Question: How to deploy Amazon Linux on a Lightsail Container Service?

"Hi,I'm trying to deploy Amazon Linux from this public repo public.ecr.aws/amazonlinux/amazonlinux:2018.03 on my Lightsail Container Service.I don't specify any specific launch command.I'm using a Micro instance:Micro (1 GB RAM, 0.25 vCPUs) ×1 nodeThe deployment starts and the fails and this is the log output:[26/Aug/2022:10:09:32] [deployment:1] Creating your deployment[26/Aug/2022:10:10:22] [deployment:1] Started 1 new node[26/Aug/2022:10:11:42] [deployment:1] Started 1 new node[26/Aug/2022:10:12:51] [deployment:1] Started 1 new node[26/Aug/2022:10:13:33] [deployment:1] CanceledDo I need to specify some command or what is the problem here?I want to use this image as a foundation to locally deploy my own written application in it and make it available on the netusing the Lightsail Container Service.Best Regards,FrankFollowCommentGuillaume Delacour 9 months agoI understand you try to deploy a container on LightSail service. The failure seems to be related to the container itself, can you detail a bit more what you are trying to achieve? Dockerfile content (or directives) and your deployment. You can start a first deployment with our example hello-world container: https://gallery.ecr.aws/amazon-lightsail/hello-world. You can also learn about deployment on this documentation: https://lightsail.aws.amazon.com/ls/docs/en_us/articles/amazon-lightsail-container-services-deploymentsShare"

Answer: "1Accepted AnswerHi Frank,You need to ensure there is a process running in the foreground to keep the container running. Since you mentioned that you have not specified a launch command, it then depends on the command set to be run by default when the image is launched ie ENTRYPOINT or CMD settingsIts a bit unclear if you are directly launching a container using amazonlinux:2018.03 or a custom image which includes your application built on top of amazonlinux:2018.03. If you are directly using amazonlinux:2018.03 without any launch command in Lightsail then you can expect the deployment to fail since there is no process running in the foreground. It executes the shell and exits. Also you actually need to build a custom image locally, upload it to repository and then use that image in the container definition so as to have the application running in Lightsail. If you are already using the custom image, then the previous comment about process running the foreground would be the likely cause based on info shared. In either case you can validate that by running the image locally without any arguments to verify if the container is running or exits--SydCommentShareSydanswered 9 months ago0Thank you for your answer. So far I‘m using just a plain AmazonLinux-Image, no app installed so far. What was confusing me: I could run the AmazonLinux-Image on my local docker installation and connecting to it using a shell. But I guess this does not work in Lightsail containers. So I will build my own docker image based on AmazonLinux with my test app deployed on it.Once again thank you a lot - your answer makes totally sense.Best Regards,FrankCommentSharefmarxanswered 9 months ago0I am having the same issue with postgres. For example registry.hub.docker.com/postgres:14-alpine does NOT work. But registry.hub.docker.com/containous/whoami works without issue. Both are not custom, they are public containers... how can I run Postgres?CommentSharerePost-User-4846257answered 5 months ago0If using Amazon ECR private repositories, make sure the repository is connected in the Images tab of the service deployment.If not connected (or if you are using a different image, ehm) it will give no error but cancel the deployment.CommentShareOndrejanswered 2 months ago"


Question: Usage of enforcedMatches in Find Incremental Matches

There is a field with the key: enforcedMatches in FindIncrementalMatches function of AWS Glue 2.0It is mentioned in AWS Docs | FindIncrementalMatches.apply but there is no implementation example for this. It expects a data frame but how does it effect the output?ExpectationI passed the existing source of data hoping that it will re-use the match_id from the previous result and enforce the matches but that did not work. The prior thread is: AWS Question on FindincrementalMatchesQuestionWhat is the purpose and usage of enforcedMatches in FindIncrementalMatches?FollowComment

Answer: "0Accepted AnswerHello Fahad,The enforcedMatches parameter in FindIncrementalMatches.apply function is taking a DynamicFrame as an input which is being used to override the matches if a user is providing any other labels. The DynamicFrame should be a labelled DynamicFrame which supports AWS Glue i.e. the header should include LABEL, LABELING_SET_ID. This parameter is just an override if a user is to provide a source other than the labels. So, unless there is an external label set to enforce here, you don’t need do change anything. Default value is null; it as can be left as null or omitted. If you are using the ML transform generated labels, the parameter can be ignored.The option “Force output to match labels” in the ML Transform should be set to true when using the enforcedMatches parameter. This ensures that the ML Transform forces the output to match the labels provided by the user.CommentShareSUPPORT ENGINEERAnushka_Sanswered 10 months agofahadqadeer 10 months agoAppreciate the help, thank you!Share"


Question: why does IAM policy not filter fine grained access to DynamoDB?

"newbie stuck after reading docs, forums and try-error for 3 days... :-(I created a table$CREATE_TABLE   RefData   $USE_LOCALDB $BILLING_MODE \--attribute-definitions \AttributeName=DomainOwner,AttributeType=S \AttributeName=SyncID,AttributeType=N \--key-schema \AttributeName=DomainOwner,KeyType=HASH \AttributeName=SyncID,KeyType=RANGEand I want to use the condition (DomainOwner == UserID) to restrict every user to see his own data onlythen I create a Group and attach the following Policy to it{  "Version": "2012-10-17","Statement": [ {"Sid": "DynamoAccessToRefData","Effect": "Allow","Action": ["dynamodb:GetItem","dynamodb:PutItem","dynamodb:DeleteItem","dynamodb:Query","dynamodb:Scan"],"Resource": "arn:aws:dynamodb:eu-central-1:322185599562:table/*","Condition": {"ForAllValues:StringEquals": {"dynamodb:LeadingKeys": ["${www.amazon.com:user_id}"]} } } ] }I create 2 users (user1 and user2) and add them both to the group.user1 puts items into the table and I check using CLIaws --profile=user1 dynamodb scan --table-name RefDataOK, here is the datanow user2 should NOT see the data - right?aws --profile=user2 dynamodb scan --table-name RefData=> the same data get displayed as with the scan for user1WHY???I checked the access keys in profiles ~/.aws/configI checked if other policies apply (nope)I must make the same mistake over and over againbut I don't see it - any hint appreciatedEDIT:I tried attach/detach policy to group, I tried add/remove user to group, I tried add/remove Action.everything worked fine as expected. What amazes me is the Condition. I Tried"Condition": {"ForAllValues:StringEquals": {"dynamodb:LeadingKeys": "certainlyNOT"}}and the users can STILL scan and see the data which does not at all contain this text in the primary keyEdited by: peterzzz on Mar 31, 2020 1:42 AMFollowComment"

Answer: 0the DynamoDB says in the example section of fine grained access control:ImportantThe list of actions does not include permissions for Scan because Scan returns all itemsregardless of the leading keys.thus: don't use Scan to check the effect of the access policyCommentSharepeterzzzanswered 3 years ago


Question: Deployment of specific 3D Editing Apps on Appstream 2.0

A customer wants to deploy the following Apps to Appstream 2.0Aveva PDMSTeklaBentley StaadBentley SACSAutodesk NavisworksTruviewAutospoolWanted confirmation from Appstream AoDs if the above s/w are compatible with Amazon Appstream 2.0 and any caveats to using it e.g. licensing etc.FollowComment

Answer: "0Accepted AnswerThere isn't a "Works on AppStream" program today - I've installed Bentley Applications and Aveva PDMSNot just for this list, but for any applications ask what are the requirements of the applications in terms of OS, or graphics h/w? Do the applications run on Windows Server OSes today (win2012R2, 2016, 2019)? Likely they do - in which case, the applications will run on AppStream. If they're supported on Windows 10 only then likely they will run on a server OS - check with the application vendor/customer. Adobe for example have good guidance here (https://helpx.adobe.com/enterprise/kb/technical-support-boundaries-virtualized-server-based.html). If its older applications that require Windows 7 or earlier then we can work with the likes of Droplet Computing or Cloudhouse to allow the application to be run in an AppStream environment.What are the licensing requirements for the applications today? Many CAD applications require a license server to be available to check out licenses for use: this would be the same for the application when hosted on AppStream. AppStream instances are 1:1 for users - it is not a shared instance model. If the user has a license file for the user - store it on the user's profile (https://docs.aws.amazon.com/appstream2/latest/developerguide/app-settings-persistence.html) or in their home folder (https://docs.aws.amazon.com/appstream2/latest/developerguide/home-folders.html) - both are available as persistent storage areas for users using AppStream. If you need a physical dongle/device to validate the license - that's going to be more fun. There is an AppStream Windows Client that allows USB device redirection that could help.CommentShareEXPERTAndrew_Wanswered 3 years ago"


Question: Requirements for BYOIP in Amazon EC2

I would like to bring to Amazon EC2 a /24 range of public IP addresses administered by RIPE. I had a look at the documentation for this operation and I am not able to understand if I can bring my range that has ASSIGNED PA set as status.Specific accepted status values are specified in the procedure "Bring your own IP addresses (BYOIP) in AWS Global Accelerator" but not in "Bring your own IP addresses (BYOIP) in Amazon EC2".Am I missing something or this status is not a concern when doing BYOIP in Amazon EC2?FollowComment

Answer: "2Accepted AnswerAssigned PA addresses do not belong to the end-user and therefore need to be returned when they cease their connection with the Local Internet registry (LIR). Therefore, AWS would not support the types of addresses spaces. For RIPE, the supported allocation statuses are "ALLOCATED PA", "LEGACY", and "ASSIGNED PI".As per the IPv4 Address Allocation and Assignment Policies for the RIPE NCC Service Region (RIPE-730): https://www.ripe.net/publications/docs/ripe-733ASSIGNED PA: This address space has been assigned to the issuing LIR infrastructure or an End User for use with services provided by the issuing LIR. It cannot be kept when terminating services provided by the LIR.CommentShareAWS-User-9680052answered a year ago0My feel here is that the requirements should be the same for both. I'm going to provide that feedback to the teams about their documentation.CommentShareEXPERTBrettski-AWSanswered a year ago"


Question: Amplify Build Times with React SPA

"Hello! I am pretty new to most AWS services and am using Amplify for the first time. In the last couple of days, I've built a small personal portfolio site as a React SPA, and have deployed it to Amplify. I would consider this to be an extremely 'simple' app, as it's just a static page with a few components.I do have a backend connected, but I'm only using the authentication service with it.Continuous deployment seems to be working, but every time I push a change (even just adding a single comment), the 'Build' stage of the pipeline takes about 10-15 minutes to complete before moving on to 'Deploy'.I guess what I'm asking is if these are standard build times with Amplify. I am able to build and run my local environment in just a few seconds, so I feel like Amplify should be able to build the app just as quickly, if not faster.Is there a way I can look and see which parts of the build process take the longest? Having to wait so long to deploy changes has been slowing down my development process a fair amount, so I'd like to figure out how to speed it up if possible.EDIT: 2 days later, still having this issue. The only solution I can think of at this point is to ditch Amplify entirely and use a Lightsail VM or something. I would really prefer to not have to do so, because it will require a lot of extra work. I'm definitely disappointed by the seeming lack of documentation for Amplify and its many components. The official tutorials are out of date and are missing entire steps at points.FollowComment"


Question: AWS EC2 Instance will not stop or terminate - Instance ID does not exist

I keep trying to stop or terminate my EC2 instance (id i-05e091ac563783d77) and it first comes up with an error message saying an internal error has occured; sometimes an error message will come up saying the instance id does not exist.I have tried forcing the stop through the console and through the CLI and it gives the same 'instance id does not exist' error message even though it does exist and has a state of 'running'.FollowComment

Answer: "0Which region is it in? If it is in us-east-1, there is an on-going issue with EC2 there.https://status.aws.amazon.com/CommentSharedevangsanswered 3 years ago0There was an ongoing status error within the region.CommentShareawsinstanceissueanswered 3 years ago"


Question: colcon usage in Robomaker

"Hi everyone,I am developing on Melodic. This is my first time using the Robomaker and colcon. Coming from catkin, I have a few questions about it:Are we supposed to effectively abandon catkin in Robomaker and use colcon instead for ROS 1 too?What about apt? We use colcon instead of that too? Is that recommended best practices?Is there an equivalent to the catkin_create_pkg? I see <ros2 pkg create> but that seems to be for ROS2 only.Thank you for your helpFollowComment"

Answer: "0Hi, Welcome!For building and bundling, yes you need to use colcon build and colcon bundle to create your 'output.tar' files for your robot_ws and simulation_ws. These are used to run your simulation job in RoboMaker.You can use the 'apt' package manager to install packages, but we recommend using 'rosdep' instead as it will find the necessary packages for youYou can still create packages using the catkin_package_create script as shown here: http://wiki.ros.org/ROS/Tutorials/CreatingPackage You will use colcon after the package is created to build and bundle your packages.CommentShareAWS-User-1923695answered 3 years ago"


Question: What will happen to my default SSO URL?

"I'd like to customize my default "d-########.awsapps.com/start#/" SSO URL, but I'm worried it could affect production.What will happen to this default URL? Would it still be available for my "aws configure sso" users, or will they need to update their profile to use the new one?If the old one stays, does anyone have docs around it? I searched for days now for something.ThanksFollowComment"

Answer: "1Accepted AnswerHi labranchekvn,You are able to customize your SSO URL without affecting the default URL provided. Access via the default URL will remain as long as the Identity Store exists allowing users time to migrate to the custom URL if so desired.I see our documentation is not clear and I will put in a request that it be updated.CommentSharecormcdanswered 5 months ago"


Question: Using a subordinate certificate authority from ACM Private CA for mTLS client certificate authentication with MSK

To use mTLS for authentication to AWS managed kafka (MSK) you need to use an AWS private certificate authority to generate the client certificates as per this documenthttps://docs.aws.amazon.com/msk/latest/developerguide/msk-authentication.htmlIs it possible to generate a subordinate certificate authority from the Private CA that MSK trusts and generate the client certificates from that subordinate CA from another tool ?FollowComment

Answer: "0As per https://github.com/aws-samples/amazon-msk-client-authentication,Amazon MSK utilizes AWS Certificate Manager Private Certificate Authority (ACM PCA) for TLS mutual authentication. For information about Private Certificate Authorities, see Creating and Managing a Private CA and see Certificate Authority for information on Certificate Authorities. The PCA can either be a root Certificate Authority (CA) or a subordinate Certificate Authority. If it is a root CA, you need to install a self-signed certificate (the console provides an easy mechanism to do that). If it is a subordinate CA, you can either choose an ACM PCA root or subordinate CA as the parent or an external CA (in this case, the external CA which can be your own CA will issue the certificate that will be installed as the PCA certificate and become part of the certificate chain). In addition, for Amazon MSK to be able to use the ACM PCA, it needs to be in the same AWS account as the Amazon MSK cluster. However, the Apache Kafka clients, for example, the producers and consumers, schema registries, Kafka Connect or other Apache Kafka tools that need the end-entity certificates can be in an AWS account different from the AWS account that the ACM PCA is in. In that scenario, in order to be able to access the ACM PCA, they need to assume a role in the account the ACM PCA is in and has the required permissions.Subordinate certificates will work however the root for that chain has to be part of the cluster association.CommentShareVarun_Ranswered a year ago0Here's the step by step to use subordinate CA: https://github.com/aws-samples/msk-third-party-mtls.CommentShareSayemanswered 3 months ago"


Question: How can I identify the sender of a shadow update that's been forwarded?

"I set up a rule in my IoT service that examines shadow update requests coming in from my devices by monitoring the topic with the reserved name for shadow updates, namely, $aws/things/+/shadow/update. When it notices certain kinds of updates that we consider exceptional, the rule forwards the message to an SQS queue. We plan to have a server running on an EC2 instance that monitors this queue so it can take appropriate action.The problem I'm having is that when the EC2 instance receives the message from the queue, all it gets is the JSON containing the desired state as requested by the device. But there is nothing in this message that includes the name or identity of the device that sent it. I need that information to take action.One solution might be to have the device itself include its own name in the shadow state, but I don't really like this idea. Ideally, I'd like to somehow have the rule append the device name to the message (or just append the name of the topic which includes the device name). I don't see any obvious way for rules to send modified messages or append information this way. Is it a viable solution?If not, what's the recommended approach?Thanks,FrankFollowComment"

Answer: "1Accepted AnswerYou can use the SELECT clause to modify the message: https://docs.aws.amazon.com/iot/latest/developerguide/iot-sql-select.htmlIn this case, you probably want to use the topic() function: https://docs.aws.amazon.com/iot/latest/developerguide/iot-sql-functions.htmlSomething like: SELECT *, topic(3) as thing FROM $aws/things/+/shadow/updateCommentShareEXPERTGreg_Banswered a year agoFrank a year agoThis worked great, thanks.Share"


Question: Campaign not delivering

"When i send a campaign, it shows sent but doesn't deliverFollowComment"


Question: DynamoDB - scanning a 7.5GB table

"IHAC who's trying to load into memory a DynamoDB table with 7.5GB and 7M rows, each 0.4KB, and finds it takes about ten minutes.Assuming the partition key is not an issue, what would be a good approach to speed the process up? I thought about:Loading in parallel instead of sequentialBatching small items and loading in bulks (via Firehose, for example)I'd be happy to hear your ideas!FollowComment"

Answer: "0Accepted AnswerIn general, we recommend the customer perform parallel Scan with multiple threads. The following AWS documentation provides a detailed explanation on how Parallel Scan works:https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/Scan.html#Scan.ParallelScanWith the Scan API call, each Scan returns 1 MB data. A single thread can perform around 20 Scan API calls in a second, assuming the round-trip latency for each API call is around 50 ms. In other words, you can Scan around 20 MB data per second per thread.On an Amazon EC2 instance with 16 vCPU cores, run one thread per vCPU core. You will achieve something like 300 MB/s in throughput. With this first approximate, you can get things done in 7500 / 300 = 25 seconds, which is less than 1 minute.If you want to load data from Amazon DynamoDB into memory, then you will need a data structure that can be shared by multiple threads and is also thread-safe. In Java you will need to think about things like Concurrent Collections.If you want to load data from Amazon DynamoDB onto disk (export), you might want to refer to the DDBImportExport project on github, which I developed as a demo on how to use perform parallel Scan in DynamoDB. This implementation uses Python, but the same logic can be easily re-implemented in any other languages.CommentSharejohnjiananswered 3 years ago"


Question: Best AWS tool to move/transform data from redshift to an API

"Hi, I'm searching a AWS tool to help me to move data from an database in redshift to an target database, but the target database is only accessible via API.I need to do some transformationsn in the data before to move to the database target.FollowComment"

Answer: "1If you're looking to stay with native AWS services, you're options would be AWS Glue or AWS Data Pipeline.AWS Glue is fully serverless, so you won't have to manage servers, but on the backend it's Apache Spark, so that's something to be aware of from a compatibility standpoint. AWS Data Pipeline does not restrict to Apache Spark and allows you to make use of other engines like Pig, Hive, etc. This makes it a good choice for your organization if your ETL jobs do not require the use of Apache Spark or multiple engines.As for specific use cases, AWS Data Pipeline transforms and moves data across AWS components. It also gives you control over the compute resources that run your code and allows you to access the Amazon EMR clusters or EC2 instances. Whereas, AWS Glue is best used to transform data from its supported sources (JDBC platforms, Redshift, S3, RDS) to be stored in its supported target destinations (JDBC platforms, S3, Redshift). Again, because AWS Glue is serverless you won't have to manage compute resources, so you can focus on your ETL jobs specifically.Both have different pricing options, so depending on your specific use case you can kick around the numbers in the AWS Pricing CalculatorIf you have any more questions/information feel free to ask in the comments and I'll try to guide you to what would suit your needs best. Thanks!CommentShareAWSJoeanswered a year ago0Thank you very much for your answer.I  have used a bit of Glue and my main question is if it allows me to have an API as the destination of the flow, I always wrote against another DB.I don't know Pipeline, maybe it allows using an API as a target.CommentShareAWS Gauchoanswered a year agoAWSJoe a year agoUnderstood. Unfortunately, neither services offer that ability by default. With AWS Glue, you can only select AWS Glue Data Catalog, Amazon S3, Amazon Redshift, MySQL, PostgreSQL, Oracle SQL, and Microsoft SQL Server as targets. With Data pipeline, your node options are DynamoDB, Redshift, SQL, MySQL, and S3.Share"


Question: [Security] potential issue with jsonpickle

"Right now, aws-xray-sdk-python relies on jsonpickle, which is known to be vulnerable to arbitrary code execution.https://nvd.nist.gov/vuln/detail/CVE-2020-22083https://github.com/jsonpickle/jsonpickle/issues/332https://github.com/jsonpickle/jsonpickle/issues/335Is this a cause for concern when using aws-xray-sdk-python, or does it completely handle this vulnerability?ThanksFollowComment"

Answer: "0Hey sefeki,aws-xray-sdk-python only applies API encode from jsonpickle, see: https://github.com/aws/aws-xray-sdk-python/search?q=jsonpickle, so currently it's safe to use aws-xray-sdk-python. But since this already raised the awareness of security issue, we will be working to replace it with another feasible dependency to serialize data in the near future to mitigate this security warning.CommentShareaws-luanswered 2 years ago"


Question: Greengrass IDT failing [Error: 126] Failed to find libc on your device

"I have an Linux (armv7l) device which I am running GGC service on and am running into an error when executing the IDT:Reason: Error: 126 DependenciesNotPresentError: The following dependencies do not exist:  Failed to find libc on your device.The running of this test also deletes the users and groups (ggc_user and ggc_group) upon failure.I am running the test as root user.  The Greengrass Dependency Checker reports that all of the required dependencies are met.Here is the config file:[{"id": "TP","sku": "sku1234","features": [{"name": "os","value": "linux"},{"name": "arch","value": "armv7l"}],"kernelConfigLocation": "","greengrassLocation": "","devices": [{"id": "TP_DEV_Group_core","connectivity": {"protocol": "ssh","ip": "10.6.10.145","auth": {"method": "password","credentials": {"user": "root","password": "<password>"}}}}]}]========== Test Summary ==========Execution Time: 31sTests Completed: 6Tests Passed: 5Tests Failed: 1Tests Skipped: 0Test Groups:ggcdependencies: FAILEDversion: PASSEDFailed Tests:Group Name: ggcdependenciesTest Name: Test System Configs Dependencies system_configs_checkReason: [Error: 126] DependenciesNotPresentError: The following dependencies do not exist:  Failed to find libc on your device. Please refer to https://docs.aws.amazon.com/greengrass/latest/developerguide/gg-gs.html for more information regarding required dependencies for Greengrass.. Refer to the logs and troubleshooting section of IDT User Guide https://docs.aws.amazon.com/greengrass/latest/developerguide/device-tester-for-greengrass-ug.html for more information.Path to AWS IoT Device Tester Report: /Users/jessecox/Dropbox/Greengrass_Development/idt/devicetester_greengrass_mac/results/f35e71a2-1c78-11ea-9e9c-a860b6004763/awsiotdevicetester_report.xmlPath to Test Execution Logs: /Users/jessecox/Dropbox/Greengrass_Development/idt/devicetester_greengrass_mac/results/f35e71a2-1c78-11ea-9e9c-a860b6004763/logsPath to Aggregated JUnit Report: /Users/jessecox/Dropbox/Greengrass_Development/idt/devicetester_greengrass_mac/results/f35e71a2-1c78-11ea-9e9c-a860b6004763/GGQ_Report.xmlAny advice on this would be appreciated.Edited by: JesseCoxPDX on Dec 11, 2019 4:57 PMFollowComment"

Answer: "0Accepted AnswerHi,IDT looks for the libc file under the '/lib' directory. We run this command to confirm this: find /lib** -name 'libc.so**'Can you please run this command on your device and confirm that your libc file exists under this directory?ThanksCommentShareAWS-User-2027723answered 3 years ago0Thank you for this answer.  The device I am developing on has some creative linking going on and i was unable to access this library with the command you provided.  I created another symlink and it fixed the problem.  Thanks very much.CommentShareJesseCoxPDXanswered 3 years ago"


Question: UI Canvas Lua - Find Element By ID

"I am following along with one of the Lua UI tutorials (which is out of date) but I have found the replacement function that searches for the UI element based on the id of the element, however the function call doesn't work as expected - meaning it doesn't work.I call:local entity = UiCanvasLuaBus.Event.FindElementById(self.canvasEntityId, 2);which should return an entity with id = 2, but instead it returns nil.Am I using this function wrong or is there another error here?Follow"

Answer: "0Accepted AnswerHi @REDACTEDUSERSorry it sounds like that tutorial is out of date. The UiCanvasLuaBus is a deprecated bus. Use the buses named UiCanvasBus, UiElementBus etc instead. These are documented here: https://docs.aws.amazon.com/lumberyard/latest/developerguide/lua-scripting-ces-api-ui.htmlIn general we do not recommend using the old element Ids to access UI elements. The most flexible way is to use the Lua Script component and have a property on the script that is the EntityId of the element you want to use. You can then use the UI editor to connect the UI element to that Lua script property.Some intro info on using the Lua Script Component is here: https://docs.aws.amazon.com/lumberyard/latest/developerguide/lua-scripting-intro.htmlThere is an example level that uses Lua with the UI system in SamplesProject. The level is called: Levels/UI/UiMainMenuLuaSampleHopefully that will get you going with Lua and the UI system. Let us know if you have more questions.RobSharerePost-User-4854644answered 5 years ago0Hi @REDACTEDUSERhttps://docs.aws.amazon.com/lumberyard/latest/developerguide/lua-scripting-ces-api-ui-uifadercomponent.htmlThe assets for the the fader samples can be found here:dev\Gems\LyShineExamples\Assets\UI\Canvases\LyShineExamples\Comp\Faderdev\Gems\LyShineExamples\Assets\UI\Scripts\LyShineExamples\Fader\SharerePost-User-8946916answered 5 years ago0Hi RobP,Thanks for the reply, this is what I was assuming but was hoping it wasn't the case. I have been reading through that documentation and was hoping to find something similar to find by id, because object names are subject to change, and I can't use the Entity property picker because the script was located outside the canvas. I have created a work around so I'm not concerned about it working but rather it being modular and convenient to change down the road.In that same tutorial it also references a function called HasFade(entityId), I was wondering if there was a function similar or if that too has been deprecated?SharerePost-User-9015728answered 5 years ago0Hi @REDACTEDUSERI'm curious what the use case is for HasFade. Why does the script need to know if a UI element has the UiFaderComponent on it?RobSharerePost-User-4854644answered 5 years ago0But that doesn't answer my question, you are just pointing me to more documentation which I have already seen. I am asking if there is a function which returns true or false whether a Fader component is attached (or if there is a more generic one to test for other types of components).SharerePost-User-9015728answered 5 years ago0I guess now that there isn't a "find by" type of function it is less useful, however I feel like it would be good to have a function that simply tests for whether the object grabbed "Has blank". It also is good for sanity checks and error testing.SharerePost-User-9015728answered 5 years ago0Hi Chase,This is really good to know! So when you say we, do you mean at Amazon? Because my followup question to you saying that is, should I just be using C++ to do anything in Lumberyard because it seems that the Lua functions/buses can be deprecated and just generally hard to get working.SharerePost-User-9015728answered 5 years ago0Hi @REDACTEDUSERbool isRadioButton = UiRadioButtonBus::FindFirstHandler(radioButton) != nullptr;SharerePost-User-8946916answered 5 years ago0Hi @REDACTEDUSERUsing C++ vs Lua really depends on what you want to do, your desired workflow, the "customer" of your work, etc. Anything you can do in Lua, you can do in C++, but not everything in C++ is available in Lua.Lua has a very fast workflow, great for rapid iteration, and is more accessible to other members of your team that aren't engineers/programmers. C++ is more powerful but has a slower turnaround time and (for the most part) is generally inaccessible to anyone who doesn't have coding experience.If it helps, the "UiFeatures" level in SamplesProject was done completely using Lua.SharerePost-User-8946916answered 5 years ago"


Question: "I will create, deploy, fix, update website, api with python, flask"

"Hi, left you messages in regards to the Gig, I will create, deploy, fix, update website, api with python, flask:Can you help me with an existing PYTHON app that pulls data from my Amazon Play Books account and generates an Excel table. Until recently. I'm getting aborts at the end of this process and it's not generating the Excel file. Currently this app uses an internal server http://127.0.0.1:5000/ but the Python doc says I should use a WSGI server for production. I have well over 10,000 books in my ebook library and I suspect that this is more than the internal server can handle?FollowComment"


Question: apache umask - have the apache user create new files with 664 permissions

I'm running a Amazon EC2 instance - Amazon Linux release 2 (Karoo).The apache server sets files it creates with the permissions 644.  I want them to be 664.  I've tried changing the umask setting to 002 (from 022) in every single line that has 'umask' in the /etc folder and sub-folders.  This didn't seem to work.  I also tried various solutions on the Internet about having the specific service set the umask to no avail.Thanks.FollowComment


Question: AWS Rekognition Faces Comparison response metadata analyses

"Dear Experts,I would like to ask whether you have an idea how I could go deeper in my AWS Rekognition Face Comparison response metadata analyses. I have a set of pictures that are validated between each other, yes I am satisfied how well the tool actually works, but I would like to go dive deeper in the response metadata. Some of my face comparisons do result in false negatives and for those I would like to know why the pictures resulted in a mismatch. The response does give the confidences for certain facial attributes, but to me if the LEFT EYE: X = 0.23131 and Y = 0,3221 is in these coordinates and other is mismatched with relatively similar coordinates then that doesnt really tell me much. My question is whether there is a way to visualize what the Face Comparison tool highlights as similar and what it doesnt, it could be a heatmap of the face or some other.FollowComment"

Answer: "0Hi there!Thank you for using Rekognition service! The visualization tool as you mentioned is not supported yet.Although this is not a feature that is currently planned, we will consider it for future development. If you would like, you can work with your AWS account manager who can submit a feature request.CommentShareAWS-hcsanswered 2 months ago"


Question: Amazon EC2 instance setup

"Hi All ,I am trying to get back to cloud , i have been in management for some years now and lost track of all the technical stuffs. But i am starting now with Amazon AWS.Ok i tried to setup a new EC2 instance for my test (I am using Free tier)  but i get the below error .I am unsure why this is the case. please could you let me know what i am doing wrong?I have setup my VPC , Security group and S3 Bucket.When launching my first instance , anything special i should do first ? Thanks FollowComment"

Answer: "0It is really strange that you are not seeing the list of AMIs populated. Your screen should have looked like the screenshot I have attached. Is this reproducible consistently? Which AWS region are you in? If this is the first time you tried and ran into this issue, I will request you to try one more time to launch an EC2 from scratch.CommentShareEXPERTIndranil Banerjee AWSanswered 10 months ago"


Question: EC2 linux instance migrated using Application Migration Service (ASM)  does not initialize correctly Network

"Hi,    I have migrated a Redhat 7.2 linux machine that was previosly working on a VMWARE Host.  I did that migration running the Application Migration Service Agent inside the linux machine,  and although I was able to start the migrated EC2 instance on AWS, it did not started correctly.  It seems the error may be related with the network interface, since when I do a config,  I do not see a "eth0" device setup,   I instead see a "virbr0" device, that seems to be a "bridge" or "virtualized" card.  My suspect is that, since the Redhat 7.2 was running previously on a vmware, it had virtualized cards insted a normal eth0,  and that virtualized card may be something specific of vmware that was not recognized by the Application Migration Service Agent when the migration was done.    Is there any suggested why to use AMS (Application Migration Service) on such as environments ?  How I can fix now that machine so the network is working ?  Not sure if I can add now an "eth0" card to the actual EC2,  or if I should delete the "virbr0" device and how--FollowComment"

Answer: "0Hello,to answer your question, we require details that are non-public information. Please open a support case with AWS using the following link. Please find more details on Network interfaces and their configuration on EC2 here.CommentShareSUPPORT ENGINEERMithun Vanswered 10 months ago"


Question: How can I increase my monthly credit limit on Mechanical Turk?

"I am attempting to publish a batch on my Mechanical Turk account that is connected to my AWS account. I receive this message when attempting to public, "You have exceeded your monthly credit limit, please see our FAQs to learn more."  I have filled out the Mechanical Turk request form. I have not even received confirmation that my request was received. I am literally trying to give you my money and you won't take it. Please help!FollowComment"

Answer: "1Did anyone eventually come to help you on this? I am having the exact same issue currently and Amazon is not doing anything to explain why our limit increase requests are being denied.CommentShareStudio Oneanswered a month agorePost-User-7251799 a month agoI finally got this resolved, but it took a couple of weeks.  Apparently there is no automatic approval for credit increases for MTurk.  Each request is handled on a case by case basis regardless of how much of a credit increase you are looking for.  I eventually had someone from the MTurk team reach out to me to handle my case.  The frustrating part is I only needed them to 'increase' my credit so I could spend about $20 and I believe the default credit you are given is $100 or something like that so it didn't make any sense why I needed to ask for an increase when I wasn't increasing anything.  I had even pre-loaded funds to my AWS account and that still didn't resolve the issue.  It's a very clunky and inefficient system that Amazon clearly does not care too much about.  Maybe it doesn't generate enough profit for them to be high on the priority list?  Unfortunately the only way I've found to resolve it is to just be persistent.  If an AWS tech doesn't reach out to you within what you deem is an appropriate timeframe, submit the request again, then keep doing that until they can't ignore you.  When they reach out, you should have someone's individual email address, so then you can go directly to that person and your issue will eventually be resolved.  That's the best advice I have for this.  It is, unfortunately, very frustrating.  Much more than it needs to be.Share0Please note that Mechanical Turk accounts have a monthly spending limit which is applied to the account. As seen in the documentation on Service quotas for Mturk, by default, the maximum monthly spend in USD is 1,000.However, this is an adjustable limit, and a limit increase request can be submitted following the link provided below:[+] Limit increase request - https://console.aws.amazon.com/servicequotas/home/services/crowdscale-usagelimitservice/quotas/L-EC45676AOnce you have created a limit increase request, you'll find a Support Case getting created at AWS Support Center, and you can follow up on the same case if you are still facing the issue of the monthly credit limit.CommentShareSUPPORT ENGINEERPrashant_Canswered 5 months agodonovansalyer 4 months agothey does not provide me limit help me outSharerePost-User-3358846 4 months agoThis does not help at all.  I am literally trying to spend $18.  My quota is set at 1500.  My AWS and mTurk accounts are linked and I have current payment methods including advanced pay on file.  I do not understand why I cannot publish my HITs.  Seriously, Amazon, this is unacceptable.Share0My limit is already set to 2,500 and I still get the exceed limit error for 1,008. I have 3 support cases open and no one is helping.CommentSharerePost-User-9687991answered 4 months agodonovansalyer 4 months agohow u get bro u contact detailsShare0i also applied for limit increase they have rejected my requests why they rejected my limit increase mturk 1000CommentSharedonovansalyeranswered 4 months ago0This seems to be a recurrent problem since so many people here are having the same issue. I have been waiting for 9 days for Amazon to solve this issue for me, so far nothing. I have more than enough credit but Amazon wants to decide how I spend my money. Anyone here was able to solve the problem?CommentSharerePost-User-4887764answered a month ago0I finally got this resolved, but it took a couple of weeks.  Apparently there is no automatic approval for credit increases for MTurk.  Each request is handled on a case by case basis regardless of how much of a credit increase you are looking for.  I eventually had someone from the MTurk team reach out to me to handle my case.  The frustrating part is I only needed them to 'increase' my credit so I could spend about $20 and I believe the default credit you are given is $100 or something like that so it didn't make any sense why I needed to ask for an increase when I wasn't increasing anything.  I had even pre-loaded funds to my AWS account and that still didn't resolve the issue.  It's a very clunky and inefficient system that Amazon clearly does not care too much about.  Maybe it doesn't generate enough profit for them to be high on the priority list?  Unfortunately the only way I've found to resolve it is to just be persistent.  If an AWS tech doesn't reach out to you within what you deem is an appropriate timeframe, submit the request again, then keep doing that until they can't ignore you.  When they reach out, you should have someone's individual email address, so then you can go directly to that person and your issue will eventually be resolved.  That's the best advice I have for this.  It is, unfortunately, very frustrating.  Much more than it needs to be.CommentSharerePost-User-7251799answered a month ago"


Question: Private Link cross region cross account support

"Hi,we are trying to implement private link with cross region and cross account solution, however we are not able to get if it is supported by aws or not.Could you please confirm the same .ThanksFollowComment"

Answer: "0Hello,Endpoint services are available in the AWS Region in which they are created and can be accessed in remote AWS Regions using Inter-Region VPC Peering.The flow would look like this:Consumer VPC (Region A) ---PrivateLink---> NLB in Provider VPC (Region A) <---Inter-Region VPC Peering---> Endpoints in Provider VPC (Region B)See the 'Inter-Region Endpoint Services' pattern - https://d1.awsstatic.com/whitepapers/aws-privatelink.pdfAlso see this: https://aws.amazon.com/about-aws/whats-new/2018/10/aws-privatelink-now-supports-access-over-inter-region-vpc-peering/CommentShareEXPERTTushar_Janswered a year agorePost-User-4582964 a year agoSo if I have an Account A (region -A ) and I have account B (region B) then this will not work?I was able to create Account A (region -A ) and I have account B (region A) and private link works fine.ShareTushar_J EXPERTa year agoHi, That should work also (see this - https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/peer-with-vpc-in-another-account.html) If you found the answer useful please accept the answer. Thank you.ShareDejan 2 months agoTushar_J can you elaborate a bit more? I have a similar use-case, where I have(eu-central-1) API Gateway w/ mTLS --> NLB --> ALB --> ECSI want to have something like:  (ap-south-1) API Gateway w/ mTLS --> NLB --> PrivateLink --> (eu-central-1)ALB -- ECSThis is for the same account, but different regions.I am struggling with this for a while, and I tried different combinations that don't work. I tried VPC peering, tried VPC endpoints, but I am missing something. I either cannot connect to a service, or cannot create the target. Ideally it would be (ap-south-1) API Gateway w/ mTLS --> PrivateLink --> (eu-central-1) NLB --> ALB --> ECS and continue the flow there, but that's not working. Either the VPC Link cannot be created, or the target does not exist in the region..Share0Hello, it is possible via let's name it shared VPC, where VPC Endpoint (from AWS service or from PrivateLink) is deployed.Let's presume you have a bucket to share in region A to region B and region C.All 3 VPC (region A,B,C) are connected via TGW.In nutshell you need to create an VPC endpoint in VPC Region A , and have your VPCs in other regions be capable to resolve this endpoint with the private IP address in VPC Region A, so your TGW will route your requests to this endpoint in VPC Region A from others.To do it:Create a VPC endpoint in VPC in region A and disable private DNS for it.Create Route 53 PHZ in same VPC in region A and create an alias record that will point to the VPC endpoint (for example s3.us-east-1.amazonaws.com -> to the vpc-endpoint.name).Associate this Route53 PHZ with VPCs in region B and region C.Described here:https://docs.aws.amazon.com/whitepapers/latest/building-scalable-secure-multi-vpc-network-infrastructure/centralized-access-to-vpc-private-endpoints.htmlhttps://aws.amazon.com/blogs/networking-and-content-delivery/integrating-aws-transit-gateway-with-aws-privatelink-and-amazon-route-53-resolver/CommentSharealianinhoanswered 3 months ago"


Question: about cdc migration

"hlw ,actually i am tring to mingrate cdc data but found the erroe , please help me as soon as possible"Last Error Fatal error has occurred Task error notification received from subtask 0, thread 0 [reptask/replicationtask.c:2880] [1022505] Failed (retcode -1) to execute statement; RetCode: SQL_ERROR SqlState: 42000 NativeError: 20028 Message: [Microsoft][ODBC Driver 17 for SQL Server][SQL Server]The Distributor has not been installed correctly. Could not enable database for publishing. Line: 1 Column: -1; Failed while preparing stream component 'st_0_NXRYOCRQYP462UX5EWX5NRDDUDPXLYCNC7TV5JI'.; Cannot initialize subtask; Stream component 'st_0_NXRYOCRQYP462UX5EWX5NRDDUDPXLYCNC7TV5JI' terminated [reptask/replicationtask.c:2888] [1022505] Stop Reason FATAL_ERROR Error Level FATAL"Source endpoint:Target endpoint:Migration task (ARN):Timestamp:FollowComment"

Answer: "0HiFrom the error shared, this seems to be a situation that required steps not met.Depends on what is the source SQL Server (RDS SQL Server or on-prem SQL Server)For RDS SQL Server: https://docs.aws.amazon.com/dms/latest/userguide/CHAP_Source.SQLServer.html#CHAP_Source.SQLServer.ConfigurationFor on-prem:https://docs.aws.amazon.com/dms/latest/userguide/CHAP_Source.SQLServer.html#CHAP_Source.SQLServer.CDCAlso make sure the user used here for on-prem server (sysadmin or non-sysadmin) as there are two sets of steps mentioned in the public doc.CommentShareSUPPORT ENGINEERKevin_Zanswered a year ago"


Question: Step function - EmrActivity

"Hi,I have an EmrActivity step on the data pipeline that backups the dynamoDB and stores it in S3. I would like to use this functionality on a step function or something other than Data Pipeline. If this is possible, how do I accomplish this?FollowComment"

Answer: "0You could probably use the export-table-to-point-in-time https://docs.aws.amazon.com/cli/latest/reference/dynamodb/export-table-to-point-in-time.htmlThe SDK operation can be invoked from StepFunction, ASL would like something like this.Comment: A description of my state machineStartAt: ExportTableToPointInTimeStates:  ExportTableToPointInTime:    Type: Task    End: true    Parameters:      S3Bucket: S3Bucket      TableArn: MyDynamoDBARN    Resource: arn:aws:states:::aws-sdk:dynamodb:exportTableToPointInTimePoint in time recovery MUST be enabled on the DynamoDB table.CommentShareJimmyDqvanswered 2 months agorePost-User-9449669 2 months agoThanks!  How do I wait until the backup is done before I can process the next steps?Share"


Question: How do I restore deleted files in S3?

"I mistakenly deleted files from my 'version enabled' S3 bucket. I went thru the steps offered by 'Support':Open the Amazon S3 console.From the list of buckets, open the bucket of the deleted object.Navigate to the folder of the deleted object.Turn on List versions.In the search bar, enter the name of the deleted object.Select the previous version of the object (the actual object rather than the delete marker). Choose Actions, and then choose Download.However, it just shows "0 matches". I am the owner of the bucket, but don't know if 'have permissions to s3:GetObjectVersion' - or how to get those 'permissions'.FollowComment"

Answer: "1I tried experimenting a bit and here are a few possibilities I could think ofYou might have enabled versioning after the file was uploaded in which case the objects before the versioning was enabled would not have versions. So if you have deleted the object then there is no version to retrieveAssuming the versioning was enabled before the object was uploaded2.  Did you provide the exact object name? Remember the object name is case sensitive and so you must provide the exact object name3.  Is the bucket too big to manually find it instead of search? There could be two listings. One with the delete marker and then another, the actual version of the object. If you delete the one with delete marker again, then you will see the object in search4. You might have deleted the object first. Then if you list down the objects, it will show two objects with the same name. One is the version and the other with delete marker. If you delete these two again then you cannot recover the object5. Go to bucket permissions and check if 'ACLs are disabled. All objects in this bucket are owned by this account' appears. If it does then you have the permissionsCommentShareSandeepVudataanswered a year agoAWS-John-Mark a year agoI believe the enable versioning was enabled before objects were uploaded; I used the exact object name to search with; bucket's not too big; only deleted them once; I as owner are the only one authorized with full permissions. Thanks for going through these.Share0AWS introduced Versioning-enabled buckets a while ago to help you recover objects from accidental deletion or overwrite. Prior to this feature being introduced there was no way to recover a deleted file.NOTE: By default, S3 Versioning is disabled on buckets, and you must explicitly enable it to protect files from accidental deletes or updatesCommentShareMike Revittanswered a year agoAWS-John-Mark a year agoAs stated, I deleted files "from my 'version enabled' S3 bucket." Therefore, should I not be able to restore them?Share"


Question: Can I use glue interactive sessions with pythonshell?

"Can I use glue interactive sessions with pythonshell?In the docs, it hints at choosing the %job_type or is it only available for glueetl. I am looking for a simple way to develop by requiring myself to use a sage maker notebook because it is overkill on half the ETL more of the time. Can I just get the 0.0625 DPU by default with a notebook? And no extras like I get with sagemaker.FollowComment"

Answer: "0Hi,Glue Interactive Sessions allows you to install Glue PySpark and Glue Scala kernels to any Jupyter Notebook and Glue Studio Notebook is a new Glue Studio experience powered by Interactive Sessions. As such, they are aimed ad interactive Glue ETL (Spark) development.As your question is about development with Glue Python Shell jobs, which is the right choice for small data sets, this can be developed with the Glue Studio Python Shell Editor (no DPUs paid before you run the job) or in any Python IDE environment using compatible Python version.Using the Glue Studio Python Shell editor you can develop and submit the job to run. For the results you can open the logs directly from the Runs tabs.Alternatively you could use the legacy script editor, that when you run the PythonShell job in the bottom part of the windows it shows you the logs as the job is running.hope this helps,CommentShareEXPERTFabrizio@AWSanswered a year agojb-po a year agoI understand that first part.  My question is if I have an ETL that is pretty small 500 MB a day, for example. I am connecting to the source via data catalog but destination via glue connection to a rds and running simple reporting on the data. Wouldn't Spark be overkill and therefore can just use a python shell job with aws-data-wrangle and calculate reports with panadas loading data again with was-data-wrangler? or is Glue the wrong tool for this small job. Or should I just continue to through small data at spark and let spark handle the data as in being to scale?And if I am using a pythonshell job for this what is the best way to develop it. I need to be able to test pushing the data to the destination. if I am doing things locally in my IDE that is fine but there is then testing my loading to the destination which would be nice with the ability to run like interactive sessions. I think.Pretty new and the tools are developing with me in AWS. Just trying to know what the most commend and recommended way is to develop.ShareFabrizio@AWS EXPERTa year agoplease see my revised answer and let me know if it is clearer.Glue Python Shell is the right choice in your case. you can use the Script editor (legacy or from Glue Studio for development)Share"


Question: Root user cannot change S3 bucket policy

"Hi,I have created a new S3 bucket and am following this tutorial to host a static website: https://docs.aws.amazon.com/AmazonS3/latest/userguide/HostingWebsiteOnS3Setup.html#step3-edit-block-public-accessHowever when it comes to setting the bucket policy, it states that the root user has no access to manage bucket policy. I then went to the IAM console and gave another user S3FullAccess. This still does not help and there is no access available?FollowComment"

Answer: 0It wont allow setting a bucket policy if you have not cleared the Block All Public Access button. I had not cleared that and it was resulting in this invalid permissions error.CommentShareSidharthSanswered 2 years ago0IT WAS AN ERROR IN MY SETUP WHICH I HAVE NOW FIXEDCommentShareSidharthSanswered 2 years ago


Question: Unable to import sklearn.model_selection.StratifiedGroupKFold in Glue 4.0

"I'm running a Glue 4.0 job with some local algorithmic process.  I tested this on my local instance and it works fine.from sklearn.model_selection import StratifiedGroupKFold, RandomizedSearchCVBut when I run it on Glue, it gives me exception,ImportError: cannot import name 'StratifiedGroupKFold' from 'sklearn.model_selection' (/home/spark/.local/lib/python3.10/site-packages/sklearn/model_selection/__init__.py)The Glue 4.0 does have a scikit-learn=1.1.3, which are compatible with the version on my local instance according to this https://docs.aws.amazon.com/glue/latest/dg/aws-glue-programming-python-libraries.html not sure why this happens?Update IA little bit weird.  I tried output the sklearn version in the Glue job, it shows scikit-learn==0.24.2, which doesn't match the official doc.  Was there a mismatch?Update III tried to append below configs to force upgrade the scikit-learn version.  But just not a perfect solution since the lib version mismatch.--additional-python-modules: scikit-learn--python-modules-installer-option: --upgradeFollowComment"

Answer: "0Hello,I have replicated the use case in Glue 4.0 by using the scikit-learn version 1.1.3 which is default version installed for Glue 4.0 and after defining the same in glue job parameters and it works without any errors as follows:--additional-python-modules scikit-learn==1.1.3I have also tried to print the scikit-learn version in Glue 4.0 that returned 1.1.3 which confirms that Glue 4.0 uses default version of scikit-learn version 1.1.3.Also checking the source code of scikit-learn 0.24.2 I can see there is no “StratifiedGroupKFold” library under the path scikit-learn-0.24.2 2/sklearn/model_selection/ init.py. You can see the source code of scikit-learn in the reference document[1].Further running the same Glue 4.0 job by specifying the scikit-learn==0.24.2 in additional-python-modules parameter, job fails with similar error as you mentioned in your query:ImportError: cannot import name 'StratifiedGroupKFold' from 'sklearn.model_selection' (/home/spark/.local/lib/python3.10/site-packages/sklearn/model_selection/init.py)Also I tried adding the following parameters, and the Glue job worked without any errors:--additional-python-modules: scikit-learn--python-modules-installer-option: --upgradeI would suggest you to create a new job with Glue 4.0 and either specify the additional-python-modules parameter as scikit-learn==1.1.3 or simply run the job without specifying any parameter.If the issue still persists, in order to troubleshoot further, please feel free to open a support case with AWS by specifying the error along with job run ID using the following link. We will be happy to assist you.Reference:[1] https://github.com/scikit-learn/scikit-learn/releases/tag/0.24.2CommentShareSUPPORT ENGINEERrePost-User-1053431answered 4 months ago"


Question: Applying new CA CERT during maintenance but shows no changes pending

"My team and I have scheduled the new CA Cert to apply during the next maintenance period but when we look under the pending maintenance section for an instance, it is blank. Has anyone seen this before as an issue? Is there another way to see if the update is pending?FollowComment"

Answer: "0Our maintenance window came up and the CA Certs were applied without showing that maintenance was coming.So for future information, if you mark to change the cert during your maintenance window it will not show pending maintenance.CommentSharejbeckettanswered 4 years ago"


Question: How to use Amazon Linux 2 AMI (HVM) - Kernel 5.10 on Lightsail?

"Creating a new instance using Amazon Linux 2 still loads kernel v4 (April 13, 2022).FollowComment"

Answer: "0Hi,By default Linux2 Lightsail instance comes with kernel version 4.14.x. You can upgrade your kernel version to 5.10 using amazon-linux-extras library. First verify what kernel versions are available for your instance using the following command:sudo amazon-linux-extras |grep kernelIf one of the available kernel versions is enabled from the output of the above command. Use the following command to disable it:sudo amazon-linux-extras disable kernel-<x.x>If the current enabled version is not disabled you might run into the following error:  "Refusing because kernel-5.10 could cause an invalid combination". Once you have verified that none of the available kernels is enabled. You can proceed to install kernel 5.10 using the following command:sudo amazon-linux-extras install kernel-5.10 -yTo verify that the kernel has been installed use this command  rpm -qa |grep kernel. Then reboot the instance to activate the installed kernel.CommentShareCebianswered a year ago"


Question: best approach to run codebuild steps in parallel?

"I'm new to CodeBuild and have built a CodeBuild project that builds a set of AMIs.It takes a long time to run.  In other build systems like circleci and concourse I've used features that allow build steps to run in separate docker containers in parallel and the build system waits for them all to finish and then proceeds to the next step.  I was hoping to build each AMI in a separate parallel docker container instead of serially.Does CodeBuild support something like this?  I don't see that it does...If it doesn't, what is the best approach?  Is this a use case for CodePipeline?I could also pass in each ami as a parameter to the build and run n copies of the build simultaneously (trigger with a script).Thanks for any thoughts!FollowComment"

Answer: "0CodeBuild doesn't offer a native capability to do parallel tasks. You could split up your tasks outside of CodeBuild to execute them in parallel, if that's an option for your use case. CodeBuild supports multiple input and output, both in standalone mode or when used with CodePipeline.Documentation: https://docs.aws.amazon.com/codebuild/latest/userguide/sample-multi-in-out.html and https://docs.aws.amazon.com/codebuild/latest/userguide/sample-pipeline-multi-input-output.htmlCommentShareSubin Manswered 4 years ago0I think it's possible to do so.create several actions inside CodeBuild. For each action, point the "input_artifact" to the same source.CommentShareAWS-User-0380072answered a year ago0you can now use official batch builds and build matrixhttps://docs.aws.amazon.com/codebuild/latest/userguide/batch-build.htmlCommentShareOleg Abrazhaevanswered 5 months ago"


Question: Can I issue an ECDSA cert in ACM

Can I issue an ECDSA cert in ACM?FollowComment

Answer: "0Accepted AnswerAt the moment, ACM public certificates are issued using RSA keys with a 2048-bit modulus and SHA-256. [1]ECDSA certificates could be otherwise imported for the usage. [2][1] https://aws.amazon.com/certificate-manager/faqs/[2] https://aws.amazon.com/about-aws/whats-new/2021/07/aws-certificate-manager-provides-expanded-usage-imported-ecdsa-rsa-certificates/CommentShareweidianswered 8 months agoEXPERTTushar_Jreviewed 8 months ago"


Question: Feature request Route 53 SSHFP records

Does Route 53 support creating SSHFP records to publish trusted ssh keys for an A record? I think this would be a great feature to addFollowComment

Answer: "0The following documents are record types supported by Route53.As far as I can tell from this document, SSHFP records are not supported.https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/ResourceRecordTypes.htmlPlease check with AWS Support for additional feature requests.CommentShareEXPERTRiku_Kobayashianswered a month ago"


Question: DynamoDB - CloudWatch cost metrics

"Hello.I am looking for a way to get in CloudWatch any metric which giveme the information about the cost of my DynamoDB Tables. Or in the case, wich metric can helpme to identify the cost per each table.FollowCommentmyronix88 6 months agoI don't think that there is such a metric. Maybe you can try capacity units: https://www.datadoghq.com/blog/top-dynamodb-performance-metrics/Share"

Answer: "1Unfortunately DynamoDB does not emit any table level metrics for costs. This is something that you can of course implement but there are a few steps required:First of all tag each one of your tables with its own name, for that you can use the tool provided on our GitHub which will automatically tag all of your tables for you.Then you will have to activate those tags within cost explorer which you can see here. Please note it may take one or two days for the tag to start appearing in Cost ExplorerOnce that process is complete, you will be able to break down the prices of each of your tables individually. Furthermore, you can set application specific tags to group costings per application to understand how each of your applications are incurring costs.More info: Evaluate your costs at the table levelCommentShareEXPERTLeeroy Hannigananswered 6 months ago0Cloudwatch metrics won't provide the cost of the Dynamo Db table. However you can apply tags to the Dynamo table and get the cost by using cost explorer. Please go through the below doc for more details:https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/CostOptimization_TableLevelCostAnalysis.htmlCommentShareGautam Kumaranswered 6 months ago"


Question: Unable to connect to AWS IoT Core on Greengrass install

"I am attempting to install greengrass on an ubuntu VM. I get the Successfully set up Nucleus as a system service message, but it is not creating a greengrass core. And, my log says:com.aws.greengrass.mqttclient.AwsIotMqttClient: Unable to connect to AWS IoT Core.This issue looks similar to a previous questionI have tried two things. First, I created a deployment with a merge config below for the nucleus before running greengrass install command.{  "greengrassDataPlanePort": 443,  "mqtt": {    "port": 443  }}I have also tried stopping the greengrass service on my VM and then replacing all of the 8443's with 443's and also adding "port": 443 to the mqtt objects. This has not helped. I still get the Unable to connect to AWS IoT CoreFollowCommentMichaelDombrowski-AWS EXPERTa year agoIf your network is blocking non-443 ports, then you cannot update the configuration by using a deployment since deployments rely on MQTT messaging. Instead, use the manual installation instructions by creating an init-config file and passing it to the installer you may set the required ports: https://docs.aws.amazon.com/greengrass/v2/developerguide/manual-installation.html#:~:text=in%20an%20HSM.-,Install%20the%20AWS%20IoT%20Greengrass%20Core%20software%20with%20private%20key%20and%20certificate%20files,-Install%20the%20AWSThis was also explained in the issue that you linked, did you try the solutions there?ShareDarrenEB a year agoOk, I was successful at installing and creating a greengrass device using the manual provisioning. My issue now is that I have a ready-made docker image and process to deploy new devices using the automatic provisioning method, but it won't work behind a firewall that blocks 8443. One thing I guess I can do is pre-install on a network that does not block the port and include port updates using a merge deployment on nucleus before moving to a network that blocks the port.Is there a possibility in the future where the installer will allow setting the port selection when automatic provisioning?ShareLihao a year agoHi there. Have you tried using the init-config of manual provisioning when installing Greengrass with automatic provisioning? That should allow you change the port when installing. If I mis-understand your problem/use case, please help us understand more about your requestShareDarrenEB a year agoSomehow my previous user account was deleted and then after creating a new one with the same email address, I'm unable to post new questions.Thanks Lihao, I'll try that.Share"

Answer: "0Hello DarrenEB,We wanted to check if you have been able to try and still have issues. Let us know.CommentShareSUPPORT ENGINEERMonica_Lluisanswered a year agoDarrenEB a year agoThis is no longer an issue. Thanks.ShareMonica_Lluis SUPPORT ENGINEERa year agoThanks for confirming, DarrenEB. We appreciate the update. Look forward for more questions and contributions from you in re:Post.Kind RegardsShare"


Question: Intrusion Attempts

"Hi All,I am getting abuse from aws , So how can solve the below issue.Url: [WWW.HISTORYOFGAMING.ORG.UK/wp-login.php]Remote connection: [(My Webserver Server IP):52520]Headers: [array ('Host' => 'WWW.HISTORYOFGAMING.ORG.UK','Referer' => 'httpS://WWW.HISTORYOFGAMING.ORG.UK/wp-login.php','Accept-Language' => 'en-US,en;q=0.5','Accept-Encoding' => 'gzip, deflate','Accept' => 'text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8','User-Agent' => 'Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0','Cookie' => 'wordpress_test_cookie=WP Cookie check;','Content-Length' => '140','Content-Type' => 'application/x-www-form-urlencoded','BN-Frontend' => 'captcha-https','X-Forwarded-Port' => '443','X-Forwarded-Proto' => 'https','BN-Client-Port' => '56054','X-Forwarded-For' => 'X.X.X.X(My Webserver Server IP)',)]Post data: [Array([pwd] => historyofgaming2016[wp-submit] => Log In[testcookie] => 1[log] => historyofgaming[redirect_to] => httpS://WWW.HISTORYOFGAMING.ORG.UK/wp-admin/)]Comments:BitNinja presents a CAPTCHA to the visitor, if it is resolved correctly (either automatically via our Browser Integrity Check, or manually), the IP address will be removed from the greylist, if ignored, it will generate a security incident, and the connection will be terminated.FollowComment"

Answer: "1Hello,The situation appears to be missing some details, but it looks like you have a resource that is attempting to access this website's sensitive webpages. The port 52520 is rarely used. My best guess is your webserver has been compromised by a bad actor and is being used without your authorization. I recommend terminating the server and remaking it while securing your ports to your own private IP address. If you have any previous snapshots from before those might be useful to utilize in this situation.If you would like to dive deeper I would suggest moving this webserver to a secured VPC without internet traffic for further analysis. Check your CloudWatch metrics for abnormalities. As a safe precaution I recommend rotating your access keys and make sure you have Multi-factor Authentication enabled on all of your users (including root).CommentShareDavidanswered a month agoEXPERTkentradreviewed a month ago"


Question: ACE VIM mode regex

"When I use the following regex to substitute a string, it doesn't work::%s/\("XS[0-9]\{2\}\)/\1SQ/gWhen I open vim in terminal and do the same, it works.I also tried the::%s/("XS[0-9]{2})/\1SQ/gto make it more javascript like (although I don't know proper javascript syntax)FollowComment"

Answer: 0I found a workaround - to use CTRL-H to search/replaceCommentSharek-rexanswered 3 years ago


Question: MSK Connect - Exposing Connector Specific Metrics

We're planning to use Amazon MSK connect for Debezium Postgresql Connector to streaming the change data log from a RDS database. We want to utilize the JMX metrics Provided by the Debezium to monitor the connector status. But in MSK connect we don't see the options/configurations to enable these metrics.Does MSK connect allows exposing the connect specific metrics as we do it in Apache Kafka connect?FollowComment

Answer: "0Hi there, thank you for providing your valuable feedback on the service. As of current JMX endpoints are not exposed in MSK Connect. I have raised a feature request with the service team on your behalf. While I am unable to comment on if/when this feature may get released, I request you to keep an eye on our What's New (1) and Blog pages (2) for any new feature announcements. Currently cloudwatch metrics for connectors are available which are helpful for general understanding of the connectors state.(1) https://aws.amazon.com/new/(2) https://aws.amazon.com/blogs/aws/CommentShareSUPPORT ENGINEERHarshith_Manswered a year ago"


Question: How to Get CodeBuild to Build Develop NOT the PR Branch?

"Hi, I am trying to setup CodeBuild to build the develop branch that the PR is merged into rather than building the actual PR branch. The reason for this is sometime peoples PR brances don't yet include the develop changes made since their PR was created.Can someone tell me what I need to do in the Source section of CodeBuild in order to achieve this? thanksFollowComment"

Answer: "0In CodeBuild, you can use the source version to specify the branch.Check these documents for more information:Source version sample with CodeBuild and Create a build project (console)CommentSharejoahnaanswered a year agoBen Iffland a year agoHi thanks. Yes I do set the source version to develop and that works fine for manually triggered builds, but when I want to automatically trigger my pull requests and to build on various event, I can't figure out how to set that up to build the develop branch when a PR is merged into develop. What seems to happen is that the PR builds but it the PR branch as opposed to the develop branch that it is merging into.Share"


Question: LumberYard Installation error.. Account Permissions Requested

"While installing Lumberyard, an error comes up for multiple packages, as below: "Unable to download the file.....(installation modules in <<"install required SDKs" in the Setup Assistant>>).....You do not have permissions to access the file you are requesting. Check your account permissions"I have searched alot for any post that may show where are the account permissions to enable, but I keep failing.  Kindly assist...!(a screenshot is attached)Thank you ! :slight_smile:REMOVEDUPLOADFollow"

Answer: "0Accepted AnswerHi @REDACTEDUSERlmbr_waf configurecommand it detected your Android SDK and tried to validate it.  Unless you want to actually build an android game, you can disable android by opening yourdev/_WAF_/user_settings.optionsfile in a text editor and disabling that platform explicitly.   Be sure to remove the semicolon ';' at the beginning of the lines.[Android Project Generator]generate_android_studio_projects_automatically = False[Platforms]enable_android_armv8_clang = FalseAfter this the lmbr_waf configure command should not attempt to use android.Here is the documentation on installing and using FFmpeg and LibAV, though I am not certain it is updated for 1.24 https://docs.aws.amazon.com/lumberyard/latest/userguide/component-videoplayback.htmlIf you want to remove the dev/SamplesProject and dev/StarterGame folders to save on disk space you can remove them, they are just sample projects and not needed when you are making your own project.SharerePost-User-5841084answered 3 years ago0Apologies, errors of this kind do seem frustrating.The permission error is more likely on the Lumberyard side (you are downloading the SDKs from our CloudFront distribution and maybe the permissions are somehow wrong for you)Can you just clarify what version of Lumberyard you are using, forum says LY 1.19 but screenshot appears to be from 1.24.1 ?SharerePost-User-5332620answered 3 years ago0Dear Pip, thanks for responding :) and yes you are right, the version is 1.24.1.0, and I had just downloaded this version today early hours.  So the installation was attempted using the latest version of the installer(setup assistant).  If there are any configuration files for me to adjust or change, then please let me know.Hoping you will be able to guide me... thank you :) !!SharerePost-User-3783138answered 3 years ago0Hi @REDACTEDUSERSharerePost-User-5841084answered 3 years ago0I'm trying to see where the logs get written just to see if we can see more about what specific error the installer is seeing.  However, you'll get the "You do not have permission to access to the file you are requesting. Check your account permissions when you encounter an AccessDenied/Network issues downloading an SDK from Lumberyard's CloudFront so it seems unlikely to be related to your machine permissions.Am running the 1.24.1 downloader to see if I can reproduce (but as my machine is inside the Amazon network so its probably going to work).Can you download any of the SDKs?SharerePost-User-5332620answered 3 years ago0Yes please, I have attached screenshots again, so you can see the packages that are returning an error. Others seem to go through pretty much ok. So np with some.[If you are a part of awsgametech team, pls find that for some reason there is restrictions on my account where I cannot upload multiple images(as I am a new user), can you pls remove that for me.. I am not spaming right?   Now due to this meaningless restrictions I have had to combine multiple images into one, causing you the inconvenience to scroll down the image... why cant amazon ban users from posting multiple images when they are reported by users, rather than slapping restrictions on new users to the forum?  In this post I am only expressing my experience with installation and answering your queries, and I guess there is absolutely no harm done...)REMOVEDUPLOADSharerePost-User-3783138answered 3 years ago0[quote="lokkkiii, post:6, topic:8895"][If you are a part of awsgametech team, pls find that for some reason there is restrictions on my account where I cannot upload multiple images(as I am a new user), can you pls remove that for me…[/quote]Hi @REDACTEDUSERSharerePost-User-5841084answered 3 years ago0Dear Pip, thank you for your assistance.. You have been very kind and helpful so far.. But the other day, I just uninstalled the entire package and deleted all folders and then reinstalled it... And this time all the packages went through... So, good news, its working great... Bad news, I didn't help you find any bug that may have caused it...  And, tough news, in the Optional SDKs, I am unable to install Clang, FFmpeg and LibAV even though I have followed all the steps in the instructions by Lumberyard....(those addons i Have separately installed too)My Request::: Please help users with a complete and packed-in product, instead of requesting users to manually install from internet sources... We do not know which version is compatible with it, and when I look for any older versions of the SDKs, it is very difficult to find them archieves....Hope you would pass a ping to them Dev Teams up there, so that this process is a little less tedious and immediately ready to use when installed(even if it goes up to 20GB of download size... it doesn't matter... as people like to start working with it, rather than struggle to just get it installed...)So far Im enjoying learning this awesome Engine... You may please close this issue as resolved... Have a great day!SharerePost-User-3783138answered 3 years ago0Dear petrocket, thank you for responding to this... You and Pip seem really nice and earnest to helping people work with LumberYard... Its great when the support/forum Admins are as quick as you guys to respond and listen out... So far, I have liked the process of learning about LumberYard.  But as a new member, if you guys feel I can contribute to this forum in any way, then I would like to get involved and be a part of it.. And thanks again, and have a great day again! :) 😃SharerePost-User-3783138answered 3 years ago0Thanks for the images which show which packages are failing. We've tried a few times in a few different cirumstances to install fresh versions of LY 1.24.1 and download the packages but so far everything has worked.Can you see if theres anything interesting in the set-up assistant logs? They should be in D:\Program Files\Lumberyard\1.24.1.0\dev\Tools\LmbrSetup\Win\logs\SetupAssistant. They may contain more details about the failures (it is a pretty verbose log, but it would be interesting to see the section where it gets the manifest for AMD_AGS / downloads it)WRT to the forum preventing new users from posting more than one image at a time, I've passed this on to the forum team as feedback.SharerePost-User-5332620answered 3 years ago0Hello Again Pip... After completing the basic training tutorials on youtube, when I finally decided to open the Editor, now I am receiving the following error..  I am really not sure what is this regarding.. And I am totally feeling helpless trying to just get started with this software..  Why can't this engine be a simple install and run program like Unity or Unreal or even Godot? Some of them charge heavy later and this is free, yes I agree.. But Amazon is a world leader in so many fields, and why not with this.. I really hope the Dev Team considers making the time spent on this engine a good experience for users who are beginners.. Pls help...REMOVEDUPLOADRequest:  Can any one from Developer Team pls contact me, and take all my system logs and do any kind of research they want to do on my system to identify the bug thats causing these issues please?Trying to load multiple attachments is anyways restricted and I do not know how to get this fixed faster, as I am fixed on using only LumberYard, after seeing the gameplay achieved on this GamePlay (youtube link, check n see)SharerePost-User-3783138answered 3 years ago0Hi @REDACTEDUSERIn addition, please open Windows "Add and remove programs" and verify the other redistributables (2012, 2015-2019) are installed.  There may also be an issue where Setup Assistant incorrectly lists them as installed on your device if only some of them are installed.SharerePost-User-5841084answered 3 years ago0Hello @REDACTEDUSERREMOVEDUPLOADEDIT::@REDACTEDUSERCan you guys be considerate in atleast providing quick help so that I can do something for my family?  At the pace of one reply a day, it will take 25years to find any bug or even to get the engine to work....Can anyone be a little more involved with this issue plssss.....SharerePost-User-3783138answered 3 years ago0Hi @REDACTEDUSERSharerePost-User-5841084answered 3 years ago0Hi @REDACTEDUSER1  >  When the installation finally finished from the "Setup Assistant", there is the "Summary" section, which has the "Configure Project" button, and when I would run that, I tried clicking on "New Project"... It gave me the same error.2  >  Then when I directly clicked on the "Launch Editor" button in Summary section, it gave me the same error.3  >  Now when I am clicking the "LumberYard Editor" from start menu, it is the same.So for some reason, it gives me the error for the editor.exe which is in the folder::::D:\Program Files\Lumberyard\1.24.1.0\dev\Bin64vc142I tried to even run it as Admin, and in compatibility mode, and lastly today, due to a hopeless feeling looming here, I opened the website POST and downloaded the " Client Zip Files " for PC and copy pasted it over the existing folders of the 3rd Party folder in my PC and now again, multiple addons are showing as pending to be installed.If you know how to remote in and solve this problem, can you pls do so? I really want to get started with this.SharerePost-User-3783138answered 3 years ago0@REDACTEDUSERIf you have completed those initial steps successfully, how far do you get when following the "Creating a new project" documentation?Based on your screenshot above (the one that says the editor failed to startup because it couldn't load the video playback gem) it looks like you were able to run the Project Configurator and create a new project with the Video Playback Gem enabled or installed some project that had that gem enabled, is this correct?  If so, there was probably some issue with compiling the project, but would like to confirm you have attempted to compile a new project first.SharerePost-User-5841084answered 3 years ago0Dear @REDACTEDUSERBut when I completed the tutorials, I was only and only trying to open the """"Lumberyard Editor"""" (like shown in screenshot)   which is in the 'start menu'(above the Setup Assistant,, so that I can have a look at it, first.    Please eliminate the theory if I was running any of them samples, which I didn't...  Since the beginning I was trying to open the Editor.exe (which is in D:\Program Files\Lumberyard\1.24.1.0\dev\Bin64vc142)   and try to have a look so I know what it feels to look with the editor.   By my bad luck, the background was a vegetation sample project, and the queries are only if I am trying to open a sample project, which I am not....I am directly trying to click on the screenshot related buttons from 4 places, and all of them give the same error..   Please forget any sample project, which I have never even tried to open yet plss..REMOVEDUPLOADEdit::And as you have pointed towards the "videoplaybackframework" Gem, I have been trying to find a way to get the missing dll file that it is throwing in the error.  Is there anyway that I can get that file?And also, the second error in the  Reply  above , which is about failing to initialize the CryEngineSystem, and says I need to whitelist an IP,   I am clueless of what it is asking me to do.  Any suggestion on the second error please?SharerePost-User-3783138answered 3 years ago0@REDACTEDUSERDid you add the video playback gem to StarterGame in Project configurator?  If so, you will need to recompile the project before running it.The "Create new" button in the project configurator should not launch the editor - it should open a form allowing you to enter a project name and build it.Were you able to get through the tutorial on creating a new game project and the project compiled successfully?UPDATE - I should provide the link for building an existing project https://docs.aws.amazon.com/lumberyard/latest/userguide/game-build-intro.html  Please note if you are using Visual Studio 2019 you will need to uselmbr_waf configurelmbr_waf build_win_x64_vs2019_profile -p allSharerePost-User-5841084answered 3 years ago0Thanks for hitting back @REDACTEDUSERAnd as you have pointed towards the “videoplaybackframework” Gem, I have been trying to find a way to get the missing dll file that it is showing in the error. Is there anyway that I can get that file added back in the main folder?And also, the second error in the Reply above , which is about failing to initialize the CryEngineSystem, and says I need to whitelist an IP, I am clueless of what it is asking me to do. Any suggestion on the second error please?Also, for your most recent update, it threw me an error.REMOVEDUPLOADJust guessing, is the space in "Program Files" causing all these issues to happen?My C:\Program Files also exists, which happens to be the default.   But I installed lumberyard in D as I have no space in C driveSharerePost-User-3783138answered 3 years ago0@REDACTEDUSERKindly guide me to a page on https://docs.aws.amazon.com/index.html where I can find instructions on adding the 2 libraries correctly please.. That would be really appreciated :slight_smile:And there are a few folders in "Lumberyard\1.24.1.0\dev" which are namely, 'cache',  'SamplesProject' and 'StarterGame'.   I understand that these are the officially provided samples of a LumberYard project, but is there any safe way to remove it please.Thank youSharerePost-User-3783138answered 3 years ago0@REDACTEDUSERI had created a test project named "Check12", and it took an awful while(3.5hrs and it added about 16-19GB of data) to get ready. But it was only testing if Lumberyard would work.  So, I wanted to know if it is safe to delete the folders below:\Lumberyard\1.24.1.0\dev\BinTemp\Lumberyard\1.24.1.0\dev\Solutions\CHECK12_vs2019.depproj\Lumberyard\1.24.1.0\dev\CHECK12The basic doubt is how do I delete the test project "Check12" without any residue left due to space constraints, and I can move ahead with a serious project.Thank you for your reply in advance. I really appreciate your time and patience ..   😄SharerePost-User-3783138answered 3 years ago0@REDACTEDUSERI really appreciate your patience all along. You may kindly close the thread as resolved if you like.  Lumberyard is as amazing as shown on the landing page, and gives great hopes for my work ahead.!!If there is anyway I can be a part of this awesome project, please let me know.  Have a great journey ahead!!SharerePost-User-3783138answered 3 years ago0Hello @REDACTEDUSERYou can safely delete the content of BinTemp, Solutions and your test project folder.Note that prior to this you should change the default project back to StarterGame otherwise some config files will still refer to Check12.BinTemp is safe to delete BUT you'll have to recompile again the engine when you'll create another projectit took an awful while(3.5hrs and it added about 16-19GB of data)This is because you probably didn't compile the engine beforehand, so that's what happened in the background and took more than 3 hours.Another solution is to go to BinTemp and remove only the folders related to Check12 so you don't have to recompile engine again.The Solutions folder can be deleted, it will be recreated on the next call tolmbr_waf.bat configure(this should be called in the background if you create a new project)SharerePost-User-1948844answered 3 years ago"


Question: "Website suddenly down, not able to even connect to Putty, able to ping domain from command prompt"

"Website suddenly stopped responding, browser says that '<domain> took too long to respond'. However, if I try to ping domain from command prompt, I am able to ping. I am able to ping public IP allotted to my instance. However, I am not able to connect to putty. Account team of AWS says that they do not see any active domain. Account is not under suspension. I can not even check the status of running processes as I am not able to connect to putty. I do not think this can be caused by any corrupted code or DB issue, as Putty is not even connecting. Please advise what could be the possible issue.FollowComment"

Answer: 1HelloAssuming there were no changes done to the ACL or security group rules that block TCP traffic but allow ICMP (Ping) more likely scenario is configuration within the instance is causing an issue. I would try getting into the instance to further debug the issue and since SSH via Putty is not an option you can try either accessing the instance via EC2 Connect or Session Manager.EC2 Connect Configuration -> https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-connect-set-up.htmlSession Manager -> https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-ec2.htmlHope this helps to get into the instance and further debug this issueCommentShareBisinaanswered 16 days agoEXPERTskinsmanreviewed 16 days ago


Question: Cannot SSH to an EC2 Hosted Ubuntu vpc instance

I am running into a wall trying to SSH using Putty from a Windows device and I get an error:  ****No supported authentication methods available(server sent: publickey)  when I attempt to run the command: ****ssh -i keyname.pem ubuntu@ec2-xxx.compute-1.amazonaws.comI get a connection timeout.I've recreated the key a couple times and continue to get:  access denied (publickey) errors.FollowComment

Answer: "0Make sure your key is only readable by you - chmod 600 keyname.pemTry ssh -vvv -i ... and see if it gives you any more details.And this is just a hunch, I'm guessing it's the latest version of Ubuntu you've built your EC2 with; what version is running on the host that you're trying to SSH from?It's possible the new version has deprecated some old & insecure encryption algorithms, but when attempting the initial key exchange your SSH client is only able to offer up these.You can try spinning up an EC2 running an older version of Ubuntu and confirm that you can login with the key on this older version. If you can do that then it proves the keys are good.CommentShareRWCanswered a month ago"


Question: How to resolve RDS MSSQL storage-full state?

"Hi,I have an old SQL Server Web Edition (14.00.3381.3.v1) in storage-full state. What would be the best way to resolve this situation?I have tried to follow e.g. guides:How do I resolve problems that occur when Amazon RDS DB instances run out of storage?How can I troubleshoot storage consumption in my RDS for SQL Server DB instance?And a dozen other guides.I tried to add more storage but it stays in this state            "PendingModifiedValues": {                "AllocatedStorage": 200            },I also tried to enable Storage autoscaling many days ago but it hasn't helped either.From RDS events we can see the following:Storage for tempdb log files is almost full. Shrink the tempdb files, or reboot the DB instance to reset the file size.The free storage capacity for DB Instance: <name> is low at 0% of the provisioned storage [Provisioned Storage: 39.87 GB, Free Storage: 0 B]. You may want to increase the provisioned storage to address this issue.But the suggested reboot is not an option as it's not allowed when db is in the storage-full state.Connection to Database works and I have tried to understand and fix the issue, but unfortunately failed. Some information is below:"2023-01-10 00:50:55.420""spid53""The transaction log for database 'msdb' is full due to 'LOG_BACKUP'.""2023-01-10 00:51:01.290""Backup""Error: 18210, Severity: 16, State: 1.""2023-01-10 00:51:01.290""Backup""BackupIoRequest::ReportIoError: write failure on backup device 'D:\rdsdbdata\BACKUP\mas***.database_backup'. Operating system error 112(There is not enough space on the disk.).""2023-01-10 00:51:01.290""Backup""Error: 3041, Severity: 16, State: 1.""2023-01-10 00:51:01.290""Backup""BACKUP failed to complete the command BACKUP DATABASE mas***. Check the backup application log for detailed messages.""2023-01-10 00:51:55.030""spid54""Error: 9002, Severity: 17, State: 2."DBCC SQLPERF(LOGSPACE); ReturnsDatabase NameLog Size (MB)Log Space Used (%)Statusmas***0,992187557,03740tempdb1,87552,578130msdb0,99218751000rdsadmin81,99219100,00480users4,36718816,133720Shrinking the files hasn't been working for me with the command DBCC SHRINKFILEPretty much all the commands against msdb and rdsadmin databases have failed because of insufficient rights.Even deleting the database (from the AWS console) fails with a message saying "We're sorry, your request to delete DB instance <name> has failed".I'm not specialized MSSQL/RDS so any pointers on how to proceed would be highly appreciated!Thanks!FollowComment"

Answer: "0I would recommend you enter the rdsadmin db and change the type of "recovery model" either from full to bulk-logged or from bulk-logged to simple.After that try to do a RUN DBCC SHRINKFILECommentShareJose Carlos Carrasco Vergaraanswered 5 months agojkolisev 5 months agoThanks for your suggestion. Unfortunately, I'm not sure how to do that as the admin user does not have permission to change rdsadmin database (as far as I know).  https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.MasterAccounts.htmlShare"


Question: InvalidQueryException: Frozen nested collections are not yet supported

"Hi,looks like frozen nested collection are not supported on AWS keyspaces.Is there any documentation about this issue anywhere?I could not find it in the AWS keyspaces - Apache cassandra compatibility notes.FollowComment"

Answer: "0Accepted AnswerHey alextk, sorry to hear that you could not find the docs. We will continue to close gaps in supported apis/types.  The following page list the current supported types.https://docs.aws.amazon.com/keyspaces/latest/devguide/cassandra-apis.htmlCould you share your model for the table and your queries?CommentShareMichael_Raney_AWSanswered 2 years ago0What is the suggested alternative from AWS keyspaces instead of Frozen? If I am not wrong, avoiding Frozen leads to enormous tombstone which makes sense in my use case where the whole collection data set is updated at once and not single item in the list. Someone, can throw more light on this?CommentSharesagarmanswered 2 years ago0hi @sagarmAmazon Keyspaces does not have the same performance tradeoffs for working with collections. Customers can change individual items in a collection or replace the entire collection without creating tombstones and degrading performance. Customers can expect single digit millisecond operations on row access.depending on the collection type you can create a high carnality key so the structure gets flattened.Nested structure{'key':{'nestedkey':'nestedvalye'}}to flattened structure{'key#nestedkey':'nestedvalue'}Alternatively, If you are replacing the entire collection on every update, then a blob will work in a similar way.CommentShareMichael_Raney_AWSanswered 2 years ago"


Question: Athena and Data Catalog: how to query json files structured as simple array of records

"I probably missing something simple here. I have data files that crawler discovers and classifies properly:[  {    "budge": 150,    "cost": 1.44,    "attrsales": 9.93,    "campaignName": "camp 1"  },  {  ... another record  }]However, Athena wouldn't query table from Data Catalog unless the file is json objects with new line.It prints error HIVE_BAD_DATA: Error parsing field value for field xxx, trying to parse a whole object from json array.If data files stored like this, it queries fine{"budge": 150,"cost": 1.44,"attrsales": 9.93,"campaignName": "camp 1"}{ another one... }Is there a way to query files with proper json format from the Data Catalog?AWS Crawler can index and discover both. But since we're receiving data in properly formatted json, I wanted to keep it the original files.How do you deal with this Athena feature?FollowComment"

Answer: "0Hi,as described in the documentation here, you could try changing the serde for the table to the** Amazon Ion Hive SerDe**.Alternatively, you could keep the JSON file in the the source format, but use an AWS Glue job to quickly create a more compact version using Parquet or ORC data Format, which depending on the size of your data could be quite faster and more cost effective.Hope this helps,CommentShareEXPERTFabrizio@AWSanswered 8 months ago"


Question: AWSIoTMQTTClient - how can I tell if the client is offline?

"Hello all,I am new to aws IoT and AWSIoTPythonSDK :)I have a python script (which is based on basicPubSub.py) that reads small files from directory and send their content to topic using  :self.myAWSIoTMQTTClient.publish(topic, message_to_send, 1)I have  long disconnection periodד, and i want to stop sending message to the topic while the device is offline (I dont want the messages to be send to the offline queue).Can I tell the client status using the SDK?p.sI thought about copy the logic from MqttCore.publish() method, but it based on:self._client_status.get_status()and I dont think I can access this data...p.s.sI can NOT use greengrassThanks,AyaFollowComment"

Answer: "0I found the solution:    self.myAWSIoTMQTTClient.onOffline = self.myOnOfflineCallback      self.myAWSIoTMQTTClient.onOnline = self.myOnOnlineCallback  def myOnOfflineCallback(self):      self.sent_to_topic = False      print("OFFLINE")  def myOnOnlineCallback(self):      self.sent_to_topic = True      print("ONLINE")  def publish(self, topic, message_to_send):      if self.sent_to_topic:          self.myAWSIoTMQTTClient.publish(topic, message_to_send, 1)          print(f"Published topic {topic}")CommentShareAWS-User-1974648answered 4 years ago"


Question: Can Bots built in Lex take advantage of Facebook quick replies?

"Hi,Does anyone know if there is someway to integrate Lex bots with Facebook quick replies?Facebook quick replies provide a way to present buttons to the user in response to a message so you can guide the conversationhttps://developers.facebook.com/docs/messenger-platform/send-api-reference/quick-replies?locale=en_USThank you in advance.FollowComment"

Answer: "0Accepted AnswerLex supports Response Cards for multiple platforms (Facebook, Twilio, and Slack).  Here's an example:http://docs.aws.amazon.com/lex/latest/dg/ex-resp-card.htmlGood luck!CommentShareAWS-User-0710715answered 6 years ago"


Question: Ethereum node - private key

"Hello! Please help me with one question.It is known from the documentation that only the "eth_sendRawTransaction" raw sending method is supported for sending. And this requires a private key (in the article we found how to send a raw transaction.In this article it is written about a private key that can be extracted from a file using a library on JS).But it isn't clear to us where to get the private keys of the addresses created on the node. And it isn't clear where you need to get a file that contains secret data.And if there are examples in C#, I would be very grateful.Thank you!FollowComment"

Answer: "0Hello, we don't allow for wallet creation/management on our nodes themselves as far as I'm aware. I think those APIs are disabled. The customer should be custodying/managing the private keys and signing transactions prior to sending to the Managed Blockchain Ethereum nodes.CommentShareSUPPORT ENGINEERStewyn_Canswered a year ago"