statistical regression analysis or otherwise solving a set of equations for the performance indications on each of a plurality of paths. In another aspect, the system may also include an interface which makes available for display one or more of the network topology, the collected and aggregated performance information, and indications of the detected failures in the topology.

Abstract: A client establishes a network session with a server. The network session is used to establish an encrypted communications session. The client establishes another network session with another server, such as after terminating the first network session. The client resumes the encrypted communications session over the network session with the other server. The other server is configured to receive encrypted communications from the client and forward them to the appropriate server.

Abstract: A subnet of a logically isolated network within a provider network may be shared between client accounts of the provider network. A request to share a subnet of a logically isolated network created for one client account with another client account may be received. A link between an account object for the other client account and a shared subnet object for the subnet may be stored. When a request to host a resource with the subnet is received, an evaluation of the graph may indicate whether the request to place the host is permitted. If permitted, the resource for the other client host may be hosted within the subnet.

Abstract: Printed circuit boards (PCBs) may include a heat sink configured to draw heat from a surface-mounted component through the PCB toward a side of the PCB opposite a side having the surface-mounted component. The heat sinks may be single piece components that extend at least partially through the PCB. In some embodiments, the PCB may include connectors that interface between the PCB and a heat sink, or possibly other components.

Abstract: Methods for authenticating a user account are generally described. In various examples, the methods may comprise performing a first handshake comprising sending authentication data to a first computing device. The authentication data may include a handshake identifier, a user token, and an encryption key. In some examples, the methods may further comprise storing the handshake identifier, the user token, and the encryption key in a database. The methods may further comprise receiving a request for verification of a transaction. The request may comprise the handshake identifier and an encrypted user token. The user token and the encryption key may be retrieved from the database based at least in part on the handshake identifier of the request. The encryption key may be used to decrypt the encrypted user token. A determination may be made that the decrypted user token matches the user token retrieved from the database.

Abstract: An automated aerial vehicle (AAV) and system for automatically detecting a contact or an imminent contact between a propeller of the AAV and an object (e.g., human, pet, or other animal) are described. A safety profile for the AAV may be selected based on various factors including a position or configuration of the AAV. When a contact or an imminent contact is detected, the selected safety profile may be executed to reduce or avoid any potential harm to the object and/or the AAV. For example, if a contact with a propeller of the AAV by an object is detected, the rotation of the propeller may be stopped to avoid harming the object. Likewise, an object detection component may be used to detect an object that is nearing a propeller, stop the rotation of the propeller, and/or navigate the AAV away from the detected object.

Abstract: An archival data storage service dispatches a first robotic device of a data storage library to perform a first task that involves moving a first data storage tape from a tape drive to a slot of the data storage library. The service select a second task to be performed by a second robotic device, which can be performed without the first robotic device causing delay of the second task. While the first robotic device is performing the first task, the archival data storage service dispatches the second robotic device to perform the second task.

Abstract: Resource management techniques, such as cache optimization, are employed to organize resources within caches such that the most requested content (e.g., the most popular content) is more readily available. A service provider utilizes content expiration data as indicative of resource popularity. As resources are requested, the resources propagate through a cache server hierarchy associated with the service provider. More frequently requested resources are maintained at edge cache servers based on shorter expiration data that is reset with each repeated request. Less frequently requested resources are maintained at higher levels of a cache server hierarchy based on longer expiration data associated with cache servers higher on the hierarchy.

Abstract: In one embodiment, an inventory storage system has a vertical stack of storage modules. Each storage module has first and second conveyor segments that carry storage containers along a longitudinal direction between first and second modules ends, and third and fourth conveyor segments that carry the containers between the first and second conveyor segments at the first and second module ends, respectively. The conveyor segments define a movement path having a closed shape, and the storage module translates the containers around the movement path until a desired one of the containers is presented at one of the first and second module ends. The system also has a multi-directional elevator having a platform. The elevator moves the platform over the vertical stack along at least one of the longitudinal direction and a lateral direction, and lowers the platform into an interior of the vertical stack.

Abstract: Systems, methods, and computer-readable media are disclosed for an improved database. The systems, methods, and computer-readable media described herein may enhance the response time of databases and improve user experiences. In an example method described herein, a database monitoring system may receive instructions to perform one or more data monitoring operations comprising counting an occurrence of a first value within at least a portion of items stored in a database. The method may include determining a length of a first window of time and fetching, from a first location of a data store of the database, data indicative of a total count of the occurrence of the first value at a time associated with the beginning of the first window of time. In turn, the monitoring system may store data representing the first count in the first memory.

Abstract: Techniques for migrating source code to a virtual compute service are described. The migration of source code is assisted by metadata that identifies portions of the source code—for example, one or more classes, methods, functions, subroutines, and so forth—desired to be replicated by one or more virtual compute service functions executing in the virtual compute service. One or more virtual compute service functions are created at the virtual compute service that implement the functionality of the identified portions of source code. The identified source code can be refactored to invoke the corresponding virtual compute service function(s) in the virtual compute service using, for example, application programming interface (API) calls sent over a network to the service provider system. In this manner, the external functional behavior of the source code can remain the same while internally taking advantage of the benefits offered by a virtual compute service.

Abstract: A control system for an automated singulation system is provided. The control system detects a presence of a first item on a first conveyor and detects a presence of a second item on a second conveyor while the first item is present on the first conveyor. The second conveyor transfers items onto the first conveyor and is at a lower height than the second conveyor. The first conveyor is oriented perpendicularly with respect to the second conveyor. In response to detecting the presence of the second item, a location of the first item along a length of the first conveyor is determined. The first conveyor and the second conveyor are controlled based at least on the location of the first item.

Abstract: A file synchronization service generates a listing of files stored on a local data volume by executing a plurality of threads corresponding to directories of the data volume. Files to synchronize with a remote data storage service are identified based on comparison of the listed files with cached data indicative of files stored by the remote data storage service. A plurality of file synchronization requests are sent to the remote data storage service, where the plurality of files are sent in an order that is determined at least partly based on a scaling characteristic of the remote data storage service.

Abstract: Technologies are disclosed for generating a machine image from a software package. A machine image build service receives a request to create a machine image, such as by way of a network services application programming interface (API). The request can include the software package and a selection of an operating system. The machine image build service utilizes a workflow service to execute a workflow for generating the machine image. The workflow causes a virtual machine instance that utilizes the specified operating system to be instantiated by an on-demand computing service. The software package is installed in the virtual machine instance. A snapshot is taken of the virtual machine to create the requested machine image. The machine image can be scanned by a network service for compliance with one or more requirements for execution in a service provider network. The machine image can also be submitted to a machine image marketplace.

Abstract: Technologies are described for creating a function checkpoint for an instance of a program code function located on a first services hub and using the function checkpoint to load the instance of the program code function on a second services hub. An example method may include creating a function checkpoint for an instance of a program code function loaded in memory of a first services hub, where the function checkpoint may contain execution instructions and execution state data for the instance of the program code function. A second services hub included in the local device network may be identified, and the function checkpoint may be sent to the second services hub to allow execution of the instance of the program code function to be loaded on the second services hub using the function checkpoint.

Abstract: A community driven framework for travel planning is described. A service provider may determine an intended travel destination associated with a user and may access, from a database, candidate itineraries that are associated with the intended travel destination. The service provider may determine a suitability score associated with a candidate itinerary of the candidate itineraries, the suitability score indicating a likelihood that the candidate itinerary is of interest to the user. The service provider may select the candidate itinerary as an itinerary to recommend to the user and may cause the itinerary to be presented to the user via a device corresponding to the user.

Abstract: At least one instance of an application is launched in a set of software containers that are distributed among a set of virtual machine instances. A set of measurements corresponding to resource utilization by a software container of the set of software containers is obtained and a timestamp is generated for the set of measurements. The set of measurements is aggregated, with other sets of measurements corresponding to the set of software containers for the application, into a set of aggregated measurements grouped in a time window group, based at least in part on the timestamp, and, as a result of fulfillment of a condition, the time window group is outputted.

Abstract: Systems and methods are described for implementing a coordinator within a coordinated environment, which environment includes set of coordinated devices managed by the coordinator. The coordinator can be provisioned with a set of tasks, each task corresponding to a segment of code that can be executed by the coordinator, such as to manage the coordinated devices. To assist in execution of the tasks, the coordinator can include a remote interface that enables retrieval of task calls from an external system, such as an external on-demand code execution environment. The remote interface may periodically retrieve calls from the external system, and generate corresponding call messages on the coordinator to cause executions of called tasks. The remote interface can further obtain outputs of such executions, and report those outputs to the external system.

Abstract: Techniques described herein include a method and system for item demand forecasting that utilizes machine learning techniques to generate a set of quantiles. In some embodiments, several item features may be identified as being relevant to an item forecast and may be provided as inputs to a regression module, which may calculate a set of quantiles for each item. A set of quantiles may comprise a number of confidence levels or probabilities associated with calculated demand values for an item. In some embodiments, costs associated with the item may be used to select an appropriate quantile associated (e.g., based on a corresponding confidence level). In some embodiments, an item demand forecast may be generated based on the calculated demand value associated with the selected quantile. In some embodiments, one or more of the item may be automatically ordered based on that item demand forecast.

Abstract: A service provider may determine that an electronic message sent from a first user device of a first user to a second user device of a second user includes a URL. The service provider may cause the URL to be unfurled, resulting in a preview of the URL, using a combination of a server-based process and a client-based process and one or more policies. Based on the policies, a cloud-based unfurling service may attempt to obtain metadata associated with the URL in order to unfurl the URL. If the server-based unfurling process is unable to unfurl the URL, the first device and/or the second device may obtain the metadata and unfurl the URL. As a result, the recipient of the message (e.g., the second user) may view an unfurled URL that includes a preview of a website corresponding to the URL (e.g., a title/headline, representative text, images, videos, etc.).

Abstract: Described herein is a system for controlling access to a physical location. In some embodiments, a user device may provide user credentials to an input device of the access system. The input device may transmit the user credentials to a splitter, in some examples, permit access to the physical location via an access control board. In other examples, the input device may transmit the user credentials from a splitter to a network-connected gateway and then permit access to the physical location via the access control board. In either example, the power and signal wires may be reused for the splitter and/or network-connected gateway. The access control board may be coupled with an electrically-controlled device and configured to allow access to the physical location with one or more electronic signals to the electrically-controlled device. The electrically-controlled device may allow access when the user credentials are authenticated by the system.

Abstract: A provider network may implement dynamic port bandwidth for dedicated physical connections to the provider network. A dedicated physical connection to the provider network may be established with a reserved port bandwidth according to which a client network may access resources implemented in the provider network. Utilization of the reserved port bandwidth for the dedicated physical connection may be monitored. A bandwidth modification event may be detected, and in response to detecting the bandwidth modification event, provider network routing may be modified to modify the reserved port bandwidth for the dedicated physical connection to the provider network. The resources in the provider network may then be accessed according to the adjusted reserved port bandwidth.

Abstract: Devices and techniques are generally described for shared execution caching of contextual data. A first request to retrieve a first value from a first field of a database may be received. First entity identifier data associated with the first request may be determined. A second request to retrieve the first value from the first field may be received, the second request being associated with second entity identifier data. A determination may be made that a first host device is associated with the first entity identifier data and the second entity identifier data. In some examples, a first executable instruction effective to retrieve the first value from the first field of the database when executed by the first host device may be generated. In some examples, the first value may be retrieved from the first field of the database and sent to the first speech processing component.

Abstract: Techniques for tracking deliveries of items and verifying route adherence by a delivery person may be described herein. For example, first information may be maintained that identifies an association of a virtual asset with a machine-readable identifier. Further, second information may be generated and maintained that identifies an association of the machine-readable identifier with an item. Upon receiving an order for an item, delivery instructions may be generated and provided to an entity for delivering the item to a location. The delivery to the location may be verified based at least in part on geo-location information provided by a user device interacting with the machine-readable identifier of the item. In embodiments, the virtual asset associated with the machine-readable identifier may be associated with a user profile corresponding to the delivery location instead of with the machine-readable identifier.

Abstract: Features are provided for proactively grouping content for personalized content feeds based on the expected relevance of the content to groups or classes of users. Such proactive grouping can allow personalized (or semi-personalized) content feeds to be delivered with low user-perceived latency. The proactive grouping may be used in conjunction with a more computationally-intensive and higher-latency process for generating personalized feeds. A user's content feed may be provided using a two-phase delivery process in which an initial set of content for the feed is provided from the proactively grouped content collection with which the user is associated. While the user is viewing the initial set of content, the second phase of the delivery process may be performed in which additional content is selected specifically for the user.

Abstract: Described are techniques for modifying or creating classification data used to automatically classify items in an online marketplace or catalog, based on user interaction data. For one or more classification labels that may be applied to an item, user interaction data indicative of a count of instances that the label was accessed, a length of time during which the label was accessed, counts of instances that parent and child labels were accessed, and counts of instances that the label was accessed via a search query may be determined. Based on the user interaction data, an importance score for the label may be determined. Labels having an importance score greater than or equal to a threshold value may be included in classification data and used for subsequent classification of items. Labels having an importance score less than a threshold may be excluded from the classification data.

Abstract: Computing platforms may enable clients to use services to perform data processing jobs. A given job may utilize several services in a service call pattern. Each of these services consumes resources during execution. Described herein are systems, devices, and methods for determining costs associated with performance of a service call pattern. Weight data may be generated for each service using various metrics. As service calls are made in the service call pattern, an accumulated weight value is generated which is indicative of the weight data of the services in the service call pattern. The accumulated weight data may represent metrics such as amounts of resources consumed, latency, and transactions per second.

Abstract: A key distribution host determines a trust level of a user authentication server, wherein the trust level is based, at least in part, on one or more attributes of the user authentication server and provides one or more authentication keys to the user authentication server only if the trust level of the user authentication server is above a threshold value.

Abstract: A communication device that may be removably coupled to a USB port, the device having a processor and non-volatile memory and configured to execute code, including code for receiving a wireless transmission including an alert signal from a second device, where the second device is a wireless doorbell, code for sounding an alarm via an audio or visual indicator on the communication device in response to the alert signal, code for receiving input from a user and transmitting a response signal to the second device, and code for allowing two-way audio communication between the communication device and the wireless doorbell.

Abstract: Various approaches enable the detection of “viewed” content. For example, in digital advertising, when a user visits a web page, the web page can be rendered with an advertisement. Content is considered viewable when a user is given enough opportunity to view the content. Approaches described herein attempt to determine whether a user was given an opportunity to view such of such content by determining and using at least one of a viewability metric, performance activity level metric, snapshot of the content, or combination thereof.

Abstract: Techniques for secure remote access of computing resources are described herein. In some examples, when a client requests to access a computing resource, a computing service may generate a first password value for the computing resource and transmit the first password value to the client. The client may then generate and transmit key data for entry of the first password value back to the computing service. The client may generate and transmit the key data on the user's behalf, without requiring any activation or selection of keys by the user. Upon receiving the key data, the computing service may enter the first password value into the computing resource, thereby allowing the client to access the computing resource. The computing service may detect the accessing of the computing resource and may change the first password value to a second password value.

Abstract: An isolated packet processing cell of a packet processing service, comprising an action implementation node and a decision master node, is assigned to an application. An indication of processing rules of the application is transmitted to the decision master node. In response to receiving a particular packet, the action implementation node obtains a representation of an action (which is based on the processing rules) from the decision master node and executes the action.

Abstract: Techniques for performing conversation recovery of a system/user exchange are described. In response to determining that an action responsive to a user input cannot be performed, a system may determine a topic to recommend to a user. The topic may be unrelated to the original substance of the user input. The system may have access to various data representing a context in which a user provides an input to the system. The system may use these inputs and various data at runtime to make a determination regarding whether a user should be recommended a topic, as well as what that topic should be. The system may cause a question be output to the user, with the question asking the user about the topic, for example whether the user would like a song played, whether the user would like to hear information about a particular individual (e.g., artist), whether the user would like to know about a particular skill (e.g.

Abstract: Described are systems to manage the rate of energy delivery to computing devices. The computing devices may connect to a shared data and power distribution system. Techniques are described for distributing energy to the computing devices directly or via an energy and data delivery device using limits determined for the computing devices. Once the energy transfer to the computing devices is complete, the limits on the rate of energy delivery may be rescinded.

Abstract: A system, method, and computer readable medium for managing secure content by CDN service providers are provided. A network storage provider stores one or more resources on behalf of a content provider. A CDN service provider obtains client computing device requests for secure content. Based on processing first signature information, the CDN service provider determines whether the secure content is available to the client computing device. If the CDN service provider does not maintain the requested content, the CDN service provider transmits a request to the network storage provider. Based on second signature information and an identifier associated with the CDN service provider, the network storage provider processes the request based policy information associated with the identifier.

Abstract: A network switch having hardware thereon for transmitting probes to neighbor devices for exercising forwarding states (e.g., layer 2 and layer 3) on the switch. A light-weight agent resides on one or both of neighbor network devices and can be used to control the testing. One or more probes originating from the source network device (device A) from a local CPU are routed on the same network device A in hardware and sent out on a link towards a peer device (device B). Peer device B captures the probe using an Access Control List (ACL) hardware, and transmits the probes to a local agent for processing. The agent then transmits the probe back to the source network device and the source network device can determine whether the FIB lookup was correctly performed.

Abstract: A computer-implemented system and method for managing service requests are disclosed. The system includes a service provider, having a number of server devices, that provides a service response in response to a client service request. The service response includes a service instance ID associated with a server and a connection lease. A communication processing component routes a first client service request to one of the servers. Subsequent client service requests and responses are transmitted directly between the client device and the server device associated with service instance ID included in the first service response for the duration of the connection lease.

Abstract: Updates to a hierarchical data structure may be selectively replicated to other replicas of the hierarchical data structure. An update for a hierarchical data structure may be received and committed to the hierarchical data structure. A determination as to whether any other replicas of the hierarchical data structure have permission to receive the update may be made. For those replicas of the hierarchical data structure with permission to receive the update, the update may be provided to the replicas and committed to the replicas. Different types of replication techniques may be implemented, such as pull-based replication techniques or push-based replication techniques. Replication permissions for objects of the hierarchical data structure may be individually defined, in some embodiments.

Abstract: A method of preparing a packaging laminate includes conveying a mesh of paper material having perforations against a rigid edge causing, at substantially each perforation, a mesh portion at the leading side to have an average elevation lower than that of a mesh portion on the trailing side of the perforation. The method includes expanding the perforations into cells separated from one another by legs interconnected by nodes defined in the mesh Top and bottom surfaces of the legs and nodes are reoriented from an initial orientation substantially parallel with a direction of conveyance of the mesh to an expanded orientation oblique to the direction of conveyance, such that, in the expanded orientation, the top surfaces of the nodes are substantially parallel with each other. The method includes attaching an outer liner to at least some of the bottom surfaces so as to form the packaging laminate.