Abstract: Systems and methods are disclosed herein for generating a signature of an anomalous network event capable of adversely affecting the performance of a computing resource service provider. A signature computing workflow service receives network traffic information received at the computing resources service provider, and parses the network traffic information into a set of entries. The set of entries may include data for a set of parameters useable for communicating over a network. Entropy values may be calculated for the data and anomalies for the set of parameters may be detected based on changes in entropy for the set of parameters. A signature of an anomalous network traffic event may be generated based on characteristic entropy changes in the parameters associated with the anomalies. The signature may be useable to detect the presence of the network event.

Abstract: Multi-context authenticated encryption can be used to secure various data objects, where a data object may be transmitted and/or stored using various types of resources. One or more envelope keys can be used to encrypt the body data, and each envelope key can be encrypted with a master key. The envelope keys are also be encrypted using at least a subset of context information available for the data object, as may correspond to one or more of the resource types. The encrypted data object can include at least one header, as well as the encrypted body data and the encrypted envelope key(s). In order to decrypt the data object, a data consumer would need the master key as well as at least a relevant subset of the context data.

Abstract: A remote computing session management process is directed to the execution and management of aspects of virtual instances executed on data center computers at a program execution service (PES) platform. A computing session may be established between the PES platform and a computing device connected to the PES platform over a communications network. The data created by the user of the client computing device interacting with the virtual instance may be stored, and following an interruption of the remote computing session, the data may be used when re-establishing the remote computing session.

Abstract: Systems and methods for device control by a natural language processing system are disclosed. A user may desire to utilize a voice-enabled device to associate an accessory device with a hub device without having to utilize third-party software associated with the accessory device and/or the hub device. The user may provide a user utterance to associate the accessory device with the hub device. Audio data corresponding to the user utterance may be analyzed and utilized to generate and send directive data to a third-party remote system to transition the hub device to a join mode. Upon association completion, audio may be output confirming that the association has been established successfully.

Abstract: Techniques described and suggested herein include systems and methods for generating and/or substituting application-local audiovisual data, such as audio, for analogous application-disabled remote audiovisual data when remote resources upon which the executing application depends become unavailable. For example, an executing application may, nominally, be partially or fully dependent on remote resources. If audiovisual data, such as audio resources used by the application, are ordinarily accessed by the application from a remote resource, but that remote resource (or some or all of the audiovisual data associated therewith) is/are unavailable to the application, the techniques described herein may be used to generate and/or select application-local substitute audiovisual data, so as to provide a user of the application a more consistent user experience, as well as to reduce reliance by the application on the stability and/or availability of the remote resource.

Abstract: Disclosed are systems and methods for generating consistent backups. A central coordinator informs each node storing a partition of the time to perform a backup. At the designated time, each node blocks updates for a corresponding time interval measured by its local clock. Each node performs the backup operation according to its own local clock. Consistent backups may be generated in spite of clock skew between the local clocks as long as the time interval is at least as long as a maximum local clock skew (among the nodes performing the backup). In some systems the maximum local clock skew may be reduced, by a round-trip update latency from a client, for example.

Abstract: A system partitions a graph representation of relationships between block devices and associated snapshots into a plurality of cells to more evenly distribute computing resource usage attributable to the block devices and snapshots. The relationships may be analyzed to determine resource usage associated with the block devices and/or the snapshots wherein the resource usage corresponds to a mutation operation rate or number of mutation operations performed (or scheduled for performance). As a result of determining that the resource usage for a given cell exceeds a predetermined threshold for resource usage, the cell may be partitioned into a plurality of cells, and a portion of the corresponding block device(s), and subsequent snapshot(s) generated therefrom, may be assigned to the new cell.

Abstract: In some implementations, an electronic device includes a display stack to display content. The display stack can include a number of substrates coupled using a liquid optically clear adhesive (LOCA). In some implementations, the LOCA can have a modulus of elasticity of no greater than 80,000 Pa. Additionally, the display stack can be formed using a process that includes applying an external force to the display stack by placing the display stack between two fixtures. In an implementation, the external force can be applied while heating the display stack at a temperature of at least 60° C. and cooling the display stack according to a particular cooling rate.

Abstract: Cohorts may be created on storage nodes in an object-redundant storage system that uses replication and/or a redundant encoding technique. In a cohort with N nodes, M data elements (replicas or shards) of an object are stored to M of the nodes that are selected from the N nodes. Metadata for locating other data elements for an object in the cohort may be stored with one or more of the data elements in the cohort. To reconcile the nodes, common object lists are generated on each node for at least one other node from the metadata, hashes of the lists may be exchanged among the nodes, and the hashes are compared. If the hashes for two nodes differ, specific differences are determined, and a reconciliation process performs reconciliation based on the determined differences.

Abstract: An Input/Output (I/O) adapter device is provided. The I/O adapter device comprises: a device interface configured to communicate with a first device and a second device communicatively coupled to the I/O adapter device; a host interface configured to support communication with a frontend driver of a host device via a software interface of the host device; a first emulated backend driver configured to communicate with the frontend driver through the host interface using the software interface and to communicate with the first device to provide the frontend driver with access to the first device; and a second emulated backend driver configured to communicate with the frontend driver through the host interface using the software interface and to communicate with the second device to provide the frontend driver with access to the second device.

Abstract: A client-side component of a journal-based multi-data-store database identifies an application schema corresponding to a first application whose data is stored at the database. The application schema includes a writes section indicating a data object to which writes are to be issued from the first application. A journal schema defining one or more data objects for which a concurrency-control protocol is implemented by a journal manager of the database is obtained. Before a transaction request of the application is submitted to the journal manager, the client-side component verifies that the application schema is compatible with the journal schema.

Abstract: Systems, methods, and computer-readable media are disclosed for portable voice assistant devices with linear lighting elements. In one embodiment, an example device may include a housing having a first portion and a second portion, an elongated light bar disposed between the first portion and the second portion, and a first LED disposed within the housing. Example devices may include a reflector component configured to reflect light towards the elongated light bar, and a diffuser positioned adjacent to the elongated light bar. The diffuser may include a first curved portion and a flat portion, and the first curved portion may be substantially aligned with the first LED.

Abstract: A content streaming system and methodology for facilitating the dynamic management of adaptive bitrate streaming bundles in content streaming. The dynamic management of the adaptive bitrate streaming bundles can include the utilization of an efficiency matrix that associates meta-data associated with the delivery of content streaming data with available bitrate encodings or bitrate/format combinations. The content streaming system can then dynamically manage bitrate manifests to dynamically change encoding bitrates or bitrate/format combinations offered to clients based on network conditions, client attributes, content attributes, and the like.

Abstract: Aspects of the present disclosure relate to the generation and delivery of content including unique and shared components. A content delivery network service provider can obtain requests for content from client computing devices. Based on information provided in the request or otherwise managed by executable code on the client computing device, the CDN service provider obtains one or more pieces of content that may be shared by more than one user or client computing devices. Additionally, the CDN service provider obtains one or more pieces of content that will not be shared by more than one user or more than one client computing device. Responsive to the content request, the CDN service provider can combine the one or more pieces of shared content and the one or more pieces of unique content and deliver the combined content to the requested client computing device.

Abstract: An unauthorized-product detection system may compare data representing various authentication markers of items presumed to have been produced or sourced by a particular entity with stored data representing valid authentication markers of items produced or sourced by the particular entity. The authentication markers may represent inherent physical characteristics of the items or their packaging, or may be generated and applied to the items or their packaging to facilitate counterfeit detection and/or for other purposes. The data (some of which may be encrypted) may be captured using high-resolution cameras, scanners, or other devices, and then communicated to the unauthorized-product detection system for analysis. The system may maintain a data store of data representing captured or valid authentication markers and may store tracking information reflecting the use of various authentication markers.

Abstract: Methods and apparatus for centralized resource utilization visualization in distributed systems are disclosed. Metrics are collected from a plurality of sources in a distributed system, including network traffic metrics collected from nodes implementing a network-accessible service. A topology representing at least one of (a) a relationship between respective client accounts to which a first and second node are assigned, or (b) one or more network links between the first and second nodes is generated. Respective networking performance indicators of the first node and the second node are provided for inclusion in a resource heat map corresponding to the topology.

Abstract: A block-based storage system may implement page cache write logging. Write requests for a data volume maintained at a storage node may be received at a storage node. A page cache for may be updated in accordance with the request. A log record describing the page cache update may be stored in a page cache write log maintained in a persistent storage device. Once the write request is performed in the page cache and recorded in a log record in the page cache write log, the write request may be acknowledged. Upon recovery from a system failure where data in the page cache is lost, log records in the page cache write log may be replayed to restore to the page cache a state of the page cache prior to the system failure.

Abstract: A component of a computing service obtains respective indications of placement policies that contain host selection rules for application execution environments such as guest virtual machines. With respect to a request for a particular application execution environment, a group of applicable placement policies is identified. A candidate pool of hosts is selected using the group of placement policies, and members of the pool are ranked to identify a particular host on which the requested application execution environment is instantiated.