Abstract: Techniques for increasing the security and reliability of frame transmission are described. In an example, a network access device transmits a first frame indicating that a protected frame is to be used for a power mode change. The network access device receives a second frame that includes an identifier of a device and a change to a power mode of the device. The network access device determines whether the second frame is protected. In addition, the network access device determines whether data received for the device is to be stored prior to transmission to the device based at least in part on whether the second frame is protected.

Abstract: Devices and techniques are generally described for sending a first instruction for a device to output first content while the speech-processing device is in an ambient state during a first time period. First feedback data is received indicating that a first action associated with the first content was requested at a first time. A determination is made that the first time is during the first time period. Timing data related to a current time of the device is determined. Second content is determined based at least in part on the first action being requested during the first time period and the timing data. A second instruction is sent effective to cause the device to output second content while in the ambient state during a second time period.

Abstract: Systems and methods for processing a DNS query to identify and implement pre-processing information by a DNS server component in anticipation of a corresponding content request from a client computing device are provided. The pre-processing information can correspond to identification of content to be preloaded or other actions to be implemented by one or more computing devices in association with an anticipated client content request. Based on identification of the content or future actions, a DNS server component can provide the pre-processing information to one or more computing devices, such as computing devices of a CDN service provider and/or an original content provider, in advance of a corresponding request for content from the client computing device in order to improve performance associated with responding to the client request.

Abstract: A virtualization host is identified for an isolated run-time environment. One or more records generated at a security module of the host, which indicate that a first phase of a multi-phase establishment of an isolated run-time environment has been completed by a virtualization management component of the host, is transmitted to a resource verifier. In response to a host approval indicator from the resource verifier, the multi-phase establishment is completed at the virtualization host.

Abstract: A client of a metering service defines mapping data and derivation instructions comprising schema metadata and predicate metadata. The metering service provides usage information for a set of computing resources provided by one or more services of a computing resource service provider. As computing resources are utilized, usage records are generated. A derivation system may obtain one or more usage records and determine whether a predicate applies. If the predicate applies, a derivation function may be executed. For example, the derivation function may generate, from an original usage record, a derived usage record using mapping data provided by a client.

Abstract: A stiffener ring can include a body sized for attachment to a substrate in a semi-conductor package. The stiffener ring body can have a top surface and a bottom surface. A through-hole may penetrate the body so as to extend through the top surface and the bottom surface and so that the body is formed as ring around the through-hole. An anchor surface can form a portion of the bottom surface and be configured for engaging the substrate. An elevated surface can also form a portion of the bottom surface and be elevated above the anchor surface.

Abstract: Methods, systems, and computer-readable media for analysis of role reachability with transitive tags are disclosed. An access control analyzer determines a graph including nodes and edges. The nodes represent roles in a provider network hosting resources. The roles are associated with access control policies granting or denying access to individual resources. One or more of the access control policies grant or deny access based (at least in part) on key-value attributes. The access control analyzer determines, based (at least in part) on a role reachability analysis of the graph, whether a first role can assume a second role using role assumption steps for a particular state of the attributes. The attributes may include transitive attributes that persist during the role assumption steps.

Abstract: This disclosure describes techniques for providing instructions when receiving biometric data associated with a user. For instance, an electronic device may detect a portion of a user, such as a hand. The electronic device may then determine locations of the portion of the user relative to the electronic device. Based on the locations, the electronic device may cause a visual indicator to provide instructions to the user for placing the portion of the user at a target location relative to the electronic device. For example, the visual indicator may emit light indicating that the portion of the user is off-centered, angled, too low, and/or too high. After providing the instructions and determining that the portion of the user is at the target location, the electronic device may capture at least an image of the portion of the user and use the image to identify an account.

Abstract: A system configured to perform self-trigger prevention to avoid a device waking itself up when a wakeword is output by the device's own output audio. For example, during active playback the device may perform double-talk detection and suppress wakewords or other device-directed utterances when near-end speech is not present. To detect whether near-end speech is present, an Audio Front End (AFE) of the device may perform echo cancellation and generate correlation data indicating an amount of correlation between an output of the echo canceller and an estimated reference signal. When the correlation is high in certain frequency ranges, near-end speech is not present and the device may suppress the utterance. When the correlation is low, indicating that near-end speech could be present, the device does not suppress the utterance and sends the utterance to a remote system for speech processing.

Abstract: Systems and methods are provided to use a signed connection identifier to route packets of network traffic. Each network host can include a network device that independently routes the packets of network traffic without sharing state information with other network devices. A network device can receive a packet of network traffic and determine if the packet of network traffic includes a signed connection identifier. If the packet does not include a signed connection identifier, the network device can perform a load balancing operation to select a network host for the packet and generate a signed connection identifier for the packet identifying the selected network host. If the packet does include a signed connection identifier, the network device can encapsulate the packet and route the packet to a particular network host based on the signed connection identifier.

Abstract: Systems, devices, and methods are provided for performing compound operations on a security module. In some embodiments, a hardware security module (HSM) comprises executable code that, as a result of execution by one or more processors of the HSM, causes the HSM to obtain a request to perform a compound operation, parse the compound operation to determine a sequence of operations, perform the sequence of operations within a protected execution environment, wherein one or more intermediate results of the sequence of operations are programmatically unexportable from the protected execution environment, determine, based on complete execution of the sequence of operations, an output, and export the final output from the protected execution environment, thereby making it available to external devices.

Abstract: This disclosure describes, in part, techniques for implementing customized intrusion zones for security monitoring. For instance, a user may provide (e.g., via a GUI) an indication of a physical space to be monitored. An electronic device may detect one or more objects and its respective location from radar data collected by a radar sensor. The electronic device may additionally detect one or more objects within image data captured via a camera. The electronic device may then analyze the radar data and the image data in order to determine that the object detected by the radar sensor includes the same object represented by the image data. As such, the electronic device may send an alert to one or more computing devices that may include the radar data and/or the image data.

Abstract: This disclosure describes systems and techniques receiving a request for information from a user and, in response, outputting the requested information along with unsolicited, interesting content that is related to, yet nonresponsive to, the requested information. In some instances, if the requested information is unknown, the techniques may output an indication that the information is unknown, followed by the additional, unsolicited, interesting content.

Abstract: A mobile drive unit includes a pivot between the front chassis unit and the rear chassis unit, thereby diminishing the total height of the unit.

Abstract: Technologies are disclosed for disambiguating contact information using relationship data using a virtual assistant. A user interacts with a virtual assistant to obtain and utilize contact information. For example, a virtual assistant may allow users to perform an action that utilizes contact information (e.g., make a call to a contact). The virtual assistant utilizes a contact service to identify candidate contacts that are related to the requesting user. The contact service identifies candidate contacts based on relationship data between the requesting user and the stored contacts. For example, the relationship data may indicate that the requesting user is on the same project or team as another contact, that the requesting user has the same role as another contact, that the requesting user is a manager of another contact, as well as other attributes. In some examples, the contact service limits the number of candidate contacts provided to requesting user.

Abstract: Systems, methods, and computer-readable media are disclosed for dynamic voice search transitioning. Example methods may include receiving, by a computer system in communication with a display, a first incoming voice data indication, initiating a first user interface theme for presentation at a display, wherein the first user interface theme is a default user interface theme, and receiving first voice data. Example methods may include sending the first voice data to a remote server for processing, receiving an indication from the remote server to initiate a second user interface theme, and initiating the second user interface theme for presentation at the display.

Abstract: Various embodiments of systems and methods for providing virtualized (e.g., serverless) broker clusters for a data streaming service are disclosed. A data streaming service uses a front-end proxy layer and a back-end broker layer to provide virtualized broker clusters, for example in a Kafka-based streaming service. Resources included in a virtualized broker cluster are monitored and automatically scaled-up, scaled-down, or re-balanced in a way that is transparent to data producing and/or data consuming clients of the data streaming service.

Abstract: A journaling file system may implement remote durable logging. Updates to a file system may be received, and log records describing the updates may be stored in a locally-accessible file system change log. The update may then be acknowledged as committed. The log records may then be sent to be stored in a network-based data store in a remote version of the file system change log. Once it may be determined that the log records are stored in the remote version, storage space for the log records in the local file system change log may be reclaimed. Various types of restoration and duplication techniques may be implemented based on the remote version of the change log to restore a file system at an originating device or to duplicate the file system at a different device.