Abstract: Techniques are described for enabling principals to inject context information into a credential (e.g. session credential). Once the credential has been issued, any arbitrary principal is allowed to inject context information into the existing credential. The injected context is scoped to the principal that made the injection. Subsequently, at authentication time, when the credential is used to request access to a particular resource, the system can verify whether the principal that made the injection is trusted and if the principal is deemed trusted, the context information can be applied to a policy that controls access to one or more resources, or can alternatively be translated into some context residing in a different namespace which can then be applied to the policy. In addition, the system enables arbitrary users to insert additional deny statements into an existing credential, which further restrict the scope of permissions granted by the credential.

Abstract: Secure networking processes, such as packet encapsulation and decapsulation, can be executed upstream of a user or guest operating system provisioned on a host machine, where the user has substantially full access to that machine. The processing can be performed on a device such as a network interface card (NIC), which can have a separate network port for communicating with mapping systems or other devices across a cloud or secure network. A virtual image of the NIC can be provided to the user such that the user can still utilize at least some of the NIC functionality. In some embodiments, the NIC can work with a standalone processor or control host in order to offload much of the processing to the control host. The NIC can further handle headers and payload separately where possible, in order to improve the efficiency of processing the various packets.

Abstract: Disclosed are various embodiments of a method and system for detecting feature conflicts in a vendor account configuration. A request to modify an account configuration for an account holder is obtained. The configuration describes at least one feature provided to the account holder by a hosted service provider. A determination is made as to whether the requested modification complies with at least one vendor feature rule. If the modification complies with the at least one vendor feature rule, the configuration is modified as requested.

Abstract: A data center includes one or more racks, one or more computing devices coupled to at least one of the racks, and one or more air moving devices. The computing devices include heat producing components. The computing devices may be inclined in the rack such that the lower ends of the computing devices are at a lower elevation than the higher ends of the computing devices. The air moving devices can move air from the lower end of the inclined computing devices to the higher end of the inclined computing devices such that heat is removed from heat producing components in the inclined computing devices.

Abstract: Methods, apparatus, and computer-accessible storage media for implementing a gateway to a remote service provider according to a security model. The gateway serves as an interface between processes on a customer network and the provider, for example to store customer data to a remote data store. The model may include an activation process initiated by the gateway to register with the provider and associate the gateway with a customer account; the gateway is provided with security credentials. The model may also include establishing secure connections to external processes, for example processes of the service provider. The gateway initiates connections; the external processes do not initiate connections. The model may also include the customer managing the gateway through the service provider. The model may also include encrypting communications between the gateway and the provider and the gateway including security credentials in communications to the provider.

Abstract: A data center includes one or more racks, one or more electrical systems mounted in at least one of the racks, and one or more rack power distribution units (PDUs) in the racks, and one or more rack PDU power monitors. The rack PDUs distribute electrical power to the electrical systems. Each of the rack PDUs includes one or more PDU coupling devices and a monitoring device. The coupling device couples with PDU output receptacles of the rack PDUs. The monitoring device monitors electrical power output from the PDU output receptacles.

Abstract: Methods and apparatus for robotic induction in materials handling facilities. Singulation and induction of items is performed at one or more induction stations in one or more inventory areas. Each inventory area includes a stock storage area containing storage units, each storage unit including locations for stowing inventory. Mobile robotic devices deliver particular storage units from the stock storage area to particular induction stations. At the induction stations, inductors remove single units of items from locations on the storage units (singulation) and induct the units of items into a conveyance mechanism (induction). The singulated and inducted units of items are conveyed to downstream processing station(s). The operations of the robotic devices, induction stations, conveyance mechanism, and downstream processing may be controlled and/or directed by a control system.

Abstract: Techniques, including systems and methods, for virtual resource cost tracking account for unused capacity of implementation resources that is dedicated to particular customers and, as a result, is unusable for maintaining virtual resources for other customers. Customers requesting dedicated use of implementation resources are charged in a manner that compensates the virtual resource provider for the lost ability to use unused capacity of implementation resources to serve other customers. Customer charges may be determined by a pricing function that is calculated such that, for a base of customers, expected revenue from the base of customers approximates a revenue goal. The revenue goal may be determined based on revenue that would have been expected had the unused capacity of the dedicated implementation resources been available for serving other customers.

Abstract: Disclosed are various embodiments for adjusting prices of items in foreign marketplaces based on fluctuations in currency exchange rates. A deviation from a return sought by a merchant for an item offered in an electronic marketplace is determined. The deviation results from a change in an exchange rate between a first currency employed by the merchant and a second currency employed by the electronic marketplace. It is determined whether the deviation from the return meets a threshold. One or more actions in response to the deviation are implemented when the deviation from the return meets the threshold.

Abstract: Methods, apparatus, and computer-accessible storage media for remotely monitoring and diagnosing storage gateways. Status information may be collected locally on the gateways and uploaded to a service provider via gateway-initiated connections. The uploaded information may be stored to status data store(s). Status proxy(s) on the provider network may analyze the information in the status data store(s) for one or more gateways to detect error conditions on individual gateways or patterns or error conditions on multiple gateways. Upon detecting an error condition on a gateway, the proxy may alert another process, for example an administrator process on the local network that includes the respective gateway. The other process may then message the gateway to address the condition. Information for particular gateways may be provided to clients on request. Information collected from multiple gateways may be viewed and analyzed by the service provider to detect patterns related to gateway design.

Abstract: An architecture and techniques for implementing a unified and extensible meta-testing framework within a distributed environment. This framework allows entities within the distributed environment to run tests written in different testing frameworks in a unified way. In addition, this disclosure describes techniques for allowing an entity within the distributed environment to test itself, both from its own perspective as well as from the perspective of other entities within the distributed environment.

Abstract: The deployment and scaling of a network of electronic devices can be improved by utilizing one or more network transpose boxes. Each transpose box can include a number of connectors and a meshing useful for implementing a specific network topology. When connecting devices of different tiers in the network, each device need only be connected to at least one of the connectors on the transpose box. The meshing of the transpose box can cause each device to be connected to any or all of the devices in the other tier as dictated by the network topology. When changing network topologies or scaling the network, additional devices can be added to available connectors on an existing transpose box, or new or additional transpose boxes can be deployed in order to handle the change with minimal cabling effort.

Abstract: Disclosed are various embodiments that provide file system merchandising. A file service maintains file systems associated with file service accounts. When accessing content of the file system through a network page, the network page includes a merchandising recommendation that is based at least in part upon characteristic information associated with the requested content. The merchandising recommendation may also be based at least in part upon account behavior history associated with the file service account. A link may be included in the merchandising recommendation to initiate previewing of at least a portion of a recommended item and/or to initiate acquisition of the recommended item.

Abstract: Disclosed are various embodiments for presenting alternative shopping options to a customer. A collection of alternative shopping options is identified in a computing device based upon subject matter of a network page generated by a first one of a plurality of network sites to be presented to a customer. Each of the network sites is configured to sell a plurality of products, and at least one of the alternative shopping options comprises a purchase opportunity associated with a second one of the network sites. An estimate of a benefit for each of the alternative shopping options is determined with respect to the first one of the network sites, and a subset of the alternative shopping options is identified to be included in the network page based at least upon the estimates. The subset of the alternative shopping options is included in the first network page.

Abstract: External jolts, such as those occurring during shipment, may inadvertently activate an electronic device. Such inadvertent activations may result in the electronic device entering an active mode during shipment, draining battery power. This document describes a power cut off mode that prevents inadvertent device activations and minimizes current consumption during shipment or storage of a device. This conserves battery power for operational use by the user.

Abstract: Target host computing devices are provisioned with a machine image that corresponds to an operating environment, software applications, and associated configurations. The machine image is organized in a manner that allows static portions of the machine image to be maintained in a designated static partition. The machine image is also organized in a manner that allows dynamic portions of the machine image to be maintained in a designed dynamic partition. A host management component identifies updates to the static portion of the machine image and transmits the update information to the host computing devices. In turn, the host computing devices maintain the update in the allocated secondary partitions. Thereafter, the host computing devices causes a switch from a designated primary static partition to the secondary static partition, such as via a kernel switch.

Abstract: Digital items may be lent from one user to another. A lending system may facilitate matching users that have a digital item to lend with users that wish to borrow a digital item. Each user may have a reputation associated with his or her lending behavior that is represented as a lending metric. The lending metric may show whether a given user is primarily a lender or borrower of digital items. Heavy borrowers that do not engage in commensurate lending may be penalized. Multiple users that lend and borrow digital items from one another may be connected in a social network. The nature of a relationship in the social network may and the lending metrics of users are factors used to make lending decisions.

Abstract: Disclosed are various embodiments of systems and methods for content notification. For example, in some embodiments, a method includes the step of storing a network page in a memory in a client computing device. The network page includes a list of item representations associated with a plurality of items. Each item representation is associated with a respective one of the items. The method further includes the step of rendering the network page using the client computing device. The network page includes a content notification component in a visible portion, and the content notification component is visible in a viewport. The content notification component provides notification to a user of at least one non-visible portion of the network page.

Abstract: A system and method for providing the dynamic display of content is provided. A network resource, such as Web page, can include a plurality of dynamic content modules. Depending on the available display area and additional display criteria, each dynamic content module displays a subset content. Each dynamic content module corresponds to an integration of multiple layers of content, such as text, graphics and image rendering information.

Abstract: Electronic devices can identify other nearby devices, and determine the relative positions of those devices, using a combination of techniques. Various devices are able to project one or more instances of a unique identifier, such as a barcode, which can be imaged by other devices. The devices also can communicate position and/or orientation information over a wireless sideband channel. By combining the information relating to the projected identifier with information collected over the sideband channel, devices can automatically determine the location of various devices and associate a user or device identity with those devices. A user of a device then can view relative locations of those devices on a display element, including information about the user of the device. Further, the relative position determinations can enable a user to perform certain functions with respect to another device based at least in part upon the position and/or identity of that device.