Abstract: A cryptography service allows for management of cryptographic keys in multiple environments. The service allows for specification of policies applicable to cryptographic keys, such as what cryptographic algorithms should be used in which contexts. The cryptography service, upon receiving a request for a key, may provide a referral to another system to obtain the key.

Abstract: Methods and apparatus for a pipelined architecture for storage lifecycles are disclosed. A method includes identifying, during a transition candidate discovery iteration, storage objects of a multi-tenant service for which respective lifecycle transitions are to be scheduled, including a particular storage object identified as being a candidate for a particular lifecycle transition. The method includes generating transition job objects, each job comprising respective indications of one or more of the storage objects identified during the discovery iteration. The method includes assigning, during a transition execution iteration, resources to initiate storage operations for the particular lifecycle transition, and initiating, using the assigned resources, storage operations for the particular lifecycle transition.

Abstract: Systems and methods related to a room measurement process may include determining a floor plane associated with a room, determining a plurality of wall planes associated with the room, and determining a ceiling plane associated with the room. The room measurements may be based on data received from an imaging sensor and position and orientation sensors associated with a user device. In addition, a three-dimensional geometric shell of the room may be generated based on the room measurements.

Abstract: Technology is described for communicating with a computer instance. A request may be received to create a session connection between a computing instance with a messaging service that operates in a computing service environment. The session connection may be created between the agent running on the computing instance and the messaging service. A socket tunneling connection may be generated to replace the session connection. The socket tunneling connection may be between the agent and the messaging service. Message data streams may be passed between the agent and the messaging service over the socket tunneling connection. An instruction received from a client device may be forwarded to the computing instance over a second socket tunneling connection created with the client device. Command output received from the computing instance over the second socket tunneling connection may be forwarded. The output may result from an execution of the instruction at the computing instance.

Abstract: A microcontroller may be implanted to manage migration events performed by a separate memory controller to non-volatile memory. Migration events, such as failed writes at the memory controller or wear leveling migrations to move data from one storage location to another may be detected by the microcontroller. The destination location and the data to be migrated may be identified by the microcontroller. The microcontroller may then instruct the memory controller to copy the data to the destination location.

Abstract: A voice-controlled question answering system that is capable of answering questions using both a knowledge base and a search engine. The knowledge base is used to answer questions when answers to those questions are contained in the knowledge base. If an answer using the knowledge base is unavailable, and if the question is suitable for answering using an unstructured search approach, the system may obtain an answer using a search engine. The search engine results may be processed to obtain an answer to the question suitable for output using a voice user interface.

Abstract: An image-aided GPS navigation deployed on a vehicle may include a GPS receiver configured to estimate the position of the vehicle based on signals received from one or more GPS satellites. The navigation system may also include an imager configured to capture image frames associated with an environment through which the vehicle travels and estimate the relative motion of the vehicle through the environment based at least in part on the image frames. The navigation system may also include a navigation processor configured to receive the position estimation from the GPS and the relative motion estimation, and determine an updated position estimation based at least in part on the relative motion estimation.

Abstract: Techniques are described for a content rating system that allows for automatic assignment of maturity ratings for media content.

Abstract: Techniques for simplifying and reusing visual programming graphs are described herein. In some examples, visual programming graphs may be simplified by decoupling execution signals from data resolution. Execution of a particular node may be triggered through a representation of a signal sent from a signal output slot of another node to a signal input slot on the node being triggered. Additionally, evaluation of data values may be represented by a connection between a data output slot on the node providing the data value to a data input slot on the node receiving the data value. Another technique for simplifying visual programming graphs may include combining and/or collapsing of multiple selected visual programming nodes into a single reusable visual programming node. In some examples, reusable combined visual programming nodes may be exposed using unlocked versions and/or locked versions.

Abstract: Systems and method are provided for source-dependent address resolution. Multiple computing devices may be associated with identifiers, such as network names. These computing devices may further be associated with both internally and externally accessible network addresses. A source-dependent address resolution component may resolve a network identifier into an internal or external address based on a network of a requesting device. Specifically, a request for address resolution may be received from a source network, and be resolvable into an address of a target network. If the source network and target network are the same, an internal address of that shared network is returned. If the source network and the target network are different, an external address enabling external communication with the target network is returned. In some embodiments, determination of a source network may be facilitated based on a source port of a request.

Abstract: Methods and apparatus are disclosed for securely erasing partitions of reconfigurable logic devices such as FPGAs in a multi-tenant server environment. In one example, a method of securely erasing an FPGA includes identifying one partition of previously-programmed resources in the FPGA, erasing the identified partition by storing new values in memory or storage elements of the identified partition, and storing new values in memory or storage elements of additional external resources electrically connected to the integrated circuit and associated with the identified partition. Thus, other partitions and subsequent users of the identified partition are prevented from accessing the securely erased data. A configuration circuit, accessible by a host computer via DMA, can be programmed into the FPGA reconfigurable logic for performing the disclosed erasing operations.

Abstract: A concordance service receives a probabilistic data structure query generated based at least in part on a set of query parameters for a search of a plurality of resources. In response to receiving the query, the concordance service uses the probabilistic data structure query and a probabilistic data structure tree to determine a set of nodes of the tree that individually satisfy the set of query parameters. The concordance service verifies that the resources corresponding to the set of nodes satisfy the query parameters. Based at least in part on this verification, the concordance service provides a response to the query.

Abstract: Visual effects such as bleach bypass, sepia tone conversion, cross processing, custom effects, and many others may be applied to video streams before they are displayed to viewers. In some examples, different visual effects may be applied to the same underlying video content, such as on a viewer-by-viewer basis or at other levels of granularity, thereby allowing certain particular visual effects to be targeted to particular viewers/devices. The visual effects may be applied by one or more of a content provider, a video streaming service, one or more viewers, or by other entities. The visual effects may be applied based at least in part on instructions from the provider, such as one or more tags, for example that may be issued via an interface provided by a video streaming service.

Abstract: Methods and apparatus for interfaces to manage inter-regional connectivity for direct network peerings. A system may include a connectivity coordinator, a first resource collection in a first geographical zone and a second resource collection in a second geographical zone. The coordinator implements a programmatic interface defining connectivity operations. The coordinator receives a request via the interface to establish a logically isolated network path to the second resource collection on behalf of a client that has a dedicated physical link set up to connect to the first resource collection. In response to the request, the coordinator performs one or more configuration operations to enable traffic to flow from the client's network to the second resource collection over a logically isolated network path using the dedicated physical link.

Abstract: Techniques for providing a supplementary information component to search results are provided. A search engine computer provides search results in response to the search query. The computer then identifies some interest in an item from the search results, then may generate and provide the supplementary information component.

Abstract: A server obtains a challenge from another computer system during a negotiation with a client according to a protocol. The server injects the challenge into a message of the protocol to the client. The client uses the challenge in an authentication request. The server submits the authentication request to the other computer system for verification. The other computer system verifies the authentication request using a key registered to the client. The server operations are further dependent at least in part on whether verification of the authentication request was successful.

Abstract: An image analysis system automatically determines a positioning and orientation of objects in an image. The image analysis system may be configured to evaluate images and determine whether the orientation and position of objects depicted in the images meet acceptable parameters. The image analysis system may process image data associated with an image to identify edges present in the image, and determine object lines based on the edges. Once the lines are identified, the image analysis system determines vanishing points for sets of the object lines. The image analysis system may then estimate camera parameters and determine the orientation of the objects as depicted in the image based on the vanishing points.

Abstract: Described are methods and apparatus for altering the sound generated by a motor during operation. For example, the implementations described herein include a motor in which the spacing between the rotor magnets is non-uniform (i.e., the spacing varies between rotor magnets). With non-uniform spacing of the rotor magnets, the sound generated during operation of the motor is altered. In still other implementations, the spacing or alignment of the electromagnetic coils of the stator may also be non-uniform or irregularly spaced.

Abstract: Systems, methods, and computer-readable media are disclosed for detecting handwritten text on a writing surface, determining one or more layout and/or content attributes of the handwritten text, determining application functionality that corresponds to the layout and/or content attribute(s), executing the application functionality to obtain an execution result, and presenting an indication of the execution result on the writing surface in association with at least a portion of the handwritten text.

Abstract: A distributed system may comprise a plurality of computing nodes, each of which may provide computing capacity for operating various computing services. The system may maintain a memory-based store of records representative of capacity available on the computing nodes. A record indicative of a computing node having a requested amount of capacity may be selected. The record may be modified to indicate that the computing node is a candidate for providing the requested amount of capacity. Upon receiving information confirming that the computing node has been configured to provide the requested capacity, the record may be modified to indicate that the computing node has committed to provide the requested capacity.