Abstract: Access level and security group information can be updated for a data instance without having to take down or recycle the instance. A data instance created in a data environment will have at least one default security group. Permissions can be applied to the default security group to limit access via the data environment. A control security group can be created in a control environment and associated with the default security group. Permissions can be applied and updated with respect to the control security group without modifying the default security group, such that the data instance does not need to be recycled or otherwise made unavailable. Requests to perform actions with respect to the control security groups are made via the control environment, while allowing native access to the data via the data environment.

Abstract: Disclosed are various systems, methods, and other embodiments for processing and recording defects. In one embodiment, an application is executed in a server that processes and records defects detected by a user at a receiving station client. Based on a retrieved vendor profile, the application selects an inspection sequence for a user to execute. The inspection sequence is selected based on a history of defects specified in the vendor profile. The application also determines whether supervision is needed based on the performance of the user.

Abstract: A system and method for protecting devices from impact damage is provided. Prior to impact between a surface and a device, a determination of a risk of damage to the device is made. If the risk of damage to the device exceeds a threshold, a protection system is activated to reduce or substantially eliminate damage to the device.

Abstract: Systems and method for the management of migrations of virtual machine instances are provided. A migration manager monitors a resource usable for migration of a virtual machine instance in order to predict availability of the migration resource. When migration of a virtual machine instance is desired, the migration manager schedules the migration to occur at a future point in time identified based on the predicted availability of the migration resource.

Abstract: Disclosed are various embodiments for active data, such as active decoy data. The active decoy data includes instructions that, when executed by a particular device, cause the particular computing device to determine whether the particular computing device is a target computing device. The particular computing device initiates a predefined action in response to determining that the particular computing device is not the target computing device. The approaches described herein may also be useful in wrapping and distributing digital content.

Abstract: Clients within a computing environment may establish a secure communication session. Sometimes, a client may trust a cryptography service to perform some cryptographic operations and access some cryptographic resources while simultaneously not trusting the cryptography service to perform other operations and access other resources. Two or more clients may utilize a cryptography service to perform certain authentication and verification operations to establish a secure communication session, while simultaneously denying the cryptography service access to the secure communication session.

Abstract: Techniques are described for allocating resources to a task from a shared hardware structure. A plurality of tasks may execute on a processor, wherein the processor may include one or more processing cores and each task may include a plurality of computer executable instructions. In accordance with one technique for allocating resources to a task from a shared hardware structure amongst multiple tasks, aspects of the disclosure describe assigning a first identifier to a first task from the plurality of tasks, associating a portion of the shared hardware resource with the first identifier, and restricting access and/or observability for computer executable instructions executed from any other task than the first task to the portion of the hardware resource associated with the first identifier.

Abstract: Techniques for providing information to a user without requiring the user to authenticate are described herein. In some instances, a user enters a payment identifier for the purpose of determining a fully-landed cost of one or more items. In response, a transaction processing service compares item details with information associated with the payment identifier and/or information about the owner of the identifier. The service may then provide this identifier-specific fully-landed cost to the user without requiring the user to authenticate or prove that she is the owner of the payment identifier.

Abstract: A virtual user interface in a 3D environment is projected onto a display object, such as an open hand. An operating object, such as a stylus or a second hand with an index finger extended, may be used to select input features of the projected user interface. In one scenario, for example, a telephone keypad may be projected onto the open hand and the index finger may be used to select a particular number on the keypad. Images of the hands may be segmented to produce contours of the finger and open hand, and these contours are used to determine the location of the finger relative to the open hand.

Abstract: An updated operating speed for a fan of an air handler may be determined. The updated operating speed may depend on a target output volume for the air handler and an intermediate resistance value for a filter of the air handler. The intermediate resistance value may be determined by instructing the fan to operate at a first operating speed for a fixed period of time. During the fixed period of time, a pressure sensing system may sense an observed differential pressure measured across the filter. The observed differential pressure may correspond to the intermediate resistance value. The intermediate resistance value may be used to identify, from a set of filter loading values which may be retained in a filter loading data structure, the updated operating speed for the fan such that the air handler is capable of achieving the target output volume.

Abstract: A remote distributed data store may be configured to process data updates received through invocation of a common API with reference to a common schema. A local data store may also be configured to process updates through the common API with reference to the common schema. Updates to the local data store may be mapped from the local data store schema to the common schema, and applied to the distributed data store. Updates to the distributed data store may be mapped from the common schema to the local data store schema. User identity may be verified to limit data synchronization to authorized users.

Abstract: A hand gesture may be characterized mathematically as a set of motion parameters applied to a dynamic motion model. Training may be conducted to compile a library of motion parameter sets corresponding to various gestures. Motion parameters corresponding to observed gestures may than be compared to the library of motion parameter sets to classify the observed gestures.

Abstract: An item-providing system supplies items to a user device for consumption at the user device via communication infrastructure. In one representative implementation, a user device includes a mode switching wireless communication module. The mode switching wireless communication module is adapted to receive a first paging signal via a first communication protocol when in a first mode of operation and adapted to receive a second paging signal via a second communication protocol when in a second mode of operation. The user device also includes a to-do list processing module. In response to receiving one of the first or second paging signal, the to-do list processing module sends a request to a remote network device. The request requests that one or more instructions be sent from the remote network device.

Abstract: Burst throttling methods may be used manage computing resources of a data storage service. Tokens may represent I/O operations executed by a customer of the data storage service. A global token bucket may contain a set of tokens representing the overall I/O operation capacity of the data storage service. Additionally, a work token bucket may contain a set of tokens for a given logical volume maintained by the data storage service. When I/O request are received tokens may be charged the global token bucket and the work token bucket. Furthermore, if there is sufficient capacity the data storage service may charge a reduced number of tokens to the work token bucket.

Abstract: An interference suppression module coordinates devices susceptible to interference such as a touch sensor with potentially interference generating devices such as a display drive matrix, an active haptic device, and so forth. As a result of status signals generated by the interference suppression module, controllers of the susceptible devices may modify the input received to mitigate or avoid interference.

Abstract: Methods and systems for managing media objects by maintaining one unique location that the media object is stored to and accessible from. A media object is received by a computing system and a unique uniform resource identifier is determined based at least in part on identification information corresponding to the media object. The identification information is requested from a remote identification information maintenance service. The media object is provided to a storage location corresponding to the determined unique uniform resource identifier.

Abstract: Approaches are described for detecting when an electronic device (such as a mobile phone) has been stolen or is otherwise being used by someone other than an authorized user of the device. At least one sensor of the device can obtain data during a current use of the device, and the device can determine from the data a set of available features. The features can be compared to a corresponding model associated with an owner (or other authorized user) of the device to generate a confidence value indicative of whether the current user operating the device is likely the owner of the device. The confidence value can be compared to at least one confidence threshold, for example, and based on the comparison, the current user can be provided access to at least a portion of functionality of the device and/or a security action can be performed when the confidence value does not at least meet at least one confidence threshold.

Abstract: A photograph acquired by a camera, such as a smartphone, may include at least a part of a display device, such as a television or computer monitor. The display device may present a displayed image on the display device at the time of the photograph. The camera may send a request that may be processed by a source device such the television or a desktop computer. Responsive to the request, a presented image may be provided that corresponds to the displayed image on the display device at the time of the photograph. The presented image may then be used instead of the photograph, may be stored in addition to the photograph, may be used to update a portion of the photograph, and so forth.

Abstract: Technologies are described herein for isolating tenants executing in a multi-tenant software container. Mechanisms for resource isolation allow tenants executing in a multi-tenant software container to be isolated in order to prevent resource starvation by one or more of the tenants. Mechanisms for dependency isolation may be utilized to prevent one tenant executing in a multi-tenant software container from using another tenant in the same container in a manner that requires co-tenancy. Mechanisms for security isolation may be utilized to prevent one tenant in a multi-tenant software container from accessing protected data or functionality of another tenant. Mechanisms for fault isolation may be utilized to prevent tenants in a multi-tenant software container from causing faults or other types of errors that affect other tenants executing in the same software container.