Abstract: Methods and apparatus for a client account versioning metadata manager for cloud computing environments are disclosed. A system includes a plurality of resources, a plurality of service managers coordinating respective multitenant network-accessible services, and a metadata manager. The metadata manager receives a multi-service account state view request. The metadata manager generates a representation of an administrative state of a client account indicated by the request with respect a plurality of services accessible by the client account, as of a time indicated in the request. The administrative state with respect to a particular service comprises an indication of an assignment to the client account of resources participating in implementation of the particular service.

Abstract: A virtual network verification service for provider networks that leverages a declarative logic programming language to allow clients to pose queries about their virtual networks as constraint problems; the queries may be resolved using a constraint solver engine. Semantics and logic for networking primitives of virtual networks in the provider network environment may be encoded as a set of rules according to the logic programming language; networking security standards and/or client-defined rules may also be encoded in the rules. A description of a virtual network may be obtained and encoded. A constraint problem expressed by a query may then be resolved for the encoded description according to the encoded rules using the constraint solver engine; the results may be provided to the client.

Abstract: Technologies are provided for partially updating shingled magnetic recording (SMR) zones in SMR storage devices. An SMR storage device can receive and process a command to update a write pointer for an SMR zone to point to an arbitrary write position within the SMR zone. A partial SMR zone update command can be received and processed to modify part of the data stored in the SMR zone. A write position within the SMR zone where data to be modified is stored can be identified. Data stored in the SMR zone following the identified write position can be read to a temporary location and modified. A write pointer for the SMR zone can be updated to point to the identified write position. The modified data can then be written to the SMR zone, starting at the write position identified by the write pointer, or to another SMR zone of the storage device.

Abstract: A user interface is provided that displays hierarchical and/or relational information, such as information related to the topology of a computer network. The user interface provides a set of enclosed shapes arranged to present a set of nested regions to a network administrator. Each nested region represents a level of a hierarchy, and each region is segmented to represent individual elements within the hierarchy level. In one embodiment, the outmost ring is segmented to represent various networks. The middle ring is segmented to represent various subnets, with the arc of each network segmented to represent one or more subnets associated with a corresponding network. The innermost ring includes elements that represent individual data element. Connections between data elements are shown with lines extending across a shared interior region. In various embodiments, the lines may be given colors, animations, or patterns to indicate various properties of a relationship.

Abstract: Systems and methods are described for conducting static analysis of code invoking network-based services to identify, without requiring execution of the code, errors that may be introduced due to the invocations of the network-based services. A system is provided that may analyze code to detect both direct invocations of services, as well as indirect invocations caused by the direct invocations. The system can model inputs and outputs of directly or indirectly invoked services to identify errors in parameters passed to those services, even when the errors are not apparent from an analysis of the code in isolation. In some instances, the system can traverse a “call graph” of all services invoked by code either directly or indirectly to trace parameter errors through multiple levels of indirection.

Abstract: A technology is described for prioritizing a plurality of interruptible computing instances. An example method may include receiving a request to interrupt an executing interruptible computing instance that may be included in a group of interruptible computing instances having assigned instance priority values. The instance priority values may establish an order in which the interruptible computing instances may be interrupted. The interruptible computing instance may be identified that has a lower instance priority value as compared to other instance priority values assigned to the interruptible computing instances. The interruptible computing instance identified may then be terminated.

Abstract: A computing device can obtain a session key for encrypting data that is communicated between a client device and the computing device. The computing device can receive, from the client device, an encrypted request for data. The encrypted request can be encrypted by the client device using the session key. The data requested can be stored on a second computing device. The computing device can send, to the second computing device, a copy of the session key and the encrypted request for data. The second computing device can decrypt the data using the session key and can also encrypt data responsive to the request using the session key.

Abstract: A user may interact with a control interface in the course of interacting with electronic content. The control interface may include any user interface utilized to adjust various aspects of an application, including, but not limited to, scroll bars, sliders, and/or navigation windows. Input at the control interface may be received from the user indicating that the user desires to manipulate the electronic content (e.g., jump to another location in a movie) or, alternatively, that the user wishes to manipulate the control interface. Upon determining that the input is intended to manipulate the control interface, the control interface may be adjusted to display a control interface view that provides finer or coarser granularity, allowing the user to interact with the control interface with more accuracy.

Abstract: A pool of virtual environments, such as virtual machine instances and containers, can be maintained by an intermediary service, where the virtual environments can execute a specified application or service. When a request is received from a client for a connection to a resource, the intermediary service can allocate one of the virtual environments for the client and enable the client and virtual environment to communicate as if the virtual environment is executing on dedicated hardware. The virtual environment can be virtually isolated on a host machine, whereby session data for the client is stored locally in memory and then deleted at the end of the session when the virtual environment is destroyed, in order to prevent the data from being accessible between sessions and preventing multiple clients or customers from sharing the same environment over time.

Abstract: Techniques for automated application footprint discovery for application migration to containers are described. A snapshot of an application instance can be stored, the snapshot including the application instance and resources used by the application instance at runtime. The application instance can be run in an intermediate virtual machine, the intermediate virtual machine including at least one interceptor. At least one dependency of the application instance can be determined using the at least one interceptor while the application instance executes on the intermediate virtual machine. A template including the at least one dependency can be created and an application environment can be generated using the template.

Abstract: Disclosed are systems, methods, and other embodiments relating to event processing. A plurality of events from a plurality of services are buffered in a server, each of the services being implemented in at least one service server. An indexed storage of the events is performed in a data store. Metrics are generated from the events, where a condition associated with an operation of the services may be determined from the metrics.

Abstract: An intermediary device may be configured to allow an authorized visitor to access a secure facility (such as a home) on behalf of an owner. The intermediary device may generate an authenticator and provide the authenticator to a service provider, who may then present the authenticator to the intermediary device upon arriving at the facility. The intermediary device may unlock or open, or lock and close, any doors within the facility as necessary in order to grant access to a specific portion of the facility and restrict access to other portions of the facility. The intermediary device may also capture, or cause the capture of, images or other data regarding actions taken by the service provider, and establish a communications channel with the owner for the exchange of information or data regarding such actions, or any events or conditions of the facility.

Abstract: A contribution encoder receives media from a source, encodes the media, and transmits the encoded media to a network-adaptive encoding system for eventual distribution to end users. The network-adaptive encoding system tests a network connection between the contribution encoder and the network-adaptive encoding system before transmission of the encoded media begins. The network-adaptive encoding system uses the results of the test to select appropriate values for parameters that define the encoding and transmission of the media. The selected parameter values are transmitted by the network-adaptive encoding system to the contribution encoder for use in encoding and transmitting the media.

Abstract: A method and system for analyzing text in an image is disclosed. A text localization and classification system accesses an annotated image comprising a plurality of text location identifiers for a given item of text. A neural network predicts the location of the given item of text using at least a first location identifier and a second location identifier. Optionally, the first location identifier comprises a first shape and the second location identifier comprises a second shape. A first loss is generated using a first loss function, the first loss corresponding to the predicated location using the first location identifier. A second loss is generated using a second loss function, the second loss corresponding to the predicated location using the second location identifier. The neural network is enhanced with backpropagation using the first loss and the second loss.

Abstract: A load balancing service receives a request from a customer to configure a load balancer for distributing incoming requests to one or more computing resources of the customer. The load balancing service uses configuration information specified in the request to configure the load balancer such that the load balancer, in response to an incoming request, can determine whether the incoming request satisfies a set of request processing rules usable to determine whether the request is to be transmitted to any computing resource of the one or more computing resources. The load balancer transmits the incoming request to a computing resource of the customer as a result of the rules being satisfied.

Abstract: A service provider system may implement a notification service that manages actionable notification messages received from other services on behalf of a customer organization and its end users. An IT administrator of the customer organization may create and configure message inboxes to be maintained by the notification service. The messages stored in each inbox may be partitioned by source, type, targeted (authorized) recipients, or an associated message topic. Each message may include an identifier of the inbox to which it is directed, and active elements that, when selected by a recipient, cause a corresponding action to be performed. The service from which a message is received may, in response to a message recipient taking one of the available actions, submit a request to the notification service to update the message state. The notification service may provide APIs through which the other services and message recipients interact with the notification service.

Abstract: Techniques are described for providing virtual networking functionality for managed computer networks. In some situations, a user may configure or otherwise specify a logical network topology for a managed computer network with multiple computing nodes that includes one or more virtual networking devices each associated with a specified group of the multiple computing nodes. Corresponding networking functionality may be provided for communications between the multiple computing nodes by emulating functionality that would be provided by the networking devices if they were physically present and configured to support the specified network topology. In some situations, the managed computer network is a virtual computer network overlaid on a substrate network, and the networking device functionality emulating includes receiving routing communications directed to the networking devices and using included routing information to update the specified network topology for the managed computer network.

Abstract: An extendable augmented reality (AR) system for recognizing objects. The AR system may incorporate plugins to improve the AR system's ability to recognize objects, such as by adding external matchable data or using external recognition algorithms. The plugins may be installed/activated dynamically by a user to expand the system's AR capabilities. The AR system may also incorporate plugins to improve the AR system's post-recognition features such as supplying a user with supplemental content or follow-up functionality. The AR system may filter communications with the plugins to centralize identification processes, to shield plugins, and to ensure plugins are only activated at appropriate times.