Abstract: A computing system that provides virtual computing services may generate and manage remote computing sessions between client computing devices and virtual desktop instances hosted on the service provider's network. A computing resource instance manager may monitor connections to and disconnections from a virtual desktop instance during particular time periods, and may apply a resource management policy to determine whether and when to shut down an underlying virtualized computing resource instance following a disconnection (e.g., immediately, after some period of time, or only between certain hours). A storage volume for the virtual desktop instance may be detached during a shutdown. In response to a reconnection request, the virtualized computing resource instance (or another such instance) may be restarted and the storage volume may be reattached. The computing resource instance manager may develop a model for predicting when to shut down or restart an instance based on historical data or machine learning.

Abstract: Methods, systems, and computer-readable media for customizable event-triggered computation at edge locations are disclosed. A request for content is received at an edge server from a client device. The content is sought from a content cache at the edge server or from an origin server coupled to the edge server. Processing of the request is initiated, comprising encountering an event. The event is associated with a function specified by a customer. The function associated with the event is executed at the edge server using process isolation. The content is generated based at least in part on execution of the function. The content is sent from the edge server to the client device.

Abstract: A post-task-completion retention period for which a computing resource is to be retained, without de-activating the resource, on behalf of a set of requesters of machine learning tasks is determined at a machine learning service. A first task, identified at the service prior to expiration of the retention period at a first computing resource at which a second task has completed, is initiated at the first computing resource. In response to obtaining an indication of a third task and determining that a threshold criterion associated with the retention period satisfies a criterion, the third task is initiated at an additional computing resource. The additional computing resource is de-activated after the third task completes, without waiting for the retention period to expire.

Abstract: An interactive interpretation session with respect to a first version of a machine learning model is initiated. In the session, indications of factors contributing to a prediction decision are provided, as well indications of candidate model enhancement actions. In response to received input, an enhancement action is implemented to obtain a second version of the model. The second version of the model is stored.

Abstract: Components of a public certificate authority (CA) generate respective cryptographic assertions during performance of respective tasks of a certificate issuance workflow and a workflow approval component approves/rejects certificate issuance, based upon verification of the cryptographic assertions. For example, a workflow manager may assign tasks of a certificate workflow process to a number of components that process the tasks. The components generate responses and sign the respective responses with keys particular to each component. The workflow manager gathers the cryptographic assertions and sends them to a workflow approval component that validates the assertions, verifies the assertions indicate successful completion of the workflow and approves or rejects certificate issuance.

Abstract: A connectivity monitor of a vehicle determines current and/or future states of antennas. A workload monitor of the vehicle receives execution criteria for different workloads to be executed. An intelligent connectivity engine at the vehicle receives the current and/or future states of the antennas and the execution criteria for the respective workloads. Based on the current and/or future states of the antennas and the execution criteria for the respective workloads, the intelligent connectivity engine assigns at least one of the respective workloads for current execution and at least another of the respective workloads for future execution. A client may use an intelligent connectivity service to configure various aspects of the vehicle connectivity. For example, the client can provide workload recommendation code for the intelligent connectivity engine to assign workloads for current or future execution.

Abstract: Techniques are described for providing virtual networking functionality for managed computer networks. In some situations, a user may configure or otherwise specify a logical network topology for a managed computer network with multiple computing nodes that includes one or more virtual networking devices each associated with a specified group of the multiple computing nodes. Corresponding networking functionality may be provided for communications between the multiple computing nodes by emulating functionality that would be provided by the networking devices if they were physically present and configured to support the specified network topology. In some situations, the managed computer network is a virtual computer network overlaid on a substrate network, and the networking device functionality emulating includes receiving routing communications directed to the networking devices and using included routing information to update the specified network topology for the managed computer network.

Abstract: Described are systems, methods, and apparatus that monitor potential voltage and/or radiated electromagnetic energy at a premises to determine device usage at the premises. The monitored potential voltage and/or radiated electromagnetic energy may be processed to generate voltage signature data and radiated electromagnetic energy signature data, a signature data pair, of an operational device and that signature data pair may be used to identify at least one of a device type, a device, a device element of the device, and/or an operational state of a device.

Abstract: A customer submits a request to a virtual computer system service to launch a virtual machine instance and to join this instance to a managed directory. The service may obtain, from the customer, a domain name and Internet Protocol addresses for the selected directory, which is then stored within a systems management server. When launched, the instance may initiate an agent, which may communicate with the systems management server to obtain the configuration information. The agent may use this configuration information to establish a communications channel with the managed directory and create a temporary set of computer credentials that may be used to verify that the customer is authorized to join the virtual machine instance to the managed directory. If the credentials are valid, the managed directory may generate a computer account within the managed directory, which may be used to join the virtual machine instance to the managed directory.

Abstract: The application is directed to techniques and processes for integrating multiple security systems. For instance, a system may receive first data from a first security system, where the first data indicates that the first security system detected a security event. The system may then analyze the first data to determine a type of the security event, a time frame of the security event, and/or a threat level of the security event. Based at least in part on the analyzing, the system may determine a security procedure for a second security system. The second security system may be located proximate to the first security system and/or may be included in a same security system network as the first security system. The security procedure may include changing a mode of the second security system and/or causing an electronic device of the second security system to generate image data.

Abstract: A system for quality of service management, including computing resources to provide services implemented at a provider network and network interfaces to establish a plurality of connections to perform tasks on behalf of clients. The system includes a quality of service (QOS) manager to determine respective client drop-off criteria indicating conditions for respective clients to cease communications via respective connections of the connections. The QoS manager also determines task information for respective tasks indicating a size of the respective tasks, a resource requirement for the respective tasks, or priority information for the respective tasks. The QoS manager further adjusts allocations of respective computing resources to the respective connections based on the respective client drop-off criteria and the task information. The QoS manager causes the respective computing resources to implement respective tasks on behalf of the clients according to the adjusted allocations.

Abstract: Techniques for cancel and rollback of update stack requests. At a time after receiving a request to cancel and rollback an update request for a computer system, one or more computer resources within a computer system invoke one or more computer system capabilities at least to cancel computer system operations to update the computer. When the computer system operations to update the computer system are cancelled, one or more computer resources within a computer system invoke one or more computer system capabilities at least to roll back the computer system to a previous good state.

Abstract: De-duplicating redundant data for data aggregation is described herein. In an example, a computing device receives first data identifying first items. The computing device determines that a first data portion and a second data portion indicate that a same item is detected to be within a location. The computing device generates second data by removing the second data portion from the first data. The computing device determines, based on a query to a data store storing previously stored data identifying second items, that (i) a no match exists between the first data portion and the previously stored data, (ii) a match exists between a third data portion of the second data and the previously stored data. The computing device generates a count of items detected within the location by incrementing a previous count based on the no match and by foregoing a count increment based on the match.

Abstract: Devices, systems, and methods are provided for cloud-based job scheduling and management. A method may include receiving, by at least one serverless processor of a cloud-based network, data from a first interface. The method may include determining, based on the data, a first activity and a second activity, the first activity associated with a first service of the cloud-based network, and the second activity associated with a second service of the cloud-based network. The method may include determining, based on the data, a precondition associated with causing execution of the first activity and the second activity. The method may include determining that an event associated with the cloud-based network has occurred, and generating an instance associated with causing performance of the first activity and the second activity. The method may include discarding the instance after performance of the first activity and the second activity.

Abstract: A computing device can be running a current context and displaying a current interface for the current context when a communication is received on the device. The device can display an alert on a portion of a display screen in conjunction with the current interface being displayed. The alert can include information about the communication, which can allow a user to better determine whether or not the communication requires immediate attention. If the user ignores the alert, it will disappear in a specified amount of time. If the user chooses to deal with the communication, he/she can tap on the alert to bring up an overlay interface for replying to the communication without having to switch to another application specifically configured for handling (e.g., viewing, replying to) the communication. After the user replies to the communication using the overlay interface, he/she can be automatically brought back to the current interface.

Abstract: Systems and methods for implementing a system for analyzing large amounts of event data to determine any potential security threats or anomalies. Event data may be obtained and processed. The processed event data may be analyzed to detect any potential security threats or anomalies.

Abstract: A ground marker for use in identifying a location associated with a mission performed by an aerial vehicle includes a visible surface with aspects that are positioned at different vertical heights or elevations. The vertical variation in the aspects of the visible surface enhances a level of visibility of the ground marker within images captured by cameras provided aboard the aerial vehicle, resulting in more accurate estimations of ranges to such markers (e.g., altitudes) determined from such images. The visible surface includes one-dimensional or two-dimensional bar codes, alphanumeric characters and symbols thereon and is provided on or within rigid or flexible frames that are adapted to be placed on ground surfaces at the location associated with the mission.