Question: super data type not parsing properly

"Trying below mentioned code using super data type. But its not parsing it. Please help me on this.SELECT  id,val,val."SS"FROM temp_json c, c.d AS valwhere id='0010a191-bf42-11ed-9178-ddc4f20ae2d7']Table Script:-CREATE TABLE reporting_owner.temp_json (id character varying(200) ENCODE lzo,d super)DISTSTYLE AUTO;Out put attached:-example data:-[{"SS":[{"data":[{"label":"checksum","value":"2553"},{"label":"numSettings","value":"10"}],"metadata":{"type":"SS"}}]},{"SHV":[{"data":[{"label":"rawPayload","value":"544d555f544553545630332c32315f30345f32325f3031"}]}]},{"TT":[{"data":[{"label":"trailerId","value":"0"},{"label":"highTempThreshold","value":"115"},{"label":"highPressureThreshold","value":"97"},{"label":"lowPressureThreshold","value":"48"}],"metadata":{"type":"TT"}}]},{"BS1":[{"data":[{"label":"frontRight","value":"58","units":"%","type":"Brake Pad Thickness Remaining"},{"label":"rearLeft","value":"92","units":"%","type":"Brake Pad Thickness Remaining"},{"label":"frontLeft","value":"15","units":"%","type":"Brake Pad Thickness Remaining"},{"label":"rearRight","value":"100","units":"%","type":"Brake Pad Thickness Remaining"}],"metadata":{"label":"BS1_0","index":"0","type":"BMS"}}]},{"BC1":[{"data":[{"label":"parkingBrakeStatus","value":"UNLOCK"},{"label":"frontLeftServiceBrakePressure","value":"69.00","units":"kPa","type":"Pressure"},{"label":"frontLeftParkingBrakePressure","value":"103.00","units":"kPa","type":"Pressure"},{"label":"frontRightServiceBrakePressure","value":"345.00","units":"kPa","type":"Pressure"},{"label":"frontRightParkingBrakePressure","value":"379.00","units":"kPa","type":"Pressure"},{"label":"rearLeftServiceBrakePressure","value":"552.00","units":"kPa","type":"Pressure"},{"label":"rearLeftParkingBrakePressure","value":"586.00","units":"kPa","type":"Pressure"},{"label":"rearRightServiceBrakePressure","value":"896.00","units":"kPa","type":"Pressure"},{"label":"rearRightParkingBrakePressure","value":"931.00","units":"kPa","type":"Pressure"}],"metadata":{"label":"BC1_0","index":"0","type":"BMS"}}]},{"SHS1":[{"data":[{"label":"rawPayload","value":"0001c607"}]}]},{"SHN":[{"data":[{"label":"sensorHubS/N","value":"6.14336.10496"}],"metadata":{"type":"SHN"}}]}]FollowComment"

Answer: "1Hello,My understanding is that you are not able to parsing super type data.Please do correct me if my understanding varies from your query.I conducted the test in the following format and confirmed that parsing works normally.I have corrected the syntax error in some parentheses in the JSON data form, and inform you that the data was parsed through JSON_PARSE.I'm forwarding you my test query.SET enable_case_sensitive_identifier TO true;drop table testparse;create table testparse(super_json super);insert into testparse values(JSON_PARSE('{    "SS": [{        "data": [{            "label": "checksum",            "value": "2553"        },        {            "label": "numSettings",            "value": "10"        }],        "metadata": {            "type": "SS"        }    }],    "SHV": [{        "data": {            "label": "rawPayload",            "value": "544d555f544553545630332c32315f30345f32325f3031"        }    }],    "TT": [{        "data": [{            "label": "trailerId",            "value": "0"        },        {            "label": "highTempThreshold",            "value": "115"        },        {            "label": "highPressureThreshold",            "value": "97"        },        {            "label": "lowPressureThreshold",            "value": "48"        }],        "metadata": {            "type": "TT"        }    }],    "BS1": [{        "data": [{            "label": "frontRight",            "value": "58",            "units": "%",            "type": "Brake Pad Thickness Remaining"        },        {            "label": "rearLeft",            "value": "92",            "units": "%",            "type": "Brake Pad Thickness Remaining"        },        {            "label": "frontLeft",            "value": "15",            "units": "%",            "type": "Brake Pad Thickness Remaining"        },        {            "label": "rearRight",            "value": "100",            "units": "%",            "type": "Brake Pad Thickness Remaining"        }],        "metadata": {            "label": "BS1_0",            "index": "0",            "type": "BMS"        }    }],    "BC1": [{        "data": [{            "label": "parkingBrakeStatus",            "value": "UNLOCK"        },        {            "label": "frontLeftServiceBrakePressure",            "value": "69.00",            "units": "kPa",            "type": "Pressure"        },        {            "label": "frontLeftParkingBrakePressure",            "value": "103.00",            "units": "kPa",            "type": "Pressure"        },        {            "label": "frontRightServiceBrakePressure",            "value": "345.00",            "units": "kPa",            "type": "Pressure"        },        {            "label": "frontRightParkingBrakePressure",            "value": "379.00",            "units": "kPa",            "type": "Pressure"        },        {            "label": "rearLeftServiceBrakePressure",            "value": "552.00",            "units": "kPa",            "type": "Pressure"        },        {            "label": "rearLeftParkingBrakePressure",            "value": "586.00",            "units": "kPa",            "type": "Pressure"        },        {            "label": "rearRightServiceBrakePressure",            "value": "896.00",            "units": "kPa",            "type": "Pressure"        },        {            "label": "rearRightParkingBrakePressure",            "value": "931.00",            "units": "kPa",            "type": "Pressure"        }],        "metadata": {            "label": "BC1_0",            "index": "0",            "type": "BMS"        }    }],    "SHS1": [{        "data": {            "label": "rawPayload",            "value": "0001c607"        }    }],    "SHN": [{        "data": {            "label": "sensorHubS/N",            "value": "6.14336.10496"        },        "metadata": {            "type": "SHN"        }    }]}'));select * from testparse;Result :select super_json, super_json."BS1" from testparse;super_json                            | BS1{"SS":[{"data":[{"label":"che...   | [{"data":...I trust that the above information will be useful for you.Please feel free to reach out to me if you have any questions or issues regarding this, and I will gladly assist with them as well.CommentShareHyunjun_Janswered 3 months ago"


Question: Urgent-AWS Certification Account LastName update

"Hello,I have gone https://support.aws.amazon.com/#/contacts/aws-training to update Last Name in my Certification Account profile to comply with my Id proof. My last name on the certification account is . However, my last name on my Government ID is. I didn't hear back from anyone.Please help me to get update my Last Name as I have Exam on September 5, 2022.Email Id :AWS Candidate ID :Registration ID:Current Last Name :Last name to be changed to:Thanks in Advance for your help. I hope to hear from you soon.*Edit: removed personal information (ie: name, email address, candidate ID) from post — Aimee K.FollowComment"

Answer: "1Hello,This must be resolved using the support page you referenced.  Please wait for the support team to help assist you with the name change.CommentShareEXPERTChris_Ganswered 9 months ago"


Question: How  to prevent cloud trail logs being created as S3 buckets with CDK?

"I'm using cloud trail to trigger an event bridge rule, and every time new deployment takes place duplicate s3 buckets are being created for cloud trail logs, how do I prevent this through CDK?FollowComment"


Question: Is there an extra fee for the use of signed URLs in S3?

"I imagine the checking of signed URLs is more computationally expensive for AWS, but I can't see how much more it costs anywhere.FollowComment"

Answer: 3Accepted AnswerPre-signing is just changes the place where the signature is stored. Without signed urls the cookies in the http request will have the signature. A signed url can be use by anyone without the need of a browser context.Only if the S3 bucket is fully public there is no need for checking who is accessing an object.There is no additional cost involved.If going through CloudFront (which does caching) however it might have an impact. If not properly configured every request to the object in question might have a different url and is fetched from S3 every time. Also browser cache will always miss if the query parameter of the signature is different every time. CloudFront also offers the possibility to sign with cookies instead of the URL.CommentShareJaccoPKanswered a year agoora a year agoSorry let me clarify... Is signed more expensive than public?ShareJaccoPK a year agoThere is no additional cost.Share1There is no additional charge (vs normal request) associated with the use of signed-url on S3.CommentShareMBanswered a year ago


Question: WorkMail suddenly quit working for incoming mail

"My Amazon WorkMail suddenly quit working for incoming email, but I can still use it for outgoing.  I've changed nothing in my configuration.  Ideas?  Here is the returned mailer message:Delivery has failed to these recipients or groups:scotto@chateausylvania.comYour message couldn't be delivered. Try to send it again later. If the problem continues, please contact your email admin.Diagnostic information for administrators:Generating server: inbound-smtp.us-east-1.amazonaws.comscotto@dmain.comRemote Server returned '554 4.3.0 < #4.3.0 smtp; 451 4.3.0 This message could not be delivered due to a recipient error. Please try again later.>'Original message headers:ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;b=bzjaz1W5uxMoLF20bGq9quqYq3SUCdYY8zHQvIZkxkKBZReq/GveJE2eHCLx3/EPuliLfs5JdpiZkxTe/ur1qoRa7RLSsG7iXxubjBq17iCbyL6tFzqLBCyJd9jceYjYZX5BGh9+f+A/I7hwlGXstl4ULASappMmQr0JyswAa/bN6MfdzkeP0FYBgrJ8EFV6kcv3kQDgHZKSFBZ4iViTfpEhuMhJdrehQDKfMmLW0I0wDcfAS9cIhVIYeM1G/5e8yBB90r33GtS/8Zy4y/27q7oCEsaQzIvtEObLJuGBuRJMT/i5hSizQhmMxlepA1fh4adgGQHoJYJSOf/kRs8sww==ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;s=arcselector9901;h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;bh=s35c/OROCcjbeBjcoYUwp/dnu7aWJa2K/ryNVo0lP4U=;b=KqkJSovayntDz6z7RPZ58aKFWBlY99JTfmz3zLKbb1wrJuaovJtBEAtQvKSFW4JgBTQQn3aJRMgSHVpn9pvw8QG36bz2lPfbhoKKK6nYOHUNyQbbyMm+WLSz5CraKvp5evw1FMXWre0KauOLUGUKH37bKa48l3HHtVEIBWAsgDlVNeG+V51XIgIGiN9a0yt9C/CEbFhaCZplHUTTyZMLqg4/bch/mtOoc78h3pv0kIykcTVIBlS9Iqt+q+LbjAJ0x/pVyUqATZG6ZZ53MYsv2e4BmLYTuXdvstcKuCzGXIh8XwTgd4kcgmNpVp/fkPRbrMF/9Adu0KUxQINiZgvlrw==ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=passsmtp.mailfrom=snhu.edu; dmarc=pass action=none header.from=snhu.edu;dkim=pass header.d=snhu.edu; arc=noneDKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=snhu.onmicrosoft.com;s=selector2-snhu-onmicrosoft-com;h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;bh=s35c/OROCcjbeBjcoYUwp/dnu7aWJa2K/ryNVo0lP4U=;b=Tvg81lMP2ozEoNwxrvbfUUqTWhcRUWnlFvCf1SfglUfYp9P+zGnSFkKe91d9zODak7pqC0hUYEnMyvJfyr+fnk+GxqX+9qvNS3Y5L+ct/dRa7fyQKqKDvotpklmLXKO6sRlKNNV0TjtjRv8B05srfHZriNwyQhQpo+BP9O1C/vw=Received: from DS7PR05MB7221.namprd05.prod.outlook.com (2603:10b6:5:2d2::15)by SN6PR05MB4592.namprd05.prod.outlook.com (2603:10b6:805:2d::10) withMicrosoft SMTP Server (version=TLS1_2,cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5273.5; Thu, 19 May2022 17:10:43 +0000Received: from DS7PR05MB7221.namprd05.prod.outlook.com([fe80::ecd9:ac0c:f727:5e56]) by DS7PR05MB7221.namprd05.prod.outlook.com([fe80::ecd9:ac0c:f727:5e56%6]) with mapi id 15.20.5293.007; Thu, 19 May 202217:10:43 +0000From: ", Scott" s.overmyer@domain.comTo: Scott  scotto@domain.comSubject: testThread-Topic: testThread-Index: Adhro15u0LBfykd7SgaL9p5aouINYA==Date: Thu, 19 May 2022 17:10:43 +0000Message-ID:DS7PR05MB7221CE8A476BEF42974937E7F0D09@DS7PR05MB7221.namprd05.prod.outlook.comAccept-Language: en-USContent-Language: en-USX-MS-Has-Attach: yesX-MS-TNEF-Correlator:authentication-results: dkim=none (message not signed)header.d=none;dmarc=none action=none header.from=snhu.edu;x-ms-publictraffictype: Emailx-ms-office365-filtering-correlation-id: 50542666-a20f-45b1-df02-08da39ba821ex-ms-traffictypediagnostic: SN6PR05MB4592:EE_x-microsoft-antispam-prvs:SN6PR05MB45924EE5A772D0AD7C8E3243F0D09@SN6PR05MB4592.namprd05.prod.outlook.comx-ms-exchange-senderadcheck: 1x-ms-exchange-antispam-relay: 0x-microsoft-antispam: BCL:0;x-microsoft-antispam-message-info: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-forefront-antispam-report:CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:DS7PR05MB7221.namprd05.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230001)(4636009)(366004)(166002)(76116006)(558084003)(52536014)(508600001)(38070700005)(38100700002)(66946007)(3480700007)(5660300002)(55016003)(9686003)(66446008)(99936003)(186003)(40140700001)(6916009)(26005)(122000001)(64756008)(86362001)(2906002)(66476007)(66556008)(8936002)(786003)(33656002)(316002)(8676002)(71200400001)(75432002)(6506007)(7696005)(7116003)(220243001);DIR:OUT;SFP:1102;x-ms-exchange-antispam-messagedata-chunkcount: 1x-ms-exchange-antispam-messagedata-0:=?us-ascii?Q?V3aqiDRPfbsGmlisQSai32OKp+rxjEr8esL1n4noEP5MrQqli9C+eIDVdVtl?==?us-ascii?Q?1zx2VITVOht5Wj4qx2eBBICHjscujvB+FhPfwHTdZ+GK28zOWNMS1r0o0hVQ?==?us-ascii?Q?pUfGBrmuYPiMVAGTvVoioHlVBxljvxo3ojb/F2tTDfNth2egLnzMk8eUXff9?==?us-ascii?Q?EoAnyq0m5WK3AcxI8jyjmqWiRiNyLYOfkxznvJrXEQLbGSwAZ8+Gx9SRG6Zu?==?us-ascii?Q?uvogp3x6rngtbbeEFKu5+LTNtX9PaIllhvxdBlDXZDIiVvv4R8YG67W/17MM?==?us-ascii?Q?xw+KnsXIwuHFSuhmazqDcZwiH+KMQDvlmBDoKFqXtzrCCImcF37I/EFrgrOr?==?us-ascii?Q?tdNFZpN7rI1ZsMwXnIs70B29S0PTAQ7Bh/oW2idswVL6rttm/ZHF88zNhCDf?==?us-ascii?Q?HbVHly4OskRUbCCNoqvPlkPqHOAFgkaCZ6vnNc7W2J6ulsbgZg3/Im03TX+/?==?us-ascii?Q?5u/AiEpLo7RQ+Bkm5sZ7YqVs1DvvD1agH8t+qiiz6di6Iseqne+uKFPOG3+0?==?us-ascii?Q?ZWF0npZothAn70v0iBFENDuFvcBMw/fQsOsPX0zeOiSXRI9St/3SRW6cKB+g?==?us-ascii?Q?JBp1EQIw64rR0HJlRAcMJPOnp3CwtMN3gj7jeqTVFii/fop0VElmnmAYAaNN?==?us-ascii?Q?tJ2/FS/I1fx/yKEpA6X9qhkrJzh0pmGvw9bLnZXA3nTg2qvGxsUqYANTM5Rh?==?us-ascii?Q?WUR56O4ypRkeQke1v+8z67PHG1EtAMpNoWVccmc7Q4f9/Z+YN1QBb6X4gk55?==?us-ascii?Q?Eug92owBSPT3ZJ6tccxZC1bLCIQp98us01NYjvD/uNoYMjewOvZpi21usHcA?==?us-ascii?Q?4YPxJcB/k2YGkYgskBvtLMZdvugnXYAvFr9jd8ixCBajdrKQTCFvsrru89L/?==?us-ascii?Q?ezIrrUgSbwSquWYw3rJIQ/Fo6h/Vs2zFVd9ESiYZuglQRen5hch2NOycWZuT?==?us-ascii?Q?LO/aex+4bug4sQ1cBPX7nZpjINLWr8e5Y06dRYhUUfz0IRklCTDFZ9/nYcc/?==?us-ascii?Q?r4e0SjaRetd2Z6ex8defjWVOrguxQxcwL7Xw1OsIbdUc2eKzN1gWswdF75qp?==?us-ascii?Q?e0EwmecXLXxhwHfam/GIVNemSoR1bdRH6GpHoTSVkk1xCEH9Gni+no4gV74d?==?us-ascii?Q?Xnjr1wacPmWPrRoPfG624JHr6tHNzhtpQiGxqbPMsHpGDk2JxSnq67f6ejSd?==?us-ascii?Q?TX/BRmOmQiTX+9X0OpZNe9BUD/pSy5qC35MXOAeYbZLPfUS7QngFrouhhNge?==?us-ascii?Q?f4p19jP7VDedE+TuKIZJ6dk+doEdPtuhLVv7utdXOYKPm/b8yKDzZEgL6bGB?==?us-ascii?Q?bWcINrxuG5+ICRISU4HqJCeuiVnJdiuAq6yN5zr25Azq5kZy0NrE1n3yhYnj?==?us-ascii?Q?/F7x4+B5OTvor9X2URQ1O23e0VRPr7Z8lXkvvtf/6AYba2gHn55lwP+ueK1z?==?us-ascii?Q?6DRHZ5WbdOmeDexB7KQOeOuVsAvbBbjSWHI5LWtrUKDLaHcTDVO9CoCnxkVT?==?us-ascii?Q?pQiaoRSWhMUh3Pb3qHv7NcyVwVMyouPAbvKVAHUfLbaRJvGi3RRG6gfzJ5S8?==?us-ascii?Q?RQNc7m8Pl04dW9q2LnPUvaUMPFkCog2tIO2/6sWLlHHLgGBfxYZFAVg+sRim?==?us-ascii?Q?OWfJCqKURvnsFYu7JhY126JUt+GQ+bllzzHN7/Q3MKRJVHuWjtpan+OnUCZK?==?us-ascii?Q?iXOnNSaKEMO82R1OBfGy5cUfDz9AStaASaYjqdAfvyDKJBXdjsSA9rcvq9ur?==?us-ascii?Q?7vYEGMSPKA=3D=3D?=Content-Type: text/plainMIME-Version: 1.0X-OriginatorOrg: snhu.eduX-MS-Exchange-CrossTenant-AuthAs: InternalX-MS-Exchange-CrossTenant-AuthSource: DS7PR05MB7221.namprd05.prod.outlook.comX-MS-Exchange-CrossTenant-Network-Message-Id: 50542666-a20f-45b1-df02-08da39ba821eX-MS-Exchange-CrossTenant-originalarrivaltime: 19 May 2022 17:10:43.5639(UTC)X-MS-Exchange-CrossTenant-fromentityheader: HostedX-MS-Exchange-CrossTenant-id: 2baef15b-b8de-423f-9d8a-46f3686d8848X-MS-Exchange-CrossTenant-mailboxtype: HOSTEDX-MS-Exchange-CrossTenant-userprincipalname: IhGbTbzXOf0CGwcGuV42T2fNAJH6jT2SUqYcepRCBIu5u1+M0zXC1RtOaCwLkdv2CzxWp7RHHGd+MunOgDX3hw==X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR05MB4592FollowComment"

Answer: "0Hi,I'm sorry to hear you're experiencing problems receiving mail. I took a look at your domain and it seems there are two rules in your SES inbound rule set. A "Catch all" rule and the WorkMail rule. If the "Catch all" rule fails, it will not continue with the WorkMail rule. Please verify the "Catch all" rule works correctly in order to receive mail in WorkMail.Kind regards,RobinCommentShareMODERATORrobinkawsanswered a year agoAWS-User-4719290 a year agoThanks.  I fixed it now by reversing the rule order.  Also, I had deleted the S3 bucket in which incoming were stored the other day, and this is probably the real issue. :-(Share"


Question: How to connect to dynamodb-local using NoSQL WorkBench for Amazon DynamoDB

I using dynamoDB local in docker when development local.Can I connect to dynamoDB local using NoSQL Workbench for Amazon DynamoDB?Is there an option such as --endpoint-url?FollowComment

Answer: "0Currently the workbench does not support DynamoDB Local.CommentShareEdinanswered 4 years ago0We are working on adding support for DynamoDB Local in NoSQL Workbench. We will ship that very soon. Stay tuned for more updates.CommentShareAWS-User-4262975answered 4 years ago0We've added support for DynamoDB Local in NoSQL Workbench now. Please check - https://aws.amazon.com/about-aws/whats-new/2019/11/nosql-workbench-for-amazon-dynamodb-adds-support-for-dynamodb-local/CommentShareAWS-User-4262975answered 3 years ago0You can also try Dynobase, an alternative interface for DynamoDB which supports both DynamoDB Local, Localstack and --endpoint-url option.CommentShareAWS-User-2037116answered a year ago"


Question: Does the EBS Datakey is rotating

"Hello,In EBS documentation, it is explained how EBS encryption works. It explains data is encrypted with a data key, which is encrypted with a KMS Key. Later in the same page, it explains AWS KMS generates new cryptographic material for the KMS key every year. I also understand the data key is stored with the volume information.Should I understand that data key is never rotating ?Thank you for your help.FollowComment"

Answer: "1Accepted AnswerThats correct, AWS does not manage or rotate the data keys. Notice you do not see the data keys inside KMS console.AWS KMS generates, encrypts, and decrypts data keys. However, AWS KMS does not store, manage, or track your data keys, or perform cryptographic operations with data keys.https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#data-keysCommentShareABitnaranswered 2 months agoEXPERTalatechreviewed 2 months ago"


Question: pending "create-fpga-images" using aws ec2

"Hi all.. I've tried to create aws-fpga-images with xclbin files generated by v++.the detailed situation I've met now is below,created "awsxclbin files" using command"aws ec2 create-fpga-images -xclbin={my_xclbin} -o={my_awsxclbin_name} -s3_bucket={my_bucket} -s3_dcp_key={my_dcp_repo} -s3_logs_key={my_log_repo}"all txt, json, and awsxclbin files were successfully generated in my local linux machine."aws ec2 describe-fpga-images --fpga-image-ids {generated_afi_ids}" showed the bitstream is pending (still pending)opened aws ec2 websiteI found that the .tar file generated by aws ec2 command exists in {my_dcp_repo}I couldn't find the vivado log files in {my_log_repo}However, my request status for create-fpga-images is now still pending. (the request  was created on Aug 25 2022).Can I find the detailed status of the ongoing request on aws websites?FollowComment"

Answer: "1Dear customer,Thank you so much for your interest in AWS. Thanks for providing the detailed commands you used to create the AFI. AWS requires that you use create_vitis_afi.sh script to generate AFI when using Vitis as documented in https://github.com/aws/aws-fpga-staging/tree/develop/Vitis. However, I see that you used create-fpga-images to create AFI with vitis flow. The create-fpga-images tool is used for HDK flow. Can you please try using create_vitis_afi instead. reference: https://github.com/aws/aws-fpga-staging/tree/develop/VitisIn addition, can you also provide details on any reference you possibly encountered where if create-fpga-images was recommended/used in the documentation to create AFI with vitis flow.ThanksCommentShareAWS-User-7905434answered 9 months agoStevenKim 9 months agoThank you for your reply on my question.I've tried to use create_vitis_afi.sh when I created awsxclbin, and this was not a workaround for this issue.afi and agfi were successfully generated, but 'pending' was not turned to 'fail' or 'available'.the file size of the xclbin is 1.1GB, generated by 2021.2 vitis.My last 'available' awsxclbin was created with xclbin generated by  the same version of vitis. and its file size was 850MB.is there the way to check whether the 'pending' is being proceeded?Special Thank you.ps. my design is fully fit in 2021.2 and I cannot modify the design to fit in 2022.1++added at 8:28 am (south korea)++Now current afi status is not being updated"State": {"Code": "pending"},"CreateTime": "2022-08-28T04:00:02+00:00","UpdateTime": "2022-08-28T04:00:02+00:00",Share0Dear customer,can you please provide the following details1.) which version of the developer AMI are using while trying this run.2.) Which version of the developer kit are you using3.) Are you able to run this flow with one of the examples provided in the developer kit for Vitis? i.e, are you seeing this issue only with your design or are you seeing this with examples provided in developer kit as well?ThanksCommentShareAWS-User-7905434answered 9 months agoStevenKim 9 months agoI used ./create_vitis_afi.sh not in AMI, but in my local linux machine.if the verison of the dev. kit means the tag of the "aws-fpga" github, I've checked out the github tag as v1.4.23.Yesterday, I've implemented fpga dcp from the RTL-level synthesis of my ANOTHER design and i created the awsxclbin, which was generated and turned to 'available' in s3 bucket successfully.Thank you.Share"


Question: How to enable compatibility mode on existing Opensearch domain

Is it possible to to enable compatibility mode on existing Opensearch domain?  I found this article https://docs.aws.amazon.com/opensearch-service/latest/developerguide/rename.html and added in the cluster settings which has changed the master nodesbut not the data nodes. I tried scaling the nodes up but they still report the opensearch version number instead of the equivalent Elasticsearch version.FollowComment

Answer: "0Hi there, yes running the following command will enable compatibility mode in existing OpenSearch domainPUT /_cluster/settings{  "persistent" : {    "compatibility.override_main_response_version" : true  }}If this is already executed, to verify if compatibility mode is enabled, run following command to list all current settingsGET _cluster/settings?include_defaults=trueAnd look for following section to see if compatibility mode is enabled."compatibility" : {      "override_main_response_version" : "true"    }If you are not able to enable the setting, please open a Support case with AWS OpenSearch so that a proper solution can be provided upon looking into other resources.CommentShareSUPPORT ENGINEERHarshith_Manswered a year ago0I am able to edit these settings but they only effect the master services and not the nodes. The nodes are what Kibana checks for compatiblity.CommentShareRudi-kanswered a year ago"


Question: Accessing S3 file using only Cognito and hosted UI without server dependancy

"Hi,I have a cognito user and identity pool with Public Client.  Through javascipt in callback page, I am able to get the token from Auth Code with PKCE Flow.However, I am not able to get the temporary credentials to access S3 object.  I tried various methods like cognitoUser.setSignInUserSession(idToken, accessToken) to set the token received and get temporary access credentials. But I get the following error when using GetIDAWS.CognitoIdentity.getId()Error: Token is not from a supported provider of this identity poolFor the same pool, I have a confidential client and everything works without any issues (as it involves passing security key from server side).Will we be able to access S3 url with only public client and hosted UI?Any samples are greatly appreciated.Regards,RajFollowComment"


Question: AWS Glue Not  able to start the Notebook

"When i try to open the job and click on Notebook , i am seeing the below errorFailed to start notebook server"Task allocated capacity exceeded limit. (Service: AWSGlueJobExecutor; Status Code: 400; Error Code: InvalidInputException)"FollowCommentrePost-User-5236100 10 months agoHave the same problem. Have you figured out a solution yet?Share"

Answer: "0Hello,In regards to this error - Task allocated capacity exceeded limit. I would advise checking the quota of your AWS accounts for the following limits -Max task dpus per accountMax concurrent job runs per accountIn scenarios such as above where capacity limit for a resource is met or throttling is experienced, increasing the limit for the quota and implementation of exponential backoff retry [1] mechanism is recommended.Please note that AWS maintains service quotas (formerly called service limits) for each account to help guarantee the availability of AWS resources and prevent accidental provisioning of more resources than needed. Some service quotas are raised automatically over time as you use AWS. However, most AWS services require that you request quota increases manually.You can use AWS Service Quotas [2] console to view and request increases for most AWS quotas.Important: Most service quotas are specific to an AWS Region. Select the AWS Region where you require the quota increase in.Please feel free to read about managing your AWS service quota here [3] on our Knowledge Center Article in detail.If the suggestions above do not help resolve the issue, we might need to troubleshoot based on your configurations. Could you please create a support case instead so we may discuss details on your resource configurations?Please do not post any sensitive information over re:Post since this is a public platform.References:[1] https://docs.aws.amazon.com/general/latest/gr/api-retries.html[2] https://docs.aws.amazon.com/general/latest/gr/aws_service_limits.html[3] https://aws.amazon.com/premiumsupport/knowledge-center/manage-service-limits/CommentShareSUPPORT ENGINEERYash_Canswered 10 months ago"


Question: ECS Exec error TargetNotConnectedException

"I'm getting this error when I try to connect to my Fargate ECS container using ECS Exec feature:An error occurred (TargetNotConnectedException) when calling the ExecuteCommand operation: The execute command failed due to an internal error. Try again later.The task's role was missing the SSM permissions, I added them, but the error persists.Below is the output of the amazon-ecs-exec-checker tool:Prerequisites for check-ecs-exec.sh v0.7-------------------------------------------------------------  jq      | OK (/usr/bin/jq)  AWS CLI | OK (/usr/local/bin/aws)-------------------------------------------------------------Prerequisites for the AWS CLI to use ECS Exec-------------------------------------------------------------  AWS CLI Version        | OK (aws-cli/2.2.1 Python/3.8.8 Linux/5.13.0-39-generic exe/x86_64.ubuntu.20 prompt/off)  Session Manager Plugin | OK (1.2.295.0)-------------------------------------------------------------Checks on ECS task and other resources-------------------------------------------------------------Region : us-west-2Cluster: removedTask   :  removed-------------------------------------------------------------  Cluster Configuration  | Audit Logging Not Configured  Can I ExecuteCommand?  | arn:aws:iam::removed     ecs:ExecuteCommand: allowed     ssm:StartSession denied?: allowed  Task Status            | RUNNING  Launch Type            | Fargate  Platform Version       | 1.4.0  Exec Enabled for Task  | OK  Container-Level Checks |     ----------      Managed Agent Status    ----------         1. RUNNING for "api-staging"    ----------      Init Process Enabled (api-staging:14)    ----------         1. Enabled - "api-staging"    ----------      Read-Only Root Filesystem (api-staging:14)    ----------         1. Disabled - "api-staging"  Task Role Permissions  | arn:aws:iam::removed     ssmmessages:CreateControlChannel: allowed     ssmmessages:CreateDataChannel: allowed     ssmmessages:OpenControlChannel: allowed     ssmmessages:OpenDataChannel: allowed  VPC Endpoints          |     Found existing endpoints for vpc-removed:      - com.amazonaws.us-west-2.s3    SSM PrivateLink "com.amazonaws.us-west-2.ssmmessages" not found. You must ensure your task has proper outbound internet connectivity.  Environment Variables  | (api-staging:14)       1. container "api-staging"       - AWS_ACCESS_KEY: not defined       - AWS_ACCESS_KEY_ID: defined       - AWS_SECRET_ACCESS_KEY: definedThe output has only green and yellow markers, no red ones, which means Exec should work. But it doesn't. Any ideas why?FollowComment"

Answer: "1Ah, I think I know why it doesn't work. AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY env vars are defined and it's likely they don't have the SSM permissions. It looks like Exec will use the env vars instead of the IAM role. I'll update my post a bit later when I fix the env vars issue.CommentShareAWS-User-3395749answered a year agoAWS-User-3395749 a year agoYes, adding SSM permissions to the user behind AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY env vars fixed the problem for me.Shareshartcher a year agoI had this issue also but had to add ecs:ExecuteCommand permissions to the AWS_ACCESS_KEY_ID account in addition to the SSM permissions.Sharenunzio a year agoGranting SSM permissions to the user account associated with the env var KEY_ID worked for me.  Was something changed recently in Fargate so that this credential controls over the IAM role of the task?  About a month ago, I was able to connect without SSM permissions attached to the internally-referenced user account.Share0Hello, I know this discussion was about a year ago in 2022, but I am faced with same/similar problem today. I am getting same exact error trying to execute command on a simple bitnami/nginx container running on ECS EC profile:aws ecs execute-command --task <removed> --cluster awsome_ecs_cluster --container nginx-test1 --interactive --command "/bin/bash"The Session Manager plugin was installed successfully. Use the AWS CLI to start a session.An error occurred (TargetNotConnectedException) when calling the ExecuteCommand operation: The execute command failed due to an internal error. Try again later.Running the https://github.com/aws-containers/amazon-ecs-exec-checker tool everything appears to be running OK:Prerequisites for check-ecs-exec.sh v0.7jq      | OK (/opt/homebrew/bin/jq)AWS CLI | OK (/usr/local/bin/aws)Prerequisites for the AWS CLI to use ECS ExecAWS CLI Version        | OK (aws-cli/2.11.0 Python/3.11.2 Darwin/22.3.0 exe/x86_64 prompt/off)Session Manager Plugin | OK (1.2.398.0)Checks on ECS task and other resourcesRegion : us-west-1Cluster: awsome_ecs_clusterTask   : removedCluster Configuration  |KMS Key       : Not ConfiguredAudit Logging : DEFAULTS3 Bucket Name: Not ConfiguredCW Log Group  : Not ConfiguredCan I ExecuteCommand?  | arn:aws:iam::XXXXXXXXXX:user/dz-XXXXXXXXXXXXecs:ExecuteCommand: allowedssm:StartSession denied?: allowedTask Status            | RUNNINGLaunch Type            | EC2ECS Agent Version      | 1.68.0Exec Enabled for Task  | OKContainer-Level Checks |----------Managed Agent Status----------1. RUNNING for "nginx-test1"----------Init Process Enabled (run_nginx_ecs:7)----------1. Enabled - "nginx-test1"----------Read-Only Root Filesystem (run_nginx_ecs:7)----------1. Disabled - "nginx-test1"Task Role Permissions  | arn:aws:iam::XXXXXXXXXXX:role/ECSTaskRoleAB3ssmmessages:CreateControlChannel: allowedssmmessages:CreateDataChannel: allowedssmmessages:OpenControlChannel: allowedssmmessages:OpenDataChannel: allowedVPC Endpoints          | SKIPPED (vpc-XXXXXXXXXXXXXXXXXXX - No additional VPC endpoints required)Environment Variables  | (run_nginx_ecs:7)1. container "nginx-test1"- AWS_ACCESS_KEY: not defined- AWS_ACCESS_KEY_ID: not defined- AWS_SECRET_ACCESS_KEY: not definedSo there are no AWS_ACCESS_KEY defined in container, only in CLI context but I am still getting an error above, same as in the original post.any further thoughts on troubleshooting from the community are appreciated!thanks,DanielCommentShareDaniel Zanswered 3 months ago"


Question: Examples of the Pricing and Cost Explorer API

"Are there any examples for the Pricing and Cost Explorer API's? I've searched the documentation (including for Python) and looked at the source code https://github.com/aws/aws-sdk-cpp for any tests, but came up empty.My specific error is that I'm getting incomplete type when declaring a variable of typeAws::Pricing::Model::DescribeServicesOutcome.Here is the error messagemain.c: In function ‘int main(int, char**)’:main.c:39:33: error: invalid use of incomplete type ‘Aws::Pricing::Model::DescribeServicesOutcome {aka class Aws::Utils::Outcome<Aws::Pricing::Model::DescribeServicesResult, Aws::Client::AWSError<Aws::Pricing::PricingErrors> >}’     pricing.DescribeServices(req);                                 ^In file included from /path/to/include/aws/core/utils/crypto/Hash.h:19:0,                 from /path/to/include/aws/core/client/AWSClient.h:23,                 from /path/to/include/aws/core/monitoring/MonitoringManager.h:21,                 from /path/to/include/aws/core/Aws.h:22,                 from main.c:3:/path/to/include/aws/core/utils/crypto/HashResult.h:26:50: note: declaration of ‘Aws::Pricing::Model::DescribeServicesOutcome {aka class Aws::Utils::Outcome<Aws::Pricing::Model::DescribeServicesResult, Aws::Client::AWSError<Aws::Pricing::PricingErrors> >}’         template< typename R, typename E > class Outcome;It seems thatDescribeServicesOutcome, which should be defined intypedef Aws::Utils::Outcome<DescribeServicesResult, Aws::Client::AWSError<PricingErrors>> DescribeServicesOutcome;in<aws/pricing/PricingClient.h>is instead referring toOutcomein/path/to/include/aws/core/utils/crypto/HashResult.h.I've tried re-ordering the header files but that doesn't work.Edited by: dtsmith20010101 on Aug 29, 2019 11:11 AMFollowComment"

Answer: 0Have to include#include <aws/core/utils/Outcome.h>#include <aws/core/Aws.h>#include <aws/pricing/PricingClient.h>#include <aws/pricing/model/DescribeServicesRequest.h>withOutcome.hbefore the others.CommentSharedtsmith20010101answered 4 years ago0Tedious to figure this out!CommentSharedtsmith20010101answered 4 years ago


Question: Google sites unable to verify DNS via TXT record method

"Purchased domain through AWS. Built site through Google. Trying to connect the two. Google can't (won't) verify based on TXT method after more than 72 hrs. DNS TXT is there. Any thing I might be missing?FollowCommentNick 8 months agoAre you able to resolve the TXT record publicly yourself using dig or nslookup? For example "dig TXT <yourdomainwithTXTrecord>" or "nslookup -type=TXT <yourdomainwithTXTrecord>"Also, what is your domain name?I suspect there might be a propagation issue/name server mismatch which in turn causes Google to fail to resolve the TXT record for verification, however, we will need more information to confirm.Share"

Answer: 0Yes. I can resolve the TXT record on nslookupsteveknuppvo.comCommentShareKnuppsanswered 8 months ago


Question: Is it possible to get temporary access keys without using "static" access keys?

Is there any options to get "session" access keys without the need for "static"/"long living" access keys? like with using U2F/SSH or anything else?FollowComment

Answer: "4Accepted AnswerIf you configured federation using external identity provider or configured AWS SSO, you can also get temp credential without long-term credential.https://aws.amazon.com/blogs/security/how-to-implement-federated-api-and-cli-access-using-saml-2-0-and-ad-fs/https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.htmlIf you're on EC2 instance that has instance profile, you can get the temp credential using Instance Meta Data Service.https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instancedata-data-retrieval.htmlCommentShareEunsu_Shinanswered a year agoEXPERTJames_Sreviewed a year ago"


Question: Latency of cross region snapshot copy.

"Does anyone have any idea of the latency for the cross region snapshot operation?I just configured a cluster for cross region copy of encrypted snapshots for the same account, encrypted using the default service master key in the source region.  After that I took a manual snapshot of the reconfigured cluster.  They new manual snapshot is completed and shows status "Available" in the source region, but there's no indication of anything about the snapshot in the target region over an hour after the snapshot in the source region is completed.Shouldn't the Redshift console at least show the snapshot in status "Copying" or something similar in the target region.Thanks,-KurtFollowComment"

Answer: "0Looks like there is some sort of issue with cross-region encrypted snapshot copy.  Support is working an open case on issue.CommentShareklarsonanswered 4 years ago0Turns out there was a problem in cross-region encrypted snapshot copy that caused infinite copy latency, i.e. the cross-region copy failed silently.Redshift fixed it last night for my source region (us-east-1) and target region (us-east-2).  I haven't tested other regions.Now that the cross-region copy operation work the latency seems reasonable.  I've observed about 3-4x the time it takes to create the snapshot.CommentShareklarsonanswered 4 years ago0Turns out there was a problem in cross-region encrypted snapshot copy that caused infinite copy latency, i.e. the cross-region copy failed silently.Yeah I'd say that's a problem :-)CommentShareToebs2answered 4 years ago0Depending on the Amazon Regions involved and the amount of data to be copied, a cross-Region snapshot copy can take hours to complete.In some cases, there might be a large number of cross-Region snapshot copy requests from a given source Amazon Region. In such cases, Amazon RDS might put new cross-Region copy requests from that source Amazon Region into a queue until some in-progress copies complete. No progress information is displayed about copy requests while they are in the queue. Progress information is displayed when the copying starts.CommentShareVetrivelanswered a year ago"


Question: Mediaconvert Job JSON Issue

"I'm trying to run MediaConvert using the PHP SDK however I'm getting a bad exception. I have directly copy and pasted the job json from the console and then json_decode it into an array and pass it into the SDK. But this is the error i'm getting.Bad Request` response:{"errorType": "BadRequestException","httpStatus" : 400,"requestId" : "8271d3c1-94bb-4489-b950-d5be7edabd20",(truncated...)BadRequestException (client): The 'settings' field is required. - {"errorType": "BadRequestException","httpStatus" : 400,"requestId" : "8271d3c1-94bb-4489-b950-d5be7edabd20","message" : "The 'settings' field is required.","settingsValidationErrorsJsonBlob" : "[]"}$jobSetting = '{"Queue": "arn:aws:mediaconvert:us-west-2:XXXX:queues/Default","UserMetadata": {},"Role": "arn:aws:iam::XXXXX","Settings": {"OutputGroups": [{"Name": "File Group","Outputs": [{"ContainerSettings": {"Container": "MP4","Mp4Settings": {"CslgAtom": "INCLUDE","FreeSpaceBox": "EXCLUDE","MoovPlacement": "PROGRESSIVE_DOWNLOAD"}},"VideoDescription": {"Width": 1920,"ScalingBehavior": "DEFAULT","Height": 1080,"VideoPreprocessors": {"Deinterlacer": {"Algorithm": "INTERPOLATE","Mode": "DEINTERLACE","Control": "NORMAL"}},"TimecodeInsertion": "DISABLED","AntiAlias": "ENABLED","Sharpness": 50,"CodecSettings": {"Codec": "H_264","H264Settings": {"InterlaceMode": "PROGRESSIVE","ParNumerator": 1,"NumberReferenceFrames": 3,"Syntax": "DEFAULT","Softness": 0,"GopClosedCadence": 1,"HrdBufferInitialFillPercentage": 90,"GopSize": 2,"Slices": 1,"GopBReference": "DISABLED","HrdBufferSize": 12000000,"ParDenominator": 1,"SpatialAdaptiveQuantization": "ENABLED","TemporalAdaptiveQuantization": "ENABLED","FlickerAdaptiveQuantization": "ENABLED","EntropyEncoding": "CABAC","Bitrate": 6000000,"FramerateControl": "INITIALIZE_FROM_SOURCE","RateControlMode": "CBR","CodecProfile": "HIGH","Telecine": "NONE","MinIInterval": 0,"AdaptiveQuantization": "HIGH","CodecLevel": "LEVEL_4","FieldEncoding": "PAFF","SceneChangeDetect": "ENABLED","QualityTuningLevel": "MULTI_PASS_HQ","FramerateConversionAlgorithm": "DUPLICATE_DROP","UnregisteredSeiTimecode": "DISABLED","GopSizeUnits": "SECONDS","ParControl": "SPECIFIED","NumberBFramesBetweenReferenceFrames": 1,"RepeatPps": "DISABLED"}},"AfdSignaling": "NONE","DropFrameTimecode": "ENABLED","RespondToAfd": "NONE","ColorMetadata": "INSERT"},"AudioDescriptions": [{"AudioTypeControl": "FOLLOW_INPUT","AudioSourceName": "Audio Selector 1","CodecSettings": {"Codec": "AAC","AacSettings": {"AudioDescriptionBroadcasterMix": "NORMAL","Bitrate": 256000,"RateControlMode": "CBR","CodecProfile": "LC","CodingMode": "CODING_MODE_2_0","RawFormat": "NONE","SampleRate": 48000,"Specification": "MPEG4"}},"LanguageCodeControl": "FOLLOW_INPUT","AudioType": 0}],"NameModifier": "1080"},{"ContainerSettings": {"Container": "MP4","Mp4Settings": {"CslgAtom": "INCLUDE","FreeSpaceBox": "EXCLUDE","MoovPlacement": "PROGRESSIVE_DOWNLOAD"}},"VideoDescription": {"Width": 1280,"ScalingBehavior": "DEFAULT","Height": 720,"VideoPreprocessors": {"Deinterlacer": {"Algorithm": "INTERPOLATE","Mode": "DEINTERLACE","Control": "NORMAL"}},"TimecodeInsertion": "DISABLED","AntiAlias": "ENABLED","Sharpness": 50,"CodecSettings": {"Codec": "H_264","H264Settings": {"InterlaceMode": "PROGRESSIVE","ParNumerator": 1,"NumberReferenceFrames": 3,"Syntax": "DEFAULT","Softness": 0,"GopClosedCadence": 1,"HrdBufferInitialFillPercentage": 90,"GopSize": 2,"Slices": 1,"GopBReference": "ENABLED","HrdBufferSize": 9000000,"ParDenominator": 1,"SpatialAdaptiveQuantization": "ENABLED","TemporalAdaptiveQuantization": "ENABLED","FlickerAdaptiveQuantization": "ENABLED","EntropyEncoding": "CABAC","Bitrate": 3000000,"FramerateControl": "INITIALIZE_FROM_SOURCE","RateControlMode": "CBR","CodecProfile": "HIGH","Telecine": "NONE","MinIInterval": 0,"AdaptiveQuantization": "HIGH","CodecLevel": "LEVEL_4","FieldEncoding": "PAFF","SceneChangeDetect": "ENABLED","QualityTuningLevel": "MULTI_PASS_HQ","FramerateConversionAlgorithm": "DUPLICATE_DROP","UnregisteredSeiTimecode": "DISABLED","GopSizeUnits": "SECONDS","ParControl": "SPECIFIED","NumberBFramesBetweenReferenceFrames": 3,"RepeatPps": "DISABLED"}},"AfdSignaling": "NONE","DropFrameTimecode": "ENABLED","RespondToAfd": "NONE","ColorMetadata": "INSERT"},"AudioDescriptions": [{"AudioTypeControl": "FOLLOW_INPUT","AudioSourceName": "Audio Selector 1","CodecSettings": {"Codec": "AAC","AacSettings": {"AudioDescriptionBroadcasterMix": "NORMAL","Bitrate": 160000,"RateControlMode": "CBR","CodecProfile": "LC","CodingMode": "CODING_MODE_2_0","RawFormat": "NONE","SampleRate": 48000,"Specification": "MPEG4"}},"LanguageCodeControl": "FOLLOW_INPUT","AudioType": 0}],"NameModifier": "720"},{"ContainerSettings": {"Container": "MP4","Mp4Settings": {"CslgAtom": "INCLUDE","FreeSpaceBox": "EXCLUDE","MoovPlacement": "PROGRESSIVE_DOWNLOAD"}},"VideoDescription": {"Width": 854,"ScalingBehavior": "DEFAULT","Height": 480,"VideoPreprocessors": {"Deinterlacer": {"Algorithm": "INTERPOLATE","Mode": "DEINTERLACE","Control": "NORMAL"}},"TimecodeInsertion": "DISABLED","AntiAlias": "ENABLED","Sharpness": 50,"CodecSettings": {"Codec": "H_264","H264Settings": {"InterlaceMode": "PROGRESSIVE","ParNumerator": 1,"NumberReferenceFrames": 3,"Syntax": "DEFAULT","Softness": 0,"GopClosedCadence": 1,"HrdBufferInitialFillPercentage": 90,"GopSize": 2,"Slices": 1,"GopBReference": "ENABLED","HrdBufferSize": 12000000,"ParDenominator": 1,"SpatialAdaptiveQuantization": "ENABLED","TemporalAdaptiveQuantization": "ENABLED","FlickerAdaptiveQuantization": "ENABLED","EntropyEncoding": "CABAC","Bitrate": 2000000,"FramerateControl": "INITIALIZE_FROM_SOURCE","RateControlMode": "CBR","CodecProfile": "HIGH","Telecine": "NONE","MinIInterval": 0,"AdaptiveQuantization": "HIGH","CodecLevel": "LEVEL_4","FieldEncoding": "PAFF","SceneChangeDetect": "ENABLED","QualityTuningLevel": "MULTI_PASS_HQ","FramerateConversionAlgorithm": "DUPLICATE_DROP","UnregisteredSeiTimecode": "DISABLED","GopSizeUnits": "SECONDS","ParControl": "SPECIFIED","NumberBFramesBetweenReferenceFrames": 3,"RepeatPps": "DISABLED"}},"AfdSignaling": "NONE","DropFrameTimecode": "ENABLED","RespondToAfd": "NONE","ColorMetadata": "INSERT"},"AudioDescriptions": [{"AudioTypeControl": "FOLLOW_INPUT","AudioSourceName": "Audio Selector 1","CodecSettings": {"Codec": "AAC","AacSettings": {"AudioDescriptionBroadcasterMix": "NORMAL","Bitrate": 128000,"RateControlMode": "CBR","CodecProfile": "LC","CodingMode": "CODING_MODE_2_0","RawFormat": "NONE","SampleRate": 48000,"Specification": "MPEG4"}},"LanguageCodeControl": "FOLLOW_INPUT","AudioType": 0}],"NameModifier": "480"}],"OutputGroupSettings": {"Type": "FILE_GROUP_SETTINGS","FileGroupSettings": {"Destination": "s3://XXX","DestinationSettings": {"S3Settings": {"Encryption": {"EncryptionType": "SERVER_SIDE_ENCRYPTION_S3"}}}}}}],"AdAvailOffset": 0,"Inputs": [{"AudioSelectors": {"Audio Selector 1": {"Offset": 0,"DefaultSelection": "DEFAULT","ProgramSelection": 1}},"VideoSelector": {"ColorSpace": "FOLLOW","Rotate": "DEGREE_0","AlphaBehavior": "DISCARD"},"FilterEnable": "AUTO","PsiControl": "USE_PSI","FilterStrength": 0,"DeblockFilter": "DISABLED","DenoiseFilter": "DISABLED","TimecodeSource": "EMBEDDED","FileInput": "s3://XXX"}]},"AccelerationSettings": {"Mode": "DISABLED"},"StatusUpdateInterval": "SECONDS_60","Priority": 0}';$jobSetting = json_decode($jobSetting, true);$result = $mediaConvertClient->createJob(["Role" => "arn:aws:iam::XXX","Settings" => $jobSetting,"Queue" => "arn:aws:mediaconvert:us-west-2:XXX:queues/Default","UserMetadata" => ["Customer" => "XXX"],]);Edited by: tomhendrick on Feb 22, 2021 4:49 PMFollowComment"

Answer: "0Accepted AnswerHi,When using the PHP SDK to configure Elemental MediaConvert jobs, you only need to specify the settings portion in the JobSettings Variable because  the mediaconvert createjob function calls the other things like Queue, Role, ARN etc.Please take a look at an example of createJob using the PHP sdk here : https://github.com/awsdocs/aws-doc-sdk-examples/blob/master/php/example_code/mediaconvert/CreateJob.phpCommentSharenaveen-awsanswered 2 years ago"


Question: Migrate VPN to Direct Connect+Transit Gateway

"A customer currently has a VPN connected to a VPC with a VPG using static routing. They would like to switch to have a Direct Connect connected to a Transit Gateway which is connected to the VPC.They are wanting to know how to do this migration with limited downtime. I've tried to find any guides around doing this type of migration, but haven't been able to find anything. I'm assuming that this is a little trickier due to them using static routing on the existing VPN connection, but not sure how or if that would change anything.Any guidance on this process would be helpful.Thanks!FollowComment"

Answer: "0Accepted AnswerTGW sideStep 1 - Create DXG and associate TVIF to DXGStep 2 - Create DXG attachment with TGW - Add prefixes that you would like to announce (AWS will announce these prefixes to on-prem) and create VPC attachment with TGWStep 3 - Establish  BGP session and start announcing  (On-prem) prefixes via TVIFStep 4 - Enable propagation within TGW Route TableIf you are not doing any manipulation at TGW route table - Your setup is complete at this point {I believe your customer is at this stage}VPC SideKeep VGW VPN as is. Have route propagation enable on VPC route tables.When you are ready to failover - Add static route (on-prem prefixes) pointing to TGW.If traffic flow works, all good. You can delete VGW VPN. If it doesn't, remove the static route and traffic will start to flow over VGW VPN again.CommentSharejkapsanswered 4 years ago"


Question: S3 bucket owner

"How can I find what user created an S3 bucket via mgmt console?  If I select the bucket under Permissions all I see is Owner aws-acc-001.  Thanks.Edited by: bflone on Oct 25, 2019 8:27 AMFollowComment"

Answer: "0HiThe owner of a bucket or an object in a bucket is not an individual IAM user, but rather the AWS account to which that user belongs.Refer to the link below:https://docs.aws.amazon.com/AmazonS3/latest/dev/access-control-overview.htmlAbout the Resource OwnerBy default, all Amazon S3 resources are private. Only a resource owner can access the resource. The resource owner refers to the AWS account that creates the resource. For example:The AWS account that you use to create buckets and objects owns those resources.If you create an AWS Identity and Access Management (IAM) user in your AWS account, your AWS account is the parent owner. If the IAM user uploads an object, the parent account, to which the user belongs, owns the object.A bucket owner can grant cross-account permissions to another AWS account (or users in another account) to upload objects. In this case, the AWS account that uploads objects owns those objects. The bucket owner does not have permissions on the objects that other accounts own, with the following exceptions:The bucket owner pays the bills. The bucket owner can deny access to any objects, or delete any objects in the bucket, regardless of who owns them.5.The bucket owner can archive any objects or restore archived objects regardless of who owns them. Archival refers to the storage class used to store the objects. For more information, see Object Life cycle Management.If you particularly wish to track additional information against a bucket, you could add a Tag against the bucket to track this sort of information. However, this will not happen automatically you would be responsible for populating the Tag.To determine who created a particular resource you would use Amazon Cloudtrail. It collects information about every API call including the user, IP address, timestamp and parameters passed.RegardsCurt08CommentShareCurt08answered 4 years ago0Thank you!CommentSharebfloneanswered 4 years ago"


Question: How create single CMesh with splitting UV rags?

I want create mesh where count vertex on mesh smaller of count UV vertex.REMOVEDUPLOADFor creating mesh i use CMesh* mesh = indexedMesh->GetMesh(); If i setup indices with duplicated vertex position but unique uv i have separated triangles in 3d. But if i create indices with unique position i cant create needed separated UV. And in CMesh have a rule countVertexPosition == uvVertex.Follow

Answer: "0Accepted AnswerYou cannot send 4 vertices and 6 uv you really need 6 vertices to cope withe the greater number of uv due to the split so you are just sending the proper number of vertices.Tessellation usually breakes on uv seams when displacement is involved.Is it your case?If not the Issue is most probably normal/tangent discontinuity based so let's focus more about your vertex normals and especially the shader you use with the tesselletion.As for normals just check the vertices in the same position also share the same normal and you should be just ok.Then check shader.Both triangle and phong tn implementations may come with discontinuites so check that first of all non procedural meshes uses the same technique and not a different one (es. based on precomputed adiacency) so you can be sure that with that tecnique a proper result could be achieved.Check these things and then post a picture of your visual issue so we can continue on these new evidences.SharerePost-User-7621041answered 6 years ago0I think i found problem. I load Indices toSMeshFace* const faces = mesh->GetStreamPtr<SMeshFace>(CMesh::FACES);but indices store here.vtx_idx* const indices = mesh->GetStreamPtr<vtx_idx>(CMesh::INDICES);SharerePost-User-0150549answered 6 years ago0( no the same problemSharerePost-User-0150549answered 6 years ago0Hi Binky_LY. My goal create single mesh with uv like on a picture on top. Two triangles must be single mesh not separated, but uv must be separate.I work on a VoxelComponent in Gem. For creating terrain, primitive structures and objects in runtime. All work fine but can`t create correct mesh with correct uv.If i try create were all Vertex mesh identical i have single mesh but uv not correct because UVs must more count.else if i try create duplicated vertex positions for add more UVs i have correct uv but my object not a single mesh he have separated vertex were vertex position duplicated and object looking very bad in Phong Tessellation or PN Triangle Tessellation.SharerePost-User-0150549answered 6 years ago0Hey @REDACTEDUSERSharerePost-User-8353690answered 6 years ago0Question for you on the intent. Are you trying to optimize down the number of vertices? Is the goal to havethe number of vertices = number of UVs? Having your goal will help us identify a correct solution for you.SharerePost-User-8353690answered 6 years ago0Thank you Binky_LY, i work with this too if found how do that i will write here. I think maybe some else affect how mesh merge 3d vertex. (tangents, normals e.t.c)SharerePost-User-0150549answered 6 years ago0Thanks! We'll get some info for you soon.SharerePost-User-8353690answered 6 years ago0Hi new_user_987. I had tried create duplicated vertex positions for add more UVs i have correct uv but my object not a single mesh he have separated vertex were vertex position duplicated and object looking very bad in Phong Tessellation or PN Triangle Tessellation. I think maybe some else affect how mesh merged 3d vertex. (tangents, normals e.t.c) Maybe, needed some else correct data besides 3d Vertex Count == UV Vertex Count.SharerePost-User-0150549answered 6 years ago0You have to have the same number of UV coordinates as vertices. The same goes for normals, tangents, bitangents and any other per-vertex data. This is due to the way that 3d graphics hardware works and is the way geometry is ultimately stored by all 3d engines that use GPUs. If any other engine has a datastructure that does let you do what you're asking, then that datastructure gets converted before it goes to the gpu anyway (thus imposing a hidden cost to you). In your example, you need 6 vertices.SharerePost-User-7779371answered 6 years ago0Thank you new_user_98. . But why if i use 6 vertex i cant create single mesh in game. 3D vertex separate. If i create mesh like on picture in external 3d software and then import it to Lumberyard all looking good, but proceduraly in Lumberyard cant create on this moment.SharerePost-User-0150549answered 6 years ago0The export code or mesh import code automatically duplicates the vertices as needed to make the mesh work correctly. In this case it makes two vertices at the exact same location but with different UV coordinates. There will be 6 vertices, two pairs of them have the same location but all have unique uv-coordinates.SharerePost-User-7779371answered 6 years ago0Thank you Gamely. You right all problem in normals, i checking all normal and were vertex splitting, normals have difference orientation (vertex position equals but normals orientation no). I fix that and all looking good.SharerePost-User-0150549answered 6 years ago"


Question: Elastic Beanstalk ignore HTTP 404 monitoring option not available

"I want to prevent my Elastic Beanstalk application from triggering degraded health when there are 404 responses.This has been answered on StackOverflow and I can see the setting indeed:However, once I click the "Edit" button, this setting is nowhere to be found:If I switch over to the "new Elastic Beanstalk console", that setting is missing there as well.How do I turn off health degradation on 404 responses?FollowComment"


Question: AWS Backup - two ec2 instances are assigned as the protected services - but I see an EBS snapshot in the vault?

"I have simple backup job defined with two ec2 instances configured as the protected resources. But in the vault I see the two EC2 instances plus an EBS volume. If the backup service creates a snapshot of the attached EBS volumes while backing up the EC2 instances, then shouldn't I see two sets of EBS resources in the backup vault?One of the EC2 instances' volumes is a GP3 that has a minimum IOPS set, does the type of storage affect how AWS backups the EC2 instance?FollowComment"

Answer: "1Backup plans are based on tags and applied to specific resources.Could you please check the current configuration is in the Resource assignments section for the plan you refer to?For example, a plan that has the following resource assignments configuration will backup all EC2 instances and EBS volumes that have a tag with the name: "Backup" and value: "Yes".Assign by ARN prefixarn:aws:ec2:*:*:instance/*arn:aws:ec2:*:*:volume/*Tags - equalaws:ResourceTag/Backup - YesYou can also check if an EBS volume is unattached to these EC2 instances. We can configure each EC2 instance to keep the EBS volumes after its termination, sometimes resulting in leftovers.CommentSharec3nIvoanswered a year agoAWS-User-4761960 a year agoSo if I added a "Name" tag to my EBS volume and used the same value as an EC2 name tag, then both resources (the EBS and EC2) would get backed up.Thanks for clarifying.If I rename the EBS name tag, will the next backup job then only match on the EC2 tags?Sharec3nIvo a year agoYou should use more specific tag like Backup for example, Name is generic one and will lead to confusions. If you share the "resource assignments configuration" from your plan I can provide you with more recommendations.Share"


Question: Calculated Field in Visuals

"Hi,I have created a calculated field (a percentage) and have formatted it as such in Quicksight. However, when I add this to a donut chart and choose 'Add Metric' it just shows as the value 0.095 for example and not 9.5% which is incredibly frustrating . Is there a way to format this as its % value and not the numerical value. Please note i am aware of "value and percent" but that percent is of the total, not the calculation.FollowComment"

Answer: "0Thank you for posting the question and the detailed explanation on what you are expecting.At present, it is not possible to format the value as percentage in the Donut chart and this is an expected behavior. As every slice already represents a percent of the total, so we do not format individual values as percentages additionally, to avoid confusion. However, to achieve your use case you can consider the below workaround:Create a calculated field with expression {column_name} * 100where column_name is the column which has the values like 0.095On the analyses page add this calculated field to the Donut chart and choose “Add Metric”.Then navigate to “Field wells” > click on the calculated field > Format >More Formatting Options..In “More Formatting Options”, navigate to “Units” and add a '%' suffix manually.Following the above steps you should be able to display the values as percentage in the Donut chart.CommentShareSUPPORT ENGINEERSanket_Kanswered a year ago"


Question: EmotionFX hitboxes

Hi.Where can you set up hit-boxes for eMotionFX characters ?ThanksFollow

Answer: "0Accepted AnswerHey @REDACTEDUSERAt the moment, you can only set up the physics collider through the component system, most likely using the Character Physics Component. We're still working on adding the hooks into the physics system, so for the time being you're limited to the physics collider you apply to your component entity.SharerePost-User-7951591answered 6 years ago0Hi @REDACTEDUSERI was curious if there has been an update on this use-case from Lumberyard?Thank you!SharerePost-User-5509042answered 5 years ago0Hey @REDACTEDUSERSadly, not yet. Thanks for checking in!SharerePost-User-7951591answered 5 years ago"


Question: Is private cloud offering "AWS Outposts" part of billing report?

"AWS Outposts is the private cloud offering from AWS. I think its bill is also part of the billing data CSV from S3 bucket as part cost usage report configuration. If you know for sure that’s great otherwise, what is the best way to confirm that?FollowComment"

Answer: "1Yes you are correct, aws outpost billing will also be available under the billing report.You can purchase Outposts servers capacity for a three-year term and choose between three payment options: All Upfront, Partial Upfront, and No Upfront. If you choose the Partial Upfront or No Upfront payment option, the monthly charges will be due over the three-year term. Any upfront and monthly charge will apply when your Outposts capacity becomes available for launching instances.For detailed information regarding the billing i will suggest you to reach out to the AWS Account and billing support team.Refer: https://aws.amazon.com/outposts/servers/pricing/To contact AWS SupportSign in and navigate to the AWS Support Center. If prompted, enter the email address and password for your account.Choose Create case.On the Create case page, choose Account and billing support and fill in the required fields on the form.After you complete the form, under Contact options, choose either Web for an email response, or Phone to request a telephone call from an AWS Support representative. Instant messaging support is not available for billing inquiries.CommentShareSUPPORT ENGINEERSishu_Ranswered 9 months agoEXPERTToni_Sreviewed 9 months ago"


Question: How to pass ARN of DB credentials stored in secret manager to Lambda in CDK?

"In CDK stack, I create DB credential as    const credentials = aws_rds.Credentials.fromGeneratedSecret(      "mysqlSecret",      {        secretName: props.secretName,      }    );Then how to get the ARN of the secret and pass to environment variable of a Lambda function?aws_lambda.Function({   environment: {    "SECRET_ARN": ??? }})What is the best practice here? I store DB credentials in secret manager, but how to pass it to Lambda construct in CDK?FollowComment"

Answer: "1Accepted AnswerThis method worked well for creating RDS.    const cred = aws_rds.Credentials.fromGeneratedSecret('mysqlSecret2', {      secretName: 'mysql-secret2'    })    const rds = new aws_rds.DatabaseInstance(this, 'rds', {      vpc: new aws_ec2.Vpc(this, 'vpc'),      engine: aws_rds.DatabaseInstanceEngine.MARIADB,      instanceType: aws_ec2.InstanceType.of(aws_ec2.InstanceClass.T3, aws_ec2.InstanceSize.SMALL),      credentials: cred    })    new aws_lambda.Function(this, 'lambd2', {      environment: {        "SECRET_ARN": rds.secret!.secretArn      },      code: aws_lambda.Code.fromInline('print()'),      runtime: aws_lambda.Runtime.PYTHON_3_9,      handler: 'app.handler'    })If you are not creating an RDS, using aws_secretsmanager.Secret instead of aws_rds.Credentials.fromGeneratedSecret worked.    const secret = new aws_secretsmanager.Secret(this, 'secret', {      secretName: 'mysql-secret',      generateSecretString: {        secretStringTemplate: JSON.stringify({ username: 'user' }),        generateStringKey: 'password',      },    })    new aws_lambda.Function(this, 'lambda', {      environment: {        "SECRET_ARN": secret.secretArn      },      code: aws_lambda.Code.fromInline('print()'),      runtime: aws_lambda.Runtime.PYTHON_3_9,      handler: 'app.handler'    })I would be very happy if you could ACCEPTE ANSWER when you solve the problem😀😀😀CommentSharemoritalousanswered a year agohai a year agoThank you! it works for me.In addition, when I create the secret (your second method) then pass into RDS, I got an error from CDK. Can't recall it.Share"


Question: How long can we use 'Multi-container Docker running on 64bit Amazon Linux' on Beanstalk?

"We are using the 'Multi-container Docker running on 64bit Amazon Linux/2.27.7' on Beanstalk. We received an e-mail from AWS that 'Elastic Beanstalk Amazon Linux AMI (AL1) Platform Branches Retire on June 30, 2022'. [1]How long time to support these existing environments?That e-mail said 'Customers can continue to operate existing environments running on retired platform branches but these branches will no longer be managed and supported by Elastic Beanstalk'As far as I can read, we can use this environment continuously.I want to know :We can use our 'Multi-container Docker running on 64bit Amazon Linux/2.27.7' environment after June 30,200 or not.We can deploy our environment after retire date or not,[1] https://docs.aws.amazon.com/elasticbeanstalk/latest/platforms/platforms-retiring.html#platforms-retiring.mcdockerFollowComment"

Answer: "0Hi,I believe you are concerned about your AWS Elastic Beanstalk Amazon Linux AMI platform retiring. When the platform branch has retired Elastic Beanstalk no longer makes it available for customers to deploy new environments. Existing customers may make use and deploy their current environments for a period of 90 days from the published retirement date [1].If an existing customer run an Elastic Beanstalk environment on a retired platform version beyond the 90 day period, all the ongoing management and support of the running application will be the customers responsibility [1]. To continue to benefit from important security, performance, and functionality enhancements offered by component suppliers in more recent releases, we strongly encourage you to update all your Elastic Beanstalk environments to a supported platform version [2].[1] https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/platforms-support-policy.html[2] https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/using-features.platform.upgrade.htmlCommentShareLwazianswered a year ago"


Question: MSK Connect Debezium Connector using AWS Glue Schema Registry for AVRO serialization

"We are trying to integrate change data capture into our MSK cluster using the Debezium SQL Server plugin with AVRO serialization and AWS Glue Schema Registry.  The connector appears to be working correctly as we can see the messages flowing into the Kafka topic and the AVRO schema is registered into our schema registry.  However, when we attempt to deserialize the message from Kafka in a lambda function (MSK trigger), we are getting an error saying that the Schema cannot be found.   We are using this library to do the AVRO serializaton/deserialization in both the connector and our lambda function.  We've added some additional logging to the library and have found that the schema version id that gets written into the message during serialization is different than the one that gets pulled out of the message during deserialization.  Has anyone successfully used Debezium with MSK connect and AWS Glue Schema registry? Pertinent configuration for our MSK connector is provided below:  "key.converter": "org.apache.kafka.connect.storage.StringConverter",  "key.converter.schemas.enable": "false",  "key.converter.avroRecordType": "GENERIC_RECORD",  "key.converter.region": "AWS_REGION",  "key.converter.registry.name": "SCHEMA_REGISTRY_NAME",  "key.converter.schemaAutoRegistrationEnabled": "true",  "value.converter": "com.amazonaws.services.schemaregistry.kafkaconnect.AWSKafkaAvroConverter",  "value.converter.schemas.enable": "true",  "value.converter.avroRecordType": "GENERIC_RECORD",  "value.converter.region": "AWS_REGION",  "value.converter.registry.name": "SCHEMA_REGISTRY_NAME",  "value.converter.schemaAutoRegistrationEnabled": "true",FollowComment"


Question: Where does CloudWatch store data?

"Where does CloudWatch store data ? Is it S3 / Dynamo DB, or something else, or a combination ? Does CW use different services for different types of data? Are those back-end services (S3, Dynamo DB or similar ) accessible to customer / customer manageable ? Thank youFollowComment"


Question: How to restrict s3 to latest TLS ?

"I'm working with 3rd party services , where i need to grant access to our s3 buckets, bu t i want to make sure that any request coming into read/write follow latest TLS protocol. How to achieve this ?FollowComment"

Answer: "1Hi,The following Knowledge Center article describes how to enforce using TLS 1.2 or higher for Amazon S3 buckets. I hope this helps you.CommentShareMikel Del Tioanswered a month agoEXPERTalatechreviewed a month ago0ResolutionYou can enforce using TLS 1.2 or higher for all connections to your S3 buckets by using a resource-based policy attached to your bucket.To set a bucket policy that requires TLS versions 1.2 or higher:Go to the S3 console.Select the bucket from the list.Navigate to the Permissions tab.Under Bucket Policy, select Edit.Add a policy to deny access to the encryption protocols that you want to prevent. For example, use the following policy to deny all HTTPS requests that use TLS versions lower than 1.2:{"Version": "2012-10-17","Statement": [{"Sid": "EnforceTLSv12orHigher","Principal": {"AWS": ""},"Action": ["s3:"],"Effect": "Deny","Resource": ["arn:aws:s3:::DOC-EXAMPLE-BUCKET/*","arn:aws:s3:::DOC-EXAMPLE-BUCKET"],"Condition": {"NumericLessThan": {"s3:TlsVersion": 1.2}}}]}Confirm that you are using modern encryption protocols for S3To test your new policy, use the following example curl command to make HTTPS requests using a specific legacy protocol:curl https://${BUCKET_NAME}.s3.us-east-1.amazonaws.com/image.png -v --tlsv1.0 --tls-max 1.0The example curl command returns Access Denied as Amazon S3 detects your request is not using TLS 1.2 or higher.It’s a best practice to use AWS CloudTrail Lake to identify older TLS connections to AWS service endpoints. You can configure the CloudTrail Lake event data store to capture management events or data events. The corresponding CloudTrail event in CloudTrail Lake shows a TLS version of 1.2, confirming that your customers use a modern security policy to connect to Amazon S3.CommentShareAWS-User-3429271answered a month ago"


Question: AWS Credits for purchases on the AWS Marketplace?

Can AWS Credits be used for purchases (or renewals) on the AWS Marketplace?FollowComment

Answer: "3Accepted AnswerHi,It seems no, at least according to https://aws.amazon.com/awscredits/, where it states:Promotional Credit will not be applied to any fees or charges for Amazon Mechanical Turk, AWS Managed Services, Ineligible AWS Support, AWS Marketplace, AWS Professional Services, AWS Training, AWS Certification, Amazon Route 53 domain name registration or transfer, any Services for mining for cryptocurrency, any other Services as may be designated by your AWS contracting entity, or any upfront fee for any Services such as Savings Plans and Reserved Instances (collectively, “Ineligible Services”).Hope it clarifies ;)CommentShareEXPERTalatechanswered 3 months ago"


Question: "Amazon SES, Message-ID and mailman"

"Hi,We are running a mailman 2 mailing list, and recently switch the mail gateway from another company to now use Amazon SES.There's a new problem that the mailman archives are not able to group threads together the way they were before.  Users are complaining about issues in their local mail clients.It seems to be related to the mail header fields Message-ID: , References: , and In-Reply-To: .If Amazon SES rewrites the Message-ID, it won't match the original Message-ID, and so the second email won't be matched with the first email in the web archives display.  Addtionally, replies are often sent both to the list and to individual participants, and it's critically important that both of these copies have the identical message id.Is there a way to have Amazon SES not modify the Message-ID header?   Or, any other solution to this particular problem?Thanks,SamFollowComment"

Answer: "0The following document shows "Message-ID" in the header field, so it is possible to send an email with the same ID.https://docs.aws.amazon.com/ses/latest/dg/header-fields.htmlAs described in this document, you can use "SendRawEmail" and include "Message-ID" in the header to send an e-mail with an arbitrary value.https://docs.aws.amazon.com/ses/latest/dg/send-email-raw.htmlhttps://docs.aws.amazon.com/ses/latest/dg/send-email-concepts-email-format.html#send-email-concepts-email-format-headerCommentShareEXPERTRiku_Kobayashianswered a month agosdarwin 25 days agoHi @Riku_Kobayashi, on the first link you posted https://docs.aws.amazon.com/ses/latest/dg/header-fields.html it says "If you provide a Message-ID header, Amazon SES overrides the header with its own value."Share"


Question: AWS XRay .NET: avoid tracing health checking requests

"I am working with two application, one is .net core, the other is asp.net. I would like to configure both, to exclude my health check requests. I noticed that the Ruby version has a configuration for just this type of thing.   https://github.com/cookpad/aws-xrayI spent quite a bit of time pouring over the .net version of the documentation, but was not able to find anything similar. I am under the assumption that I might be able to accomplish excluding out these requests, by setting up a sampling rule. However I was hoping there was some sort of configuration that would make this a bit easier.FollowComment"

Answer: "0Thank you for the reply. I went ahead and set up the sampling rules and it worked great.CommentShareclewallenanswered 3 years agonavin-rai 6 months agoHi, Could you please provide the sampling rules you applied to avoid health checks.Share0Hi @clewallen,Unfortunately, right now there is no other way (other than configuring sampling rules) to tell the AWS X-Ray .Net SDK to blacklist certain endpoint requests from tracing. We have this as a task in our backlog and would try to prioritize asap.Also, the official AWS X-Ray Ruby SDK can be found  https://github.com/aws/aws-xray-sdk-ruby . And looking at the API Reference docs mentioned in it, I don't see a way to exclude url paths from tracing there. Would be good to have this functionality for all the official SDKs.Please let me know if there's anything else you need.Thanks.CommentShareprashant12answered 3 years ago0So as it turns out the Sampling Rules that are in place on the Xray console are not being applied for one of my applications. The first application which is a public api is correctly applying all of the rules. However my second application (.net core) is not running any of the rules, even the Default rule put in place. I noticed on the documentation this quote."If the SDK can't reach X-Ray to get sampling rules, it reverts to a default local rule of the first request each second, and five percent of any additional requests per host. This can occur if the host doesn't have permission to call sampling APIs, or can't connect to the X-Ray daemon, which acts as a TCP proxy for API calls made by the SDK."I was under the impression that the Default rule would be ran, I am not seeing this happen. Unless there is a rule being applied outside of my current sampling rules. Also if this is the case what kinds of permissions are needed?Edited by: clewallen on Jan 7, 2020 10:56 AMCommentShareclewallenanswered 3 years ago0So as it turns out the Sampling Rules that are in place on the Xray console are not being applied for one of my applications. The first application which is a public api is correctly applying all of the rules. However my second application (.net core) is not running any of the rules, even the Default rule put in place. I noticed on the documentation this quote."If the SDK can't reach X-Ray to get sampling rules, it reverts to a default local rule of the first request each second, and five percent of any additional requests per host. This can occur if the host doesn't have permission to call sampling APIs, or can't connect to the X-Ray daemon, which acts as a TCP proxy for API calls made by the SDK."I was under the impression that the Default rule would be ran, I am not seeing this happen. Unless there is a rule being applied outside of my current sampling rules. Also if this is the case what kinds of permissions are needed?CommentShareclewallenanswered 3 years ago0It was a matter of upgrading the IIS server to a use the latest AMI.CommentShareclewallenanswered 3 years ago0Hi @clewallenIts great that you were able to figure it out. Feel free to come back to the forum if you have any issues in the future.Thanks!CommentShareprashant12answered 3 years ago"


Question: CDK - Importing and modifying security group from a previous stack

"We have a CDK stack that deploys a set resources to be shared across multiple application services (e.g. database). Naturally the security groups to those resources are define in the same stack.this.DbSecurityGroup = new SecurityGroup(this, sgName, new SecurityGroupProps(){Vpc = this._baseNetStack.Vpc,SecurityGroupName = sgName,Description = "DB SG"});// This ingress rule works neatly because its own security group depends on// the security group defined in the previous dependency (network) stack.this.DbSecurityGroup.AddIngressRule(this._baseNetStack.BastionHostSecurityGroup, Port.Tcp(3306), "Allow connection from bastion host.");We want to define the application services - which are not known ahead of time - in their own stacks. They are of course going to define their own applicaiton-specific security groups, which the above database needs to allow for incoming connections.If the application stacks are declared in the same CDK application project, it seems like an easy case of passing in the above dependency (data) stack to the app stack constructor, letting it reference its publicly exposed properties (i.e. security group).this.App1SecurityGroup = new SecurityGroup(this, sgName, new SecurityGroupProps(){Vpc = this._baseNetStack.Vpc,SecurityGroupName = sgName,Description = "Application 1 SG"});// This adjustment is NOT considered part of the app stack but data stack,// because it's not modifying its own security group but that of the one in the data stack.this._dataStack.DbSecurityGroup.AddIngressRule(this.App1SecurityGroup, Port.Tcp(3306), "Allow connection from app1.");However, while it logically seems like the app stack depends on the data stack, the reality is the data stack depends on the app stack because the AddIngressRule() method sets that direction. This is problematic because there can be other resources in the app stack that have dependencies on the data stack resources, causing cyclic references.How can the app stack safely reference the data stack security group and modify the rules while retaining the proper dependency direction?FollowComment"

Answer: "0Accepted AnswerLooks like it's necessary to export the base security group ID as an output.// Export the security group ID for dependent stacks to reference and retrieve raw security group via CDK From methods.var outputName = StackHelper.SharedExports.DbSecurityGroupId(this.StackName);new CfnOutput(this, outputName,new CfnOutputProps{ExportName = outputName,Value = this.DbSecurityGroup.SecurityGroupId,Description = dbSgName + " security group ID."});Then the dependent app stack imports the security group ID and retrieves the security group by itself instead of a direct code reference.var dbSecurityGroupId = Fn.ImportValue(StackHelper.SharedExports.DbSecurityGroupId(this._dataStack.StackName));var dbSecurityGroup = SecurityGroup.FromSecurityGroupId(this, "dbSg", dbSecurityGroupId);dbSecurityGroup.AddIngressRule(this.AppSecurityGroup, Port.Tcp(3306), "Allow connection from app1.");This way the dependent stack only owns (and adds) the ingress rule to the base security group, and the base stack doesn't know about/depend on the app stack.CommentShareicelavaanswered 18 days ago"


Question: What is the ideal way to copy objects from one S3 to another in a different region via boto3

"Although it's quite seamless to copy objects from one s3 to another in a different region via CLI as shown here, it's almost impossible to find docs on how to do the same via boto3.It's also seamless to copy (with boto3) from one s3 to another in the same region, as shown here but what about copying to a different region? What's the obvious way to do this?Following the approach here throws IllegalLocationConstraintExceptionFollowComment"

Answer: "0Hello,I understand that you want to copy data from one S3 bucket to another S3 bucket in another region using boto3 api.You can use copy_object() to copy an object in Amazon S3 to another prefix, another bucket and even another Region. The copying takes place entirely within S3, without needing to download/upload the object.[+]https://boto3.amazonaws.com/v1/documentation/api/latest/reference/services/s3.html#S3.Client.copy_objectFor example, to copy an object in mybucket from folder1/foo.txt to folder2/foo.txt, you could use:import boto3s3_client = boto3.client('s3')response = s3_client.copy_object(    CopySource='/mybucket/folder1/foo.txt',  # /Bucket-name/path/filename    Bucket='mybucket',                       # Destination bucket    Key='folder2/foo.txt'                    # Destination path/filename)CommentShareSUPPORT ENGINEERUjjawal_Sanswered 9 months ago"


Question: Issue with Character Physics Capsule component

"I hope this is the right place for this.I have an issue where I'm trying to create a player controller through script canvas and it works fo the most part but now it seems like I don't get proper collision.(Here is what is looks like)https://gph.is/2RD6U1RMy question is mainly how I create normal character collision just like in the sample game?I've tried so many things. I copied the character physics set up from the example game, primitive colliders, and even making a new character for a default primitive shape. My only conclusion is that it's a bug within the physics system but I know that shouldn't be the case. From the looks of things it looks like other people are having this issue as well. Hopefully someone can answer this question.Follow"

Answer: "0Accepted AnswerI agree with fluffy. Please try to use Add Impulse node in Script Canvas. Here is a simple example. (The values on Multiply nodes may be bigger if your character is heavy.)REMOVEDUPLOADSharerePost-User-7705311answered 4 years ago0I think only Add Impulse can handle collisions. but you are trying to set entity's world position directly, it's override phys calculationsSharerePost-User-2514050answered 4 years ago0Hi @REDACTEDUSERhttps://docs.aws.amazon.com/lumberyard/latest/userguide/component-physics-character.html#component-physchar-ebusrequest-3Hope that helps, cheers!SharerePost-User-5841084answered 4 years ago0Hello Estevan,Could you upload images of your script canvas and the character physics component's settings if you can?Here are my character's. (Please ignore unused variables in Script Canvas.) I hope this helps.REMOVEDUPLOADREMOVEDUPLOADSharerePost-User-7705311answered 4 years ago0Sure! Here you go. Thanks for looking at it ^_^REMOVEDUPLOADREMOVEDUPLOADSharerePost-User-3085401answered 4 years ago0it's very helpful, thank you. I have yet to dive into Lua but I'll get there :)SharerePost-User-3085401answered 4 years ago0Thank you so much for this example!SharerePost-User-3085401answered 4 years ago0OMG this make sense, thank you, thank you! :]SharerePost-User-3085401answered 4 years ago"


Question: ACM VPC endpoints

"Hello Folks,I know VPCEs are available to access ACM Private CA from within a VPC, whereas ACM itself doesn't provide any. If I need to reach ACM from a lambda function which is inside a VPC I will need an internet gateway to reach the public endpoint of ACM. Does anybody know if VPCEs for ACM will be made available any time soon? I looked up for the information but wasn't able to find anything significant about it.Thanks.FollowComment"

Answer: "0Hi,As you know already, AWS ACM now offers PrivateLink endpoints.ACM Private CA support for AWS PrivateLink enables you to use ACM Private CA APIs inside of your Amazon Virtual Private Cloud (VPC) and route data between your VPC and Private CA entirely within the AWS network.  If you are running lambda functions on the same VPC,  when lambda is triggered a new eni is created on the same VPC and it should be able to access ACM Private CA via private endpoints.  at the moment, we do not have private endpoints for public certificates,  may i know the use case that you are trying it from lambda function ?CommentShareAWS-User-7653869answered 7 months ago"


Question: Access to WorkDocs

"I used to have access to WorkDocs files that were shared with me, but now I don't. I requested permission but I have no idea where the request goes. How do I get access back?FollowComment"

Answer: "0Hi,Amazon WorkDocs uses permissions to control access to folders and files. Permissions are applied based on user roles.The owner of the folder and files in workdocs must be contacted. Once the request is made, you won't be able to access but the owner can see it under workdocs tasks if you're referring to a specific folder.If you want to know who owns the workdocs folder, it's worth checking your internal references.Refer this for more info on Workdcos permission - https://docs.aws.amazon.com/workdocs/latest/userguide/permissions.htmlThanks,CommentShareAWS-CSinghanswered 4 months agoEXPERTBrettski-AWSreviewed 4 months agoBrettski-AWS EXPERT4 months agoI'd add that under normal circumstances, when you request permission from within WorkDocs it emails the owner of the file with that request.Share"


Question: Connection draining for longer lasting connections (>1hour)

"My customer is running their application on EC2 instances in an Auto-Scaling Group behind a Classic Load Balancer. But, the application sometimes has connections lasting hours. They are looking to implement continuous deployment for the application. Their plan is to create a new ASG with new deployment, attach it to the CLB and detach the old ASG from the CLB.Since the load balancer's maximum connection draining timeout is 60 minutes, it will destroy any in-flight connections at the top of the hour and the instance will be terminated by the ASG.Can they use “Update DNS Routing with Amazon Route 53” approach from https://d1.awsstatic.com/whitepapers/AWS_Blue_Green_Deployments.pdfIf so, when they route 100% of the traffic to new deployment, the existing connections to old deployment will be still be alive?Are there any other alternative approaches they can follow? Do they need to implement custom logic to route and drain connections? Is there any feature in AWS services that they can leverage?FollowComment"

Answer: "0Accepted AnswerThey can, but note that this will not utilize connection draining, as they'd be changing DNS to point at a different ELB. When that happens, existing connections to the old load balancer are unaffected until the client re-connects or re-resolves DNS.Another option is they could attach the new ASG not detach the old ASG, instead having all of the backends in the old ASG fail their health checks. They could then wait the (desired draining time - the configured draining time) and de-register the ASG then. The advantage of this over Route53 is the client's don't have to worry about DNS, you don't have to maintain 2 ELBs, and you can have draining time however long you desire. This works because CLB treats unhealthy backends similarly to  de-registered ones, allowing in-flight requests to complete and not sending new requests. Note that TCP listeners a connection to an unhealthy target won't be interrupted by the ELB, and will only fail or close if the client or backend causes it to.CommentShareEXPERTzobAWSanswered 4 years ago"


Question: Can't open environment - Internal Failure

"I started getting the following error, after selecting "rebuild environment"."A problem occurred while loading your page: Internal Failure"In EC2, it shows the instance as terminated. It feels like its stuck in a deadlock, trying to delete some resource.Edit: I'm using a shared load balancer.Edit 2: Okay, just tested with another environment, this happens when you have the target group added as a rule in the shared load balancer listener, it fails to delete it."Stack deletion failed: The following resource(s) failed to delete: AWSEBV2LoadBalancerTargetGroup."Even if I delete it manually, the environment remains in the application and is inaccessible, returning "A problem occurred while loading your page: Internal Failure".Edit 3: Deleted the whole application.Edited by: RTV on Sep 27, 2020 5:16 AMFollowComment"

Answer: 0Set the rules when creating the environment and not afterwards.CommentShareRTVanswered 3 years ago


Question: RDS mysql releases the active as well as idle connections

"We have our application running NODEjs as backend and connected to mysql database.it creates many concurrent connections, so we made a limit of "max_connection" parameter to 5000, also for idle connection release we set "wait_timeout" and "interactive_timeout" to a specified value of 120 and 180 seconds respectively.But when we using the application connections gets increases abruptly to a threshold value and then releasing the connections by taking all active as well as idle connections, which leads to connection error.Please suggest why it is happening, it releases the active connections also along with the idle connections.attaching the link of the screenshot image of connection behavior of mysql https://i.postimg.cc/TwSFKfTV/mysql-connection.pngFollowComment"

Answer: "0Hi there,It seems that your database connections exceed the max_connections value and the reasons for that could be:Increases in the number of client/application connections to the DB instance, caused by an increased workload or table/row-level locking.Improperly closing a client/application connection after the end of an operation. When a server connection isn't properly closed, the client application opens up a new connection. Over time, these new server connections can cause your instance to exceed the max_connections parameter value. To list all active connections in your MySQL DB instance, use the SHOW FULL PROCESSLIST command.Sleeping connections (also known as inactive open connections) are caused by higher connection timeout parameters (such as wait_timeout or interactive_timeout). If you configure a connection limit that's too high, then you can end up with higher memory usage even if those connections aren’t used. As a result, when the application server tries to open all client connections to the database, these connections might be refused. To terminate a sleeping connection, use the mysql.rds_kill operation (see reference 1).It is best practice to only configure the active connections that are required for application performance. You might also consider upgrading to a larger Amazon RDS DB instance class. You can also consider increasing max_connections parameter value depending on the instance type that you are using and workload requirements (see reference 2). References:[1]https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/mysql_rds_kill.html[2]https://aws.amazon.com/premiumsupport/knowledge-center/aurora-mysql-max-connection-errors/CommentShareAsenathianswered a year ago"


Question: KDA failover strategy

"Currently I am trying out a KDA + Flink setup and first thing that stops me a little bit is failover strategy. There is only one option for a failover: take savepoint -> destroy cluster -> start new cluster -> start job from savepoint, and this option ends up in few minutes downtime. I am aware that aws uses a bit different strategy for maintenance window where both clusters run at the same time and only job stop, start creates a downtime which is way shorter then the only available option. Does anyone know if this and when this second option will be available for cases like autoscale/ user maintenance/ etc.? And will it be compatible with custom autoscaling rules?FollowComment"


Question: Impact to AWS Elasticsearch on the licensing change of Elasticsearch(elastic.co)

What is the impact to AWS Elasticsearch service on the licensing change  to Elasticsearch and Kibana?FollowComment

Answer: 0Accepted AnswerThe announcement is out at https://aws.amazon.com/blogs/opensource/stepping-up-for-a-truly-open-source-elasticsearch/CommentShareMike_Lanswered 2 years ago


Question: Cannot Publicly Share CloudWatch Dashboard

"I have a dashboard that is made up of alarms from different subaccounts, and when attempting to share it throws error on the "Accept Policy and Generate Shareable Link": page: "An error happened trying to share your dashboard"Cloudtrail shows this error:},"eventTime": "2022-02-25T15:16:14Z","eventSource": "iam.amazonaws.com","eventName": "CreateRole","awsRegion": "us-east-1","sourceIPAddress": "x.x.x.x.x","userAgent": "Coral/Netty4",**    "errorCode": "InternalFailure","errorMessage": "CreateRole operation failed",**"requestParameters": null,"responseElements": null,"requestID": "e25fb6da-ffca-4d9f-b1d2-0e6c2xxxxxx","eventID": "301acbbf-fcf2-479b-a6fd-7b70axxxxxx","readOnly": false,"eventType": "AwsApiCall","managementEvent": true,"recipientAccountId": "12345678910","eventCategory": "Management"}FollowComment"

Answer: "0I'm not sure where that error is coming from but I do know that cross-account viewing of alarms is not supported in shared CloudWatch DashboardsCommentShareAmazon-CloudWatch-01answered a year agomcburn13 a year agoI mean I can imagine why, as there are permissions at play in several subaccounts but it seems like it "should" be possible.  Almost like why does the console let you even attempt to share a dashboard that has metrics/alarms from multiple accounts if it isn't going to work, and also throw a vague error?Share"


Question: AWS Certification Voucher status on exam cancellation and reschedule.

"Hi Guys,I have used the 50% voucher for registering the Developer associate exam (I have received the voucher after successfully passing the Associate Architect exam), now I need to cancel this exam and reschedule this exam at a different time.would I be able to reuse the same voucher? (I canceled the exam and did not take the exam yet) when I plan to register for the exam at a different time.Edited by: swaroopala on Sep 23, 2020 6:57 AMFollowComment"

Answer: "0swaroopala,If you cancel your appointment and plan to schedule a new appointment with the same delivery partner (PSI or Pearson VUE), your voucher should be reinstated and available for use again. If you plan to switch from PSI to Pearson VUE or vice versa, you may experience an issue. If this happens, please submit a ticket to our Customer Service team at https://aws.amazon.com/contact-us/aws-training/ and we will investigate and resolve accordingly.Best of luck on your exam!KimAWS CertificationCommentShareKimWD-AWSanswered 3 years ago0Hi Kim,I really apprecaite you guys getting back to us real quick, this only enables us to focus on what is important learning and building great this and not to worry about trivial things :-).You guys rock!!CommentShareswaroopalaanswered 3 years ago"


Question: AWS SES Emails not receiving to recipients when we use formatted type

AWS SES Emails not receiving to recipients when we use formatted type.When we send mail from custom type mails are going.FollowComment


Question: How to access my Amazon S3 bucket with an external client?

"Hello everyone,I'm new to using Amazon S3 and I'm a little lost. I want to access my Amazon S3 server from an external client (like FileZilla). However, I don't know where to find information such as the server address or host.Thank you very much for your response.FollowComment"

Answer: 3Accepted AnswerThis aritcle may help.You will need access to the bucket and or encryption key also.https://filezillapro.com/docs/v3/cloud/configure-filezilla-pro-to-connect-to-s3/CommentShareGary Mcleananswered a month ago


Question: How to store copies of AWS backups that are not accessible from AWS organisation root account

"For historical reasons, I have an AWS organisation where AWS Backups are created for critical workloads in the organisation root account.I currently replicate these backups to another dedicated AWS account for backups (using AWS Backup copy function).I would like to protect these backup copies against a compromise of the organisation root account (e.g. if the root account is compromised, there should be no way for the attacker to delete both the original backup and the copy in the child account).Is that even feasible?My organisations has all features enabled, and it seems we can't go back and disable that once enabled.I thus cannot delete the AWSServiceRoleForOrganizations role in the backup account, nor the AWSServiceRoleForSSO role, which in particular allow to easily gain access to the backup account through SSO.I also tried removing my backup account from the organisation but the AWS Backup copy job no longer works in that case.Any guidance would be greatly appreciatedFollowComment"

Answer: 0One option is to use Glacier Vault Lock.  It allows you to apply compliance policies on the backed up data:https://docs.aws.amazon.com/amazonglacier/latest/dev/vault-lock.htmlCommentSharejurajfoxanswered 2 months ago


Question: "Sign up verification email always says - 'Invalid link provided, please request a link again.'"

"Whenever i signup and click on the verification link, i always get 'invalid link provided, please request a link again'. But when i login it is successful. I'm not sure why this is happening.FollowComment"