Abstract: Managed lifecycle roles are disclosed. Managed lifecycle roles may be used for secure credential vending or otherwise. For instance, an entity (e.g., administrator or other entity) requests, via an interface of a role manager, creation of a role associated with a lifecycle definition (e.g., an expression of an enforceable expiration of the role or similar characteristic). The role manager stores the role and role lifecycle definition to a data store. Another entity requests to use the role to perform some operation with respect to a resource. A credential service validates the request against a lifecycle definition for the role (and against an access control list, in some examples) and responds to valid requests with credentials useable to perform the operation with respect to the resource. The other entity uses the credentials to perform the operation with respect to the resource. A sweep process manages attributes of the roles.

Abstract: A method of optimizing a delivery route for a delivery vehicle driver and a delivery assistant includes: identifying a delivery route for a delivery vehicle; determining, for each of the packages to be delivered using the delivery route, a first delivery time for a delivery vehicle driver of the delivery vehicle to deliver the respective package without the delivery assistant, a second delivery time for a delivery assistant of the delivery vehicle to deliver the respective package without the delivery vehicle driver, and a third delivery time for both the delivery assistant and the delivery vehicle driver to deliver the respective package; determining minimum times needed by the delivery vehicle driver and the delivery assistant to deliver the packages using the delivery route; and determining that a minimum of the estimated total delivery times corresponds to a first subset and a second subset of the packages.

Abstract: This disclosure describes techniques for increasing the baseline performance of a burstable instance to an increased performance level for a limited time period. For example, a user may schedule a time period which the burstable instance has access to 100% of a CPU, instead of competing with other burstable instances even during periods of bursting as in prior techniques. In some cases, the user uses credits to reserve the time periods at which the increased performance level is requested. After receiving the reservation, a resource system selects computing resources to host the burstable instance such that the burstable instance, can operate at the requested increased performance level. After the time period has ended, the burstable instance may return to the baseline performance level.

Abstract: Methods, systems, and computer-readable media for implementing rule-based triggering in a provider network are disclosed. When conditions are met for one or more triggers, one or more rules that comprise the one or more triggers are determined. The conditions are determined in a provider network comprising a plurality of resources. One or more actions are determined in the one or more rules that comprise the one or more triggers. The one or more actions are performed, comprising modifying one or more of the resources in the provider network.

Abstract: Systems and methods for usage-based device naming and grouping are disclosed. For example, trigger events that indicate when a device should be renamed, added to a device group, and/or added to a routine may be determined. Usage data representing usage of the device may be received and utilized to determine if a trigger event occurs. When a trigger event occurs, a recommendation for renaming, grouping, etc. may be determined and sent to a user device. Upon acceptance of the recommendation, the device may be renamed, grouped, and/or added to a routine.

Abstract: Systems, methods, and computer-readable media are disclosed for determining obstacle data based on sensor data such as greyscale data and depth data. Based on the obstacle data navigation data may be determined and used by an autonomous vehicle to navigate an environment such as a warehouse or storage facility. The obstacle data may be determined by determining three-dimensional representations of the greyscale data and the depth data and segmented and combining or fusing the three-dimensional representations of the greyscale data and the depth data. The system used to determine the obstacle data may be trained to avoid false obstructions and omitted obstructions.

Abstract: Described are systems and methods for determining an agent that performed an event within a materials handling facility. A series of overhead images that include representations of the event location and one or more agents are processed to determine a motion or movement of the agent over a period of time. For example, a motion model representative of a motion of the agent over a period of time is generated from the images. A distance between the motion model and the event location is also determined. An association between the agent and the event may be determined based on the motion model and the distance between the motion model and the event location.

Abstract: Techniques are described for providing managed computer networks, such as for managed virtual computer networks overlaid on one or more other underlying computer networks. In some situations, the techniques include facilitating replication of a primary computing node that is actively participating in a managed computer network, such as by maintaining one or more other computing nodes in the managed computer network as replicas, and using such replica computing nodes in various manners. For example, a particular managed virtual computer network may span multiple broadcast domains of an underlying computer network, and a particular primary computing node and a corresponding remote replica computing node of the managed virtual computer network may be implemented in distinct broadcast domains of the underlying computer network, with the replica computing node being used to transparently replace the primary computing node in the virtual computer network if the primary computing node becomes unavailable.

Abstract: Devices, systems, and methods are provided for generating and selecting video clips for inclusion in video sequences based on still frame images. A method may include encoding first embeddings for a first video including first images of an item at a first scene, the first embeddings indicative of features of the first scene; encoding second embeddings for a second video including second images of the item at a second scene, the second embeddings indicative of features of the second scene; encoding third embeddings for the first video, the third embeddings indicative of features of a first type of camera shot used for the first images; encoding fourth embeddings for the second video, the fourth embeddings indicative of features of a second type of camera shot used for the second images; and generating, based on the first, second, third, and fourth embeddings, a video sequence for the item.

Abstract: A speech interface device is configured to detect an interrupt event and process a voice command without detecting a wakeword. The device includes on-device interrupt architecture configured to detect when device-directed speech is present and send audio data to a remote system for speech processing. This architecture includes an interrupt detector that detects an interrupt event (e.g., device-directed speech) with low latency, enabling the device to quickly lower a volume of output audio and/or perform other actions in response to a potential voice command. In addition, the architecture includes a device directed classifier that processes an entire utterance and corresponding semantic information and detects device-directed speech with high accuracy. Using the device directed classifier, the device may reject the interrupt event and increase a volume of the output audio or may accept the interrupt event, causing the output audio to end and performing speech processing on the audio data.

Abstract: In networks, some communication links may be provided as part of a network underlay to reach outer networks/regions. Technologies are disclosed for monitoring/analyzing targeted networks using probe packets sent from outside of the targeted networks. The probe packets are configured to include an outer IP packet encapsulating an inner UDP packet, where the inner UDP packet indicates a source of the probe (e.g., an agent) as both the source and destination address. Time to Live (TTL) values for the inner and outer packets are controlled to propagate the packet through the network using the underlay to access the outer network/regions.

Abstract: A modified measured boot approach is utilized for establishing a secure communication link between two devices. Each device may execute a respective boot process until the device reaches the stage responsible for establishing the communication link with the other device. Each device may exchange its respective self-signed certificate and extend its certificate chain with the self-signed certificate received from the other device. A secure link can be established using the public key of the other device as a based key for a key exchange protocol.

Abstract: Methods and apparatus for partitioned private interconnects to provider networks are described. At least a portion of available bandwidth of a private physical interconnect between a provider network and a connectivity intermediary's network is designated as the bandwidth limit of an interconnect partition set up on behalf of a customer at the request of the intermediary. The intermediary's network comprises one or more devices to which at least one of the customer's devices is connected. Access to one or more resources of the provider network via the interconnect is enabled. Traffic monitoring results associated with the interconnect are used to enforce the designated bandwidth limit of the partition.

Abstract: This disclosure describes techniques and systems for encoding instructions in audio data that, when output on a speaker of a first device in an environment, cause a second device to output content in the environment. In some instances, the audio data has a frequency that is inaudible to users in the environment. Thus, the first device is able to cause the second device to output the content without users in the environment hearing the instructions. In some instances, the first device also outputs content, and the content output by the second device is played at an offset relative to a position of the content output by the first device.

Abstract: Technologies are disclosed for interacting with a virtual assistant to request updates associated with one or more events and/or perform actions. According to some examples, a user may use their voice to interact with a virtual assistant to receive updates relating to events occurring during a certain period of time. For example, a user may request an update associated with one or more events occurring that day. The system may access data sources (e.g., calendar services, email services, etc.) to obtain data associated with the events, tag the events according to one or more conditions indicated by the data, and/or rank the events according to the tags. In addition, to resolve conditions associated with the events, the virtual assistant may also include options in the update to perform certain actions and/or to provide response data. The virtual assistant may generate the update and audibly provide the update to the user.

Abstract: A portion of a radio-based application (RBA) is executed at a first runtime environment (RTE) launched at a server. The first RTE includes a software program for processing messages between a pair of layers of the RBA. In response to determining that the portion of the RBA is to be executed at a second RTE, at least a subset of state information pertaining to the inter-layer messages is transferred to the second RTE without pausing the RBA. After the state information is transferred, the portion of the RBA is run at the second RTE.

Abstract: An address decoder for a system is disclosed that can be used for different source nodes in the system. Each address decoder can be configured to perform a plurality of decode methods that can be customized for each source node. A first decode method can be used to determine a target node from a plurality of target nodes based on a destination address of the transaction. A second decode method can be used to assign a dedicated target node as the target node irrespective of the destination address of the transaction. The second decode method can be used to route the transaction to the dedicated target node for testing and verification operations.

Abstract: Techniques for performing automated device activation and managing access to a workspace are described herein. While operating in an activated state, a user device (e.g., a wearable device) may be configured to modify movements of various mobile components (e.g., mobile drive units, robotic arms, etc.) of the workspace by emitting signals that cause the mobile components to stop or reduce speed when in proximity of the user device. An access controller device (ACD) may be used to restrict and/or allow access to the workspace and to perform operations for activating a user device that is attempting access. The ACD may receive light emissions from the user device that may be used to initiate a process for activating the user device. When the ACD receives an indication that the user device is operating in the activated state, the ACD may execute operations for enabling access to the workspace.

Abstract: This disclosure describes techniques for identifying users that are enrolled for use of a user-recognition system and updating enrollment data of these users over time. To enroll in the user-recognition system, the user may initially scan his or her palm. The resulting image data may later be used when the user requests to be identified by the system by again scanning his or her palm. However, because the characteristics of user palms may change over the time, the user-recognition system may continue to build more and more data for use in recognizing the user, in addition to removing older data that may no longer accurately represent current characteristics of respective user palms.

Abstract: Threats can be determined from anomalous events based on artificial intelligence (AI) models. For example, a computer system stores, based on an output of a first AI model, first information indicating that a first event cluster of the first event clusters is associated with a threat classification and that a second event cluster of the first event clusters is associated with a non-threat classification. The computer system receives a first dataset representing first events and generate a first input to the first AI model based on the first dataset. The computer system determines, based on the first input to the first AI model, second event clusters and that a third event cluster of the second event clusters has no correspondence in the first event clusters and is associated with an unknown classification. The computer system generates second information indicating that the third event cluster is associated with the unknown classification.