Abstract: Managed lifecycle roles are disclosed. Managed lifecycle roles may be used for secure credential vending or otherwise. For instance, an entity (e.g., administrator or other entity) requests, via an interface of a role manager, creation of a role associated with a lifecycle definition (e.g., an expression of an enforceable expiration of the role or similar characteristic). The role manager stores the role and role lifecycle definition to a data store. Another entity requests to use the role to perform some operation with respect to a resource. A credential service validates the request against a lifecycle definition for the role (and against an access control list, in some examples) and responds to valid requests with credentials useable to perform the operation with respect to the resource. The other entity uses the credentials to perform the operation with respect to the resource. A sweep process manages attributes of the roles.

Abstract: Described herein is a system for enabling a user to perform complex goals using multiple skills/applications of an intelligent assistant device. Skills may register as consumers of an action or providers of an action, and the consumer skills may be configured to invoke provider skills to perform actions. The system receives a request to perform an action from a skill along with some action data. The system validates the action data, selects another skill to perform the action, and forwards the request to the selected skill to perform the action.

Abstract: Interruptions in an ordered replication stream can be received from in a database. A database instance of the ordered replication stream may detect missing log records and then evaluate log records that are subsequently received to determine whether to update a portion of an in-memory data structure for performing database requests using a comparison of sequence numbers of the last update corresponding to the portion of the in-memory data structure indicated in the log record and the last update recorded for the portion of the in-memory data structure. For comparison indicating valid portions, the log record can be used and for comparison indicating invalid portions, the portion of the in-memory data structure can be made unavailable.

Abstract: Systems and methods relating to a millimeter wave radio-frequency (RF) sleep monitoring device are described. The device includes a surface transparent to RF signals through which a radar device enclosed in a housing transmits RF signals. An antenna array is enclosed within the housing and is oriented at a non-zero angle with respect to a vertical axis of the device. The antenna array receives the reflected RF signals through the surface. The reflected RF signals are used to generate sleep monitoring data such as a respiratory rate or motion data associated with a user.

Abstract: Techniques for ontology linking of unstructured text as a service are described. A service may receive a request to link unstructured text to a standardized ontology, and the service may segment and tokenize the unstructured text and send the result to multiple services implementing multiple deep machine learning models trained to identify particular entities and one or more relationships between entities. The service may perform a search of the standardized ontology to identify a set of similar candidates from the standardized ontology for the detected entities and the one or more relationships, and then rank the set of similar candidates from the standardized ontology according to their similarity to the detected entities within the unstructured text. The output from the service may include a result identifying a highest ranked candidate of the set of similar candidates from the standardized ontology for the detected entities within the unstructured text.

Abstract: Described is a system and method for routing output information to one or more of a plurality of output devices. In one implementation, output information that includes information to be presented and a location information identifying where the output information is to be presented may be generated by an output host. The output information is received by an output router that determines, based on the location information, an output device and routes the output information to the output device for presentation.

Abstract: Systems and techniques are described for motion detection. In various examples, a camera device may initiate execution of a non-computer vision-based motion detection process. In some examples, the camera device may initiate execution of a computer vision-based classification process during the execution of the non-computer vision-based motion detection process. In various examples, first result data may be determined by the non-computer vision-based motion detection process. In various examples, the execution of the computer vision-based classification process may be terminated based at least in part on the first result data.

Abstract: A plurality of security rule processing nodes is configured for network traffic of a set of sources and destinations. Respective subsets of configuration information of the sources and destinations, including security rules, are transmitted to the nodes. Respective addresses of at least a subset of the nodes are transmitted to a packet processing intermediary. The intermediary requests evaluation of applicable security rules with respect to packet flows by selected nodes prior to initiating routing actions for packets of the flows.

Abstract: Technologies are disclosed for shortening and/or minimizing service interruptions. An incident service executing within a service provider network is used to detect an incident that has caused a service interruption and performs operations to assist in resolving the service interruption. The incident service may identify resources (e.g., computing resources, individuals, . . . ) to triage and remediate the service interruption. For instance, the incident service may provide information to one or more users of a customer experiencing a service interruption to assist in guiding the user(s) to address one or more problems to assist in resolving the service interruption. The information may include information such as providing one or more recommendations to configure one or more services, such as one or more actions to perform (e.g., a step-by-step runbook).

Abstract: Techniques for performing automated device activation and managing access to a workspace are described herein. While operating in an activated state, a user device (e.g., a wearable device) may be configured to modify movements of various mobile components (e.g., mobile drive units, robotic arms, etc.) of the workspace by emitting signals that cause the mobile components to stop or reduce speed when in proximity of the user device. An access controller device (ACD) may be used to restrict and/or allow access to the workspace and to perform operations for activating a user device that is attempting access. The ACD may receive light emissions from the user device that may be used to initiate a process for activating the user device. When the ACD receives an indication that the user device is operating in the activated state, the ACD may execute operations for enabling access to the workspace.

Abstract: Devices, systems, and methods are provided for generating and selecting video clips for inclusion in video sequences based on still frame images. A method may include encoding first embeddings for a first video including first images of an item at a first scene, the first embeddings indicative of features of the first scene; encoding second embeddings for a second video including second images of the item at a second scene, the second embeddings indicative of features of the second scene; encoding third embeddings for the first video, the third embeddings indicative of features of a first type of camera shot used for the first images; encoding fourth embeddings for the second video, the fourth embeddings indicative of features of a second type of camera shot used for the second images; and generating, based on the first, second, third, and fourth embeddings, a video sequence for the item.

Abstract: One or more indications may be received of a decision to deny an attempted access of a computing resource by an identity. A plurality of relevant policies may be determined whose permissions are evaluated as inputs to the decision to deny. One or more denial-related policies of the relevant policies may be determined that are associated with at least one of explicitly denying or implicitly denying the attempted access. One or more denial indications may be provided of the one or more denial-related policies. The one or more denial indications may include at least one explicit deny indication of at least one of the one or more denial-related policies that explicitly denies the attempted access. The one or more denial indications may also include at least one implicit deny indication of at least one of the one or more denial-related policies that implicitly denies the attempted access.

Abstract: Technologies are disclosed for interacting with a virtual assistant to request updates associated with one or more events and/or perform actions. According to some examples, a user may use their voice to interact with a virtual assistant to receive updates relating to events occurring during a certain period of time. For example, a user may request an update associated with one or more events occurring that day. The system may access data sources (e.g., calendar services, email services, etc.) to obtain data associated with the events, tag the events according to one or more conditions indicated by the data, and/or rank the events according to the tags. In addition, to resolve conditions associated with the events, the virtual assistant may also include options in the update to perform certain actions and/or to provide response data. The virtual assistant may generate the update and audibly provide the update to the user.

Abstract: A speech interface device is configured to detect an interrupt event and process a voice command without detecting a wakeword. The device includes on-device interrupt architecture configured to detect when device-directed speech is present and send audio data to a remote system for speech processing. This architecture includes an interrupt detector that detects an interrupt event (e.g., device-directed speech) with low latency, enabling the device to quickly lower a volume of output audio and/or perform other actions in response to a potential voice command. In addition, the architecture includes a device directed classifier that processes an entire utterance and corresponding semantic information and detects device-directed speech with high accuracy. Using the device directed classifier, the device may reject the interrupt event and increase a volume of the output audio or may accept the interrupt event, causing the output audio to end and performing speech processing on the audio data.

Abstract: A modified measured boot approach is utilized for establishing a secure communication link between two devices. Each device may execute a respective boot process until the device reaches the stage responsible for establishing the communication link with the other device. Each device may exchange its respective self-signed certificate and extend its certificate chain with the self-signed certificate received from the other device. A secure link can be established using the public key of the other device as a based key for a key exchange protocol.

Abstract: Systems and methods for presence ground truth approximation and utilization are disclosed. For example, a system detects the presence of a predefined subject, such as a person associated with a given user profile, and/or determines that authentication criteria for performing an action in association with the user profile has been satisfied. A period of time to associate data is determined, and data of one or more data types is labeled as being associated with the speaker identification event. That data may be formatted and input into one or more models to train those models to more accurately detect presence and/or determine whether authentication of a user profile should succeed.

Abstract: Systems, methods, and computer-readable media are disclosed for determining obstacle data based on sensor data such as greyscale data and depth data. Based on the obstacle data navigation data may be determined and used by an autonomous vehicle to navigate an environment such as a warehouse or storage facility. The obstacle data may be determined by determining three-dimensional representations of the greyscale data and the depth data and segmented and combining or fusing the three-dimensional representations of the greyscale data and the depth data. The system used to determine the obstacle data may be trained to avoid false obstructions and omitted obstructions.

Abstract: Product spaces for containers of non-discretized items are defined by sets of points in three-dimensional space. When a customer breaches or contacts a product space established for a container of the non-discretized items, video feeds representing the product space are displayed to an associate in a web page or another user interface. By interacting with the user interface, the associate may view the video feeds and make a determination as to whether the customer received any of the non-discretized items from the container, and to confirm an identity of the customer accordingly.

Abstract: Described are systems and methods for determining an agent that performed an event within a materials handling facility. A series of overhead images that include representations of the event location and one or more agents are processed to determine a motion or movement of the agent over a period of time. For example, a motion model representative of a motion of the agent over a period of time is generated from the images. A distance between the motion model and the event location is also determined. An association between the agent and the event may be determined based on the motion model and the distance between the motion model and the event location.