Abstract: A computing resource services provider receives user diagnostics comprising analysis operations to be performed on one or more computing resources. The computing resource services provider monitors resources indicated by the user diagnostics. When one or more computing resources exceed a threshold value or otherwise indicate abnormalities in computing resource usage, the computing resource services provider performs one or more analysis operations to determine one or more causes for increased computing resource usage. Results of the one or more analysis operations are presented to a user once the computing resource services provider completes the one or more analysis operations.

Abstract: Devices, systems, and methods are provided for managing advertisement exposure. The method may include receiving, by a first device, from a second device, an audio fingerprint based on presentation of first media content using a first media channel at a first time; determining, using automatic content recognition, that the audio fingerprint represents a portion of a first advertisement; determining that the first advertisement was presented at a second time using a second media channel and the second device; determining that a first number of times that the first advertisement has been presented to the user exceeds a first threshold number and that a second number of times that the first advertisement has been presented to the user does not exceed a second threshold number; refraining from selecting the first advertisement at a third time; and selecting the first advertisement for presentation at a fourth time.

Abstract: The present disclosure describes a system and method for implementing a virtual shoe try-on feature. The method includes predicting, using a machine learning model, a first plurality of pixels including pixels of an image corresponding to a foot in the image and adding a first virtual cylindrical object to a three-dimensional model of a shoe such that a portion of the first virtual cylindrical object is positioned within the three-dimensional model of the shoe. The method also include determining a set of pixels including pixels of the first plurality of pixels that intersect with the first virtual cylindrical object and removing, from the three-dimensional model of the shoe, a first portion of the three-dimensional model of the shoe that intersects with the set of pixels.

Abstract: Described are automated systems and methods for employing certificate authority meta-resources to facilitate automatic renewal and/or rotation of certificates and/or certificate authorities in a PKI hierarchy. For example, embodiments of the present disclosure can provide creating a certificate authority meta-resource, which can maintain and monitor certain information to facilitate automatic renewal and rotation of certificates and/or certificate authorities in a PKI hierarchy. The certificate authority meta-resource can also keep track of the active certificate authorities and certificates to ensure that trust is maintained without manual configuration of the PKI hierarchy.

Abstract: Disclosed are various embodiments for using unmanned vehicles to manage radio-based network infrastructure. In one embodiment, an unmanned vehicle is instructed to deliver a radio unit to a location to add coverage to a radio-based network.

Abstract: Described herein is a system for embedding audio watermarks. To improve performance without a user perceiving the audio watermark, a system embeds audio watermarks in audio data using scaling factors that are calculated based on a spectral masking level for each frame of the audio data. The scaling factors may vary over time and correspond to an amplitude of the audio watermark across a series of watermark frames. The system processes the audio data to determine a spectral mask, which represents an amount of energy perceived in a first frequency range that is caused by energy represented in neighboring frequency ranges. By selecting scaling factor values that keep an amplitude of the audio watermark below the threshold indicated by the spectral mask, the system may embed the audio watermark in the first audio data without the audio watermark being audible to the user.

Abstract: A host device may include an interconnect, a host memory, and a set of processor cores. A processor core may execute a VM assigned to a cryptographic key and may send a request to access a physical address in the host memory toward the interconnect. An enforcer device may receive the request and extract a key identifier from the request. The enforcer device may determine whether to allow the request to access the physical address via the interconnect based on the key identifier and a list of allowed keys stored on the enforcer device. If the enforcer device determines to not allow the request to access, the enforcer device may modify the physical address and/or the key identifier of the request.

Abstract: A storage service supports attachment of multiple clients to a distributed storage object and further supports persistent reservations that govern types of access the respective clients are granted with respect to the distributed storage object. In order to efficiently distribute reservation state changes to multiple partitions of the distributed storage object hosted by different data storage units/servers, existing connections are used between the data storage units/servers hosting the partitions of the distributed storage object and the connected clients to propagate reservation state changes.

Abstract: Systems and methods are provided for managing provision of network-stored data sets among instances of function code executing in an on-demand manner. Provision of the data sets may be managed such that the data sets are available efficiently and are able to be accessed within function invocations in a manner that is similar or identical to accessing locally-stored data sets. Moreover, the data sets may, when desired, be made available persistently across function invocations.

Abstract: An encoding of a cryptographic key is obtained in a form of an encrypted key. Request is provided to a service provider including a fulfillment involving performing a cryptographic operation on data. Upon fulfillment of the request, a response is then received which indicates the fulfillment of the request.

Abstract: Systems, methods, and computer-readable media are disclosed for shuttle lift systems to facilitate simultaneous movement of multiple shuttles across a multi-level storage structure that stores packages. The shuttle lift system may include the multi-level storage structure and a tower lift system at each end of the multi-level storage structure. One tower lift system may raise shuttles to a level of the multi-level storage structure. The other tower lift system may lower shuttles to a level of the multi-level storage structure and/or to a delivery area. The tower lift system may include cables (e.g., tethers) that are supported by a bottom portion and an upper portion of the tower lift system. Shelves may be attached to the cables on either side of the tower lift system and may receive and move shuttles up/down the tower lift system. The tower lift system may have high shuttle throughput and a reduced footprint.

Abstract: In one embodiment of the disclosure, packets are routed according to a VRF (Virtual Routing and Forwarding) domain that is represented by a VRF identifier in a VRF-identifier (ID) field of packet headers. In one embodiment of the disclosure, a VRF identifier may be added to a VRF-ID field of a packet header so that the packet is routed according to a VRF domain that the packet belongs to.

Abstract: An interposer card and a virtualization offloading card are provided for installation in a third-party server to integrate the third-party server into a cloud service provider network. The interposer card includes a baseboard management controller that interfaces with a management console of the cloud service provider network. This allows the third-party server to be converted into a server controlled by the cloud service provider network. Additionally, the baseboard management controller of the interposer card acts as a firewall between the third-party server and a management control network of the cloud service provider network. The interposer card and the virtualization offloading card are installed in a chassis of the third-party server via an expansion slot without requiring modification of the hardware or firmware of the third-party server.

Abstract: Techniques are described for providing a web cookie firewall application capable of monitoring and controlling the use of web cookies at computing devices. The web cookie firewall application uses web cookie security policies to selectively allow or prohibit the storage or use of individual web cookies or types of web cookies. For example, web cookie security permissions can be defined by such policies to permit or deny the storage or use of web cookies associated with certain website domains, to permit or deny the storage or use of defined types of cookies, or to control access to web cookies based on other attributes. The web cookie firewall application can be implemented as a standalone application, as a web browser plugin or extension, or as any other type of software application that it is capable of monitoring and controlling the use web cookies on a computing device.

Abstract: An anomalous period of operation of a database management system is detected by analyzing a time series of data points indicating the number of database queries pending processing by the system. Conditions associated with execution of the pending database queries are recorded and analyzed to identify conditions correlated with the anomalous period of operation. A recommendation for tuning the database is generated based on analysis of the conditions.

Abstract: Cameras having storage fixtures within their fields of view are programmed to capture images and process clips of the images to generate sets of features representing product spaces and actors depicted within such images, and to classify the clips as depicting or not depicting a shopping event. Where consecutive clips are determined to depict a shopping event, features of such clips are combined into a sequence and transferred, along with classifications of the clips and a start time and end time of the shopping event, to a multi-camera system. A shopping hypothesis is generated based on such sequences of features received from cameras, along with information regarding items detected within the hands of such actors, to determine a summary of shopping activity by an actor, and to update a record of items associated with the actor accordingly.

Abstract: Described implementations obtain a proof of valid attestation data. The attestation data may include configuration data of a host computing system. A prover service may receive the attestation data. The prover service may generate a proof to prove that the attestation data includes valid configuration data of the host computer system, without revealing sensitive or private information of the host computing system. The proof may be a zero-knowledge proof.

Abstract: In some cases, a method may include receiving electricity usage data from a re-ordering device and determining usage information for an appliance that is electrically connected to the re-ordering device based on the electricity usage data. The method may also include determining, based on the usage information and order history information for a customer, an estimated remaining quantity of an item that is associated with an appliance type of the appliance. The method further includes comparing the estimated remaining quantity of the item to a threshold associated with the item. In response to determining that the threshold associated with the item is satisfied, the method includes decrementing the estimated remaining quantity of the item. In response to determining that the threshold associated with the item is not satisfied, the method includes generating order data for automated re-ordering of the item for delivery to the customer.

Abstract: Variable reclamation of data copies can be performed. Copies of data may be stored in a data store. The copies of the data may be available to restore or return the data to a state described in or based on one of the copies. One or more copies, or portions of a copy, may be selected for invalidation according to a variable rate. The variable rate may be determined based on accesses to the data. Selected copies, or portions of a copy, may then be invalidated.