Question: How to change RDS instance type in Aurora cluster without downtime?

"I want to change the instance type of the current Reader (PostgreSQL),and I am having 2 Reader instances.I will replace the instance one by one, wait for it to succeed, then replace the next instance.Will this cause downtime for my Aurora Cluster, and if yes, how long will it be?FollowComment"

Answer: "0Accepted AnswerHello,The following link include information for your use caseAmazon RDS Multi-AZ with two readable standbys: Automatically failover in typically under 35 seconds with zero data loss and with no manual intervention.https://aws.amazon.com/rds/features/multi-az/#Amazon_RDS_Multi-AZ_with_two_readable_standbysCommentShareHernan Fernandez Retamalanswered a year ago0There is no way to change instance class of Aurora instances. It may take up to 15 mins. From this link :"Scaling isn't instantaneous. It can take 15 minutes or more to complete the change to a different DB instance class. We recommend that if use this approach to modify the DB instance class, you apply the change during the next scheduled maintenance window (rather than immediately) to avoid affecting users. "CommentShareVivek_Sanswered a year ago"


Question: Hidden WorkDocs Charge?

"I am having an issue with workdocs, being charged $5 a month and all of my users that are using it are Workspace users.  I can't for the life of me find where I am being charged this $5 and what it is for.  Can anyone out there assist me in figuring this out?Thank you,Update ****  I figured out what it was, there was an account associated with the domain but it was not listed as a WS user.  Removed that account and added again, and now showed as a WS user. *****Edited by: GANComputerSVC on Jan 28, 2020 6:28 AMFollowComment"

Answer: "0It was a user that was not populating correctly from AD, deleted user and added, all was then correct and the charge stopped happeningCommentShareGANComputerSVCanswered 3 years ago"


Question: EKS Anywhere Support

"Hi - I'm looking for more information regarding the support model of EKS Anywhere. I know that infrastructure and application is managed by the customer (obviously) and the EKS Distro and the tools provided by AWS are supported by AWS. What about Kubernetes itself? For example, a customer will benefit of Kubernetes support? Is "Kubernetes Support" part of the EKS Distro support?Thanks!FollowComment"

Answer: "1You can leverage support agreements with AWS for your Amazon EKS Anywhere cluster deployments and the integrated tools within, so you can reduce your support costs and avoid the maintenance of redundant open-source and third-party tools.  Amazon EKS Distro will provide extended support for Kubernetes versions after community support expires, by updating builds of previous versions with the latest critical security patches.There are no upfront commitments or fees to use EKS Anywhere. AWS Enterprise Support is a pre-requisite for purchasing an Amazon EKS Anywhere Support Subscription. Pricing for EKS Anywhere Support Subscriptions follows a cluster-based model. Learn more about AWS Enterprise Support https://aws.amazon.com/premiumsupport/plans/enterprise/. For pricing examples and additional information, visit the EKS Anywhere pricing page https://aws.amazon.com/eks/eks-anywhere/pricing/.CommentShareRam_AWSanswered a year agofamarant a year agoThanks for your answer! I might not have been clear enough - But for example, if my Kubernetes control plane crash for any reason, will AWS help me to troubleshoot or we are on our own? Or the Pods are failing to stabilize due a CNI bug or something like that. Taking in consideration it's a Kubernetes issue and not a hardware issue.ShareMavicarus 2 months agoJust to add on to this, AWS Enterprise On-Ramp Support is also an alternative support subscription now for Amazon EKS Anywhere. Enterprise On-Ramp is cheaper compared to the Enterprise Support.https://aws.amazon.com/eks/eks-anywhere/faqs/Share"


Question: Gmail or Outlook to push notifications to SQS

"I am working on a requirement, where we need to do some action (Email Processing (out of scope of this requirement)), whenever we receive an email in Client's Gmail or Outlook account.Since we don't own these domains, so setting up Email Receiving Pipelines via SES (https://aws.amazon.com/getting-started/hands-on/setup-email-receiving-pipeline/faq/) is out of question here.The solution that we thought of for this problem statement is Setting up a Gmail push notifications to hit AWS Api Gateway, which internally would call AWS Lambda for inserting data in SQS.Changes involved are :-AWS:Create an SQS Queue.Create an AWS Lambda inserting data in SQS.Create an API Gateway invoking AWS Lambda.Google Cloud:Create a Pub / Sub topic.Create a subscription for Api Gateway url.Create a watch on Gmail. The watcher would invoke topic on any change in Gmail.Can someone please validate above approach?FollowComment"

Answer: "0Accepted AnswerThat's a valid approach. Two comments:If this is the only Lambda function you have you might also consider Lambda Function URLs - they are simpler to set up than API Gateway but also don't come with all the features that API Gateway does. So which you use is going to depend on what else you need.You don't have to but you should be authenticating the caller somehow. That will also influence your decision on which endpoint type to use.CommentShareEXPERTBrettski-AWSanswered a year agoUri EXPERTa year agoJust to add that if all your Lambda function does is to add the message to SQS, you can use direct service integration in API Gateway to send the message directly into SQS, without the Lambda function.Share"


Question: Amazon Athena query history report

Is there a way to export out Amazon Athena Query History?FollowComment

Answer: "0Accepted AnswerTo retrieve and save query history programmatically:Use Athena ListQueryExecutions API action or the list-query-executions CLI command to retrieve the query IDs.Use the Athena GetQueryExecution API action or the get-query-execution CLI command to retrieve information about each query based on its ID.Use the Amazon S3 PutObject API action or the put-object CLI command to save the information in Amazon S3.Please check Working with Query Results, Output Files, and Query History for more details.CommentShareDeepak Mahtoanswered 3 years ago"


Question: How to extract key value pairs from Textract with A2I JSON output??

I cannot parse the JSON file from Textract which was uploaded in the S3 bucket after a2i human loop review.I wanted to extract key/value pairs but textract- trp and json libraries in python not giving me results. How do i extract key value pairs from Textract with A2I JSON schema output?FollowComment

Answer: "0Hi,thanks for using AWS Textract service!I will take a look at this and get back to you, do you mind providing your script that you used for this use case?thanksCommentShareAWS-User-6835124answered a year ago0Unfortunatey, I do not think that textract-trp supports A2I output JSON yet. As you can see from the A2I documentation the A2I task output data for Amazon Textract is a JSON which is quite different from the Amazon Textract response JSON structure. At the moment, textract-trp only supports Textract response JSON schema.CommentShareEXPERTAnjananswered 8 months ago"


Question: Deploy Lambda Function and API Gateway REST

"I deployed an API Gateway REST API and a Lambda function using Terraform. REST API testing tool threw below error when I invoked the HTTP endpoint. lambda add-permission was applied. "message": "Internal server error".And CloudWatch shows this error: [ERROR] Runtime.ImportModuleError: Unable tomodule 'my-lambda': No module named 'my-lambda'FollowCommentChris_G EXPERTa year agoInside of your my-lambda lambda, are you trying to import a module called my-lambda?ShareAWS-User-5291433 a year agomy-lambda is just a lambda function name. it only has below importsimport jsonimport osShare"

Answer: "0my_lambda.py should be the name of the file that has the handler.CommentShareEXPERTUrianswered a year ago0See the above answer from Uri. Your zipped file and the contents should have the name of the handler. We wrote a blogpost about this, in case it helps.CommentShareAWS-User-4568745answered a year ago"


Question: [1.6] How to setup active and switch new cameras

"Hi,I have a few cameras in the scene (new Camera form Entity Component). How can I setup one active ? View from it ? Then how can I switch between them ? and between sequences ?CheersFollow"

Answer: "0Accepted AnswerI dont have all the answers, but perhaps I can point you in the right direction. Check out the ViewSystem in CryAction.ViewSystem.h:virtual IView* CreateView();virtual unsigned int AddView(IView* pView) override;virtual void SetActiveView(IView* pView);IView.h:virtual void LinkTo(AZ::Entity* follow);Then you might want to connect to the tickbus and setup OnTick() to update your view transforms; possibly from input events. Idk, up to you.SharerePost-User-3220036answered 6 years ago0Thank you @REDACTEDUSERSharerePost-User-0352889answered 6 years ago0Hey @REDACTEDUSERSharerePost-User-8353690answered 6 years ago0I was wondering how to switch Cameras in the level just like FN Camera:View:)SharerePost-User-0352889answered 6 years ago"


Question: Local access from laptop to MSK Serverless

"Hi!I'm trying to understand if it is possible to have local access from laptop to MSK Serverless? I went through this page: https://docs.aws.amazon.com/msk/latest/developerguide/client-access.html and it looks like  it's only possible for MSK Provisioned version. I have a VPN connection with our VPC, private endpoints of MSK Provisioned is resolvable, but Serverless is not.FollowComment"

Answer: "0Serverless also provides a bootstrap endpoint and is accessible if it is in the same VPC. In your case, you can access the endpoint through VPN.Here is the step of connect serverless MSK in local environmentyou can check endpoint of bootstrap server by console at "View client information" tab.set the IAM role in your local environment[+]https://docs.aws.amazon.com/ko_kr/cli/latest/userguide/cli-configure-role.htmlattach policy in the IAM role[+]https://docs.aws.amazon.com/msk/latest/developerguide/create-iam-role.htmlCommentShareEXPERTDaebok_Canswered 4 months ago0As of today, Public access is not available for MSK Serverless. Clients must be in a VPCCommentShareRaj_Ranswered 3 months ago"


Question: Lambda@Edge - Maximum number of distributions with Lambda function exceeded

"I have a Lambda@Edge triggered by a Cloudfront Origin Request that simply removes a part of the resource path before requesting the origin.My issue here is that I have a lot of distributions (maybe 50) for which I'd like to trigger this Lambda function, but apparently, the only thing I managed to trigger is the:TooManyDistributionsWithLambdaAssociationsExceptioncom.amazonaws.services.cloudfront.model.TooManyDistributionsWithLambdaAssociationsException: Completing this action would cause the maximum number of distributions with Lambda function associations per owner to be exceeded (maximum allowed is 25).Moreover, I am surprised I don't find it in this documentation:http://docs.aws.amazon.com/lambda/latest/dg/limits.htmlCan I get round these limits somehow?I'd be grateful if someone could explain it to me!FrançoisFollowComment"

Answer: "0Hi,"Other Limits" section on [1] talks about this. The link to request a higher limit is also available there.[1] https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/cloudfront-limits.html#limits-lambda-at-edgeThanks,AbhishekCommentShareAWS-User-9980061answered 5 years ago"


Question: Why Are All My Resources Deleted?

"Points of My Scenario:**1. **My AWS resources includes multiple of EC2 instances, security groups, EBS volumes, subnets, and snapshots.**2. **When I logged in this evening, ALL resources I created were gone/disappeared/deleted!**3. **Earlier today, I received an "AWS Budgets" email notification that my budget exceeded my alert threshold.**4. **I never learned AWS deletes one's resources when they merely exceed their budget alert threshold!QUESTION: Why were all my resources deleted? How can I investigate who/what did this? Is there any recourse?FollowCommentwaltforbes 6 months agoI confirm that I have not set ANY budget actions.Sharewaltforbes 6 months agoUPDATE: My resources have mysteriously re-appeared! However, I am still concerned. Does anyone have an explanation or has experienced this before?Share"

Answer: "2AWS does not delete the resources due to budget alerts.This has happened to me once where the browser cache was deleted and I got logged into us-east-2 instead of us-east-1. I did panic as I didn't see any of my regional resources. After I am able to think straight, I realize that the region was not the default region I usually log into.CommentShareAnanth Tirumanuranswered 6 months ago1Accepted AnswerSome browsers may change the AZ when logging in. Check AZ every time you log in.CommentShareAlberto Fernandesanswered 6 months agoChris_G EXPERT6 months agoRegion*.  AZs are within a Region!Share"


Question: This application is not available for your directory

"I have Identity Center SSO connected my external identity provider (Shibboleth) and it seems to be working.  But, on redirect, it often - but not always - fails.Am i supposed to be able to go to https://myssoname/awaspps.com/console  to get directly to the console?  There's no way to add the "console" to the list of SSO "Applications" so I think it's just implied.  I set SSO up in mutli-account access to enable the SSO and it works sometimes but not others, without me changing anything.  I am perplexed.  What it says is:"This application is not available for your directory."  I googled this but it was telling me all about Active Directory.FollowComment"

Answer: "0Hello,I hope you're doing well.Thank you for reaching out to us with your concern.I understand that you have few queries related to integration of External idp "(Shibboleth)" to Identity Center users. I am answering the queries below:Q : Am i supposed to be able to go to https://myssoname/awaspps.com/console to get directly to the console?         The mentioned one is the AWS SSO URL. Sign in using your standard company user name and password. Once signed in, you can access any AWS account and application that appears in the portal. Simply choose an icon.         To know more about the AWS Access portal, I would request you to go through the AWS documentation : https://docs.aws.amazon.com/singlesignon/latest/userguide/using-the-portal.htmlFrom this error we can see that the "This application is not available for your directory" . This Error is mostly related to your directory, here it is external identity provider. To troubleshoot the issue further, We require more information about the exitising Setup that you're currently using and also SAML Assertion.Hence, I would request you raise a support case ticket, where we can go deep dive into the resources to find out the actual root cause.Thank you! Have a wonderful day!Reference:[1]Supported Identity providers: https://docs.aws.amazon.com/singlesignon/latest/userguide/supported-idps.html[2]Other Identity Providers : https://docs.aws.amazon.com/singlesignon/latest/userguide/other-idps.htmlCommentSharerePost-User-6294732answered 4 months agowz2b 4 months agoI want to do that.  The trouble is I have two AWS accounts - one is mine personally, the other is not.  I paid for aws support on my personal one, but the trouble I'm having is on the other one so I didn't think I could put in a support request.  That's why I have been trying to figure it out on my own.One thing I noticed in the docs and by testing is that AWS seems to only support a NameID format:urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddressbut the server I have is Shibboleth and I think it's only SAML 2.0 so I'm wondering if THAT is the problem.Share"


Question: "DynamoDB Hierarchical, Sorted Queries"

"I would like to be able to query data hierarchically and return the results ordered by another attribute. What is the most efficient way to store and query sorted hierarchical data?For example, if I have a table with four attributes: customer_id, country, location, and last_updated_date, where location contains hierarchical information such as state:county:city, so a few records may look like:------------|--------|-------------------|-------------|customer_id |country |location           |last_updated |------------|--------|-------------------|-------------|123456      |USA     |WA:King:Seattle    |2022-03-18   |789012      |USA     |WA:King:Kent       |2022-03-15   |098765      |USA     |NY:Bronx:NYC       |2022-02-28   |432109      |USA     |WA:Spokane:Spokane |2022-03-20   |The PK of the table is the customer_id because most queries will pull information by customer_id, but there are other use cases that will want to (a) find all customers within a given location (e.g. state or county), and (b) return the results sorted (descending) by last_updated.  To accomplish (a), I have a GSI, with country as the PK and location as the SK, querying the GSI using location.begins_with.But I can't figure out how to accomplish (b). My understanding is that ordering operations are usually performed with scanIndexForward, but I'm already using the GSI for the hierarchical query. Is there a way to do both (a) and (b)?Thanks!FollowComment"

Answer: "0Accepted AnswerCreate a GSI where the PK is Country+Location concatenated and the SK is the last_updated. Then for any given Country+Location value you can find the last updated values (and corresponding customer ids in the projection) for that location. Note you can setup 20 GSIs.Or are you hoping to do a begins_with against the location (like for the wider value of WA:King) while also getting only the latest X many? In which case, well, you can't. You can however insert new items for each hierarchical level (like WA:King, etc) so that that value can be used as the PK. Basically pre-materialize at each level. You only get one sort key per table/index and you can't use the sort key functionality twice.Of course, if you intend to get ALL the matching items (not just the latest X many) and just want them sorted, you can sort on the client.CommentSharejzhunteranswered a year agoipsherman a year agoThanks! I was indeed hoping to do something like a begins_with, so it looks like I'm a little out of luck. I think what I'm going to do is create a different GSI for each potential level of hierarchy (e.g. one for Country, one for State, etc.) with the location as the PK and last_updated as the SK, and query the appropriate GSI based on the level of hierarchy needed.Share"


Question: Performance Insights disappeared after upgrading to MySQL 8

"I have a RDS db.t2.medium MySQL DB. I've just upgraded from MySQL 5 to MySQL 8.0.13 successfully... but then Performance Insights seem to stop working:no data are being recorded anymore in the Performance Insights panel since the upgradeif I go to Database -> Modify, the "Performance Insights" section is no more visiblecolumn "Current activity" in the DB summary always shows 0 Sessions (but my website is running ok)What's happened? Thank youEdited by: afrancesconi on Mar 22, 2019 6:01 AMEdited by: afrancesconi on Mar 22, 2019 6:02 AMFollowComment"

Answer: "0As written in the docs: "Amazon RDS Performance Insights is not supported for MariaDB 10.0, MariaDB 10.1, MariaDB 10.3, MySQL 5.5, or MySQL 8.0. "Ok then, closed.CommentShareafrancesconianswered 4 years agoAWS-User-M86 a year agoHi, we are running a similar situation. We are using MySQL 8.0. When we tried to delete the database (db.m5.xlarge), it has an error message that we have to turn off Performance Insights first. However, when we clicked Modify, we can't find the Performance Insights section. How did you turn off the Performance Insights?Share"


Question: Cannot get build to trigger on PR or master

"I'd really like my build to automatically fire anytime someone posts a PR or pushes to master. For whatever reason it never works. I'm using GitHub webhooks and have a Primary source webhook event configured for PUSH and HEAD_REF = (master|pr.*) which seems like the correct RegEx, but it doesn't work. If I do master it works for master, if I do pr it works for PR's... what am I missing.Thanks in advance.FollowComment"

Answer: "0Accepted AnswerHi StealthSid2,For your use case, you can use two filter groups:First filter group:Event type: PUSHHEAD_REF: masterSecond filter group:Event type: PULL_REQUEST_CREATEDBASE_REF: masterBest,ZhenCommentShareAWS-User-7837917answered 3 years ago0Hi StealthSid2, for webhook event filtering, please use the EVENT filter (like the setting in Zhen's response). HEAD_REF and BASE_REF are used to filter the branches of a PR or Push event.For more details, please check the sample in our documentation https://docs.aws.amazon.com/codebuild/latest/userguide/sample-github-pull-request.html#sample-github-pull-request-filter-webhook-eventsThank you for using AWS CodeBuild.CommentShareAWS-User-5789304answered 3 years ago0Sorry for the late reply... I don't get notifications from the forum. Let me try this and then mark the appropriate answer.CommentShareStealthSid2answered 3 years ago0I cannot believe I didn't notice the abilty to add multiple filter groups. I was trying to shoehorn it into a single regex on one filter group. Thanks so much for the help!CommentShareStealthSid2answered 3 years ago"


Question: View all resources on Account Level using cli or any terraform script

how can i see all my resources using cli from all regions. I want them in a single pane at Account level. ex if my account contains numerous resources in different location and region. how can i know about them using cli with using management console. I know that using management console it is possible but is there any other way like CLI or similar to thatFollowComment

Answer: "1You could try using https://pypi.org/project/aws-list-all/.  I had a quick look at it some time back and found it's Unix-only but ran under WSL with some success.  It handles multi-region but only a single account.You need to run "query" mode outputting to a data directory, then "show" mode on that data.Can run "aws-list-all introspect list-services" to check if a service is supported or not.CommentShareEXPERTskinsmananswered 6 months agoabeer khan 6 months agoThank you let me run this.Share1Hi ThereThere are a few ways to to this:Use Tag EditorUse AWS ConfigUse a third party tool like aws-inventoryCommentShareEXPERTMatt-Banswered 6 months ago0I'd consider looking into the recently released AWS Resource Explorer and CLI prior to filling gaps with any third-party tools.https://aws.amazon.com/resourceexplorer/https://docs.aws.amazon.com/pdfs/resource-explorer/latest/apireference/resource-explorer-api-ref.pdfCommentShareRoss Wickmananswered 6 months ago"


Question: How does the AWS App Runner pricing calculator work? Is it broken or am I doing something wrong.

"Trying to figure out the pricing calculator for App Runner. With currency set at 100 and 24 hours of peak traffic and 100 rps during peak traffic, the cost is $0.https://calculator.aws/#/addService/apprunnerFollowCommentrePost-User-0587453 6 months agoHello, thanks for reporting. The issue has been fixed. Please continue to explore with the calculator to help estimating your costs.https://calculator.aws/#/addService/apprunnerBest regards,PaigeShareAWS-User-6060748 6 months agoIt's working now. Thanks!Share"

Answer: 0Accepted AnswerThere was an issue with the calculator that has now been fixed.https://calculator.aws/#/addService/apprunnerCommentShareAWS-User-6060748answered 6 months ago


Question: How to perform CodePipeline ECS deployment based on Git tag

"Hi fellow AWS humans,I am running an ECS application that is automatically built and deployed using CodeCommit, CodePipeline, and ECR. The infratructure is managed with Terraform. My setup is fairly comparable to this tutorial here: https://devops-ecs-fargate.workshop.aws/en/1-introduction.htmlThe current ci/cd workflow is as follows:Git push to CodeCommit repo main branchCodePipeline builds a container Image and pushes it to the ECR registryDeploy the most recently built container to ECS and update the serviceThis is fine for very simple setups and I'm ok doing trunk based development (which, according to this blog post, is the suggested way when working with CodePipeline: https://aws.amazon.com/blogs/devops/multi-branch-codepipeline-strategy-with-event-driven-architecture/). However, I don't want the most recent build to be pushed straight to production. What I' like to achieve is a 2-step ci/cd process (2 pipelines, 2 separate target environments):Git push to CodeCommit repo main branchCodePipeline builds a container Image and pushes it to the ECR registryThe most recently built container is deployed in the ECS dev environmentTagging a specific commit (using git tag) will trigger a separate CodePipelineThe pipeline triggered in step 4 deploys the associated container to the production environmentIt seems that the only way to use CodePipeline's built-in features for deployment is by specifying a fixed branch name from which all vcs commits will trigger a new build/deployment - I see no way of specifying a git tag (and no way of specifying any wildcards either). This blog post (https://aws.amazon.com/blogs/devops/adding-custom-logic-to-aws-codepipeline-with-aws-lambda-and-amazon-cloudwatch-events/) suggests that there are ways to circumvent this shortcoming by using a Lambda and CloudWatch Events.My questions are:is there any way to achieve the illustrated ci/cd setup with AWS CodePipeline?if it is possible: What would be a best practice to implement this?Thanks for any pointers and your help!Kind regards and big thanks,MaikFollowComment"

Answer: "2Accepted AnswerAnother approach is extending your pipeline to first deploy to a dev/staging environment, then a manual approval action before deploying to production. This will allow you to deploy all changes to dev/staging for testing, then deploy only select builds to production. The manual approval action will pause the build until an reviewer with IAM access approves the change. Pipelines that are rejected or not approved within seven days will have the Failed status.This approach is detailed in Lab 2 of the CI/CD for ECS Workshop, specifically in the Extend Pipeline steps. This workshop also includes advanced deployment methods like blue/green and canary deployments.CommentShareNoah_Lanswered a year agoEXPERTmreferrereviewed a year agomaik a year agoThanks Noah! The workshop's Lab 2 Blue/Green deployment to production step with a manual approve sounds like an approach worth trying! Thanks a lot for pointing me to it!Share1Using a branch with the name of the version or environment is better than using a tag, so that you can make any break fixes to the version deployed or even continue deploying some important feature development requested by business after it goes to say SIT or UAT or production(higher environments) from Dev. If one wants only two they can limit themselves to two pipelines.So you can have two or three pipelines corresponding to each of the environments. The important thin is taking care(back merging) of PRs(pull requests) raised against the production environment into the lower environments. All this is an elaborate way of release management in big enterprises.One could also follow the blue green deployment or canary approach where there would be two production like environments  available always and the latest version after testing can be swapped with the older version.These URLs provide the approach for doing this using ECS and EKShttps://ecsworkshop.com/blue_green_deployments/https://catalog.us-east-1.prod.workshops.aws/v2/workshops/2175d94a-cd79-4ed2-8e7e-1f0dd1956a3a/en-US/https://docs.aws.amazon.com/AmazonECS/latest/userguide/deployment-type-bluegreen.htmlAnd finally here are all the change actions that can trigger the pipelines.https://docs.aws.amazon.com/codepipeline/latest/userguide/pipelines-about-starting.htmlHowever these do not preclude a completely different and customised way of triggering it by tags but using branches would be better.CommentShareMadhav_Panswered a year agomaik a year agoThanks for your insights Madhav. I agree with you insofar as that branch-based deployments are preferable over a tag-based approach but to be honest, it feels a bit hacky to back merge PRs between three permanent branches that correspond to the respective environments.The approach introduced by Noah (manual approve pipeline step which triggers blue/green deployment to a separate stage, see https://catalog.us-east-1.prod.workshops.aws/v2/workshops/869f7eee-d3a2-490b-bf9a-ac90a8fb2d36/en-US/4-basic/lab2-bluegreen/00-overview)) seems to be the more "idiomatic" way of solving things with CodePipeline. Plus, by implementing it this way I can get away with a single (trunk) branch that triggers deployments to 2 separate environments.Thanks a lot for your thoughts though!Share0A way to trigger the pipeline based on a git tag is by using EventBridge rule (instead of the default by polling to git repo).The EventBridge specification would be something like this: detail:          event:            - referenceCreated            - referenceUpdated          referenceType:            - tag          referenceName:            - prefix: version-      Targets:        - Arn: <Code Pipeline ARN>And in your CodePipeline "source" configuration, disable default polling:              Configuration:                RepositoryName: ...                BranchName: ...                PollForSourceChanges: falseCommentSharejputroanswered 10 months ago"


Question: Will adding VPN already in use to a new transit gateway cause an outage?

I'm wanting to transition over to using transit gateways. I have an existing connection that works and wanting to add that same connection to a new transit gateway. Will have both of these connection cause an outage?Thanks!FollowComment

Answer: "0Accepted AnswerYou can expect to see some convergence..probably a minute or two.And of course if your route tables aren't dialed in, you will have other problems as well...if you aren't propagating them, you need to audit carefully.CommentSharecloudbuttonanswered 4 years ago"


Question: MediaLive HLS Segment Separator

"Hello All,I am trying to match an existing workflow for a migration to Media Live. My current setup produces a ts segment with the syntax ..../file-00001.ts  etcMediaLive produces segments in the format of ..../file_00001.ts etcIn the documentation from AWS it clearly shows the syntax I am looking for but at some point has been changed without updating the documentation.See Link belowhttps://docs.aws.amazon.com/medialive/latest/ug/hls-custom-paths-examples.htmlDoes anyone know of a way through settings or API workflow that would change this segment separator?Thanks,JayFollowComment"

Answer: 0Accepted AnswerResponding with a response from AWS technical support. As this change was done to keep up with the HLS standards there is no way to override this.Support accepted my note about updating the documentation to resemble the current state of the platform.CommentShareKaFronanswered 3 months ago


Question: Add temporary drive to Batch instance

"I am trying to add a temporary volume to my Batch process for a machine learning application.I have created a Launch Template with a 104G drive and specified this, along with the appropriate amazon ML docker image in the compute environment.Instance types: optimal p3.2xlargeEc2 configuration: ECS_AL2_NVIDIAThe instance launches well enough, and the launch template seems to be respected, however I do not know how to use the additional drive.ls -al /dev drwxr-xr-x 5 root root      380 Jan 23 03:00 . drwxr-xr-x 1 root root      101 Jan 23 03:00 .. lrwxrwxrwx 1 root root       11 Jan 23 03:00 core -> /proc/kcore lrwxrwxrwx 1 root root       13 Jan 23 03:00 fd -> /proc/self/fd crw-rw-rw- 1 root root   1,   7 Jan 23 03:00 full drwxrwxrwt 2 root root       40 Jan 23 03:00 mqueue crw-rw-rw- 1 root root   1,   3 Jan 23 03:00 null crw-rw-rw- 1 root root 195,   0 Jan 23 02:58 nvidia0 crw-rw-rw- 1 root root 195, 255 Jan 23 02:58 nvidiactl lrwxrwxrwx 1 root root        8 Jan 23 03:00 ptmx -> pts/ptmx drwxr-xr-x 2 root root        0 Jan 23 03:00 pts crw-rw-rw- 1 root root   1,   8 Jan 23 03:00 random drwxrwxrwt 2 root root       40 Jan 23 03:00 shm lrwxrwxrwx 1 root root       15 Jan 23 03:00 stderr -> /proc/self/fd/2 lrwxrwxrwx 1 root root       15 Jan 23 03:00 stdin -> /proc/self/fd/0 lrwxrwxrwx 1 root root       15 Jan 23 03:00 stdout -> /proc/self/fd/1 crw-rw-rw- 1 root root   5,   0 Jan 23 03:00 tty crw-rw-rw- 1 root root   1,   9 Jan 23 03:00 urandom crw-rw-rw- 1 root root   1,   5 Jan 23 03:00 zerolsblk NAME    MAJ:MIN RM  SIZE RO TYPE MOUNTPOINT xvda    202:0    0   30G  0 disk └─xvda1 202:1    0   30G  0 part /usr/lib/x86_64-linux-gnu/libnvidia-cfg.so.470.57.02 xvdb    202:16   0  104G  0 diskThe 104G disk is showing up as "xvdb"  but there is no associated device file so I do not know how to use any of the mounting or formatting tools.I have tried changing the names and dive types in the launch template, but get exactly the same problem.  I have tried adding random names and sources to the job definition "Volumes configuration" but this also does not help.How do I access this drive?  Or should I take a different approach?FollowComment"

Answer: "0To answer my own question, I had to set up the device + filesystem + mount in the EC2 instance using the UserInfo of the Launch Template before the docker container was launced.  Then, I can ignore the device in the docker container and just use the existing mount directory.CommentShareAWS-User-7211613answered a year ago"


Question: Create a quadrant with QuickSight

Is there a way to create quadrant (kind of Gartner's magic quadrant) using QuickSight?FollowComment

Answer: "0Not something out of the box , but you can explore/test scatter plots and have a range of values which are spread in all 4 quadrantCommentShareEXPERTAWS-User-Nitinanswered 7 months ago"


Question: Can I extract the code from the aws to save it in Github?

"Hi, I am trying to understand if there is a way to extract the code from aws to save it in github or direct on the computer. Please could you explain it as for a dummys.Thats the list of the things I am billed forAmplifyAPI GatewayCloudWatchCodeArtifactCognitoData TransferDynamoDBLambdaSecrets ManagerSimple Notification ServiceSimple Storage ServiceX-RayThank youFollowComment"

Answer: "0Please correct me if I am wrong but it appears what you are asking for is the ability to generate a Cloudformation template from resources that you have manually deployed in your AWS account using either the console or CLI or SDK. Today we don't have that capability. It is recommended to use an Infrastructure as Code solution like Cloudformation, AWS SAM, CDK or Terraform to create all your infrastructure. That way you can check in the code for your infrastructure in a source control system like Github and replicate your infrastructure to other accounts or other regions for DR purposes.Please talk to your AWS Account Manager to get yourself added to the list of customers interested in the feature I mentioned at the top.CommentShareEXPERTIndranil Banerjee AWSanswered a year ago"


Question: Kinesis video streaming - stream appears stuck on frame when navigating via producer timestamp and using getMedia API

"Hi,We have an application that streams from a number of IP cameras into kinesis 24/7 and have begun to notice that some streams appear to 'freeze' on a frame. The stream will perform normally for days at a time until some point where it begins to show in the management console only a single frame from then on.What is very strange about this is that the freeze only happens on the producer timestamp, when navigating server timestamp the stream carries on, playing live video data. Since we are live streaming the cameras, the producer timestamp and the server timestamp should be very close together, so I should be able to see the same data at the server timestamp maybe a couple of seconds earlier/later on via the producer timestamp selector.Restarting the application pushing video data into kinesis while ensuring that the producer timestamps have updated and the data is definitely live, the issue persists as if the stream itself is in a bad state and unable to recover. Deleting the stream and re-creating it (the application may experience an error or two while it is not available but comes back online) "fixes" the issue as the data comes through correctlyIt is clear that the data is correctly being submitted as it is viewable when selecting via server timestamp, however, its breaking to our processes downline as the video data pulled (via the get media API) is only the single frame.I believe that this is a bug inside kinesis and would be happy to share any additional information in isolating it, or I would really appreciate any pointers of how we might be causing this issue so that we can avoid it in the future.Kind regards,Kieran BaconFollowComment"


Question: After Upgrade to 1.0.6630 view is failing with Assert error

Is anyone having the same issue in 1.0.6630?context message: dex < m_num_colflds && dex >= 0 - m_num_colflds:7 dex:17Before update the view was working. It is defined as no schema binding.When we roll back to Cluster Version 1.0.6476 view is working again.FollowComment

Answer: "0Thank you for bringing this to our attention. We have identified the issue and are working on a fix.CommentShareAWS-User-2965899answered 4 years ago0Hi.Is fix maybe released for this issue in a meantime?There is a limit in how long it is possible to defer an cluster update. I am afraid that we will be forced to update Redshift in couple of days despite this bug is not yet resolved.CommentSharekomikomanswered 4 years ago0Yes, this issue is fixed in all recent builds.Please let me know if you have any further issues after your maintenance window.CommentShareAWS-User-2965899answered 4 years ago0Solved with one of the Redshift updates.CommentSharekomikomanswered 4 years ago"


Question: Removing a website from the internet

"I was formerly in private practice as an attorney.  I am no longer practicing law, and no longer need a website to attract clients.  Google provided various services relating to my website (I'm not smart enough to know exactly what they did, but when I wanted content added/changed, I contacted Google).  When I contacted Google with this question, they told me to contact AWS (because, I think, AWS must be the website host?).  How can I delete my website so that it no longer appears in any search results?FollowComment"

Answer: "0AWS can't interfere with the results from third-party search engines like Google, Bing, DuckDuckGo, etc.If AWS is your domain registrar the steps to delete your domain are here https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/domain-delete.htmlCommentShareRWCanswered a month ago0https://lookup.icann.org/en/lookup - visit this site and you will get the reasonable information (Domain Registrar) for yor domain. Some domain you cannot delete by yourself (clientDeleteProhibited), if your domain is with AWS you can request them to remove it for you.CommentSharerePost-User-7136343answered a month ago0To remove your website from the internet, you will need to take a few steps:Cancel your hosting service with your web host provider, which in this case is AWS. You can do this through the AWS Management Console by stopping or terminating any running instances or services associated with your website.Remove any domain names associated with your website. This can be done by logging into your domain registrar account (the service where you purchased your domain name) and deleting the domain name.Submit a request to Google to remove any cached versions of your website from their search results. You can do this through the Google Search Console by submitting a removal request.It's important to note that removing your website from search results does not guarantee that it will be completely removed from the internet. Archived versions of your website may still exist on web archives or other sites.CommentSharehashanswered a month ago"


Question: "ERROR: [DRC LUTLP-1] Combinatorial Loop Alert: 2 LUT cells form a combinat

"Hi ,I am creating a project in which oscillators are involved . I do the implementation on my system and then create the tar file and upload it to the AWS instance for AFI image creation.But it throws the following error :" ERROR: (DRC LUTLP-1)Combinatorial Loop Alert: 2 LUT cells form a combinatorial loop. This can create a race condition. Timing analysis may not be accurate. The preferred resolution is to modify the design to remove combinatorial logic loops. If the loop is known and understood, this DRC can be bypassed by acknowledging the condition and setting the following XDC constraint on any one of the nets in the loop: 'set_property ALLOW_COMBINATORIAL_LOOPS TRUE (get_nets <myHier/myNet>)'."I tried setting the property as suggested above in the error comand but still i am not able to bypass this DRC error.Any suggestions on this issue?ThanksPrigishFollowComment"

Answer: "0I think they banned combinational loops.CommentShareSamTiananswered 4 years ago0Correct.  We prohibit combinatorial loops.ThanksKrisEdited by: awskrisk on Mar 10, 2019 3:25 PMCommentShareAWS-kristopkanswered 4 years ago0Thanks for the response Kris and Sam.So are you suggesting that there is no way in which this DRC check can be bypassed .Combinatorial loops are formed since we are trying to integrate an IP which has got ring oscillators in it .RegardsPrigishCommentShareprigishanswered 4 years ago"


Question: Storing XML data in AWS DB

What is the best DB service in AWS to store XML data? I do not want to convert to JSON. Need to retrieve XML and display on UI when needed. Size may not be more than 200 KB max. Today it is stored in oracle as BLOB/CLOB which we want to redesign.FollowComment

Answer: "0Aside from using RDS Oracle, both MySQL and PostgreSQL support BLOB/CLOBs and they are available both as RDS and Aurora Engines:https://docs.aws.amazon.com/rds/index.htmlCommentShareRodney Lesteranswered a year ago0Hi, @AWSUserXMLIf you just want to get specific XML by key or record, you can just use various RDBMS large objects and KVS.See @Rodney Lester 's answer.If you want to query on an element of an XML document, the native XML database service is not provided by AWS.You can host your own native XML database on EC2.However, considering the management cost, I think it is better to implement a wrapper that converts to XML at the timing of saving and fetching in the application.CommentShareEXPERTiwasaanswered a year ago"


Question: EC2 instance crashed and won't reboot in Ireland region

"I have an EC2 instance (i-84e578c7) that has crashed/stuck for hours. It was initially failing the health checks. Tried to reboot it and that does not seem to work. I was able to force-stop and start it again and now it says running but the instance is not reachable over ssh.Can you please try to see what is happening and try to reboot the instance?It has been down for hours.ThanksEdited by: Ilirjan Papa on Jan 28, 2021 2:42 PMFollowComment"

Answer: 0I am able to reach the instance now. Reboot took a really long time.CommentShareIlirjan Papaanswered 2 years ago


Question: How do i make a read replica of a database with a custom parameter group in a different region?

"I have a database in us-east-1 that is made using a parameter group that differs from the default default.mysql8.0 parameter group. When i try making a read replica of this database instance in the region eu-central-1 it fails because it uses the parametergroup default.mysql8.0 to create the replica instance instead of the custom parameter group. The status turns into Incompatible-restore with the error message being:The database instance was put into incompatible-restore. Found a fatal error during the restore: 2022-07-28T23:21:25.820075Z 1 [ERROR] [MY-011087] [Server] Different lower_case_table_names settings for server ('0') and data dictionary ('1').. Please make sure lower_case_table_names parameter value in requested parameter group is consistent with source databaseI've created the same custom parameter group in eu-central-1with even the same name, but when the replica is being created AWS keeps using the default default.mysql8.0 parameter group nonetheless. This problem does not occur when i create the replica in the same region as the database is in.So the question is: How do i make a read replica of a database with a custom parameter group in a different region?FollowComment"


Question: Data Lifecycle Manager

We have configured Data Lifecycle Manager  and its working fine. We need audit log for Data Lifecycle Manager success or failure.FollowComment

Answer: "1A "CreateSnapshot" event is output to CloudTrail.You can check this to see if it has failed or succeeded.As described in the following document, there is also a CloudWatch metric called "SnapshotsCreateFailed" that can be used to check the number of failed attempts.https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/monitor-dlm-cw-metrics.html#metricsIt is also possible to use "Event Bridge" to be notified when a "CreateSnapshot" event occurs.CommentShareEXPERTRiku_Kobayashianswered a month ago"


Question: Fargate Docker - cannot connect or ping the task that uses internal IP

"Hi,I have set up a public subnet in AWS Fargate ECS (on linux platform) to run a public docker for setting up a 'Jamulus' server. Jamulus seems to be starting ok according to the AWS log it produces, but I cannot connect from the Jamulus client.Looking into this, in AWS the task is assigned:Public IP16.171.60.xxxPrivate IP10.0.7.124The Jamulus log (in AWS) states:2022-10-07 xx.xx.xx | Using "10.0.7.124" as external IP.2022-10-07 xx.xx.xx | - Starting in server mode by default (due to compile time option)2022-10-07 xx.xx.xx | No GUI support compiled. Running in headless mode.Using the local IP as external seems like a source for the problem, but I cannot find any way to set the external IP as primary. I cannot ping the service, and I have opened Security group for all traffic to try to get some connectivity. Since the tasks starts up I assume the image is retreived from internet.Thanks!FollowComment"


Question: "EC2 and Windows 7 - Availble instance types, virtualization and AMI creation."

A customer is looking into running some Windows 7 (Enterprise SP1) instances as potential burst capacity while they migrate to a later supported OS.  Some questions around this that I have not been able to find a definitive answers on :Are there any restrictions on available instance types when running Windows 7 on EC2? (I understand the requirement for dedicated host to support BYOL)In terms of building a suitable AMI I have looked into our migration tools (CloudEndure and SMS). To use these it would appears that their on-premise guests would need to be HVM and not PV. Is this always the case when importing images into EC2?Would a 32bit vs 64bit source guest OS make any difference to any of the above?Would there be a better way for them to build a Windows 7 image based on the installation media they have instead of having to import from on-premise?Thanks for any guidance.FollowComment

Answer: "0Accepted AnswerHi,You can indeed migrate a Windows 7 machine (either 32 or 64 bit) using CloudEndure (and run it on a Dedicated Host).PV is not relevant for Windows anyway, all Windows versions supported by EC2 only use HVM, so there is nothing to consider here.Also, Windows 7 can only run on XEN and not Nitro instances.CommentShareAWS-User-7025091answered 3 years ago"


Question: Task Definition size according to Docker image size

"Greetings,I have a Docker image with size ~8GB. When creating a Task Definition I am prompted to fill the Task size (CPU and Memory) and optionally the Container size (CPU and Memory).  Even though I've read the info sections it does not come clear to me the difference between the two.Should I set the size of the Container and the Task to 8 GB? In case the both sizes are less than the image size the container would not run?FollowComment"

Answer: "1Accepted AnswerThe size of the docker image you're referring to seems to be the file size, which wouldn't be impacted by memory limitations. The term memory refers to the component within your computer that allows for short-term data access and is typically used in computing to store working data for a system[1].[1] https://en.wikipedia.org/wiki/Random-access_memoryWhen you have a file and save it in a file system it isn't normally stored in memory unless it's been recently accessed, and memory is able to cycle out old cached content as new content is requested[2].[2] https://www.oreilly.com/library/view/understanding-the-linux/0596002130/ch14s02.htmlNow onto the differences between task size and container size. When you register a task definition, you can specify the total CPU and memory used for the task. This is separate from the cpu and memory values at the container definition level. A single ECS task may have many containers running to complete, and in these cases the "Container Size" parameter would limit each container's resource consumption, while the "Task Size" parameter would limit how many total resources your Task may use[3].[3] https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.htmlIn regards to performance issues or launch failures, unless you load too much into RAM at once your task should still run fine, even with your image file being 8 GB. Something good to note though, Task-level CPU and memory parameters are ignored for Windows containers. We recommend specifying container-level resources for Windows containers.CommentSharebyodanswered 4 months ago"


Question: Failed to write to 'null'. Failed to retrieve resource

cant create a file.Failed to write to 'null'. Failed to retrieve resource from https://vfs-cloud9.us-east-2.console.aws.amazon.com/vfs/2139ce61347f4329a48b367620f5ce90/environment/home/lospec/htdocs/projects/ads/views/UyFollowComment


Question: AmazonRDS has exceeded 85% of the usage limit

"Hi,I am new here, excuse me if I am asking basic questions.I got today that my AmazonRDS has exceeded 85% of the usage limit. (17GB out of 20GB) , the project currently has 1 developer working on it and the database size is less than 200MB so I don't see how that is even possible. I start thinking to switch to firebase or even traditional DB hosting as it does not make sense cost-wise if we go live at this rate.my question what the usage limit includes? how I can debug/check this claim?I see also "Amazon Relational Database Service 634 Hrs", what does it mean exactly? I thought this only counted for each time we access the DB only not the running time, otherwise, why do they even bother to count it?Thank youFollowComment"

Answer: "0Your database instance storage isn't just for your data, it's used by the underlying engine and logs etc.  So there's going to be a block of it used up that's fairly static overhead that doesn't scale up with your data.If you're considering a self-managed DB instead of RDS make sure you consider the total cost of ownership.  Our experience is RDS has saved us a bundle because there's so much less maintenance.Unless using Aurora Serverless, you'll be charged for the time your instance is running as per the pricing page.  Doesn't matter if the instance is idle or has no connections, it's still running.  You can temporarily stop an instance for up to 7 days and you will be charged only for the EBS storage.  Or you can take a backup and terminate it, restoring it later, to save even more.If your DB is going to have widely varying usage patterns Aurora Serverless is worth a look.CommentShareEXPERTskinsmananswered 4 months ago0In addition to what has already been mentioned by skinsman, there are some other objects that can take space in the database. For example, temporary table space is one of them. Please ask customer to run the following queries to find out space utilization by database and temporary tablespace. If the size of temporary tablespace is high, please ask customer to restart the database instance, which will release the space.For Data Files:SELECT file_name, tablespace_name, table_name, engine, index_length, total_extents, extent_size from information_schema.files WHERE file_name LIKE '%ibdata%';For temporary tablespaces:SELECT file_name, tablespace_name, table_name, engine, index_length, total_extents, extent_size from information_schema.files WHERE file_name LIKE '%ibtmp%';CommentSharerePost-User-6950484answered 4 months ago"


Question: I Can't associate one of my Elastic IPs

"Hi guys,I have problems associating one disassociated Elastic IP (52.5.231.106) to an EC2 instance. All the actions are unavailable (associate, disassociate, release etc...) . I'm using my admin account and only happens with this specific Elastic Ip. Maybe it's blocked ?Thank you.FollowComment"

Answer: "2Hello,Can you check if your EIP is already attached to any Network Interface (like that of a NAT Gateway)? You can do this by going to your console, navigate to VPC and search for Elastic IPs option. Look for your EIP (52.5.231.106) and check the Summary section.CommentShareEXPERTShreya Pathakanswered 9 months agoEXPERTToni_Sreviewed 9 months ago0Hi! Yes, i just check and is attached to one Nat gatewayCommentShareAsanteanswered 9 months agoShreya Pathak EXPERT9 months agoOkay, so this is why you are unable to associate that EIP with your instance. You can allocate a new EIP and attach that to your instance as you cannot disassociate an Elastic IP address from a NAT gateway after it's created. To use a different Elastic IP address for your NAT gateway, you must create a new NAT gateway with the required address, update your route tables, and then delete the existing NAT gateway if it's no longer required.Share"


Question: RDS Proxy Metrics

"I am having a higher number of DatabaseConnectionRequests on the RDS proxy. I am not sure how should I interpret it? I tried the AWS documentation but it did not help:https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-proxy.monitoring.htmlWhat is DatabaseConnectionRequests matric, what does it represent?Does it represent connection Requests between proxy and database or between application and proxy?What will be the impact on RDS if this metric will keep on getting higher and higher?FollowComment"

Answer: "0How many connection request to have a connection from Proxy to your RDSIt represent connection Requests between proxy and databaseThe metric itself gives you an idea of how many connections per min you are trying to establish. Use with the metrics DatabaseConnections, DatabaseConnectionsSetupSucceeded, DatabaseConnectionsSetupFailed to give you a view of your capacity in the Database Connections.  RDS proxy can help you reuse connections set to your database to manage the Maximum database connections of your DB engine.RDS Quotas: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_Limits.htmlRDS Proxy: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-proxy-managing.htmlCommentShareYoungCTO_quibskianswered a year ago"


Question: CodeDeployment Issue

"The deployment failed because a specified file already exists at this location: /var/www/html/index.html, this is the error messageFollowComment"

Answer: "0The error is caused by the existence of the same file in "/var/www/html/" of the instance to be deployed.To resolve the error, you need to set "file_exists_behavior" in appspec.yml.If "OVERWRITE" is set for "file_exists_behavior", the same file will be overwritten and deployed even if it exists when deploying.https://docs.aws.amazon.com/ja_jp/codedeploy/latest/userguide/reference-appspec-file-structure-files.htmlSample appspec.yml.version: 0.0os: linuxfiles:  - source: /    destination: /var/www/htmlfile_exists_behavior: OVERWRITEpermissions:  - object: /var/www/html    owner: apache    group: apache    mode: 755    type:      - file      - directoryIf this answer has led to a resolution, please approve the answer for the betterment of the community.CommentShareEXPERTRiku_Kobayashianswered 2 months ago"


Question: How to group multiple log stream under same log group

"I have several EC2 instances (Windows servers) which include several applications with quite an amount of log files in each. Is it possible to push logs so that they would be arranged in the form of a logical directory structure in the CloudWatch? (like shown below):Instance_log_group  /instance_#1_log_a      /xxxx.log  /instance_#1_log_b      /xxxx.log  /instance_#2_log_a      /xxxx.log  /instance_#2_log_b      /xxxx.logAWSService_log_group /service_#1     /file_path/logs        /xxxx.log  /service_#2     /file_path/logs        /xxxx.log        /xxxx.logBasically, how to configure or modify my Cloudwatch configuration file (configured using SSM) - to have more than one log stream under the same log group.FollowComment"

Answer: "0Accepted AnswerCloudWatch Logs > Log Group(s) > Log Stream(s) > [Log Event]We cannot have directories within a log stream i.e. the following level of categorization is not possible:AWSService_log_group /service_#1     /file_path/logs        /xxxx.logHowever, you can have multiple log streams in a log group i.e. the following is possible assuming "xxxx.log" is not a sub-directory but directly the log events/entries:Instance_log_group  /instance_#1_log_a      /xxxx.log (log entries)  /instance_#1_log_b      /xxxx.log  /instance_#2_log_a      /xxxx.log  /instance_#2_log_b      /xxxx.logTo publish log events to separate log streams, you can specify this in the "log_collected" section such as following where 2 log streams in the "test.log" log group will be created. Using the log_stream_name field-"logs_collected": {           "files": {               "collect_list": [                   {                       "file_path": "c:\\ProgramData\\Amazon\\AmazonCloudWatchAgent\\Logs\\amazon-cloudwatch-agent.log",                       "log_group_name": "test.log",                       "log_stream_name": "my_log_stream_name_1_{instance_id}"                   },                   {                       "file_path": "c:\\ProgramData\\Amazon\\AmazonCloudWatchAgent\\Logs\\test.log",                       "log_group_name": "test.log",                       "log_stream_name": "my_log_stream_name_2_{instance_id}"                   }               ]           }Adding a chunk from documentation [1] here for better understanding:log_stream_name – Optional. Specifies what to use as the log stream name in CloudWatch Logs. As part of the name, you can use {instance_id}, {hostname}, {local_hostname}, and {ip_address} as variables within the name. {hostname} retrieves the hostname from the EC2 metadata, and {local_hostname} uses the hostname from the network configuration file.If you omit this field, the value of the log_stream_name parameter in the global logs section is used. If that is also omitted, the default value of {instance_id} is used. If a log stream doesn't already exist, it's created automatically.[1]  Manually create or edit the CloudWatch agent configuration file -  CloudWatch agent configuration file: Logs section - https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Agent-Configuration-File-Details.html#CloudWatch-Agent-Configuration-File-LogssectionUsing the above method, each instance can have its own log stream for the type of logs that it is pushing to CloudWatch. But, there cannot be sub-directories beyond a log stream in CloudWatch. You can make use of the variables such as {instance_id} in the configuration, for log-group names or log-stream names to categorize. The documentation link provided above explains this in detail.CommentShareSUPPORT ENGINEERShreyas_Manswered a month ago0Thank you @shreyas, this will help and I will try this once.Related to this, I have configured the CloudWatch agent configuration file in SSM and pushed five application-related logs from the EC2 instance as below,Out of five only the first three are reflected in CloudWatchWindows metrics are also not reflected in CloudWatch"logs": {"logs_collected": {"files": {"collect_list": [{"file_path": "C:\\Program Files\\*****\\*****\\*****\\*****\\name*.log","log_group_name": "group1","log_stream_name": "{instance_id}","retention_in_days": 60},{"file_path": "C:\\Program Files\\*****\\*****\\*****\\*****\\name1.log","log_group_name": "group2","log_stream_name": "{instance_id}","retention_in_days": 60},{"file_path": "C:\\Program Files\\*****\\*****\\*****\\*****\\name2*.log","log_group_name": "group3","log_stream_name": "{instance_id}","retention_in_days": 60},{"file_path": "C:\\Program Files\\*****\\*****\\*****\\*****\\name3*.log","log_group_name": "group4","log_stream_name": "{instance_id}","retention_in_days": 60},{"file_path": "C:\\Program Files\\*****\\*****\\*****\\**.log","log_group_name": "group5","log_stream_name": "{instance_id}","retention_in_days": 60}]},"windows_events": {"collect_list": [{"event_format": "xml","event_levels": ["VERBOSE","INFORMATION","WARNING","ERROR","CRITICAL"],"event_name": "Windows-system","log_group_name": "group6","log_stream_name": "{instance_id}","retention_in_days": 30}]}}CommentSharetomgeorgeanswered a month ago"


Question: How to make ALB seamlessly re-forward to a healthy target?

"How to make ALB seamlessly and instantly re-forward HTTP request to a healthy target?I am trying to configure ALB to seamlessly forward HTTP requests to another healthy target when the original target is unavailable, but not yet marked unhealthy. But I get Gateway error 502 until 2 unsuccessful healthchecks happen and the target is marked unhealthy.I have 1 ALB, 1 target group, 2 targets that pointed to 2 IPs in separate VM instances.Session stickyness is on. App cookie JSESSIONID. Tomcat is configured for Clustering.Scenario:start Tomcat at node Abrowse app http: //My-ALB-link/examples/jsp/jsp2/simpletag/hello.jsp. Node A responds.start Tomcat at node B. wait until ALB marks target healthystop Tomcat at node A and quickly refresh browser - get error 502 Bad Gatewaywait a minute, refresh browser. Node B responds.How to configure ALB to instantly re-forward HTTP request to another node if the first node happen to be unavailable? User's wont wait while ALB makes 2 healthchecks and marks a node unhealthy.thanks,MarkFollowComment"

Answer: "0I think you already have your own answer here. Because ALB thinks the target is healthy it will continue to forward requests to it. ALB won't "reforward" a request because it doesn't know that there is a problem yet. Even then, ALB doesn't send requests twice so in the event that a back-end has failed the client will need to resend the request.You can modify the health check timers but it sounds like you want a way to tell ALB that a target is unhealthy straight away.Something you might try is manually/automatically deregistering the target: https://awscli.amazonaws.com/v2/documentation/api/latest/reference/elbv2/deregister-targets.htmlCommentShareEXPERTBrettski-AWSanswered a year agoAWS-User-9632403 a year agoALB thinks the target is healthy it will continue to forward requests to it.That is the problem. ALB receives "bad gateway" from network layer and continues to think that the target is healthy.It looks like a load balancing subprogram is decoupled from a health check subprogram. Where only the latter can set a target status, and the former can only read it, and does not paying attention an actual status of the target.ALB won't "reforward" a request because it doesn't know that there is a problem yet.It knows, it cannot connect to IP/port, it received error from network layer.Even then, ALB doesn't send requests twice so in the event that a back-end has failed the client will need to resend the request.I thought in case of ALB, it works like sort of proxy, receives full HTTP request from Client, then sends it to a target. If that failed, ALB can theoretically send it again to another target. Client is still awaiting a response.I may be wrong, need to read more how ALB works.Yes, I've already modified timers to minimum period.Again, there is no need to additionally tell ALB that a target is not healthy. It already got it. The monitor works same way, it connects and reads from target, if target does not response, the monitor counts this as a failure and sets the status to unhealthy. What is a difference with the LB calls? It calls target similar way and receives same error from network. From that it already knows the actual status of a target.ShareAWS-User-9632403 a year agocontinue ...Something you might try is manually/automatically deregistering the target:Yes, I also thought about automatically deregistering. But that would require to make my own monitor, which also will be timer based, most likely. Because there are no events/triggers from ALB I could set my handler on.And "my monitor/deregistrator" wont make ALB to re-forward request.ShareBrettski-AWS EXPERTa year agoI thought in case of ALB, it works like sort of proxyWhile ALB could do that, it doesn't operate that way. Sending requests to a targets multiple times could potentially set up patterns where you need to handle the case of a request landing at the back end multiple times and ensure idempotency. Rather than do that, ALB only sends requests once. It's up to the client software to determine whether it should retry or not based on the return code.Share0@BrettskiWhile ALB could do that, it doesn't operate that way. Sending requests to a targets multiple times could potentially set up patterns where you need to handle the case of a request landing at the back end multiple times and ensure idempotency. Rather than do that, ALB only sends requests once. It's up to the client software to determine whether it should retry or not based on the return code.I agree if the request was sent, and no response from the target, then it can be wrong to re-send. But in the scenario I am talking about ALB cannot even send the request at first time. It cannot establish TCP connection to send it. In such case, from my perspective, it will be safe to send it to another target.CommentShareAWS-User-9632403answered a year agoBrettski-AWS EXPERTa year agoBut: ALB doesn't know the request has failed. It thinks the target is healthy therefore it sends the request. Only then it gets back an error code; it's too late that point. If the host refused the TCP connection that would be a different matter. But that's not the scenario here.Share0Please tell me how ALB can send HTTP request without first establishing TCP connection with a target?It sends SYN, should receive SYN-ACK from the target. It will not send further packets (with HTTP payload) if it does not receive SYN-ACK and good handshake is not established.It is exactly the scenario described in the original message. See item 4.CommentShareAWS-User-9632403answered a year agoBrettski-AWS EXPERTa year agoIn this case, ALB is creating the 502 Bad Gateway response because the target failed to respond. It was still marked healthy so ALB sent a request to it. To go back to the original answer: ALB does not resend requests. That's not something that is changeable here. If you'd like that behaviour changed (and there are no guarantees here); reach out to your local AWS Solutions Architect and have them raise a feature request with the ALB team.Share0Yes, it is probably good idea to raise a feature request. With Support first.By the way, Network LB has the feature that looks like what I need - passive health checks. I have not tried that yet. If it works, may be I will need to chain them something like that: ALB -> NLB => Targets.It is different question - do you know what redundancy an ALB listener has behind the scene? Can it fail? What happens when it fails?CommentShareAWS-User-9632403answered a year ago"


Question: Cant receive verification email when sign up a aws account

"I am going to create an aws account for my company, but when I register, I cannot receive the verification email after filling in the company email. （The company email is an email group）.FollowComment"

Answer: "0Hi there!I understand the concern behind this and want to reference this article that lists the steps to take to create and activate your AWS Account: https://aws.amazon.com/premiumsupport/knowledge-center/create-and-activate-aws-account/.Given the call out, our Account support team will be better equipped to look into this with you. Please reach out to them via a case in the Support Center: https://aws.amazon.com/support.If you're unable to open a case, you also reach our Account support team by completing this contact form: https://support.aws.amazon.com/#/contacts/aws-account-support/.I trust this info will help have this addressed quickly.Warm Regards,Kraig ECommentShareEXPERTAWS Support - Kraiganswered 7 months ago"


Question: Sagemaker batch jobs

"I have an ML workload that involves providing predictions for large datasets on demand. The model is a PyTorch text classifier and the workload involves pricing predictions for 10's of thousands of records. The jobs arrive randomly but are very infrequent.I've created a standard Sagemaker endpoint and performance is acceptable when I do client batching, i.e.outputs = []for batch in create_minibatch(inputs, batch_size=128):    predictions = predictor.predict(batch)    outputs.extend(predictions)This takes around a minute for 25k records using a single instance.I've considered using the AWS Batch mode, but it takes around 4-6 minutes to create the job, so any benefit from the ability to scale up to multiple instances seems to be lost due to the start-up cost. Is it possible to use Sagemaker Batch processing with a persistent endpoint?The alternative is to use client batching (using the code above) - but if I create multiple instances can I be sure that each batch is returned in the order I request? In the example above I need to zip the inputs and outputs.Is there a better way of serving this workload - I feel it falls somewhere in between the API and Batch paradigm?FollowComment"

Answer: "0Accepted AnswerHi,Please find my answers below.Question: Is it possible to use Sagemaker Batch processing with a persistent endpoint?Answer: Currently SageMaker does not have such option.Question: The alternative is to use client batching (using the code above) - but if I create multiple instances can I be sure that each batch is returned in the order I request? In the example above I need to zip the inputs and outputs.Answer: When you send each batch to your endpoint, the request is synchronous, and your application will be waiting to get a response right away. The response will be in the order you sent. So maintaining the order is a matter of how you manage your requests. Regardless of how many instances you use in the endpoint.Question: Is there a better way of serving this workload - I feel it falls somewhere in between the API and Batch paradigm?Answer:There is two main issues at play here:CostTimeDepending on your business need and which of the above is more important for you, or if you need to find a balance between the two.SageMaker has the following inference options that might be useful for your case:Real-time inference: here you provision resources for the endpoint and it stays up and running, so when you need to do predictions you use it straight away with no wait. Cost is based time the endpoint was InService and number and type of instance (see pricing page).Batch Inference: Here you send large number of records that you want to get predictions for. It requires resources to be provisioned first, which can take few minutes before actual prediction happens. Cost will be calculated based on the time it took to do predictions.Theoretically speaking, time took to do predictions in 1 or 2 should be very similar. However in 1, you provision the endpoint in advance, so when you invoke it, it feels faster, because your instance been there and ready. And comes with extra cost.Now if this option is good for you, you can always provision the endpoint in advance before you start predictions, and tear it down after. This way you get the benefit from both worlds.However, there is currently no option where the resource are persistent and you can just start predicting when you want. Just because of cost and operational considerations are in play here.CommentShareSUPPORT ENGINEERSam_Eanswered 3 months ago0Thanks Sam that's really useful! I think we're going to use Batch Transform. Are you aware of any documentation on "Best Practices" to reduce the provisioning time? It seems to be taking between 3 and 6 minutes (which is ok but I feel it could be quicker). I'm using Pytorch and deploying a pre-trained model. So the image is '{account}.dkr.ecr.{region}.amazonaws.com/pytorch-inference:1.13.1-cpu-py39'Because (I think) it builds the contain each time, and my model.tar.gz contains a requirement.txt file that downloads/installs huggingface transformers among other heavy dependencies it probably slows down deployment. Is it possible to reuse the container rather than have it built each time a new batch job is submitted? Or create an image based on pytorch-inference:1.13.1-cpu-py39 with the dependencies pre-installed?CommentShareDaveanswered 3 months ago"


Question: AWS WorkDocs - File Count

"Is there any way to count how many documents are in a WorkDocs folder? I have tried multiple ways and have done some research, but still can't figure it out. My challenge is that it's hard to tell whether there were any issues in a bulk upload from a desktop folder.  . It seems the only way is to count lines using the scroll.  Can you please let me know if there is an easy way to show the count of the files in the folder.FollowComment"

Answer: "0Hi,Thanks for reaching out. I was able to count the number of items in a workdocs folder by using a combination of the AWS CLI and jq.For the CLI, I used the describe-folder-contents API command which describes the items under a certain Workdocs folder. Please see the documentation of this command here. This command describes the items found under a certain folder. I have found that the easiest way to get the folder id is to navigate to the folder in workdocs and get it from the URL -> e.g. https://[WORKDOCS_UNIQUE_NAME]/workdocs/index.html#/folder/[folder-id]We can see the documentation of jq here in this page. Please check it out if you have not used jq before.Please see below for an example command that we can use:aws workdocs describe-folder-contents --folder-id [FOLDER_ID] --type ALL --sort DATE --order ASCENDING | jq '.Documents | length'For this command we are using the describe-folder-contents API to describe the contents of the folder. This returns a JSON object with a key called "Documents" which contains an array of the descriptions of the documents under this folder. We are using jq here to count the number of members of Documents arrayI recommend running the above command without the jq part first so that you see the actual JSON output. One thing to note here is that this is a paginated operation. Please take note if there is a Next Token returned as you will have to keep calling this API until all the results have been returned. If you have a lot of items it may be better to create a script in a programming language such as Python rather then using the AWS CLI.With the above command, I am able to count the number of items in my folder. Please let me know if you have any questions.CommentShareSUPPORT ENGINEERRyan_Aanswered a year ago0I found another solution to this that requires you to have the companion app downloaded.go to your file folder and navigate to your Workdocs network folder.in the search bar, type "kind:=folder" or "kind:=document", or whatever you'd like to know the number ofonce that loads, click Ctrl + a to select all.holding the Shift key, hover over your selection and right click. select copy as file pathgo to excel, and paste the file paths in! for some reason, I couldnt use Ctrl P for this, i had to click the paste icon in excel.you then can convert text to table using \ as a deliminator if you'd like to separate the file path from the file name or leave as is!click column A to see the file countbit of a roundabout solution, but it worked for me! the benefit of this method is it pulls everything, even if its many sub-layers deep :)CommentShareOliviaanswered a year ago"


Question: 503 Service unavailable

While trying to open the website or admin panel it's showing "The server is temporarily unable to service your request due to maintenance downtime or capacity problems. Please try again later."Website: toolgine.comOrigin Server: AWSDNS/CDN Server: CloudflareCan anyone help me to fix this issue?FollowComment

Answer: "0Accepted AnswerAre you trying to point to 43.205.43.149?It appears that I can build a connection to the above IP address already with port 80 and 443(which is your Alias record for toolgine.com)In this case, I suspect that you are pointing to a wrong instance, or your instance is not serving any material yet.If you are using EC2, make sure your nginx or apache is running to serve your content.Then, it can mean that maybe your Cloudflare is just showing a failover behavior to us. So, check Cloudflare setting and Alias record?Check this link https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/load-testing.htmlCommentShareteduri90answered 6 months agoAWS-User-9592127 6 months agoYes 43.205.43.149 is my web elastic IP.I am using ec2 instance ap-south-1 (t2.micro), how to know if nginx or Apache is running or not?Shareteduri90 6 months agoYou may do sudo systemctl restart httpd on your server (it seems you are using Apache not nginx?)Or please take a look at how to configure your ApacheWithout nginx or apache, your instance cannot serve any content.After you do this part right, you should be able to create a good connectionShareAWS-User-9592127 6 months agoI am not even able to connect the instance now, it's showing "failed to connect to your instance - EC2 instance connect is unable to connect to your instance. Ensure your instance network settings are configured correctly for EC2 instance connect. For more information, see set up EC2 instance connect at https://docs.aws.amazon.com/AWSEC2/latest/User guide/ec2-instance-connect-set-up.html.I am a newbie in aws, don't know what to do!Shareteduri90 6 months agoMaybe your instance was rebooted.I highly suggest going through the tutorial below then.You must have been missing something.I am sorry that  I cannot help much, but I don't have information to help you.I think for your EC2 instance connect, you need to make sure that your ec2 instance is in a public subnet, and open for connections.https://www.youtube.com/watch?v=Q4Qlg_-pgMgShare"


Question: "Private Route from Software VPN to ALB using Static, Public IP"

"We're trying to figure out the most efficient way to replicate our application and networking on AWS are getting stuck on a networking requirement.  Here's the general layout:Our application will be deployed in ECS (Fargate)We'll deploy an instance of the application + ALB for each clientWe'll use a software VPN (AWS VPNs are too expensive, but I don't think they change anything)We need to privately route traffic from the VPN to each client's instance of the applicationWe prefer to put clients in their own VPCs and use VPC Peers but we could relax this requirement if it were fatal.Not only do we want/need a Static IP for VPN (and VPC Peer) routing, but we have a client that requires a publicly routable IP address as the destination for our VPN communication.  ALBs don't support static IPs (EIP or otherwise) and it doesn't look like either of the suggested workarounds (https://aws.amazon.com/blogs/networking-and-content-delivery/using-static-ip-addresses-for-application-load-balancers/) will work for us.  Specifically, from what I've read:We can put an NLB in front of the ALB to get a Static IP, but we can only associate an EIP if the NLB is internet-facing.The Global Accelerator provides static IPs, but they also appear to be designed to be internet-routable.In both cases, it doesn't sound like these addresses are internally routable.  Am I wrong?  Is there another built-in way to achieve our requirement?Edited by: Clayton D. on Mar 30, 2020 12:59 PMFollowComment"

Answer: "0The solution we finally settled on (at AWS recommendation) was to obtain a range of public IP addresses.  When creating a non-public VPC, we could use this as one of our CIDR ranges.  Since the IP addresses are not internet accessible, we can actually reuse the same addresses in multiple VPCs (using endpoint services to avoid CIDR overlap issues that would arise using VPC peers).CommentShareClayton D.answered 3 years ago"


Question: EMR_DefaultRole has insufficient EC2 permissions

"Hi,I'm trying to create a new EMR cluster (ID j-RKXMARM35ME6) but I've received the validation message error: "Terminated with errorsService role EMR_DefaultRole has insufficient EC2 permissions".I've tried this workaround  https://aws.amazon.com/premiumsupport/knowledge-center/emr-default-role-invalid/ recreating the default roles for EMR but the validation message error still happening.Any guidance or recommendations on how to resolve this issue are much appreciated!Thank you,Emmanuel SilvaFollowComment"

Answer: "1I was having the same errors and I followed Almas advice. However, the CloudTrail logs were not that helpful. What I found was a few instances of a InvalidRequestException, which turned out to be an ListYarnApplicationsPrivate event. The error message was NoSuchElementFound, and it gave me the cluster ID. The cluster ID did exist, though!I did further debuging by copying the deprecated policy, AmazonElasticMapReduceRole, into a new policy. And then one by one deleting the Actions. E.g. deleting all the ec2:** actions, then all the iam:** actions, etc. This debugging led me to the real problem: iam:PassRole.In the new policy, AmazonEMRServicePolicy_v2, we see these two statements toward the bottom of the code:    {          "Sid": "PassRoleForAutoScaling",          "Effect": "Allow",          "Action": "iam:PassRole",          "Resource": "arn:aws:iam::*:role/EMR_AutoScaling_DefaultRole",          "Condition": {              "StringLike": {                  "iam:PassedToService": "application-autoscaling.amazonaws.com*"              }          }      },      {          "Sid": "PassRoleForEC2",          "Effect": "Allow",          "Action": "iam:PassRole",          "Resource": "arn:aws:iam::*:role/EMR_EC2_DefaultRole",          "Condition": {              "StringLike": {                  "iam:PassedToService": "ec2.amazonaws.com*"              }          }      }  If you are like me, when I went to upgrade to the newer EMR access policies, I made a new EC2 role called EC2DefaultRoleforEMR. Because my name doesn't match the name in the AmazonEMRServicePolicy_v2 policy, my cluster was not getting the iam:PassRole permissions it needed.In classic AWS fashion, this is mentioned in passing in the documentation: "The v2 policies incorporate new iam:PassRole security configurations,..." They fail to mention that everything will break if you come up with your own names for the EC2 role.https://docs.aws.amazon.com/emr/latest/ManagementGuide/emr-iam-roles.htmlThere are a lot of ways of solving this, but for me the approach that made the most sense was to make a policy called IAMPassRoleforEMR And make the contents something like:{"Version": "2012-10-17","Statement": [{"Sid": "PassRoleForAutoScaling","Effect": "Allow","Action": "iam:PassRole","Resource": ["arn:aws:iam::<acct_number>:role/EMR_AutoScaling_DefaultRole","arn:aws:iam::<acct_number>:role/AWSServiceRoleForEMRCleanup","arn:aws:iam::<acct_number>:role/EC2DefaultRoleforEMR","arn:aws:iam::<acct_number>:role/<your_role_names_here>","arn:aws:iam::<acct_number>:role/<etc>"],"Condition": {"StringLike": {"iam:PassedToService": "application-autoscaling.amazonaws.com"}}},{"Sid": "PassRoleForEC2","Effect": "Allow","Action": "iam:PassRole","Resource": ["arn:aws:iam::<acct_number>:role/EMR_AutoScaling_DefaultRole","arn:aws:iam::<acct_number>:role/AWSServiceRoleForEMRCleanup","arn:aws:iam::<acct_number>:role/EC2DefaultRoleforEMR","arn:aws:iam::<acct_number>:role/<your_role_names_here>","arn:aws:iam::<acct_number>:role/<etc>"],"Condition": {"StringLike": {"iam:PassedToService": "ec2.amazonaws.com"}}}]}CommentSharemattmoehranswered 2 years ago0Hi Emmanuel Silva,Hope you are doing well.I understand you are facing issues related EMR_DefaultRole permissions while launching an EMR cluster and need guidance regarding the same.To troubleshoot the issue further from your end, you can check API calls which were blocked by insufficient permissions by checking the AWS Cloudtrail Events.1.Navigate to the Cloudtrail console: https://console.aws.amazon.com/cloudtrail/2.Click on Event History tab3.Then use Filter as "Event Source" and in Time range select the timestamp during cluster launch.4.From the buttons on Right side, click on the Gear Icon, which is for Show/Hide columns and select the Error Code column check box.Once all the above is done, go through the list of events and expand the one which has an ErrorCode like AccessDenied or any other exception.Once you know which API call is being denied, you can then investigate further regarding the same.Revert back on this thread for more assistance/guidance.I hope this helps.-AlmasCommentShareAlmas-AWSanswered 3 years ago"


Question: CLR enabled setting for RDS SQL Server

"We have a SQL Server RDS instance that runs in us-east-1. We just upgrade the instance and the "clr enabled" setting went from 1 to 0.In the default parameter groups, the "clr enabled" setting is set to "1" correctly but when my SQL Server RDS Instance fires up, the setting in the db runtime is "0"Anyone have ideas as to why this setting doesn't go through?FollowComment"


Question: SES receiver delay

"Hi,One of our customers is complaining about receiving their mails with a ~30-minute delay.How can we deduce where the problem is ?Is there an option to view delayed mails ?According to this: Three places where your email could get delayed when sending through SESIt may be an ISP problem, but we want to see some log that confirms it.FollowComment"

Answer: "0Hello,The doc you are referring to is correct. You should be checking your application log to make sure that it sends out the message directly, and there is no delay in conveying the message to SES. After that, you should be getting a message ID, and open a case with Premium Support. They will be able to pull out the internal logs and compare the different time stamps of the respective message, then advise where exactly the delay comes from. For example, if the message has been received from your application at 00:00:01, then it was sent out from SES at 00:00:01 and a response has been obtained from the ISP that the message has been received at 00:00:02, but your recipient is reporting that it has been received at 00:15:00, then the issue is with the ISP, as it has received the message and needed time to place that message in the inbox of the recipient.Of course this is an example of how things go, but better open a case with Premium Support, and provide a message ID, and they will advise!Best Regards,MoCommentShareMoanswered 2 months ago"


Question: Communication Between Lightsail Containers

"I want to deploy two containers which is "nginx" and "php-fpm(Laravel)".I already create and make it work on local using docker-compose. But by Lightsail it failed.Lightsail logs said php-fpm container not found which I set the name on container.yml.nginx: [emerg] host not found in upstream "php" in /etc/nginx/conf.d/default.conf:24The line 24 isfastcgi_pass php:9000;, indicating the name of php container not found.Like docker-compose, I thought it would be possible with specifying container name can communicate between each containers.So, my question is what is the right way to configure for communicate between two container.Here is the settings.nginx default.confserver {  listen 80 default_server;  listen [::]:80 default_server;  server_name _;  root /app/public;  add_header X-Frame-Options "SAMEORIGIN";  add_header X-XSS-Protection "1; mode=block";  add_header X-Content-Type-Options "nosniff";  index index.html index.htm index.php;  charset utf-8;  location / {      try_files $uri $uri/ /index.php?$args;  }  location ~ \.php$ {    try_files $uri =404;    fastcgi_split_path_info ^(.+\.php)(/.+)$;    fastcgi_pass php:9000;    fastcgi_index index.php;    fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;    fastcgi_param PATH_INFO $fastcgi_path_info;    include fastcgi_params;    fastcgi_buffer_size 32k;    fastcgi_buffers 4 32k;    fastcgi_read_timeout 1200s;    fastcgi_send_timeout 1200s;  }}Lightsail container.ymlserviceName: ${SERVICE_NAME}containers:    nginx:        command: []        image: ${LATEST_NGINX_LIGHTSAIL_DOCKER_IMAGE}        ports:            '80': HTTP    php:        command: []        image: ${LATEST_PHP_LIGHTSAIL_DOCKER_IMAGE}publicEndpoint:    containerName: nginx    containerPort: 80    healthCheck:        healthyThreshold: 2        intervalSeconds: 20        path: /api/healthcheck        successCodes: 200-499        timeoutSeconds: 4        unhealthyThreshold: 2FollowComment"

Answer: "2Accepted AnswerLightsail containers don't contain the DNS magic that docker-compose has. You'll need to tell Lightsail about the port and expose it internally.Change nginx.conffastcgi_pass php:9000;  ->  fastcgi_pass localhost:9000;Add to container.ymlphp:   "ports": {     "9000": "HTTP"   }CommentShare416756788124answered a year agoEXPERTmreferrereviewed a year ago1thank you for the answer @mreferreFor the sake of completeness, i would like to refer to the section in the lightsail documentation i just became aware of:https://lightsail.aws.amazon.com/ls/docs/en_us/articles/amazon-lightsail-container-services -> "Private domain"To access a specific container using the private domain of your container service, you must specify the open port of the container that will accept your connection request. You do this by formatting the domain of your request as <ServiceName>.service.local:<PortNumber>, in which <ServiceName> is the name of your container service and <PortNumber> is the open port of the container that you wish to connect to. For example, if you create a deployment on your container service named container-service-1, and you specify a Redis container with port 6379 open, then you should format the domain of your request as container-service-1.service.local:6379.CommentShareSandroanswered a year ago"


Question: ENI detached from FSx

"Hi Team,I have an FSx for Windows file server in a single AZ. Unfortunately the ENI got detached from the FSx and the file system went to misconfigured state.Please let me know if there is a way to reattach it or get the FSx back to working state.Best,TarasFollowComment"

Answer: "0In general, customers should not modify or delete the ENI associated with their file system. As stated in the documentation, "Modifying or deleting the network interface can cause a permanent loss of connection between your VPC and your file system.”I will reach out to you directly to get the customer/file system details and explore if there are any mitigations available.CommentShareNikhil Srivastavaanswered 7 months ago"


Question: private IP addresses of MWAA Web server keeps changing

"hi,Does anyone know why the private IP address of the MWAA web server keeps changing time to time?Example: i have an AWS MWAA environment and i created a DNS record in route53 against the IP address i get after running the dig command against the web server hostname, but the url stops working after few days and when i check the dig command again, i get a new IP. Any help would be great. Thanks.FollowComment"

Answer: "5The private IP address of the MWAA web server changes because it's running on an AWS Elastic Network Interface (ENI). ENIs are automatically created when you launch a new Amazon MWAA environment. When an environment is updated or experiences an internal failure, the ENI may be replaced, resulting in a new private IP address.To avoid issues with changing IPs, instead of using an IP address in your Route 53 record, you should create a CNAME record pointing to the MWAA environment's web server hostname. This way, the URL will continue to work even if the IP address changes.Here's an example of how to create a CNAME record in Route 53:Open the Route 53 Management Console in AWS.Select the hosted zone where you want to create the CNAME record.Click "Create record."Choose "Simple routing" and click "Next."Click "Define simple record."In the "Record name" field, enter the desired subdomain for your MWAA environment (e.g., mwaa.example.com).For "Value/Route traffic to," choose "Alias to another record in this hosted zone" and enter the web server hostname of your MWAA environment (e.g., abc123xyz.mwaa.environment.amazonaws.com).Set the "Record type" to "CNAME."Choose an appropriate TTL (Time to Live) value, such as 300 seconds or 5 minutes.Click "Create records."Now, your custom domain (e.g., mwaa.example.com) should resolve to the MWAA environment's web server hostname, regardless of the underlying private IP address changes.CommentShareEXPERTsedat_salmananswered 2 months agorePost-User-6662675 2 months agoThank you for the explanation.Share"