Abstract: A computer vision neural network system is provided. The computer vision neural network system includes a computer with a multi-attribute loss module that concatenates first and second normalized feature vector descriptors to generate a master feature vector descriptor that describes attributes and classes of a facial image. The multi-attribute loss module estimates an error distance between the master feature vector descriptor and a plurality of class center vector descriptors. Each class center vector descriptor is a mean of a plurality of master feature vector descriptors associated with a soft-biometric class in a plurality of faces in a plurality of facial images.

Abstract: This disclosure describes techniques for centralizing the management of computing resources that are provisioned across multiple service provider networks by infrastructure modeling services. A service provider network may host or provide a centralized management service that supports an open source framework that provides users, or developers, with a unified development interface to manage computing resources that are provisioned in different service provider networks. The unified development interface of the host service provider network may provide users with a meta schema or language format to create infrastructure schemas for modeling, provisioning, and operating computing resources across service provider networks that are managed by different service providers.

Abstract: A method of determining a prospective short circuit current for an electrical system including a source includes connecting a test load between either: (i) a first phase line and a second phase line of the electrical system or (ii) the first phase line and the neutral line of the electrical system, employing a sensor coupled to the electrical system to measure a voltage drop across the test load, determining a voltage value based on at least the measured voltage drop across the test load, determining a total effective impedance for the first phase line to the source, and determining the prospective short circuit current based on the voltage value and the total effective impedance.

Abstract: Techniques for operating a multi-homed computing instance process are described herein. First credentials associated with a first attribute of a first account may be obtained. A process executing on a computing instance may communicate with the first account over a first communication channel based at least in part on the first credentials. Instructions may be received for the process to communicate with both the first account and a second account. Second credentials associated with a second attribute of the second account may be obtained. The second credentials may be obtained based, at least in part, on the first attribute acquiring the second attribute. The process may communicate with the second account over a second communication channel based at least in part on the second credentials. Additionally, the process may communicate with multiple different representations of a particular account, such as different representations that are hosted in different respective regions.

Abstract: This disclosure describes techniques for providing users of services provided by network-based service platforms with additional control for approving patches that are to be deployed to computing resources that support their services. In some examples, the techniques include generating and using a “snapshot,” or list, of patches that are preliminarily approved for deployment. Prior to deploying the patches to the computing resources, users are provided with access to the snapshot and are able to modify the snapshot. For example, users can modify the snapshot by adding patches, removing patches, specifying a sequence in which the patches are to be deployed, and so forth. The snapshot of patches may be “frozen” for a period of time, meaning that patches that during the period of time, only patches in the snapshot are deployed, and patches that are not included in the snapshot are not permitted to be deployed to computing resources.

Abstract: This disclosure describes techniques for resolving discrepancies that occur to interrelated computing resources from computing resource drift. Users may describe computing resources in an infrastructure template. However, computing resource drift occurs when “out-of-band” modifications are made to the computing resources and are not reflected in the infrastructure template. To resolve discrepancies between the infrastructure template and the out-of-band modifications to the computing resources, a notification may be output to a user account associated with the computing resources detailing the differences. An updated infrastructure template may be received that resolves the differences, such as by including configuration settings that reflect a current state of the computing resources. The computing resources may then execute a workflow using the updated template, such that the workflow is executed on all of the computing resources in a current state.

Abstract: This disclosure describes techniques for defining a set of permissions, or privileges, for users who manage resources of a network-based service provisioned in a network-based service platform managed by a service provider. The techniques may include mapping cloud identities of the users to operating system (OS) user groups defined local to the resources that specify the set of permissions for user group members. Systems-manager agents that execute locally on the resources may determine to which OS user group the user belongs based on their cloud identity, and launch shells that are restricted by the set of permissions. Using these shells, a network-based service platform may allow users to remotely manage resources of the network-based service in various ways, such as through batch run commands and/or remote user sessions, while ensuring that the users are unable to execute commands on the resources that are outside the set of permissions.

Abstract: A state management server applies configuration information to a set of virtual computer system instances in accordance with one or more limitations specified by an administrator. In an embodiment, the limitations include a velocity parameter that limits the number of virtual computer system instances to which the configuration may be applied concurrently. In an embodiment, the limitations include an error threshold that stops the application of the configuration if the number of configuration failures meets or exceeds the error threshold. In an embodiment, the set of virtual computer systems is identified by providing a list of the individual virtual computer system instances, or by specifying one or more tags that are associated with the virtual computer systems in the set. In an embodiment, the administrator is able to specify that an association be applied according to a predetermined schedule.

Abstract: A customer of a shared resource environment can generate script to be executed by one or more virtual machines, or other such instances or resources, and share that script with other users. The script can relate to administrative or other such tasks, and can be encapsulated into a document, or other such expression, and stored to a network-accessible location. The owner of the document can designate permissions as to which users have rights to access and/or execute the script against their own virtual machines. An owner can grant permission to all users, no other users, or specific users. The script can include parameter values that can be set by the other users or links to specific executables or other objects, among other such options.

Abstract: A method for electrostatic discharge (ESD) testing and analysis includes performing, by an ESD testing device, ESD testing on pins of an integrated circuit (IC) device to generate pre-stress ESD test data for each of the pins and post-stress ESD test data for each of the pins, determining, current shifts according to first data points of voltage-current (IV) curves of the pre-stress ESD test data corresponding to the IC device pins and to second data points of IV curves of the post-stress ESD test data corresponding to the respective pins of the IC device, assigning, by the device, a test result classification for each of the pins according to a relationship between a test threshold and the current shift for the respective pin, and displaying, by a workstation, a visually coded map of the IC device indicating the test result classification for each of the pins.

Abstract: A technology is described for invoking a command over a set of computing instances. An example method may include receiving a request to invoke a command over a set of computing instances managed within a service provider environment. In response, the computing instances included in the set of computing instances having an attribute may be identified and the command may be sent to the computing instances according to a send rate parameter specifying a rate at which the command is sent to a portion of the computing instances. Execution status indications may be received from the computing instances, wherein a number of errors indicated by the computing instances that exceeds an error threshold terminates execution of the command.

Abstract: Software packages may be installed, uninstalled and/or updated across a group of computing instances by way of a single issuance of a user request. The request may include information such as a software package name, a software package version, an action (e.g., install or uninstall), and one or more operating constraints for the software package. For an installation request, an agent on a given computing instance may process the request by accessing a manifest that indicates various computing instance characteristics (e.g., operating system types, architecture types, etc.) and various respective available versions of the software package. The agent may then select, based on characteristics of the computing instance, a package type for the computing instance. An installation request may also allow operating constraints (e.g. regarding usage of processing, memory, I/O and other resources) to be set and enforced for the software package.

Abstract: A state management server applies configuration information to a set of virtual computer system instances in accordance with one or more limitations specified by an administrator. In an embodiment, the limitations include a velocity parameter that limits the number of virtual computer system instances to which the configuration may be applied concurrently. In an embodiment, the limitations include an error threshold that stops the application of the configuration if the number of configuration failures meets or exceeds the error threshold. In an embodiment, the set of virtual computer systems is identified by providing a list of the individual virtual computer system instances, or by specifying one or more tags that are associated with the virtual computer systems in the set. In an embodiment, the administrator is able to specify that an association be applied according to a predetermined schedule.

Abstract: Technology is described for communicating with a computer instance. A request may be received to create a session connection between a computing instance with a messaging service that operates in a computing service environment. The session connection may be created between the agent running on the computing instance and the messaging service. A socket tunneling connection may be generated to replace the session connection. The socket tunneling connection may be between the agent and the messaging service. Message data streams may be passed between the agent and the messaging service over the socket tunneling connection. An instruction received from a client device may be forwarded to the computing instance over a second socket tunneling connection created with the client device. Command output received from the computing instance over the second socket tunneling connection may be forwarded. The output may result from an execution of the instruction at the computing instance.

Abstract: Methods, systems, and computer-readable media for resource configuration based on dynamic group membership are disclosed. An association between a group of computing resources and an intended state is stored. The intended state represents a computing resource configuration. During operation of a computing resource, whether the computing resource belongs to the group of computing resources is determined based at least in part on analysis of one or more attributes associated with the computing resource. Based at least in part on determining that the computing resource belongs to the group of computing resources, one or more actions are caused be performed to bring the computing resource into the intended state. The computing resource is executed while having the computing resource configuration represented by the intended state.

Abstract: A selection of a document that includes a command and a parameter is received, and a user is caused to be associated with a policy that grants permission to execute the document. A request is received, from a requestor, to execute the document, the request including a parameter value, and the requestor is determined to be the user associated with the policy. The user is validated to have access to a resource indicated by the parameter value, and the command is caused to be executed against the resource.

Abstract: Methods, systems, and computer-readable media for decentralized task execution that bypasses a task execution service are disclosed. A connection is established over one or more communication channels between a task execution interface and agent software of a compute instance. The agent software is executable to receive task execution documents from a task execution service and initiate local task execution based (at least in part) on the task execution documents. A task execution document is sent from the task execution interface to the agent software over the one or more channels. In sending the task execution document from the task execution interface to the compute instance, the task execution service is bypassed. Execution of one or more tasks is initiated on the compute instance by the agent software based (at least in part) on the task execution document.

Abstract: A facial image makeup transfer system is provided. The system utilizes a computer that utilizes two images as input, one with the client whose facial makeup will be transferred (known as reference facial image) and the other with the client whose face will receive the makeup (known as the target facial image). The position of the two faces is determined and landmarks are generated around different facial components in both images. Thereafter, the face in the reference facial image is geometrically aligned such that its geometry fits that of the client face in the target facial image. Thereafter, the color values in the reference facial image are smoothly transferred to the corresponding ones in the target facial image in a pixel-wise fashion.

Abstract: A facial images retrieval system is provided. The facial images retrieval system is adapted to receive an initial textual description of a facial image to perform an initial facial image search that obtains a plurality of facial images based on the textual description. The facial images retrieval system then receives a selection of the first and second facial images that are relatively close to a desired facial image to perform a further facial image search to obtain another facial image.

Abstract: A computer vision neural network system is provided. The computer vision neural network system includes a computer with a multi-attribute loss module that concatenates first and second normalized feature vector descriptors to generate a master feature vector descriptor that describes attributes and classes of a facial image. The multi-attribute loss module estimates an error distance between the master feature vector descriptor and a plurality of class center vector descriptors. Each class center vector descriptor is a mean of a plurality of master feature vector descriptors associated with a soft-biometric class in a plurality of faces in a plurality of facial images.