Abstract: A device management service provide a centralized credential provisioning system which can instantiate a proxy device that facilitates remote connections between various computing devices and various client devices. The device management service can manage instances of proxy devices in a resource provider environment that are associated with various computing devices. When a client device requests to access a computing device, the device management service can identify an instance of a proxy device associated with the computing device. The instance of the proxy device and the computing device can be configured to securely connect using credentials exchanged through, and managed by, the device management service. The computing device can be instructed to connect to the instance of the proxy device, and the client device can be provided with access information for the instance of the proxy device.

Abstract: A host-side network processing device coupled between a storage system and a host machine may encode a data object according to a sharding technique. Encoding the data object may include receiving, from the host machine, a data object and a request to store the data object. The network processing device may send a request for a plurality of storage locations to the storage system. The network processing device may receive a location list including a plurality of location identifiers from the storage system, where each location identifier corresponds to a respective storage location. The network processing device may determine an encoding matrix and encode the data object into a plurality of shards based on the encoding matrix according to a sharding technique. The network processing device may generate a plurality of storage requests that each specify a different location identifier and that each includes a respective shard.

Abstract: Features are disclosed for a wearable scanning device that can passively initiate scanning for wireless identifiers such as RFID tags. The wearable scanning device may include a force sensor, an accelerometer, or a motion activated switch that can initiate the scanning when detecting an action performed by an associate (e.g., lifting) without an express intent from the associate to scan.

Abstract: A user can navigate through a graphical user interface (GUI) displayed on a display of a computing device using a fingertip or other feature of a hand not holding the device. The interface can be scrolled, zoomed, or otherwise manipulated corresponding to the movement of the fingertip. The user can select a graphical object of the GUI using a thumb or other feature of the hand holding the device, enabling a precise navigation and selection process. Different detection techniques can be used, such as to capture and analyze images to determine the location of the navigation feature and to use capacitive touch sensing elements to detect the selection actions. In some embodiments, a user can perform an attachment action to cause a three-dimensional rendering of an element of the GUI to be adjusted based at least in part upon the position of a fingertip or other feature of the user.

Abstract: In some examples, a system for instructing an unmanned aerial vehicle is provided. The system may include a delivery management service for processing orders for items available in connection with an electronic marketplace. The delivery management service may also determine a landing location for delivery of an item to a customer of the electronic marketplace. The landing location may correspond the customer's address. Determination of the landing location may be based on a first digital elevation dataset, a second digital elevation dataset, and parcel data corresponding to a region in which the customer's address is located. The unmanned aerial vehicle may access the landing location as part of delivering the item to the customer.

Abstract: Methods and systems can be provided for providing items manufactured on demand to users. A user request for an item can be received. The item can have 3D manufacturing instructions associated therewith. A delivery method for the item can be determined. A manufacturing apparatus can be selected to manufacture the item based on the 3D manufacturing instructions. Instructions can be sent to the manufacturing apparatus to manufacture the item based on the 3D manufacturing instructions. Delivery instructions can be provided for delivering the item according to the delivery method.

Abstract: Notification routines are described for implementation by a monitoring service. As part of an exemplary notification routine, a faulty storage volume is correlated at multiple logical storage levels of a storage system with other faulty storage volumes. The correlation pattern can follow a tree-based decision format, where each faulty storage volume is sequentially compared at a lower logical storage level. Advantageously, once a common logical storage component of a group of storage volumes is identified, a notification is issued about the group of faulty storage volumes sharing the common logical storage component. Additionally, notifications can be issued according to a severity level of the group of faulty storage volumes. In some embodiments, before issuing the notification, the group of faulty storage volumes can be compared to a time allowed for the group of faulty storage volume to be at fault.

Abstract: Conversion of text-based images to vector graphics (VG) is disclosed. The text-based images may include images of equations, custom typefaces, or other types of text that may not be included in a font selection of an optical character recognition (OCR) device or an application stored on a viewing device. A textual image may be converted from a raster graphics (RG) image to a VG image, which may enable resizing and alignment of the VG image with body text. In some aspects, the server may determine a body size of a reference character in the VG image. The server may determine a baseline of the VG image that may be used to align the image with the body text.

Abstract: A log-structured data store implementing data backup may implement variable data replication. Write requests may be received at different storage nodes maintaining respective replicas of a portion of a log for data maintained in the log-structured data store. Log records indicating the write requests may be stored in the respective replicas of the log portions at the different storage nodes. The log records may be sent to a backup data store to be durability persisted as part of an archived version of the log. At some of the storage nodes, in response to determining that the log records have been durably persisted in the backup data store, storage space for the log records may be reclaimed. In other remaining storage nodes, the log records may be retained and made accessible for servicing read requests.

Abstract: Data stores that are to be configured as members of a storage group on behalf of a client are identified. The client indicates one or more types of cross-data-store operations to be performed. A transaction manager that makes acceptance decisions for write requests directed to the members based at least partly on contents of a log is instantiated, and respective write transformers are set up for at least some of the types of cross-data-store operations. During a particular time period, the workload at the storage group is monitored, and the number and types of cross-data-store operations is determined. The results of the monitoring are used to determine a billing amount for the client based on a selected pricing policy.

Abstract: A system for providing air to electrical systems includes a conduit having a passageway, an inlet portion, and one or more exits. The conduit may couple with an opening in the raised floor. The inlet portion of the conduit may receive air from the sub-floor space and pass the air to the passageway. The exits may direct air from the passageway through rack air inlets of a rack computing system.

Abstract: A computing device has a processor and a persistent memory, e.g., a fuse-based memory, storing two or more reduced sets of information. The processor is configured to derive a first cryptographic key using a first reduced set of information, e.g., prime numbers, and to use the first cryptographic key for performing cryptographic operations. The processor is also configured to detect a trigger event and, in response to the detected trigger event, derive a second cryptographic key using a second reduced set of information. The processor can then use the second cryptographic key for performing cryptographic operations.

Abstract: A backup battery unit that can be reconfigured to provide different currents and/or voltages depending upon load conditions. The backup battery unit can be reconfigured, for example, between a configuration in which battery cells for the battery unit are wired in series to a configuration where the battery cells are wired in parallel. Additional embodiments are directed to a backup battery unit that can isolate a battery cell and remove the cell from a circuit for the battery while the battery is under load or being charged. The isolated cell can then be serviced or tested.

Abstract: A monitoring component installed in a network navigation interface, such as an Internet browser, is disclosed. The monitoring component monitors activity of a user performed via the network navigation interface among one or more network resources, such as e-commerce sites, blogs, media hosting sites, and social networking sites. The monitoring component further enables the user to selected at least one monitored activity to be shared with contacts known to the user. An activity service is provided that notifies the contacts of the selected activity and generates recommendations for the user based on the activities reported by the monitoring component. In this manner, users may share activities of interest with their contacts, as well obtain recommendations about items of possible interest.

Abstract: Methods and systems are described herein to provide efficient data retrieval in a data storage system. Specifically, in cases where users of a data storage system are not overly sensitive to data retrieval time, such as the case for backup and archival data storage systems, random read requests may be fulfilled as part of sequential reads to reduce I/O operations. A data storage system may be divided into data storage zones. Sequential reads may be performed for data stored in those data storage zones with pending data retrieval requests. Data retrieval requests may be fulfilled based at least in part on the sequentially-read data.

Abstract: A system for removing heat from components in a computer room of data center includes one or more air storage containers that hold compressed air, one or more compressors that supply compressed air to the air storage containers, and one or more plenums in fluid communication with at least one of the storage containers. At least one of the plenums can supply air to a computer room.

Abstract: A method and apparatus for location authentication of the user are disclosed. In the method and apparatus, the location of the user is authenticated if one or more conditions for geographic proximity associated with two or more devices of the user are satisfied. Upon the location of the user being authenticated, the user may be granted access to a service.

Abstract: Techniques for using short-term credentials with access roles across regions are described herein. A request to assume a role associated with resources in a first region is received by a user in a second region. The request, which is digitally signed with credential associated with the user in the second region causes the generation of a short-term session credential that includes a session key and that can be used to assume the role. The user in the second region then assumes the role and, accordingly, can use the short-term session credentials to access the resources in the first region.