Abstract: A computer system performs cryptographic operations as a service. The computer system is configured to allow users of the service to maintain control of their respective cryptographic material. The computer system uses inaccessible cryptographic material to encrypt a user's cryptographic material in a token that is then provided to the user. The user is unable to access a plaintext copy of the cryptographic material in the token, but can provide the token back to the service to cause the service to decrypt and use the cryptographic material.

Abstract: Systems and methods are described to enable a DNS service to encode information into a network address to be advertised by the DNS service. Information encoded by a DNS service may include, for example, an identifier of a content set to which the network address corresponds (e.g., a domain name) and validity information, such as a digital signature, that verifies the validity of the network address. On receiving a request to communicate with the network address, a destination device associated with the network address may decode the encoded information within the network address to assist in processing the request. In some instances, the encoded information may be used to identify malicious network transmissions, such as transmissions forming part of a network attack, potentially without reliance on other data, such as separate mappings or contents of the data transmission.

Abstract: Various embodiments of a system and method for highly scalable data clustering are described. Embodiments may include generating contexts of information from item-level data for multiple items; each context may include tokens that each represents an aggregate characteristic of items associated with that context. Embodiments may also include comparing the tokens of different contexts to determine measures of similarity between the contexts. Embodiments may also include grouping at least some of the contexts into clusters with other contexts based on the determined measures of similarity. Embodiments may include, subsequent to detecting a first context and a second context as being members of a common cluster, correcting item level-data of an item associated with the second context based on item-level data of an item associated with the first context.

Abstract: Techniques are described for importing and using virtual machine images in configured manners, such as by a virtual machine image importation service on behalf of clients. An image may be retrieved based on a client-provided location, and various characteristics of the image may be identified via application of multiple heuristic or other assessment tests to various aspects of the retrieved image such as a master boot record, filesystem, or directory structure of the image to determine a testing vector that is compared to identification vectors associated with known operating systems, in order to automatically determine a specific operating system installed on the image to be imported. Modifications may be made to drivers, configuration and system files of the retrieved image based on the identified operating system and other image characteristics.

Abstract: A content streaming system and methodology for facilitating the management of content streaming. A video packaging and origination service requests streaming content that is organized according to content segments. Individual content segments will be encoded according to a plurality of encoding profiles and generated by different encoders. The video packaging and origination service utilizes synchronization information provided to the encoders to receive redundant encoded content segments responsive to the request for streaming content. The video packaging and origination service can process the received redundant streams.

Abstract: Software packages may be installed, uninstalled and/or updated across a group of computing instances by way of a single issuance of a user request. The request may include information such as a software package name, a software package version, an action (e.g., install or uninstall), and one or more operating constraints for the software package. For an installation request, an agent on a given computing instance may process the request by accessing a manifest that indicates various computing instance characteristics (e.g., operating system types, architecture types, etc.) and various respective available versions of the software package. The agent may then select, based on characteristics of the computing instance, a package type for the computing instance. An installation request may also allow operating constraints (e.g. regarding usage of processing, memory, I/O and other resources) to be set and enforced for the software package.

Abstract: Techniques are described for identifying pixel locations using a transformation function. A transformation function is identified based on the projection space of a 2D representation, and pixel locations are generated using the transformation function.

Abstract: Techniques for determining whether data associated with an autonomous/non-autonomous operation of a manned/unmanned vehicle may be trusted. For example, a first set of data may be provided from a source external to a manned/unmanned vehicle. A second set of data may be accessed. This second set may be provided from a source internal or external to the manned/unmanned vehicle and may be associated with the same autonomous/non-autonomous operation. The two sets may be compared to determine whether the first set of data may be trusted or not. If untrusted, a corrective action may be performed.

Abstract: Embodiments can provide additional computing resources at minimal and incremental cost by providing instances of one or more server compute subsystems on a system-on-chip. The system-on-chip can include multiple compute subsystems where each compute subsystem can include dedicated processing and memory resources. The system-on-chip can also include a management compute subsystem that can manage the processing and memory resources for each subsystem.

Abstract: Noises that are to be emitted by an aerial vehicle during operations may be predicted using one or more machine learning systems, algorithms or techniques. Anti-noises having equal or similar intensities and equal but out-of-phase frequencies may be identified and generated based on the predicted noises, thereby reducing or eliminating the net effect of the noises. The machine learning systems, algorithms or techniques used to predict such noises may be trained using emitted sound pressure levels observed during prior operations of aerial vehicles, as well as environmental conditions, operational characteristics of the aerial vehicles or locations of the aerial vehicles during such prior operations. Anti-noises may be identified and generated based on an overall sound profile of the aerial vehicle, or on individual sounds emitted by the aerial vehicle by discrete sources.

Abstract: Methods and apparatus for a client account versioning metadata manager for cloud computing environments are disclosed. A system includes a plurality of resources, a plurality of service managers coordinating respective multitenant network-accessible services, and a metadata manager. The metadata manager receives a multi-service account state view request. The metadata manager generates a representation of an administrative state of a client account indicated by the request with respect a plurality of services accessible by the client account, as of a time indicated in the request. The administrative state with respect to a particular service comprises an indication of an assignment to the client account of resources participating in implementation of the particular service.

Abstract: Based on a user's current action in an application, a set of the most likely actions to be taken next by a user is determined, such as based on a historical sequence of actions that the user, or a number of other users, have taken in the past. Based on historical sequence of events, a predictive GUI may be generated that can be dynamically updated automatically based on actions that are determined to be undertaken next by the user.

Abstract: Methods and systems are described for proximity condition detection of a recovery from sensor proximity saturation caused by water immersion of a user device. The device transmits data at a first transmit power level using an antenna. In one system, a proximity condition checker determines that a first proximity sensor and a second proximity sensor are saturated in an unknown state after a power event where the saturation caused at least in part by the presence of water in proximity to the first proximity sensor and the second proximity sensor. The proximity condition checker determines that 1) both the first proximity sensor and the second proximity sensor are no longer saturated and 2) water is no longer in proximity to the first proximity sensor and the second proximity sensor. In response, the user device can transmit data at an increased second transmit power level using the antenna.

Abstract: Features are provided for the analysis of collections of data and automatic grouping of data having certain similarities. A collection of data regarding user interactions with item-specific content can be analyzed. The analysis can be used to identify groups of items that are of interest to groups of similar users and/or to identify groups of users with demonstrated interests in groups of similar items. Data may be analyzed in a “bottom-up” manner in which correlations within the data are discovered in an iterative manner, or in a “top-down” manner in which desired top-level groups are specified at the beginning of the process. A bottom-up process may also be distributed among multiple devices or processors to more efficiently discover groups when using large collections of data.

Abstract: Coordinated operation of a voice-controlled device and an accessory device in an environment is described. A remote system processes audio data it receives from the voice-controlled device in the environment to identify a first intent associated with a first domain, a second intent associated with a second domain, and a named entity associated with the audio data. The remote system sends, to the voice-controlled device, first information for accessing main content associated with the named entity, and a first instruction corresponding to the first intent. The remote system also sends, to the accessory device, second information for accessing control information or supplemental content associated with the main content, and a second instruction corresponding to the second intent. The first and second instructions, when processed by the devices in the environment, cause coordinated operation of the voice-controlled device and the accessory device.

Abstract: A response rate limiting device is provided that may reduce the volume of network traffic generated as a result of an amplification attack. The rate liming device receives a packet and determines identification information corresponding to the packet. The rate limiting device receives a second packet bound for a network destination. Based at least in part on the size of the first packet and the size of the second packet, the rate limiting device determines a transmission rate for the second packet. The second packet is transmitted to the network destination in accordance with the determined transfer rate.

Abstract: Disclosed are various embodiments for scalable workflow processing. To this end, a workflow instance is placed in a queue accessible to a processor-based system, the queue being associated with a workflow. A workflow history associated with the workflow instance is applied to a decision application in response to a poll from the decision application, where the decision application is configured to determine a next action to be taken for the workflow instance. The next action to be taken for the workflow instance is initiated in the processor-based system based on a directive from the decision application generated based on the workflow history.

Abstract: Computing resource service providers may provide computing resources to customers in a multi-tenant environment. These computing resources may be behind a firewall or other security device such that certain information does not reach the computing resources provided to the customer. A logging entity may be implemented on computer server operated by the computing resource service provider. The logging entity may obtain log information from the firewall or other security device and store the log information such that it is accessible to the customer. Additionally, the log information may be provided to other services such as a metrics service or intrusion detection service.

Abstract: The techniques described herein mitigate the effects of electromagnetic interference, caused by the sending or receiving of data, on a proximity sensor of an electronic device. In some instances, capacitance values measured by the proximity sensor may be inaccurate during times at which the electronic device is sending or receiving data. To mitigate this effect, the techniques take into account the recurrent time slot(s) at which the electronic device is scheduled to send or receive data, and then disregards the capacitance values measured by the proximity sensor at these times.