Abstract: One or more programs of instruction configure networking-enabled electronic devices to communicate in a ring communication network with a network controller. One or more startup files in one or more devices are configured to enable IP Forwarding, local system monitoring, and signal transmission processes on device startup. Data packets are sent from the network controller to each device coupled to the ring network, where each device processes a separate data packet to configure itself for ring network communication using IP Forwarding. Monitoring devices over a ring network includes using receipt of signals to determine if one or more devices have dropped from the network, modifying IP Forwarding by one or more devices on the network to compensate for a device dropping out, receiving data associated with one or more device parameters, launching one or more read-only interfaces providing device data, and updating various device elements over the network.

Abstract: Systems and methods for voice-enabled configurations for audio-output devices are disclosed. User accounts may be associated with one or more voice-enabled devices. Those voice-enabled devices may include audio-output functionality, while other voice-enabled devices do not include audio-output functionality. For devices without audio-output functionality, sending and/or receiving calls and/or messages may depend on whether the device is connected to an auxiliary device with audio-output functionality, via wired and/or wireless connection. Notifications of whether calling and/or messaging is enabled may be sent to the sending and/or receiving devices.

Abstract: Aerial vehicles may be equipped with propellers having pivotable blades that are configured to rotate or fold when the propellers are not rotating under power. A pivotable blade may rotate about an axis of a propeller with respect to a hub in the presence of wind flow until the pivotable blade is coaligned with a fixed blade, in a direction opposite to the wind flow. A pivotable blade may also fold over a hub of a propeller in the presence of wind flow, with the pivotable blade and a fixed blade being oriented in directions opposite to the wind flow. A center of mass of the pivotable blade may be caused to be on the same side of an axis as a center of mass of a fixed blade, even where the axis is not normal to the wind flow, thereby reducing an amount of drag generated by the propeller.

Abstract: Approaches presented herein can provide for end-to-end auditing of cross-account roles. A user associated with a first account might request some degree of access to resources associated with a second account. A role can be assumed by that user that delegates access to those resources, and the user can be issued temporary credentials to obtain the access. In order to provide for full auditing of these cross-account roles, calls that assume a role in one account can be linked to resource-related calls under a different account, which can include a third party account. Information can be obtained from both accounts that can be linked using an identifier provided to each environment as part of the role assumption. The linking can provide a full audit chain from end user to resource access across the separate accounts.

Abstract: Time-of-flight cameras may be synchronized where the fields of view of the time-of-flight cameras overlap. The time-of-flight cameras may be programmed within intervals of time for illuminating their respective fields of view that do not conflict with one another. When a first time-of-flight camera illuminates a first field of view that overlaps with a second field of view of a second time-of-flight camera, and the second time-of-flight camera detects reflected light from the illumination, the second time-of-flight camera may determine a time to illuminate the second field of view based on the reflected light. In this manner, any number of time-of-flight cameras may be synchronized with one another without requiring a direct connection between the time-of-flight cameras.

Abstract: Updates to a hierarchical data structure may be selectively replicated to other replicas of the hierarchical data structure. An update for a hierarchical data structure may be received and committed to the hierarchical data structure. A determination as to whether any other replicas of the hierarchical data structure have permission to receive the update may be made. For those replicas of the hierarchical data structure with permission to receive the update, the update may be provided to the replicas and committed to the replicas. Different types of replication techniques may be implemented, such as pull-based replication techniques or push-based replication techniques. Replication permissions for objects of the hierarchical data structure may be individually defined, in some embodiments.

Abstract: Disclosed are various embodiments of systems, methods, and computer programs that generate filters that can be used to filter offerings in a user interface. The effectiveness of filters can be evaluated to generate an effectiveness metric. The effectiveness metric can be used to weight the filters. The effectiveness metric can be based on a probability analysis of filters that are based on the probability that a filter was active when a transaction in the transaction history occurred.

Abstract: Techniques for private network mirroring are described. Users can select one or more existing private networks to be mirrored in the same or different network area. Any network configuration changes made in the selected private network (e.g., “master” private network) can be propagated automatically to the mirror private network. This enables users to utilize resources in another network area for disaster recovery, ensuring that the network configuration of the mirror private network is consistent with the master private network through real-time updates. Additionally, users managing infrastructure that includes multiple private networks can select one master private network and propagate configuration changes to other private networks, reducing management overhead incurred by these multi-private network installations.

Abstract: A packet processor may implement programmable tunnel creation. A network packet may be received at a packet processor. A tunneling protocol may be identified for the network packet. The packet processor may access one or more memories to obtain tunnel header data that includes a tunnel header and field identifiers which indicate respective fields in the tunnel header that are determined based on data in the network packet. The tunnel header data may have been stored in the one or more memories prior to receiving the network packet. The network packet may be modified to insert the tunnel header into the network packet including the respective fields indicated by the field identifiers. The modified packet may then be transmitted.

Abstract: Described is a system for counting stacked items using image analysis. In one implementation, an image of an inventory location with stacked items is obtained and processed to determine the number of items stacked at the inventory location. In some instances, the item closest to the camera that obtains the image may be the only item viewable in the image. Using image analysis, such as depth mapping or Histogram of Oriented Gradients (HOG) algorithms, the distance of the item from the camera and the shelf of the inventory location can be determined. Using this information, and known dimension information for the item, a count of the number of items stacked at an inventory location may be determined.

Abstract: An actuator system for fabricating a cavity within thermoplastic material includes a plurality of actuators arranged in an array. When dimensions of an item are determined, the actuator system may be programmed with data regarding such dimensions to fabricate a cavity for the item. A subset of the actuators, and distances by which each of the actuators is to be extended, may be selected based on dimensions of the item, in order to fabricate a cavity within the thermoplastic material that may accommodate the item therein. Additionally, the actuators and the distances may be selected based on intrinsic or extrinsic data regarding the item, and a cavity fabricated within the thermoplastic material may include one or more buffer zones or protective regions that are specifically formed with respect to aspects of the item.

Abstract: Techniques for executing commands associated with system stacks using parallel workflows are described herein. A dependency representation based at least in part on a stack description is created. The stack description describes stack resource instance and dependencies between those resource instances. The dependency representation is then analyzed to determine sub-workflows each of which may be executed in parallel. The sub-workflows may be altered based on one or more runtime interdependencies and the stack command may be executed by performing the sub-workflows in a determined order.

Abstract: Approaches are described for managing the processing of images or video on a computing device. A portable computing device can include one or more dedicated components, such as an application-specific integrated circuit (ASIC) or other dedicated processor component, to be integrated into the computing device to perform at least a portion of the imaging processing of captured images or video. For example, the dedicated processor component can enable the offloading of basic image signal processing, as well as higher level or “machine vision” processing from the device processor of the device. In this way, the dedicated processor component can perform signal processing for which the input is an image (or video), and where image or video data can be analyzed, interpreted and/or manipulated to generate an output, the output of image processing being either an image or a set of characteristics or parameters related to the image. The output can be provided to a device processor for further processing.

Abstract: A first service submits a request to a second service on behalf of a customer of a service provider. The request may have been triggered by a request of the customer to the first service. To process the request, the second service evaluates one or more policies to determine whether fulfillment of the request is allowed by policy associated with the customer. The one or more policies may state one or more conditions on one or more services that played a role in submission of the request. If determined that the policy allows fulfillment of the request, the second service fulfills the request.

Abstract: Systems and methods are described to facilitate generation of access policies for a network-accessible service. An authorization service may use access policies to control whether requests to access a service are authorized. A user may submit to the authorization service a request to implement a “shadow” policy, to be compared to a currently in-force policy for a service during a specified period of time. During that period, the authorization service can evaluate requests to access the service under both the currently in-force policy for the service and the shadow policy. The user can then be notified of any requests for which different authorization results are given under the currently in-force policy and the shadow policy, thus enabling the user to verify that differences between the currently in-force policy and the shadow policy are intentional rather than the result of errors within the shadow policy or currently in-force policy.

Abstract: A remote data storage service may operate one or more storage servers configured to maintain logical volumes on behalf of customers of the remote data storage service. Historical data associated with customer interaction with the logical volumes may be obtained by the remote data storage service. One or more probability models may be generated to evaluate various different configurations of the storage servers. The various configurations of the storage servers may be simulated using the one or more probability models and an optimal configuration may be determined.

Abstract: A ticketing system allows a ticket purchaser to encumber one or more tickets and, without purchasing the tickets, swap the encumbered tickets for other encumbered tickets. The ticketing system encumbers one or more tickets, and in response to an exchange request, searches for other encumbered tickets and facilitates an exchange. The shopping carts of the respective ticket holders can be updated to reflect the exchange. The encumbered ticket exchange may be between two parties, or may be a complex exchange between multiple holders of encumbered tickets prior to ticket purchase.

Abstract: Techniques described herein include a system and methods for implementing fast motion planning of collision detection. In some embodiments, an area voxel map is generated with respect to a three-dimensional space within which a repositioning event is to occur. A number of movement voxel maps are then identified as being related to potential repositioning options. The area voxel map is then compared to each of the movement voxel maps to identify collisions that may occur with respect to the repositioning options. In some embodiments, each voxel map includes a number of bits which each represent voxels in a volume of space. The comparison between the area voxel map and each of the movement voxel maps may include a logical conjunction (e.g., an AND operation). Movement voxel maps for which the comparisons result includes a value of 1 are then removed from a set of valid repositioning options.

Abstract: One or more clients of a service may obtain access to resources of the service using one or more roles. A role may be used to delegate access to resources that a client normally would not otherwise have access to. A system of the service may be used to detect the occurrence of an event associated with a principal that has assumed a role to obtain a token that enables access to a computing resource. The system may prevent one or more principals from use of the token for future access to the resource, and may update permissions associated with the role to prevent one or more principals from assuming the role.

Abstract: A video display hub is mounted in a common household area such as a kitchen or family room. During times that have been designated as being available for communications, devices in first and second households exchange and display blurred video, allowing users in each household to see vague shapes and movements of the other household. Upon noticing activity, a user in the first household may initiate a video conversation, causing the video from the first household to be unblurred and causing unobscured voice to be transmitted to the second household. A user in the second household may respond by allowing the video conversation to be fully enabled, allowing the video from the second household to be unblurred and unobscured voice to be transmitted back to the first household.