Abstract: Systems and methods for resource management are disclosed. A search request may be received at a resource management service of a provider network. The search request may be received from a client device that does not have permission to access resources in a protected region of a provider network. The search request may specify a query associated with at least one operational health indicator in the protected region. It may be determined, using a secure query service, that the at least one operational health indicator does not exist in the protected region. The secure query service enables the client device to obtain information about the resources in the protected region without gaining access to the resources in the protected region. Sending of a notification indicating that the at least one operational health indicator does not exist in the protected region to the client device may be caused.

Abstract: Migrating audio/video (A/V) recording and communication devices to new networks in accordance with various embodiments of the present disclosure are provided.

Abstract: Systems and methods to detect themes in contacts data. Contacts data may be encoded as text (e.g., chat logs), audio (e.g., audio recordings), and various other modalities. Text-based transcripts of contacts data may be parsed into turns, an issue turn may be detected using a machine learning model, a key phrase may be extracted from the issue turn. Key phrases from across multiple contacts data may be clustered to identify themes.

Abstract: The present disclosure generally relates to leveraging DNS (Domain Name Service) based client-side load balancing that directs IoT devices (clients) to network load balancer IP addresses. A management system obtains socket usage information about publicly accessible network load balancers. The system then uses socket thresholding information to determine whether individual network load balancers are exhausting a fixed set of available sockets. The system can then implement remedial actions to reduce individual network load balance presence to ensure that the IoT devices are equally distributed across all first layer network load balancers to maximize usage of capacity.

Abstract: Techniques for automated machine learning (ML) pipeline exploration and deployment are described. An automated ML pipeline generation system allows users to easily construct optimized ML pipelines by providing a dataset, identifying a target column in the dataset, and providing an exploration budget. Multiple candidate ML pipelines can be identified and evaluated through an exploration process, and a best ML pipeline can be provided to the requesting user or deployed for production inference. Users can configure, monitor, and adapt the exploration at multiple points in time throughout.

Abstract: Systems, devices, and methods are provided for processing video streams. Metadata is extracted from an input video stream and processed using a video stream analyzer. The extracted metadata may be correlated along a time dimension. A metadata graph is generated based on relationships between various information present in the video stream as well as external fact sources. Machine learning models may be trained to receive an input phrase, determine a graph query from the input, and determine an output by traversing the metadata graph according to the graph query.

Abstract: Systems and techniques for processing data using data pipelines. For instance, a first version of data may be read from one or more databases for processing by a data pipeline. Stages of the data pipeline may then process the data, such as by transforming, validating, or changing the data, in order to generate additional versions of the data. These versions of the data are passed through the subsequent stages of the data pipeline. Additionally, metadata may be generated for one or more stages of the data pipeline, where the metadata represents information describing the processing by the one or more stages. This metadata may also be passed through the subsequent stages of the data pipeline. Based on the last stage of the data pipeline processing the data, the versions of the data along with the metadata may then be written into the one or more databases.

Abstract: This disclosure describes, in part, a mobile apparatus for identifying items within a facility using an omnidirectional imaging system. For instance, the mobile apparatus may include a main frame, a chassis attached to the main frame, a basket that attaches to the chassis in order to prevent the basket from contacting the main frame, and an omnidirectional imaging system providing image data in and around the mobile apparatus. A user may place item(s) within a receptacle of the basket. The mobile apparatus may further include a handlebar module attached to the main frame, the handlebar module including the omnidirectional imaging system and a computing system for identifying items and events in and around the cart.

Abstract: Various embodiments are described for tracking and enabling access to information about key access patterns for database tables managed by a database service of a service provider network. Storage nodes can store data as key-value pairs (or key-document pairs), where the records or documents of a database are addressed by a unique key for each record. The storage nodes over time receive requests to perform various operations (for example, to get, put, update, or delete data in a table) associated with records stored by the storage nodes. Key access information extractors collect information regarding the keys accessed and send the information to a key tracking service. Key tracker nodes of the service can collect the data and send it to aggregator nodes. The aggregator nodes can determine a frequency with which such requests are received for keys of a partition or table to which the aggregator node is assigned.

Abstract: An interruption-handling setting for a category of interactions of an application is determined via a programmatic interface. A set of user-generated input is obtained while presentation to a user of a set of output of the category is in progress. A response to the set of user-generated input is prepared based at least in part on the interruption-handling setting.

Abstract: This disclosure describes a system for determining an estimated user departure time from a materials handling facility. For example, a user may enter a materials handling facility to pick one or more items from the materials handling facility. Those items may be provided to an agent for processing, such as packing, while the user picks other items within the materials handling facility. To ensure that the items are processed in a timely manner and made available to the user when the user is ready to depart from the materials handling facility, the implementations discussed determine an anticipated user departure time and compare that time with an estimated processing time needed to process the items.

Abstract: Systems and methods are provided to reduce the latency in accessing an input/output (I/O) hardware register by software executing on a central processing unit (CPU). The hardware register is located in a controller coupled to the CPU via an I/O bus. The CPU software can send a command to the controller for execution. The controller can execute the command and update the hardware register to indicate that the command has been executed. The controller can write contents of the hardware register to a specified address in a CPU memory that is assigned by the CPU software. The CPU software can read the specified address to determine that the command has been executed instead of reading the hardware register on the I/O bus.

Abstract: Various embodiments of apparatuses and methods for distributed threat sensor analysis and correlation of a malware threat intelligence system are described. In some embodiments, the system comprises a plurality of threat sensors, deployed at different network addresses and physically located in different geographic regions in a provider network, which detect interactions from sources. In some embodiments, a distributed threat sensor analysis and correlation service obtains significance scores for different sources of the interactions with the plurality of threat sensors. The service determines which of the sources are malicious actors based on the significance scores. The service receives identifiers of known actors such as compute instances in the provider network, client devices in a client network, or deployed IoT devices in a remote network, and correlates the malicious actors with the known actors to identify which known actors might be infected by malware.

Abstract: Techniques to reduce the latency of data transfer notifications in a computing system are disclosed. The techniques can include receiving, at a memory, a first access request of a set of access requests associated with a data transfer. The first access request has a token and an access count indicating the number of access requests in the set of access requests. A counter is initiated to count the number of received access requests having the token. When additional access requests belonging to the set of access requests are received, the counter is incremented for each of the additional access requests being received. A notification is transmitted to an integrated circuit component in response to receiving the last access request of the set of access requests having the token to notify the integrated circuit component that the memory is ready for access.

Abstract: Techniques are described for monitoring and analyzing input/output (I/O) messages for patterns indicative of ransomware attacks affecting computer systems of a cloud provider, and for performing various remediation actions to mitigate data loss once a potential ransomware attack is detected. The monitoring of I/O activity for such patterns is performed at least in part by I/O proxy devices coupled to computer systems of a cloud provider network, where an I/O proxy device is interposed in the I/O path between guest operating systems running on a computer system and storage devices to which I/O messages are destined. An I/O proxy device can analyze I/O messages for patterns indicative of potential ransomware attacks by monitoring for anomalous I/O patterns which may, e.g., be indicative of a malicious process attempting to encrypt or otherwise render in accessible a significant portion of one or more storage volumes as part of a ransomware attack.