Abstract: A system is provided for modifying how an output is presented via a multi-device synchronous configuration based on detecting a speech characteristic in the user input. For example, if the user whispers a request, then the system may temporarily modify how the responsive output is presented to the user via multiple devices. In one example, the system may lower the volume on all devices presented the output. In another example, the system may present the output via a single device rather than multiple devices. The system may also determine to operate in an alternate output mode based on certain non-audio data.

Abstract: A vehicle signal relay system enables a relay agent in a first zone of a vehicle to send sensor signals having a first link-layer communication protocol to a software application deployed on a compute unit in another zone of the vehicle that is connected using another link-layer communication protocol. The vehicle signal relay system allows the software application to identify target relay agents with access to needed sensor signals. The vehicle signal relay system may further enable one way or mutual attestation. The vehicle signal relay system may also allow filters to be applied to the subscribed vehicle sensor signals, and may allow the software application to determine a communication protocol to be used between the software application and the relay agent.

Abstract: Managed lifecycle roles are disclosed. Managed lifecycle roles may be used for secure credential vending or otherwise. For instance, an entity (e.g., administrator or other entity) requests, via an interface of a role manager, creation of a role associated with a lifecycle definition (e.g., an expression of an enforceable expiration of the role or similar characteristic). The role manager stores the role and role lifecycle definition to a data store. Another entity requests to use the role to perform some operation with respect to a resource. A credential service validates the request against a lifecycle definition for the role (and against an access control list, in some examples) and responds to valid requests with credentials useable to perform the operation with respect to the resource. The other entity uses the credentials to perform the operation with respect to the resource. A sweep process manages attributes of the roles.

Abstract: A compute channel having a compute pipeline of compute stages can be configured using a configuration pipeline with a control table and a datapath table. The control table stores control entries corresponding to respective microoperations, and each control entry includes control information for the compute channel. A datapath table stores datapath configuration entries corresponding to respective microoperations, and each datapath configuration entry has a datapath configuration that includes computational circuit block configurations to configure respective computational circuit blocks in the compute pipeline of the compute channel. Control logic can issue a microoperation to the compute channel by configuring the compute channel according to the control information of the microoperation obtained from the control table, and by inputting the datapath configuration of the microoperation obtained from the datapath table into the configuration pipeline of the compute channel.

Abstract: Interruptions in an ordered replication stream can be received from in a database. A database instance of the ordered replication stream may detect missing log records and then evaluate log records that are subsequently received to determine whether to update a portion of an in-memory data structure for performing database requests using a comparison of sequence numbers of the last update corresponding to the portion of the in-memory data structure indicated in the log record and the last update recorded for the portion of the in-memory data structure. For comparison indicating valid portions, the log record can be used and for comparison indicating invalid portions, the portion of the in-memory data structure can be made unavailable.

Abstract: Techniques for ontology linking of unstructured text as a service are described. A service may receive a request to link unstructured text to a standardized ontology, and the service may segment and tokenize the unstructured text and send the result to multiple services implementing multiple deep machine learning models trained to identify particular entities and one or more relationships between entities. The service may perform a search of the standardized ontology to identify a set of similar candidates from the standardized ontology for the detected entities and the one or more relationships, and then rank the set of similar candidates from the standardized ontology according to their similarity to the detected entities within the unstructured text. The output from the service may include a result identifying a highest ranked candidate of the set of similar candidates from the standardized ontology for the detected entities within the unstructured text.

Abstract: Methods and apparatus for portable network interfaces to manage authentication and license enforcement. A system may include a plurality of resource instances including a producer instance configured to implement a network-accessible service, and an authentication coordinator. The coordinator may assign an interface record to the service, wherein the interface record comprises an IP address and a set of security properties. The coordinator may configure the security properties to allow a client to request an attachment of the interface record to a selected resource instance, such that the selected resource instance is enabled to transmit network messages from the IP address using one or more physical network interfaces of the selected resource instance. The producer resource instance initiates authentication operations for the service, including at least one authentication operation based on the IP address of the interface record.

Abstract: Methods, systems, and computer-readable media for unified search and navigation for cloud-based services are disclosed. A unified search system receives textual input entered using a search interface. The search interface is displayed in a user interface concurrently with a management console for a cloud provider network. Based (at least in part) on the textual input, the system performs a search using one or more indexes usable to determine service names and descriptive information for the services. The system generates search results comprising a portion of the service names and a portion of the descriptive information. The search results are displayed using a search results overlay that is displayed concurrently with at least a portion of the management console. The system receives additional input entered using the overlay and comprising a selection of a particular search result. Responsive to the selection, additional information associated with the particular search result is displayed.

Abstract: Techniques for using establishing a communication session using a third-party (3P) communications service are described. When a request is received to integrate the 3P service with a first-party (1P) service, a username and password associated with the 3P service are sent to it, and a contact list associated with the 3P service is received in return. When a user of a first device sends a request to communicate with a recipient, if the recipient is represented in the 3P contact list, the system sends a request to the second communication system to establish a communication session.

Abstract: The present disclosure generally relates to systems and methods for initiating secure network connections at a first computing device without blocking operation of a real-time processor that handles latency-sensitive input/output (I/O) operations. In some implementation examples, the real-time processor obtains a request to establish a secure connection with a second computing device over a network. The real-time processor can enqueue into an inter-processor queue a request for performing a cryptographic operation. An additional processor can obtain the request and perform the cryptographic operation. After completing the cryptographic operation, the additional processor can enqueue information indicating the cryptographic operation is completed into the inter-processor queue. The real-time processor can obtain the information from the inter-processor queue and use the information to establish the secure connection with the second computing device.

Abstract: A system can be configured to provide an advertiser budget control system designed to work within the confines of a privacy preserving content delivery environment intended to reduce or eliminate third-party cookies. This system uses a control system, a PID controller and duty cycle, to control budget delivery to place content within a browser. The control system can be used to stably deliver budget with real-time delivery rate updates while also preventing over-spending of budget.

Abstract: An agent running on an IoT device of a client's network may receive a default password from a provider network and use the received default password to determine whether the password assigned to the IoT device has been changed from the default password to a different one. The agent may retrieve a salt string, a hashing algorithm, and a hashed string from a password database of the IoT device, combine the salt string with the received default password to generate a salted default password, and apply the hashing algorithm to the salted default password to generate a new hashed string. The agent may then compare the new hashed string to the hashed string retrieved from the password database. If they match, then the agent sends an indication to the provider network that the default password is still assigned to the IoT device.

Abstract: Techniques for adaptive network connectivity in a cloud provider network are described. A managed networking service obtains metadata associated with an application deployed in the cloud provider network and uses the metadata to construct a graph including application components and network components. Network flows are identified from the metadata and used to construct flow metadata that is linked to paths of the graph. The flow metadata is further enhanced with capability information for the network components on the path. The graph can be efficiently analyzed to identify alternative, superior networking configurations for the application.

Abstract: Anomalous interactions with a website or other system may be detected based on the types of characteristics associated with previous anomalous interactions, independent of the values associated with those characteristics. Historical data is used to determine characteristics of interactions, each characteristic having a type and a value. For historical interactions in which a set of characteristic values are associated with a potentially anomalous interaction, the characteristic types are analyzed in subsequent interactions. If values for those characteristic types occur at a frequency greater than a threshold frequency for a set of subsequent interactions, this may indicate that the interactions are anomalous. Use of the characteristic types for this purpose, rather than historical characteristic values, enables anomalous interactions to be detected independent of the characteristic values associated with the interactions.

Abstract: A sensor head transitions between a retracted and extended state. While retracted, sensors are covered. While extended, the sensors are exposed and may be used to acquire sensor data about the physical space. A force applied by a user, or a received command, may initiate transition. For example, a user may press on the sensor head to initiate retraction or extension. A motor provides a force to move the sensor head and generate haptic feedback, while a position encoder determines a displacement of the sensor head due to an external force being applied. Different applications of force by the user to the sensor head may result in different operations by the device. For example, a short push may retract the sensor head and disable the sensors for a specified time interval. In comparison a long push may retract the sensor head and disable the sensors until a specified clock time.

Abstract: Described is a system and method for routing output information to one or more of a plurality of output devices. In one implementation, output information that includes information to be presented and a location information identifying where the output information is to be presented may be generated by an output host. The output information is received by an output router that determines, based on the location information, an output device and routes the output information to the output device for presentation.

Abstract: Systems and methods relating to a millimeter wave radio-frequency (RF) sleep monitoring device are described. The device includes a surface transparent to RF signals through which a radar device enclosed in a housing transmits RF signals. An antenna array is enclosed within the housing and is oriented at a non-zero angle with respect to a vertical axis of the device. The antenna array receives the reflected RF signals through the surface. The reflected RF signals are used to generate sleep monitoring data such as a respiratory rate or motion data associated with a user.

Abstract: Technologies are disclosed for shortening and/or minimizing service interruptions. An incident service executing within a service provider network is used to detect an incident that has caused a service interruption and performs operations to assist in resolving the service interruption. The incident service may identify resources (e.g., computing resources, individuals, . . . ) to triage and remediate the service interruption. For instance, the incident service may provide information to one or more users of a customer experiencing a service interruption to assist in guiding the user(s) to address one or more problems to assist in resolving the service interruption. The information may include information such as providing one or more recommendations to configure one or more services, such as one or more actions to perform (e.g., a step-by-step runbook).

Abstract: Described herein is a system for enabling a user to perform complex goals using multiple skills/applications of an intelligent assistant device. Skills may register as consumers of an action or providers of an action, and the consumer skills may be configured to invoke provider skills to perform actions. The system receives a request to perform an action from a skill along with some action data. The system validates the action data, selects another skill to perform the action, and forwards the request to the selected skill to perform the action.

Abstract: Systems and methods are disclosed for wheel wear monitoring systems for shuttles powered by linear synchronous motors. An example system may include a first rail segment that forms a first side of the track, the first rail segment having a first aperture, a second rail segment that forms a second side of the track, the second rail segment having a second aperture, and a first camera disposed adjacent to the first aperture. The system may include a second camera disposed adjacent to the second aperture, and a controller configured to determine a first set of images of a first wheel of the shuttle using the first camera, determine a second set of images of a second wheel of the shuttle using the second camera, and determine a wear status of the first wheel based at least in part on the first set of images.