Abstract: An Identity and Access Management Service implements persistent source values PSVs) for assumed identities. A source value (e.g., an original identifier of an entity) is persisted across assumed identities, facilitating identification of entities (users or applications) responsible for actions taken by the assumed (e.g., alternative) identities. The Manager receives a request to assume an identity. The request includes the entities current credentials and a PSV. The current credentials are authenticated and a persistent source value policy may be relied on to determine whether and/or how to grant the assumed identity. The PSV may be copied from credentials in the request in order to be included in the credentials for the requested identity that the Manager provides in response to the request. Use of the requested credentials, including the PSV, to access services or resources may be logged, the logs including the PSV from the request to assume the identity.

Abstract: A quantum computing service may store, in a cache, one or more compiled files of respective quantum functions included in one or more quantum computing programs received one or more customers. When the quantum computing service receives another quantum computing program, from the same or a different customer, the quantum computing service may determine whether the quantum computing program may include one or more of the quantum functions corresponding to the compiled files in the cache. If so, the quantum computing service may use the compiled files in the cache to compile the quantum computing program.

Abstract: This disclosure is directed to, in part, techniques for determining occupancy states of a vehicle over time and adjusting settings associated with the vehicle based at least in part on these occupancy states. For instance, an example vehicle may include an array of sensors that may generate sensor data for identifying an occupancy state of a vehicle. These sensors may include cameras, microphones, in-seat weight sensors, seatbelt sensors, door-latch sensors, and the like, which may be used to generate sensor data indicative of a current occupancy state of a vehicle. An occupancy state may include a number of occupants of the vehicle, the location of these occupants within the vehicle, the identity of these occupants, and/or the like.

Abstract: An automated, single level, package sortation system may include a conveyance mechanism, a package induct station with a first robotic arm, a first drive unit, a cart building station with a second robotic arm, a cart, and a cart transfer station. Each package and cart of the system may have an associated destination. A package may be transferred by a first robotic arm from a conveyance mechanism to a first drive unit, and then transferred by a second robotic arm from a first drive unit to a cart associated with the same destination as the package. Then, the cart may be transferred via a cart transfer station to the destination associated with the cart and all packages contained therein.

Abstract: Techniques for generating custom rules are described. For example, a system to receive at least one request to create rules based on a policy and code repository files stored by the storage service; analyze the policy to generate a collection of rule candidates; analyze the code repository files to identify labeled code examples that either conform or do not conform to the rule candidates; receive a selection of the labeled code examples; and synthesize at least one rule that includes a precondition that specifies applicability to the selected labeled code examples and a postcondition that expresses a check to be performed contingent on the precondition being satisfied is at least described.

Abstract: An airframe design may include a bonded frame or assembly, and one or more components that may be removably attached to the bonded frame. The bonded frame may include struts, central bulkheads, a tail section, a plurality of wing sections, and motor mounts that are adhered together using adhesive. The one or more attachable components may include a forward fuselage, motors, propellers, motor pod fairings, stabilizer fins, and landing gear that are attached using fasteners. The bonded frame may reduce the number of parts of the airframe design and may also reduce complexity, cost, and weight, while also increasing stiffness and strength. Further, the various attachable components may facilitate fabrication, assembly, and maintenance of an aerial vehicle having the airframe design.

Abstract: In one example, a method comprises: receiving input codes, wherein the input codes represent a computational dataflow graph; traversing the computational dataflow graph to identify single-entry-single-exit (SESE) subgraphs of the computational dataflow graph, wherein each SESE subgraph has a sequence of nodes comprising a root node and a child node and representing a sequence of element-wise operators, wherein the root node receives a single input tensor, and wherein the child node outputs a single output tensor; determining a merged operator for each SESE subgraph; and generating executable instructions for the computational dataflow graph to be executed by a hardware accelerator having a first execution unit and a second execution unit, wherein the executable instructions comprise first executable instructions for the merged operators targeted at the first execution unit, and second executable instructions for other operators of the computational dataflow graph targeted at the second execution unit.

Abstract: An IoT gateway at a client site uses sensing functions and actuating functions to safely implement actions for equipment. The client provides, to the IoT service, specifications for a sensing function and one or more actuating functions that are to communicate with the sensing function. The functions are deployed to the IoT gateway at the client site. The sensing function may be assigned read only access to the equipment and the actuating function may be assigned write only access to the equipment. The sensing function may collect data from the equipment and determine that a condition has been met (e.g., temperature is above an upper limit). In response, the sensing function provides an indication of an action to the actuating function (e.g., via a unique topic). If the action is a supported action, then the actuating function causes the equipment to perform the action; otherwise, it ignores the indicated action.

Abstract: Described are systems and methods that may be used to compare virtual machine manager-level system operations in a host environment to verify to a guest environment, such as a virtual machine, that the requested operations have been performed and the data managed by the host on behalf of the guest is secure. The implementations may include a security monitor that interfaces with a trusted platform module included in a hardware of the host. The security monitor may work with the TPM to verify consistency between a VM operation and a corresponding VMM-level operation of the host. This verification provides transparency that the host machine is complying with its responsibility to properly manage and secure data of the VM.

Abstract: A point-of-sale (POS) system may use biometric or other contactless techniques to determine tokenization data that attributes a transaction with a particular payment account for settlement. A first payment method specified by a user for use at the POS may be issued by a first bank that does not participate in tokenization. A second payment account associated with a different entity and issued by a second bank that does support tokenization is associated with the first payment method. The POS transaction completes, using a token associated with the second payment account. Another transaction then takes place in which the second bank charges the first bank for the amount of the completed transaction.

Abstract: Systems, devices, and methods are provided for depth guided structure from motion. A system may obtain a plurality of image frames from a digital content item that corresponds to a scene and determine, based at least in part on a correspondence search, a set of 2-D keypoints for the plurality of image frames. A depth estimator may be used to determine a plurality of dense depth map for the plurality of image frames. The set of 2-D keypoints and the plurality of dense depth maps may be used to determine a corresponding set of depth priors. Initialization and/or depth-regularized optimization may be performed using the keypoints and depth priors.

Abstract: Described are systems and methods for monitoring and detecting thermal conditions associated with individual cells of a battery. Embodiments of the present disclosure may monitor, detect, and protect against thermal anomalies that may be experienced at individual cells of a battery, without employing the use of thermal sensors (e.g., a thermocouple, thermistor, etc.). The exemplary systems and methods may be implemented in connection with a battery and/or battery pack having cells arranged in a serial configuration that may be employed in an aerial vehicle, such as an unmanned aerial vehicle (UAV). The described systems and methods detect thermal conditions associated with the individual cells of a battery by modeling each cell as an RC circuit and determining the resistance of each cell based on voltage and current measurements. The determined resistance can approximate and/or be representative of the temperature of the respective cell.

Abstract: Techniques are described for enabling a service provider to determine the power utilization of electrical lineups and sub-lineups powering physical servers in a data center and place virtual machine instances into the physical servers based on the power utilization and a user-specified preference of a virtual machine instance type.

Abstract: Editing and sharing spreadsheets of a spreadsheet editor system are disclosed. Interactions pertaining to requests of users of the spreadsheet editor system may be treated via natural language queries that are received at an interface of said system. When a first user attempts to share a spreadsheet with a second user, various spreadsheet filtering techniques may cause a new version of the given spreadsheet to be generated for the second user depending on permissions and metadata of one or both users of the editable spreadsheet system. References of the second user may additionally be used to modify a spreadsheet for viewing by the second user.

Abstract: Techniques for a cloud-based workload optimization service to identify customer workloads that are optimized to run on burstable instance types. The techniques include identifying workloads that are successfully running on burstable instance types, and using historical-utilization data for those workloads to train classification models. The optimization service can extract feature data from the historical-utilization data, where the feature data represents utilization characteristics that are indicative of burstable workloads. The feature data is then used to train classification models to receive utilization data for candidate workloads, and determine whether the candidate workloads would be optimized for burstable instance types. The optimization service can then migrate suitable workloads to burstable instance types, and/or provide users with recommendations that their workloads are optimized or suitable for burstable instance types.

Abstract: A lightweight filesystem may be provided for remote storage caching. A filesystem may maintain a persistent cache for a data set stored as data files in immutable data objects in a remote data store. Filesystem metadata may be evaluated to determine whether a portion of a data file is stored in the persistent cache according to an offset and length specified in a request. If in the persistent cache, data obtained from a data block in the persistent cache may be returned. If not in the persistent cache, then the remote data store may be accessed and the data file in the immutable data object read to obtain the portion of the data file.

Abstract: Techniques for using scoring algorithms utilizing containers for flexible machine learning inference are described. In some embodiments, a request to host a machine learning (ML) model within a service provider network on behalf of a user is received, the request identifying an endpoint to perform scoring using the ML model. An endpoint is initialized as a container running on a virtual machine based on a container image and used to score data and return a result of said scoring to a user device.

Abstract: An object-based data storage service receives a request to store a data object in association with a smart data storage tier. Based at least in part on characteristics of the data object, the object-based data storage service identifies and stores the data object in a first location corresponding to a first data storage tier. The object-based data storage service monitors access to the data object to identify a second set of characteristics of the data object. This second set of characteristics is used to determine that the data object is to be transitioned to a second data storage tier. The object-based data storage service, based at least in part on this determination, stores the data object in a second location corresponding to the second data storage tier.

Abstract: Systems and/or methods receive an indication associated with a delivery to an address and determine a route associated with the delivery. The systems and/or methods determine a threshold distance to the address associated with displaying images of an environment along the route. As a device associated with a delivery personnel travels within the threshold, the device displays the image(s) of the environment. Additional image(s) are presented based on arriving at the address. The additional image(s) represent a structure associated with the address. The route is displayed along with the additional image(s) to allow the delivery personnel to efficiently make the delivery.

Abstract: Systems, methods, and computer-readable media are disclosed for automated robotic sortation. In one embodiment, an example system may include a first robotic arm configured to grasp a moving object from a conveyor while the conveyor is in motion, a camera system configured to image objects moving on the conveyor, and a first scanner configured to scan machine-readable codes on objects moving on the conveyor. The system may be configured to sort objects from the conveyor using the first robotic arm based at least in part on an object destination.

Abstract: A connected device at a client network implements a local data classification service for classifying data based on a data classification service of a remote provider network. The local data classification service receives a request to classify data at one or more data sources of the client network. The request is initiated from a client device of the client network according to a management interface for a data classification service of a remote provider network (e.g., using the same API request used by the remote classification service). The local data classification service obtains at least some of the data from the one or more data sources of the client network. The local data classification service classifies the obtained data according to different types of sensitivity using the data classification engine in the execution environment without the data being exposed outside of a data isolation boundary of the client network.

Abstract: A system can be utilized to retrieve media content and rating schemas, to determine maturity ratings for media content. The media content can be utilized to determine segments of data as building blocks associated with mature content. The building blocks can be mapped to content descriptors and rating levels associated with the rating schemas. The building blocks can be compared the media content to identify portions of the media content that have characteristics represented by the building blocks. The building blocks representing the characteristics in the portions of the media content can be utilized to select content descriptors and rating levels associated with the media content. The selected content descriptor and selected rating levels can be utilized to control how, and/or whether, the media content is made available for output to the consumers.

Abstract: System and methods are provided for detecting, tracking, and managing outages of transaction processors. An indication is received indicating a potential outage associated with a transaction processor computer configured to process transactions of an online retail website. The indication can be received from a threshold monitoring service and/or from a machine-learning detection system. A computing service can be initiated to confirm and track the outage over time. An outage may include a number of situations in which the transaction processor fails to process transactions according to a set of predefined processing parameters. If the outage spans a particular time period, the service can perform a number of remedial actions (e.g., notifying an administrator of the outage, etc.).

Abstract: Techniques for using a machine learning model to determine a proper subset of a multimedia file for a viewer based on their interest without the need to actively control a media player timeline are described.

Abstract: A first portion of a video item is transmitted using a first encoding profile. The first encoding profile is a first set of one or more first video representations of the video item having first image quality characteristics. Viewer information including at least one of a viewer quantity for the video item or a viewer playback platform distribution for the video item is receiving during transmitting the video item. A second encoding profile is determined based on the at least one of the viewer quantity or the viewer playback platform distribution. The second encoding profile is a second set of one or more second video representations of the video item having second image quality characteristics. The second image quality characteristics include a selected image quality characteristic that is not included in the first image quality characteristics. A second portion of the video item is transmitted using the second encoding profile.

Abstract: Techniques for performing a cross-platform media content personalization are described.

Abstract: Techniques for implementing a dynamically resizable memory region for alternative use in a memory are described. The techniques may include using two concurrent address maps corresponding to two address ranges for a memory represented as an array of memory blocks. The first address range can be mapped to the memory with starting addresses of the memory blocks incrementing sequentially along each row. The second address range can be mapped to the memory with starting addresses of the memory blocks incrementing sequentially along each column. When an access request is received having a target address belonging to the first address range, the target address is provided as the memory address to access the memory. When an access request having a target address belonging to the second address range, the target address is translated by address translation logic into a memory address to access the memory.

Abstract: A system efficiently selects at least one device from multiple devices based on received audio signals. In some instances, the system receives audio signals from devices that each comprise at least one microphone. A respective audio signal of the audio signals includes a representation of a sound originating from a location. The system then determines a device to be used to respond to the sound. In some instances, the system analyzes times in which the received audio signals that represent the sound are generated and/or volumes of the sound as represented by the received audio signals. The system can then select the device based on the analysis.

Abstract: Devices and techniques are generally described for selection of objects in image data using natural language input. In various examples, first image data representing at least a first object and first natural language data may be received. In some examples, first embedding data representing the first natural language data may be generated. Second embedding data representing the first image data may be generated. Relative location data indicating a location of the first object in the first image data relative to at least one other object may be generated. The first embedding data, the second embedding data, and the relative location data may be input into a multi-modal transformer model. The multi-modal transformer model may determine that the first natural language data relates to the first object.

Abstract: Implementations for selecting an input device based on characteristics of the input signals from those input devices are described. A first input signal is received from a first input device of a participant device participating in a media conference and a second input signal is received from a second input device of the participant device. A first characteristic of the first input signal and a second characteristic of the second input signal are determined. The first characteristic is compared to the second characteristic. It is determined that a quality of the second input signal is greater than a quality of the first input signal based on comparing the first characteristic to the second characteristic. The second input device is selected based on determining that the quality of the second input signal is greater than the quality of the first input signal.

Abstract: Some natural language command processing systems may handle some commands on a user device rather than sending input to another system for processing. Such a system may include an arbitration component for arbitrating between device and/or system processing. The arbitration component may execute in the system and render a device-specific decision as to whether the device will be able to process the input and/or execute the command, based on information known to the system about the device's capabilities. If the arbitration component predicts that the device will not be able to execute the command, the system may execute the command without waiting for a signal from the device. If the arbitration component predicts that the device will be able to execute the command, the system may halt processing to prevent duplicate execution.

Abstract: A network function virtualization service includes an action implementation layer and an action decisions layer. On a flow of network traffic received at the service, the action implementation layer performs a packet processing action determined at the action decisions layer.

Abstract: Implementations for determining content perception by a participant in a media session by analyzing content are described. A content signal, such as an audio signal or a video signal, is received during a media session. A transcript of the content can be determined. Feedback, such as a pre-determined phrase, related to content perception by a participant in the media session is determined using a learning algorithm at the device. Metadata regarding the media session is collected in response to the feedback related to the content perception. The indication of the feedback related to the content perception and the metadata regarding the media session is then sent. In response, one or more adjustments to the media session are received. The one or more adjustments to the media session can be determined based on the indication of the feedback related to the content perception, the metadata regarding the media session, and network performance information.

Abstract: Devices and techniques are generally described for anomalous network activity detection. In various examples, first application log data comprising a plurality of computer log actions may be received. A hidden Markov model associated may generate a first hidden state vector, where a first value of the first hidden state vector is associated with anomalous activity. A first timing vector associated with a first account may be determined, wherein the timing vector indicates first time periods of typical activity and second periods of typical inactivity for the first account. A first number of elements of the first hidden state vector that have the first value and which correspond to the second time periods of the first timing vector may be determined. Network access may be disabled for the first account.

Abstract: A service implemented at a first isolated virtual network of a provider network is added to a database of privately-accessible services. Configuration changes that enable network packets to flow between the first isolated virtual network and a second isolated virtual network without utilizing a network address accessible from the public Internet are implemented. Service requests originating at the second isolated virtual network are transmitted to the first isolated virtual network via private pathways of the provider network. Metrics corresponding to service requests directed from the second isolated network to the service are collected and provided to the respective owners of one or both isolated virtual networks.

Abstract: Systems, methods, and computer-readable media are disclosed for systems and methods for automated generation and presentation of sign language avatars for video content. Example methods may include determining, by one or more computer processors coupled to memory, a first segment of video content, the first segment including a first set of frames, first audio content, and first subtitle data, where the first subtitle data comprises a first word and a second word. Methods may include determining, using a first machine learning model, a first sign gesture associated with the first word, determining first motion data associated with the first sign gesture, and determining first facial expression data. Methods may include generating an avatar configured to perform the first sign gesture using the first motion data, where a facial expression of the avatar while performing the first sign gesture is based on the first facial expression data.

Abstract: Techniques are described for providing logical networking functionality for managed computer networks, such as for virtual computer networks provided on behalf of users or other entities. In some situations, a user may configure or otherwise specify a network topology for a virtual computer network, such as a logical network topology that separates multiple computing nodes of the virtual computer network into multiple logical sub-networks and/or that specifies one or more logical networking devices for the virtual computer network. After a network topology is specified for a virtual computer network, logical networking functionality corresponding to the network topology may be provided in various manners, such as without physically implementing the network topology for the virtual computer network. In some situations, the computing nodes may include virtual machine nodes hosted on one or more physical computing machines or systems, such as by or on behalf of one or more users.

Abstract: The following description is directed to a logic repository service. In one example, a method of a logic repository service can include receiving a first request to generate configuration data for configurable hardware using a specification for application logic of the configurable hardware. The method can include generating the configuration data for the configurable hardware. The configuration data can include data for implementing the application logic. The method can include receiving a second request to download the configuration data to a host server computer comprising the configurable hardware. The method can include transmitting the configuration data to the host server computer in response to the second request so that the configurable hardware is configured with the host logic and the application logic.

Abstract: A distributed database keeps user-defined functions separate from a query engine by using a frontend. The frontend allows a user-defined function to interact with a proxy application processing interface (API) that is based on an API of the query engine. The frontend sends serialized data to the query engine in order to interact with the API of the query engine. The user-defined function is executed in security environments separate from the frontend and the query engine.

Abstract: Connection loss may be minimized for performing database query engine changes. A distributed database system may include different instances of the query engine that provide access to a database. When an event to change the version of the query engine is detected, a copy of the database may be created and a new instance of the query engine created. Read-only access to the database may be maintained using the different instances of the query engine while the new instance may be upgraded to the different version of the query engine. Upon successful installation of the different version of the query engine at the new instance, the new instance may be given read-write access to the database using the copy of the database and other database instances may be upgraded to the different version of the query engine.

Abstract: A privacy protecting transaction engine for a cloud provider network is described. According to some embodiments, a computer-implemented method includes receiving a request from a customer of a cloud provider network to create a customer cloud in the cloud provider network, generating the customer cloud in the cloud provider network, receiving a first request at the cloud provider network for the customer cloud that includes private information of an end customer of the customer of the cloud provider network, removing the private information from the first request by a privacy protecting transaction engine of the cloud provider network to generate a second request, and sending the second request to the customer cloud for servicing.

Abstract: At a data management service, a child template associated with a parent group of one or more cells of a first data sheet is stored. In response to detecting that a parent cell has been added to the parent group, a particular child data sheet is instantiated automatically in accordance with the template. In response to a change to a value in a first cell of the child data sheet, a corresponding value of a cell of the first data sheet is modified.

Abstract: A system for evaluating a biometric authorization system is described. The biometric authorization system is configured to apply a facial recognition model to image data to make an authorization determination based on detection of synthesized image data and based on matching a reference image to the image data. The system is also configured to execute one or more synthetic image data attack protocols to evaluate the biometric authorization system. The system also generates, according to one or more synthetic image data generation techniques, an evaluation set of image data comprising synthesized representations of a target and sends one or more authorization requests using the evaluation set of image data to the biometric authorization system. The system generates an evaluation of the biometric authorization system for synthetic image data attack analysis based on respective responses to the one or more authorization requests received from the biometric authorization system.

Abstract: Techniques for synthetic accuracy measurement of a content recognition system are described. According to some examples, a computer-implemented method includes generating, by a provider network, a reference fingerprint for a secondary content (e.g., advertisement) media file; generating, by the provider network, a synthetic fingerprint for a transformed version of the secondary content media file; inserting, by the provider network, the synthetic fingerprint into a stream of fingerprints of a plurality of media files; comparing, by a comparison service of the provider network, the stream of fingerprints including the synthetic fingerprint to the reference fingerprint to generate an indication of a match between the synthetic fingerprint and the reference fingerprint in the stream; and sending the indication of the match to a storage location.

Abstract: An acoustic event detection system may employ self-supervised federated learning to update encoder and/or classifier machine learning models. In an example operation, an encoder may be pre-trained to extract audio feature data from an audio signal. A decoder may be pre-trained to predict a subsequent portion of audio data (e.g., a subsequent frame of audio data represented by log filterbank energies). The encoder and decoder may be trained using self-supervised learning to improve the decoder's predictions and, by extension, the quality of the audio feature data generated by the encoder. The system may apply federated learning to share encoder updates across user devices. The system may fine-tune the classifier to improve inferences based on the improved audio feature data. The system may distribute classifier updates to the user device(s) to update the on-device classifier.

Abstract: A database system may include a database service and a separate distributed storage service. The database service (or a database engine head node thereof) may be responsible for query parsing, optimization, and execution, transactionality, and consistency, while the storage service may be responsible for generating data pages from redo log records and for durability of those data pages. For example, in response to a write request directed to a particular data page, the database engine head node may generate a redo log record and send it, but not the data page, to a storage service node. The storage service node may store the redo log record and return a write acknowledgement to the database service prior to applying the redo log record. The server node may apply the redo log record and other redo log records to a previously stored version of the data page to create a current version.

Abstract: Techniques are generally described for remote estimation of bandwidth. In various examples, a video stream may be received at a first bit rate over a first communication channel. A first value of a network condition of the video stream may be determined over a first time period. A determination may be made that the first value is less than a threshold value. A first bandwidth estimate of the communication channel may be determined. The first bandwidth estimate may comprise the first bit rate reduced by a first percentage. A second value of the network condition may be determined over a second time period. A determination may be made that the second value is greater than the threshold value. A second bandwidth estimate of the communication channel may be determined. The second bandwidth estimate may be less than the first bandwidth estimate.

Abstract: Technologies directed to energy efficient phase shifting in digital beamforming in phased array antennas in communication systems are described. Digital signal processing (DSP) circuitry includes a first phase shifter that generates second data by phase shifting first data according to a rotation-based operation without multiplication of the second data, a second phase shifter that generates fourth data by phase shifting third data according to the rotation-based operation without multiplication of the fourth data, a combiner that generates fifth data by adding the second data and the fourth data, and a multiplier that generates sixth data by multiplying the fifth data by a constant value.