Abstract: An Identity and Access Management Service implements persistent source values PSVs) for assumed identities. A source value (e.g., an original identifier of an entity) is persisted across assumed identities, facilitating identification of entities (users or applications) responsible for actions taken by the assumed (e.g., alternative) identities. The Manager receives a request to assume an identity. The request includes the entities current credentials and a PSV. The current credentials are authenticated and a persistent source value policy may be relied on to determine whether and/or how to grant the assumed identity. The PSV may be copied from credentials in the request in order to be included in the credentials for the requested identity that the Manager provides in response to the request. Use of the requested credentials, including the PSV, to access services or resources may be logged, the logs including the PSV from the request to assume the identity.

Abstract: A quantum computing service may store, in a cache, one or more compiled files of respective quantum functions included in one or more quantum computing programs received one or more customers. When the quantum computing service receives another quantum computing program, from the same or a different customer, the quantum computing service may determine whether the quantum computing program may include one or more of the quantum functions corresponding to the compiled files in the cache. If so, the quantum computing service may use the compiled files in the cache to compile the quantum computing program.

Abstract: This disclosure is directed to, in part, techniques for determining occupancy states of a vehicle over time and adjusting settings associated with the vehicle based at least in part on these occupancy states. For instance, an example vehicle may include an array of sensors that may generate sensor data for identifying an occupancy state of a vehicle. These sensors may include cameras, microphones, in-seat weight sensors, seatbelt sensors, door-latch sensors, and the like, which may be used to generate sensor data indicative of a current occupancy state of a vehicle. An occupancy state may include a number of occupants of the vehicle, the location of these occupants within the vehicle, the identity of these occupants, and/or the like.

Abstract: An automated, single level, package sortation system may include a conveyance mechanism, a package induct station with a first robotic arm, a first drive unit, a cart building station with a second robotic arm, a cart, and a cart transfer station. Each package and cart of the system may have an associated destination. A package may be transferred by a first robotic arm from a conveyance mechanism to a first drive unit, and then transferred by a second robotic arm from a first drive unit to a cart associated with the same destination as the package. Then, the cart may be transferred via a cart transfer station to the destination associated with the cart and all packages contained therein.

Abstract: Techniques for generating custom rules are described. For example, a system to receive at least one request to create rules based on a policy and code repository files stored by the storage service; analyze the policy to generate a collection of rule candidates; analyze the code repository files to identify labeled code examples that either conform or do not conform to the rule candidates; receive a selection of the labeled code examples; and synthesize at least one rule that includes a precondition that specifies applicability to the selected labeled code examples and a postcondition that expresses a check to be performed contingent on the precondition being satisfied is at least described.

Abstract: An airframe design may include a bonded frame or assembly, and one or more components that may be removably attached to the bonded frame. The bonded frame may include struts, central bulkheads, a tail section, a plurality of wing sections, and motor mounts that are adhered together using adhesive. The one or more attachable components may include a forward fuselage, motors, propellers, motor pod fairings, stabilizer fins, and landing gear that are attached using fasteners. The bonded frame may reduce the number of parts of the airframe design and may also reduce complexity, cost, and weight, while also increasing stiffness and strength. Further, the various attachable components may facilitate fabrication, assembly, and maintenance of an aerial vehicle having the airframe design.

Abstract: In one example, a method comprises: receiving input codes, wherein the input codes represent a computational dataflow graph; traversing the computational dataflow graph to identify single-entry-single-exit (SESE) subgraphs of the computational dataflow graph, wherein each SESE subgraph has a sequence of nodes comprising a root node and a child node and representing a sequence of element-wise operators, wherein the root node receives a single input tensor, and wherein the child node outputs a single output tensor; determining a merged operator for each SESE subgraph; and generating executable instructions for the computational dataflow graph to be executed by a hardware accelerator having a first execution unit and a second execution unit, wherein the executable instructions comprise first executable instructions for the merged operators targeted at the first execution unit, and second executable instructions for other operators of the computational dataflow graph targeted at the second execution unit.

Abstract: An IoT gateway at a client site uses sensing functions and actuating functions to safely implement actions for equipment. The client provides, to the IoT service, specifications for a sensing function and one or more actuating functions that are to communicate with the sensing function. The functions are deployed to the IoT gateway at the client site. The sensing function may be assigned read only access to the equipment and the actuating function may be assigned write only access to the equipment. The sensing function may collect data from the equipment and determine that a condition has been met (e.g., temperature is above an upper limit). In response, the sensing function provides an indication of an action to the actuating function (e.g., via a unique topic). If the action is a supported action, then the actuating function causes the equipment to perform the action; otherwise, it ignores the indicated action.

Abstract: Described are systems and methods that may be used to compare virtual machine manager-level system operations in a host environment to verify to a guest environment, such as a virtual machine, that the requested operations have been performed and the data managed by the host on behalf of the guest is secure. The implementations may include a security monitor that interfaces with a trusted platform module included in a hardware of the host. The security monitor may work with the TPM to verify consistency between a VM operation and a corresponding VMM-level operation of the host. This verification provides transparency that the host machine is complying with its responsibility to properly manage and secure data of the VM.

Abstract: A point-of-sale (POS) system may use biometric or other contactless techniques to determine tokenization data that attributes a transaction with a particular payment account for settlement. A first payment method specified by a user for use at the POS may be issued by a first bank that does not participate in tokenization. A second payment account associated with a different entity and issued by a second bank that does support tokenization is associated with the first payment method. The POS transaction completes, using a token associated with the second payment account. Another transaction then takes place in which the second bank charges the first bank for the amount of the completed transaction.

Abstract: Systems, devices, and methods are provided for depth guided structure from motion. A system may obtain a plurality of image frames from a digital content item that corresponds to a scene and determine, based at least in part on a correspondence search, a set of 2-D keypoints for the plurality of image frames. A depth estimator may be used to determine a plurality of dense depth map for the plurality of image frames. The set of 2-D keypoints and the plurality of dense depth maps may be used to determine a corresponding set of depth priors. Initialization and/or depth-regularized optimization may be performed using the keypoints and depth priors.

Abstract: Described are systems and methods for monitoring and detecting thermal conditions associated with individual cells of a battery. Embodiments of the present disclosure may monitor, detect, and protect against thermal anomalies that may be experienced at individual cells of a battery, without employing the use of thermal sensors (e.g., a thermocouple, thermistor, etc.). The exemplary systems and methods may be implemented in connection with a battery and/or battery pack having cells arranged in a serial configuration that may be employed in an aerial vehicle, such as an unmanned aerial vehicle (UAV). The described systems and methods detect thermal conditions associated with the individual cells of a battery by modeling each cell as an RC circuit and determining the resistance of each cell based on voltage and current measurements. The determined resistance can approximate and/or be representative of the temperature of the respective cell.

Abstract: Techniques are described for enabling a service provider to determine the power utilization of electrical lineups and sub-lineups powering physical servers in a data center and place virtual machine instances into the physical servers based on the power utilization and a user-specified preference of a virtual machine instance type.

Abstract: Editing and sharing spreadsheets of a spreadsheet editor system are disclosed. Interactions pertaining to requests of users of the spreadsheet editor system may be treated via natural language queries that are received at an interface of said system. When a first user attempts to share a spreadsheet with a second user, various spreadsheet filtering techniques may cause a new version of the given spreadsheet to be generated for the second user depending on permissions and metadata of one or both users of the editable spreadsheet system. References of the second user may additionally be used to modify a spreadsheet for viewing by the second user.

Abstract: Techniques for a cloud-based workload optimization service to identify customer workloads that are optimized to run on burstable instance types. The techniques include identifying workloads that are successfully running on burstable instance types, and using historical-utilization data for those workloads to train classification models. The optimization service can extract feature data from the historical-utilization data, where the feature data represents utilization characteristics that are indicative of burstable workloads. The feature data is then used to train classification models to receive utilization data for candidate workloads, and determine whether the candidate workloads would be optimized for burstable instance types. The optimization service can then migrate suitable workloads to burstable instance types, and/or provide users with recommendations that their workloads are optimized or suitable for burstable instance types.

Abstract: A lightweight filesystem may be provided for remote storage caching. A filesystem may maintain a persistent cache for a data set stored as data files in immutable data objects in a remote data store. Filesystem metadata may be evaluated to determine whether a portion of a data file is stored in the persistent cache according to an offset and length specified in a request. If in the persistent cache, data obtained from a data block in the persistent cache may be returned. If not in the persistent cache, then the remote data store may be accessed and the data file in the immutable data object read to obtain the portion of the data file.

Abstract: Techniques for using scoring algorithms utilizing containers for flexible machine learning inference are described. In some embodiments, a request to host a machine learning (ML) model within a service provider network on behalf of a user is received, the request identifying an endpoint to perform scoring using the ML model. An endpoint is initialized as a container running on a virtual machine based on a container image and used to score data and return a result of said scoring to a user device.

Abstract: An object-based data storage service receives a request to store a data object in association with a smart data storage tier. Based at least in part on characteristics of the data object, the object-based data storage service identifies and stores the data object in a first location corresponding to a first data storage tier. The object-based data storage service monitors access to the data object to identify a second set of characteristics of the data object. This second set of characteristics is used to determine that the data object is to be transitioned to a second data storage tier. The object-based data storage service, based at least in part on this determination, stores the data object in a second location corresponding to the second data storage tier.