Question: publicly accessible web site video

"I have been trying to publish a video(background video) on my website.However, I can't seem to get it publicly accessible.Here is the URL.https://web-site-video.s3.eu-west-2.amazonaws.com/SL-CROSS-NDR-720HD-9999.mp4Is the name of the bucket - web-site-videoWhy am I getting this error message, when the name of the bucket is correct?Can anyone explain what am I doing wrong, because I am really, really frustrated whit the whole thing. It looks like I need a PHD on computer science in order to make a file publicly available.FollowComment"

Answer: "0Accepted AnswerThanks for the screenshot. If you copied the content from the documentation, it looks like there is a blank-space infront of the curly brace of line 1 in the policy. Just delete that blankspace to and try saving the policy i.e. the first character of the policy should be {Before you correct this, if you expand the arrow infront of 'API Response', you could probably see a message like this --> "Policies must be valid JSON and the first byte must be '{'"CommentShareRajesh Sanswered 9 months agorePost-User-8659567 9 months agoThank you RajeshShare0What is the error description/response? Is this error while creating the policy? If so, worth checking the syntax of the policy. Here is an example policy  -https://docs.aws.amazon.com/AmazonS3/latest/userguide/example-bucket-policies.html#example-bucket-policies-use-case-2CommentShareRajesh Sanswered 9 months ago0Here is the message when I try to create the policy.The error message appears when I try to create the policy.The syntax of the policy shouldn'tbe a problem, as I copy and paste the policy and replace the Bucket name with my bucket name.JSONLn 13, Col 44Unknown ErrorAn unexpected error occurred.API responseCommentSharerePost-User-8659567answered 9 months ago"


Question: ECS Managed Container Instance Scaling Over Provisioning

"I have an ECS cluster with a capacity provider backed by EC2 container instances and managed autoscaling. The autoscaling group permits scaling to 0 when no tasks are running/requested.When a task is requested and there are no currently running instances, I'm finding the autoscaling group is provisioning two instances where one would have been fine to fulfill the request. Is anybody else seeing this behaviour? is it expected? This only happens when the ASG desired count is 0 - i.e. there are no requested tasks and no container instances running in the cluster.FollowComment"

Answer: "0This is likely due to the scaling policy that is currently configured for your ECS cluster. You can adjust this to scale out more slowly one instance at a time if you wish. Some documentation to help you with this can be found here: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/service-auto-scaling.htmlCommentSharebenduttanswered 4 months agorePost-User-9358417 4 months agoThanks for posting.in this case, the scaling configuration is not for ECS. Rather it's for EC2 instances that go on to become ECS container hosts. And it's managed scaling so i can't configure anything myself. I did look at the config through the CLI and I can see the StepAdjustments element is empty.Share"


Question: GameLift Unreal Engine 5.1 Dedicated Server - SERVER_PROCESS_TERMINATED_UNHEALTHY

"We currently hosting our UE5.0 game dedicated server on GameLift with the SDK version of 3.3.3. We're able to create game session successfully and is now live.Now we're updating our game to use UE5.1, however when we upload our dedicated server build to GameLift, we either able to get 1-2 game session instantly terminated (40-60s) or a lot of SERVER_PROCESS_TERMINATED_UNHEALTHY event code on our Fleet.According to the documentation, we need to check the game session logs. However there's no way for us to access the logs. We've followed this to see whether the logs can be downloaded from the dashboard with no success.We have tested locally via Unreal Engine Editor as Client with simulated server without issues. Appreciate your assistance on this.FollowComment"

Answer: "0Hi,Have you looked at the Logging server messages documentation which talks about how you can emit and fetch game session logs on your game server.To elaborate, once you have enabled logging, it should be accessible viaGetGameSessionLog API.The "Game sessions" tab on the fleet details page through the AWS GameLift Console.Alternatively if your game session never went ACTIVE, you can remotely access the instance directly. Once you're on the instance you can find your logs under C:\Game for Windows or /local/game for linux.If you're still facing issues, please create a Support ticket, and the GameLift team can help take a deeper look into what's going on.Thanks!CommentShareShashankJ_AWSanswered 3 months ago"


Question: "After production activation, all emails sent were in "Transient bounces" status. How to resolve this issue?"

"We have 2 aws SES accounts.After we activated the second SES account in production mode, all the emails sent through this account were in "Transient bounces" mode. The exact same emails can be sent from the first SES account.Did we miss any configuration? Or there is something else to be done?BTW, these emails are all sent to gmail, but in different date and time.ThanksFollowComment"

Answer: 0Please explain more about your configuration in regards to domain identities and configuration sets. Or open a support case for troubleshooting assistance.Subscribe to the event notifications to get a copy of the bounce messages to obtain more details. https://docs.aws.amazon.com/ses/latest/dg/monitor-using-event-publishing.htmlCommentShareJesse_Tanswered 2 months ago


Question: How to use a TfidfVectorizer model in real-time with endpoints

"During training, I created a TfidfVectorizer model and trained it to generate features from a database. How can I reuse this model to generate the representation of new texts, which will be classified by the endpoint?FollowComment"

Answer: "0You can try SageMaker Inference Pipeline, and add the TfidfVectorizer as a preprocessing step. Also take a look at this step-by-step blog example.CommentShareS Lyuanswered a year ago"


Question: AWS Location geofence tracker

"I want to create or update a Tracker in AWS Location. If the tracker name does not exist, I want to create the tracker, otherwise I want to update the tracker. What is the best practice to achieve this? I was thinking about getting all the trackers and then determining if the tracker name in question exists. Is there a better way to do this? Here is some pseudocode of what I was thinking about to achieve this:const trackerName = 'my-tracker-' + event.truckName;// List all the trackers...const location.listTrackers(params = {}, function(err, data) {   // Logic inside the callback to determine if trackerName exists...   if (<trackerName already exists >) {      location.createTracker(); // create the tracker   } else {      location.updateTracker(); // update the tracker with vehicle position   }  });FollowComment"

Answer: "1Yes, this is how you could check if a tracker exists. Alternatively you could call another operation on the tracker and see if you got a ResourceNotFoundException.However, I am curious about what you are trying to achieve, because your code sample, mentions location.updateTracker(); // update the tracker with vehicle position. UpdateTracker is an API to update the properties of a given tracker like its description and not for updating device positions.Can you explain a little bit more about what you are trying to do, I may be able to help... (for example, why are you creating a tracker per truck?)CommentShareAWS-User-7918543answered a year agojim_b a year agoPerhaps updateTracker isn't the appropriate API call. I am only trying to update the position for a given truck (not the properties of a tracker).What I am trying to accomplish is the following:-Track the position for all of the trucks in the fleet-Link a tracker to a Geofence collection, with a couple thousand geofences in that collection-When a given truck enters or exits a geofence, I am going to use EventBridge to target a lambda to store the data for that truckThe tracker will only live for a limited time when a truck is approaching a geofence, and then get destroyed. I want to get the specific truck information upon enter/exit a geofence in the collection. Seems to me that it would make sense to have a 1-to-1 mapping of tracker to truck.Sharejim_b a year agoDumb question: can you track multiple vehicles with one tracker? I just looked at the API docs for "batchUpdateDevicePosition", and it looks like DeviceId is part of the parameters to Update. Would it make more sense to just have one tracker for our ~8,000 trucks?Share1Yes. You can track thousands of devices with a single tracker. BatchUpdateDevicePosition also allows you to associate 1-3 attributes with positions that you send to tracking service, and you will get them from EventBridge with the Enter/Exit events. (see PositionProperties)In your case, you could have just one tracker and send truck specific information like the truck name with each position and use it in the lambda that will be your target for EventBridge.Thanks,OrenCommentShareAWS-User-7918543answered a year ago"


Question: Internal Server Error from API Gateway when sending queries through gateway to Lambda function connected to RDS database

"I have an S3 website that is connected to a database through an API Gateway and a Lambda function. The API Gateway receives SQL queries as text and passes them to the Lambda function. The Lambda function runs those queries against the database and returns the query results to the API Gateway. The API Gateway then sends the results back to S3. This usually works fine, except whenever I use an Insert statement with multiple values. Whenever I try to insert multiple rows into the table at the same time, I get an internal server error with code 500. How can I avoid this?FollowComment"

Answer: "0Maybe your function times out? Check the function logs to find out if it failed or not. If all OK in the function, enable execution logs in API Gateway and check why it reports a failure.CommentShareEXPERTUrianswered a year ago0In addition to Uri - review the following url which does have some good tips to resolving the issuehttps://aws.amazon.com/premiumsupport/knowledge-center/http-5xx-errors-s3/CommentShareAWS-User-5458301answered a year ago"


Question: I've got a HUGE mystery for you. Crazy DNS weirdness

"I could really use some help with this. Nothing makes sense. I have public IP's from new EC2s forwarding to the public IP of an EC2 that I terminated and I have no idea how or why it is happening!So, I created a fault tolerant Wordpress site like this:First, I created a custom VPC with public and private subnets- the web servers in the public and the RDS instance in the private. (security groups and such are all working).Two EC2s in an auto scaling group behind load balancer. I set up an A record/alias pointing to the Application Load Balancer so that read traffic would be directed to these instances.I have an EC2 that I use at the "writer node" for the site. I log into Wordpress using this EC2s public IP and update the site. I have a crontab setting that checks for updates every minute and syncs the WP code into one bucket and the WP media into another bucket. Of course, the actual WP database is sitting on an RDS instance.If one of the EC2s behind the load balancer dies, a new one is spun up, a bootstrap scripts installs WP, Apache, etc... then checks the S3 buckets for the current copies of the code.I have a Cloudfront distribution that serves the media (WP uploads folder) from an S3 bucket, and I have a redirect in the .htaccess to use that Cloudfront distribution for the media.So, everything was working great! I could enter the DNS address for the load balancer- bam! I could enter the public IP address for the writer-node EC2- bam. No problems at all. Then I plugged Route 53 into the mix and everything fell apart and I can't seem to find any way to fix it short of completely rebuilding everything. Personally, I need to know WHY this happened, so I hope that YOU can provide some insight. Here's what the problem looks like:I transferred a domain that I owned to Route 53. When it was cleared, I created a new hosted zone, an A record/alias, and pointed it at the ALB. So good so far. Except it didn't work.After searching, I found a thread that had me create a duplicate hosted zone and copy the name server info over to the previous hosted zone fields. Then, when it was working, delete the old hosted zone. It worked! So, I had an A record/alias pointing to my ALB, then I created another record with the phrase write.myurl.com to my writer node IP address.Well, it sort of worked. I thought it was working fine, but then at some point I noticed that when I went to myurl.com, it was loading the public IP address of my writer node instead of any of the EC2s behind my ALB. So, I deleted that writer node record from the hosted zone (write.myurl.com). Nope. Here's where it gets weirder.Even if I copy and paste the DNS address of my ALB into the browser window, it still goes to the public IP of the writer node. Even if I copy and paste the public IPs of the individual EC2s behind the ALB it still goes to that writer node EC2.Weirder yet! I stopped the writer-node instance so it would get a new public IP and then assigned an elastic IP to it, yet everything STILL forwards to the original public IP address that was assigned to that server.I of course tried every possible option in Route 53- adjusting TTLs, deleting and creating records, and even deleting the whole dang zone- everything ALWAYS resolves to this IP: http://18.217.68.109 no matter what, and that is no longer the IP address to that server!And even weirder, that IP now has a Hello World message that pops up, which just happened today LOL! I can't ssh into it because it's not in my account- I only have three EC2s spinning right now, so someone else must have that IP I guess.So, what in the HECK am I missing?!?! It's been three days and nothing has changed other than that mystery Hello World showing up. Did I accidentally create artificial intelligence and it's now saying hello to me? I don't want to trash the resources and start over because I feel that there is a great lesson to be learned.Here, check it out. Here are the three IPs of my EC2s in my account:3.143.183.2203.135.203.1493.15.201.71Here is the DNS name for my ALB:DemoFaultTolerantLB-1083289545.us-east-2.elb.amazonaws.comThey will all magically forward to http://18.217.68.109. The ONE thing that is NOT forwarding at all is my URL, ironically. That just gives a "can't find the server" error even though I still have an A/alias pointing to the ALB.Please tell me what I am missing. I have to figure this out. Thanks in advance for your time!-PhilUPDATE: I just tested the A/alias record using Route 53's tool and it said there was no error. Furthermore, the record response for that record says that it is pointing to these two IPs:  3.140.44.216 and 3.128.236.33, which (you guessed it) both forward to 18.217.68.109! Neither of those two IPs (or three, for that matter) are anywhere in my account. They are NOT the IPs of the two EC2s that I have behind that load balancer.I should note that I never even turned on Sticky Sessions...Edited by: Bassphil on Mar 27, 2021 1:26 PMEdited by: Bassphil on Mar 27, 2021 1:30 PMFollowComment"

Answer: "0Sorry, it dawned on me that the only way this could be happening is if the RDS instance was calling the shots, i.e. making things redirect to that original URL. How? Because that was the URL that was entered when I initially set up the Wordpress installation.I set up the entire environment BEFORE I imported my URL into Route53 and created the records. I completely forgot that Wordpress saves the site URL.So, if anyone finds this thread someday in the future, there are two ways to fix this.Enter the site URL in the wp-config.php file, which should override the database infoInstall phpMyAdmin and alter its config file to point to the RDS endpoint. Then you can change the URL there. I found it in three places.CommentShareBassphilanswered 2 years ago0Sorry, it dawned on me that the only way this could be happening is if the RDS instance was calling the shots, i.e. making things redirect to that original URL. How? Because that was the URL that was entered when I initially set up the Wordpress installation.I set up the entire environment BEFORE I imported my URL into Route53 and created the records. I completely forgot that Wordpress saves the site URL.So, if anyone finds this thread someday in the future, there are two ways to fix this.Enter the site URL in the wp-config.php file, which should override the database infoInstall phpMyAdmin and alter its config file to point to the RDS endpoint. Then you can change the URL there. I found it in three places.CommentShareBassphilanswered 2 years ago0double postCommentShareBassphilanswered 2 years ago"


Question: Can't add AWS Certificate Manager to domain

"Hello.Previously, I created it through DNS validation and connected it to the domain "storyflow.link" (which is registered through AWS tools) through "Create DNS records in Amazon Route 53"Currently the CNAME fields appear in "Hosted zones" but the status does not change (Pending validation)I cannot add "add listener" - HTTPS to the Configuration of Elastic Beanstalk. A message appears:Creating Load Balancer listener failed Reason: Resource handler returned message: "The certificate '*****' must have a fully-qualified domain name , a supported signature, and a supported key size. (Service: ElasticLoadBalancingV2, Status Code: 400, Request ID: *****, Extended Request ID: null)" (RequestToken: ****, HandlerErrorCode: InvalidRequest).FollowComment"

Answer: "0Looking up storyflow.link, I'm able to find WHOIS info but no DNS records. This makes me think that there's something wrong with the hosted zone setup. Maybe you can check the nameserver settings for the domain and make sure they match what's shown in the hosted zone NS record? It should've been set up automatically, but if there's something wrong there that would explain why your DNS records aren't available even though they're set in the hosted zone.CommentSharewilliam_oconnellanswered 9 months ago"


Question: S3 Block Public Access + Bucket Policy - Access Denied

"We are running an S3 Bucket with a Cloudfront In front of it. Recently we've turned enabled block public access (All four options enabled under Individual Block Public Access settings for this bucket, but now our Fargate ECS instance is getting Access Denied doing a s3client.putobject. Images are able to be pulled through the Cloudfront URLs, s3 object are blocked, but we are unable to upload any new images from our ECS instances. How do we allow the ECS task instances to putObjectA (wide) bucket policy was added:{    "Version": "2012-10-17",    "Statement": [        {            "Sid": "1",            "Effect": "Allow",            "Principal": {                "AWS": [                    "arn:aws:iam::<aws-account>:role/<ecs-task-role>",                    "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity <OAI>"                ]            },            "Action": "s3:*",            "Resource": [                "arn:aws:s3:::<bucket-name>/*",                "arn:aws:s3:::<bucket-name>"            ]        }    ]}The ecs-task-role has AmazonS3FullAccess. We can manually upload to console.Removing the following two options from block public access does again allow us to put, but then the s3 object urls are public which we want to be non-accessible.Block public access to buckets and objects granted through new access control lists (ACLs)Block public access to buckets and objects granted through any access control lists (ACLs)FollowComment"

Answer: "0One possible solution would be to have Fargate tasks deployed in a VPC, and then configure an S3 endpoint in that VPC. This approach is detailed in the Fargate task networking documentation. You can also reference the Amazon ECR interface VPC endpoints (AWS PrivateLink) documentation.CommentShareKevinanswered a year ago0It is recommended to go to CloudTrail and see if you can identify the API call made by the ECS task and see which one is denied, and sometimes the CloudTrail entry will give you more specific reason of the denial;Are you encrypting any S3 contents?Do you have any ACLs set?Lastly you might know this and it might be your usecase but in putting the CloudFront OAI in the policy effectively allow any random user can view, delete and update the files and even bucket in your S3, which I rarely recommend.CommentShareJason_Sanswered a year ago"


Question: "New file won't run, have tried saving as .py or .txt first, trouble with that as well."

"First time user, scavenged the web on this previously. Starting my environment it keeps showing this error message when I hit run top or in the terminal./usr/bin/python3: can't find 'main' module in ''Ive been following this guide https://docs.aws.amazon.com/cloud9/latest/user-guide/sample-python.html I can't figure out how to even complete step 1 because this save issueFollowComment"

Answer: "0Hey! It's unfortunate you're facing this issue.I have just created a new Cloud9 EC2 environment and was able to successfully complete steps 1, 2 and 3 of https://docs.aws.amazon.com/cloud9/latest/user-guide/sample-python.html.I've tried this with both Amazon Linux 2 and Ubuntu Server 18.04.You mention you are not able to complete step 1 (Install Python). What do you see if you run python3 --version? Do you see that error as well?And is there any difference after you run steps 1.2 and 1.3 of the guide?1.2Amazon Linux: sudo yum -y updateUbuntu Server: sudo apt update1.3Amazon Linux: sudo yum -y install python3Ubuntu Server: sudo apt-get install python3CommentShareaws-andreanswered a year ago"


Question: If HLS Segment is less than or equal to 2 Sec

"As per HLS specs,segment duration must be 6 sec.But to achieve low latency we usually keep 2sec as segment duration specially in live tv stream.Playback is fine.But as per documentation what other additional issues we can face if we reduce the segment size to 2 sec or less than thatFollowComment"

Answer: "0There are pros and cons for a lower segment duration in HLS.Smaller segments (e.g. 2 seconds) enables reduced tune-in time when watching live tv stream with faster download of the required buffered segments before playback begins. It also helps you reduce latency (delay from live) vs longer segments with same buffered segment requirements.On the flip side, you will increase the number of requests to the origin and the CDN by 3 times if you move from 6s to 2s segments. The cost may be insignificant but still additional cost over use of a larger segment. You will also need good network conditions where the network congestion and drop will not impact the shortened buffered content due to lower segments size.The decision should be based on what user experience you want for your customers and intersect that with network conditions, additional requests, and player capabilities.CommentShareDev_Kanswered a year ago"


Question: Workdocs notification email address

"My status in workdocs is set to Admin. I have been trying to change the notification email address in Workdocs in the admin console to my own, after the previous admin left. and it advises "an error occurred while updating email notification settings. Please try again". It doesn't want to accept any email address I submit.FollowComment"

Answer: "1Hello! In order to better assist you, please collect a HAR log [1]. As this might be sensitive information, please open a new support case and provide us this log as well as the WorkDocs site name and we can investigate further.[1] https://aws.amazon.com/premiumsupport/knowledge-center/support-case-browser-har-file/CommentShareSUPPORT ENGINEERFrancisco_Lanswered 10 months ago"


Question: Non-ascii characters. Non-english language is set on a device

Answer: "0Hi, thanks for reaching out. The problem has been resolved.CommentShareAWS-User-5202920answered 4 years ago"


Question: Implenting Batching + per request caching (dataloader) in AppSync

"In AppSync, what are modern best practices to implement dataloader (aka, per-request batching + caching) patterns?Most answers on the internet date from ~2018-19, and there's no clear answer as to the current capabilities of the product to emulate standard dataloader patterns you would implement in node/elixir/ruby/rust.Specifically:Is BatchInvoke still limited to resolving 5 items at a time (turning N + 1 into N/5 + 1)?Are resolutions de-duplicated in a request? (for example, if I field resolve Post.Author.id = 5, and later field resolve Comment.Author.id = 5, does AppSync attempt to cache the earlier lookup associated with Post, or does it make two requests to resolve Author.id = 5 (first for Post then for Comment)?What role does the paid caching solution play in solving these problems and how does per-resolver caching interact with any baked-in dataloading capabilities (i think whole-request caching is pretty clear).Where are / are additional dataloading capabilities in the product roadmap?There is an older related discussion on the forums here: https://forums.aws.amazon.com/message.jspa?messageID=897682FollowComment"


Question: Please add a feature "destructive mesh nvidia library"

"Hi Lumberyard team,you added PhysX Nvidia 4.1 to lumberyard engine , so please add a feature "destructive mesh nvidia library ", I hope you create a editor for destructive mesh like fire/shoot to walls, to shred and crumble, I hope you understand my word mean. 😉Thank you so muchFollow"

Answer: "0Accepted Answer[quote="_AhmadKarami, post:8, topic:8075"]Thank you for your answer, also please if it is possible , add Flex NVIDIA library to lumberyard 😊 & please see this video[/quote]@REDACTEDUSERSharerePost-User-7328120answered 3 years ago0it is a video of NVIDIA about apex library , ly team please see 😊https://www.youtube.com/watch?v=6DdjEkd53cQSharerePost-User-8224505answered 3 years ago0I am also quite interested in using PhysX Blast functionality in LY. Although as LY PhysX is now more feature complete and the PhysX library is available on GitHub anyone can potentially create this Gem.  However, much more comfortable investing the time in that if I know its not about to drop any time soon (unlikely ... plenty of higher priorities realistically). Hopefully all will be clarified by a roadmap in the near future!SharerePost-User-2743711answered 3 years ago0Unfortunately, I live in a country that has the most and toughest US and world sanctions , I live in Iran and I'm very interested in Lumberyard , Yes I loved to make my own gems but I can't even access Visual Studio ☹ I have previously written a book on C++ CryEngine 5.x in 2018 ,  Where I live is very slow internet speed and I can hardly even download Lumberyard, So I have to send in feature requests, now only my focus is on the script canvas and emotion fx. (without compile / without visual studio 😑 😔)SharerePost-User-8224505answered 3 years ago0+1(adding this because forum pointlessly requires at least 20 characters)SharerePost-User-9359627answered 3 years ago0Hello,Thank you for your feedback!This feature is not supported currently, however it is in our roadmap.I will not be APEX Destruction since it has been deprecated by NVIDIA, but will more likely be NVIDIA Blast.Thanks,SergeySharerePost-User-0870543answered 3 years ago0@REDACTEDUSERThanks,SharerePost-User-7328120answered 3 years ago0Hi @REDACTEDUSERThank you for your answer, also please if it is possible , add Flex NVIDIA library to lumberyard 😊 & please see this video 👇https://www.youtube.com/watch?v=1o0Nuq71gI4SharerePost-User-8224505answered 3 years ago"


Question: Api Gateway Payload size limit increase

"Hi,Right now there is a hard limit on the API Gateway for a request payload size under 10MB:http://docs.aws.amazon.com/apigateway/latest/developerguide/limits.htmlI have 2 questions on this limit:Why 10MB? And why can't we configure that limit? A lot of api service provide to upload binary file that size are often over 10MB.Does api gateway increase or configure by myself this hard limit in the future?Thanks.FollowComment"

Answer: "0Why 10MB?This was determined after reviewing with customers at the time of launch and after load testing the service at various values.And why can't we configure that limit?We may add this as a future enhancement to the service, but likely only for customers who may want to limit the payload further.A lot of api service provide to upload binary file that size are often over 10MB.Scaling a service to support arbitrary file uploads was not our core mission. AWS already offers another service that does this quite well, Amazon S3. We recommend that customers that have needs for large file transfers consider using S3 as the upload target and use API Gateway/Lambda to trigger processing of the data.Regards,BobCommentShareEXPERTAWS-User-0395676answered 6 years ago0How will the aws api gateway behave when a compressed payload of size less than 10mb limit passed to api gateway? Will it accept it? Suppose the uncompressed version of the payload is more than 10mb but the compressed version is less than 10mb, then when aws api gateway auto decompress it, will it reject the request stating "Error "413 Request entity too large".Please help me in understaning this.CommentShareMFDeveloperanswered 2 years ago"


Question: Microsoft Office365 and Shared Computer Activation (SCA) with WorkSpaces

"I have this question from a customer:Since we are looking to install our own copy of Office365 on the WorkSpaces instances, It is my understanding that we can install this software on multitenant hardware if the provider is on the SCA Authorized Qualified Multitenant Hoster (QMTH) Partner Program.  However, I can’t see AWS on that list https://www.microsoft.com/en-us/CloudandHosting/licensing_sca.aspx Authorized QMTH Partner List [1], are AWS an QMTH Partner?;That’s because this WorkSpaces is dedicted 1-1 instances right, not Microsoft RDSH/Citrix XenApp/Non-persistent desktops? for WKS (or AS2) Shared Computer Activation (SCA - https://docs.microsoft.com/en-us/deployoffice/overview-of-shared-computer-activation-for-office-365-proplus) doesn’t apply here.Is that right?FollowComment"

Answer: "0Accepted AnswerThe two products available under O365 that have QMTH rights are Windows 10 and Microsoft Office Pro Plus.  The other products included in the O365 suite are hosted by Microsoft only and cannot be reassigned.  QMTH rights allow authorized QMTH service providers to deliver these products in shared tenant environments (assuming customers have O365 subscriptions that include these products).  AWS is not an authorized QMTH provider.Windows 10 licenses obtained through O365 can only be deployed on dedicated end customer on prem environments or with an authorized QMTH hoster (AWS is not authorized).https://www.microsoft.com/en-us/CloudandHosting/licensing_sca.aspxMicrosoft Office Pro Plus licenses obtained through O365 can be deployed on dedicated AWS environments.  However, once assigned, the license cannot move for 90 days (with the exception of hardware failure) which could present challenges on dedicated instances (EC2 and Workspaces).  Dedicated hosts do not present this challenge assuming the customer keeps the same host in place for 90 days or more.  It is up to the customer to decide what level of risk they are willing to take with regards to reassignment rules.Please let me know if you have further questions.  I can provide the Microsoft licensing language if it would be helpful.CommentShareAWS-User-9571293answered 5 years ago"


Question: "NodeJS (Nest) app works locally, but fails with TS2688 on Beasntalk"

"My NestJS app starts locally (linux/Mac), but Beanstalk deploy fails with many TS2688 errors like this:node_modules/kafkajs/types/index.d.ts TS2688: Cannot find type definition file for 'node'AndTS2339: Property 'id' does not exist on type 'FreInterval'.as well.How I can debug/fix that?TIA, VitalyFollowComment"

Answer: 1adding"@types/node"to dependencies into package.json fixed this issue.CommentShareVitaly Karasikanswered 3 years ago


Question: Stack stuck on UPDATE_ROLLBACK_IN_PROGRESS status

"Hi,I currently have a stack with a UPDATE_ROLLBACK_IN_PROGRESS.The stack id is:arn:aws:cloudformation:ap-southeast-2:789907291645:stack/dev-sp-stream-collector/d59220b0-122e-11e9-83d5-02056cb1c02cwith a nested stack id of:arn:aws:cloudformation:ap-southeast-2:789907291645:stack/dev-sp-stream-collector-ServiceScalaStreamCollector-LW54CI0S7BEG/ffa4d960-122e-11e9-bc34-028d024c9854I would like to have their status unblocked so they could be deleted.CheersEdited by: ctorrisi on Jan 9, 2019 4:01 PMFollowComment"

Answer: "0Although it took longer than expected, the stack eventually was marked as UPDATE_ROLLBACK_FAILED.Edited by: ctorrisi on Jan 10, 2019 9:22 PMCommentSharectorrisianswered 4 years ago"


Question: AWS firewall manager and custom protocol lists

"I am trying to create AWS firewall manager using terraform. I dont see a schema definition on what might needed for a custom protocol lists. I dont see an option to pass my custom protocol list the schema is only allowing an existing list id.{      type = "SECURITY_GROUPS_CONTENT_AUDIT"      preManagedOptions = [{        "allowedProtocolsLists" : {        "customListId" : "" }        },        {          "auditSgDirection" : {            "type" : "ALL"          }      }]    }FollowComment"


Question: MGN and EDR failing at "Authenticate with Services"

"Hi I am unable to proceed further on migration service and DR services where I can see it is failing at Authenticate with Services.Migration through CloudEndure was successful for same SG.FollowCommentDonnatamta a year agoHi were you able to resolve this error? getting the same, but can't find any errors in the CloudTrail. thanksShare"

Answer: "0Please check whether any filesystem is full or lack of free space, especially /var, /tmp filesystem . It happened to me. While I keep looking for a way to troubleshoot the reason, you can try disconnecting the source server and re-install the agent. It worked in my case.CommentSharejputroanswered a year ago"


Question: Can Amazon SageMaker endpoints be fitted with multiple Amazon Elastic Inference accelerators?

"Can Amazon SageMaker endpoints be fitted with multiple Amazon Elastic Inference accelerators?I see that in EC2 it's possible, however I don't see it mentioned in Amazon SageMaker documentation.FollowComment"

Answer: "0Accepted AnswerNo, they cant be; multi-attach is only supported with EC2.CommentShareMODERATORsrinz9answered 3 years ago"


Question: Amazon Connect Chat - CSMService not initialized client error

"We are using Amazon Connect Chat widget and everything works fine, except we keep getting this error every few seconds in the Console log of the client:ChatJS-csmService: CSMService is not initialized yet. Adding metrics to queue to be published once CSMService is initializedThis follows an error fetching connect-csm-worker.js from my cloudfront origin. We did set CORS correctly in the Chat widget configuration. Any insight is appreciated.Thanks.FollowCommentDanver 16 days agoI also have same problem.Share"


Question: Redshift UNLOAD parquet file size

My customer has a 2 - 4 nodes of dc2.8 xlarge Redshift cluster and they want to export data to parquet in the optimal  size (~1GB) per file with option (MAXFILESIZE AS 1GB). But the engine somehow exported the total of 500MB files into 64 files (average size from 5mb -25mb).My question:How can we control the size per parquet file?How does Redshift determine the optimal file size?FollowComment

Answer: 0Accepted AnswerThe UNLOAD command in its default configuration unloads a number of files equal to number of slices. For a DC2.8xlarge 4 node cluster the number of slices are 64 (4 node * 16 slices per node). This is the default behavior and makes all the slices at work in parallel. Redshift tries to make the files sizes in chunk of 32 MB row group when unloaded in Parquet format. For smaller data volume where 32 MB chunk are big enough it will generate smaller files. The multiple files are effective than a single file as the later case Redshift combines the data from table and then generate a single file- less effective for parallel compute nodes.One solution to generate fixed size file is to use the UNLOAD option PARALLEL OFF and MAXFILESIZE 1GB.CommentShareAWS-User-9244242answered 3 years ago


Question: Cognito cannot discover openid configuration of on-premise identity provide

"Hi,We are setting up Cognito for a new product and need to integrate it with an existing identity provider. In our test environment the identity provider is hosted on-premise, but is accessible from the www.When configuring Cognito the openid configuration discovery fails.Unfortunately we do not see any requests on the on-premise infrastructure that we could debug. It appears as if Cognito just cannot reach our servers on-premise.Discovering cloud provider configuration from google works, as does discovering openid configuration that is hosted in another AWS account.Is there a way to view logs about the connection attempts Cognito does and the errors it receives? Maybe a way to trace it in vpc flow logs? Are there other ways to debug connectivity problems with Cognito?Are there known connectivity limits, like IP restrictions or geo restrictions for Cognito?Best RegardsChris BorckholderFollowComment"

Answer: 0We chose not to use cognito in the end.CommentSharepyranjaanswered 4 years ago


Question: AWS Network Firewall - Suricata rules not working as expected

"I have configured Suricata IPS rules (from emerging threats) and during testing observed that rules are not working as expected.For example, the below generic rule is working as expected -drop tcp $DB_NET any -> $TEST_NET 80 (msg:"Test Block"; sid:102344; rev:1;)However the below rules taken from emerging threats are not working -drop http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET USER_AGENTS Observed Suspicious UA (easyhttp client)"; flow:established; http.user_agent; content:"easyhttp client"; bsize:15; metadata:attack_target Client_Endpoint, created_at 2020_03_04, deployment Perimeter, former_category USER_AGENTS, signature_severity Informational, updated_at 2020_03_04; sid:102340; rev:1;)drop tcp $DB_NET any -> $TEST_NET 2301 (msg:"GPL WEB_SERVER Compaq Insight directory traversal"; flow:to_server,established; content:"../../../"; reference:arachnids,244; reference:bugtraq,282; reference:cve,1999-0771; sid:2101199; rev:13; metadata:created_at 2010_09_23, updated_at 2010_09_23;)I am not able to identify the root cause of this behavior and need your support to understand and fix the issue (if any).FollowComment"

Answer: "0Just a guess from my own tests...Check your NACLs. Ephemerals Ports needs to be allowed for the response, otherwise network firewall can't identify "HTTP" (L7) protocol.CommentSharebacattaanswered 10 months ago0Hi,Could you please expand upon what you mean by the rules do not work? And how this is being tested?If you have a premium support subscription I would advise that you open a support case with AWS using the following link: https://console.aws.amazon.com/support/home#/case/create as we require details that are non-public informationI have identified an AWS doc that touches on emerging threats rules and testing them: https://aws.amazon.com/blogs/opensource/scaling-threat-prevention-on-aws-with-suricata/Also the limitations and caveats for stateful rules in AWS Network Firewall: https://docs.aws.amazon.com/network-firewall/latest/developerguide/suricata-limitations-caveats.htmlCommentShareSUPPORT ENGINEERAWS-User-7474266answered 10 months ago"


Question: Assigning Role for AWS Backup Gateway VMWare Tags

"I am looking for instruction on either how to modify or create an IAM role I can use to map on-prem VMWare tags in AWS Backup for AWS Backup Gateway.I am attempting to map On-Prem VMWare tags in AWS Backup, via the AWS Backup Gateway, in the AWS Console. I am stuck on this step located at: https://docs.aws.amazon.com/aws-backup/latest/devguide/backing-up-vms.htmlAfter adding mapping(s), specify the IAM role you intend to use to apply these AWS tags to the VMware virtual machines. The policy AWSBackupGatewayServiceRolePolicyForVirtualMachineMetadataSync contains needed permissions. You can attach this policy to the role you are using (or have an administrator attach it) or you can create a custom policy for the role being used.I have the documentation recommended "AWSBackupDefaultServiceRole" role trusted to the backup service in IAM and the on-prem backups work as expected. However, when adding a VMware tag mapping, this role does not appear in the "IAM role: Specify an IAM role to apply mapped AWS tags to the VMware virtual machines." drop-down, even if I add the above policy to that role. I also added a new role, mimicking the AWSBackupDefaultServiceRole role, with that policy, and it showed up in the list, but it errored with "Customer provided role ... can't be assumed by Backup Gateway".When creating a role, there is no "AWS Backup Gateway" service and a custom trust policy requires a JSON statement. So I'm lost.FollowComment"

Answer: "0Little confuse, but you can have just one KMS Key to backup both environment (OnPrem or VMC on AWS)They have to use AWS KMS.Virtual machine backups are always encrypted. The AWS KMS encryption key for virtual machine backups is configured in the AWS Backup vault that the virtual machine backups are stored in.https://docs.aws.amazon.com/aws-backup/latest/devguide/encryption.htmlCommentShareEXPERTVitor Euphrasioanswered 3 months ago0We had the same issue while implementing the AWS Backup solution for VMware Cloud. We were using the default role "AWSBackupDefaultServiceRole" which had the same issue.**Problem : **Seems that the Backup Gateway is not able to assume the role**Solution: **We created a new role and assigned the policies as mentioned below. In the trust relationship policy we updated as below.**Detailed steps: **Create a custom role similar to the default role "AWSBackupDefaultServiceRole"Assign the policies " AWSBackupServiceRolePolicyForBackup" , "AWSBackupServiceRolePolicyForRestrore", and "AWS BackupGatewayServiceRolePolicyForVirtualMachineMetadataSync"Update trust relationship policy as below{    “Version”: “2012-10-17",    “Statement”: [        {            “Effect”: “Allow”,            “Principal”: {                “Service”: “backup-gateway.amazonaws.com”            },            “Action”: “sts:AssumeRole”        }    ]}This resolved our problem and we were able to progress with the implementation.Thank youCommentShareEXPERTJagadeesh_Devarajanswered 3 months ago"


Question: Windows 2012R2 upgrade

"Hello :)I would like to ask about Windows Server 2012R2 upgrade.I have several Windows Server 2012R2 servers running on EC2 Instances with various services, mostly application servers, webservers, database servers.I plan to upgrade these machines to Windows Server 2019.From the documentation, the options are three:In-place upgrade.Automated upgrade using AWSEC2-CloneInstanceAndUpgradeWindows.Manually create a new server and migrate services using Windows Server Migration Tools, for example.Which of these solutions do you think is best?I think each machine should be analyzed separately. What should I pay attention to during such an analysis?Kind regardsFollowComment"

Answer: "1imo option 2 is the best from a ease and safety point of you. Option 1 offers can be rolled back with a snapshot. Option 3 is not simpleHowever depending on the amount of instances my favoured approach would be to invest some effort in creating Infrastructure As Code templates (Cloudformation or Terraform) to create both the instance and install the necessary software within the bootstrap (Or create AMI using EC2 Image Builder). This effort can simplify future OS upgrades and helps you enable automated deployments for software updates or take advantage of technologies like autoscalingCommentShareEXPERTPeter_Ganswered a year ago0Thank you for your reply Peter.I have one more question regarding option number 1 - In-place upgrade. What is the issue related to licensing and billing of such a machine, which was originally Windows Server 2012 and upgraded via snaphot owned by AWS to version 2019?Do I need to perform any additional steps? Will licensing and billing for a machine with the new system set up in AWS automatically?I ask because, during installation, I can choose between Windows Server Standard and Datacenter. Will this choice change the cost of ownership of the machine and, more importantly, will such a change be automatically noted in billing?In general, what is the licensing and billing during such an upgrade if the original machine is based on an AWS license rather than BYOL?Kind regardsCommentSharePaulanswered 10 months ago"


Question: "Kinesis data stream throttle the request from ECS vector, how can I config vector to handle these throttle exception."

"Hello,I am using ALB + (ECS + vector) to sink the data to kinesis data stream, I found some requests are throttled by kinesis, but vector did not handle these error and still return success to ALB, this make ALB show all requests successfully.For example, I send 100 request, in cloudwatch metric for kinesis, it shows there are 6 requests throttled. But in ALB metric, it still shows 100 HTTPCode_Target_2XX_Count.Is there any way to show non 2xx code if the request is not put into kinesis successfully.Thanks,MingtongFollowComment"


Question: AMG Grafana transform calculation problem

"I'm trying to calculate the sum of 2 data stream values(double) in AMG (sitewise data source/disassociated data stream) and present the calculated result in a timeseries panel.I have attempted to use transform 'Add field from calculation':  Using 'Mode' binary operation', operation 'datastream1 + datastream 2' without success.How can I calculate fields in AMG ? Any tips will be welcome!FollowComment"

Answer: "0Hi Jason,Your issue is likely due to a different time precision in each datastream. Look at the example below.Note the difference in offsetInNanos for timestamps 1662866820 and 1662866830. When the offset is different in each datastream, Grafana Binary operation returns a NaN.If this is helpful, consider accepting the answer.RajuCommentShareEXPERTRajuAWSanswered 8 months ago"


Question: SES/SNS/Voice or Pinpoint

"We have app running in 3 AWS accounts (dev, test and production), we want the app to be able to send out transactional sms/voice/email alerts for weather conditions. We would also like it to use a local(ish) numbers based on clients locations, i.e. US clients get sms/voice from US number, UK clients from a UK number etc.Should I use sns/ses/voice directly or should we use pinpoint for this ?In any of these cases should we get the SNS long numbers out of the sandbox and into production first, and then use the same long numbers to get the voice out of the sandbox and into production ? I seem to have got myself into a catch-22 with support at the moment probably down to my understanding of the documentation.Can the long numbers (when in production) be used across 3 AWS accounts or do we need to create the long numbers per account i.e. end up with 3 numbers for US clients one in dev, one in test and one in production ?ThanksFollowComment"


Question: Advice: Real-Time Notifications in Angular/Amplify Web App

"Hi there, like the title says, I'm looking to do real-time notifications to an Angular web app. The web app does leverage Amplify for authentication, but if I have to dig into the plain AWS JS SDK for something Amplify doesn't offer, that's fine by me.I'm really just in the prototyping phase, someone else on my team will probably end up implementing this, I just want to get it started for them to take some stuff off of their plate, and I've been having a hard time getting started.In terms of functionality, what I'm looking for is something that we can publish a notification from a lambda, for example, and a user on our Angular front end sees a toast with the notification that the Lambda pushed.It seems like there are a lot of AWS services that can be used to do this, but I'm starting to feel like there are none that are supposed to. I'm probably wrong, but I'm getting into a bit of analysis paralysis, I think.-Simple Notification Service: It seems like for push notifications, this is really only intended for native Android/iOS development? And otherwise moreso for notifying one aws service from another so that it can perform an action.-Pinpoint: I've seen people saying online it can be done with this, but had a hard time getting started-Appsync: If this can be used, I'm up for it. In the past I tried to use it to get real-time updates from a Dynamo table but I could never actually get it to work in Amplify.-AWS IoT: I've got some code written for this right now, but I'm finding the AWS setup pretty confusing. I don't really know how to actually define a topic on its own in the console. I've used the Test feature in the console to pub/sub to a topic, but not in a way where I was able to on the front end.Does anyone have any guidance on this? Like I said, I've got a little analysis paralysis and I really need someone to point me in the right direction. A guide would be great, but so many of the ones I find skim over the the most intricate parts, or use serverless CLI for everything when I need to be able to get this setup through the AWS console.FollowComment"

Answer: "0Accepted AnswerIt depends on your use case a lot, but typically when we are thinking about real-time notifications we are thinking about websockets.So, taking that into consideration you have the following options:-- Amazon API Gateway websockets-- AWS AppSync subscriptions-- AWS IOT topicsI think in the end it's a decision between Amazon API Gateway and AWS AppSync as AWS IOT it's probably not the most suitable for your use case.Since you are already using AWS Amplify, which has great integration with AWS AppSync you could go that route.Here's a link to the documentation on how you can leverage AWS AppSync subscriptions with AWS Amplify: https://aws-amplify.github.io/docs/js/api#subscriptionsCommentShareAWS-User-8819875answered 4 years ago"


Question: Source Data for TimeStream Database

"Hi Team, i would like to know , what are the actual Data which gets feed into AWS TimeStream Database .2) Is there any possibility that , if business wonot have any real time data to process into TimeStream database , then in that Case , can we  Load  Postgre SQL Write Ahead Logs  Data to the Timestream Database ?my understanding that , write ahead logs are only used for postgre db backup / recovery / incorrect shutdown of DB , let me know and guide me.Regards,MangeshFollowComment"

Answer: "0Timestream data will have a Time, one or more Dimension and Measure data.  Anytime you have to measure value over time, Timestream is the right database.  Some of the example datasets are: IoT data(like sensor data), DevOps data, App logs, Video stream data(customers activity), Stock price data, etc...Yes, you can load write ahead logs data and we have seen few customers do that. write ahead logs  provides you with all the events.CommentShareSreenath_Ganswered a year ago"


Question: Profile pictures to WorkMail

Is there a way to add “profile pictures” to email accounts that are created in Amazon WorkMail?I've checked user settings under the WorkMail's OrganizationI've also checked under user settings when a session is started via a web browserNone of the two provide the option to add a profile picture for the user. I'm referring to the image that is displayed for emails sent out (which can be a logo) so others can see this on user's email.Any input about this?Thanks.FollowComment

Answer: "0No, sadly WorkMail does not support the ability to upload profile pictures.Maybe you can add your logo/picture in the email itself?There could also be some potential 3rd party services that could provide you with such a requesthope this helps!CommentShareAWS_Guyanswered 2 months ago0Thanks for the input @aws_guy - would you know of any 3rd party that is enabling this already?Thanks.CommentShareAWS-User-8982062answered 2 months ago"


Question: EMR Studio no kernel

"Hi ..can anyone help me?.I created a custom ERM cluster..Spark, Presto, zepeeling, hadoop, jupiter gateway...after attached to ERM Studio no Kernel is available..why?ThanksFollowComment"

Answer: "0Accepted AnswerTrying to figure this one out too! Suspect its related to permissions/roles, but can't tell.CommentShareagt64answered 8 months ago"


Question: How to list S3 directories (not objects) by date added?

"You know how, when you're looking through files and folders on a Mac, you can see and sort by "Date Added", and folders are included in that? I know one approach is just to prefix directory names with a date, so that the date-sorting happens alphabetically.But what about in situations where you don't have control over the naming of directories, like with automated exports from Amazon HealthLake, where you just want to quickly find the most recent export, without clicking into into the subdirectories to find a dated object?I'm guessing someone must have some command line hacks, so I wanted to ask before coming up with a nice for-loop myself.FollowComment"

Answer: "1Accepted AnswerI agree with all that DALDEI stated above, and suggest you research further before using the technique outlined below, but for this particular use case, it may provide the results that you're looking for (one command to return the last modified folder):aws s3api list-objects-v2 --bucket "some-bucket-name" --query 'sort_by(Contents, &LastModified)[-1].Key' | tr -d '"' | grep -oE '[^\"].*\/\s*'This command first gets the last modified object via an s3api API call.  The result can be a file or a "directory".  The result is then piped to tr to strip the surrounding quotes, and then to grep to return the characters up to and including the last forward slash.  So regardless if the last modified object is a "directory" or file, it returns the entire path to the "directory", including the trailing forward slash, minus the filename if it's a file.Hope this helps!Notes:I am using "directory" in quotes consistent with the explanation given by DALDEII don't know how well this would perform with a large bucket, I only tested with a few nested folders/files so YMMVCommentSharevinceisanswered a year ago1There is a fundamental problem with this question -- the concept of "S3 Directories"  does not actually exist.Therefore it is not really possible to implement exactly what was asked -- there simply is 'no such thing'.However there are methods to approximate it.There are 2 methods typically used to present the illusion of 'directories'.Native Support: always worksS3 natively supports the concept of a 'delimiter' -- but only in the ListObjects API call.  The 'delimiter' is not a global property -- its an option to the API call and can differ between calls.   When you specify a delimiter the API returns 2 lists,  a "common prefix list" and a "key list".The "common prefix  list" can be used to model "directories" -- e.g. it is a list of  unique prefixes with one more delimiter then the start key given.E.g. if you list "/month/day"   with '/' as the delimiter you may get  "/month/day/01/" , "/month/day/02/" , "month/day/03/" in the "CommonPrefixes" list.That allows you to do a incremental, hierarchical 'tree explorer' view -- to 'drill down'  call ListObjects with a prefix of one of the listed common prefixes, and the result will be '1 level deeper'However -- this doesn't solve the stated problem - and it cannot,  as these are not really directories -- they do not exist so they do not have any metadata.they are key prefixes associated with actual S3 objects (keys).In order to get 'last added'  you need to query for all the S3 objects 'under'  a given 'prefix'  and get the most recent LastModified date.If you need to do this recursively (say a deeply nested directory) -- then this may take many API calls to collect all the child S3 objects.Assisted Support:Due to the limits of  the above -  some software, including the AWS Console, 'invent' a convention of a special kind of 'Directory Object'Exactly what this object 'looks like' depends on the software that created it, and it also depends on that software to manage any concept of 'last updated'I do  not know of any software that actually updates the 'directory object' every time new keys are added , but if you are in 100% control of all S3 object updates then you could explicitly update the 'directory object' every time a new object is updated.This will incur significant performance costs, and can only be guaranteed to be accurate if no other methods of uploading files are allowed.To optimize for these issues, I have seen (and written) implementations that instead use the S3 object events, and store an external index to S3that is kept up to date by processing all the S3 event messages (via AWS EventBridge events).A common way to do this is to use DynamoDB or Memcache/Redis to maintain an up to date  index of S3 -- that may be significantly more efficient to keep up to date and to query -- and it avoids the problem of 'other software' updating the same S3 bucket as it does not rely on code during the object creation, rather it relies on events after object creation -- regardless of source.While this is possible, and can be made quite efficient,  it is not easy to get right -- as the event system does not guarantee order of events.Handling things like out of order   Update/Delete/Update messages correctly can be tricky.  Also there is a unknown delay between the object upload and when the event processing code is complete so there are periods of time (seconds? more?) where the index will be behind.This also, (obviously), requires managing another data store and the software that maintains the index, make sure it scales properly, recovers from errors, manages permissions and access to the index, code to 'refresh the index' as needed etc. - this can be a significant long term effort.CommentShareDALDEIanswered a year ago"


Question: How to delete unused users from the WorkDocs when the trash bin is grayed out

"I have users in my WorkDocs site that I no longer use and the storage usage is 0 B. However, I cannot delete the uses, the trash bin is grayed out.Please, advise.FollowComment"


Question: Is the "aws s3 mv --recursive" command atomic?

"I have a customer who would like a definitive answer, whether the mv command is atomic.I.e. either all objects are moved or none.FollowComment"

Answer: "0Accepted AnswerNo, it's not.  Each object transfer is atomic.  That is, either a whole file is transferred, or none of it is.  But the directory structure is not atomic and a failure can cause mv to fail mid-way.CommentShareEXPERTTim Gustafsonanswered 4 years ago"


Question: cloudwatch alarm setup by resource group

"I like the idea of setting up resource groups, but can you setup cloudwatch alerts based on metrics by that group?   Example, if I have 5 API servers, I have a resource tag, made a group and the 5 appear.  But, I don't see a simple way if I add a new server to that group to have it automatically know "oh, I am supposed to have an alarm on my CPU" and other cloudwatch rules.   Is there an easy/automated way to do that?FollowComment"

Answer: "0Hi lraymond!I have found on a different forum an example of using AWS Lambda in order to automatically create alarms:https://stackoverflow.com/questions/62655992/how-to-create-automatic-cloudwatch-alarm-on-new-ec2-instance-creationOf course you need to create alarms when the instances are created, and delete them on termination so that you do not reach any limits and keep it clean.Also you can create Composite Alarms to aggregate alarms from different sources:https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/Create_Composite_Alarm.htmlIf this does not meet your requirements, please provide more details or an example :)CommentSharePiotr Blonkowskianswered a year ago"


Question: aws auto scaling routing

Did auto scaling setup and using Step scaling policy to scaleout and scalein. when CPU Max reaches 40 above Scaling is happening and another server came to available also but sometimes request is going to the first server which has high CPU utilization because of that server is crashing. Using round robin in load balancer still its not routing properly.How to solve it?FollowComment

Answer: "0What load balancer are you using? Does it have sticky sessions enabled by any chance?Some insights - https://aws.amazon.com/premiumsupport/knowledge-center/elb-fix-unequal-traffic-routing/Sample Tutorial just for you to double check the configs -https://docs.aws.amazon.com/autoscaling/ec2/userguide/tutorial-ec2-auto-scaling-load-balancer.htmlCommentShareRajesh Sanswered 10 months agorePost-User-9945978 10 months agoUsing Application load balancer. Stickiness is Disabled in Target group attributesShare0Round Robin means that 2 targets on the ALB will each get every other request.  If you want the majority of the requests to go to the new instance (until they're evened out) then you should use Least Outstanding Requests: https://aws.amazon.com/about-aws/whats-new/2019/11/application-load-balancer-now-supports-least-outstanding-requests-algorithm-for-load-balancing-requests/However, you should also look into why the first instance is crashing when the CPU is only around 40%.  See if there's a different resource other than CPU that's your bottleneck (memory, disk, network, artificial application limits, etc).  If might be that you can get much better performance by changing instance families to one better suited for your resource requirementsCommentShareShahad_Canswered 10 months ago"


Question: EBS snapshot resilience to AZ failures

A customer uses EBS snapshots extensively. As a part of a SOC 2 audit they were asked for a proof that EBS snapshots are resilient to AZ failures. Is there documentation that clearly states that?FollowComment

Answer: "0Accepted AnswerIf you want something to be used in  compliance-related assessment you should use AWS Artifact.If your customer can download the SOC2 report and look at the Data Backup paragraph.You can clearly see 2 main statement:Amazon S3 is designed to provide 99.999999999% durability and 99.99%availability of objects over a given year. Objects are redundantlystored on multiple devices across multiple facilities in an Amazon S3region.Amazon EBS replication is stored within the same availability zone,not across multiple zones, but customers can conduct regular snapshotsto Amazon Simple Storage Service (S3) in order to provide long-termdata durability.CommentShareNicola Pietroluongoanswered 3 years ago"


Question: Greengrass device connection refused

"Hi,I am working through Module 5 of the Greengrass tutorial and am encountering a socket connection error when running the lightController.py script as instructed here:https://docs.aws.amazon.com/greengrass/latest/developerguide/comms-disabled.htmlC:\Users\Steve\Documents\IoT\Certs2>python lightController.py --endpoint a3pujgfo1m12iq-ats.iot.us-west-2.amazonaws.com --rootCA root-ca-cert.pem --cert 40d1bca263.cert.pem --key 40d1bca263.private.key --thingName GG_TrafficLight --clientId GG_SwitchGreengrass core has already been discovered.GGC Host Address: 127.0.0.1GGC Group CA Path: ./groupCA/root-ca.crtPrivate Key of lightController thing Path: 40d1bca263.private.keyCertificate of lightController thing Path: 40d1bca263.cert.pemClient ID(thing name for lightController): GG_SwitchTarget shadow thing ID(thing name for trafficLight): GG_TrafficLight2019-10-20 18:04:40,098 - AWSIoTPythonSDK.core.protocol.mqtt_core - INFO - MqttCore initialized2019-10-20 18:04:40,098 - AWSIoTPythonSDK.core.protocol.mqtt_core - INFO - Client id: GG_Switch2019-10-20 18:04:40,098 - AWSIoTPythonSDK.core.protocol.mqtt_core - INFO - Protocol version: MQTTv3.1.12019-10-20 18:04:40,098 - AWSIoTPythonSDK.core.protocol.mqtt_core - INFO - Authentication type: TLSv1.2 certificate based Mutual Auth.2019-10-20 18:04:40,098 - AWSIoTPythonSDK.core.protocol.mqtt_core - INFO - Configuring offline requests queueing: max queue size: 02019-10-20 18:04:40,098 - AWSIoTPythonSDK.core.protocol.mqtt_core - INFO - Configuring offline requests queue draining interval: 0.100000 sec2019-10-20 18:04:40,098 - AWSIoTPythonSDK.core.protocol.mqtt_core - INFO - Configuring endpoint...2019-10-20 18:04:40,098 - AWSIoTPythonSDK.core.protocol.mqtt_core - INFO - Configuring certificates...2019-10-20 18:04:40,098 - AWSIoTPythonSDK.core.protocol.mqtt_core - INFO - Configuring reconnect back off timing...2019-10-20 18:04:40,098 - AWSIoTPythonSDK.core.protocol.mqtt_core - INFO - Base quiet time: 1.000000 sec2019-10-20 18:04:40,098 - AWSIoTPythonSDK.core.protocol.mqtt_core - INFO - Max quiet time: 32.000000 sec2019-10-20 18:04:40,098 - AWSIoTPythonSDK.core.protocol.mqtt_core - INFO - Stable connection time: 20.000000 sec2019-10-20 18:04:40,098 - AWSIoTPythonSDK.core.protocol.mqtt_core - INFO - Configuring connect/disconnect time out: 10.000000 sec2019-10-20 18:04:40,098 - AWSIoTPythonSDK.core.protocol.mqtt_core - INFO - Configuring MQTT operation time out: 5.000000 sec2019-10-20 18:04:40,098 - AWSIoTPythonSDK.core.protocol.mqtt_core - INFO - Performing sync connect...2019-10-20 18:04:40,098 - AWSIoTPythonSDK.core.protocol.mqtt_core - INFO - Performing async connect...2019-10-20 18:04:40,098 - AWSIoTPythonSDK.core.protocol.mqtt_core - INFO - Keep-alive: 600.000000 secTraceback (most recent call last):  File "lightController.py", line 203, in <module>    myAWSIoTMQTTShadowClient.connect()  File "C:\Python27\lib\site-packages\AWSIoTPythonSDK\MQTTLib.py", line 1271, in connect    return self._AWSIoTMQTTClient.connect(keepAliveIntervalSecond)  File "C:\Python27\lib\site-packages\AWSIoTPythonSDK\MQTTLib.py", line 513, in connect    return self._mqtt_core.connect(keepAliveIntervalSecond)  File "C:\Python27\lib\site-packages\AWSIoTPythonSDK\core\protocol\mqtt_core.py", line 196, in connect    self.connect_async(keep_alive_sec, self._create_blocking_ack_callback(event))  File "C:\Python27\lib\site-packages\AWSIoTPythonSDK\core\protocol\mqtt_core.py", line 223, in connect_async    raise esocket.error: [Errno 10061] No connection could be made because the target machine actively refused itMy local core connection information shows only the IP address of the Raspberry Pi Greengrass device, 192.168.1.125 on port 8883.   I am able to ping the device from my computer and have confirmed the Greengrass daemon is running.  Why is this happening?   I have made it through all the other Greengrass training modules without issue so far.Thanks,SteveFollowComment"

Answer: "0Some help here would be appreciated.  I reflashed my Raspberry Pi and did the tutorials again, only to find myself blocked with the same problem:socket.error: (Errno 10061) No connection could be made because the target machine actively refused itAdditionally, I can ping my laptop machine from the Raspberry Pi and vice versa, so it looks like basic connectivity is established.   And I confirmed that the Greengrass daemon is running.Thanks in advance,SteveEdited by: silverage on Nov 3, 2019 4:27 PMCommentShare1960pghpiratesanswered 4 years ago0Hi Steve,Do you have any firewall settings blocking the traffic on your local network and your computer?Can you check the output of "telnet 192.168.1.125 8883"?You could also try to run lightController.py script from the RPi, same host where the Greengras Core is running. Let me know if you see the same issue.Thanks,aws-huiCommentShareAWS-User-5233880answered 4 years ago0Hi,Thanks for the reply.  The Telnet connection looks normal so I dont think that a firewall is blocking things.I have packaged the lightController.py script as a Lambda function, included the Lambda in my Greengrass group, created a subscription, and deployed the group.  I am not clear however on how to verify that the Lambda is working as expected.   My subscription is configured as follows:Source:  lightController  (Lambda - long life)Target:  IoT CloudTopic:  $aws/things/GG_TrafficLight/shadow/updateHow do I then test the Lambda and confirm that it is working on the Raspberry Pi?  In the lightController function code I could not find where it writes to a topic.Thanks,SteveEdited by: silverage on Nov 13, 2019 5:28 PMCommentShare1960pghpiratesanswered 4 years ago0Hi silverage,You can enable logs on your lambda functions and then monitor the logs to see the lambda get triggered and then publish on a topic.https://docs.aws.amazon.com/greengrass/latest/developerguide/gg-troubleshooting.html#troubleshooting-logsThanks,KR-AWSCommentShareKR-AWSanswered 4 years ago0Ok, I am seeing an error in lightController.log:[2019-11-24T22:29:46.063Z][FATAL]-lambda_runtime.py:131,Failed to import handler function "lightController.function_handler" due to exception: No module named AWSIoTPythonSDK.MQTTLib[2019-11-24T22:29:46.888Z][FATAL]-lambda_runtime.py:371,Failed to initialize Lambda runtime due to exception: No module named AWSIoTPythonSDK.MQTTLibThe directory structure for the Lambda function is lightController / greengrassdk / lightController.pyAlso seeing the following in runtime.log:[2019-11-24T22:43:50.26Z][INFO]-Worker Memory Usage (KB).{"workerId": "1713b1ce-c1fb-4bcd-4619-659b76bc253f", "funcArn": "arn:aws:lambda:us-west-2:468820349153:function:lightController:1", "memSize": 16384, "memUsed": 11304}[2019-11-24T22:43:50.26Z][ERROR]-Worker is ungracefully killed.{"workerId": "1713b1ce-c1fb-4bcd-4619-659b76bc253f", "funcArn": "arn:aws:lambda:us-west-2:468820349153:function:lightController:1", "state": "exit status 1"}Thanks,SteveCommentShare1960pghpiratesanswered 4 years ago0Hi Silverage,Make sure lightController.py is in the folder that contains greengrasssdk. See:https://docs.aws.amazon.com/greengrass/latest/developerguide/create-lambda.htmlCheck the following commands:which python2.7Which version of python does your lambda use? This lambda requires python2.7.Thanks,KR-AWSCommentShareKR-AWSanswered 3 years ago0You appear to be missing the IoT SDK:  https://pypi.org/project/AWSIoTPythonSDK/1.0.0/ . Go ahead and download that and include it with your lambda zip and it should start to work; or at least give a different error.CommentShareMichaelanswered 3 years ago0I was stuck in the same issue. Then I came upon a solution in stackoverflow I think. It asked me to delete the GroupCA folder that was created in my folder. The error was due to some certificate expiration. It worked for meCommentShareAmbarishGKanswered 3 years ago"


Question: SQS - Extended Client - Too many ERROR [S3Dao] Failed to get the S3 object which contains the payload.

I'm getting lots (100's) of the following error logged by the ExtendedSQSClientERROR [S3Dao] Failed to get the S3 object which contains the payload.I'm not seeing a corresponding error on the publisher side - so what is happening on the consumer side that is causing this to happen - and how do i go about fixing it ?FollowComment

Answer: "0The SQS Extended Client is used to facilitate sending a larger payload in SQS. SQS supports messages up to 256KB. If you need to send larger payloads, we recommend storing these payloads in S3 and send the object key in the SQS message. the extended client does it for you.It is difficult to say from the info provided what is the issue, as we do not know why it failed to get the object from S3. One option is that the consumer doesn't have the right policy in its role to access S3. If this is the case, all messages containing large payloads will fail.I would recommend to looking at the role and if that is not the issue, check CloudTrail to see what are the errors.CommentShareEXPERTUrianswered 10 months agoUri EXPERT10 months agoCould it be that you are processing messages twice? The first time deletes the object and the second one doesn't fine it? Did you check in CloudTrail if the objects get deleted? Do you see the objects in the bucket later?Share0Hi Uri, Thanks for responding.I should have made clear that not all messages have this problem - so its not anything to do with the bucket policy.The exception is thrown when the extended client fails to find the content on S3 - ie the key doesn't exist. I've no idea why the key doesn't exist - i'm not getting any exceptions thrown on the publishing side of the queue.Enabling cloudtrail - just confirms that the extended client code can't find the key on S3.CommentShareGraemeWanswered 10 months ago0HiBehind stage, your are pushing a file into the s3 , knowing that the s3 is a global service and not really strong consistent ."Amazon S3 provides read-after-write consistency for PUTS of new objects in your S3 bucket in all regions with one caveat."Ignoring the caveat, this means that a client issuing a GET following a PUT for a new object is guaranteed to get the correct result.https://aws.amazon.com/blogs/aws/amazon-s3-update-strong-read-after-write-consistency/Based on documentation you get object asap the write is terminated since 2021.But, My thought is that you are consuming the message to early before that the S3 key be available globally.Try Adding some delay to your message when pushing to SQS , using DelaySeconds https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-delay-queues.htmlthis will be better solution letting s3 object be replicated.Try also to check if behind the write the object persists really in s3CommentShareOmid Eidivandianswered 10 months ago"


Question: can i call a lambda function from ecs fargate instance

My question is simple. Is it possible to call a lambda function from an ecs fargate instance in a private subnet? If it's possible how can achieve that.Thank you.FollowComment

Answer: "0Accepted AnswerHello ahmet nash,You can invoke a lambda function from within an ECS Fargate tasks that is running in a private subnet.For this to work, you can create Interface VPC Endpoints for Lambda in your VPC.This will establish a network connection between your VPC and AWS Lambda Service, which will allow your ECS tasks to perform Lambda Invoke API operations.I hope this information is helpful!CommentShareSUPPORT ENGINEERVenkat Penmetsaanswered 4 months ago"


Question: [CodePipeline / CodeStar] GitHub returned an Internal Error exception

"From this post (https://news.ycombinator.com/item?id=29891656), it looks like GitHub is no longer supporting unauthenticated "git://".Our CodePipeline builds stopped working today and we're getting the following error in the Source step:[GitHub] GitHub returned an Internal Error exception. Please retry shortly. If the issue continues it may be reported on the GitHub status page at https://githubstatus.comDoes CodeStar use "git://"?FollowComment"

Answer: "0Accepted AnswerAround the time your question was posted, GitHub was having some API problems:https://www.githubstatus.com/incidents/cypv026dr23wAlthough the first link only talks about pages/actions, some reports seem to indicate it was more widespreadThose GitHub problems would have resulted in the Source step error that you reported.CommentShareaws-mackenzieanswered a year agoNickHolden a year agoIt worked this morning, with no changes to our pipeline, so that must've been it.Share"


Question: Amazon Lex is not taking correct Voice Input

"Hi team,We have built one custom bot for one of the use case and we are using voice feature of Lex but the Amazon Lex is not recognizing the correct user input every time.Can someone please help me on thisThanks in advanceFollowComment"

Answer: "0Can you be a bit more specificWhat language are you usingBot versionThe utterances that are not recognisedWhat have you configuredCommentSharem66rusanswered a year agoRishi9615058 a year agoHi,The Bot is on English(US) language and we are using the Alphanumeric Built In Slot type for this. AS we are only expecting the specific alphanumeric value from User so we don't have any specific utterances in that end (Utterances we have : {slotname}.And when user is giving input via voice like FA1234 bot is recognizing as FE120Share0Hi,If you are looking to capture spellings, you may consider looking into Amazon Lex's spelling support: https://aws.amazon.com/about-aws/whats-new/2021/11/amazon-lex-spelling-support/Thanks!CommentShareJunsung-awsanswered a year ago"


Question: Lambda Function to invoke sagemaker endpoint

"Hi AWS, I need to create a lambda function that will invoke the SageMaker endpoint that will send a text description for which it will return a generated image.The endpoint is generated using HuggingFace model.I need your help with the code and the steps to obtain it.ThanksArjun GoelFollowComment"

Answer: "0There is a blog that shows how you can invoke a Sagemaker endpoint from a lambda function - https://aws.amazon.com/blogs/machine-learning/call-an-amazon-sagemaker-model-endpoint-using-amazon-api-gateway-and-aws-lambda/CommentShareEXPERTIndranil Banerjee AWSanswered 10 months agorePost-User-3199525 10 months ago{"errorMessage": "An error occurred (ModelError) when calling the InvokeEndpoint operation: Received client error (400) from primary with message "{\n  "code": 400,\n  "type": "InternalServerException",\n  "message": "\"Unknown task Text-to-image, available tasks are [\u0027feature-extraction\u0027, \u0027text-classification\u0027, \u0027token-classification\u0027, \u0027question-answering\u0027, \u0027table-question-answering\u0027, \u0027fill-mask\u0027, \u0027summarization\u0027, \u0027translation\u0027, \u0027text2text-generation\u0027, \u0027text-generation\u0027, \u0027zero-shot-classification\u0027, \u0027conversational\u0027, \u0027image-classification\u0027, \u0027translation_XX_to_YY\u0027]\""\n}\n". See https://ca-central-1.console.aws.amazon.com/cloudwatch/home?region=ca-central-1#logEventViewer:group=/aws/sagemaker/Endpoints/huggingface-pytorch-inference-2022-07-15-18-51-02-821 in account 428136181372 for more information.","errorType": "ModelError","stackTrace": [["/var/task/lambda_function.py",16,"lambda_handler","Body=serialized_input"],["/var/runtime/botocore/client.py",391,"_api_call","return self._make_api_call(operation_name, kwargs)"],["/var/runtime/botocore/client.py",719,"_make_api_call","raise error_class(parsed_response, operation_name)"]]}This is the error I am experiencing.ShareIndranil Banerjee AWS EXPERT10 months agoHave you tried the approach suggested here - https://discuss.huggingface.co/t/can-text-to-image-models-be-deployed-to-a-sagemaker-endpoint/20120Share0Yes I have gone through the approach as mentioned by you above but the problem is I am not a Machine Learning Expert so it will take me sometime to write inference for Text-to-Image. If you have python code for that it would be great as I need to complete that on urgent basis.CommentSharerePost-User-3199525answered 10 months ago"


Question: Asset Parameters in Cloud Formation template generated by AWS CDK

"I am attempting to use AWS CDK to create a CloudFormation template that is reusable. The template (generated from the "cdk synth" command) contains some resources, a lambda function and a custom resource to trigger the lambda function. It also contains some parameters to be fetched from the user for passing to the lambda. Since CDK generates and includes "asset" parameters like Asset for S3 Bucket, S3 Key and Artifact Hash in the template related to the Lambda assets, the template is not really reusable unless we use CDK to deploy the app. We would like to be able to use this synthesized CloudFormation template to create stacks independently. Is this possible? Is there a way to work around the Asset Parameters in the cdk app so that we can generate reusable templates?Thank you!FollowComment"

Answer: "0One option would be to change the way you build Lambda functions in your stack code. Instead of using new lambda.Function(), you could use lambda.fromFunctionName() or lambda.fromFunctionArn() to point to an existing Lambda function that you have uploaded previously using some other method.However, this is not a best practice. The better practice would be to deploy the stack using AWS CodeBuild, which can run your CDK application for you in a Linux container context.CommentShareEXPERTMichael_Fanswered a year agoAWS-User-vnambiar a year agoThank you @Michael_F! So the lambda itself should probably not be deployed as part of this stack and rather referenced by its ARN, is that right?Could you please elaborate on why this is not a best practice, and why the stack should be deployed using AWS CodeBuild? As I mentioned earlier, we're mainly interested in the template generated by "cdk synth" and would like that template to be reusable so that we can use it independently to deploy stacks in CloudFormation. We also want to make the template available through the AWS marketplace. Thanks!Share"


Question: Update records into salesforce from AWS

"Hello,We are trying to update records in salesforce with some data, Intially we tried to use the python library called "simple-salesforce" in bulk update mode in aws lambda but everything was working fine but when we are thousands of records coming into the sqs queue and lambda is processing them it was failing with an error ""CANNOT_INSERT_UPDATE_ACTIVATE_ENTITY:HDFC_DASH_LeadTrigger: System.LimitException: Too many queueable jobs added to the queue: 51".So most of the time updating into salesforce is failing and we integrated aws appflow. Right now data is inserted from sqs into s3 bucket as csv by a lambda function and aws appflow runs every 5 minutes in increamental basic using bulk mode it will update the records appflow if able to handle a little more records than simple-salesforce python library but it is still failing at times of high messages with the same error which is mentioned above.Is there anything I can do to overcome this error, or is there any AWS service or anyway to update records into salesforce rather than these two options which would not fail upon thousands of requests?FollowComment"

Answer: 0You can try eventbridgeSample setup here https://aws.amazon.com/blogs/compute/introducing-bidirectional-event-integrations-with-salesforce-and-amazon-eventbridge/CommentShareNirmal Rajananswered a month agoNirmal Rajan a month agohttps://aws.amazon.com/blogs/compute/introducing-bidirectional-event-integrations-with-salesforce-and-amazon-eventbridge/Share


Question: Creating a Private Community

Can my customer create a private group that is only viewable by their own employees?FollowComment

Answer: "1Hello,I would like to understand the complete use-case here before providing you recommendations to enhance the security & privacy. You mentioned there is an ask to create a private group, however there is no mention of any particular service here. I can suggest you to an AWS service of AWS Organizations where you can create user-groups and policies using IAM and restrict the users by various methods.AWS Organizations: https://aws.amazon.com/organizations/In addition, AWS Organizations is integrated with other AWS services so you can define central configurations, security mechanisms, audit requirements, and resource sharing across accounts in your organization. AWS Organizations is available to all AWS customers at no additional charge.Also refer to the document mentioned here with respect to Organization and how it works well with IAM:https://docs.aws.amazon.com/organizations/latest/userguide/orgs_security_iam.htmlHope this helps :)CommentShareSUPPORT ENGINEERAWS-User-Chiraganswered a year agoAWS-User-3530045 a year agoThe customer wants to know if they can create their own private group using Re:Post.ShareAWS-User-3530045 a year agoHi, just circling back on my previous follow up question. Can the customer create their own internal re:Post group, for their own employees to post questions/answers?Share"


Question: Migrate RDS MySQL 8.0.28 to Aurora MySQL

"Hi, it seems Aurora MySQL supports up to MySQL 8.0.23. I'd like to migrate a 2TB database from RDS MySQL 8.0.28 to Aurora MySQL. What's the best practice to do this migration quickly and without losing data or having downtime?FollowComment"

Answer: "0Hello,The best approach at the moment is to use a 2 step approach to migrate from MySQL to Aurora Serverless.Step 1 - Is migrate to Aurora provisioned through a read replica https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/AuroraMySQL.Migrating.RDSMySQL.Replica.htmlStep 2 - Is migrate from Aurora provisioned to Aurora Serverless from a snapshot https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-serverless.restorefromsnapshot.htmlLet me know if this is helpful and click accept answer !!CommentShareSUPPORT ENGINEERAWS-User-Chiraganswered 10 months agorePost-User-1835914 10 months agoHi, unfortunately this is not possible. I want to migrate from RDS MySQL to Aurora MySQL (not serverless). I tried creating an Aurora read replica from the RDS instance, but it fails, saying that MySQL 8.0.28 is not supported in Aurora (docs also say that it supports only up to 8.0.23).So it seems that any version above MySQL 8.0.23 cannot be upgraded from RDS to Aurora?Any help will be appreciated. Thank you.SharerePost-User-4722943 9 months agoI am facing the same problem. I am looking for a solution to this problem.SharerePost-User-0109537 3 months agoI have the same problem. Has there been any resolution. What options are there to go from RDS Myql8.0.28 to Aurora?Share0You have multiple options.Use DMS as if you are migrating from On-prem to Aurora. DMS can migrate across different versions with Full database and change data option. Cutover when the replication lag is 0.use mysqldmp to export logical data dump of your source system and then import into Aurora initially and then use DMS for ongoing replication and then cutover then the replication lag is 0.Both these options should work. If you are using any MySQL 8.0.28 specific functionalityCommentShareAnupam Goyalanswered 2 months ago"


Question: Lightsail: extreme slowness of both AWS interface and instances in Ohio (us-east-2) zone A

"In the last three days, I've been encountering a cluster of problems that are making me rethink the viability of Lightsail as a platform.On the 28th of September, I found three live WordPress instances I'm responsible for suffering heavy processor use for no apparent reason. Thinking this was a result of an attack of some kind, I checked on a dev instance mirroring the worst hit of these (an ecommerce site running on a 4-CPU instance), and found that it too was thrashed and had burned through its burst capacity, despite not even having a static IP address. At the same time, lightsail.aws.amazon.com was very slow to fully load (I got to watch the little rocket tracing the infinity symbol for minutes at a time) and trying to reach the command line through that route was a lost cause. Yesterday was better, but today the interface slowness is back, and both public-facing and dev websites are timing out.I see that there were problems on the Oregon side, but can't see a record of issues that should be affecting me. (If it's relevant, I'm located in Minnesota.)Can anyone shed any light here?FollowCommenttanbrian 8 months agoCould you try to identify the processes that are causing the heavy CPU usage on your WordPress instances? That could provide some more hints as to what the issue is.About the console slowness, are you experiencing this slowness on the console in general, or only on specific pages?Share"

Answer: "0Using the top command may help identify expensive processes exhausting CPU on your instance.Given the issue manifests on both live site and dev sites that serve little traffic, it may point to an issue with your WordPress.  With WordPress, many components can impact CPU usage such as: WordPress version, Plugins, Themes,  WP-cron.  You may want to identify when the CPU usage spiked and if it corresponds with installing or updating any of the above CP components.You may also find cacheing or media offloading help alleviate CPU load.  Offload and cacheing can be achieved through a variety of plugins, and possibly use of buckets or distributions.  However, this sounds less likely as you mentioned the dev instance mirrors also being similarly impacted by CPU usage.CommentShareAWS-Andyanswered 8 months ago"


Question: Cloud teering Bandwidth limits

"hi, im uploading from ibm Fs5200 Storage to AWS via cloud teering proccessare there any Bandwidth limits from AWS side? it is taking forever to transfer data.on the fs5200 i canceled bandwidth limits.anyone has an idea why? what to do?FollowComment"

Answer: "0There's no bandwidth limit from AWS side. The upload speed through internet is depends on various factor like your network configuration, ISP between AWS and your onprem datacenters, the protocol that your are using for uploading your storage data and your data characteristic. I recommend you to take a look AWS snowball series if you need to upload large volume of data (over10TB) to AWS.  https://aws.amazon.com/snowball/CommentShareHyeonanswered 10 days ago"


Question: How verify when the mysql.rds_set_external_master works

"Good morning .I made the steps to configure an new replica with storage fit , made dump + load in separade instance and to finish, I used the procedure mysql.rds_set_external_master to sincronize the data . But I dont know how to see if the call procedure works.FollowComment"

Answer: 0You can see the status of the replication with this command:show replica status\GCommentShareMODERATORphilawsanswered 22 days ago


Question: Credit Sharing in PMAs

Is it possible to share Credits between two different PMAs?Eg Payer 1 receives credits but gives Payer 2 to consume them.FollowComment

Answer: "0At the moment, it's not possible to share credits between AWS Organizations (i.e. you can't have AWS Credits on one Payer account, but utilize them by accounts under another Payer).Credits sharing is only available within accounts in the same AWS Organization (linked to the same Payer): https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/useconsolidatedbilling-credits.html#credit-sharingCommentShareEXPERTNataliya_Ganswered a day ago-1Hi there,If you haven't had the chance, check out this doc that details credit sharing and the various ways you can apply them: https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/useconsolidatedbilling-credits.html.Still have questions? Our Billing team has the expertise to take a closer look with you. To open up a dialogue, please create a free case here: https://console.aws.amazon.com/support/home.- John M.CommentShareEXPERTAWS Support - Johnanswered 8 days ago"


Question: What is the best way to work with databases in local environments?

"We currently work with Aurora RDS postgres. Initially our database was small and easy to manage, we sent a dump to S3 and made it available to developers to develop new features and solve bugs.For today our database weighs 700GB, what are the best strategies to make the data available to developers? It is impossible to download the entire database, it would be very costly in time. The most important thing is that they have data to develop new features and solve bugsFollowComment"

Answer: "2Accepted AnswerFirst off, consider whether having a single copy which all of your developers connect to would meet your needs. They would connect remotely, and it would be a copy of your production data. So it's great because it's easy to refresh it regularly and it's guaranteed to have all of your production use cases covered. It has many advantages.But that may not meet your needs. You said that you wanted local databases. In that case I think you have two main paths to consider.Generate sample dataCreate a process to extract a subset of your production dataGenerating sample data will probably take more effort in the beginning. But it has some nice advantages. It's very easy to ensure that you generate the data that you need. It would be parameterized, so each developer generates the data he/she cares about at that point in time. There are no network issues downloading large data sets.But if you really need to extract a portion of the main database, then you need to think of it as an Extract-Transform-Load (ETL) project. Use a Data Integration (DI/ETL) tool to connect to the main database and extract some subset. Ideally the subset will be easily defined. Maybe for most tables you simply take the latest 2 months of data, and for other tables (like reference tables) you take the entire table. It would be significant effort to define all of the individual mappings... but really it wouldn't be complex. You could decide on details like loading the data into another database or saving into CSV files. Then make the database dump or CSV files available to your developers. As a developer, you might be inclined to write your own scripts to perform this job. Of course that's possible. But there are so many good ETL tools available (including free ones) that I would argue strongly in favor of using a tool to write these jobs.CommentSharemdahlmananswered a year agoEXPERTHernitoreviewed a year agoEXPERTJohn_Freviewed a year ago1Using Aurora Cloning is a common way customers create full database copies and make them available to their developers; quickly and with minimal additional cost.  These clones can be re-established on a recurring basis (e.g. weekly)  Check out this blog for more details: https://aws.amazon.com/blogs/aws/amazon-aurora-fast-database-cloning/CommentShareGreg_Ganswered a year agoEXPERTHernitoreviewed a year agoMaxCloud a year agoI need isolated databases for each developer, RDS would fall short with its limit of 40 instances, apart from that it would be too expensive.Is there a tool that could bring a part of the database, which is consistent between the tables?Share"


Question: UnsupportedDocumentException: Request has unsupported document format

"I am running into issues with Textract on certain PDF files. I keep getting an unsupported document format error after uploading my PDF file to S3, then calling the AnalyzeDocumentCommand via @aws-sdk/client-textract with Node.jsIs there a certain way Textract expects a PDF to be encoded before uploading to S3? Using the Textract demo on the AWS console UI works perfectly with the same PDF that causes an error when trying to go through the JavaScript SDK.FollowComment"

Answer: "0Hi,Encoded is not required using the SDK. Please find the code example below:const { TextractClient } = require('@aws-sdk/client-textract');async function main() {  const client = new TextractClient({    region: 'us-east-1',  });  const request = {    Document: {      S3Object: {        Bucket: 'my-bucket',        Name: 'my-file.pdf',      },    },    FeatureTypes: ['TABLES', 'FORMS'],  };  try {    const result = await client.send(new AnalyzeDocumentCommand(request));    console.log(result);  } catch (err) {    console.error(err);  }}main();This code will send a request to the AWS Textract service to analyze the PDF file stored in the my-bucket S3 bucket with the name my-file.pdf and will return the analysis results to the result variable. The FeatureTypes parameter specifies which types of features to extract from the document, in this case tables and forms. You can find more information about the available feature types in the Textract documentation.I hope this helps!CommentShareJadyanswered 5 months ago"


Question: Can I rely on EXT-X-SESSION-DATA BROADCAST-ID changing per start ?

"The master playlist contains a 'broadcast-id' fieldEXT-X-SESSION-DATA:DATA-ID="BROADCAST-ID",VALUE="42818220844"It seems to update whenever I stop and start the stream. Is that something I can rely on ?FollowComment"

Answer: "0Hi Olufunke,Can you please share with us more details on the use case that you are trying to achieve?It may be possible that what you are looking to do can be done via Amazon EventBridge with IVS https://docs.aws.amazon.com/ivs/latest/userguide/eventbridge.html using stream_idCommentShareAWS-Nazreeanswered 2 years ago0aws-nazree wrote:Hi Olufunke,Can you please share with us more details on the use case that you are trying to achieve?I'm using a hls.js player for IVS, and when a stream is stopped and then restarted the player doesn't pick that up by itself. I want to it to go back to the master playlist and see if livestreaming has restarted, so this is mostly a sanity check in case I'd get stale date (the previous streams) and I don't try to replay the old content.I also want to use it to distinguish between MediaPackage and IVS streams, as MediaLive doesn't have the broadcast ID - and applying the same algorithm to a MediaPackage otherwise causes the player to simply reloop the last few segments if the stream is stopped but not restartedIt may be possible that what you are looking to do can be done via Amazon EventBridge with IVS https://docs.aws.amazon.com/ivs/latest/userguide/eventbridge.html using stream_idThen I need to connect the client browsers to the eventbridge somehow. It seems more convenient to check the master playlist, as they already have that URL.CommentSharearnoldhanswered 2 years ago0Hi all,The ‘broadcast-id’ field sent within the manifest file can be used to distinguish between different stream sessions, as each stream will have a unique broadcast session id associated with it. However, there are multiple things that we want to warn about when using this value:Mapping of the broadcast-id: The value present in the manifest file is not a system wide identification value. For example, the broadcast-id in the manifest file will not be the same one found within the EventBridge Stream State Change events (https://docs.aws.amazon.com/ivs/latest/userguide/eventbridge.html#eventbridge-examples-stream-state-change). This means that correlating which broadcast the viewer is watching to the stream session through these values is not directly possible.Support for the broadcast-id: The broadcast-id value within the manifest file is not a supported API value. This means that it is subject to be changed or removed without warning, thus we advise against referencing values found within the manifest file directly. While we do not expect the manifest file contents to be changed, we wanted to provide this warning.CommentShareriley-awsanswered 2 years ago"