Abstract: Pattern based detection of data usage is facilitated using data injection. Data values are injected in one or more storage locations accessible to a plurality of services or included in service requests. Service interactions among the services are compared to a set of patterns. The set of patterns are configured to match the data values. By comparing the service interactions to the patterns, one or more of the service interactions are determined to include individual ones of the data values. Data are generated indicating a presence of the data values in the services.

Abstract: Implementations for selecting processing settings based on a device characteristic are described. A content signal, such as an audio signal or a video signal, is received. A characteristic of an input device and/or an output device is then determined and one or more processing settings for processing the content signal are determined based on the characteristic of the input device and/or the output device. The content signal is then processed based on the one or more settings and the processed content signal is sent for output. Feedback regarding the quality of the processed content signal is received. If the quality of the processed content signal is unacceptable, then one or more of the signal processing settings can be changed by deactivating a setting or changing a parameter of a setting.

Abstract: Viewers of a video stream may generate video clips including different portions of the video stream. Popularity measures may be computed for the video clips, for example based on tracked actions associated with the video clips, such as frequency of playing and sharing of the video clips. The popularity measures may be used to select and provide video clips to viewers. Video items may be generated by streamers, such as may include selected portions of video of streamers playing a game. A video item generated by a particular streamer may be displayed to viewers only during times when that particular streamer is participating in an active game session. Viewers of the video item may provide input that allows viewers to receive a live stream of the streamer's active game session that it is being played simultaneously with the display of the video item.

Abstract: Based on a candidate set of translations produced by a neural network based machine learning model, a mapping data structure such as a statistical phrase table is generated. The mapping data structure is analyzed to obtain a quality metric of the neural network based model. One or more operations are initiated based on the quality metric.

Abstract: Systems and methods are described for providing storage of encrypted data sets, deduplication of such data sets, and control of the redundancy of those data sets. A form of modified convergent encryption can be employed, whereby an encryption key for a data set is selected based on a combination of the plaintext of the data set and a salt value, with the salt value being selected from a number of permutations corresponding to a desired redundancy of the data set in a storage system. Accordingly, a given data set can result in a number of ciphertexts equal to the desired redundancy, and deduplication can occur by removing duplicative instances of individual ciphertexts. Salt values can be selected according to a variety of criteria, including user-based, time-based, and location-based criteria.

Abstract: A secure messaging platform for an enterprise environment is disclosed. The secure messaging platform enables users to exchange encrypted communications. Further, the secure messaging platform allows enterprise platforms to review the encrypted communications to ensure that they comply with company policies. Messages that comply with company policies may be provided to their intended recipients, while messages that fail to comply with company policies are not provided to their intended recipients. Additionally, the encrypted communications may be retained for a predetermined time.

Abstract: Systems, methods, and computer-readable media are disclosed for systems and methods of presentation and management of audio and visual content across devices. Example methods may include causing presentation of first audio content at a speaker device, causing presentation of a first audio notification indicative of visual content available for presentation, causing presentation of second audio content after the first audio notification, and sending first visual content to a first display device for presentation during presentation of the second audio content.

Abstract: A valve for use within a vacuum cup of a vacuum gripping system is described. In one example, a vacuum cup includes a bellows and a valve assembly seated within an inner chamber of the bellows. The valve assembly includes a body disk seated within the inner chamber, a control disk seated toward a suction cup end of the bellows, a spring positioned between the body disk and the control disk, and a control stem extending through the central valve aperture of the body disk, through the spring, and secured to the control disk. When the control stem is seated within the central valve aperture, the valve assembly restricts fluid suction to within the inner chamber. When the valve control stem is unseated from the central valve aperture, the valve assembly conveys fluid suction to the suction cup end of the bellows.

Abstract: Techniques for conducting transactions with one-time passwords are described herein. These techniques may include receiving a request to conduct a transaction, as well as a one-time password and an identifier linked with a payment instrument. The identifier may or may not identify the linked payment instrument. In both instances, a transaction processing service may compare the received one-time password with a one-time password stored at or accessible by the transaction processing service. If the passwords match, the service may approve the transaction. Otherwise, the service may decline the transaction or implement one or more additional authorization procedures.

Abstract: Techniques for improving the power management of devices are described. In an example, a device transitions into a power save mode. While in the power save mode, the device performs a number of operations. The operations include transitioning into an awake state and determining that the device has no data to transmit to a network access device. The operations also include determining a sequence number associated with data transmission to the network access device. The operations further include generating a frame that includes a header field and a payload field. The header field includes the sequence number and power management data. The power management data indicates a transition of the device to the awake state. Additionally, the operations include transmitting the frame to the network access device.

Abstract: Systems, methods, and computer-readable media are disclosed for systems and methods for simultaneously sending a single signal comprising distinct instructions for two separate devices. Example methods may include receiving, by a control device instructions to adjust the operation of a first device and a second device, generating a single signal corresponding to the received instructions for two separate devices, and simultaneously sending the single signal to the two separate devices causing the devices to perform the distinct instructions intended for each respective device.

Abstract: Users are authorized to access tagged metadata in a provider network. A revision control and binding mechanism may be applied to tagged metadata that is added or modified by the user. A recommendation pertaining to security and compliance for the computing resource may be determined based on an analysis of the computing resource, scoring criteria, and data pertaining to customer and system data.

Abstract: Systems and methods for implementing a secure and efficient cryptographic protocol for analyzing data objects while providing assurances of data privacy and security. A data object may be obfuscated and provided for analysis (e.g., to a data analytics service) without necessarily providing access to the (e.g., plaintext) data object. For example, a first computing entity and second computing entity may agree upon a function or circuit that performs a certain type of computational task, such as comparing a first data set controlled by the first computing entity and a second data set controlled by the second computing entity. An event-driven function may be invoked by the event-driven compute service in response to detecting satisfaction of a condition as part of monitoring alerts that are generated as a result of the output of the computational task described above.

Abstract: Context dependent execution time prediction may be applied to redirect queries to additional query processing resources. A query to a database may be received at a first query engine. A prediction model for executing queries at the first query engine may be applied to determine predicted query execution time for the first query engine. A prediction model for executing queries at a second query engine may also be applied to determine predicted query execution time for the second query engine. One of the query engines may be selected to perform the query based on a comparison of the predicted query execution times.

Abstract: A rack-mountable computer system enables an airflow that cools components in an upstream portion of the computer system interior to be cooled through mixing with a bypass airflow downstream of the components in the upstream portion. The mixed airflow can cool components in a downstream portion of the interior. The bypass airflow is directed by a bypass plenum that is unencompassed by the separate plenum that directs the airflow to cool the upstream portion components. The bypass plenum can be at least partially established by an external surface the computer system and one or more external structures, including an external surface of an adjacently mounted computer system. Relative flow rates through the separate plenums can be adjusted, via flow control elements, to separately control heat removal from components upstream and downstream of the air mixing, based at least in part upon air temperatures in the separate interior portions.

Abstract: A method of determining a level of potential risk associated with a potential vulnerability identified in a software application. The method includes generating simulated loss events, determining a plurality of impacts for the simulated loss events, determining the level of potential risk based on the plurality of impacts, and providing a graphical user interface based on the level of potential risk.

Abstract: This disclosure describes using trained classifiers and additional data to identify items placed into a tote. The techniques may use a first classifier on image data representing an item to determine a region associated with a barcode of the item and may use one or more second classifiers to analyze the region for determining a candidate barcode. The techniques may then determine whether the candidate barcode corresponds to the actual barcode of the item. If so, the techniques may update a virtual cart associated with a user account to indicate the acquisition of the item. If not, then the techniques may use the additional data for identifying the item. For example, the techniques determine a current location of a tote for determining items that are within a threshold distance of the location and may use this information, along with the candidate barcode, to identify the item placed into the tote.

Abstract: The present document describes systems and methods that provide an envelope including an encrypted message and a data encryption key reference. A message is encrypted with a data encryption key to produce an encrypted message. The data encryption key is further encrypted using a key encrypting key to produce an encrypted data encryption key. An envelope includes the encrypted message and the data encryption key reference is then provided to a recipient.

Abstract: Disclosed are various embodiments for domain-driven application breakout. Application components are identified based on analysis of a computing application, where the application components are different portions of the computing application. Individual ones of the application components are associated with a category, where the category may include a business domain category. One or more of the application components associated with the category are extracted as an independently deployable subunit, which may include a microservice. The independently deployable subunit is generated for the category using the at least one of the application components and deployed separate from the computing application. A local call in the computing application to the extracted application components is refactored to a network call to the independently deployable subunit.

Abstract: Methods, systems, and computer-readable media for centralized management of remote endpoint devices are disclosed. Instances of agent software are installed on endpoint devices that are external to a multi-tenant provider network. The agent software is communicatively coupled to a centralized management service of the multi-tenant provider network. A software package is selected from a marketplace service of the multi-tenant provider network. The marketplace service comprises product offerings for a plurality of software packages. The centralized management service sends information indicative of a configuration associated with the software package to the agent software of one or more of the endpoint devices that are associated with the software package. The centralized management service receives, from the agent software, an indication that the configuration has been deployed on the one or more of the endpoint devices.

Abstract: A packing insert includes a panel that defines a periphery, a location inward of the periphery, and a plurality of flaps each defining an outer end and an inner end such that each flap extends inwardly from its outer end to its inner end. Each of the flaps is foldable about its outer end so that the flaps collectively define a void. A first one of the flaps has a second outer end spaced outwardly from the outer end of the first flap. The panel defines at least one frangible portion between the outer end and the second outer end of the first flap. The first flap is selectively foldable about 1) its outer end so as to at least partially define the void, and 2) its second outer end, after breaking the at least one frangible portion, so as to increase a size of the void.

Abstract: Methods, systems, and computer-readable media for a cell-based storage system with failure isolation are disclosed. A first subset of storage nodes is selected from a set of storage nodes of a data store and assigned to a first partition of data. Replicas of the first partition are stored using the first subset. A second subset of storage nodes is selected from the set of storage nodes and assigned to a second partition of data. The second subset is selected based (at least in part) on the membership of the first subset, and the second subset comprises at least one node not present in the first. Replicas of the second partition are stored using the second subset. Access requests associated with the first partition are routed to the first subset of storage nodes. Access requests associated with the second partition are routed to the second subset of storage nodes.

Abstract: A system that implements a data storage service may store data for database tables in multiple replicated partitions on respective storage nodes. In response to a request to back up a table, the service may export individual partitions of the table from the database and package them to be independently uploaded (e.g., in parallel) to a remote storage system (e.g., a key-value durable storage system). Prior to uploading the exported and packaged partitions to the remote storage system, the service may verify that the exported and packaged partitions can be subsequently restored, which may include unpackaging and/or re-inflating the exported and packaged partitions to create additional unpackaged copies of the partitions, re-importing the additional unpackaged copies of the partitions into the database (e.g., as additional replicas), and/or comparing checksums generated for the exported partitions with checksums generated for the additional unpackaged copies of the partitions.

Abstract: This disclosure describes a voice-controlled electronic device that includes a housing and a mounting component. The housing includes a translucent cover attached to a cylindrical-shaped unibody enclosure. The electronic device further includes a microphone array disposed near a first end within the housing, a speaker box disposed within the housing, and a printed circuit board assembly disposed within the housing. Additionally, the electronic device includes a camera disposed within the housing and attached to the printed circuit board assembly, and a depth sensor that includes a depth camera and a projector. In some instances, the camera and the depth sensor point substantially in a direction of the translucent cover. Furthermore, the electronic device includes a light ring that protrudes from a surface of the translucent display and surrounds a lens of the camera.

Abstract: Techniques for performing spoken language understanding (SLU) processing locally on a user device are described. When a user device is about to present content on a display, the user device may generate one or more SLU models (e.g., one or more ASR models and/or one or more NLU models) specific to the content to be presented. When the user device receives a spoken input while the content is being presented on the display, the user device performs SLU processing on the spoken input using the display-specific SLU model(s).

Abstract: An apparatus includes a platform or other accessory that is supported by one or more piezoelectric transducers. As items are placed on or removed from the accessory, the piezoelectric transducer generates an electric charge that is representative of a change in weight. An amplifier receives the charge and provides output voltage that can be sampled to determine a weight value. In one implementation the platform may be supported by a transducer assembly comprising a frame and a pair of piezoelectric transducers on opposite sides of the frame. Signals from the pair may be used to compensate for environmental effects on the assembly, such as changes in temperature. The piezoelectric transducers and associated circuitry are extremely energy efficient, consuming little electrical power during operation.

Abstract: Light is modulated at a source to encode data. An additional tracking signal is imposed on the light using polarization modulation (PM). PM modulates one or more values of polarization rotation or polarization ellipticity of the light. These values may be dithered within constraints to provide a specified modulation index at the optical receiver, without impairing the encoded data. At the optical receiver, a polarization analyzer is used to recover the tracking signal, converting the polarization modulation to amplitude modulation. For example, after the light passes through the analyzer, an array of optical photodetectors detects the changes in apparent intensity resulting in the interaction between the light and the analyzer that correspond to the tracking signal. Due to a high modulation index, the recovered signal exhibits a high signal to noise ratio (SNR). The high SNR improves a noise equivalent angle, improving tracking performance.

Abstract: Described herein are techniques for rendering additional keys on a display of an electronic device based on one or more characteristics of a user's selection of another key. After rendering the additional keys, the user may thereafter select one of the additional keys now available and rendered on the display.

Abstract: Described is a multiple-camera system and process for detecting, tracking, and re-verifying agents within a materials handling facility. In one implementation, a plurality of feature vectors may be generated for an agent and maintained as an agent model representative of the agent. When the object being tracked as the agent is to be re-verified, feature vectors representative of the object are generated and stored as a probe agent model. Feature vectors of the probe agent model are compared with corresponding feature vectors of candidate agent models for agents located in the materials handling facility. Based on the similarity scores, the agent may be re-verified, it may be determined that identifiers used for objects tracked as representative of the agents have been flipped, and/or to determine that tracking of the object representing the agent has been dropped.

Abstract: A distributed data storage system may implement determining indexing progress for a table stored in the distributed data storage system. A table may be stored in multiple table partitions. When a secondary index is created for the table, each partition may independently index the items stored within the table partition in order to identify those items in the partition that should be stored in the secondary index. During creation of the secondary index, creation progress points that indicate the progress of the indexing across the table partitions may be determined. The creation progress points may be provided via a programmatic, textual, or graphical interface to the distributed data storage system.

Abstract: Systems and methods are described to enable a DNS service to encode information into a network address to be advertised by the DNS service. Information encoded by a DNS service may include, for example, an identifier of a content set to which the network address corresponds (e.g., a domain name) and validity information, such as a digital signature, that verifies the validity of the network address. On receiving a request to communicate with the network address, a destination device associated with the network address may decode the encoded information within the network address to assist in processing the request. In some instances, the encoded information may be used to identify malicious network transmissions, such as transmissions forming part of a network attack, potentially without reliance on other data, such as separate mappings or contents of the data transmission.

Abstract: One or more clients of a service may obtain access to resources of the service using one or more roles. A role may be used to delegate access to resources that a client normally would not otherwise have access to. A requestor may make a request to assume an intermediary role and receive a first token that enables assumption of the intermediary role. The requestor, after assuming the intermediary role, may request to assume to assume a destination role and receive a second token that enables the requestor to access one or more computing resources by assuming the destination role.

Abstract: An optical switch configuration is disclosed that gives the appearance of a logical cut in a fiber optic line. The inputs to the optical switch are redundant so that if a fiber event occurs on one input, the optical switch can switch to the other input. In the case where both paths of an optical fiber have fiber events, router convergence is delayed. One mechanism to mitigate a prolonged fiber degradation is to dampen the optical power on the output optical fiber of the optical switch, such that it creates a loss of light and appears as a clean cut of the optical fiber. Another solution uses optical switches to inject an alternate light source onto the output optical fiber, wherein the alternate light source is of a wavelength to be filtered out giving an appearance of a clean cut of the optical fiber.

Abstract: Objects detected in data may be filtered from an object recognition index. Data for object detection may be received. An object detection technique may be applied to the data to detect an object. If the object does not satisfy indexing criteria for the object recognition index, then the detected object may be excluded from the object recognition index.

Abstract: A network-based data store maintaining storage volumes for file systems at storage clients may implement dynamic storage volume scaling. A scaling event may be detected according to a specified scaling policy for a storage volume maintained at a network-based data store that is mounted at a storage client and configured for a file system. In a least some embodiments, the scaling policy for the storage volume may be received from the storage client. In response to detecting the storage event, storage maintaining the storage volume may be modified according to the scaling policy to scale the storage volume. An indication of the scaling event may be sent to the storage client in order to update the file system at the storage client so that the file system may utilize the scaled storage volume.

Abstract: At a computing service, an indication of associations of a set of network interfaces with a gateway is obtained. Individual ones of the interfaces are configured in respective availability-based resource groups. In response to detecting that a message originates at a resource within a particular availability-based resource group, a network interface of the set is selected based at least partly on the source of availability-based resource group, and the message is transmitted to a network address assigned to the selected interface.

Abstract: A system receives a first indication associated with a first device picking up a package and transmits a first instruction to the first device to travel to a location associated with transferring the package to a second device. The system may transmit a second instruction to the second device to travel to the location to receive the package from the first device. The system receives a second indication associated with the package being transferred from the first device to the second device at the location. One or more third devices may meet at the location to transfer packages to the second device. In some instances, the location may be determined based at least in part on a current location of the first device and/or a current location of the second device.

Abstract: A replicated database can be provisioned that provides primary and secondary replicas that can be provisioned in different data zones or geographical locations. The database can be installed on the primary replica, and both the primary and secondary replica can have installed a block level replication mechanism that allows any I/O operation to be replicated by between the primary and secondary replicas. Any failure or outage of the primary replica can be addressed by performing a failover operation to the secondary replica. A DNS name or other such approach can be used such that the name can be aliased to the secondary replica during a failover, such that there is no action needed on the part of the customer to utilize the “new” primary replica. The creation of the database and provisioning of the replicated instance can be initiated using a Web service call to a control environment.

Abstract: A query that references nested data may have sub-expressions included in a subquery for nested data to perform the query. A first query engine may rewrite the query to include one or more sub-expressions that reference the nested data into a subquery for the nested data as part of generating a plan to perform the query. A second query engine may then be caused to perform the subquery for the nested data. A result of the query may be inclusive of the performance of the subquery at the second query engine.

Abstract: A recovery workflow is part of an automated management service for bare metal hosts allocated for single-tenant operation in a multi-tenant environment. The health of the hosts is monitored using a set of health criteria. If it is detected that one of the host machines fails a health check then a host recovery workflow can be initiated. As part of the workflow, the failed host can be repurposed or retired. A spare host class can be used to obtain a new host to take over for the failed host. Once deployed, the operation of the new host can be tested. Upon passing the test, the new host can take over for the failed host. A new host resource can be automatically requested to be added to the spare host class in order to ensure that there are sufficient resources available in case of an additional failure.

Abstract: This disclosure describes a configuration of an unmanned aerial vehicle (“UAV”) that will facilitate extended flight duration. The UAV may have any number of lifting motors. For example, the UAV may include four lifting motors (also known as a quad-copter), eight lifting motors (also known as an octo-copter), etc. Likewise, to improve the efficiency of horizontal flight, the UAV also includes a pivot assembly that may rotate about an axis from a lifting position to a thrusting position. The pivot assembly may include two or more offset motors that generate a differential force that will cause the pivot assembly to rotate between the lifting position and the thrusting position without the need for any additional motors or gears.

Abstract: A system comprises a data storage service includes a web service interface operating as a proxy to the data storage service. Data obtained at the data storage service is analyzed by one or more criteria of a data loss prevention policy, the data is encrypted by a key that is inaccessible to a remote service, and then the encrypted data is transmitted to the remote service.

Abstract: Techniques for lossless transport stream compression from constant bitrate to variable bitrate to constant bitrate are described. An exemplary method includes generating elementary stream data from an encoder; receiving the generated elementary stream data in a packetizer; generating a transport stream output in the packetizer; and in a statmux, for consecutive NULL packets generated by the packetizer, counting a number of NULL packets between non-null packets and dropping those NULL packets, modifying a next packet to indicate the number of NULL packets dropped using a field in the next packet, and sending the next packet to a receiver.

Abstract: This system facilitates modification of application resources without modifying the source code of the application, while preventing modifications that may cause errors. After the source code and resources for an application are deployed, a user may provide a modified version of a resource, such as by changing a text string. The modified resource is compared to the existing version of the resource to determine if the modification will potentially cause an error when executing the application. If the modification adds or removes a parameter, changes a parameter name, changes a parameter type, or removes a resource, the change is prevented. Otherwise, the change is deployed without modifying the source code of the application. Parameters may be associated with hash codes or other types of identifiers to enable an application to locate a modified resource having a parameter that matches that of an original resource based on a matching identifier.

Abstract: Stereo ranging systems having pairs of imaging devices may be calibrated by projecting beams of light into the fields of view of the imaging devices and comparing the appearances of reflections of the beams depicted within images captured thereby. Where the reflections appear consistently within the images, the stereo ranging systems may be determined to be calibrated and operating properly. Where the reflections do not appear consistently within the images, the stereo ranging systems may be determined to be not calibrated or not operating properly. The light sources may be light-emitting structures such as diodes or reflective objects. A vector generated based on inconsistencies in appearances of reflections within images may be used to adjust the images. Images adjusted based on such vectors may be used to determine ranges to objects depicted therein or for any other purpose.

Abstract: Technology is described for communicating messages between edge devices. A process may be executed at a first edge device for use by a mobile device that is connected to the first edge device. A connection may be established between the first edge device and a second edge device. The first edge device may determine that the mobile device has been handed over from the first edge device to the second edge device. Messages may be communicated between the process executing on the first edge device and the mobile device via the connection with the second edge device when the mobile device has been handed over from the first edge device to the second edge device.

Abstract: A point cloud or map of an environment is generated by determining sets of landmark points from multiple images, such as through use of a Simultaneous Localization and Mapping (SLAM) algorithm. Images acquired using a depth camera are used to determine depth points indicative of at least one object not represented by the landmark points. A combined map is generated to include both the landmark points and the depth points. The set of depth points is mapped to a corresponding set of landmark points based on proximity of the points, similarity of the camera poses, or times that the images were acquired. The relationship between the depth and landmark points may be determined. When the landmark points are moved, such as to account for error in the SLAM algorithm, the depth points may be moved to a modified location relative to the landmark points so that the relationship remains constant.

Abstract: Systems and methods are provided for learning item types of items listed in an electronic repository, and for training a machine learning model to predict the item type of a given input item. For example, a machine learning model may be obtained or accessed that has been previously trained to classify an input item to a browse node. Vector representations of individual items assigned to different browse nodes may be obtained from an intermediate layer of the previously trained machine learning model, and a vector representation of individual browse nodes may then be generated based on the vector representations of individual items assigned to that browse node. A clustering algorithm may be applied to the browse node vector representations in order to identify clusters of similar browse nodes, where individual clusters may represent different unique item types.

Abstract: Techniques for server movement control are described. A capacity library service (CLS) can manage which hosts in a provider network can be taken in and out of production. The CLS may also control which entities may remove hosts from production and under what conditions the hosts may be removed from production. In some embodiments, the CLS can execute various workflows to manage checkout and check-in of hosts. Workflows may also be used to manage hosts while they are out of production to manage state transitions (e.g., in production, in testing, in reserve, etc.) based on current host fleet capacity and checkout rules.