Abstract: A subscription storage service of a provider network may be used to select a particular datastore to store a topic subscription record for an IoT device (e.g., after the IoT device subscribes to an MQTT topic). The service may select the particular datastore based on the type of the subscription (e.g., non-wildcard vs. wildcard subscription) and one or more criteria associated with the topic (e.g., subscribe operation TPS for the topic). This may allow the service to store wildcard subscriptions to a different structure and/or datastore (e.g., a “trie” structure of an in-memory data store), while offloading the storage of non-wildcard subscriptions to another type of datastore (e.g., a key-value store) that has lower performance and/or operational cost to store data.

Abstract: A file system manager implemented at a provider network identifies a storage device of a first group of storage devices of a provider network as an initial location of a file system object. Based on an access metric associated with the object, the file system manager initiates a transfer of contents of the object to a second storage device of a different storage device group, without receiving a client request specifying the transfer. In response to an access request received via a file system programmatic interface, contents of the object are provided from the second storage device. Based on a second access metric, the object is transferred back to the first group of storage devices.

Abstract: Described are systems and methods directed to determining a topology for the efficient allocation and distribution of a service to customers that are distributed over a geographic area. For example, the topology can facilitate the planning, scheduling, and allocation of resources for the efficient provisioning of services to customers at locations distributed over the geographic area. Certain input parameters and/or constraints associated with the provisioning of the service may be processed to define a cost function that may represent a total cost of providing the service while ensuring that none of the constraints are exceeded. The cost function may be optimized to determine a lowest relative cost for providing the services to the customers using the various mechanisms and/or types of resources, and a topology associated with the optimized cost function can be generated to specify how the service should be provided to satisfy the demand.

Abstract: A boot process for a computing device, such as integrated circuit, includes security features that are inaccessible during certain operation modes. An image including permission to access those security features is received during the boot process and may be verified using one or more keys. In operation, access to the security features is permitted during the operation modes after the image is verified. Such an approach enables a boot process to permit access to certain features after receipt and verification of different images.

Abstract: A computing system includes a rack having standard slots for computing devices and computing devices coupled to the rack. One or more of the computing devices includes a chassis, a circuit board assembly in a primarily horizontal orientation, and one or more processors coupled to the circuit board assembly. One or more stacks of hard disk drives are coupled to the chassis. The chassis has a width that is equal to or less than half of the width of one of the standard slots of the rack.

Abstract: Devices and techniques are generally described for detection of abusive computational nodes. In various examples, first input data describing a first plurality of computational nodes and first data identifying a dimension along which to parse the first plurality of computational nodes may be received. A first computing device may generate input graph data representing the first plurality of computational nodes. The computational nodes of the first plurality of computational nodes may share a same value for the dimension are connected to one another in the input graph data. In various examples, a first graph machine learning model and at least one known abusive computational node may be used to determine a first set of candidate computational nodes for further evaluation. In some cases, network access of a first computational node of the first set of candidate computational nodes may be terminated.

Abstract: Systems and methods are disclosed for securing fabric to speaker-based devices. An example device may include a housing having a first portion devoid of apertures, and a second portion having a first number of apertures. The device may include a fabric disposed about the housing, and an adhesive disposed between the fabric and the housing. The adhesive may include a first portion disposed between a first portion of the fabric and the first portion of the housing, and a second portion disposed between a second portion of the fabric and the second portion of the housing. The first portion of the adhesive may have a patterned non-liquid material that is bonded, and the second portion of the adhesive may have the patterned non-liquid material that is unbonded.

Abstract: Techniques for managing access to sensitive data in transcriptions are described. A method for managing access to sensitive data in transcriptions may include receiving a request to generate a redacted transcript of content, obtaining a transcript of the content, sending at least a portion of the transcript to a model endpoint to identify sensitive entities in the transcript, receiving an inference response identifying one or more sensitive entities in the transcript, and generating the redacted transcript based at least one the transcript and the inference response.

Abstract: Techniques are described for providing customizable sign-on functionality, such as via an access manager system that provides single sign-on functionality and other functionality to other services for use with those services' users. The access manager system may maintain various sign-on and other account information for various users, and provide single sign-on functionality for those users using that maintained information on behalf of multiple unrelated services with which those users interact. The access manager may allow a variety of types of customizations to single sign-on functionality and/or other functionality available from the access manager, such as on a per-service basis via configuration by an operator of the service, such as co-branding customizations, customizations of information to be gathered from users, customizations of authority that may be delegated to other services to act on behalf of users, etc.

Abstract: A unique identifier of an expression which refers to a cell of a data sheet is stored in a repository. In an application comprising an operation based on evaluating the expression, the expression is indicated by the unique identifier. In response to detecting a write directed to the cell, a modified version of contents of the cell is stored without re-evaluating the expression. The expression is re-evaluated in response to determining that the operation of the application is to be implemented.

Abstract: Techniques are described for managing communications between multiple computing nodes, such as computing nodes that are separated by one or more physical networks. In some situations, the techniques may be used to provide a virtual network between multiple computing nodes that are separated by one or more intermediate physical networks, such as from the edge of the one or more intermediate physical networks by modifying communications that enter and/or leave the intermediate physical networks. In some situations, the computing nodes may include virtual machine nodes hosted on one or more physical computing machines or systems, such as by or on behalf of one or more users (e.g., users of a program execution service). The managing of the communications may include determining whether communications sent to managed computing nodes are authorized, and providing the communications to the computing nodes only if they are determined to be authorized.

Abstract: Various mounting systems for mounting heat sink apparatus to bare die processors are disclosed. The mounting systems include an upper plate, which may include a heat transfer portion, positioned in proximity to the upper surface of bare die processors to provide heat conduction away from the processors. The disclosed mounting systems secure the upper plate to the processors with balanced and centralized forces to inhibit tilting of the upper plate and reduce the risk of damaging the processors.

Abstract: Idle periods may be for management actions at processing clusters for managed databases. A leader node of a processing cluster for a managed database may monitor a network endpoint at a proxy service associated with a database managed by the database service. An idle period for the database may be detected. A management action for the processing cluster may be determined to be performed during the detected idle period. The leader node may cause the determined management action to be performed.

Abstract: Techniques are described for managing access of executing programs to non-local block data storage. In some situations, a block data storage service uses multiple server storage systems to reliably store network-accessible block data storage volumes that may be used by programs executing on other physical computing systems. A group of multiple server block data storage systems that store block data volumes may in some situations be co-located at a data center, and programs that use volumes stored there may execute on other physical computing systems at that data center. If a program using a volume becomes unavailable, another program (e.g., another copy of the same program) may in some situations obtain access to and continue to use the same volume, such as in an automatic manner in some such situations.

Abstract: A materialized view management service (MVMS) is capable of monitoring resource allocation changes of a source data object at a source data store and responsively generating resource change alerts to the owner of a target data object (the materialized view) in the target data store. Resource allocation changes may include autoscaling changes to the source data object's partition scheme, throughput limit, storage limit, and the like. The MVMS generates resource change alerts in response to these detected events and pushes the alerts to interested subscribers. Depending on the embodiment, the alerts may be pushed to human administrators, or the target data store itself, which may be configured to automatically adjust the resource allocation of the target data object to match the source data object. Advantageously, the disclosed alerts allow view owners to gain real time visibility of resource auto-scaling at the data source and appropriately react to such changes.

Abstract: In one example, a pallet jack cap system includes a stabilization outrigger secured around steer wheels of a pallet jack, a bonnet in an elevated position over forks of the pallet jack, an anchor base for attachment to the pallet jack, and a vertical extension system between the anchor base and the bonnet. The vertical extension system supports the bonnet in the elevated position over the forks of the pallet jack. The vertical extension system can include an elevating vertical support assembly, an elastic counterpoise to assist with positioning the bonnet at a particular elevation based on an extension of the vertical support assembly, and an extension lock to secure the vertical support assembly at the particular elevation. The bonnet can be lowered down over a unit load on a pallet transported by the pallet jack, to secure the unit load and items in transport by the pallet jack.

Abstract: A resource-based authorization control may be added to a data processing service. A control-plane action requested by an account or entity creates a resource-based authorization policy. The resource-based authorization policy pertaining to respective resources allows recurrent data-plane actions to maintain a data flow in a data pipeline to be authorized independent of a separate authorization service.

Abstract: Systems, methods, and computer-readable media are disclosed for determining virtual product placement opportunities in a media content and determining product candidates for virtual insertion into the media content. The product placement system may determine shot segments from the media content and for each shot segment may determine candidate product placement locations. The product placement system may determine contextual information from the shot segments and from the contextual information determine candidate products suitable for the product placement locations. The product placement system may determine total screen time for each product placement opportunity as well as quality of each opportunity. For each product and product placement opportunity, the product placement system may determine an expected revenue and a projected insertion cost.

Abstract: An operating system, or operating system update, management service uses a shared read-only multi-attach volume of a block-based storage service to distribute operating systems or operating system updates to a set of virtualized computing instances. Also, to store launch specific information, that is specific to a given virtualized computing instance, additional writable volumes are used, wherein a write volume is attached to each of the computing instances of the set. This eliminates the need to provide a full copy of an OS volume to each of the computing instances.

Abstract: Methods for improving performance of tiered storage of a data processing service by detecting and reducing thrashing of data blocks between warm and cold storage tiers are disclosed. In order to understand the frequency of hits by incoming queries to data blocks that are not currently stored in the warm storage tier, the elapsed time between query hits to the respective data blocks may be tracked using timers. Times below a given amount of time may be used to indicate thrashing. For example, recently evicted data blocks that are subsequently hit by a query within a short amount of time since eviction may indicate thrashing. In scenarios in which thrashing may be occurring, a threshold corresponding to the number of times a given data block in the cold storage tier receives a query hit before being added to the warm storage tier may be turned on.

Abstract: A hardware card that can be implemented in a server system is disclosed. The hardware card may be, for instance, a network interface card coupled to a board such as a motherboard or backplane in a computing system. In various instances, the hardware card reports a temperature to a management controller on the board (e.g., a baseboard management controller) that is adjusted due to thermal degradation of the hardware card. For example, the temperature output by the hardware card may be adjusted based on a comparison of a current temperature profile (including transient temperature of the hardware card) to a predetermined temperature profile stored on the hardware card.

Abstract: Techniques for graduated navigation displayed on an electronic device used in servicing items for users are described herein. For example, the electronic device can receive a first set of directions for moving towards a first geolocation associated with a service address using a first navigation method for presentation. The electronic device can transition from the first set of directions to a second set of directions in response to detecting a transition trigger associated with a second geolocation. The transition can involve ceasing providing the first set of directions for presentation. The transition can also involve providing the second set of directions for moving from the second geolocation towards the service address using a second navigation for presentation.

Abstract: Technologies are disclosed for using hardware-embedded monitors to monitor pages of local memory and detect attribute violations or other unauthorized operations relating to the memory. The attribute violations may include mismatches of attributes (e.g., designating a page as writeable versus executable or vice versa) in entries in a translation buffer that point to a same physical address or other mismatches between designations of attributes for a page in physical and virtual space. Responsive to detecting a violation, an alert or other mitigation protocol, which may include an audit of activities surrounding the violation, may be performed.

Abstract: A container may include a cargo bay for holding items; a lid able to slide between a closed position to an open position relative to the cargo bay; a check strap operatively connected to the lid and able to move vertically in a first direction toward the lid as the lid slides from the closed position to the open position, and to move vertically in a second direction opposite the first direction as the lid slides from the open position to the closed position; and arms operatively attached to rollers and to one or more tension devices, wherein when the check strap moves vertically in the first direction, the check strap separates the rollers and causes the arms to pull the one or more tension devices, and wherein when the check strap moves vertically in the second direction, the one or more tension devices cause second rotation of the arms.

Abstract: Contents of client-initiated handshake messages of a security protocol are obtained at a handshake processing offloader configured for an application. The offloader uses a first security artifact (which is inaccessible from a front-end request processor of the application) and the contents of the handshake messages to generate a second security artifact. The second security artifact is transmitted to the front-end request processor, which uses it to perform cryptographic operations for client-server interactions of the application.

Abstract: Methods and apparatuses for improving network packet transmission performance in terms of latency with reduced packet retransmission times and fewer packet drops in congested networks are provided. Packet-switched networks can experience long delays while waiting for out-of-order packets or re-transmissions of lost packets. In addition, network faults such as transmission path failures can result in excessive delay while attempting to find a new route over which to transmit packets. To improve packet transmission performance, application data may be encapsulated into first network packets by a first transport protocol having an interface exposed to the application, in the first network packets may be encapsulated into second network packets according to a second transport protocol. The second transport protocol can enable the second network packets of a same packet flow to be transmitted across multiple paths over the network.

Abstract: Some implementations include methods generating visualization emphasis object for players and may include receiving a video clip associated with a sporting event participated by a plurality of players using a playing field with a play object. The players in a frame of the video clip may be detected. Players who are on the playing field may be identified from the detected players. Each of the players identified to be on the playing field may be associated with a rectangular bounding box that provides an outline of each of the players. A player who has possession of the play object may be identified. A visualization emphasis object may be generated and placed on the player who has possession of the play object. The visual emphasis object may have a size proportional to height of a bounding box associated with the player having the possession of the play object.

Abstract: Approaches are described for image signal processor day-night detection. An exemplary approach for a camera with an infrared light source involves determining a brightness value for image data based on an average luma value for the image data, determining white balance data for the first image data, and determining, based on the white balance data for the image data and white balance data for the infrared light source, a deviation value for the image data. A transition from night mode to day mode can be effected based on comparing the brightness value for the image data to a first threshold, and comparing the deviation value for the image data to a second threshold.

Abstract: Techniques for computer system-based conversations are described. In an example, a system receives, from a first device, first data corresponding to a first interaction in a conversation that requests a function. The system causes the first device to output a first response to the first interaction. Prior to an execution of the function, the system determines that the conversation is to be paused and causes the first device to output a first indication that the conversation is paused. Upon determining that the conversation is to be resumed, the system causes a second device to output a second indication that the conversation is resumed. The second device can be the same or different from the first device. The system receives, from the second device, second data corresponding to a second interaction in the conversation and causes the execution of the function based at least in part on the second data.

Abstract: Some embodiments provide a method that receives a specification of a neural network for execution by an integrated circuit. The integrated circuit includes a neural network inference circuit for executing the neural network to generate an output based on an input, an input processing circuit for providing the input to the neural network inference circuit, a microprocessor circuit for controlling the neural network inference circuit and the input processing circuit, and a unified memory accessible by the microprocessor circuit, the neural network inference circuit, and the input processing circuit. The method determines usage of the unified memory by the neural network inference circuit while executing the neural network. Based on the determined usage by the neural network inference circuit, the method allocates portions of the unified memory to the microprocessor circuit and input processing circuit.

Abstract: A content consumption system or device may implement device-enabled identification for automated user detection. An identifying device may be detected at a content consumption device as within proximity of the content consumption device. An identifying device may be a mobile or wearable computing device, in various embodiments. A user account associated with the identification device may be selected for accessing content at the content consumption device. Access to content may be provided according to the selected user account. In some embodiments, content recommendations or content filtering may be performed based on the automatically determined user account.

Abstract: Technologies for mesh path selection are described. One method of operating a first wireless mesh device includes determining, using first client information about a first link, the first link using a first frequency range, a first metric representing airtime usage on the link, and a second metric representing a first amount of data on a second link, the second link using the first frequency range. The method determines a third metric on a third link, the third link using a second frequency range. The method determines, using the metrics, a first throughput associated with a first path with the second link and a second throughput associated with a second path. The method determines that the third link results in better throughput and sends or receives first data on the third link.

Abstract: Systems and methods are provided for automated modification of delivery parameters. Particularly, computing model that is trained to determine a probability that a delivery defect is likely to occur for a given delivery or set of deliveries. Based on the probability, various limitations associated with the deliveries may be activated or deactivated on a mobile device application used by a delivery driver to perform the deliveries. The systems and methods reduce the number of delivery defects that occur while simultaneously reducing the use of unnecessary guardrails for low-risk deliveries. The model may be queried in real-time such that guardrails for a delivery itinerary may be optimized prior to the delivery driver beginning the delivery route.

Abstract: Techniques for Meta-Q-Learning (MQL) are described. A method of MQL may include receiving a request from an agent to perform adaptation based at least on task data associated with a new task collected by the agent, identifying a subset of meta-training data corresponding to the task data in a replay buffer, and adapting a policy using the subset of meta-training data and the task data to generate an adapted policy, wherein the adapted policy is used identify a next action for the agent to perform.

Abstract: Techniques for performing a machine learning model based spatial-temporal adaptive shift for end-to-end text-video retrieval are described.

Abstract: A vehicle data management system and data jurisdiction system manage vehicle data between multiple jurisdictions and enables a set of jurisdiction rules involving rules of various jurisdictions to be applied consistently. The vehicle data jurisdiction system can detect changes in jurisdiction of a vehicle based on various pieces of received vehicle information and applies appropriate jurisdiction rules from a set of jurisdiction rules. Various jurisdictions may have conflicting jurisdiction rules and, in such circumstances, the data jurisdiction system resolves potential conflicts between the rules using a jurisdiction rules resolution workflow. Based on the resolution of the conflict, the data jurisdiction system can migrate data of the vehicle to one or more other jurisdictions, or otherwise implement the correct rules determined by resolving the conflict.

Abstract: Autonomous mobile robots having vertical height extension systems for augmented visibility may include a drive mechanism, a lift mechanism, and a vertical height extension including an extension mechanism and a vertical indicator. The vertical height extension may be actively or passively actuated between lowered and raised positions. In addition, the vertical height extension may include a breakaway feature to prevent raising or cause lowering of the vertical indicator in the presence of a payload above the robot. Further, the vertical height extension may include various actuators, emitters, or elements to communicate various attributes of the robot to human associates in proximity, thereby promoting safe, collaborative operations.

Abstract: Systems and methods for testing a biological sample for each of two or more target pathogens employ fluorescence detection from a single fluorescence reading chamber. A method of testing a biological sample for each of two or more target pathogens includes forming a detection cycle liquid by combining detection cycle compounds with a biological sample liquid formed from a biological sample. The detection cycle compounds include respective CRISPR enzymes for each of the two or more target pathogens. The respective CRISPR enzymes are tagged with respective spectrally unique fluorescent probes. The detection cycle liquid is exposed to a multi-wavelength fluorescence excitation light. A multi-wavelength fluorescence light emission detection signal indicative of intensity of fluorescence light emitted by the detection cycle liquid over multiple wavelengths is processed to generate detection data indicative of presence or absence of each of the two or more target pathogens in the biological sample.

Abstract: A thread of a storage server determines that a command to modify a reservation record which comprises access permissions of an object stored at the server has been received. A version of the record is stored in an in-memory cache. The thread acquires a first lock associated with the record in exclusive mode, and a second lock in shared mode. The thread reads the cached version, constructs a modified version indicated in the command, and releases the second lock without updating the cache. After entries representing the modified version are stored in an operations journal, the thread acquires the second lock in exclusive mode and updates the cache. The thread then releases both locks. An indication that the command has succeeded is provided without verifying that the second version is stored at a metadata store.

Abstract: Methods, systems, and computer-readable media for distributed transactions across multiple consensus groups are disclosed. A distributed transaction system comprises a proposer and a plurality of consensus groups, including a first consensus group comprising a first plurality of members and a second consensus group comprising a second plurality of members. The proposer proposes a transaction to at least a portion of the first consensus group and at least a portion of the second consensus group. A majority of the members in the first consensus group agree to perform the transaction, where the transaction is selected from a plurality of proposed transactions involving the first consensus group. A majority of the members in the second consensus group also agree to perform the transaction. The members of the first and second consensus groups perform the transaction to update a plurality of stored replicas.

Abstract: An algorithm execution management system of a provider network may receive a request from a user for executing an algorithm using different types of computing resources, including classical computing resources and quantum computing resources. The request may indicate a container that includes the algorithm code and dependencies such as libraries for executing the algorithm. The algorithm execution management system may first determine that the quantum computing resources are available to execute the algorithm, and then cause the classical computing resources to be provisioned. The algorithm execution management system may cause at least one portion of the algorithm to be executed at the classical computing resources using the container indicated by the user, and at least another portion of the algorithm to be executed at the quantum computing resources. The quantum task of the algorithm may be provided a priority during execution of the algorithm for using the quantum computing resources.

Abstract: A high precision optical tag includes gradient features at the corners. The gradient features transition from a darker pattern proximal to the corner of the tag to a lighter pattern distal to the corner. The gradient facilitates rapid and computationally efficient determination of the corners of the optical tag at high resolution, such as to a pixel-level within an image. Once the corners of the optical tag are precisely identified, a boundary of the tag may be determined. In one implementation, with the precise information about the corners and boundary of the optical tag in the image, a pose of the camera relative to the optical tag may be determined.

Abstract: Techniques are disclosed for correcting noisy clamped image sources while preserving original luma, chroma, or other channel value. A computing device can receive an image that has a plurality of pixels associated with respective channel values. The computing device can then determine a region of the image for correction and generate a histogram of the respective channel values in the region. Based on the histogram, the computing device can generate a corrected histogram of corrected channel values. The computing device can then denoise the corrected channel values.

Abstract: Systems and methods for security-based device control are disclosed. For example, a presence-based trigger event is detected and one or more suggestion models are utilized to determine whether a security-based device control suggestion should be sent. Multiple suggestions are arbitrated, and a user device is selected for receiving the suggestion based on multiple inputs. The format of the suggestion is also determined and the suggestion is either automatically output on the selected device or a notification of the suggestion is provided.