Abstract: Described are systems and methods for monitoring and detecting thermal conditions associated with individual cells of a battery. Embodiments of the present disclosure may monitor, detect, and protect against thermal anomalies that may be experienced at individual cells of a battery, without employing the use of thermal sensors (e.g., a thermocouple, thermistor, etc.). The exemplary systems and methods may be implemented in connection with a battery and/or battery pack having cells arranged in a serial configuration that may be employed in an aerial vehicle, such as an unmanned aerial vehicle (UAV). The described systems and methods detect thermal conditions associated with the individual cells of a battery by modeling each cell as an RC circuit and determining the resistance of each cell based on voltage and current measurements. The determined resistance can approximate and/or be representative of the temperature of the respective cell.

Abstract: In one example, a method comprises: receiving input codes, wherein the input codes represent a computational dataflow graph; traversing the computational dataflow graph to identify single-entry-single-exit (SESE) subgraphs of the computational dataflow graph, wherein each SESE subgraph has a sequence of nodes comprising a root node and a child node and representing a sequence of element-wise operators, wherein the root node receives a single input tensor, and wherein the child node outputs a single output tensor; determining a merged operator for each SESE subgraph; and generating executable instructions for the computational dataflow graph to be executed by a hardware accelerator having a first execution unit and a second execution unit, wherein the executable instructions comprise first executable instructions for the merged operators targeted at the first execution unit, and second executable instructions for other operators of the computational dataflow graph targeted at the second execution unit.

Abstract: An airframe design may include a bonded frame or assembly, and one or more components that may be removably attached to the bonded frame. The bonded frame may include struts, central bulkheads, a tail section, a plurality of wing sections, and motor mounts that are adhered together using adhesive. The one or more attachable components may include a forward fuselage, motors, propellers, motor pod fairings, stabilizer fins, and landing gear that are attached using fasteners. The bonded frame may reduce the number of parts of the airframe design and may also reduce complexity, cost, and weight, while also increasing stiffness and strength. Further, the various attachable components may facilitate fabrication, assembly, and maintenance of an aerial vehicle having the airframe design.

Abstract: Techniques for implementing a dynamically resizable memory region for alternative use in a memory are described. The techniques may include using two concurrent address maps corresponding to two address ranges for a memory represented as an array of memory blocks. The first address range can be mapped to the memory with starting addresses of the memory blocks incrementing sequentially along each row. The second address range can be mapped to the memory with starting addresses of the memory blocks incrementing sequentially along each column. When an access request is received having a target address belonging to the first address range, the target address is provided as the memory address to access the memory. When an access request having a target address belonging to the second address range, the target address is translated by address translation logic into a memory address to access the memory.

Abstract: Techniques for a cloud-based workload optimization service to identify customer workloads that are optimized to run on burstable instance types. The techniques include identifying workloads that are successfully running on burstable instance types, and using historical-utilization data for those workloads to train classification models. The optimization service can extract feature data from the historical-utilization data, where the feature data represents utilization characteristics that are indicative of burstable workloads. The feature data is then used to train classification models to receive utilization data for candidate workloads, and determine whether the candidate workloads would be optimized for burstable instance types. The optimization service can then migrate suitable workloads to burstable instance types, and/or provide users with recommendations that their workloads are optimized or suitable for burstable instance types.

Abstract: Techniques are described for providing logical networking functionality for managed computer networks, such as for virtual computer networks provided on behalf of users or other entities. In some situations, a user may configure or otherwise specify a network topology for a virtual computer network, such as a logical network topology that separates multiple computing nodes of the virtual computer network into multiple logical sub-networks and/or that specifies one or more logical networking devices for the virtual computer network. After a network topology is specified for a virtual computer network, logical networking functionality corresponding to the network topology may be provided in various manners, such as without physically implementing the network topology for the virtual computer network. In some situations, the computing nodes may include virtual machine nodes hosted on one or more physical computing machines or systems, such as by or on behalf of one or more users.

Abstract: Systems, methods, and computer-readable media are disclosed for systems and methods for automated generation and presentation of sign language avatars for video content. Example methods may include determining, by one or more computer processors coupled to memory, a first segment of video content, the first segment including a first set of frames, first audio content, and first subtitle data, where the first subtitle data comprises a first word and a second word. Methods may include determining, using a first machine learning model, a first sign gesture associated with the first word, determining first motion data associated with the first sign gesture, and determining first facial expression data. Methods may include generating an avatar configured to perform the first sign gesture using the first motion data, where a facial expression of the avatar while performing the first sign gesture is based on the first facial expression data.

Abstract: The following description is directed to a logic repository service. In one example, a method of a logic repository service can include receiving a first request to generate configuration data for configurable hardware using a specification for application logic of the configurable hardware. The method can include generating the configuration data for the configurable hardware. The configuration data can include data for implementing the application logic. The method can include receiving a second request to download the configuration data to a host server computer comprising the configurable hardware. The method can include transmitting the configuration data to the host server computer in response to the second request so that the configurable hardware is configured with the host logic and the application logic.

Abstract: A representation of an identifier of a packet flow is stored in a particular entry within a particular entry group of a first object maintained at a packet processing service, along with an expiration criterion for information pertaining to the packet flow, including a representation of an action to be performed. The action is performed after it is retrieved from an element identified within a second object based on an entry identifier of the particular entry and a group identifier of the particular group. In response to receiving a packet of another packet flow, respective indications that one or more in-use entries of the particular entry group (whose expiration criteria are met) are available for re-use are stored, without receiving an indication that the corresponding packet flows have terminated.

Abstract: A database system may include a database service and a separate distributed storage service. The database service (or a database engine head node thereof) may be responsible for query parsing, optimization, and execution, transactionality, and consistency, while the storage service may be responsible for generating data pages from redo log records and for durability of those data pages. For example, in response to a write request directed to a particular data page, the database engine head node may generate a redo log record and send it, but not the data page, to a storage service node. The storage service node may store the redo log record and return a write acknowledgement to the database service prior to applying the redo log record. The server node may apply the redo log record and other redo log records to a previously stored version of the data page to create a current version.

Abstract: An acoustic event detection system may employ self-supervised federated learning to update encoder and/or classifier machine learning models. In an example operation, an encoder may be pre-trained to extract audio feature data from an audio signal. A decoder may be pre-trained to predict a subsequent portion of audio data (e.g., a subsequent frame of audio data represented by log filterbank energies). The encoder and decoder may be trained using self-supervised learning to improve the decoder's predictions and, by extension, the quality of the audio feature data generated by the encoder. The system may apply federated learning to share encoder updates across user devices. The system may fine-tune the classifier to improve inferences based on the improved audio feature data. The system may distribute classifier updates to the user device(s) to update the on-device classifier.

Abstract: Various embodiments of apparatuses and methods for threat sensor deployment and management in a malware threat intelligence system are described. In some embodiments, the system comprises a plurality of threat sensors, deployed at different network addresses and physically located in different geographic regions in a provider network, which detect interactions from sources. In some embodiments, a threat sensor deployment and management service determines a deployment plan for the plurality of threat sensors, including each threat sensor's associated threat data collectors. The threat data collectors can be of different types such as utilizing different communication protocols or ports, or providing different kinds of responses to inbound communications. The different threat sensors can have different lifetimes.

Abstract: A system for evaluating a biometric authorization system is described. The biometric authorization system is configured to apply a facial recognition model to image data to make an authorization determination based on detection of synthesized image data and based on matching a reference image to the image data. The system is also configured to execute one or more synthetic image data attack protocols to evaluate the biometric authorization system. The system also generates, according to one or more synthetic image data generation techniques, an evaluation set of image data comprising synthesized representations of a target and sends one or more authorization requests using the evaluation set of image data to the biometric authorization system. The system generates an evaluation of the biometric authorization system for synthetic image data attack analysis based on respective responses to the one or more authorization requests received from the biometric authorization system.

Abstract: A privacy protecting transaction engine for a cloud provider network is described. According to some embodiments, a computer-implemented method includes receiving a request from a customer of a cloud provider network to create a customer cloud in the cloud provider network, generating the customer cloud in the cloud provider network, receiving a first request at the cloud provider network for the customer cloud that includes private information of an end customer of the customer of the cloud provider network, removing the private information from the first request by a privacy protecting transaction engine of the cloud provider network to generate a second request, and sending the second request to the customer cloud for servicing.

Abstract: Methods, apparatus, and computer-accessible storage media for controlling export of snapshots to external networks in service provider environments. Methods are described that may be used to prevent customers of a service provider from downloading snapshots of volumes, such as boot images created by the service provider or provided by third parties, to which the customer does not have the appropriate rights. A request may be received from a user to access one or more snapshots, for example a request to export the snapshot or a request for a listing of snapshots. For each snapshot, the service provider may determine if the user has rights to the snapshot, for example by checking a manifest for the snapshot to see if entries in the snapshot manifest belong to an account other than the customer's. If the user has rights to the snapshot, the request is granted; otherwise, the request is not granted.

Abstract: To perform a beam search operation on an input tensor using a data processor with native hardware support, the data processor can be programmed with a set of instructions. The set of instructions can include a first machine instruction that operates on the input tensor to obtain N largest values in the input tensor, a second machine instruction that operates on the input tensor to obtain indices corresponding to the N largest values in the input tensor, and a third machine instruction that operates on the input tensor to replace the N largest values in the input tensor with a minimum value.

Abstract: Disclosed herein are methods and corresponding apparatus and systems for controlling the configuration of a computer system through locking one or more control registers. In some embodiments, a write-enable controller is configured to permit writing to a control register by a software application when the value of a lock bit has been set to indicate that the control register is unlocked. The control register can be locked by setting the lock bit after the control register has been written to, e.g., as part of a system initialization process that places the computer system into a target configuration. After the control register has been locked, the write-enable controller may prevent further writes to the control register, e.g., a write request from the same application that wrote to the control register earlier or a different software application. The locking of the control register can be maintained until system reset.