Abstract: A device management service may enforce compliance of remote devices with device specifications by disabling or enabling use of client certificates by applications installed on the devices. The device management service receives configuration data from an agent installed on the remote device. If the device management service determines that the device is no longer compliant with specifications for the device, then the device management service may prevent subsequent use of client certificate(s) by applications on the device to establish certificate-based connections. For example, the device management service may disable or revoke a client certificate or may instruct the device to disable or remove the client certificate. If the device becomes compliant at a subsequent time, then the device management service may enable the client certificate or cause a new client certificate to be sent to the device.

Abstract: Systems and methods for presence ground truth approximation and utilization are disclosed. For example, a system detects the presence of a predefined subject, such as a person associated with a given user profile, and/or determines that authentication criteria for performing an action in association with the user profile has been satisfied. A period of time to associate data is determined, and data of one or more data types is labeled as being associated with the speaker identification event. That data may be formatted and input into one or more models to train those models to more accurately detect presence and/or determine whether authentication of a user profile should succeed.

Abstract: One or more indications may be received of a decision to deny an attempted access of a computing resource by an identity. A plurality of relevant policies may be determined whose permissions are evaluated as inputs to the decision to deny. One or more denial-related policies of the relevant policies may be determined that are associated with at least one of explicitly denying or implicitly denying the attempted access. One or more denial indications may be provided of the one or more denial-related policies. The one or more denial indications may include at least one explicit deny indication of at least one of the one or more denial-related policies that explicitly denies the attempted access. The one or more denial indications may also include at least one implicit deny indication of at least one of the one or more denial-related policies that implicitly denies the attempted access.

Abstract: Product spaces for containers of non-discretized items are defined by sets of points in three-dimensional space. When a customer breaches or contacts a product space established for a container of the non-discretized items, video feeds representing the product space are displayed to an associate in a web page or another user interface. By interacting with the user interface, the associate may view the video feeds and make a determination as to whether the customer received any of the non-discretized items from the container, and to confirm an identity of the customer accordingly.

Abstract: Proxy-based scaling may be performed for databases. A proxy may be implemented for a database that can establish a connection between the proxy and a database engine to perform a database queries received from a client at the proxy. A scaling event may be detected for the database responsive to which the proxy may establish a connection with a new database engine which may, in some embodiments, have different capabilities or resources that address the features or criteria that triggered the scaling event. Session state may be copied from the database engine to the new database engine so that the new database engine may be able to provide access to the database on behalf of requests received from the client through the proxy.

Abstract: Systems and methods to reduce aerodynamic drag and/or affect flight characteristics of an aerial vehicle may include adjustable fairings associated with one or more components of the aerial vehicle. The adjustable fairings may be coupled to and at least partially surround a motor, propulsion mechanism, motor arm, strut, or other component of an aerial vehicle. In addition, the adjustable fairings may be passively movable between two or more positions responsive to airflow around the fairings, and/or the adjustable fairings may be actively moved between two more positions to affect flight characteristics. Further, the adjustable fairings may include actuatable elements to alter a portion of an outer surface of the fairings to thereby affect flight characteristics. In this manner, adjustable fairings associated with various components of an aerial vehicle may reduce aerodynamic drag and/or may improve control and safety of an aerial vehicle.

Abstract: Parameters of a pool of computing resources to be utilized for machine learning tasks from a set of entities are stored, including a category of the computing resources, and a post-task-completion retention period during which, after completion of a task, at least a portion of data stored at the resource is not to be deleted. A compute instance of the pool is assigned to a task requested from the set of entities after determining that one or more configuration settings of the instance satisfy a preference indicated in the request for the task, and that the retention period of the instance relative to a completion of an earlier task on the instance has not expired. A result of the task is stored.

Abstract: Techniques for dividing a geographical area into districts are described herein. Geospatial vector data, barrier geospatial vector data, road infrastructure data, and historical delivery demand data for a geographical area may be obtained. A plurality of clusters from a stratified sampling of data points for the delivery demand data and barrier penalties from a barrier-aware road graph are generated. A first set of polygons for the plurality of clusters may be generated using a concave hull algorithm. A second set of polygons may be generated using a barrier constrained network Voronoi algorithm that uses the barrier-aware road graph and the first set of polygons as seeds. The second set of polygons may be modified using a bounded Voronoi algorithm that uses a raster cost allocation based on barrier penalties. Coordinates for each polygon of the modified second set of polygons are determined that divide the geographical area.

Abstract: Techniques are described for managing execution of programs. In some situations, program execution is managed for multiple users using excess program execution capacity of one or more computing systems. In some such situations, excess or otherwise unused program execution capacity may be made available to execute programs on a temporary basis, such that the programs executing using the excess program execution capacity may be terminated at any time if other preferred use for the excess program execution capacity arises. The excess program execution capacity may in some situations be provided in conjunction with other dedicated program execution capacity that is allocated to particular users, such as to use unused dedicated capacity of some users as excess capacity for other users. In some situations, the techniques are used in conjunction with a fee-based program execution service that executes multiple programs on behalf of multiple users of the service.

Abstract: The present disclosure generally relates to systems and methods for searching media content. In some implementation examples, a search system receives an input query, generates a query embedding of the input query, and generates a bias mitigation transformation associated with a sensitive attribute. Based on the query embedding and the bias mitigation transformation, the search system generates a transformed query embedding that suppresses at least a portion of the query embedding related to the sensitive attribute. Using the transformed query embedding, the search system executes a similarity search in a media embedding model to identify one or more media embeddings that are similar to the transformed query embedding and transmits the one or more media embeddings.

Abstract: Embedding an insecure application within a host application is performed. Modern applications may incorporate smaller applications into a common interface with some applications requiring more privilege than others. A host application may be configured to load an application into a sandboxed frame to create separate security zones by isolating the originating domains of the respective applications. Security authorization for the sandboxed application may be obtained by the host application as part of initialization. Then, operations to be performed by the sandboxed application that require origination from the host domain may be requested by the application to the host using a Remote Procedure Call (RPC) mechanism. The host may then perform the requested operations on behalf of the application and return the results via RPC. In this manner, the embedded application may employ greater application privileges without increasing security vulnerabilities of the host.

Abstract: Techniques for outputting supplemental content are described. A system may receive input data corresponding to a user input, and determine and present output data responsive to the user input. After causing the output data to be presented, the system may determine supplemental content is to be presented. Based on this, the system may determine first presentation data representing first supplemental content is to be visually presented, and second presentation data representing second supplemental content is to be audibly presented. The system may use a machine learning model to determine the first supplemental content is to be presented instead of the second supplemental content. The system may thereafter cause a device to use the first presentation data to visually present the first supplemental content.

Abstract: Techniques for updating a chatbot definition are described. In some examples, this updating includes receiving an edit to intent characteristics for a stage of a plurality of stages in a chatbot flow, identifying a stage to modify based on at least the received edit, identifying, for the stage, a default update rule based on the chatbot definition, and updating the stage in the chatbot definition by inferring a next step according to one or more rules for the stage including the identified default update rule.

Abstract: Systems and methods for configuration for contextual response to motion-based events are disclosed. For example, a predefined event may be detected. The system may determine that a subject associated with the event is of a given type of subjects and may determine whether another person is present in the environment associated with the event to assist in providing aid. The presence of the other person may be detected, a type of the other person may be performed, and a notification may be output on a second device associated with the other person based on the type. The system may track when the other person reach an area associated with the event and may cause the first device to perform an action to assist the other person in providing aid.

Abstract: Systems, methods, and computer-readable media are disclosed for systems and methods for automated video summary generation using textual quotes. Example methods may include determining first text representing a phrase spoken in video content, determining that the first text is present in first subtitle data of first video content, determining a first timestamp and a second timestamp associated with the first text in the first subtitle data, determining a first video segment of the first video content corresponding to the first timestamp and the second timestamp, and generating a first video summary for the first video content, the first video summary comprising the first video segment.

Abstract: Techniques for authenticating users at devices that interact with the users via voice input. For instance, the described techniques may allow a voice-input device to safely verify the identity of a user by engaging in a back-and-forth conversation. The device or another device coupled thereto may then verify the accuracy of the responses from the user during the conversation, as well as compare an audio signature associated with the user's responses to a pre-stored audio signature associated with the user. By utilizing multiple checks, the described techniques are able to accurately and safely authenticate the user based solely on an audible conversation between the user and the voice-input device.

Abstract: Images of a hand are obtained by a camera. A pose of the hand relative to the camera may vary due to rotation, translation, articulation of joints in the hand, and so forth. Avatars comprising texture maps from images of actual hands and three-dimensional models that describe the shape of those hands are manipulated into different poses and articulations to produce synthetic images. Given that the mapping of points on an avatar to the synthetic image is known, highly accurate annotation data is produced that relates particular points on the avatar to the synthetic image. An artificial neural network (ANN) is trained using the synthetic images and corresponding annotation data. The trained ANN processes a first image of a hand to produce a second image of the hand that appears to be in a standardized or canonical pose. The second image may then be processed to identify the user.

Abstract: A determination is made as to whether a value of a first parameter of a first application is to be obtained using a natural language interaction. Based on received input, a first service of a plurality of services is identified. The first service is to be used to perform a first task associated with the first parameter. Portions of the first application to determine the value of the first parameter and to invoke the first service are generated.

Abstract: Described are systems and methods for deduplicating shared dependencies for micro-frontend applications. Embodiments of the present disclosure can provide hosting of shared dependencies on a networked resource, such as a content delivery network (CDN), and import statements of the shared dependencies can be replaced with calls to a network identifier specifying a network location where the shared dependencies are hosted. Accordingly, the shared dependencies can be natively imported from the network location and shared among the micro-frontend bundles.