Abstract: Authenticated requests can be sent without requiring the requests to include or potentially expose secret information used for the authentication process. A client device use a security credential such as a key to sign a request to be sent to a recipient. When the request is received, the recipient determines whether the request was signed using the correct key for the sender. In some embodiments a client token is included with the request that statelessly encodes the key, enabling a recipient capable of decoding the client token to determine the key and compare that key to the signature of the request. The sender can store the secret information in a secure location, such as a browser security module, such that the secret information is not exposed to the browser or script executing on the client device.

Abstract: Methods and apparatus for flexible-location reservations and pricing for network-accessible resources are disclosed. A system includes a plurality of resources of a provider network distributed across multiple locations, and a resource manager. The resource manager implements a programmatic interface to allow a client to specify a flexible location option for a resource reservation request, indicating that the resource manager is to select one or more locations at which to reserve resource capacity. When a reservation request with the flexible location option specified is received, the resource manager selects a particular location based at least in part on heuristics using resource utilization data. In response to a resource activation request for the reservation, the resource manager activates a resource at a launch location selected from the multiple locations.

Abstract: Systems and methods are provided for processing images (or other such instances of content) to detect which of the images exhibit artifacts when modified, such as by applying standard transformation algorithms to modify the images. Such techniques enable transformation algorithms to be applied to the detected images to minimize or prevent artifacts. In some embodiments, the headers of the detected images can be tagged with transformative instructions that indicate which transformation algorithms to apply. Responsive to a request from a web client to modify and render one of the detected images, embodiments obtain the requested image, read the transformative instructions in the header, apply the transformation algorithm specified in the header to modify the image so as to minimize or prevent artifacts, and render the modified image.

Abstract: An internal rotational locking device prevents separation of a front cover and a rear cover of a user device. The internal rotational locking device includes a rotational bracket coupled to the rear cover. The rotational bracket includes a locking tab to overhang a locking edge of the front cover. The internal rotational locking device further includes a compression spring to maintain a distance between the rotational bracket and the rear cover. The internal rotational locking device further includes a torsion spring to maintain a first rotational position of the rotational bracket, where the locking tab overhangs the locking edge in the first rotational position.

Abstract: Described are systems and methods for content-adaptive presentation of content. A presentation profile for use in presentation of content is determined based at least in part on one or more determination characteristics. The determination characteristics may include metadata descriptive of the content, such as genre, style, artist, and so forth. The presentation profile may include equalizer settings, overall amplitude or volume, speaker configuration, and so forth.

Abstract: Disclosed are various embodiments for provisioning client credentials via a trusted channel. A client computing device is configured to access a trusted channel of communication. An account configuration manager automatically requests access to accounts linked to the trusted channel of communication. A respective security credential communication is received for the accounts via the trusted channel of communication. One or more applications are configured to access the accounts based at least in part on the respective security credential communications.

Abstract: A cover for an electronic device includes back cover, such as a tray, to receive the electronic device. The cover may also include a foldable flap that is foldable into a stand to support an electronic device held by the cover at one or more viewing angles oblique to a surface on which the cover is placed. The back cover and/or the foldable flap may include one or more activation mechanisms that, when moved relative to the electronic device, activate one or more functions of the electronic device (e.g., camera functions, display of information, etc.).

Abstract: A system for performing computing operations includes a rack, one or more shelves coupled to the rack, and two or more computing modules. Each computing module may include a chassis, one or more circuit board assemblies in a primarily vertical orientation, and one or more hard disk drives in a primarily vertical orientation. The circuit board assemblies and the hard disk drives are coupled to the chassis of the computing module.

Abstract: A content management system may receive, purchase or otherwise obtain licenses from content owners or licensors and provide such content licenses to application developers or other content creators. The content management system can act as a central broker for licensing content rights to developers. The application developers can then generate content items based on the obtained licenses and provide or sell those content items to users of their applications. For instance, the developer may license an automobile design, brand name or performance data from an automobile manufacturer and create an automobile model for a racing game application.

Abstract: A distributed storage system may store data object instances in persistent storage and may cache keymap information for those data object instances. The system may cache a latest symbolic key entry for some user keys of the data object instances. When a request is made for the latest version of stored data object instances having a specified user key, the latest version may be determined dependent on whether a latest symbolic key entry exists for the specified user key, and keymap information for the latest version may be returned. When storing keymap information, a flag may be set to indicate that a corresponding latest symbolic key entry should be updated. The system may delete a latest symbolic key entry for a particular user key from the cache in response to determining that no other requests involving the keymap information for data object instances having the particular user key are pending.

Abstract: An architecture and techniques for implementing a unified and extensible meta-testing framework within a distributed environment. This framework allows entities within the distributed environment to run tests written in different testing frameworks in a unified way. In addition, this disclosure describes techniques for allowing an entity within the distributed environment to test itself, both from its own perspective as well as from the perspective of other entities within the distributed environment.

Abstract: The present disclosure provides a number of systems and associated processes for using machine-readable codes to perform a transaction. Embodiments of the present disclosure provide a system and associated processes for consolidating and replacing various forms of payment (e.g. credit cards, debit cards, and cash) with a single payment system. Further, embodiments of the present disclosure provide a system and associated processes for reordering a product provided by a product provider. Moreover, embodiments of the present disclosure provide a system and associated processes for accepting a gift, or gift transaction, associated with a gift card. In addition, embodiments of the present disclosure provide a system and associated processes for performing an Automatic Teller Machine (ATM) transaction using a machine-readable code.

Abstract: A system that implements a data storage service may store data in multiple replicated partitions on respective storage nodes. The selection of the storage nodes (or storage devices thereof) on which to store the partition replicas may be performed by administrative components that are responsible for partition management and resource allocation for respective groups of storage nodes (e.g., based on a global view of resource capacity or usage), or the selection of particular storage devices of a storage node may be determined by the storage node itself (e.g., based on a local view of resource capacity or usage). Placement policies applied at the administrative layer or storage layer may be based on the percentage or amount of provisioned, reserved, or available storage or IOPS capacity on each storage device, and particular placements (or subsequent operations to move partition replicas) may result in an overall resource utilization that is well balanced.

Abstract: A message originator may generate messaging data for selective communication by a messaging provider via an interface generated by a browser software application. The user may also interact with various content providers such that event data is generated based on the user interaction with each content provider. The messaging provider can then obtain the messaging data and the event data to determine a target set of messages to be published. Additionally, the messaging provider can select a set of message recipients to receive, or otherwise access, the target set of messages based on filtering criteria submitted by the message originator, content provider, service provider, and/or message recipients. Credit may be allocated based on activity associated with the communicated messages. The messaging provider may also facilitate additional interaction between the message originator and the message recipients including the initiation of additional communication channels.

Abstract: Network addresses are dynamically allocated to devices based on demand. A first network address allocation is initially assigned to a subdivision of a network including multiple computing devices. A router for the subdivision is configured to implement the first network address allocation. Data indicating a reconfiguration of the computing devices is obtained. A second network address allocation is subsequently assigned to the subdivision of the network based at least in part on the reconfiguration of the computing devices. The router for the subdivision is reconfigured to implement the second network address allocation.

Abstract: An electronic device can attempt to capture at least one image including at least a portion of a user's ear when the user utilizes the electronic device for certain purposes, such as to receive a call or listen to an audio file. In some embodiments, the device analyzes the captured information to determine whether the user is holding the device near the user's right ear or left ear, and adjusts functionality of the device based at least in part upon how the user is likely holding the phone. In other embodiments, the device attempts to recognize the user based on ear shape or other parameters, and can provide customized functionality of the device based at least upon that determination.

Abstract: Devices having embedded structural features that permit assembly of such devices in a manner that design efficiencies and packaging efficiencies can be accomplished satisfactorily and substantially without mutual exclusivity. In one aspect, structure(s) associated with a functionality of user equipment can be leveraged in order to couple a front housing of the user equipment with a rear housing thereof. In another aspect, leveraging such structure can permit assembly of the user equipment in a manner that provides a seamless appearance of the user equipment and mechanical reliability and/or versatility.

Abstract: Methods and apparatus for storage object deletion job management are disclosed. A storage medium stores program instructions that when executed on a processor, identify, during a particular deletion execution iteration, a particular deletion job object stored at a multi-tenant storage service, wherein the particular deletion job object indicates a collection of storage objects that are eligible for deletion from the storage service in accordance with specified deletion criteria. The instructions determine, based on a job validity criterion, whether deletion operations corresponding to the particular deletion job object of the one or more deletion job objects are to be scheduled. If the job object is validated, the instructions initiate a deletion operation for storage objects indicated in the particular deletion job object.

Abstract: A system that implements a scalable data storage service may maintain tables in a data store on behalf of storage service clients. The service may maintain table data in multiple replicas of partitions that are stored on respective computing nodes in the system. In response to detecting an anomaly in the system, detecting a change in data volume on a partition or service request traffic directed to a partition, or receiving a service request from a client to split a partition, the data storage service may create additional copies of a partition replica using a physical copy mechanism. The data storage service may issue a split command defined in an API for the data store to divide the original and additional replicas into multiple replica groups, and to configure each replica group to maintain a respective portion of the table data that was stored in the partition before the split.

Abstract: Virtual data stores may be sparsely provisioned by virtual data storage services in a manner that controls risk of implementation resource shortages. Relationships between requested data storage space size, data storage server capacity, allocated data storage space size and/or allocated data storage space utilization may be tracked on a per data store, per customer, per data storage server, and/or a per virtual data storage service basis. For each such basis, a set of constraints may be specified to control the relationships. The set of constraints may be enforced during implementation resource allocation, and by migration of data storage space portions to different implementation resources as part of a sparse provisioning load balancing. Sparse provisioning details may be made explicit to virtual data storage service customers to varying degrees including explicit, aggregate on a per customer basis, and aggregate on a per virtual data storage service basis.