Abstract: An Identity and Access Management Service implements persistent source values PSVs) for assumed identities. A source value (e.g., an original identifier of an entity) is persisted across assumed identities, facilitating identification of entities (users or applications) responsible for actions taken by the assumed (e.g., alternative) identities. The Manager receives a request to assume an identity. The request includes the entities current credentials and a PSV. The current credentials are authenticated and a persistent source value policy may be relied on to determine whether and/or how to grant the assumed identity. The PSV may be copied from credentials in the request in order to be included in the credentials for the requested identity that the Manager provides in response to the request. Use of the requested credentials, including the PSV, to access services or resources may be logged, the logs including the PSV from the request to assume the identity.

Abstract: One or more embodiments provide a method of providing an adaptive user interface in an electronic device. The method includes identifying, by the electronic device, a user functional element (UFE) in an application of the electronic device. The method further includes determining, by the electronic device, a trigger span for the UFE, and initiating, by the electronic device, a trigger in response to determining that the trigger span for the UFE is expired. The method further includes determining, by the electronic device, a probability of use of the UFE for which the trigger is initiated. The method further includes determining, by the electronic device, that the probability of the use of the UFE is less than a threshold probability. The method further includes updating, by the electronic device, the adaptive user interface associated with the UFE the based on the probability.

Abstract: Managed lifecycle roles are disclosed. Managed lifecycle roles may be used for secure credential vending or otherwise. For instance, an entity (e.g., administrator or other entity) requests, via an interface of a role manager, creation of a role associated with a lifecycle definition (e.g., an expression of an enforceable expiration of the role or similar characteristic). The role manager stores the role and role lifecycle definition to a data store. Another entity requests to use the role to perform some operation with respect to a resource. A credential service validates the request against a lifecycle definition for the role (and against an access control list, in some examples) and responds to valid requests with credentials useable to perform the operation with respect to the resource. The other entity uses the credentials to perform the operation with respect to the resource. A sweep process manages attributes of the roles.

Abstract: Various embodiments provide a method and a system for facilitating content recommendation to content viewers. The method performed by the system includes accessing content viewer behavior data associated with a content viewer. The method includes classifying the content viewer in a viewer cohort based on the content viewer behavior data. The viewer cohort includes a plurality of related content viewers. The method includes accessing and aggregating content viewer interaction data from the plurality of related content viewers. The content viewer interaction data includes a popularity index. The method includes computing via a machine learning model, a performance metric for each recommended content item based on the content viewer interaction data. The method includes determining an optimal content sequence for displaying the plurality of recommended content items based on the performance metrics for the plurality of recommended content items.

Abstract: Managed lifecycle roles are disclosed. Managed lifecycle roles may be used for secure credential vending or otherwise. For instance, an entity (e.g., administrator or other entity) requests, via an interface of a role manager, creation of a role associated with a lifecycle definition (e.g., an expression of an enforceable expiration of the role or similar characteristic). The role manager stores the role and role lifecycle definition to a data store. Another entity requests to use the role to perform some operation with respect to a resource. A credential service validates the request against a lifecycle definition for the role (and against an access control list, in some examples) and responds to valid requests with credentials useable to perform the operation with respect to the resource. The other entity uses the credentials to perform the operation with respect to the resource. A sweep process manages attributes of the roles.

Abstract: An electronic device for auto focus is provided. The electronic device includes determining, by the electronic device, at least one region of interest (ROI) in a scene displayed in one of a viewfinder and a captured image frame and determining, by the electronic device, at least one sub ROI in the at least one ROI by performing a first level of auto focus using at least one first image sensor. Further, the method includes determining, by the electronic device, at least one focused sub ROI by performing a second level of auto focus on the at least one sub ROI using at least one second image sensor and rendering, by the electronic device, a focus transition for the at least one focused sub ROI to one of the viewfinder and the captured image frame.

Abstract: A recovery workflow is part of an automated management service for bare metal hosts allocated for single-tenant operation in a multi-tenant environment. The health of the hosts is monitored using a set of health criteria. If it is detected that one of the host machines fails a health check then a host recovery workflow can be initiated. As part of the workflow, the failed host can be repurposed or retired. A spare host class can be used to obtain a new host to take over for the failed host. Once deployed, the operation of the new host can be tested. Upon passing the test, the new host can take over for the failed host. A new host resource can be automatically requested to be added to the spare host class in order to ensure that there are sufficient resources available in case of an additional failure.

Abstract: Features are disclosed for managing multiple hosts that stream sequential data to nodes for propagation. The hosts can include a primary host and a failover host that each store a replica of the sequential data. A computing device can monitor the hosts and identify the occurrence of a failover event for the primary host. For example, the computing device may determine the schema has been modified. The computing device can further determine to failover to the failover host based on the failover event. The computing device can insert a flip task into the stream of sequential data for the primary host. The insertion of the flip task may be automatic. Further, each node reading from the stream of sequential data for the primary host may encounter the flip task and failover to the failover host at the same logical position but a different absolute position.

Abstract: An electronic device for auto focus is provided. The electronic device includes determining, by the electronic device, at least one region of interest (ROI) in a scene displayed in one of a viewfinder and a captured image frame and determining, by the electronic device, at least one sub ROI in the at least one ROI by performing a first level of auto focus using at least one first image sensor. Further, the method includes determining, by the electronic device, at least one focused sub ROI by performing a second level of auto focus on the at least one sub ROI using at least one second image sensor and rendering, by the electronic device, a focus transition for the at least one focused sub ROI to one of the viewfinder and the captured image frame.

Abstract: The present disclosure relates to generating a passphrase for an encrypted volume by at least cryptographically combing the first cryptographic key and the shared secret. Where the shared secret is split into a plurality of shares and a first number of the plurality of shares is greater than a second number of the plurality of shares and the second number of the plurality of shares is required to reconstruct the shared secret.

Abstract: Techniques for managing permissions to cloud-based resources with session-specific attributes are described. A first request to create a first session to permit access to resources of a provider network is received under an assumed role. The first request is permitted based on an evaluation of a rule associated with the role. Session data including a user-specified attribute included with the first request is generated. A second request to perform an action with a resource hosted by the provider network is received. The user-specified attribute is obtained from the session data based at least in part on the second request. The second request is permitted based on an evaluation of another rule with the user-specified attribute.

Abstract: In the various aspects and embodiments, this disclosure provides messenger RNA (mRNA) constructs for therapeutic delivery, as well as methods for making such mRNA constructs and pharmaceutical compositions comprising the same (including mRNA vaccine compositions). In still other aspects, the invention provides methods for treating patients by expression of therapeutic proteins, including for preventing or reducing probability of infection by, or illness involving, a virus. Exemplary viruses include coronaviruses (such as SARS-CoV-2 and variants therefore) and influenza viruses, among others.

Abstract: A recovery workflow is part of an automated management service for bare metal hosts allocated for single-tenant operation in a multi-tenant environment. The health of the hosts is monitored using a set of health criteria. If it is detected that one of the host machines fails a health check then a host recovery workflow can be initiated. As part of the workflow, the failed host can be repurposed or retired. A spare host class can be used to obtain a new host to take over for the failed host. Once deployed, the operation of the new host can be tested. Upon passing the test, the new host can take over for the failed host. A new host resource can be automatically requested to be added to the spare host class in order to ensure that there are sufficient resources available in case of an additional failure.

Abstract: An Identity and Access Management Service implements persistent source values PSVs) for assumed identities. A source value (e.g., an original identifier of an entity) is persisted across assumed identities, facilitating identification of entities (users or applications) responsible for actions taken by the assumed (e.g., alternative) identities. The Manager receives a request to assume an identity. The request includes the entities current credentials and a PSV. The current credentials are authenticated and a persistent source value policy may be relied on to determine whether and/or how to grant the assumed identity. The PSV may be copied from credentials in the request in order to be included in the credentials for the requested identity that the Manager provides in response to the request. Use of the requested credentials, including the PSV, to access services or resources may be logged, the logs including the PSV from the request to assume the identity.

Abstract: This invention relates to in vitro production of nucleic acids, particularly RNAs and specifically messenger RNAs (mRNA).

Abstract: A recovery workflow is part of an automated management service for bare metal hosts allocated for single-tenant operation in a multi-tenant environment. The health of the hosts is monitored using a set of health criteria. If it is detected that one of the host machines fails a health check then a host recovery workflow can be initiated. As part of the workflow, the failed host can be repurposed or retired. A spare host class can be used to obtain a new host to take over for the failed host. Once deployed, the operation of the new host can be tested. Upon passing the test, the new host can take over for the failed host. A new host resource can be automatically requested to be added to the spare host class in order to ensure that there are sufficient resources available in case of an additional failure.

Abstract: Provided herein, in some embodiments, are methods and composition for the production of nucleoside triphosphates and ribonucleic acids.

Abstract: Restoring data to a data store that suffered corrupted data over a time period is disclosed. A system may provide an interface to specify a time window and filter conditions for identifying corrupted data in an object in a data store, such as, but not limited to, a corrupted NoSQL table. Corrupted data is identified by applying the filter conditions to change logs for the data object (e.g., the No SQL table) in the data store. Repair operations are determined for individual items identified via the filter conditions. Identified corrupted data for items may be corrected, from change logs or backup data in some instances (e.g., data may be deleted, or updated or replaced with data from a backup of the data store when necessary).

Abstract: Provided herein are T7 RNA polymerase variants (T7 RNAP variants) having increased RNA polymerase activity and/or thermal stability, and methods of use thereof.

Abstract: Transitive restrictions can be applied to requests received on a session. A session token can be issued for an active session, and a transitivity setting specified to indicate the types of requests for which the transitive restriction is to be enforced. This can include enforcing the restriction on requests received from outside a trusted environment, requests within a scope of enforcement, or enforcing the restriction at request authentication. Any request received from an untrusted source that fails to satisfy the transitive restriction will be denied. Requests from inside the trusted environment may not have the transitive restriction enforced, such as where a new token is issued. This enables services within the environment to make calls on behalf of the customer, while ensuring that third parties obtaining the session token cannot successfully initiate such calls.