Abstract: A system and method for synchronizing or moving a personal workspace from a first computing system (e.g., a laptop) to a cloud-based computing system in a software development environment. The personal workspace synchronization service identifies changes made to the source code as a result of activities performed in the personal workspace of the first computing system. The source code changes are identified by comparing a snapshot of a current image of a container including personal workspace executing on the first computing system to a base container image of the personal workspace. The identified source code changes are transferred by the personal workspace synchronization service to the cloud-based computing system to generate an updated personal workspace on the cloud-based computing system that matches the personal workspace of the first computing system.

Abstract: Systems and methods are described to identify and correct inaccurate or non-compliant access policies for an authorization service that uses such policies to control access to instances of one or more network-accessible services. Each service can implement one or more instances on behalf of individual service users, which users can author an access policy to control whether requests to access the instances are allowed or disallowed at the authorization service. The access policies can be authored according to policy guidelines established by the service. If the policy guidelines of a service change (e.g., are updated to a new version), the authorization service can detect policies non-compliant with the changed guidelines, and notify service users of the non-compliant policies. The authorization service may further notify users of modifications or transformations to bring access policies into compliances with changed policy guidelines.

Abstract: A data center infrastructure module enables multiple data center infrastructure systems to be simultaneously installed in a data center (as opposed to sequentially installing the respective data center infrastructure systems). The data center infrastructure module includes a collapsible frame and one or more data center infrastructure system components coupled to the collapsible frame. The data center infrastructure module may be pre-assembled remotely from a data center location and may be transported to the data center location in a collapsed state. At the data center location, the pre-assembled data center infrastructure module may be expanded and installed between self-standing frames.

Abstract: Techniques for processing data according to customer-defined rules are disclosed. In particular, methods and systems for implementing a data alteration service using one or resources of a distributed computing system are described. The data alteration service is flexibly configurable by entities using the distributed computing system, and may be used to augment, compress, filter or otherwise modify data crossing a customer boundary.

Abstract: In implementations described herein, power is supplied to functional components of audio/video (A/V) recording and communication doorbell devices (“A/V doorbells”) during activation of signaling devices that are coupled to the A/V doorbells without the use of a backup power supply. To illustrate, systems described herein may include first parallel circuitry coupled to the signaling device and second parallel circuitry coupled to an A/V doorbell. The first parallel circuitry and the second parallel circuitry are configured to supply sufficient power to the functional components of the A/V doorbell during activation of the signaling device. In particular implementations, the first parallel circuitry and the second parallel circuitry include shunting circuitry to control the flow of current through the first and second parallel circuitry and supply sufficient power to both the signaling device and the A/V doorbell.

Abstract: A system records use of values used in cryptographic algorithms where the values are subject to uniqueness constraints. As new values are received, the system checks whether violations of a unique constraint has occurred. If a violation occurs, the system performs actions to mitigate potential compromise caused by exploitation of a vulnerability caused by violation of the uniqueness constraint.

Abstract: Techniques for controlling the synchronization of data records between servers and client devices include use of configuration data for each client device to control the times at which the current version of server data records is sent to each client device. The configuration data also controls the times at which modified versions of local data records on the client device are sent to the server. The configuration data additionally indicates one or more control actions that are performed if the data record version associated with user input modifying a data record does not match the current version of the server data record. Control actions may include preventing modification of data records, providing notifications to client devices, and providing the current version of server data records to client devices. In some cases, control actions may include permitting certain types of modifications while preventing other types of modifications.

Abstract: Techniques are described for verifying that an audio file corresponds to an instance of media content. An audio file is divided into a plurality of audio segments, and a digital fingerprint is generated for each of the plurality of audio segments. A digital signature is generated for the audio file by aggregating the digital fingerprints. The generated digital signature and at least one other digital signature corresponding to an instance of media content are processed as inputs to a linear regression machine learning model, to determine a measure of similarity between the generated digital signature and the at least one other digital signature. The linear regression machine learning model can be trained using a supervised learning approach and a set of training data. Embodiments determine whether the audio file corresponds to the instance of media content, based on the measure of similarity.

Abstract: In some embodiments, a system includes a proxy and an application server. The proxy is operable to intercept a request to download application content from an application server, insert an address of a navigation service into the request to yield an augmented request, and transmit the augmented request to the application server. The application server is operable to receive the augmented request, generate an application in response to the augmented request, the application comprising the application content, a navigation placeholder, and code to access the navigation service at the address, the navigation placeholder representing a portion of the application where the navigation service may be inserted, and transmit the application for receipt by the client.

Abstract: Techniques for receiving a voice command from a user and, in response, providing audible content to the user via a first device and providing visual content for the user via a second device. In some instances, the first device includes a microphone for generating audio signals that include user speech, as well as a speaker for outputting audible content in response to identified voice commands from the speech. However, the first device might not include a display for displaying graphical content. As such, the first device may be configured to identify devices that include displays and that are proximate to the first device. The first device may then instruct one or more of these other devices to output visual content associated with a user's voice command.

Abstract: Systems and methods are provided for associating colors or color names with a color image based on hue. A set of hue values can be extracted from color data, such as a color palette, corresponding to a color image. A representative hue can be derived from the set of hue values. Colors included in the color data that are attributable to the representative hue can be identified and one or more colors can be derived therefrom as representative of a subject depicted by the color image. Color names matching the representative colors can be identified and associated with the color image. In particular, a common color name can be determined therefrom and associated with the subject of the color image.

Abstract: Systems and methods are described for conducting static analysis of code invoking network-based services to identify, without requiring execution of the code, security issues that may be introduced due to the invocations of the network-based services. A system is provided that may analyze code to detect both direct invocations of services, as well as indirect invocations caused by the direct invocations. The system can compare permissions information for the code to both directly or indirectly invoked services to identify instances in which the code calls services not permitted by the permissions information. In some instances, the system can traverse a “call graph” of all services invoked by code either directly or indirectly to identify permissions errors through multiple levels of indirection.

Abstract: Techniques for dynamically maintaining speech processing data on a local device for frequently input commands are described. One or more devices receive speech processing data specific to one or more commands associated with system input frequencies satisfying an input frequency threshold. The device(s) then receives input audio corresponding to an utterance and generate input audio data corresponding thereto. The device(s) performs speech recognition processing on input audio data to generate input text data using a portion of the received speech processing data. The device(s) determines a probability score associated with the input text data and determines the probability score satisfies a threshold probability score. The device(s) then performs natural language processing on the input text data to determine the command using a portion of the speech processing data. The device(s) then outputs audio data responsive to the command.

Abstract: Techniques are described for encoding information in manifest data in a way that enables identification of a version of media content. Such a capability may be used to identify dynamic content inserted into the media content for the purpose of tracking the effect of the dynamic content on user generated feedback. This capability might also be used to identify a user or device associated with a particular copy of the media content for anti-piracy purposes.

Abstract: A technology for job processing using a public service network. A method may include identifying processing availability at a public service network for processing a job submitted to a private service network. Available network bandwidth may be determined between the private service network and the public service network used to communicate between the private service network and the public service network and to transfer the job to the public service network for processing. Rules for transferring the job to the public service network may be identified. A determination may then be made that the processing availability at the public service network, the available network bandwidth between the private service network and the public service network, and the rules for transferring the job to the public service network allow the job to be transferred to the public service network for processing.

Abstract: Route tables may be associated with ingress traffic for logically isolated networks. A routing device at the edge of a logically isolated network may receive a route to include in a route table that is associated with ingress traffic to the logically isolated network to forward the ingress traffic to a network appliance hosted in the logically isolated network. Network packets received at the edge routing device may have a destination of a computing resource hosted in the logically isolated network. The edge routing device may identify the route in the route table to override the destination in the network packet with the network appliance and forward the network packet to the network appliance according to the route.

Abstract: A video packaging and origination service can include one or more encoder components that receive content for encoding and transmitting to requesting entities. Responsive to a request for content, an encoder can be configured with a set of adjustable parameters that depend on the specific format of encoding. To implement watermarking, the encoder dynamically modifies or biases one or more of the parameter values such that the modified parameter values can represent watermarking data.

Abstract: Connectivity is enabled between a first and second isolated network using a virtual traffic hub that includes a decision master node responsible for determining a routing action for a packet received at the hub. At the hub, a determination is made that a particular domain name system (DNS) message being directed to a first resource in the first isolated network is to include an indication of a second resource in the second isolated network. The second resource is assigned a network address within a private address range of the second isolated network, which overlaps with a private address range being used in the first isolated network. The hub causes a transformed version of the network address to be included in the DNS message delivered to the first resource.

Abstract: Provided are integrated circuit devices and methods for operating integrated circuit devices. In various examples, an integrated circuit device can include a master port operable to send transactions to a target components of the device. The master port can have point-to-point connections with each of the targets. The master port can be configured with a first address range for a first target, a second address range for a second target, and a multicast address range for both the first and second target. When the master port receive a request with an address that is in the multicast address range, the master port can generate, for the one request, a transaction for each of the first and second transactions.

Abstract: A probabilistic counting structure such as a hyperloglog may be formed during a table scan for each of a selected set of columns. The columns may be selected based on an initial estimate of relatedness, which may be based on data types of the respective columns. An estimated cardinality of an intersection or union of columns may be formed based on an intersection of the probabilistic data structures. A join path may be determined based on the estimated cardinality of an intersection or union of the columns.

Abstract: A facility is equipped with floor tiles, each tile having several segments, each segment with an antenna. Each segment on a tile is associated with a particular timeslot. A transmitter at the tile transmits on a specific frequency. During the particular timeslot for that segment, a signal at the specific frequency is transmitted and radiated from the antenna for that segment. A user electromagnetically couples to one or more antennas of the tile, acting as a signal path for the signal. A receiver in a second tile detects the signal, and information about the frequency detected, timeslot for the signal, and relative signal strength is generated. Where the user has stepped from is determined using the information. By concatenating these steps, a path of the user may be determined. Receivers in shelves facilitate disambiguation of one user from another when interacting with items.

Abstract: A server may assign a temporary phone number and an extension number to a shipment. The temporary phone number may be based on a geographic location of where the shipment is to be delivered. The extension number is associated with the shipment. The temporary phone number and extension number may be included on a shipping label rather than the user's phone number. During the delivery of the shipment, a delivery person may encounter a delivery issue, such as needing directions. The delivery person may call the temporary phone number and extension number and be connected to a user device. The delivery person may communicate the delivery issue, such as asking for directions to the user's residence. Upon delivery of the shipment, the server disassociates the temporary phone number and the extension number from the shipment.

Abstract: An on-demand code execution environment present in points of presence (POPs) and in regions serviced by the POPs is provided herein. For example, a POP may receive a request to execute a task associated with user-defined code. If the POP determines that the computing resources necessary to execute a received task are not available or that the POP should not execute the received task for another reason (e.g., the task is not commonly received and the computing resources needed to execute the task are therefore best allocated for other requests), the POP can forward the task to a region that the POP services for execution by an on-demand code execution environment present in the region. The on-demand code execution environment present in the region can execute the task and forward the results of the execution to the POP for distribution back to a user device that requested the task execution.

Abstract: Application source code that includes notation indicating a latency level between methods is evaluated. Based in part on the latency level, scores for method dependencies are calculated. A set of packages are generated for the methods in accordance with a clustering strategy that is based at least in part on the scores. The set of packages are then deployed to at least one host in accordance with an affinity threshold.

Abstract: Methods and apparatus for interfaces to manage direct network peerings. A system may include a data center, endpoint routers and a connectivity coordinator. The coordinator implements a programmatic interface defining connectivity operations. The coordinator receives a request for dedicated connectivity to data center resources, formatted according to the interface. The coordinator selects a target endpoint router at which to establish a physical link to implement the dedicated connectivity, and transmits a response identifying the target endpoint router and including configuration instructions for setting up a physical link for the dedicated connectivity.

Abstract: Systems and methods authenticate storage devices. In one implementation, a computer-implemented method is provided for authenticating a storage device. According to the method, a manifest that identifies a destination is receive. A transfer station reads a digital signature from the storage device. The digital signature is validated and, based on the validation of the digital signature, a transfer of one or more files from the storage device via the transfer station is authorized to the destination identified in the manifest.

Abstract: The following description is directed to a logic repository service. In one example, a method of a logic repository service can include receiving a first request to generate configuration data for configurable hardware using a specification for application logic of the configurable hardware. The method can include generating the configuration data for the configurable hardware. The configuration data can include data for implementing the application logic. The method can include receiving a second request to download the configuration data to a host server computer comprising the configurable hardware. The method can include transmitting the configuration data to the host server computer in response to the second request so that the configurable hardware is configured with the host logic and the application logic.

Abstract: A system configured to generate and present hierarchical notifications is provided. The system may generate a notification structure comprising a plurality of notifications associated with a user, and output a top-level composite notification based on the notification structure. The system may receive a user command in response to the composite notification, and further output a lower-level composite notification based on the user-selected portion of the top-level composite notification identified by the user command. Further, the system may modify the notification structure based on the user command.

Abstract: An aerial vehicle may be equipped with propellers having reconfigurable geometries. Such propellers may have blade tips or other features that may be adjusted or reconfigured while the aerial vehicle is operating, on any basis. Propellers having reconfigurable blade tips joined to blade roots may cause the blade tips to be aligned with the blade roots, or substantially perpendicular to the blade roots, e.g., in order to counter adverse effects of tip vortices, or at any intervening angle. The propellers may be reconfigured at predetermined times during operation of an aerial vehicle, or upon sensing one or more operational characteristics or environmental conditions, as may be desired or required.

Abstract: A method and circuit are disclosed to calculate an error correction code (ECC) and perform a decompression in parallel when reading memory data. There are multiple modes of operation. In a normal parallel mode of operation, the data passes through a decompression engine. Simultaneously, the same data passes through an ECC decode engine. However, if no error is detected, the output of the decode engine is discarded. If there is an ECC error, an error indication is made so that the corresponding data exiting the decompression engine is discarded. The circuit then switches to a serial mode of operation, wherein the ECC decode engine corrects the data and resends the corrected data again through the decompression engine. The circuit is maintained in the serial mode until a decision is made to switch back to the parallel mode, such as when a pipeline of the ECC engine becomes empty.

Abstract: Techniques for naming devices via voice commands are described herein. For instance, a user may issue a voice command to a voice-controlled device stating, “you are the kitchen device”. Thereafter, the device may respond to voice commands directed, by name, to this device. For instance, the user may issue a voice command requesting to “play music on my kitchen device”. Given that the user has configured the device to respond to this name, the device may respond to the command by outputting the requested music.

Abstract: A system capable of identifying and locking resources (e.g., items, tickets, etc.) may map resources to a bit vector and use bit vectors to efficiently identify and lock the resources. For example, tickets to a concert may be mapped to a bit vector and the system may generate an availability bit vector indicating an availability of the seat locations. Using bit vectors, the system may easily identify available seat locations that satisfy a search request and may select from the available seat locations using an optimization technique. For example, the system may select groups of seats that are next to unavailable seat locations or avoid selling groups of seats that would leave only a single seat available. Thus, the system may avoid fragmentation of ticket sales while improving a latency associated with searching for and reserving seat locations.

Abstract: An active patch panel assembly splits an optical signal of a fiber optic cable into two signals: a first signal directed to a patch panel port and a second signal measured by an optical sensor unit. A network management service of a computing services resource provider receives signal information from the optical sensor unit regarding the optical signal. The network management server may compare the signal information with signal information received from another patch panel assembly. Based on a correspondence between the signal information of the different patch panels, the network management service may determine a data path association between the optical signals. The data path association may be recorded in a database that stores data path associations of a service provider.

Abstract: Systems and methods are described to enable the load-balanced use of globalized network addresses, addressable throughout a network to access a network-accessible service. A set of global access points are provided, which advertise availability of the globalized network addresses. On receiving a request to access a network-accessible service, a global access point can select an endpoint for the service from among a number of data centers, based on a desired distribution of traffic among the data centers. The access point is responsive to scaling that might occur at endpoints by periodically retrieving updated configuration information for the endpoints, enabling the access point to nimbly respond to changes in endpoints for the service.

Abstract: Intelligent compression of data storage volumes in a service provider system. For example, in one embodiment of a computer-implemented method, attachment metrics are compiled for block storage volumes coupled to a storage server. The attachment metrics may include temporal data related to block storage volume detachments and attachments in relation to a plurality of compute instances; and prioritizing compression of the block storage volumes based on the attachment metrics; and compressing the block storage volumes in accordance with the prioritization.

Abstract: Techniques for implementing multiple wakeword detectors on a single device are described. A digital signal processor (DSP) of the device may initially include an untrained wakeword detection component. The wakeword detection component of the DSP may be trained by engaging a user to speak particular utterances. Once a companion application is configured to implement a wakeword detection component, the companion application's wakeword detection component may be trained specific to the user of the device. Once the companion application's wakeword detection component is trained, the DSP wakeword detection component may be deactivated or its accuracy adjusted.

Abstract: Techniques for performing image-augmentation based simulations on are described. An exemplary embodiment of such performances includes for each tuple of timestamped image and movement data, generating a next image using an image generation neural network based on the timestamped image and movement data, the image being input into the image generation neural network as a non-rendered image, and generating a reward using a reward generating neural network based on the timestamped image and movement data.

Abstract: Subject matter disclosed herein relates to improving a contact diameter of an adhesive/sealing material on surfaces of substrates by altering rheological properties of the adhesive/sealing material. An electrowetting display device comprises a first substrate and a second substrate, a first fluid and a second fluid disposed between the first substrate and the second substrate, wherein the first fluid is immiscible with the second fluid. An adhesive/sealing material comprising UV curable epoxy glue is in contact with the second fluid and couples the second substrate to the first substrate. The adhesive/sealing material further comprises silica particles in a range of 1-6% mass fraction of silica that alter rheological properties of the UV curable epoxy glue.

Abstract: One or more systems implement a plurality of blockchains to track event data. The plurality of blockchains are arranged in tiered form, and the content and/or integrity of blockchains in higher tiers depends on, or at least derives from, the content and/or integrity of the blockchains in lower tiers. Depending on the specific structure and implementation, assurances, verifications, and the like may be provided for services and other resources using such blockchains in a repeatable manner.

Abstract: A first database may receive a query comprising a first portion associated with a non-deterministic result. The first non-deterministic portion of the query may be mapped to a second deterministic portion. A second, deterministic query may be formed by replacing the first portion with the second portion. The second version of the query may be executed on the first database, causing the first database to transition from a first state to a second state. The second query may be executed on a second database in the first state, causing the second database to transition to a state equivalent to the second state of the first database.

Abstract: Techniques for distributed computing system node management are described herein. In some cases, internal compute nodes (i.e., compute nodes that are allocated to the distributed system) may be mutually trusted such that they may freely establish communications with one another. By contrast, external compute nodes (i.e., compute nodes that aren't allocated to the distributed computing system) may be untrusted such that their access to the distributed system may be regulated. In some cases, one or more of the compute nodes within the distributed computing system may maintain respective collections of system view information. Each respective collection of system view information may include, for example, information associated with the corresponding compute node's view of the distributed computing system based on information that is available to the corresponding compute node.

Abstract: Similarity detection methods and systems are provided that utilize a convolutional neural network model to jointly learn string matching and semantic textual similarity as an image recognition solution. For example, in some embodiments described herein, the similarity detection system may receive two strings as input, transform the two strings into two separate vectors, generate a high-resolution image and a low-resolution image, apply one or more convolutional operations to each image, and determine string matching and semantic textual similarity based at least partly on the high-resolution image and the low-resolution image.

Abstract: The incorporation of digitally-printed assembly instructions and notations into textile product assembly processes is described. In one embodiment, an order to purchase a textile product having a number of panels is received. The panels are arranged and placed into a template for printing on a textile printer. Seams among the panels are identified and, with reference to the seams, assembly tasks are compiled to assemble the textile product. The assembly tasks are ordered according to at least one assembly factor directed to efficiency, quality, or other factors. The assembly tasks are associated with a set of assembly notations according to an assembly notation syntax. The assembly notations are incorporated into the template for printing, and the textile printer is instructed to print the panels along with the assembly notations. Sewing workers can refer to the assembly notations to determine how the textile product should be assembled using the panels.

Abstract: Unmanned aerial vehicles (“UAVs”) which fly to destinations (e.g., for delivering items) may land on transportation vehicles (e.g., delivery trucks, etc.) for temporary transport. An agreement with the owner of the transportation vehicles (e.g., a shipping carrier) may be made, and the associated transportation vehicles that are available for landings may be identified by markers on the roof or other identification techniques. Different types of communications may be provided as part of a landing process (e.g., a notification regarding a proposed landing may be sent including a request for a confirmation that the proposed landing is acceptable, etc.). The routes of the transportation vehicles may be known and utilized to determine locations where UAVs will land on and take off from the transportation vehicles.

Abstract: Systems, methods, and computer-readable media are disclosed for preventing duplicate content selection for digital presentation. In one embodiment, an example method may include determining a first bid request for a first content delivery slot at a first time, the first bid request having a first user identifier, determining a ranking of candidate product identifiers for which the first user identifier is eligible at the first time, and determining a second bid request for a second content delivery slot at a second time, the second bid request having the first user identifier, where the second time is within a predetermined time interval of the first time. Example methods may include determining an impression counter value for the first user identifier at the second time, selecting a product identifier from the candidate product identifiers using the impression counter value, and determining a first bid amount using the product identifier.

Abstract: Techniques for operating a multi-homed computing instance process are described herein. First credentials associated with a first attribute of a first account may be obtained. A process executing on a computing instance may communicate with the first account over a first communication channel based at least in part on the first credentials. Instructions may be received for the process to communicate with both the first account and a second account. Second credentials associated with a second attribute of the second account may be obtained. The second credentials may be obtained based, at least in part, on the first attribute acquiring the second attribute. The process may communicate with the second account over a second communication channel based at least in part on the second credentials. Additionally, the process may communicate with multiple different representations of a particular account, such as different representations that are hosted in different respective regions.