Abstract: A storage application may provide protection of data accesses by clients without incurring metadata storage costs. A request to store a record may be received, where subsequent accesses to the stored data are protected by an access condition that includes a key or other metadata. To store the record, a composite record including the record and the security key may be generated and a detection code may be determined for the composite record. The record may then be stored along with the detection code. A request to access the record may then be received, the access request including an access key. The record and detection code may be retrieved and a new composite record including the retrieved record and the access key may be generated. Satisfaction of the access condition may be determined according to a new detection code generated from the new composite record.

Abstract: A service implemented at a first isolated virtual network of a provider network is added to a database of privately-accessible services. Configuration changes that enable network packets to flow between the first isolated virtual network and a second isolated virtual network without utilizing a network address accessible from the public Internet are implemented. Service requests originating at the second isolated virtual network are transmitted to the first isolated virtual network via private pathways of the provider network. Metrics corresponding to service requests directed from the second isolated network to the service are collected and provided to the respective owners of one or both isolated virtual networks.

Abstract: Technologies are disclosed for performing context-aware routing of traffic based on an application of a series of filters and/or selectors to determine an optimal group of interfaces for servicing traffic relating to a prefix. A traffic management control plane processes input data corresponding to aggregated telemetry data for a network by determining candidate groups of interfaces to service a network prefix and applies tunable filters and/or selectors to the candidate groups to determine a targeted group to use for servicing traffic corresponding to the prefix. The determined targeted group is mapped to the prefix in a mapping result, which is then provided to an actuator interface to control network devices to inject the new mapping into the network to control traffic according to the mapping.

Abstract: Systems and methods to automatically generate training data including airborne object trajectory data may receive real trajectory data from within a first environment, receive imaging data associated with a second environment, and transform and/or modify the real trajectory data to synthetic trajectory data for the second environment. Then, the synthetic trajectory data may be superimposed within the imaging data of the second environment. In addition, images of an airborne object may be rendered along the synthetic trajectory data to generate training data that may be used to train machine learning models or algorithms for various computer vision applications.

Abstract: A speech-processing system receives first audio data correspond to a first voice and second audio data corresponding to a second voice. The speech-processing system determines vocal characteristics of the second voice and determines output corresponding to the first audio data and the vocal characteristics.

Abstract: This disclosure describes a system for managing inventory as it transitions into a materials handling facility, as it transitions between locations within a materials handling facility and/or as it transitions out of a materials handling facility. In some instances, a user (e.g., picker or picking agent) may retrieve an item from an inventory location and place the item into a tote. The systems described herein detect the item when it is added to or removed from the tote.

Abstract: Techniques for intelligent multi-carrier network edge application deployment are described. Traffic that is destined for an application implemented in multiple edge locations of a cloud provider network is originated by a mobile user equipment device via use of a communications network of a first communications service provider (CSP). An edge location hosting the application, from multiple such candidates, can be selected as a destination for the traffic. The edge location may be deployed in a facility of a different CSP. The traffic can be sent into the edge location using a network address of the different CSP to securely allow for its entry thereto.

Abstract: Techniques are described for controlling a first device that operates in a first mode. In an example, the first device receives, while it is operating in a first mode, a secret from a second device. The first device is capable of wireless data reception and incapable of wireless data transmission in the first mode. The first device determines that the secret is valid. Based at least in part on the secret being valid, the first device performs at least one of: switching an operational mode of the first device from the first mode to a second mode, or performing, while operating in the first mode, a command indicated by the second device. The first device is capable of the wireless data transmission in the second mode.

Abstract: Various embodiments provide distributed control plane functions for radio-based networks. In one embodiment, control plane network traffic for a first functionality of a control plane network function in a radio-based network is routed to a first control plane component in an edge location of the radio-based network. Control plane network traffic for a second functionality of the control plane network function in the radio-based network is routed to a second control plane component in a centralized location of the radio-based network.

Abstract: Techniques for processing utterance audio are described. In an example, a computer system determines audio data representing an utterance detected by a device, and generates, based at least in part the audio data, first data representing at least one of portion of the utterance in a frequency domain. The first data specific is to a first frequency range. The computer system determines determining a second frequency range that is a subset of the first frequency range, the second frequency range meeting a frequency threshold, and generates, based at least in part on the first data, second data that represents the at least one portion in the frequency domain. The second data is specific to the second frequency range. The computer system determines, based at least in part on the second data, that additional audio data associated with the device is to be processed.

Abstract: An emulated hardware security device is configured for a compute instance. A state descriptor of the compute instance comprising software identification metadata prepared using the emulated hardware security device is provided to a resource verifier. The metadata identifies a program to be executed at the compute instance. In response to a response received from the resource verifier, a decision is made as to whether to execute the software program at the compute instance.

Abstract: Network pathways are identified to transfer packets between a pair of regional virtual traffic hubs of a provider network. At a first hub of the pair, a first action is performed, resulting in a transmission of a packet received from a first isolated network to the second hub along a pathway selected using dynamic routing parameters. At the second hub, a second action is performed, resulting in the transmission of the packet to a destination within a second isolated network.

Abstract: Devices, systems, and methods are provided for smart shopping based on recognition of objects presented in video. A method may include identifying, by a first device, using a machine learning model using a computer vision technique, objects represented in video content; determining that an object of the objects is available for purchase using an online retail system; causing concurrent presentation of the video content and a first indication that the object is available for purchase using the online retail system; receiving, from a second device, a second indication of a user selection of the first indication, wherein the user selection is indicative of a request to present additional information associated with the object; generating, based on the request, presentation data including the additional information and an option to purchase the object using the online retail system; and causing, based on the request, presentation of the presentation data.

Abstract: Techniques for allocating resources in an item handling environment are described. In an example, a computer system determines that an item is to be transferred at an item handling station to or from a stowage unit. The computer system determines data associated with transferring the item. The data indicates at least one of: an item type, a sequence of transferring items to or from the stowage unit, capability at the item handling station associated with handling the item type, an ergonomic parameter associated with the handling, a configuration of the stowage unit, an allocation of one or more resources to handle items, or a schedule of the allocation. The computer system generates, by using the data as input to an artificial intelligence model, a set of instructions indicating an allocation of a resource to the item handling station for the transferring of the item and a timing of the allocation.

Abstract: Techniques for zero-shot and few-shot transfer of domain-adapted base networks are described. Multiple machine learning task layers are trained using a shared base feature extractor network. At least one task layer is trained with samples and corresponding labels from a first domain as well as a second domain. At least one other task layer is trained with samples and corresponding labels from only the first domain. Ultimately, the other task layer(s) are adapted to generate labels for the first domain via the base network being weighted based on all trainings.

Abstract: In a data lake, a control data object is defined. The control object defines the processes and relationships of processes associated with a data set in the data lake. The control has states that are tied to and adapt in response to state changes of the associated data set. A control can have a control type. The system automatically carries forward enabled processes from one data set version to the next data set version. The system uses the control definition to execute processes, such as compaction or data quality scans, on data sets in the data lake.

Abstract: This disclosure is directed to, in part, mobile carts and/or associated computing devices that are configured to determine their respective location, determine an item in a facility that is associated with an item location that is nearest the location of the cart, determine one or more items that have been designated as similar to the nearest item, and output recommendation data corresponding to the similar items. In some instances, items may be ranked according to similarity based on a comparison of text data associated with the items, based on a comparison of location data associated with the items in other facilities, or the like.

Abstract: Systems and methods for data transmission protocols are disclosed. For example, a receiving device is selected to send retransmission requests when data packet loss occurs, and then a unicast transmission of data packets may be sent to that selected receiving device. Other receiving devices may be configured to receive the unicast transmission as sent to the selected receiving device and to process the transmission as a multicast transmission. Alternatively, a multicast transmission may be sent to all of the receiving devices, and the selected receiving device may be configured to process the multicast transmission as a unicast transmission for the purpose of sending retransmission requests indicating packet loss. Backup packets may be generated and sent to all of the receiving devices to improve content output quality.

Abstract: A system configured to determine an estimated angle of arrival in reverberant environments. When a first device detects a calibration tone generated by a second device, the first device may generate multichannel audio representing the calibration tone and process the multichannel audio using a combination of detection filtering and subspace processing to determine a relative direction of the second device. For example, the first device may perform matched filtering to isolate a direct-path peak for the calibration tone, and then may sweep through all potential azimuth directions to identify an azimuth value corresponding to the direct-path peak. In some examples, the first device identifies a steering vector associated with a particular direction (e.g., signal subspace) that minimizes components in all other directions (e.g., noise subspace).