Abstract: Systems and methods are provided for implementing a multi-service file system for a hosted computing instance via a locally-addressable secure compute layer. Software within the instance can submit file operations to the secure compute layer, which the secure compute layer can translate into calls to one or more network-accessible storage services. To provide a multi-service file system, the secure compute layer can obtain mapping data mapping file system objects within the virtualized file system to different network-accessible storage services. On receiving a file operation, the secure compute layer can determine one or more network-accessible storage services corresponding to the file operation, and submit appropriate calls to the one or more network-accessible storage services.

Abstract: A data service implements a configurable data compressor/decompressor using a recipe generated for a particular data set type and using compression operators of a common registry (e.g., pantry) that are referenced by the recipe, wherein the recipe indicates at which nodes of a compression graph respective ones of the compression operators of the registry are to be implemented. The configurable data compressor/decompressor provides a customizable framework for compressing data sets of different types (e.g., belonging to different data domains) using a common compressor/decompressor implemented using a common set of compression operators.

Abstract: Systems and methods are described herein for implementing a hybrid codec to compress and decompress image data using both lossy and lossless compression. In one example encoding process, it may be determined whether a first block of pixels of a frame of image data contains an edge. A type of compression by which to encode the first block may be selected based on that determination. The first block may be compressed using the selected type of compression. At least one second value associated with the first block of pixels may be set to indicate at least oof the compressed value or the type of compression used to compress the first block.

Abstract: Disclosed are various embodiments for inferring brand similarities using graph neural networks and selection prediction. In one embodiment, a brand-to-brand graph is generated indicating similarities between a set of brands according to at least one of: click-through data or conversion data. Using a first graph neural network (GNN) tower, the brand-to-brand graph is analyzed to determine brand similarities among a first brand identified from a search query and a first set of other brands. Using a second GNN tower, the brand-to-brand graph is analyzed to determine brand similarities among a second brand and a second set of other brands. A level of similarity between the first brand and the second brand is determined based at least in part on an output of the first GNN tower and an output of the second GNN tower.

Abstract: Techniques for building, validating, and utilizing custom database software in a shared management environment are described. A database customization service allows users to provide database installation files as part of a configuration to generate a custom database engine version. The creation of custom database engine versions may be governed by policy, and the database customization service may provide recommendations for creating custom database engine versions according to various criteria. The custom database engine version can be built, and its functionality and correctness verified. Users may launch database instances using these custom database engine versions that can be managed under a shared management scheme where both users and the database customization service can perform host-level management.

Abstract: Various embodiments of systems and methods for providing virtualized (e.g., serverless) broker clusters for a data streaming service are disclosed. A data streaming service uses a front-end proxy layer and a back-end broker layer to provide virtualized broker clusters, for example in a Kafka-based streaming service. Resources included in a virtualized broker cluster are monitored and automatically scaled-up, scaled-down, or re-balanced in a way that is transparent to data producing and/or data consuming clients of the data streaming service.

Abstract: Techniques for performing speech processing using multi-modal widget information are described. A system may receive input data corresponding to a user input. The system may also receive widget context data corresponding to one or more multi-modal widgets active at a device. The system may use the widget context data to perform natural language understanding (NLU) processing with respect to the user input, and for selecting a skill component for responding to the user input. The system may send a widget identifier to the skill component when invoking the skill to respond to the user input.

Abstract: Remote Triggered Black Holes (RTBHs) can be precisely placed on networks that are not directly physically connected to a target of an attack. A network source of a potential attack can be determined. A path between the network source and the target can be identified, and a determination can be made as to which networks along that path subscribe to an attack mitigation service. From multiple identified subscriber networks, a subscriber network can be identified that is determined to be appropriate for placement of a black hole to mitigate the attack. Once selected, the identified network can receive attack information and acknowledge placement of the black hole. The subscriber network can then begin discarding traffic for the attack target. A subscriber-owned list of network prefixes can be reviewed before allowing RTBH injection for a corresponding address space.

Abstract: Techniques for change data capture (CDC) log augmentation are described. In some examples, a user configures CDC log augmentation by indicating which data should be included in a CDC log, and the database, when generating a CDC log associated with this configuration, can obtain the associated data and augment the CDC log by inserting this data into it. The augmented data can include one or more fields from a record in a separate database table, where the record can be identified based on the changed record represented by the CDC log.

Abstract: Systems and methods for sender profile and/or recipient profile disambiguation and/or confirmation are disclosed. In instances where a sender profile is not indicated by a user sending a communication from a communal device, heuristic data may be utilized to infer the sender profile. Similar heuristic data may also be used when selection of the sender profile is associated with a low confidence level. Heuristic data may also be used to infer the recipient profile when the user does not indicate the recipient profile or when selection of the recipient profile is associated with a low confidence. Various confirmations may result from the sender and recipient profile disambiguation.

Abstract: A latch mechanism for a sidewalk delivery robot or container includes a plunger that extends to engage a latch body on a lid to lock the lid closed, a cable for pulling the plunger out of engagement with the lid to free the lid for opening, and a temporary catch mechanism for holding the plunger in the retracted position during an initial phase of the opening process. The catch, and therefore the plunger, is released when a forward-extending release arm of the catch is engaged by the latch body during the opening process to pivot the catch. A slot hinge mechanism includes a spring piston to guard against finger pinching and a slider that is attached to the piston of the latch mechanism by the cable. Actuation of the hinge mechanism retracts the piston to its retracted position.

Abstract: Methods, systems, and computer-readable media for auto-tuning permissions using a learning mode are disclosed. A plurality of access requests to a plurality of services and resources by an application are determined during execution of the application in a learning mode in a pre-production environment. The plurality of services and resources are hosted in a multi-tenant provider network. A subset of the services and resources that were used by the application during the learning mode are determined. An access control policy is generated that permits access to the subset of the services and resources used by the application during the learning mode. The access control policy is attached to a role associated with the application to permit access to the subset of the services and resources in a production environment.

Abstract: Techniques for performing machine learning inference calls in database query processing are described. A method for performing machine learning inference calls in database query processing may include generating a query plan to optimize a query for batch processing of data stored in a database service, the query plan including a batch mode operator to execute a function reference and an execution context associated with the batch mode operator, executing the query plan to invoke a function associated with the function reference, wherein the function sends a batch of requests, generated using the execution context, to a remote service and obtains a plurality of responses from the remote service, and generating a query response based on the plurality of responses.

Abstract: A clock disciplining scheme uses a pulse per second (PPS) signal that is distributed throughout a network to coordinate timing. In determining the time, jitter can occur due to latency between detection of the PPS signal and a software interrupt generated there from. This jitter affects the accuracy of the clock disciplining process. To eliminate the jitter, extra hardware is used to capture when the PPS signal occurred relative to a hardware clock counter associated with the clock disciplining software. In one embodiment, the extra hardware can be a sampling logic, which captures a state of a hardware clock counter upon PPS detection. In another embodiment, the extra hardware can initiate a counter that calculates a delay by the clock disciplining software in reading the hardware clock counter. The disciplining software can then subtract the calculated delay from a hardware clock counter to obtain the original PPS signal.

Abstract: The present disclosure generally relates to a system of a delivery device for combining sensor data from various types of sensors to generate a map that enables the delivery device to navigate from a first location to a second location to deliver an item to the second location. The system obtains data from RGB, LIDAR, and depth sensors and combines this sensor data according to various algorithms to detect objects in an environment of the delivery device, generate point cloud and pose information associated with the detected objects, and generates object boundary data for the detected objects. The system further identifies object states for the detected object and generates the map for the environment based on the detected object, the generated object proposal data, the labeled point cloud data, and the object states. The generated map may be provided to other systems to navigate the delivery device.

Abstract: Methods and systems for improved quality of a streaming session using multiple simultaneous streams. For the multiple simultaneous streams an audio/video device (A/V device) records and generates a high-resolution stream and a low-resolution stream for simultaneous transmission to a server. The server selects one of the two streams for retransmission to a destination client device. The server also monitors the streaming session and estimates a total available bandwidth between the server and the A/V device and assigns a confidence value to the bandwidth estimation. The server periodically transmits the bandwidth estimate and confidence value to the A/V device to improve the efficiency of the streams being generated by the A/V device. The A/V device can use the received bandwidth estimate and confidence value to adapt the resolution of each of the streams to efficiently use the total available bandwidth between the A/V device and the server.

Abstract: Described are systems and methods for monitoring, detecting, and/or protecting various systems of an aerial vehicle, such as an unmanned aerial vehicle (UAV). Embodiments of the present disclosure can provide a multi-tiered system to provide monitoring, detection, and/or initiation of protection protocols in response to detected faults in connection with the electronics associated with UAV systems, such as the motor drive and/or control systems that may drive the propulsion systems of the UAV.

Abstract: An optical transceiver includes a built-in optical switch to switch between diverse fiber paths in switches in a datacenter or in switches between two datacenters. The built-in optical switch can be used to switch between racks in a datacenter to increase capacity for any rack that requests it. A controller, which receives a signal from a server computer in one of the racks, can be external to the optical transceiver or within the optical transceiver. In either case, the server computer can be provided with additional bandwidth when needed. For connections between datacenters, the built-in optical switch allows for optical line protection, but without the need for a splitter circuit, which incurs a significant power loss and requires a more expensive transceiver. Consequently, the built-in optical switch within an optical transceiver can be used in a variety of contexts to increase efficiency and reduce overall costs for network devices.

Abstract: Data is encoded to be incrementally authenticable. A plaintext is used to generate a ciphertext that comprises a plurality of authentication tags. Proper subsets of the authentication tags are usable to authenticate respective portions of plaintexts obtained from the ciphertext. Portions of the plaintext can be obtained and authenticated without decrypting the complete ciphertext.