Question: Failed to verify the reachability of the instance - Urgent Help

"Hi, i get this error under status check on my instance i-0cd0c5c5a86947078. What i can do in order to checkl what happen ?if i reboot the instance i lose my ip address ( not elastic ip were assigned ) and all docker instances that now running ?FollowComment"

Answer: "0Hi,Amazon EC2 monitors the health of each EC2 instance with two status checks:System status checkThe system status check detects issues with the underlying host that your instance runs on. If the underlying host is unresponsive or unreachable due to network, hardware or software issues, then this status check fails.Instance status checkThe instance status check failure indicates an issue with the reachability of the instance. This issue occurs due to operating system-level errors such as the following:Failure to boot the operating systemFailure to mount the volumes correctlyExhausted CPU and memoryKernel panicTo answer your question,Unless you're using Route 53, you don't need to worry about it. but if you're using route53 then you might be required to update the Route 53 DNS records when the public IP changes.Before you reboot an EC2 instance, Make sure you stop all your docker containers.Or If you rebooted your EC2 instance (without stopping docker containers), your docker containers wont get deleted, instead they get stopped (existed) status.You can verify using ***docker ps -a *** that will show you all the docker container running/stopped stage.Please also check the AWS knowledge Center Article that shares what to check when you get such status check error:https://aws.amazon.com/premiumsupport/knowledge-center/ec2-linux-status-check-failure/AWS documentation on Troubleshoot instances with failed status checks:https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/TroubleshootingInstances.htmlhope this helps.CommentShareSwwapnilanswered a year ago0I strongly recommend you not to provide any resource details like EC2 instance id in "re:Post" since it is completely a community driven discussions and not a support center. If the issue is critical then reach out to AWS support via AWS support console.Now coming back to your issue, I understand that the issue is intermittent. The best place to start investigating with is the OS logs, if this instance is Ubuntu, then check the log file /var/log/syslog for example,$ sudo grep -i oom /var/log/syslogIf you find any error like below,Out of memory: Killed process xxx(mongod) total-vm:xxx, anon-rss:xx, file-rss:0kB, shmem-rss:0kB, UID:xxpgtables:xx oom_score_adj:0 then this means that, you EC2 instance suffered with memory. There are 2 ways to resolve the issue;Identify the application and fine tune the application not to use memory more than the EC2 instance memory. You might still have performance issues with this options.Upgrade the EC2 instance to next higher instance type with more memory and monitor the OS logs for memory usage.CommentShareSijoJose-AWSanswered a year ago"


Question: Get current instance features from within said instance

"I've been working on some code that would benefit from some level of awareness about the platform on which its running. When it runs on bare metal, several options are available (lshw, hwloc and so on). In EC2 instances, this task is not so straight forward, as they run on virtualization (excluding bare metal instances, evidently). Running 'lshw' for instance, lists the hardware, that not necessarily corresponds with available resources. As an example, running lshw on a t2.micro instance, which has 1 default core available, gives the actual model of the CPU on which it is running, a Intel Xeon with 12 cores. I understand that I am able to fetch instance metadata, find which instance type the code is running on and use AWS CLI and/or EC2 API to get the description of the instance. The issue with that workaround is that it presupposes that the current instance has either the AWS CLI configured with proper credentials or that the user credentials are available as environment variables to the system, which may or may not be true. I've been looking for a more general solution, that could work, at least, on the most popular Linux distros, such as querying the system about actually available resources (cpus cores, threads, memory, cache and accelerators) but have so far failed to find a suitable solution. Is this possible? Or in this circumstances such query is not a possibility?FollowComment"

Answer: "1I think your concern about credential availability is easily solved by assigning an Instance Profile (IAM Role) to the instance.CommentShareEXPERTkentradanswered a year agoBrettski-AWS EXPERTa year agoFor reference: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.htmlSharepedrosfa a year agoI see, but I believe that is not the optimal solution. Something that I failed to make clear on my original post is that the code on which I'm currently working on is intended to, eventually, become part of an open source project. This implies that third parties, unaware of  the code inner workings, should be able to get it running out of the box with little to no setup required. I understand that are several ways to assure that credentials are available, but, I was hopping on finding a way to get such information, without relying on the user to correctly follow such instructions.Share"


Question: Full text search on encrypted data

Suppose I store encrypted text on database and want to be able to perform a full text search on encrypted data to find one or multiple keywords in a query. Is there any way or tool to perform such operations?FollowComment

Answer: "0Amazon OpenSearch is our flagship full text search service. Like anything its applicability depends on the details of the use case. How is the data encrypted, where it’s it today, etc.Firstly, you can send the data on the Amazon Simple Storage Service(S3) and then perform the encryption using Amazon Athena on top of that.Amazon Athena is a server-less interactive query service that enables users to easily analyze data in Amazon S3 using standard SQL. Additionally, Amazon Athena offers assistance for querying encrypted data on Amazon S3.Athena works with popular data formats like CSV, JSON, ORC, Avro, and ParquetCustomers can benefit from the serverless dynamic queries Athena offers with their encrypted data if they have requirements to encrypt sensitive data stored in Amazon S3.Currently, S3 supports encrypting data with AWS Key Management Service (KMS) (https://aws.amazon.com/kms/). AWS KMS is a managed service for the creation and management of encryption keys used to encrypt data.Additionally, S3 allows users to encrypt data with their own encryption keys. Since it is crucial to comprehend the encrypted alternatives that Athena provides for datasets kept on S3, we also have the encryption choices supported by S3 and Athena below:Server-side encryption with Amazon S3- Managed Encryption Keys (SSE-S3)- YesServer-Side Encryption with AWS KMS Managed Keys (SSE-KMS)- YesClient-Side Encryption with AWS KMS Managed keys (CSC-KMS)- YesClient-Side Encryption with Client-Side Master key (CSC-C)- NoServer-Side Encryption with Customer provided Encryption keys (CSC-C)- NoApart from that, if the files are in the form of PDF, Doc, etc. then you can also explore Amazon KendraCommentSharePriyanka_Sanghvianswered 6 months ago"


Question: API to retrieve tag name of Cloud formation stack

"Here is an example of creating a tag for a stack.const tags = [{ Key: 'Environment', Value: 'Development' },];// Create the stack with tagstry {const response = await cloudFormation.createStack({StackName: stackName,TemplateURL: templateUrl,Tags: tags,}).promise();When you create a tag for stack level, how do you retrieve the tag from the stack, What is the API? I did not find anything here https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-cloudformation/classes/cloudformation.htmlFollowComment"

Answer: "4Hi,You could use describeStacks api: https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_DescribeStacks.html.Its Stack response object (https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_Stack.html) contains a list of tags.Hope it is an acceptable answer ;)CommentShareEXPERTalatechanswered 2 months ago4in addition to @alatechyes ou can use the describeStacks API to retrieve information about your CloudFormation stack, including the tags associated with itand as an example codeconst { CloudFormationClient, DescribeStacksCommand } = require('@aws-sdk/client-cloudformation');(async () => {  const stackName = 'your-stack-name';  // Create a CloudFormation client  const cloudFormation = new CloudFormationClient({ region: 'us-west-2' });  try {    // Call describeStacks to get stack information    const response = await cloudFormation.send(      new DescribeStacksCommand({        StackName: stackName,      })    );    // Extract stack information    const stack = response.Stacks[0];    const tags = stack.Tags;    console.log(`Tags for stack ${stackName}:`, tags);  } catch (error) {    console.error('Error retrieving stack tags:', error);  }})();https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-cloudformation/classes/describestackscommand.htmlhttps://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-cloudformation/index.htmlCommentShareEXPERTsdtslmnanswered 2 months ago0Thanks for your response !!I assume Tags can be extracted the same way for stacks obtained from ListStacksOutput as well.CommentSharerePost-User-7525048answered 2 months agoalatech EXPERT2 months agoI think so. That api returns a stack summary, which will return stack name among other info. You can then call describeStacks using the name as parameter, same as described aboveShare"


Question: Using CloudWatch for traffic monitoring on EBS

"Hello all -First post here and fairly new to AWS (been a developer for 20+ yrs).I recently deployed a simple .NET app in EBS. I even managed to use CodePipeline for CICD deployments.  Works nice.My "next step" which is mostly experimental for learning, is to enable some basic traffic monitoring.  200x, 400x, 500x requests and so on.  I went into CloudWatch and experimented with some dashboards but despite my best tinkering, I'm not getting any metrics.FWIW - I have in fact enabled Advanced Health Reporting on the EBS Environment for the app.Thanks in advance!FollowComment"

Answer: "0You have 2 options:If you have ALB in front of the application, you can get the HTTP error count from CloudWatch metrics https://docs.aws.amazon.com/elasticloadbalancing/latest/application/load-balancer-cloudwatch-metrics.html#load-balancer-metrics-albIf you don't have ALB, you can first stream the application log to CloudWatch https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/AWSHowTo.cloudwatchlogs.htmlThen, create a metric filter from the CloudWatch log https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/MonitoringPolicyExamples.html. Then you can get the metric of the HTTP response code count from the logs.CommentShareRichardFananswered a year ago"


Question: The GameLift Fleet instance does not have permissions on logs

"I want to view the logs for my GameLift fleet in the CloudWatch LogGroup.But the GameLift Instance does not have permissions to upload logs on CloudWatch LogGroup.I set the Instance role of GameLift Fleet like this.This role has a AWS manged policy named CloudWatchAgentServerPolicy and the policy and trust relationship is written like this.{"Version": "2012-10-17","Statement": [{"Effect": "Allow","Principal": {"Service": ["ec2.amazonaws.com","gamelift.amazonaws.com"]},"Action": "sts:AssumeRole"}]}When I tried to create a CloudWatch LogGroup on my GameLift Fleet instance, I got the following permission error.It seems like GameLift Fleet instance does not have permission to create CloudWatch LogGroup.I don't know how to give that permission.FollowComment"

Answer: "0Looking at the error it looks like you are using a different IAM role with AssumeRole.It is said that there is no CreateLogGroup in the IAM role "User: arn:aws:sts::783~~~", so please try adding permissions to this IAM role.CommentShareEXPERTRiku_Kobayashianswered 2 days ago"


Question: How do I get a Redshift Auqa cluster to stop pausing and actually pause?

I have a 6 node Redshift Aqua cluster that I paused almost 2 hours ago and it's still running in modifying - pausing mode. One of the compute node's CPU is pegged at 100% during that period of time.FollowComment

Answer: "0Double check this is not a browser issue by Control+F5 or even closing your browser completely (not just that tab, not just that window, but all windows). If the issue persists then kindly raise a Support Ticket.CommentShareMilindOkeanswered a year ago"


Question: I can't create new Cloudfront distributions

"A couple of days ago a friend logged into my AWS account. And it turns out that now it says that my account is at risk but it's not like that, because it was under my authorization, I already did what the account asked me to do and I still can't create new distributions. Please helpFollowCommentAmazing Ash 3 months agoWhat is the error you are seeing when attempting to create a new distribution?Share"

Answer: "0Please open a ticket with AWS Support. They will be able to help you with your account issues directly.How to create a support caseCommentShareChrisanswered 3 months ago0Chris is correct regarding opening an AWS Support Case, that is the best way to get additional help and information.To help prevent this from happening in the future, can you provide additional details on how you allowed your friend to log into your AWS?Did your friend log in using the 'root' user credentials?Are you utilizing IAM Identity Center to manage user accounts for AWS?For best practices related protecting your account's root user, see the AWS documentation on AWS Account Management.Best practices to protect your account's root userCommentShareDeaneanswered 3 months ago"


Question: How to read S3 object from encrypted S3 bucket using ebextensions files?

"Hi,I am trying to create a file from an encrypted s3 bucket in my EB instance using the "files" key in an ebextensions configuration file.It's failing with a 400 error and the message: "Requests specifying Server Side Encryption with AWS KMS managed keys require AWS Signature Version 4."Here are some details:The bucket is encrypted with a custom KMS keyI'm using the "AWS::CloudFormation::Authentication" resource with role-based authenticationeg:Resources:AWSEBAutoScalingGroup:Metadata:AWS::CloudFormation::Authentication:S3Auth:type: "s3"buckets:- "Fn::GetOptionSetting":Namespace: "aws:elasticbeanstalk:application:environment"OptionName: "ConfigBucketName"roleName:"Fn::GetOptionSetting":Namespace: "aws:autoscaling:launchconfiguration"OptionName: "IamInstanceProfile"The role is set up with the correct policy to ListBucket and GetObject on the s3 bucket and the role is added as a Key User in KMS.Any pointers on how to get this to work?Thanks,KwanFollowComment"

Answer: 0Finally figured it out. The problem was the path didn't include the region so it couldn't use the V4 signature format and fell back to using an older one. Resolved the issue by adding the region into the s3 path.CommentShareklim-edjusteranswered 2 years ago


Question: How to get node information using sdk

"https://docs.aws.amazon.com/sdk-for-go/api/service/eks/i 'd like to get node instance information.but I cannot find any.eks has only nodegroup information, not node.how to get instance id of node or instance information?not kubectl, not eksctl. I want to use golang apiFollowComment"

Answer: "0kubectl get nodes <NODE_NAME> -oyaml returns information about the node that includes the EC2 instance ID:apiVersion: v1kind: Nodemetadata:  annotations:    node.alpha.kubernetes.io/ttl: "0"    volumes.kubernetes.io/controller-managed-attach-detach: "true"  labels:    alpha.eksctl.io/cluster-name: <CLUSTER_NAME>    alpha.eksctl.io/nodegroup-name: <NODEGROUP_NAME>    beta.kubernetes.io/arch: amd64    beta.kubernetes.io/instance-type: m5.large    beta.kubernetes.io/os: linux    eks.amazonaws.com/capacityType: ON_DEMAND    eks.amazonaws.com/nodegroup: <NODEGROUP_NAME>    eks.amazonaws.com/nodegroup-image: <AMI_ID>    eks.amazonaws.com/sourceLaunchTemplateId: <LAUNCH_TEMPLATE_ID>    eks.amazonaws.com/sourceLaunchTemplateVersion: "1"    failure-domain.beta.kubernetes.io/region: <REGION>    failure-domain.beta.kubernetes.io/zone: <AVAILABILITY_ZONE>    k8s.io/cloud-provider-aws: <ID>    kubernetes.io/arch: amd64    kubernetes.io/hostname: <HOST_NAME>    kubernetes.io/os: linux    node.kubernetes.io/instance-type: m5.large    topology.kubernetes.io/region: <REGION>    topology.kubernetes.io/zone: <AVAILABILITY_ZONE>  name: <HOST_NAME>spec:  providerID: aws:///<AZ>/<EC2_INSTANCE_ID>The spec.providerID gives you the AWS AZ and the EC2 instance ID. With those items, you could use the SDK to look up additional instance info.CommentSharejimmyrayanswered 10 months agoyhnoh 10 months agoThank you for your reply but, I want to use golang api. not kubectl.I couldn't find any api. It seem "getNode" function does not exist.Share"


Question: Reinstalling microsoft access DB engine

"Hello,We are running Microsoft access on our AWS server. Our system requires "Microsoft Access Database Engine 2010" installed at all times. It seems after each weekly server update, we have to reinstall the database engine.Is there a way to modify the update cycle to include the engine installation, please?Thank youFollowComment"


Question: Athena connect to snowflake no driver issue

"I followed the instructions from https://docs.aws.amazon.com/athena/latest/ug/connect-to-a-data-source-lambda.html to set up the connection between Athena and snowflake. However I'm getting an error when swtiching to the new data sources from Athena interface, the error msg is:Failed to invoke lambda function due to com.amazonaws.services.lambda.invoke.LambdaFunctionException: 0: java.sql.SQLException: No suitable driver found for jdbc:snowflake://<my connection string>Am I missing something when deploying the connector? Thanks.FollowComment"


Question: LATENCY ON PLAYING VIDEO HOSTED ON S3

"Hi, our website videos are experiencing latency when played.We are using CloudFront for caching. Is there any way to reduce or cancel the latency?ThanksFollowComment"

Answer: "1Thanks will try the suggestion and come back if that does not help.CommentShareAdamananswered a month ago0Accepted AnswerHello,It is difficult to respond without knowing your CloudFront settings, cache hits/miss ratio, location and bandwidth of users, type/size of video and encoding...Please review the links below to see if they help:[1] AWS re:Invent 2022 - Optimizing performance with CloudFront: Every millisecond matters (NET313): https://www.youtube.com/watch?v=LkyifXYEtrg[2] How do I reduce the latency of slow responses from CloudFront?: https://repost.aws/knowledge-center/cloudfront-latency-xcache[3] CDN features for media delivery: https://docs.aws.amazon.com/whitepapers/latest/amazon-cloudfront-media/cdn-features-for-media-delivery.html[4] How do I troubleshoot and reduce increased latency from CloudFront?: https://repost.aws/knowledge-center/cloudfront-troubleshoot-latencyRegards,JonCommentShareEXPERTJonathan_Danswered a month ago"


Question: Getting reimbursed for failed recognition cases from Textract

Textract does not always work. Sometimes it fails completely. Sometimes it fails in recognizing very obvious text. Sometimes it recognizes jibberish where there are obvious numbers. Is it possible to get reimbursed for failed cases?FollowComment

Answer: "1Hello,I'm sorry for the trouble you've encountered with Textract. To get help with your billing question, please open a support case with our Account & Billing team: http://go.aws/support-center.To get the best results from your documents, I recommend using the best practices provided in our documentation: https://docs.aws.amazon.com/textract/latest/dg/textract-best-practices.html.If you have trouble achieving high accuracy with receipts, identification, or industrial diagrams, please contact our Textract team via email at amazon-textract@amazon.com for assistance.Best regards,Kita B.CommentShareEXPERTAWS Support - Kitaanswered a year agoina a year agoYour linked Support Center is not open for basic support plan - it says to post here at Re:PostShare"


Question: Make public a folder in an S3 bucket

"Hello, I am new to Amazon S3 and I plan to use it for my personal and work projects.Initially, I'm uploading work files that I need to share at the file or folder level. I need to generate a link (url) that can be seen by anyone who has the link.I have created a bucket to store all my files and I have them organized by folders.I already know how to give permission at the file (object) level and share the generated link, but I can't find a way to generate a folder link.I need to create a folder link where all the files inside the folder can be viewed and downloaded. How can this be done?FollowComment"

Answer: "0Accepted AnswerGenerating a signed URL for a folder does not exist. There some S3 browser implementations out there that will list a folder. Example: Amazon S3 Browser Examples.Also: AWS JavaScript S3 Explorer.There is probably a way to do this with S3 Object Lambda.CommentShareEXPERTkentradanswered 2 months agoricardoh 2 months agoThanks for answering. After searching for info and reading here and elsewhere, it's clear to me that sharing files (objects) in S3 has many advantages and can be done in many ways, but folders can't (at least the way we do it on platforms like Google Drive). But I've thought a bit further about what is the point of sharing a file/folder: if I want to share a folder that contains files, I can just zip the folder, upload the zip file, and generate a publicly accessible link as an S3 object. . But if what I want is to have a shared work folder with other people, I would have to create iam users that have some degree of access to my buckets.Sharekentrad EXPERT2 months agoYou could also look at AWS Transfer Family and share a folder via SFTP. Your client then could use something like Filezilla to get the list of objects.Share0CHECK AWS BLOCK PUBLIC ACCESS SETTING (DEFAULTS CHANGING IN 2023)CREATE A BUCKET POLICY ALLOWING OBJECTS TO BE ACCESSEDRECOMMEND SHARING WITH PRE-SIGNED URLS FOR SECURITYCHECK AWS BLOCK PUBLIC ACCESS SETTING (DEFAULTS CHANGING IN 2023)Amazon S3 block public access prevents the application of any settings that allow public access to data within S3 buckets. This section describes how to edit block public access settings for all the S3 buckets in your AWS account. For more information about blocking public access, see Blocking public access to your Amazon S3 storage.To edit block public access settings for all the S3 buckets in an AWS accountSign in to the AWS Management Console and open the Amazon S3 console at https://console.aws.amazon.com/s3/Choose Block Public Access settings for this account.Choose Edit to change the block public access settings for all the buckets in your AWS account.Choose the settings that you want to change, and then choose Save changes.When you're asked for confirmation, enter confirm. Then choose Confirm to save your changes.CREATE A BUCKET POLICY ALLOWING OBJECTS TO BE ACCESSEDGrant public read access to the objects in a bucketIf your object ACLs grant public read access to all of the objects in your bucket, you can migrate these ACL permissions to a bucket policy.This object ACL grants public read access to an object in a bucket:{    "Owner": {        "DisplayName": "DOC-EXAMPLE-ACCOUNT-OWNER",        "ID": "852b113e7a2f25102679df27bb0ae12b3f85be6BucketOwnerCanonicalUserID"    },    "Grants": [        {            "Grantee": {                "DisplayName": "DOC-EXAMPLE-ACCOUNT-OWNER",                "ID": "852b113e7a2f25102679df27bb0ae12b3f85be6BucketOwnerCanonicalUserID",                "Type": "CanonicalUser"            },            "Permission": "FULL_CONTROL"        },        {            "Grantee": {                "Type": "Group",                "URI": "http://acs.amazonaws.com/groups/global/AllUsers"            },            "Permission": "READ"        }    ]}https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-ownership-migrating-acls-prerequisites.html#object-ownership-public-readRECOMMEND SHARING WITH PRE-SIGNED URLS FOR SECURITYYou can use the AWS Management Console to generate a presigned URL for an object by following these steps.In the Amazon S3 console, the maximum expiration time for a presigned URL is 12 hours from the time of creation.To generate a presigned URL using the AWS Management ConsoleSign in to the AWS Management Console and open the Amazon S3 console at https://console.aws.amazon.com/s3/In the Buckets list, choose the name of the bucket that contains the object that you want a presigned URL for.In the Objects list, select the object that you want to create a presigned URL for.On the Actions menu, choose Share with a presigned URL.Specify how long you want the presigned URL to be valid.Choose Create presigned URL.When a confirmation appears, the URL is automatically copied to your clipboard. You will see a button to copy the presigned URL if you need to copy it again.https://docs.aws.amazon.com/AmazonS3/latest/userguide/ShareObjectPreSignedURL.htmlCommentShareabemusaanswered 2 months ago"


Question: Pinpoint TFN registration keeps getting rejected

"I'm trying to register our Toll-free number (TFN) so that we can provide SMS two-factor auth. It stopped working last year after US carriers required registration. I've re-submitted my registration application 5 times now, and every time it gets rejected, sayingOpt-in express consent not compliantI've read and re-read the SMS Best Practices and made changes to both my opt-in workflow description and opt-in workflow image. The current changes are below.What am I doing wrong?DescriptionUsers opt-in explicitly by filling out a form and accepting the terms at [organization].dealpoint.me.FollowComment"

Answer: "1Accepted AnswerHello!The issue here is that you are sending the code before asking consent to send messages to the phone number. The process only needs a slight modification on step 2. I would recommend to add a checkbox on the step 2 screen with a legend that reads along the lines of "I consent to receive SMS messages from App X", and only move to the next step after this checkbox is selected. This is the type of consent TFN Registration is looking.I hope this helps.CommentShareJose Guayanswered 12 days agorePost-User-1013102 9 days agoThanks Jose. I've update my diagram and resubmitted the registration application. Fingers crossed. I'll keep you updated.SharerePost-User-1013102 5 days agoThat did it! Thanks again for your help Jose.Share"


Question: HOW TO CONNECT AN AWS CLOUD TO AWS CLOUD

"I want to connect two vpc´s , each one comes from different accounts.I have evaluated the peering connection solution but i would like another option, any advice?FollowComment"

Answer: "0Accepted AnswerVPC peering is the simplest way to connect two VPCs.There are other options depending on your use case, see here for more details, pros and cons.CommentShareVincentanswered 3 months agoEXPERTTushar_Jreviewed 3 months ago0Hi,If VPC peering option (easiest) is discarded, then the one to evaluate is to use TransitGateway: https://catalog.workshops.aws/networking/en-US/beginner/lab1/030-tgw, thought for a small number of VPC may be overkill, as it fits more use case where you need to scale a big amount of VPCs connections.CommentShareEXPERTalatechanswered 3 months ago0Another option is PrivateLink.CommentShareEXPERTkentradanswered 3 months ago"


Question: Bug? Agent Hierarchy

"So, we decided to start using Agent Hierarchy within Amazon Connect. Our current path is:Company -> Branch -> Department -> RoleSince we have multiple companies, with many branches, we figure this works out the best for us.We can obviously add Company options like Company A and Company B, but Branch, Department, Role do not appear. And, when we click on the navigator folder at the top, it just refreshes, does nothing. So we cannot add options to the other levels.Why is that?FollowComment"

Answer: "0When I access Agent Hierarchy from the left nav, I see my one existing Level 1 entry.  I click Edit in the top right and it takes me to a new screen for that Level 1 entry.  I click the _ to the right of the entry name and it shows me a new blank Level 2 field where I can type a name.  Is that what you are trying to do?  Are you able to select Edit on the main screen and if yes, do you then see the _ sign next to your existing Level 1 entry?CommentShareKristinLanswered 3 years ago0Yes, at the time, we were not even able to click on the actual NAME of the branch we added. It would just be white. But since going back in this week, we are able to add all the levels. Too bad we can't copy them lol But oh well.CommentShareCientielanswered 3 years ago"


Question: AWS Quicksight: Show actual values instead of aggregate

"Hey all! I want to use AWS Quicksight to show the values over time of a data set I have in S3 data lake. It looks like this:Where 0 is for example standing still, 1 is walking, and 2 is running.So now in Quicksight, I created an analysis. Als fields I selected time and value, and I added a filter for a specific device ID. The only problem is I can only show aggregates of the data, not the actual value. I can show the Sum of the value, or the Average, but that doesnt help me with displaying when a person is running. Is there some way I can achieve this?FollowComment"


Question: Send windows server 2016's metrics by cloudwatch agent

"Hello mates,I am working on observability. I have a Windows Server 2016, I installed a web application that produces logs.To do the observability, I turned to CloudWatch, to visualize logs and metrics.I installed a CloudWatch agent on the Windows server.Here is the configuration file:{  "agent": {    "metrics_collection_interval": 5,    "logfile": "C:\\ProgramData\\Amazon\\AmazonCloudWatchAgent\\Logs\\amazon-cloudwatch-agent.log",    "region": "eu-central-1",    "debug": true  },  "logs": {    "logs_collected": {      "files": {        "collect_list": [          {            "file_path": "C:\\ProgramData\\Amazon\\AmazonCloudWatchAgent\\Logs\\amazon-cloudwatch-agent.log",            "log_group_name": "amazon-cloudwatch-agent-group-log.log",            "log_stream_name": "amazon-cloudwatch-agent-stream-log.log",            "timezone": "UTC"          },          {            "file_path": "C:\\Users\\michael.ranivo\\Docuements\\Monitoring\\Middleware\\questions.txt",            "log_group_name": "test-middleware-group-logs",            "log_stream_name": "test-middleware-stream-logs",            "timezone":"Local"          }        ]      }    },    "force_flush_interval" : 5  },  "metrics": {    "metrics_collected": {      "namespace": "test-middleware-metrics",      "statsd": {},      "Processor": {        "measurement": [          {"name": "% Idle Time", "rename": "CPU_IDLE", "unit": "Percent"},          "% Interrupt Time",          "% User Time",          "% Processor Time"        ],        "resources": [          "*"        ],        "append_dimensions": {          "d1": "win_foo",          "d2": "win_bar"        }      },      "LogicalDisk": {        "measurement": [          {"name": "% Idle Time", "unit": "Percent"},          {"name": "% Disk Read Time", "rename": "DISK_READ"},          "% Disk Write Time"        ],        "resources": [          "*"        ]      },      "Memory": {        "metrics_collection_interval": 5,        "measurement": [          "Available Bytes",          "Cache Faults/sec",          "Page Faults/sec",          "Pages/sec"        ],        "append_dimensions": {          "d3": "win_bo"        }      },      "Network Interface": {        "metrics_collection_interval": 5,        "measurement": [          "Bytes Received/sec",          "Bytes Sent/sec",          "Packets Received/sec",          "Packets Sent/sec"        ],        "resources": [          "*"        ],        "append_dimensions": {          "d3": "win_bo"        }      },      "System": {        "measurement": [          "Context Switches/sec",          "System Calls/sec",          "Processor Queue Length"        ],        "append_dimensions": {          "d1": "win_foo",          "d2": "win_bar"        }      }    },    "append_dimensions": {      "ImageId": "${aws:ImageId}",      "InstanceId": "${aws:InstanceId}",      "InstanceType": "${aws:InstanceType}",      "AutoScalingGroupName": "${aws:AutoScalingGroupName}"    },    "aggregation_dimensions" : [["ImageId"], ["InstanceId", "InstanceType"], ["d1"],[]]  }}When I launch the agent, with this command:& "C:\Program Files\Amazon\AmazonCloudWatchAgent\amazon-cloudwatch-agent-ctl.ps1" -a fetch-config -m onPremise -s -c file:"C:\\ProgramData\Amazon\AmazonCloudWatchAgent\amazon-cloudwatch-agent.json"The agent launches well but when I look at the agent’s logs I have this:2023/01/19 16:56:29 I! Config has been translated into TOML C:\ProgramData\Amazon\AmazonCloudWatchAgent\\amazon-cloudwatch-agent.toml 2023/01/19 16:56:29 D! toml config [agent]  collection_jitter = "0s"  debug = true  flush_interval = "1s"  flush_jitter = "0s"  hostname = ""  interval = "5s"  logfile = "C:\\ProgramData\\Amazon\\AmazonCloudWatchAgent\\Logs\\amazon-cloudwatch-agent.log"  logtarget = "lumberjack"  metric_batch_size = 1000  metric_buffer_limit = 10000  omit_hostname = false  precision = ""  quiet = false  round_interval = false[inputs]  [[inputs.logfile]]    destination = "cloudwatchlogs"    file_state_folder = "C:\\ProgramData\\Amazon\\AmazonCloudWatchAgent\\Logs\\state"    [[inputs.logfile.file_config]]      file_path = "C:\\ProgramData\\Amazon\\AmazonCloudWatchAgent\\Logs\\amazon-cloudwatch-agent.log"      from_beginning = true      log_group_name = "server-perso-amazon-cloudwatch-agent-group-log.log"      log_stream_name = "server-perso-amazon-cloudwatch-agent-stream-log.log"      pipe = false      retention_in_days = -1      timezone = "UTC"    [[inputs.logfile.file_config]]      file_path = "C:\\Users\\leka\\Documents\\tests.txt"      from_beginning = true      log_group_name = "server-perso-test-middleware-group-logs"      log_stream_name = "server-perso-test-middleware-stream-logs"      pipe = false      retention_in_days = -1      timezone = "LOCAL"    [inputs.logfile.tags]      metricPath = "logs"  [[inputs.statsd]]    interval = "10s"    parse_data_dog_tags = true    service_address = ":8125"    [inputs.statsd.tags]      "aws:AggregationInterval" = "60s"      metricPath = "metrics"  [[inputs.win_perf_counters]]    DisableReplacer = true    [[inputs.win_perf_counters.object]]      Counters = ["% Idle Time", "% Disk Read Time", "% Disk Write Time"]      Instances = ["*"]      Measurement = "LogicalDisk"      ObjectName = "LogicalDisk"      WarnOnMissing = true    [inputs.win_perf_counters.tags]      "aws:StorageResolution" = "true"      metricPath = "metrics"  [[inputs.win_perf_counters]]    DisableReplacer = true    interval = "5s"    [[inputs.win_perf_counters.object]]      Counters = ["Available Bytes", "Cache Faults/sec", "Page Faults/sec", "Pages/sec"]      Instances = ["------"]      Measurement = "Memory"      ObjectName = "Memory"      WarnOnMissing = true    [[inputs.win_perf_counters.object]]      Counters = ["Bytes Received/sec", "Bytes Sent/sec", "Packets Received/sec", "Packets Sent/sec"]      Instances = ["*"]      Measurement = "Network Interface"      ObjectName = "Network Interface"      WarnOnMissing = true    [inputs.win_perf_counters.tags]      "aws:StorageResolution" = "true"      d3 = "win_bo"      metricPath = "metrics"  [[inputs.win_perf_counters]]    DisableReplacer = true    [[inputs.win_perf_counters.object]]      Counters = ["% Idle Time", "% Interrupt Time", "% User Time", "% Processor Time"]      Instances = ["*"]      Measurement = "Processor"      ObjectName = "Processor"      WarnOnMissing = true    [[inputs.win_perf_counters.object]]      Counters = ["Context Switches/sec", "System Calls/sec", "Processor Queue Length"]      Instances = ["------"]      Measurement = "System"      ObjectName = "System"      WarnOnMissing = true    [inputs.win_perf_counters.tags]      "aws:StorageResolution" = "true"      d1 = "win_foo"      d2 = "win_bar"      metricPath = "metrics"[outputs]  [[outputs.cloudwatch]]    force_flush_interval = "60s"    namespace = "server-perso-test-middleware-metrics"    profile = "default"    region = "eu-central-1"    rollup_dimensions = [["ImageId"], ["InstanceId", "InstanceType"], ["d1"], []]    shared_credential_file = "C:\\Users\\leka\\.aws\\credentials"    tagexclude = ["host", "metricPath"]    [[outputs.cloudwatch.metric_decoration]]      category = "LogicalDisk"      name = "% Idle Time"      unit = "Percent"    [[outputs.cloudwatch.metric_decoration]]      category = "LogicalDisk"      name = "% Disk Read Time"      rename = "DISK_READ"    [[outputs.cloudwatch.metric_decoration]]      category = "Processor"      name = "% Idle Time"      rename = "CPU_IDLE"      unit = "Percent"    [outputs.cloudwatch.tagpass]      metricPath = ["metrics"]  [[outputs.cloudwatchlogs]]    force_flush_interval = "5s"    log_stream_name = "wind"    profile = "default"    region = "eu-central-1"    shared_credential_file = "C:\\Users\\leka\\.aws\\credentials"    tagexclude = ["metricPath"]    [outputs.cloudwatchlogs.tagpass]      metricPath = ["logs"][processors]  [[processors.ec2tagger]]    ec2_instance_tag_keys = ["aws:autoscaling:groupName"]    ec2_metadata_tags = ["ImageId", "InstanceId", "InstanceType"]    profile = "default"    refresh_interval_seconds = "0s"    shared_credential_file = "C:\\Users\\leka\\.aws\\credentials"    [processors.ec2tagger.tagpass]      metricPath = ["metrics"]2023-01-19T15:56:29Z I! Starting AmazonCloudWatchAgent 1.247357.02023-01-19T15:56:29Z I! AWS SDK log level not set2023-01-19T15:56:29Z I! Loaded inputs: logfile statsd win_perf_counters (3x)2023-01-19T15:56:29Z I! Loaded aggregators: 2023-01-19T15:56:29Z I! Loaded processors: ec2tagger2023-01-19T15:56:29Z I! Loaded outputs: cloudwatch cloudwatchlogs2023-01-19T15:56:29Z I! Tags enabled: host=wind2023-01-19T15:56:29Z I! [agent] Config: Interval:5s, Quiet:false, Hostname:"wind", Flush Interval:1s2023-01-19T15:56:29Z D! [agent] Initializing plugins2023-01-19T15:56:29Z I! [processors.ec2tagger] ec2tagger: Check EC2 Metadata.2023-01-19T15:56:29Z D! Successfully created credential sessions2023-01-19T15:56:29Z I! [logagent] starting2023-01-19T15:56:29Z I! [logagent] found plugin cloudwatchlogs is a log backend2023-01-19T15:56:29Z I! [logagent] found plugin logfile is a log collection2023-01-19T15:56:30Z D! [logagent] open file count, 02023-01-19T15:56:31Z D! [logagent] open file count, 02023-01-19T15:56:32Z D! [logagent] open file count, 02023-01-19T15:56:33Z D! [logagent] open file count, 02023-01-19T15:56:34Z D! [logagent] open file count, 02023-01-19T15:56:35Z D! [logagent] open file count, 02023-01-19T15:56:36Z D! [logagent] open file count, 02023-01-19T15:56:37Z D! [logagent] open file count, 02023-01-19T15:56:38Z D! [logagent] open file count, 02023-01-19T15:56:39Z D! [logagent] open file count, 02023-01-19T15:56:40Z D! [logagent] open file count, 02023-01-19T15:56:41Z D! [logagent] open file count, 02023-01-19T15:56:42Z D! [logagent] open file count, 02023-01-19T15:56:43Z D! [logagent] open file count, 02023-01-19T15:56:44Z D! [logagent] open file count, 02023-01-19T15:56:45Z D! [logagent] open file count, 02023-01-19T15:56:46Z D! [logagent] open file count, 02023-01-19T15:56:47Z D! [logagent] open file count, 02023-01-19T15:56:48Z D! [logagent] open file count, 02023-01-19T15:56:49Z D! [logagent] open file count, 02023-01-19T15:56:50Z D! [logagent] open file count, 02023-01-19T15:56:51Z D! [logagent] open file count, 02023-01-19T15:56:52Z D! [logagent] open file count, 02023-01-19T15:56:54Z D! [logagent] open file count, 02023-01-19T15:56:54Z D! [logagent] open file count, 02023-01-19T15:56:55Z D! [logagent] open file count, 02023-01-19T15:56:56Z D! [logagent] open file count, 02023-01-19T15:56:57Z D! [logagent] open file count, 02023-01-19T15:56:58Z D! [logagent] open file count, 02023-01-19T15:56:59Z D! [logagent] open file count, 02023-01-19T15:56:59Z I! CWAGENT_LOG_LEVEL is set to "DEBUG"2023-01-19T15:57:00Z D! [logagent] open file count, 02023-01-19T15:57:01Z D! [logagent] open file count, 02023-01-19T15:57:02Z D! [logagent] open file count, 02023-01-19T15:57:03Z D! [logagent] open file count, 02023-01-19T15:57:04Z D! [logagent] open file count, 02023-01-19T15:57:05Z D! [logagent] open file count, 02023-01-19T15:57:06Z D! [logagent] open file count, 02023-01-19T15:57:07Z D! [logagent] open file count, 02023-01-19T15:59:18Z E! Failed to get credential from session: NoCredentialProviders: no valid providers in chaincaused by: EnvAccessKeyNotFound: failed to find credentials in the environment.SharedCredsLoad: failed to load profile, .EC2RoleRequestError: no EC2 instance role foundcaused by: RequestError: send request failedcaused by: Get "http://169.254.169.254/latest/meta-data/iam/security-credentials/": dial tcp 169.254.169.254:80: connectex: Une tentative de connexion a échoué car le parti connecté n’a pas répondu convenablement au-delà d’une certaine durée ou une connexion établie a échoué car l’hôte de connexion n’a pas répondu.2023-01-19T15:59:18Z D! [logagent] open file count, 02023-01-19T15:59:19Z D! [logagent] open file count, 02023-01-19T15:59:20Z D! [logagent] open file count, 02023-01-19T15:59:21Z D! [logagent] open file count, 02023-01-19T15:59:22Z D! [logagent] open file count, 02023-01-19T15:59:23Z D! [logagent] open file count, 02023-01-19T15:59:24Z D! [logagent] open file count, 02023-01-19T15:59:25Z E! [processors.ec2tagger] ec2tagger: Unable to retrieve EC2 Metadata. This plugin must only be used on an EC2 instance.2023-01-19T15:59:25Z E! [telegraf] Error running agent: could not initialize processor processors.ec2tagger: EC2MetadataRequestError: failed to get EC2 instance identity documentcaused by: RequestError: send request failedcaused by: Get "http://169.254.169.254/latest/dynamic/instance-identity/document": context deadline exceeded (Client.Timeout exceeded while awaiting headers)2023/01/19 16:59:25 E! Error when starting Agent, Error is exit status 1 I removed the metric part from the configuration file and this worked.I have no idea how my agent cloudwatch can send the metrics to cloudwatch.Do you have any idea?Thank you in advance for what I read.FollowComment"

Answer: "0From the error message in the log file, it is clear that the CloudWatch Agent was unable to resolve the AWS credentials. The original error message in French also suggests that the Agent was trying to access the metadata service (IMDS) that should only be the case for an EC2 instance, not for an on-premises server.You should specify the IAM credentials and the AWS Region the logs should be sent to in a configuration file. Please refer to the CloudWatch Agent documentation.You can also use temporary credentials to improve security. Refer to this Knowledge Base article.Most likely, your Agent config enables the ec2tagger plugin which can only be used on an EC2 instance, not on an on-premises server. Please make sure you configure your Agent properly according to the guidance referenced above.CommentShareDmitry Balabanovanswered 4 months ago"


Question: Failed TimeStream insert using aws sdk on a lambda JVM - Failed when retrieving a required endpoint from AWS.

"We have a Kotlin (JVM) lambda that we use to insert records into a TimeStream DB. Both are in the same region.We are using version 2.17.100 or the aws sdk.When busy, it often fails with a EndpointDiscoveryFailedException (based on the file name in the stack trace) exception with the message "Failed when retrieving a required endpoint from AWS." and the message in the exception cause is "unable to create new native thread". The exception is thrown by software.amazon.awssdk.core.endpointdiscovery.EndpointDiscoveryFailedException$BuilderImplI've searched and found some references to the exception being due to Lambda throttling, although that seems weird as there are instances of it occurring when the request rate is less than one request per second (much lower than I'd expect for lambda throttling).Also, it consistently occurs in Endpoint Discovery while attempting to call TimeStream which to me suggests a TimeStream issue instead of Lambda throttling.I also found reference to a timestream quota for CRUD APIS being one per second per region. That does seem to be a likely cause, the the exception message is weird AND I've seen the system handle more than one request per second.Has anybody seen this and do they have an explanation?ThanksFollowComment"

Answer: "0Accepted AnswerI found the cause - It was a resource/thread starvation issue.The lambda's runtime was being re-used for multiple requests.The lambda created a new TimeStreamWriteClient for each request.TimeStreamWriteClient implements Closable (or AutoClosable) and it needs to be closed as having multiple open instances around uses resources.I wasn't closing the client. Closing the client after each request - in this case a Kotlin use statement (roughly equivalent to a Java try-with-resources) - appears to have solved this issue.CommentShareJeffanswered a year agoJeff a year agoI'm not sure if accepting my own answer violates the conventions, but AWS re:Post sent me an email telling me to accept the answer if I though it was right, so I did.Share"


Question: Apple MacOS Calendar - Repeat Invitations

"I'm having issues to send a repeating event from an Apple macOS Calendar.There is no issue, when I login from webmail link. I can create repeating event without an issue.Here are the Mac details:macOS: 13.2.1 (22D68)Calendar Version: Version 11.0 (2932.3.4)When I send the invitation, I receive an error says "unable to access the account". It does not send the meeting to recipients. I see question mark next to mailboxes.I try to delete the e-mail account and create it again. Problem still happensFollowComment"

Answer: "0Hi,I'm sorry to hear you're experiencing problems with sending a repeating meeting via Mac Calendar. Does this only occur when sending a repeating meeting or also when sending a single event? Also do you see any error when sending out mail via Mac Mail?Kind regardsRobinCommentShareMODERATORrobinkawsanswered 3 months ago0Hi Robin,It only occurs with repeating meeting. There is no issue with single event. When I send the invitation, exclamation mark seen next to the mail accounts section on the left part of Calendar app. When I click to this mark, it says your calendar couldn't be refreshed. Unable to connect to the account xxxx. There is question mark on the event next to the human icon. I have also validated that the meeting request is not received by recipient or recipients.Thank you,MertCommentSharefmkrmanswered 3 months ago"


Question: AWS CLI get rid of credentials file

"Hello, We need to get rid of situation that we need to store our access keys in PC memory ( on a disk, not the RAM ), because of that we cannot use credentials file that is created by AWS CLI command aws configure. Someone knows any work around for this? maybe somehow we can send "access keys" directly with the commands that we run?FollowComment"

Answer: "1Accepted AnswerSee: Environment variables to configure the AWS CLICommentShareEXPERTkentradanswered a year ago1Hey there,This isn't an AWS solution, but one that you may find interesting.As for more 'native' solutions to the AWS CLI, you can go down the route of Environment Variables, as previously mentioned by another user. On the matter of your idea of passing the Access Key and Secret Key along with each command, I only know that you can do this in AWS Tools for PowerShell. I cannot see anything in the AWS CLI which would indicate that you can do the same in it.CommentShareCiaran Carragheranswered a year agoJoann Babak a year agoThank you for you answer @Ciaran Carragher, we probably will go with setuping shell variables, but the AWS VAULT does look as interesting solution.Share0Have you considered the AWS Secrets Manager?   Would that be a good fit for your particular situation?CommentSharesharpedgewvanswered a year agoJoann Babak a year agoThank you for your answer @sharpedgewv , i need to read more about the AWS Secrets Manager, but if it is using "IAM static access keys" at any point, then it is not solution for us.Share"


Question: [Announcement] Amazon CloudFront IP Ranges Are Now Available in JSON Format

"Dear Amazon CloudFront Customers,From time to time we receive requests for the list of CloudFront IP address ranges. The CloudFront IP addresses change frequently and we cannot guarantee advance notice of changes. On a best-effort basis, we will provide the list of current addresses. Customers should not use these addresses for mission critical applications and must never hard code them in DNS names.AWS now publishes its current IP address ranges in JSON format. To view the current CloudFront ranges, download the .json file using the following link.Download: ip-ranges.jsonTo extract the CloudFront ranges, filter the file using the value "CLOUDFRONT" for the “service” field. If you access this file programmatically, it is your responsibility to ensure that the application downloads the file only after successfully verifying the TLS certificate presented by the server.For more information, see the following documentation: AWS IP Address Ranges.Thank You,The Amazon CloudFront TeamFollowCommentNitin_T SUPPORT ENGINEERa year agoThis is an announcement migrated from AWS Forums that does not require an answerShare"

Answer: 0[Announcement] Does not require an answer.CommentShareEXPERTIsraa-Nanswered 19 days ago


Question: How to set dynamic outbound number based on the agent's intention in Amazon Connect Contact Flow?

"I have been working on a new scenario where I want to setup dynamic number in the contact flow. But the issue is that the outbound number should be dynamic and it is agent's wish to choose the outbound number.Let's explain through a proper scenario. Let's suppose we have 3 outbound number 111111, 222222, and 333333. On the first outbound call, the agent want to set this 111111 outbound number. on next outbound call the agent wants to set 222222 number on the fly.Is there any possibility to implement this scenario? I know we can use Call Phone Number block but how we will get input from the agent like we do in the case of inbound flows Get Customer Input Block.I am also open to integrate Lambda function. Any suggestion will be appreciated.FollowComment"

Answer: "0When the agent makes an outbound call it will trigger the Outbound flow configured for that outbound queue. If you can attach some attribute to the outbound call, you can then check that attribute and use a Call Phone Number block and set the Caller ID. Maybe even have a menu, for caller ID X, press 1. For Y, press 2. This is possible as we're doing it today.davidCommentSharedmaciasanswered 2 months ago0Hi,Can you please check the below link for Dynamic outbound Caller ID. i wish this matches the Scenario you are after..https://aws.amazon.com/premiumsupport/knowledge-center/connect-dynamic-outbound-caller-id/Best Regards,Ramy HusseinCommentShareRamyHanswered 2 months ago"


Question: 1 to many FQDN mappings with Route53

"I'm trying to accomplish the following DNS setup with Route53. Is it possible?app.domain.com --> [v1.app.domain.com, v2.app.domain.com, v3.app.domain.com --> [1.1.1.1,1.1.11.2, etc] ]Basically, FQDN pointing to multiple FQDNs. I know CNAMEs would allow me to have 1 to 1 mapping, but not 1 to many. I was hoping for a Route53 solution to this (don't want to use ELB or API Gateway, or any other programmatic way of adding IPs).FollowComment"

Answer: "0Accepted AnswerI'm not sure if this will accomplish what you want, but if you set the Routing policy to Weighted, you can have multiple CNAME records for the same FQDN. Example:app.domain.com CNAME v1.app.domain.com Weight 25 SetID v1app.domain.com CNAME v2.app.domain.com Weight 25 SetID v2app.domain.com CNAME v3.app.domain.com Weight 25 SetID v3app.domain.com CNAME v4.app.domain.com Weight 25 SetID v4The weights can be anything (0 to 255), but if you make them all the same, it should route to them evenly.CommentSharemmillinganswered 6 years ago"


Question: "Within Quicksight, is there a way to visualize real time data from an S3 bucket"

Is there a way to visualize real time data from an S3 bucket in QuicksightFollowComment

Answer: 0Accepted AnswerYou can do direct-query using Athena (or redshift spectrum if dashboard load time is very important; Athena is cheaper option)CommentShareAWS-User-7013741answered 3 years ago


Question: AWD DMS Replace Character

"Hi !I configured a AWS DMS containing an Oracle as Source database and a S3 Bucket as target.Problem Statement:My Oracle database contains Horizontal Tab and Line feed characters on the row content. I would like to replace/remove those characters.I tried to add CharacterSetSettings to Migration Task Settings but it's not supported for S3 as target.Also the rfc4180 property add quotes to the value but it doesn't solve the problem when the consumers try to load the row in a redshift.Is there another way that I can remove those characters without setting an extra resources/infrastructure?Source endpoint settings:{    "AddSupplementalLogging": true,    "ExtraArchivedLogDestIds": [],    "AllowSelectNestedTables": true,    "DatabaseName": "MyDatabase",    "UseBFile": true,    "UseLogminerReader": false,    "SecretsManagerAccessRoleArn": "arn:aws:iam::0000011111:role/SynchroReplicationInfrastructureSecretsManagerReadWriteRole",    "SecretsManagerSecretId": "arn:aws:secretsmanager:us-east-1:0000011111:secret:beta/xyzedf"}Target endpoint settings:{    "CsvRowDelimiter": "\\n",    "CsvDelimiter": "\\t",    "BucketFolder": "MyFolder",    "BucketName": "MyBucketName",    "CompressionType": "NONE",    "DataFormat": "csv",    "EnableStatistics": true,    "IncludeOpForFullLoad": true,    "TimestampColumnName": "transactionCommitTimestamp",    "DatePartitionEnabled": false,    "AddColumnName": false,    "MaxFileSize": 2000}FollowComment"

Answer: "0Have you tried using replace function to modify the contents as per https://docs.aws.amazon.com/dms/latest/userguide/CHAP_Tasks.CustomizingTasks.TableMapping.SelectionTransformation.Expressions.html#:~:text=%3A%2050%0A%7D%0A%7D-,Using%20SQLite%20functions%20to%20build%20expressions,-You%20use%20tablereplace(x,y,z)The replace(x,y,z) function returns a string formed by substituting string z for every occurrence of string y in string x.I hope it helps.CommentShareAWS-User-8174525-subhashanswered 8 months agoMarcus 8 months agoWhat is the right syntax for the replace expression? I tried this, but didn't work:    {      "rule-type": "transformation",      "rule-id": 344,      "rule-name": "344",      "rule-target": "column",      "object-locator": {        "schema-name": "SCHEMA_NAME",        "table-name": "TABLE_NAME",        "column-name": "COL_NAME"      },      "expression": "replace($COL_NAME, '\n','')",      "rule-action": "include-column",      "value": null,      "old-value": null    }ShareAWS-User-8174525-subhash 8 months ago"rule-action": "add-column" neededwhich could look like this. It will select table, remove COL_NAME and lastly add new column UPDATED_COL_NAME with expression replace($COL_NAME, '\n','')this should work unless DMS is not supporting escape character \ in that case you can try updating the source table data to remove the \nOr create a view which is replacing the \n in column but in that case only full load is supported.{  "rules": [    {      "rule-type": "selection",      "rule-id": "1",      "rule-name": "1",      "object-locator": {        "schema-name": "SCHEMA_NAME",        "table-name": "TABLE_NAME"      },      "rule-action": "include"    },    {      "rule-type": "transformation",      "rule-id": "2",      "rule-name": "2",      "rule-action": "remove-column",      "rule-target": "column",      "object-locator": {        "schema-name": "SCHEMA_NAME",        "table-name": "TABLE_NAME",        "column-name": "COL_NAME"      }    },    {      "rule-type": "transformation",      "rule-id": 344,      "rule-name": "344",      "rule-action": "add-column",      "rule-target": "column",      "object-locator": {        "schema-name": "SCHEMA_NAME",        "table-name": "TABLE_NAME",        "column-name": "COL_NAME"      },      "expression": "replace($COL_NAME, '\n','')",      "value": "UPDATED_COL_NAME",      "data-type": {        "type": "string",        "length": 50      }    }  ]}                   ShareMarcus 8 months agoIt worked partially, I couldn't make it work for more than one character replacement. I tried "expression": "replace(replace($COL_NAME, '\n',''), '\t', ' ')" and replace($COL_NAME, '/[\t\n]/g,''). Do you know how can I replace multiple characters in the same string?Share0To solve this issue I added lambda to remove those characters.I used to have the following flow:Oracle DB -> AWS DMS -> S3 BucketCurrent:Oracle DB -> AWS DMS -> S3 Bucket1 -> Lambda -> S3 Bucket2CommentShareMarcusanswered 7 months ago"


Question: Changing Primary Region in Directory Service for AWS Managed Microsoft AD Enterprise

"I have a multi region AWS Managed Microsoft AD Enterprise directory set up in Directory Service. The primary region is us-east-1 and the secondary region is us-west-2. I need to downgrade from Enterprise to Standard (separate topic) but before I do so, I need to change the Primary Region from us-east-1 to us-west-2. I don't see any way to do this in the documentation or in the management console. Is it possible to change the Primary Region in Managed AD Enterprise? If so, how? Thanks!FollowComment"

Answer: "1Currently there is no way to downgrade from Enterprise to Standard. It is possible to do a one way upgrade of Standard Managed AD to Enterprise Managed AD, though you'd need to open a support case to request this.Unfortunately, it is also not currently possible to change the primary region after directory creation. The service team has been been made aware of this request and they work on feature releases based on customer request, so if you happen to work with an Account Manager and/or Solutions Architect, be sure to let them know you'd like to add your +1 on the request for visibility.CommentShareAWSJoeanswered a year ago"


Question: Can I compile a model for AWS Inferentia with more complex input_shape?

"I have an ML model from Huggingface, which essentially looks as follows:import torchfrom transformers import BloomTokenizerFast, BloomForCausalLMdevice = torch.device('cuda' if torch.cuda.is_available() else 'cpu')devicetokenizer = BloomTokenizerFast.from_pretrained("bigscience/bloom-560m")model = BloomForCausalLM.from_pretrained("bigscience/bloom-560m").to(device)text = tokenizer.encode(seed)inputs, past_key_values = torch.tensor([text[0]]), Nonewith torch.no_grad():    while #condition met:        model_out = model(input_ids=inputs.to(device), past_key_values=past_key_values)        ...        # Generate new inputs and go back to the startNow I would like to deploy this model to Inf1 on AWS Sagemaker see here:from sagemaker.pytorch.model import PyTorchModelpytorch_model = PyTorchModel(    model_data=model_path,    role=role,    entry_point="my_entry_point_file.py",    framework_version="1.5.1",    py_version="py3",)neo_model = pytorch_model.compile(    target_instance_family="ml_inf1",    input_shape={"input0": [1, 3, 224, 224]},    output_path=compiled_model_path,    framework="pytorch",    framework_version="1.5.1",    role=role,    job_name=compilation_job_name,)However, in my case I getUnexpectedStatusException: Error for Compilation job bloom-compiled-inf-inf1-202304-1921-4203: Failed. Reason: ClientError: CompilationError: Unable to compile model for ml_inf1:', 'No operations were successfully partitioned and compiled to neuron for this model - aborting trace!')  For further troubleshooting common failures please visit: https://docs.aws.amazon.com/sagemaker/latest/dg/neo-troubleshooting-compilation.htmlI believe the main problem is the following: Whereas inputs can be considered of length [1,1], the variable past_key_values is much more complex. In this case, it isa tuple of length 24each entry is a tuple itself of length 2the two entries are torch tensors of size [16, 64, 6] and [16, 6, 64]My question is now, what can I do such that it works on Inf1?I could imagine that eitherthere is a way to enter the right input_shape, which can be something like {‘var1’: [1,1,28,28], ‘var2’:[1,1,28,28]} (I do not know how to display the more complex tuple-tensor structure as outlined above)or can we split past_key_values such that we can build input_shape easily?Any suggestions would be very appreciated.FollowComment"


Question: End of support of TLS1.0 & 1.1 for API Gateway endpoints with AWS domains

HiI have deployed many APIs with AWS domains such as belowhttps://ptl8374993a.execute-api.us-west-1.amazonaws.com/uat/profile_ingestion.I am not using a custom domain.I learnt from https://aws.amazon.com/blogs/security/tls-1-2-required-for-aws-endpoints/ that the support for TLS 1.0 & 1.1 in APIs of AWS services will be stopped from Jun 2023.Can someone clarify if that means the API endpoints which use AWS domains (like mine above) will support ONLY TLS 1.2 after June 2023.Thanks in advance.FollowComment

Answer: "0Accepted AnswerYes, I think that is what it would mean.TLS versions 1.0 and 1.1 will no longer be supported on "June 28, 2023" as follows, so clients will need to change their connections to use TLS 1.2 or higher.https://aws.amazon.com/jp/blogs/security/tls-1-2-required-for-aws-endpoints/This update means you will no longer be able to use TLS versions 1.0 and 1.1 with all AWS APIs in all AWS Regions by June 28, 2023.If this answer has led to a resolution, please approve the answer for the betterment of the community.CommentShareEXPERTRiku_Kobayashianswered 2 months agoBrettski-AWS EXPERTa month agoI don't think this answer is correct - see the other answer for details.Share0The deprecation of TLS 1.0 and 1.1 is only for AWS endpoints - that is, where you're calling an AWS service and there is an AWS "back-end" which is doing something for you. So think EC2, SQS, SNS and so on.API Gateway, CloudFront, ALB and a other AWS services are a little unusual in that there are AWS-controlled endpoints for those services (where you call the AWS API to create, modify or delete resources) but you can also create endpoints for your end-users to call your applications. It is your choice as to what ciphers and protocols that you use.AWS in not deprecating the use of TLS 1.0 and 1.1 on customer-created endpoints - that is: your endpoints that you have created in API Gateway (or other services that allow endpoints to be created). We strongly encourage you to migrate away from TLS 1.0 and 1.1 to more secure alternatives (TLS 1.2 and 1.3) but it is up to you to do that.So in this case your API endpoints in API Gateway will continue to operate past June 2023. Again: Please make an effort to upgrade your clients and the endpoints themselves - it's a better thing for you and your end-users.Update: And thanks to a handy tip from a colleague, here's a talk from our re:Inforce conference that addresses this particular issue.CommentShareEXPERTBrettski-AWSanswered a month ago"


Question: Multiple applications on same environment of Elastic Beanstalk

"Hi  I am trying to deploy two web apps on elastic beanstalk. Both are implemented with Python, one for data collection and one for data preview.  Here are my two solutions:Two apps on same environment, therefore they shared the local data;Two environment connected to same database.However, it seems like each environment could only serve one single Web App? Just wonder if anyone got the same problem and any suggestions, many thanks in advance!FollowComment"

Answer: "0The second solution looks like more plausible. You can opt to use a database environment outside your Beanstalk, in fact that is the more recommended approach (https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/AWSHowTo.RDS.html).If both data collection and data preview app are meant to be separate apps, you actually can deploy them as 2 "application" in Beanstalk, each connected to the same database instance. These 2 application can have separate environments if you need dev/staging/prod version. And each environment you can design your web app to be scalable using load-balancers.CommentShareapradanaanswered 9 months agorePost-User-9027259 3 months agoTwo applications would mean two separate EC2 instances? Is there a way to do this where it will use the existing EC instances and load balancer?Share"


Question: Receiving error when trying to add Event Notification for SQS via CDK:  botocore.exceptions.ClientError: An error occurred (InvalidArgument) when calling the PutBucketNotificationConfiguration

"Error:  botocore.exceptions.ClientError: An error occurred (InvalidArgument) when calling the PutBucketNotificationConfiguration operationHello AWS,I am currently working on a project where I am working with a third party team. The team has an SQS that all of our buckets have an event notification for. I currently added a new bucket and I am receiving this error when I try to deploy it via CDK.The team does not seem to be to well familiar with AWS but I asked if I have permissions to call the SQS and they said yes. Is there a way to confirm this on my end? Or is is there documentation on the configuration the team needs to set up for their SQS Que? If so, is there any other problems that could cause this error message?I'm confident it's on the third party team ends because this is done through our CDK stack and everything else works fine. But I do want to know I am updating an existing stack, before our bucket did not send via event notifications but was created.Any solutions or troubleshooting will help.One source I found on stackoverflow except it's for lambda: https://stackoverflow.com/questions/36973134/cant-add-s3-notification-for-lambda-using-boto3FollowComment"

Answer: "0Hello,Greetings of the day!! Thank you for contacting AWS.I understand you are getting the following error when trying to add Event Notification for SQS via CDK:"botocore.exceptions.ClientError: An error occurred (InvalidArgument) when calling the PutBucketNotificationConfiguration"Please note here that this error usually occur if the destination which we are configuring don't allow Amazon S3 from pushing the configured events. Therefore, in order to troubleshoot the issue, you need to check the SQS queue policy as per the documentation[+]. Basically, the SQS queue policy needs to be checked for the permissions for the particular bucket you are configuring.[+]https://docs.aws.amazon.com/AmazonS3/latest/userguide/grant-destinations-permissions-to-s3.html{"Version": "2012-10-17","Id": "example-ID","Statement": [{"Sid": "Example SNS topic policy","Effect": "Allow","Principal": {"Service": "s3.amazonaws.com"},"Action": ["SNS:Publish"],"Resource": "SNS-topic-ARN","Condition": {"ArnLike": {"aws:SourceArn": "arn:aws:s3:::bucket-name"//should contain all the buckets that need to be configured.},"StringEquals": {"aws:SourceAccount": "bucket-owner-account-id"}}}]}Also, to better address the issue, we require details that are non-public information. Thus, I request you to kindly open a support case with AWS using the following link from the account that owns the SQS queue.https://console.aws.amazon.com/support/home#/case/createThank you and have a nice day!!CommentShareSUPPORT ENGINEERrePost-User-5937688answered 3 months ago"


Question: Error getting to install aws linux-extras

Trying to excute : yum install -y amazon-linux-extrasgetting the below error:Last metadata expiration check: 0:01:05 ago on Sun Mar 26 03:30:35 2023.No match for argument: amazon-linux-extrasError: Unable to find a match: amazon-linux-extrasFollowComment

Answer: "4which version r you using? if you are using amazon linux 2023 amazon-linux-extras does not existsCommentShareEXPERTsdtslmnanswered 2 months agorePost-User-8094912 2 months agohow to get epel be installed for this? Thank youShare3I hope this helps.https://aws.amazon.com/premiumsupport/knowledge-center/ec2-enable-epel/on top of the above,Check that the correct repository is enabled: The "amazon-linux-extras" package is part of the "amazon-linux-extras" repository, which may not be enabled on your system. You can check which repositories are currently enabled by running the command sudo yum repolist all. Make sure that the "amazon-linux-extras" repository is enabled.CommentSharerePost-User-5208427answered 2 months agoChris_G EXPERT2 months agoUpdated your link as it was not formatted correctly.Share"


Question: AuroraDB MySQL Cloning: How fast is it?

"Considering moving to Aurora DB for MySQL. I have a MySQL DB (5 TB) and I'm wondering if I should move to Aurora.The clone feature sounds great for debugging. How fast is it in reality?(I would believe that setting up a cluster and getting things ready would take me at least 10 minutes, right?)FollowComment"

Answer: "1Thank you for asking your question.Unfortunately, currently we don't have SLA on Aurora database cloning. It depends on various conditions. One note here is after you have 15 clones, the next clone that you create is a full copy, it means clone takes longer time than usual. We highly recommend do a test with real workload before using new feature.Please see our document for more detail.CommentShareYUTAKA_Hanswered 7 months agorePost-User-5941005 7 months agoAppreciate it! The bit about the full copy is very helpful. Thanks.Share"


Question: Will daily Cost Explorer costs history recover after disabling Hourly and Resource Level Granularity ?

"Hello,Will daily Cost Explorer costs history recover after disabling Hourly and Resource Level Granularity ?After enabling hourly granularity, I will see hourly costs up to the past 14 days. But after some testing, I would like to switch the granularity back to daily. Will my costs history recover to contain all historical data (several months)?FollowComment"

Answer: "1Accepted AnswerWhen you sign up for hourly costs, you still have access to daily costs. The hourly costs are available for rolling 14 days and daily costs are for rolling 12 months. Turning off hourly costs will not have any impact to the 12 month history of daily costs.CommentShareAWS-User-9819141answered a year agoTomas Bartek a year agoThank You :)Share"


Question: Domain not resolving

"I set up static site hosting on S3 and pointed my A records to that bucket but after at least 5 hours the record hasn't propagated. When i dig my domain this is what I get:; <<>> DiG 9.16.1-Ubuntu <<>> frequencyh.net;; global options: +cmd;; Got answer:;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 56875;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1;; OPT PSEUDOSECTION:; EDNS: version: 0, flags:; udp: 65494;; QUESTION SECTION:;frequencyh.net.INA;; Query time: 67 msec;; SERVER: 127.0.0.53#53(127.0.0.53);; WHEN: Mon Jun 29 19:00:02 EDT 2020;; MSG SIZE  rcvd: 43I previously attempted to put a CDN infront of the domain but removed it because of an access denied error even after setting up OAI. The test record seems to be fine, but I'm not sure how that could be.FollowComment"

Answer: "0Accepted AnswerHi,Name servers appear in three places, and typically they should all be in synch:~ The name servers that Route 53 assigns to a hosted zone when you create it. These are the "master" name servers and cannot be changed. Name servers in the other locations usually match these.~ The name servers in the NS record in the hosted zone.~ The name servers that are associated with the domain registration. These are the name servers that control which DNS configuration is in use.For frequencyh.net, the "master" name servers match the name servers in the NS record, but the name servers in the domain registration are different.To fix that, do the following:Get the name servers that Route 53 assigned to the hosted zone when you created it. See "Getting the Name Servers for a Public Hosted Zone" in the Route 53 Developer Guide:https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/GetInfoAboutHostedZone.htmlUpdate the domain registration to use the four name servers that you got in step 1. See "Adding or Changing Name Servers and Glue Records for a Domain":https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/domain-name-servers-glue-records.htmlAfter you finish, it will take a couple of days for you to be able to see your website again because DNS resolvers typically cache the names of name servers for two days. (Folks who use different DNS resolvers will be able to see your website as soon as you make the change. You might also be able to see your website from your phone.) For an overview of how DNS works, including the part about resolver caching, see "How Amazon Route 53 routes traffic for your domain":https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/welcome-dns-service.html#welcome-dns-service-how-route-53-routes-trafficScottCommentShareEXPERTAWS-User-6179575answered 3 years ago"


Question: Insert record in dynamodb table using DynamobdMapper when record doesn't exist.

I created a DDB table which contains version number. When i try to create new record in DDB table using DDB mapper using "DynamoDBMapperConfig.SaveBehavior.PUT"  it is failing with the error as conditional failure but when i try to using "DynamoDBMapperConfig.SaveBehavior.CLOBBER" it is overwriting the record.So how do i insert record in to the DDB only when record doesn't exist using DynamoDBMapper?FollowComment


Question: Tomcat latest version on Amazon Linux 2

"Hello,We have tomcat servers with latest tomcat 8.5.* installed from amazon-linux-extrasThe latest version now is 8.5.79.0But in the Apache Tomcat site https://tomcat.apache.org/download-80.cgi, they have this latest version 8.5.87Could you please advise why AL2 doesn't have the latest tomcat version?ThanksFollowComment"

Answer: "0Hello,This package may not be available in the amazon-linux-extras repositories due to the required dependencies not being stable or updated yet. Any package updates for Amazon Linux 2 can be found in the release notes [0]. Interestingly enough my Amazon Linux 2 test instance uses version 9.0.71 for tomcat9 which is also not the latest version of the package (9.0.73). If using tomcat 8.5.87 is desired instead of 8.5.79.0, I would use the wget command to download the necessary package from the tomcat site. For example:wget https://dlcdn.apache.org/tomcat/tomcat-8/v8.5.87/bin/apache-tomcat-8.5.87.tar.gzI hope this information helps![0] Amazon Linux 2 Release Noteshttps://docs.aws.amazon.com/AL2/latest/relnotes/relnotes-al2.htmlCommentSharedclen-AWSanswered 2 months ago"


Question: IoT TwinMaker: get selected entity

"Hello,Thanks to the option "customSelCompVarName" of the scene viewer plugin Grafana, we are able to know which tag the user clicks on (through a Grafana variable).But when the user clicks on a 3D object, the variable "customSelCompVarName" is not updated whereas we can see in the hierachy list that the 3D object has been selected (thanks to a blue point).So is it possible Grafana to use a variable to store which 3D object the user clicks on?Thank youFollowComment"


Question: Compromised account received a massive billing

"I received a weird email from aws Singapore to tell me the account is updated which I didn't login for years. I thought it's a scam and ignored the email. After 8 days, I received another email said my account is compromised,Action Required: Irregular activity in your AWS account xxxxxxxxx4704Amazon Web Services, Inc. no-reply-aws@amazon.comJun 28, 2022, 8:48 PM (4 days ago)to meHello,Your AWS Account may be compromised. Please review the following notice and take immediate action to secure your account.This account compromise poses a security risk to your account (including other account users), and could lead to excessive charges from unauthorized activity. To protect your account from excessive charges, we have temporarily limited your ability to use some AWS services. To remove the limits, please follow the instructions below.If the unauthorized usage is not stopped we may suspend your AWS account. Failure to contact AWS within five (5) days may also result in the suspension of your account and disruption of your AWS service in order to protect you from unauthorized usage and charges. To further protect your account from excessive charges, we may terminate any suspected unauthorized resources on your account.Today I received a new email from aws told me my June bill is $160k which is insane.  I closed the account immediately without checking the resource usage since it's too scary. Now I think the account is suspended and I cannot response to the ticket anymore.What should I do to check the account and please please help me about the case, thank you very very much.FollowComment"

Answer: "1Hi there,Terribly sorry for the worry this matter must be causing you.In order to have this issue resolved you'll need to reach out to our Account & Billing support team via your Support Center.Even if your account is in a closed state, you'll still be able to login and create support cases.Please create a case, and mention the case ID linked to the compromised account issue. To ensure this matter is dealt with in a swift manner, I recommend making use of our callback / chat option: https://aws.amazon.com/premiumsupport/knowledge-center/aws-phone-support/.Kind regards,- Rafeeq C.CommentShareEXPERTAWS Support - Rafeeqanswered a year ago0Hi Rafeeq,Thanks for the reply, but I cannot login to my old account, it always returns 400 error.CommentSharepqanswered a year ago0Thanks for responding with that information.In that case, please contact our Support team, using the following contact form (which does not require login), here: https://support.aws.amazon.com/#/contacts/aws-account-support.Regards,-- Ben G.CommentShareEXPERTAWS Support - Benanswered a year ago"


Question: RDS Compute Optimization

"Hi,We have a long-running RDS DB, and we would like to pay upfront for it, we want to know what is the best instance type to use.Is there a tool like AWS compute optimizer for RDS?If not, how do you determine what is the best-fit instance type?FollowComment"

Answer: "0I'm not aware of a tool, but you can use these guidelines:Choose a T2 RDS instance if: you’re just starting out and need some buffering room for spikes in performance to get a sense of what baseline database performance will be like. But keep in mind that AWS Aurora is only available on the db.t2.medium and that no T2 database instances can have Provisioned IOPS.Choose the M4 if: your database workload doesn’t run too many in-memory functions, and you have a general sense of your performance. You’ll have more options as far as provisioning increased IOPS with this family as well.Choose the R3 if: there are memory-intensive workloads to run. It’ll be interesting to see if AWS creates a new R4 fleet of RDS instances now that the R4s are available on EC2. If a project scales beyond the R3 database instance family AWS now has a couple of options on EC2 with the memory-heavy X1 family, but keep in mind that using EC2 means giving up the database management-centric features and benefits of RDS.You can read more at:https://www.apptio.com/blog/choosing-the-right-rds-instance-for-the-job/https://hmh.engineering/right-sizing-aws-rds-191bf06f3cb7https://www.cloudzero.com/blog/rds-instance-typesI hope it helped.CommentShareYedidya Schwartzanswered 4 months ago0I would start by analysing the cpu utilization, the memory utilization and the database connections over a longer period of time.If you for example has a low CPU usage but a higher memory usage the r5 instance would be a good fit. If you need both cpu and memory then the m5 might be a good fit.You didn't say what kind of database and it's version you were running in RDS, if it's MySQL in >= version 8.0.17  then I would recommend you to use the graviton based instances instead, r6g and m6g. Graviton instances provides you with up to 35% better performance and up to 52% improved price performance.And in regards to database connections. Each instance size has a maximum connection limit, make sure you choose an instance that can support the amount of connections you expect to hit at maximum load. Read more hereCommentShareEvolate-Timanswered 4 months ago"


Question: Why am I being charged for using the sms service that I didn't ask for?

"Recently, I have been getting a lot of charges due to excessive unsolicited sms sending. Why is this happening?Is there any way to prevent this?FollowComment"

Answer: "0You can set spend limits for SMS services to prevent unwanted charges. For more information, visit Setting SMS messaging preferences using the AWS Management Console.You can also set an Amazon CloudWatch alarm to to notify you when you're close to reaching your monthly SMS messaging spending limit for Amazon SNS. Visit How do I set a monthly spending limit alarm for SMS messages in Amazon SNS?.CommentShareBriNasAWSanswered 20 days ago"


Question: React webapp - each source file rendering index.html source

"I have a react web application that builds to a "dist" directory containing all assets. I am using a ELB build with Node.js and nginx, all default settings. The app successfully starts however when I load the page, all of the page assets e.g. js and css files do not render.Inspecting the source of these files, they do not fail to load, however the source of each returns the html source of the home page, rather than their respective css and js contents.This indicates some sort of proxy or rewrite issue im guessing but have no idea how to resolve.Appreciate any guidance.UPDATE: I can see nginx and node running using 80 and 8081 respectivley:tcp        0      0 0.0.0.0:80              0.0.0.0:*               LISTEN      6962/nginx: mastertcp        0      0 0.0.0.0:8081            0.0.0.0:*               LISTEN      7061/nodeFollowComment"

Answer: 0Turns out there was a problem with my react build and the static assets were not being served correctly.CommentSharewonkaanswered 3 years ago


Question: Building Problem when changing LyShine.cpp

"I have done something really simple and it worked. I have added two methods to the LyShineLua to expose to Lua. I know it is not the best practice, but I want to reuse LyShineLua to expose two simple methods just to test a c++ code. It worked. I am using it to copy and paste and I have included #include <windows.h>Now, I am adding a third method. If the method is empty, it works. If I add this code, which loads the next level, it does not compile. The code that is giving me headache is this:CCryAction* pCryAction = CCryAction::GetCryAction();If I comment this line, everything compiles. If I add this line, it does not compile.I have included CryAction in the LyShine.cpp like this:#include "CryAction.h"#include <IConsole.h>#include <LoadScreenBus.h>This is the error I have now:Creating library c:\Amazon\Lumberyard\1.9.0.1\dev\BinTemp\win_x64_vs2015_profile\Gems\LyShine\Code\Gem.LyShine.0fefab3f13364722b2eab3b96ce2bf20.v0.1.0.lib and object c:\Amazon\Lumberyard\1.9.0.1\dev\BinTemp\win_x64_vs2015_profile\Gems\LyShine\Code\Gem.LyShine.0fefab3f13364722b2eab3b96ce2bf20.v0.1.0.expLyShine.cpp.108.obj : error LNK2001: unresolved external symbol "private: static class CCryAction * CCryAction::m_pThis" (?m_pThis@CCryAction@@0PEAV1@EA)c:\Amazon\Lumberyard\1.9.0.1\dev\BinTemp\win_x64_vs2015_profile\Gems\LyShine\Code\Gem.LyShine.0fefab3f13364722b2eab3b96ce2bf20.v0.1.0.dll : fatal error LNK1120: 1 unresolved externalsCould you help me? As you can see I am not a c++ programming...Thank you!Follow"

Answer: "0Accepted AnswerI expose this function to Lua and it is working. I got this from the StarterGame  static void LoadNextLevel(AZStd::string level){CCryAction* pCryAction = static_cast<CCryAction*>(gEnv->pGame->GetIGameFramework());pCryAction->ScheduleEndLevel(level.c_str(), true);}It seems that the way to get the CryAction inside the gem is through the gEnv. I do not know if it is correct, but it is working ;-)SharerePost-User-4308601answered 6 years ago0I've filed a ticket to get some clarification.SharerePost-User-8353690answered 6 years ago0I dont think you are able to link CryAction into LyShine.I think the reason for this, since i've got something similar with CryMovie, is that it's building everything in separate modules that are dynamically loaded so there is no ".lib" file to link against to allow access to another module's code.SharerePost-User-8564951answered 6 years ago0I understand your point, but I see other gems using cryaction (I guess). How is that possible? That is what I need. Any ideas?SharerePost-User-4308601answered 6 years ago0Hi @REDACTEDUSERIt looks like you are trying to reproduce what the CFlowNode_EndLevel FlowGraph node does. It uses a method (ScheduleEndLevel) that is not exposed via an abstract interface. The FlowGraph system can access it because the flow node code is part of CryAction. It sounds like you have a workaround to make it work though (using a cast).Another alternative would be to do what the console command to load a level does. It uses the LoadGame method on CryAction that is exposed through IGameFramework. So you can call it like this:            if (gEnv->pGame->GetIGameFramework()){gEnv->pGame->GetIGameFramework()->LoadGame("levelname");}Alternatively, there is also a static function you can use to avoid the cast in your example:CCryAction::GetCryAction()->ScheduleEndLevel(level.c_str(),true);RobSharerePost-User-4854644answered 6 years ago"


Question: When will CodeGuru support Java 17?

Java 17 code causes CodeGuru review to generate lots of false recommendations including syntax error. Don't see anywhere clearly mentioned what versions of various langs are supported. In any case when will Java 17 support be available?FollowComment


Question: Access denied using Transfer Family with Lambda Identity Provider

"Hi all, I need to create my SFTP service using AWS Transfer Family and Lambda as Identity Provider and S3 as Storage.I created my Lambda function and authentication works but I can't show list of files.My Node.js lambda is:exports.handler = async (event) => {    return {        "Role":"arn:aws:iam::356173882118:role/sftp-access-s3"    }};Identity provider testing response is:{    "Response": "{\"HomeDirectoryType\":\"PATH\",\"Role\":\"arn:aws:iam::356173882118:role/sftp-access-s3\",\"UserName\":\"dasdasd\",\"IdentityProviderType\":\"AWS_LAMBDA\"}",    "StatusCode": 200,    "Message": ""}My role sftp-access-s3 has a policy and a trust relationship:{    "Version": "2012-10-17",    "Statement": [        {            "Action": [                "s3:ListBucket",                "s3:GetBucketLocation"            ],            "Resource": [                "arn:aws:s3:::tecnoin-ftp-bucket"            ],            "Effect": "Allow",            "Sid": "ReadWriteS3"        },        {            "Action": [                "s3:PutObject",                "s3:GetObject",                "s3:DeleteObject",                "s3:DeleteObjectVersion",                "s3:GetObjectVersion",                "s3:GetObjectACL",                "s3:PutObjectACL"            ],            "Resource": [                "arn:aws:s3:::tecnoin-ftp-bucket/*"            ],            "Effect": "Allow",            "Sid": ""        }    ]}{    "Version": "2012-10-17",    "Statement": [        {            "Sid": "",            "Effect": "Allow",            "Principal": {                "Service": "transfer.amazonaws.com"            },            "Action": "sts:AssumeRole"        }    ]}I can connect successfully with my ftp client but then i can't see the files. I receive this error:Permission denied.Error code: 3Error message from server (US-ASCII): Access deniedOn cloud Watch:luca.1e5bad7f45e09f0b CONNECTED SourceIP=165.225.202.99 User=luca HomeDir=/ Client=SSH-2.0-WinSCP_release_5.17.10 Role=arn:aws:iam::356173882118:role/sftp-access-s3 UserPolicy="{\"Version\": \"2012-10-17\",\"Statement\": [  {\"Action\": [  \"s3:ListBucket\",  \"s3:GetBucketLocation\"],\"Resource\": [  \"arn:aws:s3:::tecnoin-ftp-bucket\"],\"Effect\": \"Allow\",\"Sid\": \"ReadWriteS3\"  },  {\"Action\": [  \"s3:PutObject\",  \"s3:GetObject\",  \"s3:DeleteObject\",  \"s3:DeleteObjectVersion\",  \"s3:GetObjectVersion\",  \"s3:GetObjectACL\",  \"s3:PutObjectACL\"],\"Resource\": [  \"arn:aws:s3:::tecnoin-ftp-bucket/*\"],\"Effect\": \"Allow\",\"Sid\": \"\"  }]}" Kex=ecdh-sha2-nistp256 Ciphers=aes256-ctr,aes256-ctrluca.1e5bad7f45e09f0b ERROR Message="Access denied"Could you please support me to solve the issue?ThanksFollowComment"

Answer: "0Hello luk3tt0@,Looking at the Test-IdentityProvider output, I don't see the HomeDirectory Field present. This would imply HomeDirectory as /. Further, the log snippet from CloudWatch also mentions the same: User=luca HomeDir=/.When HomeDirectory is /, User lands in root of S3 where an ls operation lists all the buckets in their account. Since the permissions that you shared don't include s3:ListAllMyBuckets permission for Resource: * the operation returns Access Denied correctly. To resolve this:Either update the User configuration to include the HomeDirectory Field to which you have granted permissions.Or if you want to be able to list all buckets you have in your account, update the IAM Role permissions to have s3:ListAllMyBuckets for Resource: *.Let me know if you have any other questions.-- Sagar.CommentShareEXPERTsagarb-awsanswered 7 months ago"


Question: "multi container server - best and easiest way to scale, upgrade, etc."

"Afternoon all.   We have a project that as the title said, the developers will do their magic, then push a docker image up to ECR.   The initial test was all manual, ran a few containers on different ports, manually setup the listeners and all good.So the next step it to automate.  I want to let them update the ECR/docker image and once done have that update the servers one at a time the way my current code-deploy works.  I am trying to read and understand the difference or benefits to using a ECS cluster vs an Elastic Beanstalk as well as understand a bit more from the high level as I am going to need redundancy, autoscaling, etc.So, a brief answer on where to start with what would be great, but basically I need to create a service that starts X amount of docker containers per instance, then they get added to the target group / ELB.Thanks for the advice!FollowComment"

Answer: "0Hello.On the ECS vs E-Beanstalk front, I much much prefer ECS, and would recommend it anyday over Beanstalk.Now you could use AWS AppRunner these days which might allow to do something simple for you to have you and your devs have a very easy way to update the services.However, shamelessly "selling" my own thing: we at work use ECS Compose-X which is a CLI tool like ecs-cli v1 / copilot and AppRunner: you use docker-compose syntax (which your devs can rely on given it is a very well known, widely used tool and specification) to have your services (environment variables, images, build, compute resources (RAM/CPUs)) and you define with extension fields what AWS resources you want your service to have access to (S3, SNS etc.).On top of that, it allows you to simply define Load Balancers and point the traffic to the services.It also is going to allow to define autoscaling, monitoring, alarms etc. for your services.And most important: it is going to ensure as much as possible that all settings, options etc. are valid for a successful deployment to AWS.When using docker-compose locally, all these extensions (x-) are ignored, but when running ecs-compose-x, everything is taken into account to create the CFN templates that will allow to deploy everything (services, DBs, LBs etc.) to AWS. This allowed our devs to very quickly iterate on development and testing, and gives them consistency on deployment to AWS.You can find examples and guides in the labs and there are new blog posts with full CICD walkthroughs coming in soon.Hope this helps.CommentShareJohnPrestonanswered a year ago0@John - Thanks for the detailed feedback.    No same in selling anything as you included plenty of other info :)But yes, basically they have their docker and we want to have X servers running, each with 5 containers (for example).  Then update that container, commit it and have things nicely get updated one by one.   So I am going to look at Apprunner, I didn't really consider beanstalk but watching video after video and reading to try to logically understand how things fit.The server is fine, the containers each start with a custom port range the the ELB has to listen to and want as much automation as possible, really taking me out of the loop once its setup, so I am going to look at both app runner as well as your thing.Thank you again for the direction.CommentSharelraymondanswered a year ago"


Question: AWS Certificate Manager re-issuing certificate

"We have many customer certificates issued by Certificate Manager. One of these certificates appears to have been re-issued. The certificate in question was valid from 8/26/2022-9/24/2023. Now it is valid from 2/24/2023-9/24/2023. This caused some issues with our customer.I checked CloudTrail and no one from our organization made any changes. I haven't seen any notification from AWS about this.The certificate transparency logs still shows the original certificate and hasn't been revoked.I'm just curious how and why this happened.FollowCommentJoseph D 3 months agoSimilar issue. Client does some form of cert-pinning, their process that connects to our Elastic Beanstalk application is now broken until we walk them through getting new cert downloaded and installed.Old cert valid 2022-06-03 to 2023-07-30New cert valid 2023-02-27 to 2023-07-30Not seeing any bulletin about this happening. Looks like the intermediate CA changed? Old one says "Amazon", new one says "Amazon RSA 2048 M01"EDIT: Whoops, found an email and article about it, clear as day: https://aws.amazon.com/blogs/security/amazon-introduces-dynamic-intermediate-certificate-authorities/Share"

Answer: "2Accepted AnswerFound an email dated Jan 14th of this year that notified us about the cert migration. More info found here:https://aws.amazon.com/blogs/security/amazon-introduces-dynamic-intermediate-certificate-authorities/CommentShareJoseph Danswered 3 months agoEXPERTBrettski-AWSreviewed 3 months agobt-drewmat 3 months agoYes, that must be why. Thanks!Share"


Question: How to find dependent contact flows in AWS Connect that is utilizing a specific feature ?

Is there an easy way to find the list of contact flows using a particular Module or list of contact flows using a particular 'Hours of operation'  with any search option?FollowComment

Answer: "0So nothing out of the box, but you might be able to do it via the API (https://boto3.amazonaws.com/v1/documentation/api/latest/reference/services/connect.html). One option is to look at the describe_contact_flow endpoint. You'll get the content from each flow and then you can find references via ARN to see which script is using what module or what hours of operations. I've done something similar, but not related to flows. In my use case I find what queue is using which quick connects.davidCommentSharedmaciasanswered 9 months agoEXPERTAWS-samfredreviewed 2 months agoCloud9 9 months agoThank you for the reply. Does this mean we have to manually search for 500 ARNs when we have output from a 500 call flows after running that API ? May I know how we can request AWS to develop a feature to find dependencies of a component in Connect ?ShareAWS-samfred EXPERT2 months agoHi Cloud9, while this is still not out of the box functionality, it can be easier to comprehend contact flow dependencies using Infrastructure as Code technologies. Since the ARN's referenced in contact flows would be tokens that refer to constructs in whatever solution you are using (Terraform, CDK, etc), you can use native functionality or third-party plugins of that tool to generate a dependency graph. A good start solving for this would be the ContactFlow CloudFormation resource: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-connect-contactflow.htmlShare"


Question: RDS Database Stuck in "Creating" Status for Days after Aurora Upgrade

"We recently attempted the AWS Aurora 2 (MySQL 5.7) -> Aurora 3 (MySQL 8) upgrade process described here: https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/AuroraMySQL.Updates.MajorVersionUpgrade.html#AuroraMySQL.Updates.MajorVersionUpgrade.2to3It was successful for two of our dev environments. When we attempted to restore the Production Aurora 2.0/MySQL 5.7 snapshot in the MySQL 8.0 engine however, the creation process became stuck in the "Creating" state.We attempted a second restore of the snapshot with the same results. We now have two Aurora 3.0 clusters in the "Creating" status, and they have remained this way for 3 days. We cannot delete, disable or modify these instances in any way.Is there anything we can do to remove or recover these trapped instances?Why might this bad restore happen? Our production DB isn't large - <1GB in size. It's only marginally older than our other environments.Any help here would be much appreciated!FollowComment"

Answer: "0Accepted AnswerThe RDS team were able to resolve this for us:For an Aurora MySQL version 2 cluster that uses backtrack, currently you can't use the snapshot restore method to upgrade to Aurora MySQL version 3. This limitation applies to all clusters that use backtrack, regardless of whether the backtrack setting is turned on. In this case, perform a logical dump and restore by using a tool such as the mysqldump command.CommentShareCallum Stradosanswered a year ago0Just encountered the same thing, would be nice if the AWS API rejected restoring from a snapshot that had backtrack enabled. Now we've got a cluster stuck in creating.Can someone at AWS please delete the cluster qwertee-issue-3434 that's stuck on our account?CommentShareAWS-User-9657330answered a year agoAWS-User-9657330 a year agoThe cluster has vanished, don't know if someone intervened or if it was just some automated removal but at least it's gone!Share"