Abstract: A client-to-service compatibility framework is described that allows online entities to provide a single set of service offerings for client devices of multiple different brands and/or models, such as televisions, set-top-boxes, game consoles, and portable media players, for example. Generally, the client-to-service compatibility framework comprises a plurality of plug-ins or adapters that translate communications from client devices to a form compatible with the online entity's service offerings and vice versa. In this manner, online entities are able to insulate their service offerings from the changing communication needs of client devices.

Abstract: Content providers may specify special formatting instructions to manage formatting of content that is ultimately displayed by electronic devices. The formatting instructions may include formatting that is not apparent from an original format of the content. The formatting instructions from a content provider may override default formatting that is used by a viewing application on the electronic device or a host (intermediary) that formats the content for the electronic device, which would otherwise control a format of the content. The formatting instructions may be based on attributes of the electronic devices, such as display size, display type, etc. By enabling content providers to specify these special formatting instructions, the content providers may retain control of an ultimate look and function of the content when the content is formatted for a particular electronic device.

Abstract: A distributed computing environment utilizes a cryptography service. The cryptography service manages keys securely on behalf of one or more entities. The cryptography service is configured to receive and respond to requests to perform cryptographic operations, such as encryption and decryption. The requests may originate from entities using the distributed computing environment and/or subsystems of the distributed computing environment.

Abstract: A system uses information submitted in connection with a request to determine if and how to process the request. The information may be electronically signed by a requestor using a key such that the system processing the request can verify that the requestor has the key and that the information is authentic. The information may include information that identifies a holder of a key needed for processing the request, where the holder of the key can be the system or another, possibly third party, system. Requests to decrypt data may be processed to ensure that a certain amount of time passes before access to the decrypted data is provided, thereby providing an opportunity to cancel such requests and/or otherwise mitigate potential security breaches.

Abstract: A distributed computing environment utilizes a cryptography service. The cryptography service manages keys securely on behalf of one or more entities. The cryptography service is configured to receive and respond to requests to perform cryptographic operations, such as encryption and decryption. The requests may originate from entities using the distributed computing environment and/or subsystems of the distributed computing environment.

Abstract: Requests submitted to a computer system are evaluated for compliance with policy to ensure data security. Plaintext and associated data are used as inputs into a cipher to produce ciphertext. Whether a result of decrypting the ciphertext can be provided in response to a request is determined based at least in part on evaluation of a policy that itself is based at least in part on the associated data. Other policies include automatic rotation of keys to prevent keys from being used in enough operations to enable cryptographic attacks intended to determine the keys.

Abstract: Disclosed systems and methods provide media content through an electronic commerce server. In one implementation, a method for providing electronic content is provided. The method includes receiving an order of a user. The order of the user may comprise a request of the user for a physical copy of media content. The commerce server may determine whether to provide to the user an electronic copy of the media content based at least on the order. Further, a request to access the electronic copy of the media content is received from the user. The method further grants the user access to the electronic copy of the media content based at least on the request to access the electronic copy of the media content.

Abstract: A system for transporting inventory items includes an inventory holder capable of storing inventory items and a mobile drive unit. The mobile drive unit is capable of moving to a first point with the inventory holder at least one of coupled to and supported by the mobile drive unit. The mobile drive unit is additionally capable of determining a location of the inventory holder and calculating a difference between the location of the inventory holder and the first point. The mobile drive unit is then capable of determining whether the difference is greater than a predetermined tolerance. In response to determining that the difference is greater than the predetermined tolerance, the mobile drive unit is also capable of moving to a second point based on the location of the inventory holder, docking with the inventory holder, and moving the mobile drive unit and the inventory holder to the first point.

Abstract: Aspects of a data environment, such as the creation, provisioning, and management of data stores and instances, are managed using a separate control environment. A user can call into an externally-facing interface of the control environment, the call being analyzed to determine actions to be performed in the data environment. A monitoring component of the control plane also can periodically communicate with the data environment to determine any necessary actions to be performed, such as to recover from faults or events in the data environment. A workflow can be instantiated that includes tasks necessary to perform the action. For each task, state information can be passed to a component in the data environment operable to perform the task, until all tasks for an action are completed. Data in the data environment can be accessed directly using an externally-facing interface of the data environment, without accessing the control plane.

Abstract: Various approaches enable automatic communication generation based on patterned behavior in a particular context. For example, a computing device can monitor behavior of a user to determine patterns of communication behavior in certain situations. In response to detecting multiple occurrences of the certain situation, a computing device can prompt a user to perform an action corresponding to the pattern of behavior. In some embodiments, a set of speech models corresponding to a type of contact is generated. The speech models include language consistent with patterns of speech between a user and the type of contact. Based on context and on the contact, a message using language consistent with past communications between the user and contact is generated from a speech model associated with the type of contact.

Abstract: An embodiment relates to a computer-implemented data processing system and method for storing a data set at a plurality of data centers. The data centers and hosts within the data centers may, for example, be organized according to a multi-tiered ring arrangement. A hashing arrangement may be used to implement the ring arrangement to select the data centers and hosts where the writing and reading of the data sets occurs. Version histories may also be written and read at the hosts and may be used to evaluate causal relationships between the data sets after the reading occurs.

Abstract: A system uses information submitted in connection with a request to determine if and how to process the request. The information may be electronically signed by a requestor using a key such that the system processing the request can verify that the requestor has the key and that the information is authentic. The information may include information that identifies a holder of a key needed for processing the request, where the holder of the key can be the system or another, possibly third party, system. Requests to decrypt data may be processed to ensure that a certain amount of time passes before access to the decrypted data is provided, thereby providing an opportunity to cancel such requests and/or otherwise mitigate potential security breaches.

Abstract: The behavior of multiple users with access to a multi-tenant resource can be monitored and compliance enforced by monitoring state information for each user. The state information can be captured across a level of a network environment, such that any activity across that layer can be monitored and the data aggregated to give a global view of user behavior. If user behavior is determined to fall outside an acceptable range of behavior, any of a number of remedial actions can be taken, which can include notifying the user, billing the user for the inappropriate behavior, or modifying that behavior outside of the control of the user.

Abstract: A data storage system includes one or more hard disk drive systems and an air moving device. The hard disk drive systems may include one or more drive mechanical modules that store data and a drive control module electrically coupled to the drive mechanical modules. The drive control modules may control mechanical operations in the drive mechanical modules. The drive control module includes a circuit board assembly and heat producing components coupled to the circuit board assembly. Air passages on each side of the printed circuit board assembly allow a stream of air to flow across heat producing components on at least one side of the printed circuit board assembly.

Abstract: Ethernet Y-cables are provided that include first, second and third Ethernet cable segments, each of which has a first end and a second end and at least eight insulated conductors. These cables further include a housing that receives the respective first ends of the first, second and third Ethernet cable segments and a switching mechanism that is disposed at least partly in the housing. The switching mechanism is configured to selectively connect the at least eight conductors of the first Ethernet cable segment to respective ones of either the at least eight conductors of the second Ethernet cable segment or the at least eight conductors of the third Ethernet cable segment. Related Ethernet Y-switches and methods of using the Ethernet Y-cables and Y-switches are also provided.

Abstract: Methods, apparatus, and computer-accessible storage media for activating a gateway to a remote service provider. The gateway serves as an interface between processes on a customer network and the provider, for example to store customer data to a remote data store. A gateway sends a public key and metadata describing the gateway to the provider. The gateway receives an activation key from the provider and exposes the activation key on the customer network. The customer obtains the key and communicates to the provider using the key to provide customer information including a name for the gateway and to authorize registration of the gateway. The provider provides the customer information to the gateway. The gateway requests security credentials from the provider using the customer information and the key. The provider sends a security credential to the gateway. The gateway may then obtain configuration information from the customer via the provider.

Abstract: Disclosed are various embodiments for selection of wireless devices and service plans. A geographic location and a plurality of wireless preferences are obtained from a user at a client. A plurality of wireless service plans that meet the wireless preferences are offered by a plurality of wireless carriers that provide service to the geographic location are determined. A network page is generated that presents the wireless service plans in a ranked order that is based at least in part on the wireless preferences.

Abstract: Disclosed are various embodiments for providing limited versions of applications. A limited version of an application is automatically generated from a full version of the application based at least in part on an expected use of the application by a client computing device during a testing period. The limited version has a smaller data size than the full version. The limited version of the application is sent to the client computing device. The limited version of the application is configured to be executed in a secured environment of the client computing device. The secured environment denies the limited version of the application access to secured resources of the client computing device.

Abstract: Embodiments of the present disclosure are directed to, among other things, validating the integrity of received and/or stored data payloads. In some examples, a storage service may perform a first partitioning of a data object into first partitions based at least in part on a first operation. The storage service may also verify the data object, by utilizing a verification algorithm, to generate a first verification value. In some cases, the storage service may additionally perform a second partitioning of the data object into second partitions based at least in part on a second operation. The second partitions may be different from the first partitions. Additionally, the archival data storage service may verify the data object using the verification algorithm to generate a second verification value. Further, the storage service may determine whether the second verification value equals the first verification value.

Abstract: Systems and methods for the management of virtual machine instances are provided. The hosted virtual machine networks are configured in a manner such that communications within the hosted virtual machine network are facilitated through a communication protocol. Illustrative embodiments of the systems and methods may be implemented on a virtual network overlaid on one or more intermediate physical networks that are used as a substrate network. Through the utilization of one or more virtual network mapping components in communication with the hosted virtual network components, communications to and from the hosted virtual networks can be processed by mapping relationships between the virtual network communication protocol and the router communication protocol. The mapping information can be provided in advance or as requested to the router components and hosted virtual network components to facilitate bi-lateral communications between the components.