Question: ACM validation is not been issued.

"hi, i have requested for aws public certificate for ssl but it is not validating. So i have been deleted the old request and requsted for new one but it is also not validating. can anyone help with this issue. Please....FollowComment"

Answer: "0Have you verified your certificate by following these steps?https://docs.aws.amazon.com/acm/latest/userguide/dns-validation.html#setting-up-dns-validationCommentShareEXPERTRiku_Kobayashianswered 2 months ago0Hi,depends if you use DNS or email validation.For Email you can try this: https://repost.aws/knowledge-center/acm-email-validation-custom.For DNS: https://docs.aws.amazon.com/acm/latest/userguide/troubleshooting-renewal.html.Hope it helps ;)CommentShareEXPERTalatechanswered 2 months ago"


Question: How can I monitor and address fragmentation issues on RDS for Oracle database?

"Hi,I'm planning to migrate my database from on-premises to RDS for Oracle. However, I'm not sure if Amazon RDS supports tools such as Automatic Fragment Advisor or the Automatic Segment Space Management feature of Oracle to control fragmentation issues. Can you help me confirm this?FollowComment"

Answer: "1Amazon RDS for Oracle does not support the Automatic Fragment Advisor or the Automatic Segment Space Management feature of Oracle. However, RDS provides monitoring tools that can help you identify and address fragmentation issues.One of the tools that RDS provides is the Oracle SQL monitoring feature, which allows you to monitor the SQL statements that are being executed on your database. This can help you identify SQL statements that are causing fragmentation issues, such as large insert or update statements. You can also use the Amazon RDS Performance Insights feature to monitor database performance and identify any performance bottlenecks.In addition, you can use the Oracle Analyze Table command to gather statistics on table and index objects, which can help you identify fragmentation issues. You can also use the Oracle Segment Advisor to identify segments that are candidates for defragmentation.It's important to note that Amazon RDS takes care of many of the administrative tasks associated with managing an Oracle database, such as backups, software patching, and hardware maintenance. However, it's still your responsibility to monitor the performance of your database and address any issues that arise.CommentSharehashanswered a month agoTrinh Vinh Phu a month agoThank you very much for answering the question in detail. I still have one point to confirm, which is whether Automatic Segment Space Management is supported on RDS or not? And if it is supported, will there be any additional costs incurred?According to Oracle documentation, this feature is mentioned on slide 63 in this link: https://docs.oracle.com/en/database/oracle/oracle-database/19/tgdba/database-performance-tuning-guide.pdf"Permanent Tablespaces - Automatic Segment-Space ManagementFor permanent tablespaces, Oracle recommends using automatic segment-spacemanagement. Such tablespaces, often referred to as bitmap tablespaces, are locallymanaged tablespaces with bitmap segment space management."And a member on the dba forum also confirmed that it is supported by default for all new permanent, locally managed tablespaces:https://dba.stackexchange.com/questions/326494/how-can-i-monitor-and-address-fragmentation-on-rds-for-oracle-databaseShare"


Question: Having trouble to delete CloudFormation

"I have trouble deleting AWS stack, using both java SDK and AWS cli.MVP:AWSTemplateFormatVersion: "2010-09-09"Metadata:    Generator: "former2"Description: ""Resources:    EC2KeyPair:        Type: "AWS::EC2::KeyPair"        Properties:            PublicKeyMaterial: "foo"            KeyName: "bar"            KeyType: "rsa"Deletion attempt KeyPair throws internal error and ends with DELETE_FAILED. After attempting to delete resource for the second time it is succesfull (resource has been fully initalized before first attempt).Deletion is attempted with least access rights possible (ec2:* ,cloudformation:* ... ), when attempted with admin access delete works on first try.FollowComment"

Answer: "0Hi ThereIs this key attached to an EC2 instance?  is it possible the EC2 instance is not fully terminated before you are attempting to delete the key?CommentShareEXPERTMatt-Banswered 8 months agoladaDokoupi 8 months agothere is no EC2 instance being created. YAML snippet from question can be uploaded as is using aws cloudformation  deploy  commandShare0When deletion fails (usually 3 after attempts that take a while),  on some resources, the Cloudformaiton stack will delete successfully, even though the reasouce is still there.If it works with admin, but not with the least privileges role, you correctly assume that this is IAM related.Usually Cloudformaiton to needs read (ec2:Get*, ec2:List*, ec2:Describe*) permission and manage tags (ec2:DeleteTags and ec2:CreateTags) not only the ec2:DeleteKeyPair permission.Hope it helps!CommentShareCarl Ostrandanswered 8 months agoladaDokoupi 8 months agoFor me it always succeeds on second attempt. After adding kms:* I managed to delete stack on first attempt, but I couldn`t find mention about needing those in https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonec2.htmlShare"


Question: What is the Lambda invocation priority when dealing with different triggers?

Say I have a lambda handler that is able to process sqs queue invocations and also lambda-to-lambda invocations.The lambda has a max concurrency limit of 10.Let's say there is a period of time where the concurrency of the lambda is maxed out due to the high volume of sqs queue messages that are processing.What happens where there is a lambda-to-lambda invocation in the middle of sqs queue messages being processed and maxing out the concurrency limit? Is the AWS CLI invocation handled after all the messages in the queue are processed? Or does the lambda try to process that invocation at the next available instance?FollowComment

Answer: "0There is no specific priority. The behavior depends on invocation type.For Asynchronous invocation, the invocation event is added to an internal queue. We then process all the messages in the internal queue. If we try to invoke a function and it already at its limit, we will retry the invocation.For synchronous invocations (e.g., CLI), if we are at the limit, we return an error. It is up to the client to retry.For poll based invocations (e.g., SQS), there is a fleet of pollers reading from the queue and trying to invoke the function synchronously. If at the limit, the pollers will retry.In your case, we can't really tell. It is really timing.CommentShareEXPERTUrianswered 3 months agoAdam-Hoelscher 2 months agoHey Uri. I'm hoping you can confirm my understanding of what you said here. You say that Lambda has an internal queue. Is that internal queue always prioritized over other source (e.g. SQS). So if I make an Asynchronous invocation and the function is below its limit, that event starts immediately? If I make an Asynchronous invocation and the function is already at its limit, it will be run before events from SQS when a concurrency unit becomes available?ShareUri EXPERT2 months agoNo. There is no notion of priority. If you have a message in the internal queue (async invocation) and a message in an SQS queue, and maybe also some sync invocation from API gateway, and let's assume that one instance becomes available, the first to catch it wins.Share"


Question: When will  Amazon Timestream come to the London region?

"I've been waiting since 2020 when it was available in Ireland, any idea when we can expect it in London region?FollowComment"

Answer: "-2Hello,I do not have any ETA on when Amazon Time-stream will available in London region. But I urge you to keep an eye on the following.https://aws.amazon.com/blogs/database/category/database/amazon-timestream/https://docs.aws.amazon.com/timestream/latest/developerguide/doc-history.htmlhttps://aws.amazon.com/new/ -- Whats new will have the 2023 announcements & that would be the best place to keep an eye on.I hope this helps. Thank you for using AWS.CommentShareSUPPORT ENGINEERAWS-User-Chiraganswered 5 months agorePost-User-7838616 5 months agoI have been keeping an eye since 2020, when the blog entry said other regions to follow in coming months, it's been 24+ months since September 2020!!!!"Amazon Timestream is available today in US East (N. Virginia), US East (Ohio), US West (Oregon), and EU (Ireland), with availability in additional regions in the coming months. To get started with Amazon Timestream, visit our product page."Share"


Question: AI used for recognizing emojis on wallpaper

"I want to build an app that will recognize what emojis have been used on the wallpaper.So for instance this app will receive an input image like thisAnd on output should return an array of names of recognized emojis:[  "Smiling Face with Sunglasses",   "Grinning Face with Smiling Eyes",   "Kissing Face with Closed Eyes"]Of course, the names of these emojis will come from the names of files of training images.For example, this file, will be called Grinning_Face_with_Smiling_Eyes.jpgI would like to use AWS Rekognition Label, but they require a minimum of 10 images of each emoji for training.As you know, I can only provide one image of each emoji, because there is no more option, they are in 2D ;)Now my question is:What should I do? How can I skip these requirements? Which service should I choose?On the stack, I have read that I should for instance rotate each image 12 times by 30o, or crop the emoji by half. I have done that, but, precision is very small - around 0.3PS. In real business instead of emojis, there are covers of the books, which AI has to recognize. There is also one image per book-cover photo in 2D.FollowComment"

Answer: "0You have to train an AI with the same material it'll be used to classify, not something close. In this case you need to train it with "emoji on wallpaper" not just "emoji"So you'll need a library of images that you'd normally classify with the AI, that a human has manually classified, and use those to train it.CommentShareAWS-User-1967277answered a year agodev a year agoI have around 1200 different types of emojis. On each wallpaper can be any combination of any length of emoji. So it will be very hard to prepare these wallpapers. Do you have any idea? How can I solve this?Share0Rotation is a good start, but you might want to go for more robust transformations and a more robust model based on fine-tuning. It really depends on what you plan to feed it later - how much variability there will be in the images you expect to do inference on.This blog talks about transfer learning / fine-tuning and could be helpful. https://aws.amazon.com/blogs/machine-learning/run-image-classification-with-amazon-sagemaker-jumpstart/Then take a look at the methods described here for data augmentation: https://www.tensorflow.org/tutorials/images/data_augmentationGood luck!CommentShareaaronmarkham-AWSanswered a year agodev a year agoWhat do you mean by more robust transformations? I plan to feed it with wallpapers, that are similar to this in question.Share"


Question: Give employee access to S3.

"Hello,I am trying to give a employee in my company access to S3 and he keeps getting the following error,is not authorized to perform: access-analyzer:ListPolicyGenerations on resource: arn:aws:access-analyzerI have already given AmazoS3FullAccess permission.What other permissions do I need to give?ThanksFollowComment"

Answer: "0Here's some documentation on setting up permissions for access analyzer.  Let me know if this helps.  https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-policy-generation.htmlCommentSharejschwar313answered a year ago0Hi!Where is your employee seeing the access-analyzer:ListPolicyGenerations error?  Is this in console on S3?  Some services in AWS (Including S3) use access-analyzer to analyze properties such as if an S3 bucket is public: https://s3.console.aws.amazon.com/s3/access?region=us-east-1.  The error your employee may be seeing may be a general warning banner on the S3 service - but should not interfere if your employee is only trying to manage an S3 bucket and the objects within.It depends on what your employee is trying to do and how you have S3 configured.If the bucket is encrypted, ensure the KMS Keys also grant appropriate permissions (KMS Key policies if Customer Managed) and IAM Permissions as needed.If they're trying to fully manage S3, S3FullAccess will work, but keep in mind this includes permissions such as PutAccountPublicAccessBlock which can change the account setting for public access blocking on the account (and S3).I sometimes recommend attaching an AWS Managed Policy that grants read permissions if they are in console such as arn:aws:iam::aws:policy/ReadOnlyAccess (This includes some access-analyzer permissions and can immediately unblock you).  Keep in mind that this can provide data access, so it may make senseKeep in mind that some companies and AWS administrators even believe AmazonS3FullAccess to be over-permissive and choose to do more scoping on resources as well.CommentSharejsoncanswered a year ago"


Question: CLI: User pool update with cli-input-json fails validation with fine JSON

"Hello,trying to execute an user pool update with parsable and valid JSON file via CLI usingaws cognito-idp update-user-pool --user-pool-id AWSRegion_PoolID  --cli-input-json file://./input.jsoncommand, I got as validation errorParameter validation failed:Unknown parameter in AdminCreateUserConfig: "TemporaryPasswordValidityDays", must be one of: AllowAdminCreateUserOnly, UnusedAccountValidityDays, InviteMessageTemplatebut can't figure out what's wrong in input JSON...The following is an excerpt  "AdminCreateUserConfig": {    "InviteMessageTemplate": {      "EmailMessage": "Il nome utente è {username} e la password temporanea è {####}. ",      "EmailSubject": "La tua password temporanea",      "SMSMessage": "Il nome utente è {username} e la password temporanea è {####}. "    },    "UnusedAccountValidityDays": 14,    "AllowAdminCreateUserOnly": false  }so TemporaryPasswordValidityDays is not specified here.I could have miss something, but can't figure out what... can someone help or give any advice? TYFollowComment"

Answer: "1Since I was using v1 AWS CLI, I thought that using v2 could have a passed validation, so I upgraded.Now, using the same update command, I gotAn error occurred (InvalidParameterException) when calling the UpdateUserPool operation: Please use TemporaryPasswordValidityDays in PasswordPolicy instead of UnusedAccountValidityDayswith   "PasswordPolicy": {     "RequireNumbers": true,     "RequireLowercase": true,     "RequireSymbols": false,     "RequireUppercase": true,     "TemporaryPasswordValidityDays": 14,     "MinimumLength": 8   }, so the issue seems again about TemporaryPasswordValidityDays just changed a little.This thing started puzzling me a lot... by comparing update skeleton or even reading AWS CloudFormation reference for AWS::Cognito::UserPool PasswordPolicy https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpool-passwordpolicy.html we are allowed to use TemporaryPasswordValidityDays.Comparing for what is raised on error, the only occurence for UnusedAccountValidityDays is in another part of the file "AdminCreateUserConfig": {   "UnusedAccountValidityDays": 14,   "AllowAdminCreateUserOnly": false,   "InviteMessageTemplate": {     "EmailSubject": "AIR - La tua password temporanea",     "SMSMessage": "Il nome utente è {username} e la password temporanea è {####}. ",     "EmailMessage": "Il nome utente è {username} e la password temporanea è {####}."   } },that I can see still valid at https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpool-admincreateuserconfig.html as AWS CloudFormation reference.So now I start doubting about validation...The side questions are now: What is the purpose of validation that raises error when input is fine? Is it possible to skip this kind of validation?ThanksCommentSharealessioanswered 3 years ago1I tried mixed configurations and in the end I got a successful update by deleting AdminCreateUserConfig.UnusedAccountValidityDaysCommentSharealessioanswered 3 years ago"


Question: AI solution for Game Dev

Any expert that is familiar with the AI topics for QA Automation and Rendering optimization?FollowComment


Question: Route53 fixed order

HiTell me how can I make a "fixed order" for the record in route53?ThanksFollowComment

Answer: "0I am sorry, but I am not sure I am understanding your question correctly.I am sorry to guess, but are you asking for a fixed order for the order in which records are displayed in the Route 53 console?Here is a screenshot of the Route 53 console for my account.For example, do you want the order in which records are displayed from A records to CNAME records to be in a fixed order?CommentSharemn87answered 8 months agoNolf 8 months agoA bit differentWhen I create an A record in DNS like test.domain.com with multiple IPs(1.1.1.1, 2.2.2.2, 3.3.3.3)when i make a request nslookup test.domain.com, every time IPs will be swapped round-robin.first1.1.1.1, 2.2.2.2, 3.3.3.3second2.2.2.2, 3.3.3.3, 1.1.1.1third3.3.3.3, 2.2.2.2, 1.1.1.1etcI need them to be displayed in a constant sequence.So that all requests are the samefirst1.1.1.1, 2.2.2.2, 3.3.3.3second1.1.1.1, 2.2.2.2, 3.3.3.3third1.1.1.1, 2.2.2.2, 3.3.3.3etcIn bind9, this situation is called fixed orderFrom something like thisSharemn87 8 months agoThank you for the detailed explanation.I looked again and found the following Stack Overflow hit. [1][1] amazon route53 - DNS - fixed IP order based on geo-location - Stack Overflowhttps://stackoverflow.com/questions/55375622/dns-fixed-ip-order-based-on-geo-locationFrom reading the Stack Overflow, it does not seem possible to achieve your request with Route 53.Share"


Question: xgboost sagemaker batch transform job output in multiple lines

"Hello,I've just trained a churn prediction model with XGBoost algorithm, based on the SageMaker example notebooks.  I've created SageMaker batch transformation jobs using this model using input from CSV file with multiple records, however the output file is a single record CSV containing all the inferences in a single comma separated row.  The result is that I'm not able to use the "Join source" feature with "Input  - Merge input data with job output" since the input and output files must match the number of records. I've tried with different batch job configurations but I always get the same single line output file.Do you know if is there any configuration that allows me to merge input and output in order to have a direct association between an input column with its inference result? Is this a restriction from the XGBoost algorithm built-in implementation?FollowComment"

Answer: "0Accepted AnswerSounds like a configuration issue, this algorithm should be able to output proper output CSVs.Are you using accept="text/csv" and assemble_with="Line" on your Transformer? Is your strategy set to SingleRecord or MultiRecord?And split_type="Line", content_type="text/csv" on the .transform() call?I have had custom algorithms accidentally output row vectors instead of column vectors for multi-record batches in the past (because they gave a 1D output which the default serializer interpreted as a row), but not built-in algorithms.Dropping to SingleRecord could be a last resort (forcing Batch Transform itself to handle the serialization), but would decrease efficiency/speed.CommentShareEXPERTAlex_Tanswered 3 years ago"


Question: Accessing S3 bucket from Lambda

"Hi,I am trying to write to S3 bucket from a Lambda function after setting up the required permissions & roles but I am getting the below error:"errorMessage": "An error occurred (AccessDenied) when calling the PutObject operation: Access Denied",Below is my policy file and I have assigned the associated role in Lambda function execution role. Any pointers on what I am missing here, would be really helpful. Thanks.{     "Version": "2012-10-17",     "Statement": [         {             "Sid": "VisualEditor0",             "Effect": "Allow",             "Action": [                 "s3:PutAnalyticsConfiguration",                 "s3:PutAccessPointConfigurationForObjectLambda",                 "s3:GetObjectVersionTagging",                 "s3:DeleteAccessPoint",                 "s3:CreateBucket",                 "s3:DeleteAccessPointForObjectLambda",                 "s3:GetStorageLensConfigurationTagging",                 "s3:ReplicateObject",                 "s3:GetObjectAcl",                 "s3:GetBucketObjectLockConfiguration",                 "s3:DeleteBucketWebsite",                 "s3:GetIntelligentTieringConfiguration",                 "s3:PutLifecycleConfiguration",                 "s3:GetObjectVersionAcl",                 "s3:DeleteObject",                 "s3:CreateMultiRegionAccessPoint",                 "s3:GetBucketPolicyStatus",                 "s3:GetObjectRetention",                 "s3:GetBucketWebsite",                 "s3:GetJobTagging",                 "s3:GetMultiRegionAccessPoint",                 "s3:PutReplicationConfiguration",                 "s3:GetObjectAttributes",                 "s3:PutObjectLegalHold",                 "s3:InitiateReplication",                 "s3:GetObjectLegalHold",                 "s3:GetBucketNotification",                 "s3:PutBucketCORS",                 "s3:DescribeMultiRegionAccessPointOperation",                 "s3:GetReplicationConfiguration",                 "s3:PutObject",                 "s3:GetObject",                 "s3:PutBucketNotification",                 "s3:DescribeJob",                 "s3:PutBucketLogging",                 "s3:GetAnalyticsConfiguration",                 "s3:PutBucketObjectLockConfiguration",                 "s3:GetObjectVersionForReplication",                 "s3:GetAccessPointForObjectLambda",                 "s3:GetStorageLensDashboard",                 "s3:CreateAccessPoint",                 "s3:GetLifecycleConfiguration",                 "s3:GetInventoryConfiguration",                 "s3:GetBucketTagging",                 "s3:PutAccelerateConfiguration",                 "s3:GetAccessPointPolicyForObjectLambda",                 "s3:DeleteObjectVersion",                 "s3:GetBucketLogging",                 "s3:RestoreObject",                 "s3:GetAccelerateConfiguration",                 "s3:GetObjectVersionAttributes",                 "s3:GetBucketPolicy",                 "s3:PutEncryptionConfiguration",                 "s3:GetEncryptionConfiguration",                 "s3:GetObjectVersionTorrent",                 "s3:AbortMultipartUpload",                 "s3:GetBucketRequestPayment",                 "s3:GetAccessPointPolicyStatus",                 "s3:UpdateJobPriority",                 "s3:GetObjectTagging",                 "s3:GetMetricsConfiguration",                 "s3:GetBucketOwnershipControls",                 "s3:DeleteBucket",                 "s3:PutBucketVersioning",                 "s3:GetBucketPublicAccessBlock",                 "s3:GetMultiRegionAccessPointPolicyStatus",                 "s3:PutIntelligentTieringConfiguration",                 "s3:GetMultiRegionAccessPointPolicy",                 "s3:GetAccessPointPolicyStatusForObjectLambda",                 "s3:PutMetricsConfiguration",                 "s3:PutBucketOwnershipControls",                 "s3:DeleteMultiRegionAccessPoint",                 "s3:UpdateJobStatus",                 "s3:GetBucketVersioning",                 "s3:GetBucketAcl",                 "s3:GetAccessPointConfigurationForObjectLambda",                 "s3:PutInventoryConfiguration",                 "s3:GetObjectTorrent",                 "s3:GetStorageLensConfiguration",                 "s3:DeleteStorageLensConfiguration",                 "s3:PutBucketWebsite",                 "s3:PutBucketRequestPayment",                 "s3:PutObjectRetention",                 "s3:CreateAccessPointForObjectLambda",                 "s3:GetBucketCORS",                 "s3:GetBucketLocation",                 "s3:GetAccessPointPolicy",                 "s3:ReplicateDelete",                 "s3:GetObjectVersion"             ],             "Resource": "arn:aws:s3:::<my-bukcet-name>"         },         {             "Sid": "VisualEditor1",             "Effect": "Allow",             "Action": [                 "s3:GetAccessPoint",                 "s3:GetAccountPublicAccessBlock",                 "s3:PutStorageLensConfiguration",                 "s3:CreateJob"             ],             "Resource": "*"         }     ] } Regards,dbeingsFollowComment"

Answer: "1Accepted AnswerHi.To start, this seems like way too many permissions that your Lambda function does not need. At all.I would encourage you to remove 90% of the permissions that are set here.With that said, assuming your policy does not actually read <my-bucket-name> in the resource, two things:For bucket level actions, having arn:aws:s3:::<bucket-name> is fine, but for objects, you need to indicate the path.For example, for all objects in the bucket, you would have arn:aws:s3:::<bucket-name>/*Also note that if you are encrypting files in the bucket with a CMK (a KMS key that you created manually yourself, not the aws/s3 one), you need to provide the services (lambda, scripts etc.) also with access to that KMS key in order to manipulate the encryption of the files (encrypt or decrypt or both).Hope this helps.CommentShareJohnPrestonanswered 9 months agodbeing 9 months agoThanks a lot. Adding object level permission to resource fixed this as below:"Resource": ["arn:aws:s3:::<my-bucket-name>","arn:aws:s3:::<my-bucket-name>/*"]On broad level of permissions, these are auto-generated when I selected read and write permission on the console for Lambda access to S3. Thanks, will check on this.Regards,dbeingShare"


Question: fs.statSync() isn't giving actual BirthTime of the EFS file

"I am using fs (Node Module) to manage files. I am getting the file's created time (BirthTime). It is working absolutely fine when I run this app on my local machine. But when I try to implement it on EFS using NodeJs Lambda function then it gives 1970-01-01T00:00:00.000Z which is not the actual time of the file that I created.var efsDirectory = "/mnt/data/";var filePath = path.join(efsDirectory, file);console.log("This file is going to be executed :", file);var response = fs.statSync(filePath);let fileBirthTime = response.birthtime;console.log("File path is : ", filePath);After joining the path my filepath looks like this filepath = /mnt/data/172.807056.json which is the actual path of the file.In the Cloudwatch logs I am getting this :On the local machine, it is working fine and giving the actual file birthtime. Can you tell me guys why I am getting this? All other values like ctime, atime, mtime are created properly except birthtime? This behavior is only when I play with files on EFS.FollowComment"

Answer: "0Accepted AnswerYou are getting this result with birthtime, as it is not supported on most NFS filesystems like EFS. Even on Linux OSes it depends on the kernel and type of file system as to whether this field is supported. The default file system on Amazon Linux 2 on EBS doesn't return a value to birthtime. However with the latest Ubuntu image, it is supported. This is why you would be seeing a difference between running it locally and against EFS.CommentShareSteveanswered 4 months ago"


Question: Where's the documentation about Cognito User Pools as Open ID Connect (OIDC) providers by themselves?

"Official Cognito documentation says a lot about how to federate other OIDC providers in a user User Pool, but I cannot find proper documentation explaining how to use the User Pool as an OIDC provider by itself. This is for scenarios where Clients will authenticate against the Cognito User Pool with the OIDC protocol without involving any other Identity Providers.It seems to be compatible, for the following endpoint exists:https://cognito-idp.<region>.amazonaws.com/<user pool id>/.well-known/openid-configurationWhere's the documentation for that?I can only find third-party articles about this, but no proper documentation from AWS.FollowComment"

Answer: "0Accepted AnswerHi,Here is the documentation for cognito oauth2 endpoints, this blog post also describes the supported oauth2 flows with Cognito and this recording has a basic demo of creating an OpenID provider with Cognito and testing the basic flows from Postman.CommentShareEXPERTMahmoud Matoukanswered a year agoGabriel Oliveira a year agoI submitted some feedback via GitHub. The fact that it supports OIDC should be displayed more prominently and at a higher level in the page tree. It was difficult to find it without asking.Share"


Question: Traffice cons on AWS

"Hi, I would like to know traffic cost on AWS.Bellow situation, will traffic cost  be free or will cost ?EC2 instance to S3 (same region, not use endpoint)S3 to EC2 instance (same region, not use endpoint)Thank you.FollowComment"

Answer: "1In general, data transfer between Amazon EC2 instances and Amazon S3 within the same AWS Region is not subject to data transfer fees.So therefore, in your scenario where the EC2 instance and S3 bucket are in the same region and you are not using any endpoint, there will be no data transfer costs for traffic between the two services.Also it is important to note that other factors such as data transfer between other AWS regions, the use of AWS PrivateLink, or data transfer out of AWS may incur data transfer fees. You can check the AWS documentation for more information on data transfer pricing.CommentShareAWS_Guyanswered 3 months ago"


Question: How long does a GameLift GameSession last?

I've looked through the docs pertaining to "GameSession" but there is no definitive answer on how long they can last for. Does anyone here know? Thanks.FollowComment

Answer: 0The reasons I know of where the game session can be interrupted is by a scale down event and instances terminating. A game session can also be terminated if there is an application crash or there is a network connectivity issue. You can read more about hosting capacity here https://docs.aws.amazon.com/gamelift/latest/developerguide/fleets-manage-capacity.htmlCommentShareTolisanswered 4 months ago


Question: Monitoring EMR job status

"A customer wants to monitor EMR job status. They want to get a detailed picture of some jobs that runs longer time than normal, which impacts their daily work. Where can they view this information?FollowComment"

Answer: "0Accepted AnswerEMR supports enhanced debugging, with logs stored in S3.https://docs.aws.amazon.com/emr/latest/ManagementGuide/emr-enhanced-step-debugging.htmlhttps://docs.aws.amazon.com/emr/latest/ManagementGuide/emr-manage-view-web-log-files.htmlFurthermore, if you are also running YARN, you can view application history and metrics.https://docs.aws.amazon.com/emr/latest/ManagementGuide/emr-cluster-application-history.htmlCommentSharerabinonanswered 5 years ago"


Question: "RDS Aurora does not start an instance that I had stopped, it has status starting and does not let me do anything"

"I tried to start an instance in RDS, but it kept starting and never stopped.Now I can't delete it or do anything. What should I do? Has anyone ever experienced this?It's been more than 10 hours since it started.I don't know how to solve. I want to delete this RDS, but I can't.And I don't have a support plan.FollowComment"

Answer: "0Hi farnetani,From the notes, I understand that your instance kept starting, but never stopped and now you want to delete it.Please correct me if my understanding is wrong.You can start by checking the logs from your console, to get more information on what went wrong with the instance. Please note to delete your instance it has to be in available state first, depending on the size of the DB it takes up to 20 minutes for it to be available.Note that can also use your CLI to delete your instances if you can't access it from the console. Click the link[1] below on ways to delete your instances. For further assistance you can contact AWS Customer Support to review/validate or to get your instance available.For more information on troubleshooting the issue.I hope the above is helpful.Reference links:[1]https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_StopInstance.html[2]https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_DeleteCluster.htmlCommentShareWinnieanswered a year ago"


Question: How to hide a parameter group based on another parameter's value?

"I want to hide a parameter group based on another parameter's value, is this possible in AWS CloudFromation?For example, user can select install product A or product B, when product A selected, I don't want to display product B related parameters. I've tried condition but it doesn't work.FollowComment"

Answer: "0Accepted AnswerUnfortunately, you cannot hide parameters. Instead, you can use optional parameters. When users use product A, they need not enter the parameters for product B. Also, you can note a comment as "optional" to the parameters.amazon web services - AWS CloudFormation Template : How to hide parameter? - Stack OverflowCommentSharejhashimotoanswered 4 months ago0One more question, if hide is not possible, how about dynamically adding things? Like only add product A related parameters when product A is selected.CommentShareYan Fen Guoanswered 4 months agojhashimoto 4 months ago@Yan Fen GuoUnfortunately, CloudFormation doesn't have dynamic parameter addition.ShareYan Fen Guo 4 months agoOK, thank you for your confirmation.Share0Thank you @jhashimoto for your answer, so sad to know this, we have more than a hundred parameters and can't hide part would make it super hard to consume.CommentShareYan Fen Guoanswered 4 months agojhashimoto 4 months ago@Yan Fen GuoI posted another answer.Share0we have more than a hundred parameters and can't hide part would make it super hard to consume.Another idea. You could categorize the parameters with ParameterGroup. It would improve visibility.Metadata:  AWS::CloudFormation::Interface:    ParameterGroups:      - Label:          default: "Product A Configuration"        Parameters:          - ExampleParameter1          - ExampleParameter2          ...      - Label:          default: "Product B Configuration"        Parameters:          - ExampleParameter3          - ExampleParameter4          ...How to Make Friendly Parameters for the CloudFormation Console | by Kelli Mohr | Slalom Technology | MediumCommentSharejhashimotoanswered 4 months agoYan Fen Guo 4 months agoThank you, we are already using ParameterGroup, just don't want to list all the unnecessary parameters, because we our cloud pak include several components and customer can select what they want.Share"


Question: AI image service

"Hello, I would like to know if AWS provides any services for the creation of digital images by an AI. Thank you very muchFollowComment"

Answer: "1Hi - Not at this time. But you can always watch in our whats new section for any new service or feature announcements, https://aws.amazon.com/new/CommentShareEXPERTAWS-User-Nitinanswered 7 months agoLBajard 7 months agoThank you very much, I willShare1As of now no service for creation of digital images by an AI. but if you want to Search, verify, and organize millions of images you can use Amazon Rekognition service.https://us-west-2.console.aws.amazon.com/rekognition/home?region=us-west-2#/CommentShareutkarsh-awsanswered 7 months ago0To confirm the above, no, not at present. However, I'd suggest you register for re:Invent 2022, as we make numerous announcements there every year. If you can't make it in person to Las Vegas, you can attend remotely for free and watch the sessions and announcements.  The event starts on 28th November and runs for five days through to the 2nd December. The link for free registration can be found here: https://reinvent.awsevents.com/register/CommentShareJon Ranswered 7 months ago"


Question: Does Greengrass V2 support Javascript ES6?

"I'm running greengrass in a docker container. I deployed my nodejs14.x lambda to greengrass successfully, however when it tries to run I get this error2022-07-01T19:25:37.166Z [ERROR] (pool-2-thread-21) com.example.employee: Failed to import function handler employee.handler due to exception: Error [ERR_REQUIRE_ESM]: Must use import to load ES Module: /greengrass/v2/packages/artifacts-unarchived/com.example.employee/1.0.12/lambda-artifact/employee.js. {serviceInstance=0, serviceName=com.example.employee, currentState=RUNNING} 2022-07-01T19:25:37.166Z [ERROR] (pool-2-thread-21) com.example.employee: require() of ES modules is not supported.. {serviceInstance=0, serviceName=com.example.employee, currentState=RUNNING}I do not get this error while running the same lambda in the AWS cloud console. It only happens when running the lambda inside of greengrass.Also I went into the greengrass container, and ran my script manually, it launched just fine.Something tells me its whatever launches the lambda runtime inside of greengrass that's the issue.FollowComment"

Answer: "3Accepted AnswerGreengrass V2 Lambda does not support loading ES modules. You can write your code as a non-module and it will load fine. You may also choose to not use a lambda, this is what I would suggest that you do. Instead of using a Lambda, use a native component which will then let you do anything that you want.https://docs.aws.amazon.com/greengrass/v2/developerguide/create-components.htmlCommentShareEXPERTMichaelDombrowski-AWSanswered a year agometeora a year agoThank you so much for the answer. I'll check into native components!Share"


Question: "Streaming Video, Face Detection, Sample Python Code"

"Hi,Thank you for your time to read my question.I want to use Video Streaming (from Webcam) to detect face and other attributes like (Emotion, Landmarks, Pose, Smile, EyeOpen, MouthOpen).I can get the results from a video stored in S3 bucket by using GetFaceDetection API. Now, I want to analyse face using Video Streaming (from Webcam).I found documentation about Face Recognition:https://docs.aws.amazon.com/rekognition/latest/dg/recognize-faces-in-a-video-stream.htmlThe sample code is written in Java. Unfortunately, I am not familiar with Java. I am looking for a sample code in Python.I summarize my question here:Does Video Streaming only work with Face Recognition?I don't have "Index Faces". But, can I still get Face Detection results (Bounding Box, Emotion, Pose, etc). I don't need "Face Similarity" results.Is there any sample code for Python?The sample code is about "Creating & Starting Streaming Video Analysis". What about the next step: "Reading Analysis Results". Is there any sample code?I am new in this field. And I didn't understand the whole process yet. I really appreciate it, if you could answer my question in a simple manner.Thanks.FollowComment"

Answer: "0Hi,Please see answers to your questions below.1. Does Video Streaming only work with Face Recognition?The primary use case for the product is face recognition in streaming videos2. I don't have "Index Faces". But, can I still get Face Detection results (Bounding Box, Emotion, Pose, etc). I don't need "Face Similarity" results.I think you can try either of the following 1) create an empty collection, not index any faces to it, and pass in that collection as part of you settings when calling CreateStreamProcessor 2) alternately, if you created any collection with faces earlier, you can pass in the collection id, and ignore the 'MatchedFaces' from the outputhttps://docs.aws.amazon.com/rekognition/latest/dg/streaming-video-kinesis-output.html3. Is there any sample code for Python?4. The sample code is about "Creating & Starting Streaming Video Analysis". What about the next step: "Reading Analysis Results". Is there any sample code?I don't have any python sample code at hand, will have to get back on that. For reading results, we have a page describing what to expect, https://docs.aws.amazon.com/rekognition/latest/dg/streaming-video-kinesis-output.html. The results are pushed to Kinesis data streams, so maybe you can explore reading kinesis data streams using python in general.https://docs.aws.amazon.com/streams/latest/dev/kinesis-record-processor-implementation-app-py.htmlhttps://aws.amazon.com/blogs/big-data/snakes-in-the-stream-feeding-and-eating-amazon-kinesis-streams-with-python/Some python reference from boto3https://boto3.amazonaws.com/v1/documentation/api/latest/reference/services/rekognition.html#Rekognition.Client.create_stream_processorhttps://boto3.amazonaws.com/v1/documentation/api/latest/reference/services/rekognition.html#Rekognition.Client.start_stream_processorHopefully the above should at least help you get started.Thanks.Edited by: ragibmataws on May 27, 2020 5:03 PMEdited by: ragibmataws on May 27, 2020 5:40 PMCommentShareAWS-Ragibanswered 3 years ago0Thank you very much for your time.Face Recognition returns Bounding Box, Landmark, Pose, and Quality.What I am looking for most is "Emotion". Is there any way to get Emotion from Face Recognition?CommentShareMadoSanswered 3 years ago0Unfortunately we currently don't support emotion detection for faces in streaming video. It is currently restricted to the face features you mentioned.https://docs.aws.amazon.com/rekognition/latest/dg/streaming-video-kinesis-output-reference-detectedface.htmlCommentShareAWS-Ragibanswered 3 years ago"


Question: Mediaconvert job failing with 1040 error code for a certain video target

"Hi everyone,I'm using Mediaconvert Job Template to create multiple outputs. HLS & DASH. Each group outputs 5 renditions of content starting from 240 up-to 1080. To preserve the aspect ratio of original content only height is provided in job template.I encountered rather strange issue. My job is failing with error code 1040 and message "Error initializing encoder for video target [5] initialization failed: Invalid level specified for the selected resolution."Video Target [5] is 1080 output. If I provide width, only for 1080 output, for media groups, job is processed. Adding video stream information from mediainfo.VideoID                                       : 1Format                                   : AVCFormat/Info                              : Advanced Video CodecFormat profile                           : Main@L4.2Format settings                          : CABAC / 4 Ref FramesFormat settings, CABAC                   : YesFormat settings, Reference frames        : 4 framesFormat settings, GOP                     : M=4, N=24Codec ID                                 : avc1Codec ID/Info                            : Advanced Video CodingDuration                                 : 5 min 26 sBit rate                                 : 10.0 Mb/sWidth                                    : 1 998 pixelsHeight                                   : 1 080 pixelsDisplay aspect ratio                     : 1.85:1Frame rate mode                          : ConstantFrame rate                               : 24.000 FPSColor space                              : YUVChroma subsampling                       : 4:2:0Bit depth                                : 8 bitsScan type                                : ProgressiveBits/(Pixel*Frame)                       : 0.193Stream size                              : 390 MiB (97%)Language                                 : EnglishEncoded date                             : UTC 2020-08-24 18:57:34Tagged date                              : UTC 2020-08-24 18:57:34Color range                              : LimitedColor primaries                          : BT.709Transfer characteristics                 : BT.709Matrix coefficients                      : BT.709Codec configuration box                  : avcCDimensions of video are a bit odd but it is failing for 1080 output only. Like mentioned above If I provide width for 1080 rest of renditions are processed even without width.Level for 1080 is LEVEL_4 and Profile is HIGH.Any help is appreciated.FollowComment"

Answer: "0HiPlease change the 1080 rendition to "level 4.2" of "high profile". Then it should work. It is because "level 4.0" supports up to 1024.CommentShareawsmicmicanswered 3 years ago0Hi,I wanted to expand a little on my colleague's comments. When the width is left blank it will automatically use the input's width. The input file you have provided has a width of 1998 which you can find using a tool such as mediainfo. If you look at the table for AVC Levels located here https://en.wikipedia.org/wiki/Advanced_Video_Coding#Levels you will see for level 4 the maximum width for height 1080 is 1920. Same with level 4.1, however. 4.2 maximum width is 2,048.In the future you can also set the level to "auto" and MediaConvert will pick the correct one automatically.CommentShareAWS-User-9207641answered 3 years ago0Thanks for the explanation. Does changing level of profile effect the playback of content on different devices?CommentSharefawaztahiranswered 3 years ago0If the job is configured to use the input's width of 1998, it will require the level that is specified in the standard recommendations for AVC. The players should use the same standards. If a player requires level 4, you will have to set the width to one that is supported for that level. 1920 is supported with level 4, this is why the job is successful when the level is set to 4.CommentShareAWS-User-9207641answered 3 years ago"


Question: Does MegaFrog run on a native iOS device?

"Has anyone else been able to run the MegaFrog example on a native iOS device? (not in the unity player, not on mac, but actually on an iOS device) It builds and links just fine for me, but at runtime it spits out errors that look like the right assemblies aren't included. It appears to get hung up immediately after the very first call to AWS services.(Filename: ./Runtime/Export/Debug.bindings.h Line: 45)NullReferenceException: Object reference not set to an instance of an object.at Amazon.Runtime.Internal.UnityWebRequestWrapper..cctor () [0x00000] in <00000000000000000000000000000000>:0 at Amazon.AWSConfigs.set_HttpClient (Amazon.AWSConfigs+HttpClientOption value) [0x00000] in <00000000000000000000000000000000>:0 at RTSClient.ConnectToGameLiftServer () [0x00000] in <00000000000000000000000000000000>:0 Rethrow as TypeInitializationException: The type initializer for 'Amazon.Runtime.Internal.UnityWebRequestWrapper' threw an exception.at Amazon.AWSConfigs.set_HttpClient (Amazon.AWSConfigs+HttpClientOption value) [0x00000] in <00000000000000000000000000000000>:0 at RTSClient.ConnectToGameLiftServer () [0x00000] in <00000000000000000000000000000000>:0 (Filename: currently not available on il2cpp Line: -1)FollowComment"

Answer: "0Accepted AnswerI got this to work. The issue is that it's having a hard time with AWSSDK, not GameLift.At that point, you can follow the users guide for integrating AWSSDK into your unity game, here.HOWEVER! As of the writing of this document, I'm not sure their example link.xml works. Fortunately they provide a unity example game, and the link.xml there does work.Here's the link.xml I used:  <linker><assembly fullname="UnityEngine"><type fullname="UnityEngine.Networking.UnityWebRequest" preserve="all" /><type fullname="UnityEngine.Networking.UploadHandlerRaw" preserve="all" /><type fullname="UnityEngine.Networking.UploadHandler" preserve="all" /><type fullname="UnityEngine.Networking.DownloadHandler" preserve="all" /><type fullname="UnityEngine.Networking.DownloadHandlerBuffer" preserve="all" /></assembly><assembly fullname="AWSSDK.Core" preserve="all"/><assembly fullname="AWSSDK.CognitoIdentity" preserve="all"/><assembly fullname="AWSSDK.CognitoSync" preserve="all"/><assembly fullname="AWSSDK.DynamoDBv2" preserve="all"/><assembly fullname="AWSSDK.Kinesis" preserve="all"/><assembly fullname="AWSSDK.KinesisFirehose" preserve="all"/><assembly fullname="AWSSDK.Lambda" preserve="all"/><assembly fullname="AWSSDK.MobileAnalytics" preserve="all"/><assembly fullname="AWSSDK.S3" preserve="all"/><assembly fullname="AWSSDK.SecurityToken" preserve="all"/><assembly fullname="AWSSDK.SimpleEmail" preserve="all"/><assembly fullname="AWSSDK.SimpleNotificationService" preserve="all"/><assembly fullname="AWSSDK.SQS" preserve="all"/><assembly fullname="AWSSDK.IdentityManagement" preserve="all"/></linker>CommentSharerePost-User-8700675answered 4 years ago"


Question: Can I change opensearch's private network to public?

"I want to change access from console to vpc from private to public.It is possible in case of RDS, but is it also possible in opensearch?FollowComment"

Answer: "-1Accepted AnswerYou cannot change the settings for opensearch from private to public and vice versa. To do so you would need to create a new cluster and migrate data. This is a limitation as mentioned hereCommentShareSydanswered 6 months agoGraham Campbell 4 months agoThe documentation you link to is for OpenSearch Clusters, and not OpenSearch Serverless. This OP was tagged with OpenSearch Serverless. Much like with DynamoDB, you don't get control the underlying VPC, but you do get to "hook it up" as it were. See https://docs.aws.amazon.com/opensearch-service/latest/developerguide/serverless-vpc.html.Share"


Question: RDS Postgres Superuser permission

Couldnt execute this query without superuser permissionALTER ROLE user WITH REPLICATION;Im running a postgres db even I have enabled RDS_SUPERUSER role to that user.FollowComment

Answer: "0Hi,According tohttps://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.MasterAccounts.html does not seem that you can use the WITH replication syntax for rds super users.You will need to grant replication to an user:CREATE ROLE <user>;GRANT rds_replication TO <user>;Hope it helps.CommentShareEXPERTalatechanswered 3 months ago"


Question: Working around AWS VPN MTU limits

"Is anyone aware of a solution/customer who has implemented the following requirements:They require IPsec over DXThey need effective MTU (i.e. original packet not counting IPsec overhead) >= 1500 over IPsec as they don't/can't control host MTU settings, and they use DF1. They don’t allow ICMP in their network so path MTU discovery is out2. They don’t like TCP mss-adjust on the IPsec headendsOne solution I can think of is EC2 IPsec termination in a VPC via Private VIF (this allows the higher MTU). Then VPC attachment (as opposed to VPN) from the VPC to a TGW and deploy automation to handle failover.I also understand GWLB won’t help here as it’s a two-armed appliance (IPsec and ENI out towards TGW VPC attachment)FollowComment"

Answer: 0Accepted AnswerFor traffic to leave a VPC with over 1500 byte MTU you need a transit VIF or private VIF (with jumbo frames enabled) or have an intermediary third-party device that fragments packets.You'd still need fragmentation if you use GWLB unless using transit VIF or private VIF.CommentShareAWS-James-Devineanswered 3 years ago


Question: ELB creation: could not find any suitable subnets for creating the ELB

"Hello,We're trying to deploy a Nginx ingress and here the error we have:  Type     Reason                      Age               From                Message  ----     ------                      ----              ----                -------  Normal   EnsuringLoadBalancer        3s (x4 over 38s)  service-controller  Ensuring load balancer  Warning  CreatingLoadBalancerFailed  2s (x4 over 38s)  service-controller  Error creating load balancer (will retry): failed to ensure load balancer for service api-ingress-nginx: could not find any suitable subnets for creating the ELBDoes someone have the same error ?How can we debug this ?It seems that the first creation of the ingress in a fresh new cluster works but when we try to redeploy it, we have this error.FollowComment"

Answer: "0Hey,Here's the solution https://github.com/kubernetes/kubernetes/issues/29298#issuecomment-274400650CommentSharejivanicanswered 4 years ago0You have not tagged up your subnets correctly, check the AWS docs.CommentSharericardobrancokodakoneanswered 4 years ago"


Question: Connect to PostgreSQL using AWS Lambda custom runtime shell scripting

"I need to use AWS Lambda custom runtime and in that I will use shell scripting, and from there I have to connect to AWS aurora postgreSQL database and will run some procedure and so on...How can I achieve this?I believe, need to put psql client in one of the lambda layer, which I can use in .sh file in another layer?FollowComment"

Answer: "0As you are creating your own custom runtime, you can include all you need in the base zip file. No need for Layers.CommentShareEXPERTUrianswered 2 months ago"


Question: Failure to monitor connection status of local client devices from IoT Core

"I'm considering to monitor the connection status of all Greengrass core and client devices from the Fleet Hub.When interacting with local client devices, Fleet indexing never updates the connection state of the client device.I ran the sample Greengrass discovery application from the "Connect and test client devices" tutorial (https://docs.aws.amazon.com/greengrass/v2/developerguide/client-devices-tutorial.html). I was able to subscribe messages from client device by using MQTT test client, but connection status has been never updated.The connection state was updated when publishing directly to an IoT Core service endpoint from the client device.Can MQTT bridge component relay lifecycle events?FollowComment"

Answer: "0Accepted AnswerHi,Today Fleet Hub and Fleet Indexing connectivity (FI) will only report for MQTT connections directly to AWS IoT Core. You should be able to see the Greengrass Core device connectivity status but will not be able to see the status of client devices that connect to the local MQTT broker. The reason for this is that FI uses the lifecycle events from IoT Core. There isn't a way for a Greengrass Core device to emit those events for client devices.You could create a component that reads the Nucleus log file, greengrass.log, and parse client device connect/disconnect events.  Fleet Hub will not be able to report on those from a connectivity perspective, but you could update a custom attribute or shadow field with device status and then create a Fleet Hub query.To track interest, please consider creating an issue for the Greengrass team to track a feature request.Please let me know if this helps, or if you have additional questions!CommentShareGavin_Aanswered a year agoAWS-User-8094801 a year agoThanks for your response.I now have a better understanding. Thanks for the detailed explanation.It might be better to allow client devices to make MQTT connections directly to AWS IoT Core.I've raised an issue (https://github.com/aws-greengrass/aws-greengrass-nucleus/issues/1190) on github.ShareGavin_A a year agoClient devices can connect directly to IoT Core if their is a policy associated with the certificate and there is a network path. Local connectivity to Greengrass can reduce latency and allow for local communication when connectivity to the cloud isn't available. One pattern may be to have local devices connect to IoT Core with Greengrass as an alternative, or two have two connections (one to IoT Core and one to Greengrass). Endless possibilities! :)ShareAWS-User-8094801 a year agoI'll try to do it in a way that has two connections.Thanks again!Share"


Question: F1.4xlarge P2P bandwidth

"Hi,I'm new to AWS FPGA development. I notice that AWS F1.4xlarge (and F1.16xlarge) instances support effective P2P communication between FPGAs, without the help of the host. But the example from Xilinx (https://github.com/Xilinx/Vitis_Accel_Examples/tree/f61637e9263ecc1be3df34182ea6c53a0ca10447/performance/p2p_fpga2fpga_bandwidth) seems not able to work on AWS F1 instances.I have read the code at https://github.com/awslabs/aws-fpga-app-notes/tree/master/Using-PCIe-Peer2Peer. But how can I evaluate the bandwidth of P2P communication bandwidth concisely? In the code provided, the program just uses sleep(1) to wait until the write is finished. Are there some signals that are triggered when the write is finished?The result I hope to obtain is a table like the one at https://github.com/awslabs/aws-fpga-app-notes/tree/master/Using-PCIe-Write-Combining. Could you please provide the corresponding script or any useful advice?Thanks a lot.FollowComment"

Answer: 0Dear customerThank you so much for your interest in AWS. We dont provide any perf numbers measurement for P2P as it is CL design dependent. However a customer can actually devise PCIM write/read counters in their design along with timers and measure the performance. This requires counter implementation in CL. Please feel free to let us know if you have any additional questions or if your original question had additional points not addressed.ThanksCommentShareAWS-User-7905434answered a year ago


Question: Unable to run docker-compose.yaml file on EC2 instance

"I am trying to deploy a docker-compose.yaml on AWS EC2 instance. There is no other file I would like to deploy.My file that contains 3 images to build the container (see code below): Kafka Broker, Zookeeper and Python-Producer (which basically just produces random numbers periodically and writes to a Kafka Topic; and this image is deployed publicly).I am unable to install docker-compose engine using both Ubuntu and Linux AMI's.I am following this tutorial: https://www.youtube.com/watch?v=gRgdnHHuvoIAny help and guidance will be much appreciated - TIA!FollowComment"

Answer: "0Docker installation on Ubuntu can be done using the method in the official documentation below.If this procedure installs to the end, docker-compose-plugin will also be installed so that docker-compose can be used.https://docs.docker.com/engine/install/ubuntu/CommentShareEXPERTRiku_Kobayashianswered 18 days ago"


Question: How to use EventBridge with Systems Manager Run Command to run shell commands?

"I'm trying to use EventBridge to listen for EC2 autoscaling termination events, and send a shell command to the instance to do some work before the instance terminates.I followed this guide: https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-ec2-run-command.htmlHowever, it doesn't explain how Target Key and Target Value input boxes are used. I don't understand why it uses tag:environment in this case.I assume I'm supposed to input the instance id of the EC2 instance, and I know that the instance id is in the json body of the termination event. Is there a way I can pass variables to the Target Key and Target Value?FollowComment"

Answer: "0Accepted AnswerThe Target Key and Target Value is used to identify which instance(s) to run the command against. Target Key can either be an instance tag key (e.g., environment), or the literal value InstanceIds to indicate that the command should be run against a specific list of instance IDs. Target Value is a list either of tag values, if a tag key was specified for the target key (e.g., production), or a list of EC2 instance IDs.Source: https://docs.aws.amazon.com/eventbridge/latest/APIReference/API_RunCommandTarget.htmlEventBridge supports fetching data out of the event and passing it to the target via Transforms. See the transforms documentation for additional details.CommentShareEXPERTMichael_Fanswered a year agoAWS-User-8191622 a year agoThanks for confirming what they are for.The issue I have is that the variables declared in Transforms seems to only work for parameters besides RunCommandTarget. When I put <instanceId> in the Target Value, it seems to take it as literal.I'll try with <instanceId> and $.detail.EC2InstanceId some more. Do you know by any chance the correct syntax?ShareAWS-User-8191622 a year agoI couldn't figure out a way to pass instanceId variable to Target Value in the console UI. To work around this, I instead opted for Event Bridge -> Lambda -> System Manager Run Command, which worked.I'll mark this question as answered, but it'll be great if anyone figures out a way to directly pass instanceId.Share0I have this exact same need. I have instances in an ASG that need something to happen post-boot. Specifically, I am trying to get the CodeDeploy agent installed via the SSM Document that is used by Distributor.Its not intuitive, but the solution to this is to create an SSM Automation and not Run/Send Command. If you use an Automation then you can write the EventBridge rule to target that then use the input transform. The automation will digest the input into a Target for the automation. Not great as it adds an obfuscating layer, but it is what it is.For my specific use case, I have also explored:Creating an EventBridge rule for each autoscaling group (yuck)Targeting the Run Command for every piece of running equipment (yuck)CommentSharerePost-User-8557630answered a year ago"


Question: Where do I set innodb_force_recovery in RDS Mariadb

"Our RDS Mariadb instance hit a crash recently.The instance is now stuck at 'Rebooting' state.While the instance is in 'rebooting' state, the only operation available is 'delete'.But I don't want to delete the instance.I've posted the crash log to https://jira.mariadb.org/browse/MDEV-28975 and they have suggested to set innodb_force_recovery = 3. But I can't find this parameter in RDS parameter groups and it's not listed as an unsupported parameters either.My other question is how do I force stop my RDS instance. I've contacted AWS Support but their response is that they don't have permission to stop customers' instances.I've just same crash again after restoring from backup. I just can't accept the fact that you can only restore from backup when you hit a crash.Anyone else had similar experience?ThanksFollowComment"


Question: Regional API Gateway and WAF

"Hi Team,For CF + WAF, traffic is hitting CF before reach WAF, such that certain header info. is modified by CF (e.g. X-Forwarded-For). My customer would like to understand the behavior when using regional api + waf, does traffic hitting WAF first before API GW or vice versa. My understanding is that traffic is hitting WAF first as traffic blocked by WAF will not count toward API GW consumption.Can I also assume that WAF is in in pass-through mode which will not modify any of the traffic header?Is that correct?FollowComment"

Answer: "1Accepted AnswerWhen you enable WAF on a resource (CloudFront, API Gateway or ALB) the endpoint does not change. This means that WAF does not front those services but rather that they invoke WAF as the first step, if so configured. You can see see this also in the WAF FAQ:"2. How does AWS WAF block or allow traffic?As the underlying service receives requests for your web sites, it forwards those requests to AWS WAF for inspection against your rules. Once a request meets a condition defined in your rules, AWS WAF instructs the underlying service to either block or allow the request based on the action you define."Because of that, WAF doesn't modify the original request. It just return to the service an indication if to allow or reject the request.CommentShareEXPERTUrianswered 3 years ago"


Question: sam sync throws "Build method missing" error on static nodejs modules

"I am using nodejs and "sam sync".  I have a layer with shared js code that doesn't need to be built. I am using ES Modules for imports.While I have this working, any changes to my shared code module results in a "Build method missing in layer" error making quick iteration difficult.SAM CLI, version 1.70.0Directory structure:layers-test/{template.yaml, samconfig.toml}layers-test/hello-world/{app.js, package.json}layers-test/shared-code/tools/{tools.js, package.json}layers-test/shared-code/util/{util.js, package.json}layers-test/shared-modules/{package.json, package-lock.json, node_modules/}hello-world/app.js:import pick from "lodash.pick";import { utilFunction } from "/opt/util/util.js";import { toolsFunction } from "/opt/tools/tools.js";export const lambdaHandler = async (event, context) => {    try {        utilFunction();        toolsFunction();        console.log('rez:', pick({ a: 40, b: 30, c: 20 }, ['a', 'b']));        return {            'statusCode': 200,            'body': JSON.stringify({                message: 'hello world',            })        }    } catch (err) {        console.log(err);        return err;    }};shared-modules/package.json:{  "name": "shared-modules",  "version": "1.0.0",  "description": "",  "dependencies": {    "lodash.pick": "^4.4.0"  }}shared-code/util/util.js:export const utilFunction = () => {  console.log('running utilFunction');};shared-code/util/package.json:{  "name": "util",  "version": "1.0.0",  "description": "",  "main": "util.js",  "type": "module"}template.yaml:AWSTemplateFormatVersion: '2010-09-09'Transform: AWS::Serverless-2016-10-31Description: >  layers-test  Sample SAM Template for layers-testGlobals:  Function:    Timeout: 3Resources:  HelloWorldFunction:    Type: AWS::Serverless::Function    Properties:      CodeUri: hello-world/      Handler: app.lambdaHandler      Runtime: nodejs18.x      Architectures:        - x86_64      Layers:        - !Ref SharedModulesLayer        - !Ref SharedCodeLayer      Events:        HelloWorld:          Type: Api          Properties:            Path: /hello            Method: get  SharedModulesLayer:    Type: AWS::Serverless::LayerVersion    Properties:      ContentUri: layers/shared-modules      CompatibleRuntimes:        - nodejs18.x    Metadata:      BuildMethod: nodejs18.x      BuildArchitecture: x86_64  SharedCodeLayer:    Type: AWS::Serverless::LayerVersion    Properties:      ContentUri: layers/shared-code      CompatibleRuntimes:        - nodejs18.xAll of this code works, but with sam sync active, whenever I make changes to anything in shared-code/ I get the error:Syncing Layer SharedCodeLayer...Layer <samcli.lib.providers.sam_function_provider.SamFunctionProvider object at 0x7f19797b81d0> is missing BuildMethod Metadata.Code sync encountered an error.Traceback (most recent call last):  File "samcli/lib/sync/sync_flow_executor.py", line 342, in _sync_flow_execute_wrapper  File "samcli/lib/sync/sync_flow.py", line 310, in execute  File "samcli/lib/sync/flows/layer_sync_flow.py", line 224, in gather_resources  File "samcli/commands/build/build_context.py", line 523, in collect_build_resources  File "samcli/commands/build/build_context.py", line 611, in _collect_single_buildable_layersamcli.commands.build.exceptions.MissingBuildMethodException: Build method missing in layer SharedCodeLayer.If I add:    Metadata:      BuildMethod: nodejs18.x      BuildArchitecture: x86_64to  SharedCodeLayer  then  the imports no longer work. I get an error like:Uncaught Exception      {"errorType":"Error","errorMessage":"Cannot find module '/opt/util/util.js' imported from /var/task/app.js","code":"ERR_MODULE_NOT_FOUND","stack":["Error [ERR_MODULE_NOT_FOUND]: Cannot find module '/opt/util/util.js' imported from /var/task/app.js","    at new NodeError (node:internal/errors:393:5)","    at finalizeResolution (node:internal/modules/esm/resolve:328:11)","    at moduleResolve (node:internal/modules/esm/resolve:965:10)","    at moduleResolveWithNodePath (node:internal/modules/esm/resolve:909:12)","    at defaultResolve (node:internal/modules/esm/resolve:1173:79)","    at nextResolve (node:internal/modules/esm/loader:163:28)","    at ESMLoader.resolve (node:internal/modules/esm/loader:841:30)","    at ESMLoader.getModuleJob (node:internal/modules/esm/loader:424:18)","    at ModuleWrap.<anonymous> (node:internal/modules/esm/module_job:76:40)","    at link (node:internal/modules/esm/module_job:75:36)"]}Is there any way to make these imports work while avoiding the "Build method missing in layer" in error?FollowComment"


Question: 502 error Bad Gateway after installing reverse proxy

"I have installed the reverse proxy with this config file in /etc/nginx/sites-available:server {listen 80;listen [::]:80;server_name example.com;location /drivers   {    proxy_pass http://127.0.0.1:5000;    proxy_redirect http://127.0.0.1:5000/ http://example.com/drivers/ ;    proxy_http_version 1.1;    proxy_set_header Upgrade $http_upgrade;    proxy_set_header Connection "upgrade" ;    proxy_read_timeout 20d ;    proxy_buffering off ;}}When accessing http://127.0.0.1:5000, everything is working fine. But http://example.com/drivers leads to 502 errorThanks a lot for your helpFollowComment"


Question: Voicemail recording not being created in Salesforce

Hi there! Could someone pls help me with the voicemail feature? We set up a call center in SF with Amazon Connect. One of our requirements is the ability for customers to leave a voicemail when no agent is available. We set up all configurations from this doc https://github.com/amazon-connect/amazon-connect-salesforce-scv/tree/master/Solutions/VMX2-VoicemailExpress . But unfortunately VMXSFDCTestFlow-callcenter00d3k0000008pe6 Contact Flow does not create the record in SF.FollowComment

Answer: "0You would need to provide the logs from the Packager function to help identify the problem. However, Salesforce is also adding Voicemail to Service Cloud Voice natively this month with the Winter Release. If you have not already successfully implemented Voicemail, it probably makes more sense to remove this solution, and implement the iteration from Salesforce as it implements voicemail as a routable object in SCV.CommentShareJDanswered 8 months ago"


Question: StartNextPendingJobExecution via HTTPS -> <UnknownOperationException/>

"Hi,I am trying to access the IoT Jobs via HTTPS. The GetPendingJobExecutions and UpdateJobExecution work fine but each time I call the StartNextPendingJobExecution I receive the response:<UnknownOperationException/>```I tried the following curl commands:curl -s --tlsv1.2 --cacert AmazonRootCA1.pem --cert certificate.pem.crt --key private.pem.key -X PUT -d "{ "stepTimeOutInMinutes": 60 }" "https://aabbcc.jobs.iot.eu-west-1.amazonaws.com:8443/things/myThingName/jobs/$next" 2>&1 | catcurl -s --tlsv1.2 --cacert AmazonRootCA1.pem --cert certificate.pem.crt --key private.pem.key -X PUT -d "{ "statusDetails": { "mystring": "string"}, "stepTimeOutInMinutes": 60}" "https://aabbcc.jobs.iot.eu-west-1.amazonaws.com:8443/things/myThingName/jobs/$next" 2>&1 | catThe StartNextPendingJobExecution works with the CLI by the way.    Any idea?    Regards,  ThomasFollowComment"

Answer: "0Accepted AnswerThank you for your interest.While using curl, try using single quotes for URI. Your shell would be substituting $next to empty.'https://aabbcc.jobs.iot.eu-west-1.amazonaws.com:8443/things/myThingName/jobs/$next'Hope this helps,AkankCommentShareAWS-User-8828113answered 4 years ago"


Question: Modbus Server for testing AWS IoT Sitewise

"Hello All,I'm looking for a Modbus Server/Simulator for testing AWS IoT Sitewise connectors, do you have any recommendations, preferably open source and Linux based.Thank you.Simith Nambiar (Rackspace)FollowComment"

Answer: "0libmodbus looks good for some simple tests,I will try it out : https://github.com/stephane/libmodbus/tree/master/testsEdited by: simithrackspace on Apr 12, 2021 6:50 AMCommentShareiotivityanswered 2 years ago"


Question: VPC Lambda targets of EventBridge Scheduler

I implemented an EventBridge Scheduler to target Lambda in a VPC.  I placed the Lambda in three Availability Zones.  How does EventBridge determine which Lambda to call?FollowComment

Answer: "1Event bridge doesn't choose, it doesn't have any visibility into the configuration of the function. When the Lambda service receives the invocation request from EventBridge, if there are no warm execution environments available it will create a new one and connect that to one of the ENIs that have been provisioned in each of your subnets. The Lambda service will try to balance execution environments across the ENIs that are available.CommentShareKevin_Canswered 2 months agoEXPERTkentradreviewed 2 months agoEXPERTalatechreviewed 2 months agoalatech EXPERT2 months agoCorrect, is more the internal “Lambda load balancer”/control plane that decides dispatch to availability zoneShare"


Question: having no ACLs/Bucket owner enforced object ownership exposes owner canonical ID and displayname

"You guys recommend not having ACLs on s3 buckets now, but if I create a bucket that is going to have read-only public access (ListBucket & GetObject only) from my application, then ListObjects/ListBucket on that bucket exposes both the Owner ID and DisplayName, which is not something I want public.If I switch the bucket to Object writer ownership, the ListBucket results are nice and clean, containing only the relevant object info (key, etag, size, storage class).It seems bad to leak the owner ID and display name like this?  I'm going to keep it on Object writer I guess to avoid this even though the console has warnings all over the place about not using ACLs.ChrisFollowComment"

Answer: "0The canonical user ID is the Amazon S3–only concept. It is a 64-character obfuscated version of the account ID. Therefore you can't get anything out of the canonical user ID because it's a one-way hash (e.g. SHA-256).For more information, please refer to the following links:https://docs.aws.amazon.com/AmazonS3/latest/userguide/finding-canonical-user-id.htmlhttps://docs.aws.amazon.com/AmazonS3/latest/userguide/example-walkthroughs-managing-access-example4.htmlCommentShareAWS SA Neilanswered 4 months ago"


Question: AWS lightsail - how can I troubleshoot/resolve DNS propogation problem

"Set up the DNS zone (A record, MX record & TXT records) but for whatever reason/s it still doesn't want to resolve. Now having problem getting to the vm using the IP address. Been over the DNS zone settings numerous times and I'm certain they're fine. What's also weird is that if I try the domain name on my phone it'll work once but when I try moments later on a desktop the browser just sits there. Is there anything in the lightsail control panel (under the Networking header) where we can troubleshoot DNS problems? When I check the A record at www.whatsmydns.net it looks good, mostly green check marks with a few red Xs but the red Xs are outside the US. Has anyone had DNS problems recently & how did you work through them. All feedback is welcomeFollowComment"

Answer: "0What's the domain name?CommentShareDavid Ganswered 2 years ago0thanks for the reply, it's sportalytics.cloudCommentSharemrcartieranswered 2 years ago0I checked a handful of domains on that DNS lookup site you mentioned and get results consistent with your domain.Looks like your site is redirecting to https, but the https port (443) isn't open.Check the firewall settings and make sure your web server is listening on port 443.CommentShareDavid Ganswered 2 years ago0You're the truth David G. I went into the management of the lightsail instance & added a rule (https port 443) to the IPv4 firewall settings. Now it resolves without any problem. Thanks again for your feedbackCommentSharemrcartieranswered 2 years ago0Yeah, the problem wasn't the DNS not resolving, the DNS was resolving fine.  The server wasn't accepting connections.CommentShareDavid Ganswered 2 years ago"


Question: Unable to delete lambda replica

"Hello! I'm having trouble deleting a lambda@edge function that was replicated. The documentation says that it should be deleted within a few hours, but it's been about a day. In other cases, I've seen the lambda still linger after a few daysFollowComment"

Answer: "0I had the same cases a few times and the response from support was to ask support to remove lambda@edge if it is stack and you can't remove it even if it is not associated with any CloudFront distribution.However, I tried one more solution and it works for me, but I only tried it once.I attached the lambda@edge to the CloudFront distribution once again for a while and disassociated it once again, then I was able to delete lambda@edge. It looks like it was unblocked somehow after the new association.CommentShareMGanswered a year ago"


Question: Multiple network interfaces - No SSH access

"Hi!I've created a t2.medium instance (Singapore region) with two network interfaces (eth0 and eth1) and I've tried using both the Ubuntu AMI from Amazon, and the Debian 9/Stretch AMI from Debian.So far for both setups, I've enabled an Elastic IP for eth0, with a correspoding security group which lets me SSH into my server. My problem occurs straight away when I attach the second network interface (eth1), this interface is being attached without any Elastic IP (but it will have one in the future), once the eth1 interface is attached to the instance, the Elastic IP for eth0 stops responding on SSH, and I cannot SSH into my server anymore.Does anyone have any tips on what is happening here, and how to resolve it?FollowComment"

Answer: "0Got this working by adding the code below into the netplan configuration for Ubuntu. The problem was caused by double default routes. The configuration below removes the default route for eth1.dhcp4-overrides:use-routes: falseCommentShareheggaanswered 4 years ago0Hi hegga,I'm glad that you were able to solve the issue. Please let us know if you need any further help.Regards,awstomasCommentShareAWS-User-3892169answered 4 years ago"


Question: "Please add additional TLDs to available registration options (.ag, .ai, and .bio)"

"I'd like to be able to register domains under the TLDs of .ai, .ag, and .bio, could you please add support for these additional TLDsFollowComment"

Answer: "0Hello, thank you for reaching out.I understand that you are requesting support for the ".ai", ".ag", and ".bio" TLD registrations on Route 53.Route 53 Domains is currently directly accredited with .com, .net, and .org registries. All other TLDs are provided via third party registrar associates. To improve our level of service and support, we are actively working to become directly accredited with all other TLDs. In addition to improving our existing offering, we will become accredited with other registries to expand our TLD catalog. This work is currently in progress. We do not currently have dates to share for adding new TLDs.You can monitor the updates here at AWS Blogs - https://aws.amazon.com/blogs/aws/and what's new on AWS - https://aws.amazon.com/new/CommentShareAustin_Lanswered 10 months ago"


Question: Are the numbers describing the AWS Support pricing tiers exclusive or inclusive?

"On the AWS support comparison page there are some numbers given to describe the price of support: https://aws.amazon.com/premiumsupport/plans/For example Enterprise support:5% of monthly AWS usage from $500K–$1MOr3% of monthly AWS usage over $1MFor the first bracket, a client of AWS may be charged $1M x 5% = $50,000In the second bracket they may be charged $1M x 3% = $30,000A difference of $20,000.Which tier would I be charged for were I to use exactly $1M worth of services?FollowComment"

Answer: "1Hi thereThe support plans are priced in brackets (like tax brackets if you are familiar with how USA income tax works) so if you spent $1MM your support costs would be$15k (10% * 150,000)+ $24.5k (7% of 350,000) + $25k (5% of 500,000)= $64,500See another example herehttps://aws.amazon.com/premiumsupport/pricing/Enterprise Support Plan Pricing ExampleFor $1.2M in monthly AWS charges:$150,000 x 10% = $15,000(10% of first $0 - $150K of charges)+ $350,000 x 7% = $24,500(7% of charges from $150K - $500K)+ $500,000 x 5% = $25,000(5% of charges from $500K - $1M)+ $200,000 x 3% = $6,000(3% of charges over $1M)____________Total = $70,500CommentShareEXPERTMatt-Banswered 10 months agoNataliya_G EXPERT10 months ago+1 to this. It's a tiered pricing. Similar to S3, where you pay one fee for the first $X monthly spend, and anything above that amount will be charged a different a lower fee. I like the comparison with the tax brackets! It works the same with a lot of other countries. I will use this comparison as well :)Share"


Question: Issue with UDP multicast input on Elemental Live/Elemental Conductor

"I have two UDP multicast network inputs from two different sources, the first is a hardware encoder(AJA HELO) the other is from a server(ffmpeg). The encoder has an SDI input, while the ffmpeg server has a different UDP stream as the input. My issue is that on one Elemental encoder I can pickup both streams without issue, however on the other Elemental encoder, only one of the streams works. All encoding settings that I can see are the same, and both profiles on each encoder is setup the same and when I check the streams with ffprobe they seem almost identical. Both streams play without any issues in ffplay and VLC. I also ran them through the TS Analyzer(http://www.coexsi.fr/publications/mpegts-analyzer/) software to check the MPEG-TS configs, the only difference I can see is that the working stream has a PID 45 that lists as an unknown type, but then shows up as a PCR PID in TS analyzer. While the non-working video is only showing PCR on the video PID. The encoder that is working is on an older firmware, (2.12.5.304490) vs. (2.13.6.307349).I can provide any additional info that would be helpful.UDP STREAM 1 - from hw encoder (working)Input #0, mpegts, from 'udp://239.255.10.41:11111':Duration: N/A, start: 44325.081644, bitrate: N/AProgram 1Stream #0:0[0x18]: Video: h264 (Main) ([27][0][0][0] / 0x001B), yuv420p(progressive), 1920x1080 [SAR 1:1 DAR 16:9], 29.97 fps, 29.97 tbr, 90k tbn, 59.94 tbcStream #0:1[0x16]: Audio: aac (LC) ([15][0][0][0] / 0x000F), 48000 Hz, stereo, fltp, 196 kb/s0x0000 - 0    PSI   Program Association Table (PAT)0x0016 - 22   PES   Stream ID=0xC0 (Audio stream number #0)0x0018 - 24   PES   Stream ID=0xE0 (Video stream number #0)0x002D - 45   Unknown Unknown0x002E - 46   PSI   Program Map Table (PMT)First PAT found with version 0transport_stream_id = 1234section_number      = 0last_section_number = 0section_length      = 13associations        = 1o program_number=1 for program_map_PID=46New PMT PID=46 found with version 0program_number      = 1section_number      = 0last_section_number = 0section_length      = 23PCR_PID             = 45general:id: '0'stream_uri: udp://239.255.10.41:11111program: '1'programs:'1':video_streams:- stream_id: '24'codec: H264width: '1920'height: '1080'framerate: '29.970'SAR: '1:1'bitrate: 4 Mbitaudio_streams:- stream_id: '22'codec: AACchannels: '2'sample_format: '1'sample_rate: '48000'HELO settings:1920x1080p 29.97fps H.264 @ 5.00Mbps, 120 GOP, MP, CAVLC, 192K audio, P Interval 1, H.264 Encoding Profile Main, Slices Per Frame 1, Entropy Coding CABAC, Stream Type  RTP / UDP-TS.UDP STREAM 2 - from ffmpeg (not working)Input #0, mpegts, from 'udp://239.255.10.199:1234':Duration: N/A, start: 300.697000, bitrate: N/AProgram 1Stream #0:0[0x18]: Video: h264 (Main) ([27][0][0][0] / 0x001B), yuv420p(progressive), 1920x1080 [SAR 1:1 DAR 16:9], 29.97 fps, 29.97 tbr, 90k tbn, 59.94 tbcStream #0:1[0x16]: Audio: aac (LC) ([15][0][0][0] / 0x000F), 48000 Hz, stereo, fltp, 196 kb/s0x0000 - 0    PSI   Program Association Table (PAT)0x0011 - 17   DVB   Service Description Table (SDT)0x0016 - 22   PES   Stream ID=0xC0 (Audio stream number #0)0x0018 - 24   PES   Stream ID=0xE0 (Video stream number #0)0x002E - 46   PSI   Program Map Table (PMT)First PAT found with version 0transport_stream_id = 1section_number      = 0last_section_number = 0section_length      = 13associations        = 1o program_number=1 for program_map_PID=46New PMT PID=46 found with version 0program_number      = 1section_number      = 0last_section_number = 0section_length      = 23PCR_PID             = 24general:id: '0'stream_uri: udp://239.255.10.199:1234program: '1'programs:'1':video_streams:- stream_id: '24'codec: H264width: '1920'height: '1080'framerate: '29.970'SAR: '1:1'audio_streams:- stream_id: '22'service_name: Service01codec: AACchannels: '2'sample_format: '1'sample_rate: '48000'cmd:ffmpeg -re -thread_queue_size 1024 -i udp://@239.255.10.47:11111 -streamid 0:0x18 -c:v libx264 -profile:v main -g 120 -vf drawtext=fontfile=/Windows/Fonts/arial.ttf:"text='LATENCY TESTING %{localtime:%X}':rate=30:x=(w-tw)/2:y=(h-lh)/2:fontsize=72:fontcolor=white:box=1:boxcolor=black" -streamid 1:0x16 -c:a copy -f mpegts -mpegts_transport_stream_id 0x04D2 -mpegts_pmt_start_pid 0x002E -flush_packets 0 -mpegts_flags +resend_headers+pat_pmt_at_frames udp://239.255.10.199:1234?pkt_size=1316WORKING ELEMENTAL ENC:Elemental Live (2.12.5.304490)OS:             CentOS release 6.8 (Final)Security Patch: 2Serial Number:  S10176424500451Processor:      2x Intel(R) Xeon(R) CPU E5-2697 v2 @ 2.70GHzMemory:         15.54 gBGPU:           2x Tesla K10.G2.8GB, 2x Tesla K10.G1.8GBNON-WORKING ELEMENTAL ENCS:Elemental Conductor Live (3.6.3.500559)OS:             CentOS release 6.9 (Final)Security Patch: 2Serial Number:  S6F16T6P3602120Processor:      2x Intel(R) Xeon(R) CPU X5650 @ 2.67GHzMemory:         5.70 gBElemental Live (2.13.6.307349)OS:             CentOS release 6.9 (Final)Security Patch: 2Serial Number:  UnknownProcessor:      2x Intel(R) Xeon(R) CPU E5-2650 0 @ 2.00GHzMemory:         15.55 gBGPU:           2x Tesla K10.G2.8GB, 2x Tesla K10.G1.8GBFollowComment"

Answer: "1Accepted AnswerCheck that your firewall settings are good for the TS/UDP. The Elemental firewall restricts by Port.CommentShareB-Wilkinsonanswered 6 months agorePost-User-9510656 6 months agoWow, thank you so much, I feel stupid now, but that was absolutely the issue...Share"


Question: COLUMN_NOT_FOUND: line 1:8: Column

"Hello,I just created a table using CSV and getting the error when i tried to retrieve the data in Athena. I tried both V2 and V3 but still no luck.Here is the Query ID when tried with one column: a97cbfe0-acc1-47e6-9788-fa80381bfd97Error: COLUMN_NOT_FOUND: line 1:8: Column 'platform_id' cannot be resolvedThis query ran against the "san_test_db" database, unless qualified by the queryAnother query id with * : 0fc4b9c9-101c-4d9b-8b84-1c487097202dError: COLUMN_NOT_FOUND: line 1:8: SELECT * not allowed from relation that has no columnsThis query ran against the "san_test_db" database, unless qualified by the query.I tried with and without double quotes around the table and still get the same error.FollowCommentsanthosh 7 months agoPlease close this question as I found a reason for this error. Basically, AWS created a folder Unsaved under the same path I used for the table source and that was causing an issue.Share"

Answer: "0Hi,This error usually occurs when the said column is missing from the Athena data source. If your Data source does have that column then please check the path you defined in the query Editor there may be a misspelling or extra character due to encoding. If the issue still persist, then please open a support case with AWS using query ID and region name - https://docs.aws.amazon.com/awssupport/latest/user/case-management.html#creating-a-support-caseThank you.CommentSharerePost-User-6593326answered 7 months ago"


Question: DELETED

"xEdited by: laraymond on Nov 12, 2019 8:55 PMFollowComment"

Answer: 0XCommentSharelraymondanswered 4 years ago


Question: Querying array of nested objects with nested array of objects in Redshift

"Let's say I have the following JSON{  "id": 1,  "sets": [    {      "values": [        {          "value": 1        },        {          "value": 2        }      ]    },    {      "values": [        {          "value": 5        },        {          "value": 6        }      ]    }  ]}If the table name is X I expect the query SELECT x.id, v.value  FROM X as x,   x.sets as sets,   sets.values as vto give meid, value1, 11, 22, 52, 6and it does work if both sets and values has one object each. When there's more the query fails with column 'id' had 0 remaining values but expected 2. Seems to me I'm not iterating over "sets" properly?So my question is: what's the proper way to query data structured like my example above in Redshift (using PartiQL)?FollowComment"

Answer: "0Hi rakibansary,Unless I'm wrong, I cannot see the name of the SUPER datatype column in your query. In the following example, my SUPER datatype column, where the JSON record is stored, is called json_text. SELECT x.json_text.id, v.value  FROM X as x,   x.json_text.sets as sets,   sets.values as vThanks,CommentShareZiadanswered 8 months agorakibansary 8 months agoSome more context - I actually have data stored as Parquet and not JSON - I guess SUPER doesn't apply to parquet.x.json_text.sets fails for me withHint: Split into more than one FROM clause elements or use a JOIN operation to extract ARRAY elementsThe problem here seems to be, json_text is an array.Share0Hi rakibansary,The json_text column is just an example to show you how usually PartiQL is used on SUPER datatype columns.SUPER datatype is used for semi-structured data such as JSON. The following link contains several examples on querying semi-structured data https://docs.aws.amazon.com/redshift/latest/dg/query-super.html#navigation.If you are having a Parquet file with several columns and a json column, then you can use the SERIEALIZETOJSON option while copying the data to Redshift. You can find an example on the following link (the Copying data from columnar-format Parquet and ORC section) https://docs.aws.amazon.com/redshift/latest/dg/ingest-super.html#copy_json.Thanks,CommentShareZiadanswered 8 months ago"


Question: Why My EC2 Ubuntu Linux instance status showed "1/2 checks passed"? How to solve this issue?

"I am using EC2 Ubuntu 20.04 Linux instance (t2.micro). After 3/4 days, My instance status showed "1/2 checks passed". I have some small websites running in this instance. When this message appears, I cannot able to access those websites. Currently, each time I reboot my instance, and after some time, the status checked showed 2/2 checks passed. Then, I can able to access my website. Rebooting after 3/4 days at regular intervals is very painful. Please help me to solve my issue.FollowComment"

Answer: "0Hello,I understand that you are encountering a 1/2 status check error for some of your Ec2 instances.Instance status checks failure is usually caused by the following issue:*Failed system status checks*Incorrect networking or startup configuration*Exhausted memory, etcFor more information regarding instance status checks you can review the attached document[1]To troubleshoot this issue further,, I would recommend that you make use of the known AWS tools such as Ec2Rescue to Restore your instances from Last Known Good Configuration. Here are the steps that you can use to achieve this:• Launch a helper instance in the same subnet and VPC• Detach volume of the faulty instance and attach it on the helper instance• Download Ec2Rescue https://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/ec2rw-gui.html#ec2rescue-offline• Select the disk of the newly mounted volume and choose Next.• Confirm the disk selection and choose Yes.• Choose the offline instance option to perform and choose Next.• Then they should choose Restore from Last Known Good Configuration• When done click next until the end and detach and attach the volume to the original instance and wait for the status checksAdditionally, you can review the instance screenshot to see whether there are any boot errors causing your instance to fail instance status checks, this can be reviewed using the steps mentioned here:https://aws.amazon.com/blogs/aws/ec2-instance-console-screenshot/I hope this helps.Resources:-[1] https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/monitoring-system-instance-status-check.html[2] https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/monitoring-system-instance-status-check.htmlCommentShareSUPPORT ENGINEERAWS-User-Chiraganswered 10 months ago"


Question: AWS Macie not work with sensitive data

"I tried setting the AWS Macie to analyze sensitive data. but not work. I create the following "custom data identifiers"Name: Test01Regular expression: (?i)batman\.txt.*Keywords: NoneIgnore words: NoneMaximum match distance: 50Occurrences threshold: 1Severity Level: Mediumhttps://capsula-01.s3.amazonaws.com/AWS_MACIE01.pngCreate the job.https://capsula-01.s3.amazonaws.com/AWS_MACIE02.pngI analysing the session file of the SSM. I connect to the server EC2 via session manager and run the command "scp batman.txt server:~" for example. Is it possible to get this?The bucket s3 https://capsula-01.s3.amazonaws.com/AWS_MACIE03.pngBut not work. Let me know if i'm doing something wrong.FollowCommentChris Simmons a year agoHi ricardobarbosams - would you able to include an excerpt of a few lines of context in the relevant log file that contains "scp batman.txt server:~" or similar? You can obfuscate things like your servername or any user names, as long as the format is preserved. Thanks!Share"

Answer: "1Hi, Chris, thanks for replyingof course, follow]0;root@ip-172-30-102-209: ~root@ip-172-30-102-209:~# scp batman.txt server01:~ssh: Could not resolve hostname server01: Temporary failure in name resolutionlost connection]0;root@ip-172-30-102-209: ~root@ip-172-30-102-209:~# scp batman.txt server01:~:~:~:~:~:~:~:~:~:~ :~1:~2:~7:~.:~0:~.:~0:~.:~1:~The authenticity of host '127.0.0.1 (127.0.0.1)' can't be established.Are you sure you want to continue connecting (yes/no/[fingerprint])? yesWarning: Permanently added '127.0.0.1' (ECDSA) to the list of known hosts.root@127.0.0.1: Permission denied (publickey).lost connection]0;root@ip-172-30-102-209: ~root@ip-172-30-102-209:~# scp batman.txt 127.0.0.1:~root@127.0.0.1: Permission denied (publickey).lost connection]0;root@ip-172-30-102-209: ~root@ip-172-30-102-209:~# exitCommentSharericardobarbosamsanswered a year ago0Thank you for the context, this is very helpful.On first investigation it appears that the issue is not with the custom detection, but rather the format of the log file. Using the excerpt you provided above, I ran this through Macie and the file was not scanned due to an UNSUPPORTED_FILE_TYPE_EXCEPTION. This is visible in the discovery results that are published to your S3 bucket.The team is having a look to see if this is something that's easily addressable.CommentShareChris Simmonsanswered a year ago0Thanks for replying Cris :)CommentSharericardobarbosamsanswered a year ago0I tested by creating a file with string scp batman server:~ and it worked.https://capsula-01.s3.amazonaws.com/AWS_MACIE04.pngCommentSharericardobarbosamsanswered a year ago"


Question: Lambda latency is increasing when the traffic is high

"Hi Team,I have a lambda which basically performs the data transformation on service response. The lambda duration metrics is slowly spiking when the traffic is increasing.Referred already :https://docs.aws.amazon.com/lambda/latest/dg/runtimes-context.htmlThings already configured for lambda:Auto scaling the provisioned concurrency of lambda.I have enabled the X - Ray trace for the lambda.Found out that, Invocation phase duration is increasing when there is more incoming traffic.Screenshots for reference:RECENT_TRACESBAD_SCENARIOGOOD_SCENARIOAny idea why the invocation phase is increasing & how to handle this ?FollowComment"

Answer: "0I don't think there's enough information here to solve your problem.For example, if your Lambda function is interacting with a back-end database then it's possible that under load that database is responding slower and that is causing an increase in Lambda function time and latency.But without a detailed analysis of the code and what it is doing it's complete guess work.If it were me, I'd be using X-Ray, instrumenting the code and then analysing where the additional latency is coming from when the function is under load.CommentShareEXPERTBrettski-AWSanswered a year ago"


Question: Device Name on Instances console does not match "Filesystem" device name from "df -k" command

"On the Instances console page, the EBS volume for the root device is reported to be: /dev/xvdaBut, the "df -k" command from the instance itself is reporting: /dev/nvme0n1p1 (an NVMe) device.$  df -kFilesystem      1K-blocks     Used  Available Use% Mounted ondevtmpfs        193955196        0  193955196   0% /devtmpfs           193965976        0  193965976   0% /dev/shmtmpfs           193965976      780  193965196   1% /runtmpfs           193965976        0  193965976   0% /sys/fs/cgroup/dev/nvme0n1p1 1048563692 26926468 1021637224   3% /tmpfs            38793196        0   38793196   0% /run/user/1000Is there something wrong?  Shouldn't they match?  I need to know what kind of device it is so I know which instructions to follow for extended the file system as I just finished resizing the volume.  There are two different instructions on this page depending on if the device is XVD or NVMe: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/recognize-expanded-volume-linux.htmlThanks,AlFollowComment"

Answer:
"0Hello!

You mention that the device name on the instance console does not match the “Filesystem” device name from the “df-k” command.Well with that being said the process of attaching a volume to your instance, you include a device name for the volume. The name you have included is to be used by your EC2 instance. What assigns the actual volume name is the block device driver when mounting the volume. Note that the assigned name can be different from the name that your EC2 instance uses.
Therefore it is advisable to note the virtualisation type of your AMI because the recommended and available device names that you can use depends on the virtualisation type of your instance . With regards to NVMe EBS volumes the device name that you use in a block device mapping are renamed using NVMe device names (/dev/nvme[0-26]n1). The block device driver can assign NVMe device names in a different order than you specified for the volumes in the block device mapping. Also note that NVMe instance store volumes are automatically enumerated and assigned an NVMe device name.References :Linux Device Names: https:[1] //docs.aws.amazon.com/AWSEC2/latest/UserGuide/device_naming.html#device-name-limitsCommentShareAntonioanswered a year ago"


Question: Get total number of array workers inside of array job

"If I subsmit a Batch array job, what is the best practice for getting the total number of array workers within each array worker itself?I can access the worker index using the AWS_BATCH_JOB_ARRAY_INDEX environment variable, but often this number doesn't mean anything (e.g., for determining the extent of a chunk of data for the worker) without the context of the total number of workers.I understand that I can supply the total array size as a command line argument to the job, but this is cumbersome. Is there a better way?FollowComment"

Answer: "1Unfortunately, there is no straight-forward way to access the Batch array length using the Environment variables. The list of environment variables provided in the doc - https://docs.aws.amazon.com/batch/latest/userguide/job_env_vars.html are the only ones available at the moment.Please feel free to create a feature request for your use-case in the containers-roadmap github project using this link.CommentShareSUPPORT ENGINEERVenkat Penmetsaanswered a year ago"


Question: "Set device timezone(PDT, EDT) in Device Farm"

"Is there a way to set the device timezone to a particular time zone, America/Los Angeles (PDT)On Android?on iOS?FollowComment"