Question: Can't connect to my instance anymore

"My instance https://us-west-1.console.aws.amazon.com/ec2/v2/home?region=us-west-1#InstanceDetails:instanceId=i-c6edef82 is not accessible using ssh anymore (was fine before). Restart doesn't help.I assigned the role https://console.aws.amazon.com/iam/home?region=us-east-1#/roles/MySessionManagerInstanceProfile to it, but still can't connect using session manager. Can't use the serial console because I don't have a user with password.Please help.FollowComment"

Answer: "0Looks like a side effect of VM upgrade triggered by AWS recently, I believe it turned on firewall that was not there before. Is there any way to fix it or revert?CommentShareD. Shultzanswered 2 years ago0UPDATE: this is resolvedCommentShareD. Shultzanswered 2 years ago0Elastic IP became detached during the updateCommentShareD. Shultzanswered 2 years ago"


Question: Move attachment to S3

"Is there any way to automatically move all WorkMail email attachments to S3 bucket and get their link of course.?If yes, how can I do that?ThanksRegardsFollowComment"

Answer: "2Accepted AnswerHi,I would look into associating a lambda to work mail: https://docs.aws.amazon.com/workmail/latest/adminguide/lambda.html.Once an email is sent, the lambda should be triggered. The function would get the message and extract its attachments. Finally it would save them to S3.Hope it helps.CommentShareEXPERTalatechanswered 2 months agoplanetadeleste 2 months agoMany thanks, this what I looking for!Sharerobinkaws MODERATOR2 months agoHi, maybe this is a good starting point for you: https://serverlessrepo.aws.amazon.com/applications/us-east-1/489970191081/workmail-save-and-update-emailRobinShare"


Question: Greengrass doesn't rotate logs every hour

"According to the documentation Greengrass Nucleus should rotate logs every hour (https://docs.aws.amazon.com/greengrass/v2/developerguide/log-manager-component.html). So I suppose no matter of the log size I should see a new file every hour. So the maximum delay of logs uploaded with LogManager would be 1 hour. I see some "random" rotations however. My configuration of Nucleus is default. Example of my rotations:-rw-r--r--  1 root root  31953 Jun  6 07:32 greengrass.log-rw-r--r--  1 root root    212 May 30 22:40 greengrass_2022_05_30_22_0.log-rw-r--r--  1 root root    212 Jun  2 12:12 greengrass_2022_06_02_12_0.log-rw-r--r--  1 root root    736 Jun  2 14:21 greengrass_2022_06_02_14_0.log-rw-r--r--  1 root root 126334 Jun  2 20:40 greengrass_2022_06_02_20_0.log-rw-r--r--  1 root root  53873 Jun  3 12:30 greengrass_2022_06_03_12_0.log-rw-r--r--  1 root root    467 Jun  3 17:54 greengrass_2022_06_03_17_0.log-rw-r--r--  1 root root  13527 Jun  3 19:20 greengrass_2022_06_03_19_0.log-rw-r--r--  1 root root    212 Jun  6 06:10 greengrass_2022_06_06_06_0.logCould you clarify the 1 hour rotation rule?FollowCommentJanice-AWS a year agoHere are some details about greengrass log rotation you might find helpful:Greengrass logs rotate every hour or when the file reaches a size limit, whichever is sooner. The default file size limit is 1,024 KB (1 MB) and is configurable as fileSizeKB here:https://docs.aws.amazon.com/greengrass/v2/developerguide/greengrass-nucleus-component.html#:~:text=Default%3A%20FILE-,fileSizeKB,-(Optional)%20The%20maximumThe logs do not rotate if there has been no activity in the log since the last rotation.Logs will be deleted (earliest first) when the logs hit a disk space limit. The default limit for the greengrass log and each component log is 10,240 KB (10 MB), and is configurable as totalLogsSizeKB here:https://docs.aws.amazon.com/greengrass/v2/developerguide/greengrass-nucleus-component.html#:~:text=Default%3A%201024-,totalLogsSizeKB,-(Optional)%20The%20maximumShare"


Question: Cannot disable DNSSEC for domain

"Hi, I tried to enable DNSSEC on my domain drustcraft.com.au, however later found out that .com.au is not supported on AWS as a registrar. So I reversed what I done in hosted zones, however there is still a DS and RRSIG records being returned when I use dig after waiting the TTL. So I'm not really sure how that has happened.Registered Domains shows a DNSSEC status of "Not available for this TLD"Hosted Zones shows DNSSEC signing status of "Not signing"Have I borked my domain?, am I being impatient and need to wait longer?, any advice on where to go from here would be appreciated.Edited by: nomadjimbob on Apr 7, 2021 9:51 PMEdited by: nomadjimbob on Apr 8, 2021 2:30 AMFollowComment"

Answer: 0I've decided to instead transfer my domain and instances to another provider.CommentSharenomadjimbobanswered 2 years ago


Question: How to get schema/database/table names associated with rows in STL_UTILITYTEXT

"Is there a table that maps xid/pid to table id/schema name/database name? I found SVV_TRANSACTIONS, but that only has data on currently running transactions/locks and I want something that preferably covers 2-5 days of history like the STL tables.FollowComment"

Answer: "0Hi,Have you tried STL_TR_CONFLICT? https://docs.aws.amazon.com/redshift/latest/dg/r_STL_TR_CONFLICT.htmlRegards,CommentShareZiadanswered 4 months agorePost-User-6605802 3 months agoHi, is it guaranteed that all processes/transactions will be in STL_TR_CONFLICT? I thought that wasn't the case since not all transactions will conflict with others.ShareZiad 3 months agoHi, It contains all the transactions that faced conflicts. Are you looking also for transactions without conflicts?SharerePost-User-6605802 3 months agoYes, is that possible?ShareZiad 3 months agoNot that I'm aware of.Share"


Question: Notification for email delivery status from Pinpoint Email or in SES

"We are using pinpoint email for sending emails .Are there any way to know whether the email is delivered or not ?If the email is not delivered, does Pinpoint provide any way to identify this by sending some notifications for us to listen and act up on.Are there any workaround for doing this ?If pinpoint is not providing this functionality, does SES have this feature ?FollowComment"

Answer: "0Both Amazon SES and Amazon Pinpoint provide the functionality that you need. With Pinpoint, you need to enable event streaming. When you do that, you'll receive event notifications when emails are sent, delivered, clicked, bounced, etc. The delivery events will resemble the following example:{  "event_type": "_email.delivered",  "event_timestamp": 1564618621380,  "arrival_timestamp": 1564618622690,  "event_version": "3.1",  "application": {    "app_id": "a1b2c3d4e5f6g7h8i9j0k1l2m3n4o5p6",    "sdk": {}  },  "client": {    "client_id": "e9a3000d-daa2-40dc-ac47-1cd34example"  },  "device": {    "platform": {}  },  "session": {},  "attributes": {    "feedback": "delivered"  },  "awsAccountId": "123456789012",  "facets": {    "email_channel": {      "mail_event": {        "mail": {          "message_id": "0200000073rnbmd1-mbvdg3uo-q8ia-m3ku-ibd3-ms77kexample-000000",          "message_send_timestamp": 1564618621380,          "from_address": "sender@example.com",          "destination": ["recipient@example.com"],          "headers_truncated": false,          "headers": [{            "name": "From",            "value": "sender@example.com"          }, {            "name": "To",            "value": "recipient@example.com"          }, {            "name": "Subject",            "value": "Amazon Pinpoint Test"          }, {            "name": "MIME-Version",            "value": "1.0"          }, {            "name": "Content-Type",            "value": "multipart/alternative;  boundary=\"----=_Part_314159_271828\""          }],          "common_headers": {            "from": "sender@example.com",            "to": ["recipient@example.com"],            "subject": "Amazon Pinpoint Test"          }        },        "delivery": {          "smtp_response": "250 ok:  Message 82080542 accepted",          "reporting_mta": "a8-53.smtp-out.amazonses.com",          "recipients": ["recipient@example.com"],          "processing_time_millis": 1310        }      }    }  }}CommentShareEXPERTBrentAtAWSanswered 2 months agoG V Navin a month agoI think Enabling event stream will create kinesis streams. It will be bit costly I guess. (please correct me if i am wrong) Are there any other alternative cost effective solution ?ShareBrentAtAWS EXPERTa month agoI think Enabling event stream will create kinesis streams. It will be bit costly I guess. (please correct me if i am wrong) Are there any other alternative cost effective solution ?You can use Kinesis Data Firehose to stream this data. In my opinion, this is a cost-effective option.The sample event record I showed in my previous post is about 2KB. Let's assume you send 1 million messages every day for a month, and each message generates three event records (send, delivery, open). That would be 180GB of data over the course of one month. The cost for Kinesis Data Firehose streaming is USD$0.029 per GB. Your total charge for streaming this data would be $5.22 per month. If you stored the data in S3, that would be an additional $4.14 per month ($0.023 * 180GB).Share"


Question: Weird costs on Cloudwatch

"Good evening everyone.Here on my company, we use a few AWS resources (some S3 buckets, a Beanstalk application, 2 RDS and an ElasticCache cluster). But, we have a lot of metrics (none of this resourses use custom metrics). As example, only on this 10 days, Cloudwatch costs us 58USD. (Our RDS is the second biggest cost ATM, and now is 20USD.)Can you guys give-me some help how I can find what is generate this cloudwatch bill?FollowComment"

Answer: "1HiThere are two options for your inquiry.Analyze CloudWatch cost and usage data with Cost Explorer  : Access to the Cost Explorer and filters for service with CloudWatch. Then choose Usage Type to Group By. You will see the which API Operation and Region generated the most costs. See the below link for the detail.Analyze CloudWatch cost and usage data with AWS Cost and Usage Reports and Athena: Another way to analyze CloudWatch cost and usage data is by using AWS Cost and Usage Reports with Amazon Athena. AWS Cost and Usage Reports contain a comprehensive set of cost and usage data. You can create reports that track your costs and usage, and you can publish these reports to an S3 bucket of your choicehttps://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/cloudwatch_billing.htmlTo prevent cost surprise, I recommend using AWS Cost Anomaly Detection :https://aws.amazon.com/aws-cost-management/aws-cost-anomaly-detection/Thank youCommentShareAWS-User-9882077answered 25 days agoSamuel Grave 25 days agoHello, friend.I forgot to tell about this part.I already check on Costs Explorer and on Athena.On Athena, I saw most of the usage (95% of it) is on UsaseType CW:MetricMonitorUsage.As far I researched, It is a Custom Metric, right?It could be generated by Cost Explorer Reports?Share1Hi Samuel,UsaseType CW:MetricMonitorUsage is the custom metric.  All the metrics under 'Custom namespaces' are charged.You can find the which API is the majority of usage as below filter setting.In order to start identifying where the majority of usage is coming from, you can set the Cost Explorer chart to filter the output by any "Usage Type" containing the word "MetricMonitorUsage", and group by "API Operation"Set the Filter by Usage Type (RegionCode-CW):MetricMonitorUsageGroup By Dimension = API OperationThank youCommentShareAWS-User-9882077answered 25 days agoSamuel Grave 25 days agoIt just shows "MetricStorage usage" as cost sourceFound it!My Beanstalk application have like 600 "NOT AWS" Custom Metrics configured on it. But when I check the instance, the monitoring is using the basic monitoring.Share0Does your beanstalk application publish logs in structured logs (called "EMF" for Embedded Metrics Format) format by any chance? If so, that could be a source of custom metrics.CommentShareJscanswered 24 days agoSamuel Grave 24 days agoit's a metabasse instance.I just checked the .ebextension file and there's a cloudwatch file with a lot of metrics.Thanks a lot guys!Share"


Question: What port does Babelfish work over and should I be able to test with osql?

"Working on testing out Babelfish connectivity, which port should I be using?  The same one that I use for connecting with pgadmin?  Any links to documentation would be appreciated.  (I'm currently in the preview program, please DM me if responses can't be posted here.)FollowComment"

Answer: "0I've tried this so far.  Added port TCP 1433 to the security group in addition to 1434 UDP, and the TCP port associated with my server.  When I try to connect via SQL Server Management Studio I get these error messages.Specified cast is not valid:(Microsoft.SqlServer.ConnectionInfo)CommentSharecodingjoe-higanswered 2 years agolight a year agoYou should ideally upgrade to Babelfish 2.1+ (simply deploy Aurora 14.3 or higher) which improves SSMS support. However, if you're on an old version, you need to hit cancel on the default SSMS login and then connect using the "New Query" button (ie, the Query Editor). Blog with screenshots: https://aws.amazon.com/blogs/database/get-started-with-babelfish-for-aurora-postgresql/Share0Reached out to the babelfish-preview email address and got a response back.Had to connect via first creating a new query window in SSMS and then changing/starting the connection.  Also had to specify the database name in the connection information.  In the actual query, I had to include my tablename in quotes because I think SSMS was converting it to lowercase and my table name contained an uppercase letter.Also works with sql-cmd.  Which is fine since it replaced osql forever ago.  Just had to supply -d parameter with database.Edited by: codingjoe-hig on Jun 15, 2021 11:26 AMCommentSharecodingjoe-higanswered 2 years agolight a year agoThis applies to the Preview version. Babelfish 1.2.0 or above supports SSMS login out of the box. Simply connect with your user, password and server address. You will need to ensure that you open ports for SQL (1433) and, assuming you are using PostgreSQL, the default PostgreSQL port as well in your security groups.Share0Which port should I be using?Babelfish creates an additional port for the TDS protocol, by default, 1433. You can simultaneously connect via the PostgreSQL port (default 5432) with pgAdmin. (You can browse your data live from both ports, using different SQL clients for TDS and PostgreSQL.)How do I connect using Babelfish?The easiest way to get started is to use SSMS, which is free to download. When making your Aurora cluster, double check that you select PostgreSQL 13.6 or higher (which includes Babelfish 1.2.0+). Older versions of Babelfish have very limited SSMS support, which require workarounds.Babelfish is continually improving SSMS support, so choose the latest version of PostgreSQL, which will have the most up-to-date support.Babelfish documentation can be found here.CommentSharelightanswered a year ago"


Question: Cannot verify KMS signed message

"So I'm using KMS to sign JWT token. However I have been unable to verify the signature using the SDK. The snippet (in node) is as follows.let token_components = {    header: base64url(JSON.stringify(headers)),    payload: base64url(JSON.stringify(payload)),};let message = Buffer.from(token_components.header + "." + token_components.payload)let res1 = await kms.sign({     KeyId: 'arn:xxx',    Message: message,    SigningAlgorithm: 'RSASSA_PKCS1_V1_5_SHA_256',    MessageType: 'RAW'}).promise()token_components.signature = res1.Signature.toString("base64").replace(/\+/g, '-').replace(/\//g, '_').replace(/=/g, '')let res2 = await kms.verify({   KeyId: 'arn:xxx',   Message: message,   Signature: token_components.signature,   SigningAlgorithm: 'RSASSA_PKCS1_V1_5_SHA_256',   MessageType: 'RAW'}).promise()With third party library the signature produced from sign can be verified using public key. But using KMS SDK the kms.verify method always fails with invalid signature exception. Referring from the documentation I think it should work as message and signature need to be either in Buffer (node's byte array) or String encoded in Base64. I'm not sure what went wrong and any help is greatly appreciated.Edited by: inmyth on Mar 5, 2021 7:27 AMEdited by: inmyth on Mar 5, 2021 7:28 AMFollowComment"

Answer: "0Figured it out. Basically the signature must not be url encoded (backslashes, dashes, equals have to be preserved). The input argument for verify should be its decoded base64 in byte array.CommentShareinmythanswered 2 years ago"


Question: Elastic Beanstalk Tomcat 8.5 Corretto 11 4.2.9: Requests blocked by CORS policy + 404 Error

"This morning our Elastic Beanstalk environment has been automatically upgraded from Tomcat 8.5 Corretto 11 4.2.8 to Tomcat 8.5 Corretto 11 4.2.9.The application running in this environment (which is a Java Application Backend) started throwing the following error:Access to XMLHttpRequest at 'https://backend.example.com/api/exampleservice/service?exempleparam=1000' from origin 'https://frontend.example.com' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource.This error has never been thrown with previous minor versions of Tomcat 8.5 Correto 11 4.2 (i.e. 6,7 and 8).In order to further investigate this issue we have disabled web security in Chrome to avoid the CORS check perfromed by the browser. Under this configuration we received a 404 HTTP error when issuing the request.Seems like our .war application is not properly deployed in Tomcat 8.5 Correto 11 4.2.9. We would like to know if this minor version requieres specific configuration that we might be ignoring.We had to move back the Elastick Beanstalk environment to Tomcat 8.5 Corretto 11 4.2.8. Everything worked properly with the same .war. No CORS errors, no 404 Errors.Can anybody provide some advice? Is it a Tomcat 8.5 Corretto 11 4.2.9 problem that will be fixed by AWS or is it necessary to perform particular configuration on Elastic Beanstalk to properly manage applications using this particular application server minor version.Thanks in advance.FollowComment"

Answer: 0Accepted AnswerJust to close the loop. Deploying our .war in Tomcat 8.5 Correto 11 4.2.11. works just fine. We did not make any adjustments to code or configuration. Just change from Tomcat 8.5 Correto 11 4.2.8 to Tomcat 8.5 Correto 11 4.2.11.There has been probabily issues with Tomcat 8.5 Correto 11 4.2.9 and Tomcat 8.5 Correto 11 4.2.10 since the are not available options anymore in the Elastic Beanstalk environment.CommentShareAWS-User-9094158answered a year ago


Question: Why is Polly TTS generating multiple audio files per post within WordPress Media tab

I am using Polly on my blog for all posts.  For each post there are up to 10 separate audio files generated within the media tab.  Why is there more than one audio file per blog post?  And how do I correct this?FollowComment

Answer: 0Have you configured creating audio for content in multiple languages? Can you confirm what is in that audio files? All same or different languages?CommentShareSanjay Aggarwalanswered 7 months ago


Question: Cognito .net framework - federate azure ad

"I am new to cognito, I can see there is a cognito sdk for .net framework application.if I use the sdk, does it mean I need to create my own signin UI, so I cannot get the benefit on the host-UI by cognito?using sdk, how can I federate azure ad in the code? do I also need to create a UI to display the whole flow and redirect user to the microsoft signin page?what are the steps to link with multiple Azure (tenants) organizations  in the cognito?ThanksLeiFollowComment"

Answer: "0Hi Lei, I would recommend reviewing the Amazon Cognito  and AWS SDK for .NET Developer Guides if you haven't already, as there are sections on multi-tenancy and examples that may help answer your questions. There is also an AWS Security blog post about setting up Amazon Cognito for federated authentication using Azure AD.Additionally, if you can provide more details on the authentication flows/use-case(s) that you're looking to support, someone might be able to give a more detailed answer. Hope that helps!CommentShareSierra Washingtonanswered 9 months ago"


Question: Comprehend can find text?

"Can the Comprehend model return a full text from a context phrase that I search for?For example, suppose this text below is an area in a newspaper (in .PDF format) that contains several subjects and that talks about Weddings in a specific area containing title and body text:Wedding 2022We had a very traditional wedding and it was extremely expensive, but it was worth it. Carol and I only paid half. Her parents paid for everything else. We got married in church. Carol wore a white dress and she looked fantastic. I wore a suit and I think I looked quite good too! We had a big reception. We had 200 guests. The reception was in a wonderful hotel. We took lots of pictures. It was just great!If I send the model “Wedding 2022” and “We got married in church” will it be able to find this text among different themes and will I be able to receive all this text below?Wedding 2022We had a very traditional wedding and it was extremely expensive, but it was worth it. Carol and I only paid half. Her parents paid for everything else. We got married in church. Carol wore a white dress and she looked fantastic. I wore a suit and I think I looked quite good too! We had a big reception. We had 200 guests. The reception was in a wonderful hotel. We took lots of pictures. It was just great!Is Comprehend the best tool to try to solve this problem?FollowComment"

Answer: "1Comprehend is not a search tool. It is an API that will make it easy to :Detect the dominant languageDetect named entitiesDetect key phrasesDetermine sentimentAnalyze targeted sentimentDetect syntaxDetect eventsDo Topic modelingfrom documents you provide through the real-time or batch API.It will provide json formatted response containing the inferred elements. For instance:{    "LanguageCode": "en",    "KeyPhrases": [        {            "Text": "today",            "Score": 0.89,            "BeginOffset": 14,            "EndOffset": 19        },        {            "Text": "Seattle",            "Score": 0.91,            "BeginOffset": 23,            "EndOffset": 30        }    ]}Notice that the response contains BeginOffset and EndOffset which tell you where the entity was detected in the document should you want to pull the text (or more text arround it) from the document.If your objective is to do natural language full text search on documents, I'd recommend looking into Amazon Kendra (https://aws.amazon.com/kendra/)If you want to see both these solutions in action to provide Knowledge extraction and natural language search powered by AI/ML you can check out the Document Understanding Solution : https://aws.amazon.com/solutions/implementations/document-understanding-solution/CommentShareJean Malhaanswered a year ago"


Question: API Gateway set stage variable based on source IP Address

"Would like to route API Gateway invocation based on source IP Address. Eg. is source IP 10.x.x.x then invoke function A, if source IP 11.y.y.y then invoke function B.  Similar with what Route53 supports for routing based on IP Address but we don't have access to Route53.Thank you in advance,LucianFollowComment"

Answer: "2API Gateway does not support content based routing. One option might be to invoke a Lambda function that will invoke the appropriate backend.CommentShareEXPERTUrianswered 4 months agoEXPERTiwasareviewed 3 months ago1A potential design could be that you create an API Gateway backed by a Step Function. (https://docs.aws.amazon.com/step-functions/latest/dg/tutorial-api-gateway.html).Then you could pass the IP or get it as part of header/payload (encrypted if you wish), passit to a Choice step that based on that decides which Step/Lambda function to call.CommentShareEXPERTalatechanswered 4 months ago"


Question: RDS/Postgres logs to S3

"Hello,I am looking for an automated way to ship/stream RDS logs 'Postgresql' to S3 to be picked up by another lambda function in order to ship the file to elastic cluster running on EC2.I published the logs to CloudWatch logs but the only way to send it to S3 is by manually selecting the bucket and the date range. There is option to use CloudWatch Logs Subscription Filters to stream the logs to S3. However, we are looking for something more simpler and cheaper.Any thoughts?FollowComment"

Answer: "0Accepted AnswerI think that Kinesis Data stream might be  best fit for this case. (https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs//Subscriptions.html) - Please, use kinesis data stream instead of kinesis firehose.CommentShareAWS-User-1317674answered 4 years ago"


Question: How to reduce the time it takes a request to pass from a ALB to the actual Fargate Server?

"Hey, I have a webhook endpoint where our service provider send a payload which I have to respond to within 2 seconds. I've been getting way too many timeout errors from the service provider, meaning I wasn't able to respond within 2 seconds.I did some digging as to when the Fargate Server gets the payload vs when the ALB receives it. I went through some of the access logs from the ALB and found that it takes about a second or so to pass the payload from ALB to the fargate server.Here's the timestamp at which the request arrived to the ALB - 15:19:20.01 and my server recieved it at - 15:19:21.69.There's over a second of difference, I wanna know how to reduce it. One of the solution I thought of was that instead of registering my domain + the URI to the service provider to send webhook to, I set my IP + the URI so there's no need of forwarding done by ALB.Let me know what you guys think.EDIT - The solution I thought of was pretty stupid because fargate provides a new IP everytime a new task is deployed (as far as I know). Also the ALB forwards the request / payload to the ECS Target Group, just throwing this fact in as well.FollowCommentMichael_F EXPERTa year agoBefore we try to dive too deep into the potential cause, let's make sure that you're looking at the right data. Instead of looking at timestamps (which might reflect the time the request was completed instead of when it was received), let's look instead at the latency data published in the ALB logs. The particular fields to look at in the ALB logs are the request_processing_time and target_processing_time fields as described here: https://docs.aws.amazon.com/elasticloadbalancing/latest/application/load-balancer-access-logs.html#access-log-entry-syntax - the 6th and 7th fields.ShareMichael_F EXPERTa year agoThe target_processing_time field is the most important field: "The total time elapsed (in seconds, with millisecond precision) from the time the load balancer sent the request to a target until the target started to send the response headers." Also, please compare against the actual response latency from your application logs if possible; timestamps aren't enough because they are often vague. My experience is that ALB request latency to a Fargate target is in the sub-millisecond range.Share"

Answer: "0Hello,As specified by Michael_F in the comments, it is essential to identify the root cause for your latency before we jump into figuring out the solution. There could be multiple reasons for the latency. You can find out the time taken during various phases of the HTTP connection using curl as shown below.curl -L --output /dev/null --silent --show-error --write-out 'lookup:  %{time_namelookup}\nconnect: %{time_appconnect}\npretransfer: %{time_pretransfer}\nredirect: %{time_redirect}\nstarttransfer: %{time_starttransfer}\ntotal: %{time_total}\n' 'google.com'Output for the above request looks something like below:lookup:        0.002451connect:    0.000000pretransfer:   0.011611redirect:      0.016241starttransfer: 0.068402total:         0.075255Using this info, you can pin-point your request latency to a specific phase in the request-response process, and further investigate the root cause.It is also helpful to enable ALB access logs as mentioned by Michael_F in the comments.If you are unable to figure out the problem, please feel free to reach out to AWS Support to investigate the issue by following this link: https://docs.aws.amazon.com/awssupport/latest/user/case-management.html#creating-a-support-caseI hope this info is helpful to you!CommentShareSUPPORT ENGINEERVenkat Penmetsaanswered a year ago"


Question: HEVC + alpha channel input and output on MediaLive

"Hi,I am trying to create an HLS live streaming pipeline with MediaLive:INPUT: either a MP4 file or a fMP4 HLS containing a HEVC video with alpha channel.OUTPUT: a fMP4 HLS stream of HEVC video with alpha channel.The channel fails to start with the following errors.input is a MP4 file: Input failed over to input [Input Name] id[1]input is fMP4 HLS: Unable to open input file [https://cloudstorage.com/hlsPlaylist1/segment.m4s]: [Failed probe/open: [No parser found for container]]I need to precise that my channel works fine when the input is HEVC without alpha channel. Is there a plan to add HEVC with alpha functionality to MediaLive? ThanksFollowComment"

Answer: "0It seems that you are using the MediaLive Input failover to choose between two different file types. Typically when using input failover, inputs are the same format.Also the failed file name is segment.m4s. Did you point MediaLive's failover input to a .smil file? It may not know how to use a .m4s. Perhaps you could change it to a .mp4 extension.CommentShareMike-MEanswered 10 months ago0To clarify I am trying to create a MediaLive channel with only one input (not HLS and MP4 file simultaneously). My problem is about HEVC alpha channel so please ignore the situation with HLS and let's focus only on MP4 file input.The problem is simple, if I use a MP4 HEVC (without alpha) file as input there is no problem. Now if I use a MP4 HEVC + alpha channel file, the channel fails to start:Input failed over to input [Transparent Video] id[1]CommentSharechillyjeeanswered 10 months ago"


Question: 100.0 % of the requests are failing with HTTP 5xx.

"I'm getting an error on all instances in elasticbeanstalk. I tried to reset all instances. Terminate all of them and deleted all of them in EC2 dashboard console. I have created application in elasticbean stalk once more, and deploy once more just a single file to check if the error still appear and it is still there. What should i do ?FollowComment"

Answer: "0Hello,Are you using a load balancer ? Do you have check health url ?Can you check these 2 options :Verify health check url of load balancerVerify security group is allowed by  ec2 security groupIf need more help, describe the architecture you haveCommentShareIsmahelanswered 5 months ago"


Question: "Announcement: Amazon Relational Database Service (Amazon RDS) for MariaDB 10.2 End-of-Life date is October 15, 2022"

"Amazon RDS is starting the end of life (EOL) process for MariaDB major engine version 10.2. We are doing this because the MariaDB community is planning to discontinue support for MariaDB 10.2 on May 23, 2022 [1].Amazon RDS for MariaDB 10.2 will reach end of life on October 15, 2022 00:00:01 AM UTC. While you will be able to run your Amazon RDS for MariaDB 10.2 databases between community MariaDB 10.2 EOL (May 23, 2022) and Amazon RDS for MariaDB 10.2 EOL (October 15, 2022), these databases will not receive any security patches during this extended availability period. We strongly recommend that you proactively upgrade your databases to major version 10.3 or greater before community EOL on May 23, 2022. MariaDB 10.3 offers improved Oracle compatibility, support for querying historical states of the database, features that increase flexibility for developers and DBAs, and improved manageability [2]. Our most recent release, Amazon RDS for MariaDB 10.6, introduces multiple MariaDB features to enhance the performance, scalability, reliability and manageability of your workloads, including MyRocks storage engine, IAM integration, one-step multi-major upgrade, delayed replication, improved Oracle PL/SQL compatibility and Atomic DDL [3]. If you choose to upgrade to MariaDB 10.6, you will be able to upgrade your MariaDB 10.2 instances seamlessly to Amazon RDS for MariaDB 10.6 in a single step, thus reducing downtime substantially. Both versions, MariaDB 10.3 and 10.6, contain numerous fixes to various software bugs in earlier versions of the database.If you do not upgrade your databases before October 15, 2022, Amazon RDS will upgrade your MariaDB 10.2 databases to 10.3 during a scheduled maintenance window between October 15, 2022 00:00:01 UTC and November 15, 2022 00:00:01 UTC. On January 15, 2023 00:00:01 AM UTC, any Amazon RDS for MariaDB 10.2 databases that remain will be upgraded to version 10.3 regardless of whether the instances are in a maintenance window or not.You can initiate an upgrade of your database instance to a newer major version of MariaDB — either immediately or during your next maintenance window — using the AWS Management Console or the AWS Command Line Interface (CLI). The upgrade process will shut down the database instance, perform the upgrade, and restart the database instance. The database instance may be restarted multiple times during the upgrade process. While major version upgrades typically complete within the standard maintenance window, the duration of the upgrade depends on the number of objects within the database. To avoid any unplanned unavailability outside your maintenance window, we recommend that you first take a snapshot of your database and test the upgrade to get an estimate of the upgrade duration. If you are operating an Amazon RDS for MariaDB 10.2 database on one of the retired instance types (t1, m1, m2), you will need to migrate to a newer instance type before upgrading the engine major version. To learn more about upgrading MariaDB major versions in Amazon RDS, review the Upgrading Database Versions page [4].We want to make you aware of the following additional milestones associated with upgrading databases that are reaching EOL.**Now through October 15, 2022 00:00:01 AM UTC **- You can initiate upgrades of Amazon RDS for MariaDB 10.2 instances to MariaDB 10.3 or 10.6 at any time.July 15, 2022 00:00:01 AM UTC – After this date and time, you cannot create new Amazon RDS instances with MariaDB 10.2 from either the AWS Console or the CLI. You can continue to restore your MariaDB 10.2 snapshots as well as create read replicas with version 10.2 until the October 15, 2022 end of support date.October 15, 2022 00:00:01 AM UTC - Amazon RDS will automatically upgrade MariaDB 10.2 instances to version 10.3 within the earliest scheduled maintenance window that follows. After this date and time, any restoration of Amazon RDS for MariaDB 10.2 database snapshots will result in an automatic upgrade of the restored database to a still supported version at the time.January 15, 2023 00:00:01 AM UTC - Amazon RDS will automatically upgrade any remaining MariaDB 10.2 instances to version 10.3 whether or not they are in a maintenance window.If you have any questions or concerns, the AWS Support Team is available on AWS re:Post and via Premium Support [5].[1] https://mariadb.org/about/#maintenance-policy[2] https://aws.amazon.com/about-aws/whats-new/2018/10/amazon-rds-now-supports-mariadb-10_3/[3] https://aws.amazon.com/about-aws/whats-new/2022/02/amazon-rds-mariadb-supports-mariadb-10-6/[4] https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_UpgradeDBInstance.Upgrading.html[5] http://aws.amazon.com/supportFollowComment"

Answer: 0[Announcement] Does not require an answer.CommentShareEXPERTIsraa-Nanswered 23 days ago


Question: Ec2 Instance in stopped state

"Hello Team,Yesterday, one event occurred in my account that one of the EC2 instance went into a stopped state. So, I checked the CloudTrail log and I found nothing and also checked the system log and found nothing. The status Check of that instance is also green.Can anyone help me to find RCA?Thanks in AdvanceFollowComment"

Answer: 1Accepted AnswerDefinitely worth creating a support case for this to find out the root cause.CommentShareEXPERTBrettski-AWSanswered a year agoUttam Chauhan a year agoCan you please create a support case for this behalf of me?let me know if you required anything from my side.ThanksShare


Question: Log in Issues - AWS Management Console

"Please can someone help? I created a business AWS account earlier this week for my team to set up an SFTP. For some unknown reason, a few days later i am unable to sign into the account. When i try to sign in as a Root User, i receive the message 'Signing in with the root user is disabled for your account. You need to re-enable this feature.' When i try to recover my password, i receive the message 'Password recovery is disabled for your AWS account root user. You need to re-enable this feature.'. I can't seem to access the Support Center, as whenever i try, i am taken back to the login page. When i try to sign in as an IAM User, i receive the message 'You authentication information is incorrect'. When i click on 'Forgot Password', i receive the message 'Account owners, return to the main sign-in page and sign in using your email address. IAM users, only your administrator can reset your password.' I am literally going round in circles and can't seem to find a way into my account. Can anyone help? TIAFollowComment"

Answer: "0Hi TherePlease submit a support request using this formhttps://support.aws.amazon.com/#/contacts/aws-account-supportCommentShareEXPERTMatt-Banswered 4 months ago0I would guess you are signing into a member account of an AWS Organization, and someone has enabled Service Control Policies in the Organization root AWS account to block root-user login for all member accounts.Try logging into the Organization root account to look at the Organization Service Control Policies.CommentShareGreg_Hanswered 4 months ago"


Question: "What's the best way to migrate DAGs between staging, prod environments?"

"I'm searching for a good way to automate migrating a DAG between multiple instances (staging/production) as part of a DevOps workflow. I would like to be able to run my DAGs in my staging environment with different configuration parameters (S3 bucket paths, etc.) and run the same DAG in my production environment without requiring a change to the DAG code (automate the migration).Here is what I'm considering:Set an environment variable in Airflow/MWAA instance as part of initial setup (e.g. env=staging, env=prod)Create json configuration file with staging and production configuration parameters and store it with the DAGsCreate a DAG that is a prerequisite for any DAGs which require configuration that checks Airflow environment variable and sets variables to staging/prod configuration parametersUse templated variables in DAGs requiring configurationIs there a better way to approach this? Any advice is appreciated!FollowComment"

Answer: "0Hi, We've achieved this using the SSM Parameter store. created config in the parameter store and use plugins.py file to pull the configuration from SSM and set up environment variables.https://docs.aws.amazon.com/mwaa/latest/userguide/samples-env-variables.htmlCommentShareViresh Patelanswered 3 months agoPresgore 3 months agoThanks, your answer was helpful. Do the plugins, and subsequently the environment variables, get re-loaded only when the environment is built/re-built?Share"


Question: cPanel username and password - same as WHM ?

"I am using the QuickStart Guide for a Lightsail cPanel & WHM server instance.  All WHM settings are updated, including WHM password as per QuickStart guide.  But when I attempt to log into cPanel (:2083) I am unsuccessful using the WHM login username and updated password.  Attempts to request a cPanel password reset fail because the accepted emails setup on WHM are not accepted for a cPanel password reset.  Any ideas ?FollowComment"

Answer: "0Hi, @mcdsp.cPanel username and password - same as WHM?wrong.I introduced how to use WHM and cPanel below.Notice how I created a separate cPanel account along the way.You should have been issued a unique username and password for your cPanel account.https://dev.classmethod.jp/articles/amazon-lightsail-cpanel-whm-blueprint/If you can sign in to WHM, try editing your cPanel account.CommentShareEXPERTiwasaanswered 9 months agomcdsp 9 months agoHowdy iwasa,I did the steps you outlined and am at the point where I can publish my website.  I found it annoying that the QuickStart guide provided in the cPanel & WHM based Lightsail server instance did not specify the need to also create a cPanel account, nor did it cover the need to update the static IP address of the WHM license (trial or regular) to make it work.Thanks for replying to my post.Shareiwasa EXPERT9 months agoyes. I too got confused the first time I used WHM & cPanel. I am happy to solve it.Please mark as Accept when the problem is solved.Share"


Question: Sharing our WorkMail calendar among desktop and mobile apps

"I'm afraid I already suspect the CalDav answer (which kills WorkMail as a viable contender), but cannot find the specific admission anywhere:If we create a WorkMail calendar, is there a way for users with iPhones, Andriods, and other calendar software (like Thunderbird) to all work on it - using the same application in which they already manage their calendars?IOW, what would be the WorkMail endpoint which supports a iCalendar, ICS, CalDav or WCAP protocol?FYI - We do not use Microsoft's Exchange or client software.Thanks in advance,ALFollowComment"

Answer: "1Hello everyone,Thank you for your feedback on WorkMail. I'm sorry to hear you're disappointed in the missing caldav functionality in WorkMail. WorkMail offers Exchange ActiveSync, EWS, and Exchange RPC protocols for the synchronization of calendar data to desktop and mobile clients.We know this doesn’t enable calendar synchronization for all email/calendar clients. We constantly evaluate our customers’ top needs so I will forward your feedback to the team.Kind regards,RobinCommentShareMODERATORrobinkawsanswered 3 years ago0Hi Al,I'm sorry to inform you that WorkMail does not offer the end-point you're looking for. I will forward this as a feature request to the service team.Kind regards,RobinCommentShareMODERATORrobinkawsanswered 3 years ago0WorkMail does not support any open calendar collaboration protocol. Thank you. Hopefully this post may help future developers learn this point faster.CommentShareA. K. Holdenanswered 3 years ago0Hi,that is really a big gap.For that low service level and that high price for a Workmail user (=Email) per month, I cannot recommend WorkMail and I am a AWS consultant. That would be ridiculous.I am using Workmail only for marketing purposes. But two user are totally enough for that purpose.RegardsJörnCommentShareyotronanswered 3 years ago0I am bit late to this, but also would like to ditto the original poster.This is a big gap and for the money we pay for workmail, I actually would expect to be able to sync my emails and calendars to any device I want. Supporting open calendar protocols should be top of the list for feature requests.Rant over, thank you.Edited by: LiXiaoPai on Jan 31, 2020 9:58 PMCommentShareLiXiaoPaianswered 3 years ago0Is there any news about this gap? We are analysing this need at this moment and we may abandon WorkMail because of this limitation.CommentShareneianswered 3 years ago01 vote for this feature!CommentSharekakokvantalianianswered 2 years ago0+1 for this. We use WorkMail in our organisation and also need calendar synchronisation across devices using native apps.PLEASE can we get this integrated?I really don't want to have to uproot ~30 users to a new system for emails/calendars when really for the price we pay, we should have this functionality!From what I have learnt from WorkMail it is based on Exchange 2013, is this going to be updated? I cannot use services such as Calendly either.TIACommentShareitswatsonanswered 2 years ago0+2CommentShareRJGanswered 2 years ago0To setup Email/Calendar synchronization in iOS and Android, follow: https://docs.aws.amazon.com/workmail/latest/userguide/mobile-client.htmlCommentShareDimaAWSanswered a year ago0Three years and still in the same situation. Is there any possibility to use "webcal" url in WorkMail web interface? It's really a nice feature... I need to import a calendar from an external Exchange Server and keep it constantly aligned.Another feature is the possibility to massively import contacts from the webmail... At least with CSV...Those two features may really improve the service: we cannot think to let user programming anything with the SDK.Any solution?CommentSharecarlo_graanswered 9 months ago0I agree with the above observations. In a modern agile work environment, this lack of functionality is business critical. At this price point, it's baffling... please develop.  Unfortunately I'll have to take my business elsewhere if not...and that affects wider solution decisions...CommentSharerePost-User-7171354answered 7 months ago"


Question: How can I see if RDS Multi-AZ is working?

I ask because we're paying for multi-az but a recent RDS automatic update is taking all our sites down for 5 minutes each. Maybe this is rare multi-az defying update?but is there a log to show when the instance has failed-over or can i setup a cloudwatch alert for it?Anything i should be checking to make sure i'm getting my money's worth?Thank you.FollowComment

Answer: "0Hello,Take a look at this Knowledge center articleCommentShareEXPERTTushar_Janswered 8 months ago0It depends on the type of RDS update. If it is DB Engine update, even if your RDS DB instance uses a Multi-AZ deployment, both the primary and standby DB instances are upgraded at the same time. This causes downtime until the upgrade is complete, and the duration of the downtime varies based on the size of your DB instance.Please refer below url for better understanding of RDS downtime during maintanance https://aws.amazon.com/premiumsupport/knowledge-center/rds-required-maintenance/DB failover/updates/restarts are recorded under the Events page of you RDS console. You can navigate the Events page and check the details. You can even set the notifications for these events using Amazon SNS. Please refer the below url for SNS setuphttps://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Events.htmlCommentShareJosephanswered 8 months ago0HelloYou can see it through Amazon RDS eventsTo identify the root cause of an unplanned outage in your instance, view all the Amazon RDS events for the last 24 hours. All the events are registered in the UTC/GMT time by default. To store events a longer time, send the Amazon RDS events to Amazon CloudWatch Events. For more information, see Creating a rule that triggers on an Amazon RDS event. When your instance restarts, you see one of the following messages in RDS event notifications:The RDS instance was modified by customer: This RDS event message indicates that the failover was initiated by an RDS instance modification.Applying modification to database instance class: This RDS event message indicates that the DB instance class type is changed.    - Single-AZ deployments become unavailable for a few minutes during this scaling operation.    - Multi-AZ deployments are unavailable during the time that it takes for the instance to failover. This duration is usually about 60 seconds. This is because the standby database is upgraded before the newly sized database experiences a failover. Then, your database is restarted, and the engine performs recovery to make sure that your database remains in a consistent state.The user requested a failover of the DB instance: This message indicates that you initiated a manual reboot of the DB instance using the option Reboot or Reboot with failover. The primary host of the RDS Multi-AZ instance is unhealthy: This reason indicates a transient underlying hardware issue that led to the loss of communication to the primary instance. This issue might have rendered the instance unhealthy because the RDS monitoring system couldn't communicate with the RDS instance for performing the health checks.The primary host of the RDS Multi-AZ instance is unreachable due to loss of network connectivity: This reason indicates that the Multi-AZ failover and database instance restart were caused by a transient network issue that affected the primary host of your Multi-AZ deployment. The internal monitoring system detected this issue and initiated a failover.The RDS Multi-AZ primary instance is busy and unresponsive, the Multi-AZ instance activation started, or the Multi-AZ instance activation completed: The event log shows these messages under the following situations:    - The primary DB instance is unresponsive.    - A memory crunch after an excessive memory consumption in the database prevented the RDS monitoring system from contacting the underlying host. Hence the database restarts by our monitoring system as a proactive measure.    - The DB instance experienced intermittent network issues with the underlying host.    - The instance experienced a database load. In this case, you might notice spikes in CloudWatch metrics CPUUtilization, DatabaseConnections, IOPS metrics, and Throughput details. You might also notice depletion of Freeablememory.Database instance patched: This message indicates that the DB instance underwent a minor version upgrade during a maintenance window because the setting Auto minor version upgrade is enabled on the instance.Reference - https://aws.amazon.com/premiumsupport/knowledge-center/rds-multi-az-failover-restart/CommentShareVetrivelanswered 8 months ago"


Question: RDS Postgres Increasing IOPS Never Finishes

"I am trying to restore RDS Postgres from a snapshot and then increase its iops. I tried on Friday to restore it and increase the iops, and I let it run for 18 hours, and it never got to a finished state or even into optimizing storage state. I assumed something had gone wrong and I deleted it, and I tried again today. The same mostly happened today, except that this time I got an event that said 'The storage volume underlying the primary host of the RDS Multi-AZ instance experienced a failure.'FollowComment"


Question: "Error 521 and site won't come back up, despite restarting. Suggestions?"

"Please help with suggestions of what I can do to get my site back online.Encountered an Error 521 -- which in the past has meant just a quick stop and start of the server to get back online. Not today.I've stopped and restarted my Lightsail instance multiple times with no effect. I've rebooted as well, with no effect. I had noticed the ** Restart Required ** that last time I connected via SSH, just before stopping the server. Could the restart be required for some type of update, which has locked me up?UPDATE: I am also unable to connect to the phpMyAdmin though my SSH connection does "work". The normal method (I use this a lot) to connect is to SSH in, hit the http://localhost:8888/phpmyadmin/index.php url and then edit. Says: "This site can’t be reached The connection was reset" -- stopped and restarted the SSH connection (successfully), but still no joy.Help, please. Anyone, any suggestions on what to try now?CenaySite: https://www.cenaynailor.comEdited by: Cenay on Jun 26, 2019 11:15 AM - removed incorrect formatting on linkEdited by: Cenay on Jun 26, 2019 11:32 AMAdded new information about the phpMyAdmin issue now presentEdited by: Cenay on Jun 26, 2019 11:40 AMFollowComment"

Answer: "1Solved my own issue... sharing it just in case anyone else encountered something like this.So, about a month ago, I had added a small change to the htaccess.conf file in /opt/bitnami/apps/wordpress/conf to prevent a type of exploit I was seeing. The code I added is shown below:# Added to prevent exploits<Directory "/opt/bitnami/apps/wordpress/htdocs"># Block WordPress xmlrpc.php requests<Files xmlrpc.php>order deny,allowdeny from allallow from 67.61.95.121</Files></Direcory>```As you can see from the content above, the closing </Directory> tag was misspelled, causing Apache to not start.     The reason it took a month to manifest, is because I didn't restart Apache or the server after making this change (stupid, I know)    So, my advice. If you make a change, force your site to stop and restart and check it immediately. Don't wait a month until a random reboot introduces the error, as you won't know where it came from.     Just my .02 worth.CommentShareCenayanswered 4 years ago"


Question: Using AWS PHP SDK on Elastic Beanstalk

"So I have a PHP web app on Elastic Beanstalk, and I'm trying to use the PHP AWS SDK to work with files on S3. So far I haven't got it working.Per this documentation:  https://docs.aws.amazon.com/aws-sdk-php/v2/guide/installation.html#using-composer-with-aws-elastic-beanstalkI have the following in a composer.json file at the root level of my application:{"require": {"aws/aws-sdk-php": "3.*"}}Do I need something else in it? Like an autoload section or something?Since the aws.phar file is over 16MB, I don't want to include it in my app and have to upload it every time I make an unrelated update; from what I understand, Elastic Beanstalk already has Composer installed, and the above json should install the AWS PHP SDK on deployment.I'm thinking I need a require('/vendor/autoload.php'); or something in my code? If so, how do I know where the autoload.php file is on Elastic Beanstalk? Or do I need to create one? (And if so, what do I put in it?) When I used that line, I just get an error saying it can't find the file.I don't have a vendor folder in my application.FollowComment"

Answer: "0For future reference, I figured this out as follows.I had been getting "No composer.json file detected" in my logs.I discovered that because of the way I was zipping my package on macOS (using the native right click > Compress), it puts the files in a sub-folder inside the zipped package. So the composer.json was not at the "root" level of my package. I added it to the "root" level, and then once deployed I got the following in the logs:Found composer.json file. Attempting to install vendors. (...)And then the path to "vendor/autoload.php" was not in the directory with my application either (NOT /var/app/current/application-files/web/vendor), but closer to the root level (e.g. /var/app/current/vendor)Hopefully this saves someone else some headaches!CommentShareBen-in-CAanswered 3 years ago"


Question: A consumer of an Event aware on how to retrieve relevant data ... a business model barrier?

"Actually we have only Event script with a small payload to be sent, that excludes for example containers like a map.But a consumer of an Event should know/be aware on how to retrieve relevant data from other sources, like with big containers.It seems that it misses a kind of component to do it (like a kind of database component) ?And we don't have the possibilty to do it directly through globals for example.I only see actually to make it with the need to communicate back to the event producer entity, so we’ll need to create new event producers in our consumer entity and new consumers in our firstly producer entity to handle this kind of database query.This could lead to a significant increase in the number of events and complexity.What could be the best and easyest way to do it ?Follow"

Answer: "0It's now reasonable to think that if there's no answer about several questions about global variables in this forum, it's because we're at the border with Amazon services, that is in occurence the AWS Data Exchange ...  through the fundamental introduction to building games on AWS using Amazon Lumberyard (free course e-learning training), it describes well the architectural benefits of integrating Lumberyard with other AWS services and should perhaps be the first step to take before using Lumberyard. I'm sorry I didn't follow it from the beginning :roll_eyes:SharerePost-User-3300607answered 3 years ago0Hi @REDACTEDUSERIt depends what your goals are, DynamoDB is a good place for global data storage if you need the data cloud based, which is often the case in many games nowadays. A client side system for persistent storage of user settings can be found in the SaveData gem, this is useful for things such as Save Games.If you need transient data storage that only lasts throughout the game or simulation session you can use Script Canvas with Script Events. You create an entity that works as the storage and has a Script Canvas graph that receives notifications of value updates through Script Events, you use these to update your variables or request their values.Hopefully one of these methods is useful for your goals, for me the best situation would be a "Persistent Data" gem that provides all of these services in a convenient location, unfortunately we don't have something like that at the moment.SharerePost-User-2322203answered 3 years ago0Hi Luis @REDACTEDUSERSharerePost-User-3300607answered 3 years ago0@REDACTEDUSERIt seems to me  on the contrary that when you re-enter a script with calling through an Event, it has lost all the variables values that was set by a the previously assignement of it's local variables... all Variable are cleared when coming back into the script. 💥If it's really the case, unless there is a way to make these Script Variables persistent, we can't do what you propose as all local variables are lost when you try to read them.SharerePost-User-3300607answered 3 years ago0Hi @REDACTEDUSERI tried this locally just now and it appears to work correctly, I would have to know more how your scripts are being used, one thing you want to avoid is deactivating the entity that is holding your storage for example.For my test I used two scripts on two separate entities, one I called VariableStorage and one VariableQuery.VariableStorage:REMOVEDUPLOADVariableQuery:REMOVEDUPLOAD(Script Canvas) - STORED: 1.0000(Script Canvas) - QUERY RETURNED: 1.0000(Script Canvas) - STORED: 2.0000(Script Canvas) - QUERY RETURNED: 2.0000(Script Canvas) - STORED: 3.0000(Script Canvas) - QUERY RETURNED: 3.0000Edit: here's the Script Event setup I used:REMOVEDUPLOADSharerePost-User-2322203answered 3 years ago0I've seen @REDACTEDUSERSharerePost-User-2322203answered 3 years ago0@REDACTEDUSERBut in reality, when using global data, it's for relatively static data but bigger than a simple Variable number and we can't use even simple like Variable Arrays in the parameters inside the Node Event.As you asked more on the script I'm doing, one thing effectively I want is "to avoid deactivating the entity that is holding my storage ".In brief to tell you more about my scripts, I have a Parent-Children hierarchy of entities that call successively each other in cascade in order to require a treatment on a data at a below level.The event-driven approach is always the same with a raise of a request Event from the top Entity; then Entities Services that are listening to that Event raise a Confirmed Event when they have done their job after calling their chidren entities ... thus a cascade of Events that works perfectly well.As I wrote, when you come back with a new Event inside a script already activated during a precedent Event, it's local variables aren't persistent any more and those variables are numbers and Arrays of numbers (by the way, the "For Each" node could return the index value on Array ....)As when @REDACTEDUSERThus the scope of Variables and persistency is at the center of this discussion and should be covered by an event-driven design explainations with a kind of cook book/best practices in LY scripts that's currently missing from the LY doc.SharerePost-User-3300607answered 3 years ago0@REDACTEDUSERSharerePost-User-3300607answered 3 years ago0Mr @REDACTEDUSERSharerePost-User-8224505answered 3 years ago0Mr @REDACTEDUSERHundreds of artificial intelligence or 1,000 enemies artificial intelligence are attacking me. The grenade must examine/explode their distance and radius with the array of enemies positions(less 5 meter + foreach+Vector3D.Distance(Grenade.Position,arrary[index].Position)), if not we must think Sphere raycast or Cube raycast for GetListEnemies...I hope you understand what I mean, excuse me , I can not write english very well 😊SharerePost-User-8224505answered 3 years ago0For info, I'm already playing with vertex inside a mesh of an entity that serves as a big array of global/persitent data.It already exists a VertexContainer, that is a container of vertices of variable length, with all of what we need like get, set, clear, remove, ...Each vertex point of the mesh has a position that you can get/set through it's index and thus mesh can serve as a very big global Array.The starting point is here for updating the global Array with an index:/*** Update a vertex at a particular index.* @REDACTEDUSER* @REDACTEDUSER* @REDACTEDUSER*/virtual bool UpdateVertex(size_t index, const Vertex& vertex) = 0;or getting a value from this global Array/*** Get a vertex at a particular index.* @REDACTEDUSER* @REDACTEDUSER* @REDACTEDUSER*/virtual bool GetVertex(size_t index, Vertex& vertex) const = 0;It's in the VertexContainerInterface.h file.As an example, the VertexContainerInterface is also already implemented by the Spline component and Polygon Prism component EBuses.The simplest way is to reuse this example in Lua seen here https://docs.aws.amazon.com/lumberyard/latest/userguide/component-vertex-container.html ) ... thus reusing this EBus Request Bus Interface Example.This solution is uncompromisingly fast and easy to use and it's the raison why I proposed Luis @REDACTEDUSERSharerePost-User-3300607answered 3 years ago0Last solution but not least solution :  we can introduce our glogal data inside tags, by using the tag component on Entities.Too those Entities could be generated through spawn in order to create things like Array or Map containers at the size that we need.For example, each Entity will bring with it several Tags that could simulate keys/data, and we have the existing node that allows us to get entities according to a tag like key in containers, and also delete, clear, ...REMOVEDUPLOADREMOVEDUPLOAD@REDACTEDUSERSharerePost-User-3300607answered 3 years ago0Mr @REDACTEDUSERSharerePost-User-8224505answered 3 years ago0Mr @REDACTEDUSERhttps://www.youtube.com/playlist?list=PLGiO9ZyED9TMH4fMy5rttmWQRq0EmJKjRSharerePost-User-8224505answered 3 years ago"


Question: Workspace stuck on Starting

"Hi there, I'm used to work with an Autostop Workspace with no problems. The vm contains VS Code and other basic stuff.Yesterday I wanted to use it, but the client returns an error. The AWS console reports Starting status. It stays for quite some time (an hour or so), then it goes back to Stopped. Basically, I can't work anymore with this Workspace. I've tried to connect via RDP adding the firewall rule etc, but I got a connection refused error. I've tried via AWS CLI, but the result is the same. I have a basic subscription, so I can't open a support ticket.Any suggestion?Thank you.FollowComment"

Answer: "0Thank you so much arun, your suggestions helped me: restore didn't work, putting the Workspace in Unhealthy state. Tried to connect, reboot, RDP, no luck. Finally, a rebuild solved my issue.I don't get why this happened, I use the Workspace few hours per week and without changing anything on its configuration. As a matter of fact, the service looks unstable by itself.Thank you again.CommentSharematroanswered 8 months agoArun_PC 8 months agoSorry to hear about your experience. This is more an exception in my experience. Usually what gets a Windows machine stuck are pending updates, misbehaving applications or the OS waiting for something to complete. Hopefully you could identify the root of the problem.Share0Matro,There is official guidance for such issues.https://aws.amazon.com/premiumsupport/knowledge-center/workspaces-stuck-statushttps://youtu.be/3m9tl0v579oIf the above steps do not work(as your RDP is inaccessible), I would usually ask to open a Support Case but in your case, that is not applicable.So, if your WorkSpace can afford lose data up to 12 hours, i will use try Restore and if that doesnt work, I will try a Rebuild.https://docs.aws.amazon.com/workspaces/latest/adminguide/restore-workspace.htmlhttps://docs.aws.amazon.com/workspaces/latest/adminguide/rebuild-workspace.htmlHope it helps,-arun.CommentShareArun_PCanswered 8 months ago0Same thing happen with me from last two days when i tried to connect my AWS Workspace it show in starting state for 1 hour or so and end with unhealthy state after that i reboot and i was able to connect it. But not yet got any permanent solution for this issue. If anyone have fix for this please share it with us....thanks in advance.CommentShareHarpreet-User-1830214answered 2 months ago"


Question: Does anyone know the AWS mailing address that can be used for VA reimbursement forms?

"I am working on VA form 22-0803, reimbursement of licensing or certification test fees, and it requires a mailing address for the issuing organization. A few searches of various keywords and phrases hasn't gotten me anywhere. Does anyone have experience with this form or just happen to know the address AWS recommends for this? Thanks!FollowComment"

Answer: "1Accepted AnswerYou can use the below address for the form:Amazon Web Services, Inc.410 Terry Avenue NSeattle, WA 98109KimAWS CertificationCommentShareKimWD-AWSanswered a year agogrungydan a year agoAwesome, thank you!Share"


Question: Can't receive Email send from AWS Simple Email Service

"I am now using AWS Simple Email Service, and I have already verity the two of my own domains.However, on January 24, I switched from a .net domain to an .im domain, and then I had the problem described below.I also set up my own post office through Mailu, using the .im domain I purchased a few days ago. However, I find that I cannot receive emails from AWS Simple Email Service, and it seems to be a hard bounce according to the AWS SES Dashboard. But I have added the relevant DNS records according to Mailu's prompts, and I am receiving notification emails from AWS and other service providers, I just can't receive them from the AWS SES automated program, which seems odd.This problem only occurs when sending from AWS SES with an incoming email suffix of the .im domain I purchased a few days ago, emails sent to others via AWS SES seem to be working fine.I also sent a Ticket yesterday asking if I had received a restriction on this service for my account. However, AWS replied that I was not restricted and they recommended that I escalate the work order to a technical work order or ask the community for help.Maybe I should update my DNS record? How can I solved this problem, and thanks for Community's help.FollowComment"


Question: Windows Instance slow since today

"Hello, this morning when I connected trough RDP I noticed long laggy connection. I have restarted instance and had problem with getting in for an hour+. Finally I got inside, but it is very slow basically in every task, like opening folder. CPU is at just few % of utilization, and lots of available ram. I found other topics saying that it may be due to lack of CPU credits, but in monitoring page I see usage is at 0.859, and balance at 655.This is t2.2xlarge instance with Windows Server 2019.FollowComment"

Answer: "0Hi there!thank you for posting your concern here.In this case there are many possible causes of this problem, can be a problem with an external service that your instance relies on, also disk thrashing and can be network connectivity issues, I suggest that maybe you check the EBS volume metrics since Amazon Elastic Block Store (Amazon EBS) sends data points to CloudWatch for several metrics. Amazon EBS General Purpose SSD (gp2), Throughput Optimized HDD (st1) , Cold HDD (sc1), and Magnetic (standard) volumes automatically send five-minute metrics to CloudWatch.You can use this link also to do further trouble shooting https://aws.amazon.com/premiumsupport/knowledge-center/ec2-instance-slow-cpu-not-high/I hope this will help.Thank youTLCommentShareThabo-Lwazi-Mziyakoanswered 3 years ago"


Question: [greengrass]deploy the component from thing group to thing

"component deploy to a thing group-->boot a unused pi, and let it to be a core device in the group-->deploy the pi with all the component that had been deployed in the grouphow can i do to accomplish the last step?FollowComment"

Answer: "1Hi hy_galen.https://docs.aws.amazon.com/greengrass/v2/developerguide/manage-deployments.htmlDeployments are continuous. When you create a deployment, AWS IoT Greengrass rolls out the deployment to target devices that are online. If a target device isn't online, then it receives the deployment the next time it connects to AWS IoT Greengrass. When you add a core device to a target thing group, AWS IoT Greengrass sends the device the latest deployment for that thing group.Are you observing different behaviour?CommentShareEXPERTGreg_Banswered 9 months ago"


Question: read replicas with legacy code that doesn't properly separate queries

"For applications that are not built to use read replicas and send writes to a master connection, is there an option to have the read replicas pass on all write queries while handling reads themselves?The multi-master mode might work for this but it sounds risky if the code doesn't divide writes between the nodes to avoid conflicts.FollowComment"

Answer: "0I was working on read-write separation (Aurora 4 MySQL) for quite some time and as far as I can tell read replicas do not have such an option.If the implementation of query routing is not an option, then you may consider using third-party RW splitters, like ProxySQL, Apache Sharding Sphere (https://shardingsphere.apache.org/document/current/en/features/read-write-split/) orHeimdall proxy (https://aws.amazon.com/blogs/apn/using-the-heimdall-proxy-to-split-reads-and-writes-for-amazon-aurora-and-amazon-rds/).HTHCommentShareepNIckanswered 3 years ago0Excellent options, thanks!CommentSharerichardgvancouveranswered 3 years ago"


Question: How do I drop native Delta tables from Athena catalog?

"Onboarded native Delta table usingCREATE EXTERNAL TABLE [table_name]LOCATION '[s3_location]'TBLPROPERTIES ('table_type'='DELTA');Works great when I query it. However, when I rundrop table [table_name]I get the following error:"Routed statement type 'DROP_TABLE' to DeltaLakeDDLEngine, expected to route to DATACATALOG_DDL_ENGINE"FollowComment"

Answer: "1Deleting from the Glue UI or using Glue API worksCommentSharerePost-User-5062491answered 5 months agoEXPERTFabrizio@AWSreviewed 5 months agoFabrizio@AWS EXPERT5 months agosee the documentation to review the DDL support: https://docs.aws.amazon.com/athena/latest/ug/delta-lake-tables.htmlSharebig-data-user-1234 a month ago@fabrizio this answer is okay as a manual workaround, but I have workloads that rely on the athena API only. There is no feasible way for me to change the underlying code so your workaround is no good for my use case.Is there any way to raise this issue with the AWS team? The specific ask is "support dropping delta tables from athena via SQL command". ThanksShare"


Question: A connection to the ECC2 t2 micro instance could not be established

"When trying to access my website I get the error: "ERR_CONNECTION_TIMED_OUT".When trying to investigate and connect to my EC2 instance, I get the following errors:A connection to the instance could not be establishedThis instance type is not supported by the EC2 Serial Console.As additional information, the instance and the site were only working a few days ago, I have not made any changes neither on the instance nor on any configuration file.FollowComment"

Answer: "1Accepted AnswerHello there!The connection timed out error could be due to various factors such as:Your security groups and network access control lists (NACLs) blocking traffic to and from your website.The operating system has a firewall.There is a firewall between the client and the server.The host does not exist.The following AWS video helps to solve the above mentioned factors:https://youtu.be/TAHafjKM3FUPlease note that the above is a third-party video, therefore you must test the recommendations in a    test environment before applying them on production.AWS ec2 system level logs provides more details on operating system level problems such as use of proxy or system being overloaded till it fails to process the incoming requests on time (see reference 1).To resolve this, you can configure the inbound traffic for your website to allow traffic from your ip address or your selected network of addresses in your security groups and NACLs (see reference 2).The reason for the second issue is that the instance type you are trying to use is not supported for the EC2 serial console.For supported instance types, please refer to the documentation on the provided link (see reference 3). To connect to your instance using the EC2 serial console, the instance type must be built on the AWS Nitro System, excluding bare metal instances.For information about Instances built on the Nitro System, please see reference 4.You can change the instance type by following the documentation (see reference 5). References:[1] https://docs.aws.amazon.com/managedservices/latest/userguide/access-to-logs-ec2.html[2] https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/TroubleshootingInstancesConnecting.html#TroubleshootingInstancesConnectionTimeout[3] https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/connect-to-serial-console.html#sc-prerequisites[4] https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html?icmpid=docs_ec2_console#ec2-nitro-instances[5] https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-resize.htmlCommentShareAsenathianswered a year ago"


Question: Transit Gateway Pricing for various environments that I have

"Hi there,I am planning to create a Transit gateway and there would be 5 VPCs which I will be attaching to the Transit Gateway. What would be the pricing of the transit gateway in that case?FollowComment"

Answer: "4Accepted AnswerAWS Transit Gateway Charges you, here is the calculation for TGW Attachment for 5 VPCs as I assume that you would be having at least 5 attachments in that case.Price per AWS Transit Gateway attachment ($)$0.07Price per GB of data processed ($)$0.02730 hours in a month x 0.05 USD = 36.50 USD (Transit Gateway attachment hourly cost)1 GB per month x 0.02 USD = 0.02 USD (Transit Gateway data processing cost)36.50 USD + 0.02 USD = 36.52 USD (Transit Gateway processing and monthly cost per attachment)5 attachments x 36.52 USD = 182.60 USD (Total Transit Gateway per attachment usage and data processing cost)Total Transit Gateway per attachment usage and data processing cost (monthly): 182.60 USDAlong with that you will be paying for the Data Processing as well with 0.03 USD/GB. Please note that the pricing may vary based on the AWS Region that you will select.References: https://aws.amazon.com/transit-gateway/pricing/CommentShareGovind Kumaranswered a month agoEXPERTalatechreviewed a month ago"


Question: s3 batch operations takes to long

"Why s3 batch operation copy from one bucket to another in the same region takes a long time?I try to copy 8000 object with average size of 900 kb (using csv manifest with source bucket and s3 key, bucket doesn't have versioning) and job was in active status 69 hours and didn't complete so I just canceled the job.FollowComment"

Answer: "1Hi ThereTake a look at this previous answerhttps://repost.aws/questions/QUzH_mXBObTuO9iq_pvJkkoA/s-3-batch-operations-job-stays-activeA batch job performs a specified operation on every object that is included in its manifest. A manifest lists the objects that you want a batch job to process and it is stored as an object in a bucket. After you create a job, Amazon S3 processes the list of objects in the manifest and runs the specified operation against each object.When a S3 batch job is "active" it means Amazon S3 is performing the requested operation on the objects listed in the manifest. While a job is Active, you can monitor its progress using the Amazon S3 console or the DescribeJob operation through the REST API, AWS CLI, or AWS SDKs.The performance/speed of any particular Batch Operations job will depend on a variety of factors, including :The number of objects in the manifestThe type of operation (Glacier restore, copy, Lambda function, etc)The number of active jobs your accountThe number of enqueued jobs for your accountOther traffic to the source and/or destination bucketThe size of the objectsYou can refer to the following link for information on troubleshooting S3 batch jobs: https://aws.amazon.com/premiumsupport/knowledge-center/s3-troubleshoot-batch-operations/If you need additional support, then you can also open a case with AWS Premium Support to review the details of this particular job.CommentShareEXPERTMatt-Banswered 8 months agoAgan 8 months agoThank you for your response.So it's terns out that is's pretty useless tool? Cause I just test on 132 objects and it already 17 hours in active statusShare"


Question: cross account access using servicenow - amazon s3 spoke

"I have created a IAM user in Account A and want to access a bucket in Account B.I have added the bucket policy and cross account policy to the IAM user.I have created the client ID and secret key for the IAM user and tried accessing the s3 using the pre-defined actions in SNOW.Unable to list the buckets in Account B, i am able to list the buckets only in Account A as the IAM user is created in Account AFollowComment"

Answer: "0IAM user in Account A contains an ARN that must be in the target bucket policy. IAM Users have no trust policy required for trust, IAM User in Account A must also have the proper S3 IAM Privileges to action upon the specific resource being plotted in Account B.Using the AWS CLI make sure you configure it to point to the profile in Account A. IAM User Account A, performing aws s3api list-objects --bucket $target_bucket_name (bucket within account B)Then you can validate that your access is correct so that IAM User in Account A has access to Account B bucket.CommentShareD Ganswered 2 months ago0There are two ways to do it.A) You can use the S3 bucket policy if you don't wish to give up your current role and assume another role. You can refer to this linkhttps://docs.aws.amazon.com/AmazonS3/latest/userguide/example-walkthroughs-managing-access-example2.htmlB) If assuming another role is not an issue for you then you can utilize a cross-account role. Please refer to this linkhttps://docs.aws.amazon.com/AmazonS3/latest/userguide/example-walkthroughs-managing-access-example4.htmlCommentShareGauravanswered 2 months ago"


Question: redshift resume issue today

Do we have an issue on the redshift resume function today?I resumed a 1 node dc2.large for testing and its been almost an hour in modifying (resume) state.  Normally it resumes after 5 to 10 minutes.ThanksFollowComment

Answer: "0I assume that you checked the cluster status on the Redshift console. In that case, it's possible that your cluster was already available but the Redshift console didn't update it until an hour later.My workaround: use AWS CLI  to check the cluster status every couple of minutes. For example, run this command:aws redshift describe-clusters --cluster-identifier 'cluster_identifier/name' --query 'Clusters[].{ClusterIdentifier:ClusterIdentifier,ClusterStatus:ClusterStatus,ClusterAvailabilityStatus:ClusterAvailabilityStatus}' --region XXX --profile YYYand you'll see something like[    {        "ClusterIdentifier": "cluster-name",        "ClusterStatus": "available",        "ClusterAvailabilityStatus": "Available"    }]This cluster status result from AWS CLI is apparently more reliable than the Redshift console.If the status shows "resuming" for a long time: it means the resume process indeed takes longer and you should reach out to the AWS Premium Support.If the status shows "available" shortly in 5~10min: your cluster is available now, try connecting to it with SQL client apps. When Redshift console shows the cluster is resuming, you can't use the Redshift Query Editor.Otherwise if the below workaround doesn't work for you, or you are seeking for a permanent fix, open a case to the AWS Premium Support, Redshift team.CommentShareAWS-supipianswered a year ago"


Question: How to integrate AWS S3 and Azure Cognitive Services (OCR)?

"Hello,I wanted to know how can I integrate AWS S3 to Azure Cognitive Services, specifically a private S3 URL, can I use it to get the data from S3 that can be used as an input to one of the Azure services? Please let me know. Thank you.FollowComment"

Answer: "0Hi.I understand that you want to use private Amazon S3 directly as input to Azure Cognitive Services.You cannot specify a private Amazon S3 URL directly to the Vision API.It must be a public URL that the Vision runtime in Azure can access.Instead you can use the same approach for sending local images.https://learn.microsoft.com/en-us/azure/cognitive-services/computer-vision/how-to/call-read-api#submit-data-to-the-serviceIn the above, image data is specified in binary in the request body when sending local data.Your application should use IAM to retrieve data from a private S3 bucket and send the data as binary before calling the Vision API.CommentShareEXPERTiwasaanswered 4 months ago"


Question: How to get the read-replica RDS host info (multi-az scenario)?

"Hi,I've added a new secrets for my Aurora RDS. In the secret, I see "host" entry which points to the writer node. How do I get the host information for the read-replica node? I could add it manually, but I don't want to :)Thanks!!FollowComment"

Answer: "0Accepted AnswerSecrets Manager populates the host field with the writer node/master because if rotation is turned on, it needs to connect to the master to update the password.The RDS DescribeDBClusterEndpoints call can be used to find the other endpoints.https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeDBClusterEndpoints.htmlCommentShareAWS-User-9028130answered 3 years ago"


Question: Private S3 bucket and http referer policy for a Wordpress site not working

"hi there,I have an issue that I've been searching high and low for days to find an answer.I have a wordpress website which is closed to the public, requires paid membership.I have videos playing through a wordpress plugin called Ultimate video player thatI've tried to send requests to play the videos stores in my S3 bucket.It works IF the bucket is set to fully public. These videos are private and should not be viewable by the public.It does not work IF I set the bucket to private (the Access reads Only authorized users of this account)and place a bucket policy in permissions as follows:{"Version": "2012-10-17","Id": "http referer policy example","Statement": [{"Sid": "Allow get requests originating from mywebsite.ca.","Effect": "Allow","Principal": "","Action": ["s3:GetObject","s3:GetObjectVersion"],"Resource": "arn:aws:s3:::my-bucket-name-here/","Condition": {"StringLike": {"aws:Referer": "https://mywebsite.ca/*"}}}]}I have not done anything at the server where my website is hosted. The tech guys there said theirreferers should be OK for this request.I consulted with the developer of the video player and he said the issues lies with AWS S3 system.So here I am hoping to get some help about how to make this work.I am using a wordpress app (S3 smart upload) that has successfully connected to the S3 bucket and displays all the files and folders accurately.I am able to add each of the videos to the media library so that the video player can access them.BUT, when I add them to the media library, they give an error and do not play."Media error: Format(s) not supported or source(s) not found" (the videos are mp4 and play just fine when the bucket is set fully to public)what am I missing?Are the tech guys hosting my website missing something?How do I check if the AWS:referer is setup correctly?I agree with the video plugin developer - the problem is not with his video player, as when the S3 bucket is set to public, the player has no trouble playing the videos.Thanks for any help.FollowComment"

Answer: "0I discovered the problem.First of all, I didn't want to allow public access but I needed to allow one of the permissions as follows in the Block public access (bucket settings).See attached image .  http://www.nutopia.cc/Files/Capture.JPGThat solved my issue. Now, the direct link is not available except through the website specified in the bucket policy.So if you try to load the URL of the video, say, in the browser, it doesn't work, but my wordpress site IS accessing and playing the videos.Way to go self.MDEdited by: Modan9 on Nov 30, 2020 12:31 PM forgot to insert the image linkCommentShareModan9answered 3 years ago0Did you get this resolved?CommentShareYellowCodinganswered 2 years ago"


Question: "Unable to create Users, Groups, or OUs"

"I am new to AD, and am trying to add Users and Groups to the AD I created. I understand that I first need to create Users OUs but I cannot create that either. I've attached images.When I go to Windows > Administrative Tools > Active Directory Users and Computers, I get a message that says "To manage users and groups on this computer, use Local Users and Groups" (see Image1 attached). When I go to Windows > Administrative Tools > Administrative Center, I get a message saying "Your account or computer is not joined to any domain. Join to a domain and try again." (see Image2 attached). But I followed the instructions found here: https://docs.aws.amazon.com/directoryservice/latest/admin-guide/launching_instance.html. Furthermore some troubleshooting attempts show that the EC2 is joined (see Image3 and Image4). The Windows has the proper EC2DomainJoin Role with the 2 Policies attached (AmazonSSMManagedInstanceCore and AmazonSSMDirectoryServiceAccess). What am I missing?Edited by: AdminNewProject on Feb 19, 2021 11:35 AMFollowComment"

Answer: "1Looks like you logged into the instance as a local user, probably "Administrator".  Instead you will need to login as a domain user.  By default we provide a user named "Admin".  To switch to a domain user instead of a local user you can put the domain short name (NetBIOS name) at the front of the username like so, "NetBiosName\Admin".  Looking at your screenshots I assume your NetBIOS name might be ActiveDirectory, if so then the user name would be "ActiveDirectory\admin".  If you do not remember the Admin password you can reset it.https://docs.aws.amazon.com/directoryservice/latest/admin-guide/ms_ad_manage_users_groups_reset_password.htmlCommentShareJoeD_AWSanswered 2 years agoEXPERTJeremy_Greviewed a year ago0Thank you!!! Your explanation was incredibly helpful and I was able to create Users.  The only thing is that the link goes to a page about Resetting a User's Password. I simply could not find the explanation you provided anywhere in the documentation. I had a hunch that I was logging in as the wrong user, but I couldn't figure out how to log in correctly. AWS provides a lot of very detailed information, so I don't know if I missed it. If I didn't, maybe that should be added?Edited by: AdminNewProject on Feb 20, 2021 7:29 PMCommentShareAdminNewProjectanswered 2 years ago0Thank you!! I was struggling with this for so longCommentSharekrishcanswered 2 years ago"


Question: CloudWatch log insight query to get application accessed browser

"I am looking to write a query CloudWatch log insight query to get application accessed browser. Not able to find any helpful documentation. Any suggestions or helpful guide to get it over.FollowCommentvinodaws 9 months agoIt depends on your logging. Cloudwatch Insights can only query on your logs in log groups. If your log group contains meaningful info about the browser activity - you can frame insight query based on that. "The query syntax used by Cloudwatch Insights supports different functions and operations that include but aren't limited to general functions, arithmetic and comparison operations, and regular expressions", so it totally depends on what you are loggingShare"


Question: How ALB sticky session sets with IIS+Windows Authentication

"I'm now using an EC 2 instance with IIS+Windows Authentication and use ALB sticky session. However, there is always a logout problems when refreshing the browser for 4-5 times.This is how I set up sticky sessions as below:Target groups -> xxxx -> Attributes -> EditTarget selection configurationStickiness: enableStickiness type: Load balancer generated cookieStickiness duration: 1 daysFollowComment"


Question: Feature names Mapping in Sagemaker

"After create model in Redshift i can load the generated model in python via Sagemaker. The features are generated automatically e.g. f0, f1 and so on. Altough i have only 10 columns i get maybe 500 features. This comes from some categories but where can i see the mapping of the features to the original category names? For example f100 is the category "XY" of column 5.FollowComment"

Answer: "0Hi there!Unfortunately there is no functionality to see the mapping of the features to the original category names. However, SageMaker provides auto-generated notebooks for the data exploration and feature engineering used during SageMaker Autopilot experiment.As you may already know, Redshift's create model feature extracts the table into your S3 bucket, runs SageMaker Autopilot that does automatic data exploration, feature engineering and model creation.A limitation of Redshift's create model feature is that there is no where to store these auto-generated notebooks made by SageMaker Autopilot. So to see these notebooks, you have to manually run a SageMaker Autopilot experiment using the SageMaker console.You can find out more about it using below links:https://docs.aws.amazon.com/sagemaker/latest/dg/autopilot-videos.html#autopilot-walkthroughhttps://docs.aws.amazon.com/sagemaker/latest/dg/autopilot-automate-model-development.htmlIf you want more control during the data transformation/engineering process, you can have a look at SageMaker Data Wrangler:https://aws.amazon.com/sagemaker/data-wrangler/CommentShareBenHanswered a year ago"


Question: How to use Lightsail load balancers globally instead of per region?

"My web app's DNS is managed by Cloudflare. I have created a CNAME record that points to a Lightsail load balancer DNS. It works fine.The question is the load balancer is created in a specific region. Ideally I want a load balancer that sends traffic to instances that are in different regions: Germany, Austrailia and USA for example.Do I have to use Cloudflare load balancer instead? it seems to allow dispatching of traffic to origins based in different geographical locations.Distribution/CDN is not a solution as some of the content will not be cached (videos for streaming). If I want low latency I need origins close to visitors.Thank you.FollowComment"

Answer: "1AWS doesn't have a global load balancer but it is always bound to one or multiple subnets that all are within the same region (but can, and should be on multiple AZs). You could take a look at Global Accellerator -service that allow you to have a pair of static IPs that are routed to closest instance of your application. This will get bit more complex than typical Lightsail application however. I would also think CDN once more, as you don't have to cache (all) your content but you could just use other features (getting client connected to closes edge etc).  You can do this either by setting cache headers at your origin server or setting default caching at CDN.https://aws.amazon.com/global-accelerator/https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/ConfiguringCaching.htmlCommentShareKalluanswered a year agojeffbond a year agoThanks, I didn't know about Global Accelerator.Share"


Question: Charged services on my account

"Hello,I'm user 9003412 (account ID XXXXXXXXXXX): my question is the following.I don't understand why I'm still charged every month whereas I don't have any instance (EC2, RDS) or service running any longer.Could you check this out ?And tell me what I gotta do to be not charged anymore going forward.Thanks.Best,Frederic*edited removed account number — Ria B.FollowComment"

Answer: "2If you already reviewed the bill and cleaned-up all resources and subscriptions across regions, I would suggest you to raise a support case.I would suggest you to review the itemized bill to understand the cause of charges - https://aws.amazon.com/premiumsupport/knowledge-center/stop-future-free-tier-chargeshttps://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/checklistforunwantedcharges.htmlIf you still need support after validating/reviewing these, please reach out to support team -https://support.aws.amazon.com/#/contacts/aws-account-supportCommentShareRajesh Sanswered 10 months ago"


Question: Step Function Wait time integers constraint error

"Hello ,I want to use the step functions 'Wait' shape in the flow, but the real challenge is the wait time in Seconds is restricting to integers only. I want to configure my wait step to 2.5 seconds, how can I do that? Please help me as i am new to Step Functions!Updated: My Requirement is to control the wait time in milliseconds, so there is no point in restricting the time in Integer format, I don't understand why it is designed in that way??? any specific reason for restrictions?FollowComment"

Answer: "-1if you need to control the wait time in milliseconds, how about considering to use timeStampPath and pass the value calculated from the current timestamp?https://docs.aws.amazon.com/step-functions/latest/dg/amazon-states-language-wait-state.htmlCommentShareBoulder Kimanswered a year agoUri EXPERTa year agoAs you can see in the same doc you pointed to, Timestamps are also only in seconds interval. You can't specify milliseconds.Share-1Step Functions Wait state supports only integer values. Why do you need 2.5 seconds?CommentShareEXPERTUrianswered a year ago"


Question: Metrics shows no record at all

"Hello, I installed the api on my website, created a contact flow, and tried it.I am able to make a call to a mobile phone and receive inbound calls what I did.However I see nothing in the historical metrics, I tried all the category, changed the date range, but nothing.Is there something to add in the flow for the calls to be recorded ?ThanksFollowComment"

Answer: 0You need to add a step to turn on the recording behaviour using a "set recording and analytics behaviour"CommentSharem66rusanswered 3 years ago0THank you I though it was for recording the call.CommentShareEntretoizeanswered 3 years ago


Question: Amazon RDS Oracle Multitenant

"¡Hi!, I created a RDS ORACLE MULTITENANT ver. 19, but i have a question... AWS multitenant provide by default a PDB (ORCL) if you dont specify any when i try to create another one PDB I Couldn't, cause i only have access to the PDB by default created, how i can create another PDB'S or use the CDB commands. or perhaps another way to create a multi-tenant ambient whit oracle.FollowComment"

Answer: "2Accepted AnswerHello,Currently, Amazon RDS for Oracle supports a subset of multitenant architecture called the single-tenant architecture. In this case, your CDB contains only one PDB. You cannot create additional PDBs.The single-tenant architecture uses the same RDS APIs as the non-CDB architecture. Your experience with a non-CDB is mostly identical to your experience with a PDB. You can't access the CDB itself.For more information on this, please refer https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Oracle.Concepts.single-tenant.htmlCommentSharegokul_Ganswered 3 months ago"


Question: SSL/TLS Certificate Renewal

"I received the below email about renewing an SSL/TLS certificate.  I attempted to renew it on my own but was unsuccessful.You have an SSL/TLS certificate from AWS Certificate Manager in your AWS account that expires on Jul 29, 2022 at 23:59:59 UTC. This certificate includes the primary domain nooneleft.org and a total of 2 domains.AWS account ID: 598766462222AWS Region name: us-east-1Certificate identifier: arn:aws:acm:us-east-1:598766462222:certificate/ffbd4fc1-16b6-4a9c-8729-671ff8ab6301AWS Certificate Manager (ACM) was unable to renew the certificate automatically using DNS validation. You must take action to ensure that the renewal can be completed before Jul 29, 2022 at 23:59:59 UTC. If the certificate is not renewed and the current certificate expires, your website or application may become unreachable.To renew this certificate, you must ensure that the proper CNAME records are present in your DNS configuration for each domain listed below. You can find the CNAME records for your domains by expanding your certificate and its domain entries in the ACM console. You can also use the DescribeCertificate command in the ACM API[1] or the describe-certificate operation in the ACM CLI[2] to find a certificate’s CNAME records. For more information, see Automatic Domain Validation Failure in the ACM troubleshooting guide[3].The following 2 domains require validation:nooneleft.org, www.nooneleft.orgFollowCommentrePost-User-6386965 10 months agoMy customer followed the instructions from this ticket and can see that all certificates have been successfully validated and are showing "Eligible" for the renewal eligibility.  Does that mean that are all set?Share"

Answer: 0Please follow the following documentation that provides some screenshots. Please make sure to use the CNAME specified by ACM for your domain. It's the same troubleshooting process you noted.Managed certificate renewal for DNS-validated certificatesCommentShareTaka_Manswered 10 months ago