Question: WorkDoc Permissions

How can I provide anyone with read/write access once I share a WorkDoc link? I don't want to approve each person that requests access to the document.FollowComment

Answer: "1Your users can share content by sending a link or an invite. Please refer the following links to learn how you can set permissions for each share typehttps://docs.aws.amazon.com/workdocs/latest/userguide/share-invite.htmlhttps://docs.aws.amazon.com/workdocs/latest/userguide/web_share_link.htmlhttps://docs.aws.amazon.com/workdocs/latest/userguide/permissions.htmlCommentShareShrutianswered 6 months ago0You can share the document using link. There are two options available.Option 1. View – View only access is allowed to anyone inside your Amazon WorkDocs organization.Option 2. Public (file links only) – Anyone who has the link can view the file, whether they are outside or inside your Amazon WorkDocs organization.Please refer to more details with following link.https://docs.aws.amazon.com/workdocs/latest/userguide/web_share_link.htmlCommentShareEunsu_Shinanswered 6 months ago"


Question: Prescriptive guidance on how to setup an enterprise AWS environment

"Does AWS provide prescriptive guidance on how to setup, operate, and manage cost in an enterprise environment?  I'm looking for how-to's, workshops, and/or specific documentation, and best practices.There is a ton of content that AWS provides, however, there doesn't seem to be one comprehensive place on the site that provide the type of prescriptive guidance I'm looking for.FollowComment"

Answer: "1Accepted AnswerYou are in luck. Recently (Sept 2022) the AWS Cloud Foundation Team has started building this out.Solutions: https://aws.amazon.com/solutions/cloud-foundations/Whitepaper: https://docs.aws.amazon.com/whitepapers/latest/establishing-your-cloud-foundation-on-aws/welcome.htmlSolutions for deployment are few, but they will be providing more and more as the team builds out solutions.The Foundation documentation is very basic but it helps build just that.Here is the teams re:Invent Session from last week: https://www.youtube.com/watch?v=mHOtAEk-5tEAs well as best practices for Organizing on AWS: https://www.youtube.com/watch?v=Eeyd6BDpucwI have been building enterprise scale AWS Organizations for quite some time both at Federal and Private Sector level. This is by far the best resource to get started with. If you have any additional questions or would like to discuss some of your considerations please reach out: https://iq.aws/e/rosswickmanCommentShareRoss Wickmananswered 6 months ago"


Question: AWS Workspace failed to map local printer

"Hi Guys,My aws workspace has problem to map local printer.The local PC OS is Win7_64_Pro, and workspace OS, I think we all have the same, is Win Server 2016 Data Center.I have followed instruction from below link:http://docs.aws.amazon.com/workspaces/latest/userguide/printing.htmlbut has not solved the issue.My colleague's workspace is able to map local printer, and the OS on his machine is Win 10 Pro.So I am thinking that this could be caused by OS conflict, but cannot explain why.Does anyone have the same/similar issue when map local printing? Could someone shed a light of it please? I'd appreciate any advises.Thanks,JamesEdited by: RichFieldTechnology on Jan 7, 2018 2:32 PMFollowComment"

Answer: "0I try the following when the Teradici virtual printer driver on a WorkSpace is not seeing a printer on the local machine.Disconnect from the WorkSpace and reconnect.If still not seeing the printer restart the WorkSpace and reconnect.If still not seeing the printer restart the local machine and reconnect to the WorkSpace.Doing that has solved it for me. Also if the printer is a shared printer from someone else's local PC or a print server try to connect your local machine to it directly instead (either USB or wired/wireless network).Edited by: mglennjp on Jan 7, 2018 8:41 PMCommentSharemglennjpanswered 5 years ago0Can you provide a bit more information about your problem and diagnosis?One of the first steps in analysing a problem is to compare the failing case (yours) to the working case (your colleague) and see what is different between the two, looking at the differences one by one to determine the problem.One big difference is the local PC.  Not just the OS, but the whole PC is different--you have yours and your colleague has his.  Is the locally attached printer the same, or is it a different model between the two?  Can you confirm that your locally attached printer works?  It's not clear from your posting how your PC differs from your colleague's so forgive the questions if they seem rather basic.As an experiment, try connecting to your AWS Workspace (you'll need to switch profiles in the AWS client) from your colleague's PC machine.  Once you connect, see if your colleague's local printer shows up.  If it does, that means the problem is with the configuration on your PC (and not your AWS Workspace).If it does not, that implies it's a problem with your AWS WorkspaceLikewise, ask your colleague to connect to his AWS Workspace from your PC.  See if he can access the local printer.  If he can't, it means there's a problem with your local PC.  If he can, it means there's a problem with your AWS Workspace.We need to perform the above to narrow down the problem.  Statistically speaking, the problem is most likely with your local PC configuration, but we need to methodically test each  possibility to narrow down the issue.CommentShareDonawaAtTeradicianswered 5 years ago0HiThanks for your reply.I have attempted to use my account logging into two local PCs, which my account is able to map local printers on both local PCs for sure, but my colleague's account not.So I don't think it is necessary to give more detail of what differs are between local PCs.To best describe the issue, I would still say: AWS workspace failed to map local printers.Some discussion re this issue suggests to change Group Policy in Domain controller, as the issue could be caused by "Administration Control". However, I have attempted to make the change on Group Policy, but it won't make any changes for this issue. I did check local Group Policy list, which I'm not able to find any features/settings that would change printer mapping function at all.Happy to accept any suggestions from you further.BTW, I don't think local printer with cable connection or network connection would cause this issue in this scenario anyway.Cheers,JamesEdited by: RichFieldTechnology on Jan 17, 2018 9:12 PMEdited by: RichFieldTechnology on Jan 17, 2018 9:13 PMCommentShareRichFieldTechnologyanswered 5 years ago0RichFieldTechnology wrote:HiThanks for your reply.I have attempted to use my account logging into two local PCs, which my account is able to map local printers on both local PCs for sure, but my colleague's account not.Sorry, I didn't really understand your description. When you say "my account", do you mean your Windows account, or do you mean you logged onto your AWS workspaces account from two different PCs?  Previously you mentioned your colleague's account worked, but now you mention that it doesn't.So I don't think it is necessary to give more detail of what differs are between local PCs.To best describe the issue, I would still say: AWS workspace failed to map local printers.I didn't really understand from your description how you arrived at this conclusion, but okay, we'll assume that the problem is not on your local PCSome discussion re this issue suggests to change Group Policy in Domain controller, as the issue could be caused by "Administration Control". However, I have attempted to make the change on Group Policy, but it won't make any changes for this issue. I did check local Group Policy list, which I'm not able to find any features/settings that would change printer mapping function at all.Happy to accept any suggestions from you further.Yes, looking into the GPO settings is a good place to start.You will not see the PCoIP options via gpedit.msc until you load the PCoIP configuration file.On your workspace, run gpedit.msc and from the administrative template add the template in C:\Program Files (x86)\Teradici\PCoIP Agent\configuration\pcoip.admSee {message:id=701842} for the general idea.If you just want to view the settings, you can of course just use gpresult or rsophttps://deployhappiness.com/gpresult-or-rsop/BTW, I don't think local printer with cable connection or network connection would cause this issue in this scenario anyway.Well, if the printer was not showing up locally on the PC, then it wouldn't show up on the AWS Workspace, so I was just trying to make sure that that was not the case.CommentShareDonawaAtTeradicianswered 5 years ago0Hi,Thanks for the reply again.After looked at more places in the system for further troubleshooting, and I say straightly, the answer is "Teradici PCoIP Printing Service" which is disabled in services list. This is the reason to cause printers from local PC that cannot map into AWS workspace, or AWS workspace cannot find printers from local PC.The solution is:Right Click-on Windows Button, go to "Run" --> "Service.msc", find "Teradici PCoIP Printing Service", right click-on "Properties", ensure the Startup Type is "Automatic", and click on "start" button to run the service.Thanks,JamesEdited by: RichFieldTechnology on Jan 24, 2018 4:47 PMCommentShareRichFieldTechnologyanswered 5 years ago0Yes, that would explain it.  Very odd that the service was in that state since when it is installed its service is configured to start automatically.Oh well, as long as it's working for you now, that's all that matters.CommentShareDonawaAtTeradicianswered 5 years ago"


Question: Textract run fails

Trying to run textract example (https://docs.aws.amazon.com/textract/latest/dg/example_textract_DetectDocumentText_section.html) on my local environment but getting error.Caused by: java.lang.NoSuchMethodError: 'java.util.Optional software.amazon.awssdk.http.SdkHttpResponse.firstMatchingHeader(java.util.Collection)' at software.amazon.awssdk.protocols.json.internal.unmarshall.AwsJsonResponseHandler.generateResponseMetadata(AwsJsonResponseHandler.java:60) ~[aws-json-protocol-2.17.252.jar:?]at software.amazon.awssdk.protocols.json.internal.unmarshall.AwsJsonResponseHandler.handle(AwsJsonResponseHandler.java:47) ~[aws-json-protocol-2.17.252.jar:?]at software.amazon.awssdk.core.http.MetricCollectingHttpResponseHandler.lambda$handle$0(MetricCollectingHttpResponseHandler.java:52) ~[sdk-core-2.17.169.jar:?]Do I miss some client configuration so that DefaultSdkHttpFullReponse is used instead of other implementation that consists correct method with Collection argument?FollowComment


Question: Can not you call SDKInit () in a background process?

"I am going to upload UNet Server to Gamelift.UnityEngine provides the ability to run programs in the background.However, after creating the fleet, the Aws Gamelift consoleThe message "A process unrecognized by GameLift is attempting to make GameLift Server SDK API calls. Are you using a process launcher?" appears.Within five minutes of this, there will be an event message that the SDKInit () function has not been called.Before I created the fleet, I noticed that the local test runs without any problems until the Server Health Check.I'm not sure what to do with this problem. Please help me.FollowComment"

Answer: "0Hello there -GameLift expects whichever process has been integrated with the GameLift Server SDK to be the same process that calls InitSDK() and ProcessReady(). In other words, whichever process you specify in your Fleet's Runtime Configuration (eg. C:\game\server.exe), that executable needs to be the one that is integrated with the GameLift Server SDK and communicates back to GameLift via the InitSDK() method, otherwise registration of your game server process will timeout and the error message you describe above will be shown.Does this help?CommentSharerePost-User-5697045answered 5 years ago"


Question: Cannot install AWS CLI v2 on Raspberry pi 4B+ with Raspbian GNU/Linux 10(buster)

I tried to install AWS CLI v2 on raspberry pi 4 model b+ with Raspbian GNU/Linux 10 following step.But I confronted /usr/local/bin/aws: No such file or directory error when checking aws cli verison by using aws --version command.Is it possible to install AWS CLI v2 on raspberry pi 4 model b+ with Raspbian OS for ARM64 ?Install step$ curl "https://awscli.amazonaws.com/awscli-exe-linux-aarch64.zip" -o "awscliv2.zip"$ unzip awscliv2.zip$ sudo ./aws/install -i /usr/local/aws-cli -b /usr/local/binError message./aws/install: 78: ./aws/install: /home/pi/aws/dist/aws: not foundYou can now run: /usr/local/bin/aws --version$ aws --version/usr/local/bin/aws: No such file or directorySupplimental information is as follow for futher analysis.$ uname -aLinux rapsberrypi4 6.1.20-v8+ #1638 SMP PREEMPT Tue Mar 21 17:16:29 GMT 2023 aarch64 GNU/Linux$ cat /etc/os-releasePRETTY_NAME="Raspbian GNU/Linux 10 (buster)"NAME="Raspbian GNU/Linux"VERSION_ID="10"VERSION="10 (buster)"VERSION_CODENAME=busterID=raspbianID_LIKE=debianHOME_URL="http://www.raspbian.org/"SUPPORT_URL="http://www.raspbian.org/RaspbianForums"BUG_REPORT_URL="http://www.raspbian.org/RaspbianBugs"FollowComment

Answer: "0Hello,You can install AWS CLI v2 on raspberry pi 4 model b+ with Raspbian OS for ARM64.The error "/usr/local/bin/aws: No such file or directory" usually indicates that the AWS CLI binary is not installed or not in the expected location. Please refer the following steps to troubleshoot the issue.Uninstall AWS CLI and re-install it again=> Please refer the article Uninstalling the AWS CLI version 2 to uninstall the CLI=> Re-install the AWS CLI: Installing or updating the latest version of the AWS CLIcurl "https://awscli.amazonaws.com/awscli-exe-linux-aarch64.zip " -o "awscliv2.zip "unzip awscliv2.zip sudo ./aws/install -i /usr/local/aws-cli -b /usr/local/binIf AWS CLI is installed but not in the expected location, you can check where it is installed by running the following command:$ which awsThis will give you the path where AWS CLI is installed. If it is not installed in "/usr/local/bin/aws", you may need to update your environment variables to point to the current location.If you have updated your environment variables, and are still experiencing the error, you can try adding the path to the AWS CLI binary to your PATH variable as follows:Syntax: export PATH=/path/to/awscli/bin:$PATH   #Replace /path/to/awscli/bin with the actual path to the AWS CLI binaryExample:$ sudo export PATH=/usr/local/bin:$PATHLet me know if you have any further queries. Thank you for your interest in re:Post community.Best Regards, AshishRefer Re:Post Installing AWS CLI v2 on Raspberry Pi 4B with Raspbian OSCommentShareSUPPORT ENGINEERAshish Bharadwajanswered 2 months ago0Hello, Ashish.Thank you for your quick feedback above !According to your above procedure, I uninstall and re-install AWS CLI but detected same error "Not such file or directory".In addition, regarding the path to the AWS CLI binary, it looks like adding the path which AWS CLI is installed correctly.For further analysis, I wrote a series of steps as follow.pi@rapsberrypi4:~ $ sudo ./aws/install -i /usr/local/aws-cli -b /usr/local/bin./aws/install: 78: ./aws/install: /home/pi/aws/dist/aws: not foundYou can now run: /usr/local/bin/aws --versionpi@rapsberrypi4:~ $ which aws/usr/local/bin/awspi@rapsberrypi4:~ $ echo $PATH/home/pi/.local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/games:/usr/gamespi@rapsberrypi4koba:~ $ aws --versionbash: /usr/local/bin/aws: Not such file or directoryAfter that, I checked directory to install AWS CLI binary and it appears that there is "aws" in ../dist/aws as follow.But this aws failed to run.pi@rapsberrypi4:~ $ ls /usr/local/bin -la...lrwxrwxrwx  1 root root    37  4月  4 22:27 aws -> /usr/local/aws-cli/v2/current/bin/awslrwxrwxrwx  1 root root    47  4月  4 22:27 aws_completer -> /usr/local/aws-cli/v2/current/bin/aws_completerpi@rapsberrypi4:/usr/local/aws-cli/v2/current/bin $ ls -lalrwxrwxrwx 1 root root   11  4月  4 22:27 aws -> ../dist/awslrwxrwxrwx 1 root root   21  4月  4 22:27 aws_completer -> ../dist/aws_completerpi@rapsberrypi4:/usr/local/aws-cli/v2/current/bin$ cd ../dist/pi@rapsberrypi4:/usr/local/aws-cli/v2/current/dist$ ls -la...-rwxr-xr-x 1 root root  6636240  4月  5 21:01 awsI did above procedure twice. But the result was same.CommentSharerePost-User-7980242answered 2 months ago"


Question: Cloud-watch-agent High CPU usage.

"Hi, I'm using runcommand to collect metrics from cloud-watch-agent. And when there is High CPU usage alarm. It only says that CPU usage is high due to cloud-watch-agent.This is what i set on power-shell-script and Command Parameter.➡"powershell -Command "get-process | select cpu ,name | Sort-Object -Property cpu -Descending"What I want to know is what's causing cloud-watch-agent cpu usage so high? I want to know the details of Cloud-Watch-Agent cpu usage.FollowComment"

Answer: "0Hello,Thank you for reaching out on RePost!Since this issue concerns specific resources I would highly recommend to AWS Support directly via the case console so that we are able to investigate the issue with your CloudWatch agent further. However, from a more general perspective, high CPU is generally seen when the agent is pushing/ processing logs and sending them to CloudWatch logs.If you do open a case on the support console please do upload the CloudWatch Agent configuration which you are using so that we can take a look at it for you and assist further.CommentShareSUPPORT ENGINEERJasper_Ranswered 10 months ago"


Question: Websocket Authorizer Status 500

"EDIT: MARKED AS SOLVED. ANSWER AT BOTTOM!Hi,Trying to get POC going to authenticate a web socket $connect. Using .net examples, but when the authorizer lambda is returned to the $connect, the status is 500.The web socket is functional without authorizer.Below is the successful Cloudwatch log entry:{    "requestId": "QBs88GlriYcFrew=",    "ip": "<SOME IP>",    "caller": "-",    "user": "-",    "requestTime": "21/Jul/2020:14:01:03 +0000",    "eventType": "CONNECT",    "routeKey": "$connect",    "status": "200",    "connectionId": "QBs88fnviYcCHTg=",    "principalId": "-"}When I add the authrorizer, the above entry changes to status 500:{    "requestId": "QBbzsG1FiYcF7dA=",    "ip": "<SOME IP>",    "caller": "-",    "user": "-",    "requestTime": "21/Jul/2020:12:04:01 +0000",    "eventType": "CONNECT",    "routeKey": "$connect",    "status": "500",    "connectionId": "QBbzscLSiYcCJOA=",    "principalId": "-"}The AuthPolicy returned by the lambda (serialized by me to json). This lambda executes without exceptions :{    "principalId": "testuser",    "policyDocument": {        "Version": "2012-10-17",        "Statement": [            {                "Action": "execute-api:Invoke",                "Effect": "Allow",                "Resource": "arn:aws:execute-api:us-east-2:<ACC>:<APP>/Prod/$connect"            }//Second one added to test. Don't think this is needed.,            {                "Action": "execute-api:Invoke",                "Effect": "Allow",                "Resource": "arn:aws:execute-api:us-east-2:<ACC>:<APP>/Prod/POST/@connections"            }        ]    }}Authorizer lambda executes with role which has 'AWSFullLambdaAccess'.So, it appears if the authorize lambda is called before the $connect, and executed, but I cannot get the $connect in the web socket past the 500 status code. I also hardcoded the authorize lambda to always be 'true', for the test. Also, I'm not sure if the actual principalId, should be a valid Cognito user. Currently it is, but I have no further authentication in the Authorizer lambda.It appears if the status 500 results in the $connect connect lambda call never being executed.Any help appreciated.SolutionOk. Found my answer.https://stackoverflow.com/questions/41451582/c-sharp-implementation-of-aws-api-gateway-custom-authorization-lambdaMy implementation of the authorizer lambda had custom classes returned as AuthPolicy, similar in answer to question in thread above in StackOverflow.When I read it again, I tried to use the Amazon.Lambda.APIGatewayEvents Nuget package, with it's own response classes, which resulted in a different looking JSON structure than the one I posted above. The Authorizer function posted by Aaron Hudson worked for me now.The resulting JSON from the APIGatewayCustomAuthorizerResponse looks like below, compared to the one above:{    "principalId": "testuser",    "policyDocument": {        "Version": "2012-10-17",        "Statement": [            {                "Effect": "Allow",                "Action": [                    "execute-api:Invoke"                ],                "Resource": [                    "arn:aws:execute-api:us-east-2:<ACC>:<APPID>/Prod/$connect"                ]            }        ]    },    "context": null,    "usageIdentifierKey": null}Hope this might help someone.Edited by: Rigalo on Jul 22, 2020 12:24 AMFollowComment"

Answer: "0I am fighting with a lambda authorizer also -- getting 403 and 500 errors.My return AuthPolicy looks just like yours, but I also do not know what to use in the "principalId" field.  Have tried lots of stuff.I have a "test" App Client in my Cognito pool, but I have no users.What bugs me at this point is that there appears to be no way to add debugging information -- 403 "User is not authorized to access this resource" is not what my lambda returns!  Whatever code generates that response should allow for some debugging info in the log output.CommentSharewarrenstephensanswered 3 years ago0So "Action" is an array.Is <APPID> there actually supposed to be <APIID> ?CommentSharewarrenstephensanswered 3 years ago0The "Action" property as an array was key to solving this, and specifically using the "$connect" string.Here is what is working for me (with some values modified for privacy) and comments added.Note: I am using the AWS Gateway V2 API, websocket protocol, Cognito with no users (only an App client).{    "principalId": "7p9f415hnxxbfbch17jnaenccs", // this is the "App client ID" from the App integration section of Cognito    "policyDocument": {        "Version": "2012-10-17",        "Statement": [            {                "Action": [  // <--- this must be an array                    "execute-api:Invoke"                ],                "Effect": "Allow",                "Resource": [                    "arn:aws:execute-api:us-east-1:321987567111:1c9kv22z8g/stage-devwarren2/$connect"                ]            }        ]    },    "context": null,    "usageIdentifierKey": null}CommentSharewarrenstephensanswered 3 years ago"


Question: Tag Editor shows deleted load balancers

"A few months ago I removed 2 load balancers (1 alb and 1 nlb) from our account, and I recently noticed they still show up in the Tag Editor.I opened a support case for this, but they couldn't help me. And suggested I come to the forum for help."These 2 ELBs have been deleted successfully. The fact that these still show up in tag editor is I believe some issue with Tag Editor itself. I would request you to check with the Tag Editor team to confirm if this is a bug on their end since the loadbalancers are already deleted and I can confirm that."Actually they only show up if I search specifically with a tag filter, eg "Application: foo".If I only look for "AWS::ElasticLoadBalancingV2::LoadBalancer" without any tag filters, then it doesn't show up.Is there a way I can remove these LBs from Tag Editor myself?FollowComment"

Answer: 0I opened my initial support case with the ELB team.It got resolved by opening a support case under resource groups > tag editor.CommentSharekbosseeanswered 2 years ago


Question: Custom domain DNS entry record type not specified

"The DNS entries for custom App Runner domains are CNAME entries. This is not specified anywhere on the Custom Domain page DNS list for the domains, which makes it challenging to implement (especially for folk without much DNS experience that may think they are TXT records or something).FollowComment"

Answer: "0Hi,When you associate a custom domain with your service, App Runner provides you with a set of CNAME records to add to your Domain Name System (DNS). Add certificate validation records to your DNS. This way, App Runner can validate that you own or control the domain. App Runner uses ACM to verify the domain.If you're using CAA records in your DNS records, make sure that at least one CAA record references to amazon.com. Otherwise, ACM can't verify the domain and successfully create your domain.more details refer- https://docs.aws.amazon.com/apprunner/latest/dg/manage-custom-domains.htmlIf my answer is satisfactory, kindly mark the Question is Answered to help others in this forum.CommentSharelearn2skillsanswered a year ago"


Question: How to Select multiple related columns in add calculated fields in Quicksight parameter using ifelse ?

"Hello everyone,I have a parameter 'type' in a table and it can have multiple values as follows -humanchimpanzeeorangutanI have 3 columns related to each type in the table -human_avg_height, human_avg_weight, human_avg_lifespanchimpanzee_avg_height, chimpanzee_avg_weight, chimpanzee_avg_lifespanorangutan_avg_height, orangutan_avg_weight, orangutan_avg_lifespanSo if i select the type as human, the quicksight dashboard should only display the three columns -human_avg_height, human_avg_weight, human_avg_lifespanand should not display the following columns -chimpanzee_avg_height, chimpanzee_avg_weight, chimpanzee_avg_lifespanorangutan_avg_height, orangutan_avg_weight, orangutan_avg_lifespanI created the parameter type and in the add calculated fields I am trying to use ifelse to select the columns based on the parameter selected as follows -ifelse(${type}='human',{human_avg_height}, {human_avg_weight}, {human_avg_lifespan},{function})I also tried -ifelse(${type}='human',{{human_avg_height}, {human_avg_weight}, {human_avg_lifespan},{function}})And -ifelse(${type}='human',{human_avg_height, human_avg_weight, human_avg_lifespan},{function}})But none of it is working. What am i doing wrong ?FollowComment"

Answer: "0To achieve this usecase, you can use 3 calculated fields in your visual:heightifelse(${type}='human',{human_avg_height},${type}='chimpanzee',{chimpanzee_avg_height},${type}='orangutan',{orangutan_avg_height},NULL)weightifelse(${type}='human',{human_avg_weight},${type}='chimpanzee',{chimpanzee_avg_weight},${type}='orangutan',{orangutan_avg_weight},NULL)lifespanifelse(${type}='human',{human_avg_lifespan},${type}='chimpanzee',{chimpanzee_avg_lifespan},${type}='orangutan',{orangutan_avg_lifespan},NULL)In the visual, you can use these fields - height, weight, lifespan that would change depending on the type parameter.Please try the above and let me know if it helps. Thank you!CommentShareShatakshianswered 8 months ago"


Question: How to get value of the disableApiStop (stop protection) instance attribute via the AWS API/CLI/boto3?

Status of instance stop protection can be viewed via the AWS web console but attempting to describe-instance-attribute --attribute disableApiStop on an instance does not return the current value of this attribute. The call does not fail but the value is not returned.In the CLI documenation this attribute is listed in the possible values under Options but not in the valid values under Description. It is a similar case in the API documentationIs this intentional?How is it recommended to gather this value. As far as I can tell it can't be gathered through describe-instances either.FollowComment

Answer:
"0Hey there,I see that you are having issues getting the value of the disableApiStop.

 From what I have read you mention that the call does not fail but the value is not returned.
I tested the scenario and from what I gathered from running two commands one after the other is that the first command worked and the second did not fail but the describe value was not returned, which is similar to what you got.

Trying to troubleshoot the issue I found a possible reason for this is Eventual consistency, this means that the command you run (initially) that affects your EC2 resources might not be immediately visible to commands you run after running the initial command. Happens when running commands directly after each other.With that being said your environment could have also been affected by Eventual Consistency.
I have added in the references a link on Eventual Consistency and how to best manage it [1].To add can it be possible that you did not addaws ec2(e.gaws ec2 describe-instance-attribute --instance-id i-1234567890abcdef0 --attribute blockDeviceMapping)in front of the command ?You can reach out to AWS Premium Support if you are encountering further issues and to help troubleshoot your issue in detail [2].References :[1] https://docs.aws.amazon.com/AWSEC2/latest/APIReference/query-api-troubleshooting.html#eventual-consistency[2] https://aws.amazon.com/premiumsupport/knowledge-center/CommentShareAntonioanswered a year agoAWS-User-1977876 a year agoHi Antonio, thank you for your comment.I tested the scenario and from what I gathered from running two commands one after the other is that the first command worked and the second did not fail but the describe value was not returnedDid you run both commands against the same instance? Did you specifically check for disableApiStop? describe-instance-attribute appears to work for all other values. I have attempted to repeatedly run the command against a large collection of instances with no luck.With that being said your environment could have also been affected by Eventual Consistency.Whilst this is possible, I am talking about instances that have been up for months, and no changes have been made. I find this unlikely.To add can it be possible that you did not add aws ec2 in front of the command?The full command I have been using is the following aws ec2 describe-instance-attribute --attribute disableApiStop --instance-id i-xxxxx. As an aside, I have also tested the API via some SDKs including Boto3.Share0To anyone reading this who has a similar problem, I suggest trying to stop the instance and catching the error if the instance has disableApiStop enabled. You can then disable disableApiStop before stopping the instance.CommentShareAWS-User-1977876answered a year ago"


Question: "Please I need urgent help, i am a student and aws wont stop charing me every month. i have filed a report. How do i get my money back???????"

"Please I need urgent help, i am a student and aws wont stop charing me every month. i have filed a report. How do i get my money back???????AWS keeps charging me for my fee tier, how do I get my money back and cancel the subscription?????AWS keeps charging me for my fee tier, how do I get my money back and cancel the subscription????? Please connect me to someone asap!!!!!!!!@FollowCommentrePost-User-8874521 3 months agoNo need to panic. Reach out to AWS Support and raise a ticket stating all your concerns. Also, Go to Billing Dashboard and Check the cost and usage to find what are all the services costing you. Find all and disable or kill unnecessary services.Share"

Answer: "0Please be patience. AWS has one of the best support service in the world. Login to their support console, and open a ticket, ask for their assistance, they will help you. Just type "support" on the search bar, you will see the support console, click on it.To cancel your subscription, go to your account on top right corner (your ID), click on it, select "Account" - it will take you to the account page, at the bottom of the page "Close Account". Now you decide whether you will close it or continue with the account.The best way to keep yourself cool is to delete the services, such as the VPC, EC2, Load balancer - if you have created them. Please do not delete the default VPC. You may type home in the search bar, and go to console home page, you will see "Cost and usages" and which service is generating the bills.AWS has many regions and availabilit zones around the world. You have to check every regions and availability zones where you may have created resouces/services, delete those.The support team may help you which services is generating the bills and which regions. They are very quick too. Please remember, beginning is always hard and confusing.CommentSharerePost-User-7136343answered 3 months ago0if this is regarding Amazon Connect, go into the Connect instance configuration and disable telephony right away.  So you can still prove you were using the phone number that you might have claimed.  Or you can just release the phone numbers you claimed to stop taking calls so you dont keep getting charge if your number is getting calls.CommentShareClarenceChoianswered 3 months ago"


Question: Best approach for S3 Upload from Flutter App

I want to upload a file from my flutter app. Is Amplify service is mandatory to do this  ? Please suggest a best way for upload files to S3 from flutter apps.FollowComment

Answer: "0Hi,I definitely recommend to look into storage manager component, assuming there is a flutter support: https://ui.docs.amplify.aws/react/connected-components/storageIf that component doesn’t fit you needs / unsupported, then  you can still use the Storage layer with an example on how to upload: https://docs.amplify.aws/lib/storage/getting-started/q/platform/flutter/#prerequisitesHope it helps ;)CommentShareEXPERTalatechanswered a month ago"


Question: Gamelift is always active. How do I make it inactive?

"I manually turned on my Gamelift fleet on in order to test it out but now I want it to be inactive. In the past, I've typically just manually set the instance counts to 0 and the fleet would become inactive after about 10 minutes. For whatever reason, this is no longer the case. Does anyone know how I can do this without deleting my fleet? Again, I've already managed this in the past but it stopped working yesterday.FollowComment"

Answer: "0Hi,As you mention you'd typically want to scale down your instance count to 0 to make it inactive without having to delete the entire fleet. Have you checked your fleet events to see if there's some debuggable information that helps determine what's changed? If you're still having issues, I'd recommend creating a support ticket with your fleet information so the GameLift team can help take a closer look.Thanks!CommentShareShashankJ_AWSanswered 3 months ago"


Question: Cannot start EC2 instance after changing its type

"Hello,I have an instance i-0cd0f6d6361e14ec2, which was running okay. Decided to increase capacity.Stopped the instance, changed instance type. Now it no longer starts. When I try to start it, it goes to "pending" state for a while, then back to "stopped" after about 24 seconds.I tried changing instance type back and also to a couple of other, more capable types, no luck. Same behavior.Also tried de-attaching and then re-attaching both volumes vol-0f66f100f638f4fd2 and vol-0f66f100f638f4fd2. Still not able to start.Also tried creating an AMI out of stopped instance (which took about an hour but succeeded). Launching another instance from this AMI also fails, but instead of "stopped" the new instance ends "terminated" state after about 1 minute or so after launch.I see the following on the description page of the stopped instance:State transition reason: Server.InternalErrorState transition reason message: Server.InternalError: Internal error on launchIs this EC2 bug? As there are posts on this forum as of this March about similar errors. I don't think it is a storage size issue as my last full backup is about 50 GB while the volume is at 200 GB.I opened a developer support plan to resolve this problem sooner, case ID 5971375681, but nothing is happening there for over 8 hours now, I wonder if someone from AWS could comment, as our customers are beginning to panic.I need help as this is a small mail server, which is critical for our business. Any help?FollowComment"

Answer: "0Resolution: Save yourself money and trouble by checking and updating credit card with AWS.My issue was resolved using the following steps:First changed the support plan from Basic to Developer - this allowed me to create a technical support incident. This turned out to be not useful, as first response was received only after 13 hours. Apparently, this is outsourced to India, and their time zone is completely out  of sync with ours (Pacific Time).As customers started to panic, upgraded support plan again to Business, and was able to create another incident and chat online with a support person, who traced down the problem to the key used to encrypt our data volume. "Key Management Service" page in AWS console was inaccessible because it believed that I did not complete the registration (incorrectly). One of the links on the info page went to credit card page, with all my cards there showing as expired. After I updated the credit card expiration date, I was able to start the instance.I hope it helps someone.CommentShare_nik_answered 4 years ago"


Question: What should I edit in AWS bucket policy to work with MWAA (Airflow)

"I have tried creating several buckets in AWS (all public access blocked) which have            "Action": [                 "s3:GetEncryptionConfiguration"             ]included.However, I keep getting the error Error occurred while trying to read bucket encryption configuration, please ensure that the s3:GetEncryptionConfiguration IAM permission is present at the airflow environment creation stage. Where should I be adding this IAM permission and how?FollowComment"

Answer: "1I believe this could be due to one of these two:Are you using an S3 bucket owned by a different account? MWAA executes the code inside the provided bucket and as such the security standard regarding this S3 bucket is to be kept very high. As part of that, only buckets within the same account as the user trying to create the environment are allowed.The S3 bucket field needs a high level S3 bucket in the format of s3://mybucket. It does not allow folders or prefixes. So, if you are using s3://mybucket/my-prefix that would not workLet me know if that fixes your problemCommentShareAnanth Tirumanuranswered 9 months agoEXPERTChris_Greviewed 9 months ago0Thank you. It was probably number 2 - having used a folder. But I had fixed it using CloudFormation (which creates a top level bucket within the config) instead of going through the web console. Appreciate the help!CommentSharerePost-User-1458258answered 9 months ago"


Question: remote debugging application inside a greengrass docker component

"i read that i can remote debug an application in a docker container by starting the container likedocker run --cap-add=SYS_PTRACE --security-opt seccomp=unconfined -it <image_name>however i don't think i can run a docker component with the -it 'interactive flag'without the -it flag if i try to connect to a running process in the docker i receive aUnable to start debugging. Attaching to process 29966 with GDB failed because of insufficient privileges with error message 'ptrace: Operation not permitted.'.error.how does anyone else debug inside a greengrass container ?FollowCommentMassimilianoAWS EXPERT3 months agoHi, are you running Greengrass inside a container or are you running a component as container?Shareclogwog 3 months agoHi @MassimalianoAWS , I'm running the Docker container as a component on a Greengrass device. (we have multiple Docker components actually, but this one i would like to debug)Share"

Answer: "0The "ptrace: Operation not permitted" error message usually occurs when you are trying to attach a debugger to a process running inside a Docker container and the container is running in a restricted environment or with insufficient privileges, In some environments, such as when running Docker containers with default security settings, ptrace is not allowed by default due to security concerns.CommentShareSUPPORT ENGINEERHarsh_Sanswered 3 months agoclogwog 3 months agohow would one get around this ? I thought the --cap-add=SYS_PTRACE and --security-opt seccomp=unconfined  part of me starting up the docker container would do this ?Share"


Question: How to pass dynamically S3url from child to root stack of nestedstack in cloudformation

Child1SG stack:AWSTemplateFormatVersion: 2010-09-09Description: Basic SSH Child Security Group.Resources: MySSHSecurityGroup1:Type: AWS::EC2::SecurityGroupProperties:GroupDescription: my new SSH Child SGSecurityGroupIngress:IpProtocol: tcpFromPort: '22'ToPort: '22'CidrIp: 0.0.0.0/0Root Stack:AWSTemplateFormatVersion: 2010-09-09Description: Parameter store of SG1Resources: myStackWithParams:Type: AWS::CloudFormation::StackProperties:TemplateURL: https://cf-templates-o3rmx0wkf9l-us-east-1.s3.amazonaws.com/2022115bE6-Child1SG.yaml #arnFor this template URL how to pass dynamically S3 path of child .FollowComment


Question: AWS Inspector agent install on EC2

Error while installing AWS Agent on EC2- error is cannot execute binary fileFollowComment

Answer: "0Is there an error message? What is the OS running on EC2?CommentShareronald_lanswered 9 months agorePost-User-0981058 9 months agoEC2 is Linux2. Error message while trying to execute command -sudo bash install is "Cannot execute binary file". I managed to download the install using the command -sudo wget https://d1wk0tztpsntt1.cloudfront.net/linux/latest/installShare0It looks like you're installing the Amazon Inspector Classic agent - please be aware there is a newer version of Amazon Inspector that can be used in many situations.First - it seems you may be downloading the executable as root (using sudo), and for some reason the downloaded file is not executable. This will result in invalid permissions on the executable, and lead to the error you're seeing.You may need to run sudo chmod +x <<FILENAME>> in order to make the file executable.Please refer to this support article for detailed instructions on installing the Amazon Inspector Classic agent: https://aws.amazon.com/premiumsupport/knowledge-center/set-up-amazon-inspector/If you were intending to use Amazon Inspector (the newer service), please review the Getting Started guide here: https://docs.aws.amazon.com/inspector/latest/user/getting_started_tutorial.htmlCommentShareGreg_Hanswered 9 months ago"


Question: Cloudwatch Dashboards

I want to know whether cloudwatch is capable of dynamically adding the new instance into the cloudwatch dashboard if the current instance in the asg gets terminated?FollowComment

Answer: "0Accepted AnswerYou can yes, use a Metric Explorer widget - you'll find Metric Explorer on Explorer option under Metrics in CloudWatch Console.Dashboard widget definition would be something like:{    "type": "explorer",    "properties": {        "metrics": [            {                "metricName": "CPUUtilization",                "resourceType": "AWS::EC2::Instance",                "stat": "Average"            }        ],        "labels": [            {                "key": "aws:autoscaling:groupName",                "value": "my-asg-name"            }        ],        "period": 300,        "region": "us-east-1",        "title": "Live instances in 'my-asg-name'"    }}CommentShareAmazon-CloudWatch-01answered 10 months ago"


Question: How to create customize AWS WAF Rate-based rule for 1min time window?

"I am new to AWS WAF, we have use case where we need to block certain amount of IPs within a 1min time window ?in breif : IP address/addresses block for 10 minutes if we are getting more than 20 Requests per minute. As per the current architecture , none of API GATEWAY/LAMBDA are used. It just a simple system and ALB being attached to the WEB Acl.so is there a way to implement required solution , can someone assist me?FollowComment"

Answer: "1Accepted AnswerAWS WAF rate-based rules can only determine access in 5 minutes.So please consider installing a third party WAF.https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-type-rate-based.htmlThe minimum rate that you can set is 100. AWS WAF checks the rate of requests every 30 seconds, and counts requests for the prior 5 minutes each time. Because of this, it's possible for an IP address to send requests at too high a rate for 30 seconds before AWS WAF detects and blocks it.If this answer leads to a resolution, please approve the answer for the betterment of the community.CommentShareEXPERTRiku_Kobayashianswered 2 months agoMihiruk Rajaguru 2 months agoCant we implement a alternative solution , because client strictly asking us to do this (they need this to check every 1min), can you kindly assist please?ShareMihiruk Rajaguru 2 months agoCant we create custom Jason rule for this? any possible solution rather accepting 5min time window solution?ShareRiku_Kobayashi EXPERT2 months agoI can't set a one-minute threshold, but what about lowering the threshold with a rate-based rule?For example, if the threshold is set to the lowest value of 100 accesses, the one-minute interval will allow only 20 accesses.ShareMihiruk Rajaguru 2 months agoyes that's what we recommended, according to the by default set up, waf checks and calculate the requests for last 5min noh. client wants to calculate last one minute. that's the requirementShareRiku_Kobayashi EXPERT2 months agoIt is rare to have a use case where you want to block a certain amount of IP addresses at one-minute intervals...Share"


Question: Can't Upload to WP Subdirectory w/ SFTP

"I'm trying to use Cyberduck and BBEdit on Mac OS to download a .css file, edit it, and upload the changes. The error message reads, "Upload style.css failed. Permission denied. Please contact your web hosting service provider for assistance."I've tried the steps from https://docs.bitnami.com/aws/how-to/troubleshoot-permission-issues/#you-can-t-upload-a-file-via-sftp to no avail: my SFTP username is bitnami, but even if bitnami owns the directory and has 0775 permissions, I can't upload. The issue isn't preventing me from logging in with the SSH key pair; I can navigate and download just fine.Please let me know if you have any ideas or would need more details. I'm pretty clueless. Thanks for your help!FollowComment"

Answer: "0Hello @feisthammel,Thanks for using Lightsail!What is the directory you are attempting to upload the CSS file? Depending on the instance type you are working with, some directories need root permissions. On a Wordpress instance for example, I was not able to upload a file to "/home/bitnami/apps" directory and received the exact same error as you reported. Uploading directly to the "/home/bitnami/apps/wordpress/htdocs" directory however works as expected.Hope this help you! Let us know.-JonathanCommentShareAWS-User-7183595answered 4 years ago0After some noodling around I found I could indeed upload elsewhere and isolated the problem to BBEdit and/or Cyberduck. To my great shame--and also relief--I updated BBEdit and it's working like a charm.Thanks for taking the time. Sorry for raising such a trivial alarm!CommentSharefeisthammelanswered 4 years ago"


Question: Passing Ground Truth pdf labelling task output to Comprehend custom entity training

"I want to do PDF parsing and identify Custom Named Entities. For that I setup Ground Truth to manually annotate few pdf files following this link - https://docs.aws.amazon.com/comprehend/latest/dg/cer-annotation-pdf.html .It created a output folder and within that it created another folder with name as <job-id> and inside that manifests and annotations folders. When I tried to setup the Comprehend Custom Entity Recognition Job, it asks for bunch of input location. I don't know the values for these fields. From the output in S3 bucket, I came up with the below fields and I don't about what is attribute names.If possible, Can someone share blog post or some video tutorial on pdf annotation and training similar from PDF input?SageMaker Ground Truth augmented manifest file S3 locations3://comprehend-semi-structured-docs-<region>-<id>/output/labeling-job-20221025T135656/manifests/output/output.manifestS3 prefix for Annotation data filess3://comprehend-semi-structured-docs-<region>-<id>/output/labeling-job-20221025T135656/annotationsS3 prefix for Source documentss3://comprehend-semi-structured-docs-<region>-<id>/srcAttribute names -- ?FollowComment"

Answer: "0Accepted AnswerSome answers were in these 2 blogshttps://aws.amazon.com/blogs/machine-learning/custom-document-annotation-for-extracting-named-entities-in-documents-using-amazon-comprehend/After you label all the pages, you can find annotations in JSON format in the Amazon S3 location s3://comprehend-semi-structured-docs-<AWS Region>-<AWS Account number>/output/<your labeling job>/annotations/consolidated-annotation/consolidation-response/iteration-1/annotations/You can find your output manifest file in the Amazon S3 location s3://comprehend-semi-structured-docs-<AWS Region>-<AWS Account number>/output/<your labeling job>/manifests/output/https://aws.amazon.com/pt/blogs/machine-learning/extract-custom-entities-from-documents-in-their-native-format-with-amazon-comprehend/the attribute name would be labeling-job-name-123.Comprehend Training Input Location FieldsSageMaker Ground Truth augmented manifest file S3 locations3://comprehend-semi-structured-docs-<region>-<id>/output/resume-labeling-job-20221025T135656/manifests/output/output.manifestS3 prefix for Annotation data filess3://comprehend-semi-structured-docs-<region>-<id>/output/resume-labeling-job-20221025T135656/annotationsS3 prefix for Source documentss3://comprehend-semi-structured-docs-<region>-<id>/srcAttribute nameswill be the Ground Truth job name.CommentShareNavin GVanswered 7 months ago"


Question: Lightsail container deployment is pending for days

I've started a new deployment on Amazon Lightsail.We've the status of pending. We can not cancel or delete the operation. It is stucked.FollowComment

Answer: "1Hello,Thank you for using LightSail.To answer your question, we require details that are non-public information i.e details that are specific to your AWS account. Hence, please open a support case with AWS using the following linkCommentSharevaibhav-AWSanswered 7 months ago"


Question: "AWS Backup, backup vault underlying storage"

What AWS storage service does AWS Backup use for backup vaults? I suspect it is S3 but I haven’t come across any doc that indicates this.  Look forward to hearing the response.  Thank you.FollowComment

Answer: "0I would like to inform you the underlying storage for Backup Vault is indeed S3 service.Backup service basically stores data in the internal AWS S3 buckets.Being internal, these S3 buckets are not accessible to you directly and AWS manages the same in the backend.CommentShareSUPPORT ENGINEERrePost-User-9405003answered 10 months ago0AWS Backup has 2 storage options, Warm and Cold storage. Cold storage option basically provides a low cost storage option, then the warm storage. Major pointers to note about cold storage being:a. If you want your backups to be incremental, you must have at least one recovery point in warm tier.b. If you set your lifecycle to back up to cold storage after 1 day, each of those backups will be a full backup. Therefore, AWS Backup recommends that you set your lifecycle settings to not move your backup to cold storage until after at least 8 days.[+] Creating a backup plan: https://docs.aws.amazon.com/aws-backup/latest/devguide/creating-a-backup-plan.html#plan-options-and-configurationCommentShareSUPPORT ENGINEERrePost-User-9405003answered 10 months ago"


Question: Email & Phone Alias comes into play only when username sign-in option enabled?

"Scenario #1: user pool sign-in option is set to Email & Phone number only.  No Username.I am able to sign-up user & sms verify phone number.   However if i try to login with the phone number, I get UserNotFound Exception.Scenario #2: user pool sign-in option is set to Email, Phone Number & UsernameI am able to sign-up with dummy username, email & sms verify phone number.  I am able to login with either (phone number, password) or (email, password) combination.So the Alias (Email or Phone) comes into play only when username is set as a sign-in option ?FollowComment"

Answer: "0You can select only email and phone number without username, but you will have to pick either email or phone number at sign-up as the user identifier. See the Cognito user pool sign-in options information, "If you select only phone number and email, your user will be prompted to select one of the two sign-in options when they sign up". So if you pick email at sign-up, then you can't use phone number to sign in.CommentShareAWS-Everettanswered 9 months ago"


Question: Cursor's base query

"Hello, I see "fetch xx from curxx" queries taking long to run - how do I identify the declared cursor query?Using the pid when I am looking to svl_qlog or stl_query, I see the session has -2019-06-18 16:08:532019-06-18 16:08:53 SELECT COUNT(*) FROM sometable LIMIT 1 OFFSET 0  2019-06-18 16:08:582019-06-18 16:51:39FETCH 200 FROM CUR0```    The fetch query seems to be running for long, fetching lots of data but the count(*) could not be the query from where its pulling the data. So how do I identify the base query. Would the pid change for the fetch query, if so how to co-relate them?    Edited by: nmakb on Jun 18, 2019 2:19 PMFollowCommentDanish Amjad a year agoBy any chance, did you find a solution for it?Share"

Answer: 0https://forums.aws.amazon.com/thread.jspa?messageID=544405&#544405CommentSharenmakbanswered 4 years ago


Question: I have a Free Tier EC2 instance that is getting billed. Best way to fix it?

"Last month I launched a EC2 instance taking advantage of the EC2 free tier (750 hours, t2.micro). However, I still got billed.My questions:How do I make sure the instance I bought is in fact part of the 750 hours Free Tier promotion? (I can't find where that information is showed, even though I followed the link on the free tier page when I launched it.And once that is confirmed, How can I find out why am I getting billed? I mean, a month has 750 hours, there shouldn't be a bill. The billing information just shows that is in fact EC2 the one that's getting billed. It doesn't who why exactly (or if the 750 hours are being taken into consideration).Or perhaps I discover I somehow missed the link and now I have to migrate to a free tier instance.FollowComment"

Answer: "0The EC2 service covers a few different things, so drill into the detail in Cost Explorer as you may have created resources not covered by the free tier.  There you can also confirm the Region where you're being charged.EC2 Compute free tier inclusions are dependent on region according to the documentation; have you confirmed your Region is included?You can track your free tier usage under "Free tier" in the Billing console - https://console.aws.amazon.com/billing/home.CommentShareEXPERTskinsmananswered 2 months ago0I only use what is free tier applicable on EC2. And SES.I was able to figure out where the detailed billing is located. I see that the instance doesn't use the 750 hours.Is it possible that the free tier was not applied because my AWS account is older than 12 months?I mean, I've used SES before (on and off) but never EC2. Is the free tier not EC2 related?CommentSharewebbasicaanswered 2 months ago0Free tier applies for 12 months from account activation, no longer.  It's not just EC2-related - there's a bunch of different services included.CommentShareEXPERTskinsmananswered 2 months ago"


Question: Does AWS Gamelift work with Unreal Engine 5

"What the title says.  I noticed on the Getting Started page, the GameLift Managed Servers SDK says it is compatible with UE4 4.26.FollowComment"

Answer: "1It is possible to get the latest version (5.0.0.0) of the GameLift SDK working as a plugin for UE5 (tested with 5.1) on Windows.Please check out this repo I created for said plugin: https://github.com/NoxxGames/AwsGameLift-5.0-for-UE5-5.1. The repocontains more info.CommentShareNoxxProjectsanswered 2 months ago-2While there is currently no official support, we have received feedback that the existing GameLift server SDK can be integrated successfully with UE5. If you run into any issues during this process, please feel free to create a customer support request to receive further assistance.UE5 support is a feature request we're currently tracking on our end.Thanks!CommentShareShashankJ_AWSanswered 8 months agoEXPERTToni_Sreviewed 8 months agoAlecValentine 6 months agoAfter downloading the SDK and using the VS 2019, there seems to be a common build bug. I got it myself and was able to reproduce it. Seems like its common enough that you see StackOverflow questions on it, unanswered, and old. For reference:  https://stackoverflow.com/questions/71983063/how-can-i-fix-this-error-i-get-when-i-try-to-build-the-gamelift-server-sdk-withShare"


Question: Scoping of EC2 Instances

Are EC2 instances scoped at AZ level or regional levle?If it is at EZ level where can I change my the AZ to an EC2? (I am aware that an existing instance can not be moved to a different AZ.) But I was unable to find a section where I can set the AZ to a new EC2 instance during deployment.FollowComment

Answer: "2Accepted AnswerEC2 instances are launched (so: created) and linked to subnets which are themselves assigned to an AZ. This is also true of EC2-attached services such as EBS and network interfaces (ENI). So during deployment you choose the subnet which selects the AZ for you.For those reading along: You can't move an EC2 instance to a new AZ because it is (as you say) "scoped" to the AZ where it was originally launched. You can create a snapshot of the instance; create an AMI from that snapshot and then launch the AMI in another AZ - noting that it will then have new EBS volumes and a new ENI.CommentShareEXPERTBrettski-AWSanswered 5 months ago-1U can set the AZ to a new EC2 instance during deployment by selecting the VPC and Subnet in which AZ you want to launch the instance.you should have subnets created in multiple Availability Zones, so that while creating EC2 instance you select the subnet according to your AZ which u want your EC2 instance to be placed.EC2 instance will be placed in particular AZ based on the subnet u select.CommentShareAWSuseranswered 5 months ago"


Question: Aws exam discount benefit

"Hello Aws training and certification team,I had given my aws certified solution architect associate exam in 2018 and had 50% discount token for my next exam.I had given my other aws certification exam today(21/05) but forgot to use the discount benefit.Could you please let me know if there is any way I can avail this benefit for this exam which I took today?Thank you in advance.Regards,ManojFollowComment"

Answer: "0Manoj,Unfortunately, we cannot apply a voucher once the exam is taken. Your code is still valid for a future exam! It remains valid until the associated certification expires, in this case, 2021.KimAWS CertificationCommentShareKimWD-AWSanswered 3 years ago"


Question: DMS not returning all the rows

"Hi,Im looking at migrating a on-prem mysql database to aurora via DMS. When i run DMS it brings up warnings about several LOB columns in tables. But i thought it would still import all rows if i set it to Full LOB. The task has completed successfully and shows all tables have all rows copied.But reviewing the tables rows directly on the source cluster directly i can see there are 1000s of rows in multiple tables that DMS is not seeing. Can someone explain whats happening and how to solve it?FollowComment"


Question: Lambda@Edge for "origin request" doesn't receive custom headers

"I have a CloudFront distribution with S3 origins.In the origin settings there are custom headers added (i.e. "x-test").The behaviour has two Lambdas: for "origin request" and "origin response" hooks (both NodeJS).It is all completely fine with the one for "origin response" hook, but the one for "origin request" doesn't receive "x-test" header in the event...headers object.All the docs and articles I've read say that "origin request" Lambda should get this header too.Tried to add "x-test" header to whitelist in attached "origin request policy" - this didn't help.Cannot find ANY information why could this happen. Does anyone have any ideas?FollowCommentalatech EXPERT3 months agoCan you share from which object are you trying to read the custom header from?ShareCorwin 3 months agoSure.event.Records[0].cf.request.headersThe same works perfectly for the function for "origin response"Share"

Answer: 0Accepted AnswerI have finally found them. For "origin request" hook they are here:event.Records[0].cf.request.origin.s3.customHeadersand if origin is ALB:event.Records[0].cf.request.origin.custom.customHeadersCommentShareCorwinanswered 3 months ago


Question: EMR customer question

"A customer is using PySpark on EMR to do some calculations.The calculations are being saved on S3 which triggers an SQS that is triggering COPY command to redshift.So far - all good.They are trying to find out a solution where after the redshift is loaded with new data, we can run some queries over the specific items that were being ingested there.They thought maybe they could fire SQS for each item in the EMR itself after it finishes to compute (sounds a bit coupled solution and not sure how robust it is).Some more clarification - after the post calculations and insert into redshift, they need to push it to either dynamodb or other NoSQL solution for quick retrieval.Does this sound legitimate?FollowComment"

Answer: 0Accepted AnswerYou might be able to take a look at this older blog post and modify it for your use case. When the copy command loads the data into redshift it writes an entry to Dynamo marking it processed. You could connect a Lambda function to the Dynamo streams that will allow you to trigger the queries you want to run after the data is loaded.https://aws.amazon.com/blogs/big-data/a-zero-administration-amazon-redshift-database-loader/CommentSharerridgleyanswered 6 years ago


Question: I am following documentation and I'm still getting  'findings export options' to an S3 bucket` when trying to export GD logs to S3

"Hello,I am trying to export GuardDuty logs to S3 and I am getting errors with the policy. I am receiving message above 'findings export options' to an S3 bucket`.I am following the documentation listed here - https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_exportfindings.htmlThe resource is a contradiction to this answer here, which indicates the resource should be *. So now I came somewhat confused.I'm starting to wonder if this is incorrect documentation or if I'm doing something wrong. Hoping that I'm doing something wrong so it can be easy fix. But I am reaching out for assistance.In the Permissions required to configure findings export I did not see these permissions noted to configure during the KMS set up and S3 bucket set up; so I was under the assumption that these are referring to GuardDuty policies that should be attached to GuardDuty; otherwise, I'm not sure why they were not mentioned during set up of KMS and S3. I see s3:* on some so I believe I have these permissions already.Can someone tell me what I may be missing?NOTE: I Am also using an EXISTING bucket that was created separately and not from GuardDutyFollowCommentChenjie Ni 5 months agoCan you post the bucket policy of the existing bucket that you want your guardduty findings to export into? Please post the KMS key policy as well.SharerePost-User-8924411 5 months agoI think I found the problem.Share"

Answer: "0Instead of manually creating the policies, you can use the Amazon GuardDuty console to generate sample polices for you.Navigate to the Amazon GuardDuty console. Choose settings in the navigation pane.Under Findings export options, choose the frequency for updating findings.Under S3 bucket, choose Existing bucketSelect your bucket and choose View Policy. Copy that policy and apply it to your S3 bucket.You can leave Log file prefix as default (blank)For KMS, select your key alias and choose View Policy. Copy that policy and apply it to your KMS key. You want to add this to your key, rather than replace the one that is there. For example:{    "Version": "2012-10-17",    "Id": "key-consolepolicy-3",    "Statement": [        {            "Sid": "Enable IAM User Permissions",            "Effect": "Allow",            "Principal": {                "AWS": "arn:aws:iam::<account_id>:root"            },            "Action": "kms:*",            "Resource": "*"        },        {            "Sid": "Allow access for Key Administrators",            "Effect": "Allow",            "Principal": {                "AWS": "arn:aws:iam::<account_id>:role/Admin"            },            "Action": [                "kms:Create*",                "kms:Describe*",                "kms:Enable*",                "kms:List*",                "kms:Put*",                "kms:Update*",                "kms:Revoke*",                "kms:Disable*",                "kms:Get*",                "kms:Delete*",                "kms:TagResource",                "kms:UntagResource",                "kms:ScheduleKeyDeletion",                "kms:CancelKeyDeletion"            ],            "Resource": "*"        },        {            "Sid": "Allow GuardDuty to encrypt findings",            "Effect": "Allow",            "Principal": {                "Service": "guardduty.amazonaws.com"            },            "Action": "kms:GenerateDataKey",            "Resource": "*",            "Condition": {                "StringEquals": {                    "aws:SourceArn": "arn:aws:guardduty:us-west-2:<account_ID>:detector/<detectorID>",                    "aws:SourceAccount": "<account_ID>"                }            }        }    ]}Then choose save.CommentShareJeremy_Sanswered 5 months ago"


Question: CodeCatalyst Pull request merge fails

"I've created a simple PR against the repository hosted in my codecatalyst project (not an external repo).When I try to merge it, it fails with the following message: The request was denied because an input failed to satisfy the constraints specified by the service. Check the spelling and input requirements, and then try again.I've tried editing fields to make sure it's got a title, description etc. but seem to be stuck at this.FollowComment"

Answer: "2Accepted AnswerThere are a few reasons why a pull request (PR) may fail to merge:1). Conflicts: If there are conflicts between the changes in the PR and the current state of the main branch, the merge will fail. You will need to resolve the conflicts before the PR can be merged.2). Failing tests: To my little knowledge, some repositories may have automated tests that are run when a PR is submitted. If these tests fail, the PR will not be merged.3). Review feedback: Another thing is that the repository maintainer(s) may ask for revisions or changes to be made to the PR before merging. If these changes are not done with, the PR will not be merged.4). Policy-related issues: The repository may have certain policies related to merging PRs which may not be met by the PR.5). Security vulnerabilities: If the PR contains any security vulnerabilities it will not be merged until it is fixed.It is good practice to check the repository's contributing guidelines and make sure that your PR meets those requirements. You can also communicate with the repository maintainers to understand the reason for the failure and how to resolve it.CommentShareEmmanuel Oluwayemisianswered 5 months ago"


Question: spotInstanceCountLimitExceeded even though spot requests are cancelled

"Good Day,I requested a spot instance increase to 96 vCPU's, which was granted. When trying to connect to my created spot instances, however, I was plagued with an "ssh connection timed out" error. I cancelled several spot requests (their instances were terminated automatically) in trying to resolve this error. Even though I have no instances running, and five spot requests labelled "cancelled", I get a spotInstanceCountLimitExceeded error when launching a new spot request (the request is initiated, but no instance is created). Does anyone know what I can do to successfully launch a spot instance, or if this error is temporary, for how long I have to wait before launching a new spot request?Kind regards!FollowComment"

Answer: "0It seems that I can launch a new spot instance from the EC2 pane by selecting Instances -> Launch Instances and then selecting "spot instance" during setup. Trying to launch a spot request from Spot Requests -> Request Spot Instances does not work. I suppose the latter method requests a spot fleet which does not work for some reason. Although I am now able to launch the instance I require, I will leave my question marked unanswered if somebody wants to elucidate why Spot Requests -> Request Spot Instances did not work.Edit: my question was automatically marked as answered apparently. I'll leave it like that, then.Edited by: Trying2AWS on Jan 5, 2021 4:50 AMCommentShareTrying2AWSanswered 2 years ago"


Question: Amazon SES bounce back email from an important italian ISP

When I try to send by Amazon Simple Service an email to an address hosted by one of the most important italian ISP with Virtual Deliverability Manager service enabled I receive a bounce "550 4.4.7 Message expired: unable to deliver in 840 minutes.<421 4.4.1 Failed to establish connection>"FollowComment

Answer: "0There are several possible causes of bounces.For example, if the destination server runs out of capacity, the processing capacity is reduced, and the message cannot be sent in time.It may be rejected by the destination ISP.If it is temporary, a resend after some time will solve the problem, but if the ISP is rejecting it, you will need to contact the ISP to confirm.CommentShareEXPERTRiku_Kobayashianswered 12 days agoaccasoftware 11 days agoThank you for the response but the problem seems to be another because if I try to resend the same message with the Virtual Deliverability Manager disabled, it will be delivered immediately. Could the issue is the AWS tracking link? Virtual Deliverability Manager changes the link and adds a small image to track the opens.ShareRiku_Kobayashi EXPERT11 days agoI think that is a possibility.However, in that case, we will need to contact AWS support as we will not be able to resolve the issue on our own.Shareaccasoftware 10 days agoI think that I have found the solution. If I turn off "optimized shared delivery" option in virtual deliverability manager settings the emails are delivered immediately. Following these instructions https://docs.aws.amazon.com/ses/latest/dg/vdm-get-started.htmlShare0Thank you for the response but the problem seems to be another because if I try to resend the same message with the Virtual Deliverability Manager disabled, it will be delivered immediately. Could the issue is the AWS tracking link?Virtual Deliverability Manager changes the link and adds a small image to track the opens.CommentShareaccasoftwareanswered 12 days ago0I think that I have found the solution. If I turn off "optimized shared delivery" option in virtual deliverability manager settings the emails are delivered immediately. Following these instructions https://docs.aws.amazon.com/ses/latest/dg/vdm-get-started.htmlCommentShareaccasoftwareanswered 10 days ago"


Question: Integrate AWS-IoT in Helium

"I am trying to connect a LoRaWan device (DRAGINO; RS485-LN converter) via Helium so that you (AWS) can monitor and graphically represent data from devices that communicate via modBus-RTU (RS485).In addition to "Access Key", "Secret Key", "Region" and "Topic" that Helium asks me to integrate AWS, what other data do I need and where is it for AWS to receive data from Helium?Could it be wrong that "Region = Global" and "Topic = AWS IoT MQTT"?What other parameters might be wrong or what am I missing for me to start communicating "Helium" with AWS?FollowComment"

Answer: "1Accepted AnswerHi. Global is not the right region. Global is what you'll see as the region when you're in the IAM section of the console because IAM is a global service. IoT Core is regional. You need to decide which region you want your data to come in to. Please go to the IoT Core service in the console. When you do, you won't see Global anymore. Instead you'll see what region you've currently selected. This may still not be the region you want Helium to publish to. Click the little dropdown arrow next to the region and then you'll see the available list of regions for IoT Core: us-east-1, us-west-2, eu-west-1, ap-southeast-1 so on and so forth. One of these is what you need for the Helium Region. It's up to you which one.For the Topic, AWS IoT MQTT is not right. You can pick any topic you want. Some guidance here:https://docs.aws.amazon.com/iot/latest/developerguide/topics.htmlhttps://docs.aws.amazon.com/whitepapers/latest/designing-mqtt-topics-aws-iot-core/mqtt-design-best-practices.htmlOnce you have these fields right, you can use the MQTT client to check that messages are being received: https://docs.aws.amazon.com/iot/latest/developerguide/view-mqtt-messages.htmlCommentShareEXPERTGreg_Banswered a year ago0Thank you very much Greg_B, it's already starting to transmit my "DRAGINO RS485-LN" converter from Helium to AWS-IoT-Core.CommentShareHydronikSTanswered a year ago"


Question: CDK EMR Cluster Phased Deployments

"Hi, we are trying to configure phased deployments in CDK for our EMR Cluster stack.Currently, we have set termination protection to false so that during a deployment, all the new clusters will be launched and then, at the end of the successful deployment, all the old clusters will be terminated.This is not very efficient because our accounts will need to have a larger service quota to support 2x our projected fleet size during deployments, as the fleet will effectively be duplicated during the first half of the deployment before the existing clusters are terminated in favor of the new clusters.Are there any phased deployment options available in CDK where we can tear down and create one cluster at a time? This would allow us to avoid a spot increase in service quota usage during deployments.Termination protection reference: https://docs.aws.amazon.com/cdk/api/v1/docs/@aws-cdk_aws-emr.CfnCluster.JobFlowInstancesConfigProperty.html#terminationprotectedFollowComment"


Question: Redshift Clear Text Passwords and Secret keys exposed?

"Hi there,I received the following email about my redshift cluster:We are reaching out to inform you your Amazon Redshift cluster(s) may have been affected by an issue caused by a change introduced on October 13, 2021, where your password and/or your Secret_Access_Key may have been inadvertently written in plain text to your cluster's audit logs (stl_user_activity_log). We do not have any indication that these credentials have been accessed. We applied a patch on January 19, 2022, to fix the issue for all clusters in all AWS regions.As a cautionary measure, we recommend that you:(1) Review any access to your cluster(s) in your audit log files from October 13, 2021 through January 19, 2022, such as those by authorized applications, to ensure your access credentials and passwords were not accessed;(2) Immediately change your cluster's password and/or generate a new Secret_Access_Key for use with COPY and UNLOAD commands for moving files between Amazon S3 and Amazon Redshift; and(3) Scan and sanitize your audit log files, that were created between October 13, 2021 through January 19, 2022, both dates inclusive, to remove any occurrences of clear text passwords and security keys in them.However, looking on my cluster I can't see a stl_user_activity_logSelect * from stl_user_activity_log;SQL Error [42P01]: ERROR: relation "pg_catalog.stl_user_activity_log" does not existWas this email pointing out the wrong audit logs? or should I not be looking for these audit logs on the table?   we have s3 audit logging enabled, but browsing through those I don't see anything either.FollowCommentAWS-User-3882608 a year agoI have the same question.Share"

Answer: "0You should be looking at your S3 bucket audit log files. Please raise support ticket and support can assist you specifically.CommentShareMilindOkeanswered a year agoAWS-User-5958751 a year agoMy account doesn't have access to support, that's why I posted here.Share"


Question: How Can I extract last 8 characters of a string which represent the date in this format 'YYYYMMDD'  and convert into date?

"Hi there,I have a field that contain either a '"/" or "_" and after these characters are characters  which represent the date in the format 'YYYYMMDD' How can I extract them an cast into date format?Many thanks,JDFollowCommentFabrizio@AWS EXPERT9 months agoHi which service do you plan to use to work with the data?Share"

Answer: "1From your question, it is not really clear where the data is stored and what tools you are using to access the data. Depending on where the data is available (Redshift vs RDS vs S3 vs Kinesis etc) and depending on the tool used to query the data, the answer would change.I will list a couple of ways you can accomplish this:In Athena when the data is cataloged in Glue tables (Eg. the data is in S3): you could execute this query - select cast(date_parse('20220915','%Y%m%d') as date);In Glue when you are accessing the data as a Glue dynamicFrame or Pyspark dataframe:from pyspark.sql.functions import *#df is the dataframe that you add logic here to read/transform or convert from Glue Dynamicframedf.select(col("input"),to_date(col("input"),"yyyyMMdd").alias("date_column")).show()In Redshit: select to_date('20220915', 'YYYYMMDD', FALSE);Reference: https://docs.aws.amazon.com/redshift/latest/dg/r_TO_DATE_function.htmlCommentShareAnanth Tirumanuranswered 9 months agoEXPERTFabrizio@AWSreviewed 9 months agoJD 9 months agoHi there,Thanks so much for your help. So I'm using AWS to query the database and I have tried option 1 with no success. Error message reads as:INVALID_FUNCTION_ARGUMENT: Invalid format: ""The field I am trying to perform this operation on is a result of a substring function which extracts the last 8 characters of another field that contains the date as part of a longer unusable string for date purposes. The result of the substring is in 'YYYMMDD' format.Thanks againShareFabrizio@AWS EXPERT9 months ago@JD is the format "YYYYMMDD" or "YYYMMDD", I think you have a typo in the comment.aside from that could you provide your athena query?and some info on the table format (DDL)?Share"


Question: Polly for Windows Plugin Fails on Some Voices

"I installed the Amazon Polly for Windows Plugin (https://docs.aws.amazon.com/polly/latest/dg/install-voice-plugin2.html) and I'm now using the Polly Player to test voices.  Several of the voices produce errors. Olivia, for example, errors on both neural and standard voices.  My end goal is to use the voices in Adobe Captivate. I'm seeing the exact same error messages in Captivate, so I stepped backwards to try Polly Player.http://learning.realpage.com/downloads/sharon/images/olivia1.pnghttp://learning.realpage.com/downloads/sharon/images/olivia2.pngBoth voices show in the Windows Registry.http://learning.realpage.com/downloads/sharon/images/registry1.pnghttp://learning.realpage.com/downloads/sharon/images/registry2.pngAny thoughts on how to get these (and other broken voices, like some of the Lupe variations) to work?FollowComment"

Answer: "0More information: I uninstalled everything, and double-checked the registry to be sure the tokens were removed, and re-installed. Same result.SOME voices work flawlessly -- Joanna and Matthew, for example.  But others generate the errors shown above.  I could really use help with this, especially where Lupe is concerned.  My company produces a lot of Spanish content, and we'd really benefit from having Lupe work. Since she's the only US Spanish neural voice, she's necessary to our workflow.CommentSharesharonhustonanswered 10 months ago"


Question: Domain routed to s3 bucket delivers contents from heroku?

"We uploaded some HTML content to an amazon s3 bucket and we want to publish it via the url reports.repeato.app.This domain is hosted at a different webhosting company.We are using AWS CloudFront to deliver the website via https. We downloaded the wildcard SSL certificate for *.repeato.app, imported it into AWS Certificate Manager and used it to configure the CloudFront distribution.We also linked the reports.repeato.app domain to the cloudfront endpoint via CNAME.The strange thing is: Opening reports.repeato.app in a browser (or via wget), results in contents being shown that should only be shown on clients.repeato.app.clients.repeato.app is hosted on heroku and we don't have any idea why it's being shown on the reports.repeato.app domain.This is very confusing. Any help is very welcome!FollowCommentStephan a month agoSo the error we get now is: "reports.repeato.app uses an unsupported protocol.ERR_SSL_VERSION_OR_CIPHER_MISMATCH"Any idea why?ShareBrettski-AWS EXPERTa month agoWhat is producing that error? You'll find debugging this sort of thing is easier using a command-line tool like curl and looking at the debug (verbose) output rather than relying on what a browser throws up (as they are trying to be user-friendly).Share"

Answer: "2What's missing here is the name of the origin (the back-end server - which is S3) that you have configured in your CloudFront distribution - or how you've configured that.The best way to link your CloudFront distribution to S3 is to use OAC: https://aws.amazon.com/blogs/networking-and-content-delivery/amazon-cloudfront-introduces-origin-access-control-oac/Also: You've listed some values in the table in your question which should probably be kept private - things like domain keys. I'd remove them from the question and also strongly recommend refreshing them. I'm not 100% sure what the security risk is but better to be safe than sorry - those values are used to confirm your domain identity to providers (AWS, Stripe, etc.). It may not be a big deal but it's the type of thing that is better safe than sorry.Update: Looking at the CloudFront screenshot you've configured the bucket for website access - you don't need to do that; it can be disabled and you can use OAC to restrict access to the bucket only to CloudFront. That also means that you don't have to make content in the bucket public. Unless you have a good reason, I would do that (disable website hosting on the bucket; make it private; use OAC).Finally, to address the actual question: I know this sounds like a silly question but are you 100% sure that dpzoovgmxjpdc.cloudfront.net. is the distribution that points to your S3 bucket?CommentShareEXPERTBrettski-AWSanswered a month agoStephan a month agoThanks Brettski, I updated the post...ShareStephan a month agoYes, I am 100% sure that it points to the bucket. you can also see that in the screenshot. I also tried with disabling website access in the bucket. Didn't change anything. Still the wrong content is showing.Did you see that the content is shown is not even hosted on S3? It's hosted on heroku (which itself is using S3, so I am kind of thinking that this could be one of the main ingredients for the mess).ShareStephan a month agoMaybe this traceroute information could be interesting too? It seems strange to me...traceroute reports.repeato.apptraceroute: Warning: reports.repeato.app has multiple addresses; using 13.32.110.52traceroute to dpzoovgmxjpdc.cloudfront.net (13.32.110.52), 64 hops max, 52 byte packets1  fritz.box (192.168.178.1)  2.876 ms  2.282 ms  2.242 ms2  77.118.224.1.wireless.dyn.drei.com (77.118.224.1)  9.547 ms  9.370 ms  12.708 ms3  192.168.242.95 (192.168.242.95)  10.458 ms  10.722 ms  11.614 ms4  99.83.112.86 (99.83.112.86)  10.099 ms  10.424 ms  15.931 mstraceroute clients.repeato.apptraceroute: Warning: clients.repeato.app has multiple addresses; using 108.128.72.146traceroute to secure-lychee-o9fwczm8jn18lb78hqitwc21.herokudns.com (108.128.72.146), 64 hops max, 52 byte packets1  fritz.box (192.168.178.1)  2.725 ms  2.197 ms  2.100 ms2  77.118.224.1.wireless.dyn.drei.com (77.118.224.1)  9.634 ms  9.178 ms  9.000 ms3  192.168.242.95 (192.168.242.95)  13.955 ms  12.147 ms  9.958 ms4  99.83.112.86 (99.83.112.86)  9.018 ms  10.273 ms  11.897 msShareBrettski-AWS EXPERTa month agoWhen I visit reports.repeato.app or clients.repeato.app I see sign-in page. reports.repeato.app points to a CloudFront distribution (dpzoovgmxjpdc.cloudfront.net) while reporst.repeato.app resolved to Heroku. Note that reports.repeato.app says "Repeato Client Center" in the browswer tab while clients.repeato.app has Login so they are definitely different. It looks like your S3 bucket is serving up some Javascript that renders a login page. Try accessing it with curl or wget - that way you get the raw response and not something that your browser is interpreting.ShareStephan a month ago@Brettski-AWS: That's a very interesting observation indeed. Tried wget, and the source is indeed different. However, can't really make sense of it.But in any case, the bucket hosts a completely different project than what you see when you navigate to reports.repeato.app. This is what is served from the bucket:https://s3.eu-central-1.amazonaws.com/reports.repeato.app/index.htmlWhy the hack is https://reports.repeato.app showing content from a completely different project hosted on heroku?Could it be that heroku kind of "catches" all subdomain requests and routes it to the only project I am hosting there?ShareShow 4 more comments0Finally, we managed to get it done. The 2 issues were:We had Mongo DB web services activated and it caught all requests to that subdomain and routed it to an old version of the backend. We just had forgotten to turn off that instance and remove the DNS setting.The "Alternate domain name (CNAME) - optional" field was not set to "reports.repeato.app". We didn't think it was necessary, since it says "optional"Thanks @Brettski-AWS for your help!CommentShareStephananswered a month ago"


Question: S3 Select Tooling

"Good afternoonI am trying to find out, and search, to see if there is an S3 Select Tooling, perhaps run by a 3rd party?If such a thing exists, like a GUI that's user friendly instead of executing the S3 Select queries.FollowComment"

Answer: "1Hi,Did you consider using Athena instead of S3 select - the Athena GUI is much more user friendly and also you can setup defined governance/access.  Please refer: https://aws.amazon.com/blogs/aws/amazon-athena-interactive-sql-queries-for-data-in-amazon-s3/Alternatively, you could consider using the AWS SDK for Pandas which can provide a visual & a repeatable way to use S3 select using a notebook. Please refer: https://aws-sdk-pandas.readthedocs.io/en/stable/tutorials/029%20-%20S3%20Select.htmlThanksCommentShareRamaanswered a month agoBCAWSScot75 a month agoThanks Rama-I will look into AWS SDK for Pandas - just looking for a swift, cost effective (but user friendly) querying method to process json files into a bucketSharedannycjones a month agoYou can also query using S3 Select against individual objects using the AWS Console, which can be useful for trying out S3 Select queries.Share"


Question: AWS Glue crawler detecting a .(dot) before header of a csv file

"I am trying to crawl a csv file in utf-8 encoding format but the crawler is detecting a dot before the header. I cannot see any dot when i open the file in text or excel.https://imgur.com/b5RfhfkEdited by: kmn on Jan 30, 2019 6:54 AMEdited by: kmn on Jan 30, 2019 6:55 AMFollowComment"

Answer: "0That looks more like a white space to me. You sure there's no space in there?CommentSharefabioSamaanswered 4 years ago0No. There is no white space, this issue only happens when the file is encoded to utf-8CommentSharekmnanswered 4 years ago0This issue arise because of how i saved the csv in utf-8 from excel.I now open the file in notepad and save it as utf-8 which helped fixing this.CommentSharekmnanswered 4 years ago"


Question: hiding name servers under my own ns

I have my own ns1 and ns2.mydomain.comAny way to use my own dns and hide the route 53 in there?FollowComment

Answer: "0Hi,For information on using white-label name servers, see "Configuring White-Label Name Servers" in the Route 53 Developer Guide:https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/white-label-name-servers.htmlScottCommentShareEXPERTAWS-User-6179575answered 3 years ago"


Question: Is it possible to have a Redshift Spectrum schema access multiple accounts data ?

"CREATE EXTERNAL SCHEMA on redshift requires an IAM_ROLE or equivalent. I'm wondering if its possible to create this in such a way as to give redshift spectrum the ability to read data across multiple accounts ? Getting access to local S3 data is easy enough, getting access to one 'external' accounts S3 data is easy enough - its combining the two (or more) thats proving hard. Its beyond my capabilities with IAM.FollowComment"

Answer: "0The Dev Guide has a section on IAM Policies for Amazon Redshift Spectrum which can help you step through the various roles, as well as cross-account permissions, and a specific  call out for chaining roles, if required.Without looking at what you've done already, it is difficult to troubleshoot via re:Post... if you have an account team, I'd recommend chatting with the Solution Architect as a potential next step as they may be able to troubleshoot in conjunction with you.CommentShareDan_Hanswered a year ago"


Question: AWS Glue DataBrew and error code 429

I am facing some issues when I execute more or less 10-12 Glue DataBrew processes at the same time. This is the following error:Too Many Requests (Service: AWSGlueDataBrew; Status Code: 429; Error Code: TooManyRequestsException)I found that one of the possible solutions is to increase the number of maximum API calls and usage plans per API key. It is correct? Can this petition solve this issue?FollowComment

Answer: "0Hi ,as described here there is a default quota of 10 concurrent jobs.You can use AWS Service Quotas to increase it as needed.hope this helps,CommentShareEXPERTFabrizio@AWSanswered 5 months agoJoel 5 months agoHi Fabrizio,Thanks for your answer. As you can see in the image, I have the concurrent jobs in 60:But the problem persists.Share"


Question: RDS database size minimal but getting charged for Gigabytes

"I would like to know how AWS calculates billing for database sizes.I currently use an RDS MySQL database for a web log platform.The RDS instance is provisioned in the Asia Pacific Region (Sydney).Storage is 200Gb GP SSD. I selected free tier MySQL.I have removed any manual snapshots and disabled automated backups. There are no snapshots associated with the instance.When I connect to the database from an EC-2 instance with MySQL client and check the database size it is telling me all of the databases on the RDS instance come under 20MB (In total for all schema's).However, billing is saying I am using 60GB-month?!I believe I am still under the free tier threshold but I am not sure where the provisioned GP2 storage running MySQL is coming from?I am really unsure as to why I am being charged for RDS?FollowComment"

Answer: "1Accepted AnswerHi, the free tier includes 20 GB of provisioned storage, but you've provisioned 200 GB.  It doesn't matter how much of this your DB is using and how much is free space, you are charged "rental" on that 200 GB of SSD storage allocated to you.  You'll be charged for the excess 180 GB, which over a month will be a charge of 180 GB-mo; i.e. in a third of a month you'll be charged 60 GB-mo.CommentShareEXPERTskinsmananswered 4 months ago0Hi Skinsman,Thank you for the explanation and yes that fits exactly with what has occurred on my account.Literally just recreated my database for this reason. Found it in another guide for creating a free tier RDS database.Clearly, I misconfigured. But I have to say having 200 as the default number in the allocated storage box is a bit misguiding for beginners.Perhaps having it as 20 would be a nicer fit if someone chooses "Free Tier".But hey, that's just my opinion.CommentSharerePost-User-6555634answered 4 months ago"


Question: EMR serverless Natgateway charges for ETL in same region

"Hi,I ran an ETL job in EMR serverless but I incurred Natgateway charges even though my emr application and s3 bucket is in the same region. I have also configured gateway endpoint to s3 in my vpc but still I'm seeing Natgateway charges. I tested the VPC endpoint with an ec2 instance and it reached s3. I would like to know why EMR serverless is using Natgateway over VPC endpoint and how to avoid Natgateway charges for processing data in s3?Thank you,MuthuFollowComment"

Answer: "1Accepted AnswerIt's possible that EMR serverless is using NAT Gateway over VPC endpoint due to certain configurations or limitations. Here are some possible reasons why this might be happening:EMR serverless might be using a different network interface than the EC2 instance that you tested the VPC endpoint with. This could be due to the way that EMR serverless is designed to operate or how it interacts with the VPC.It's also possible that there is a misconfiguration or an issue with the VPC endpoint setup that is causing EMR serverless to fallback to NAT Gateway.To avoid NAT Gateway charges for processing data in S3, you can try the following:Ensure that your VPC endpoint is properly configured and working correctly. You can check the VPC endpoint's route table to make sure that it's properly configured to route S3 traffic to the VPC endpoint.If you have already confirmed that the VPC endpoint is properly configured, then you can try removing the NAT Gateway from your VPC. This will force EMR serverless to use the VPC endpoint for all S3 traffic.You can also try using VPC flow logs to identify the source of the NAT Gateway traffic. This may help you to identify any misconfigurations or issues that are causing EMR serverless to use the NAT Gateway instead of the VPC endpoint.CommentShareGovind Kumaranswered a month agoEXPERTRiku_Kobayashireviewed a month ago"


Question: Endpoints test inference gives error 415

"Hi,I deploy a abalone test model, and now I want to test it through Enpoint Test Inference, it gives me an error:Error invoking endpoint: Received client error (415) from primary with message "application/json is not an accepted ContentType: csv, libsvm, parquet, recordio-protobuf, text/csv, text/libsvm, text/x-libsvm, application/x-parquet, application/x-recordio-protobuf.". See https://ap-northeast-1.console.aws.amazon.com/cloudwatch/home?region=ap-northeast-1#logEventViewer:group=/aws/sagemaker/Endpoints/abaloneTest in account 556267670448 for more information.I understand the error contentType is not accepting value "application/json", but I am not able to find out how can i update the default value from "application/json" to any permitted value and test endpoint with test inference ui only?It will be good if ui provides a sample request format, so that we can test it fast.FollowComment"

Answer: "0Hi and thanks for reaching out,Today, the endpoint test UI in SageMaker Studio only supports application/json content, so can't be used with endpoints like yours that don't support this content type: You'll need to use code, for example from a notebook or terminal.From Python in particular you would have two options:The low-level boto3 SDK as used here, which maps directly to the underlying InvokeEndpoint API and requires you to serialize your content (e.g. to CSV string) yourself, orThe high-level sagemaker SDK, which might be more familiar if you've followed tutorials with e.g. the Estimator / Predictor syntax.Either is fine really... The high-level SDK just packages the process of stringifying and de-stringifying objects for the HTTP(S) request using the serializer and deserializer classes - so you would set your predictor up with the appropriate de/serializer and then just pass in the data as your usual e.g. DataFrame or nested list format:import pandas as pdimport sagemakerpredictor = sagemaker.Predictor(    "your-endpoint-name",    serializer=sagemaker.serializers.CSVSerializer(),    deserializer=sagemaker.deserializers.CSVDeserializer(),)df = pd.read_csv("small-dataframe.csv")result = predictor.predict(df)Alternatively if having the test UI is important for your use-case, you could explore other SageMaker algorithms that support JSON I/O? If you're using XGBoost you could consider using it in "framework mode" instead of "algorithm mode", letting you provide a custom inference script to parse JSON or whatever other request formats you'd like. If you're using AutoGluon-Tabular or one of the other "JumpStart-based" algorithms, you may be able to download, modify, and re-upload the inference deploy_source_uri (see this example) to likewise accept custom request/response types.CommentShareEXPERTAlex_Tanswered 4 months ago0Thanks @Alex for update.It will be good if AWS test endpoint UI also support another types as well. As every new developer/learner starts with Abalone example, so they are expecting result on UI interface as well. This is the very basic and initial requirement of AWS test endpoint UI.Thanks again.CommentSharerePost-User-6364711answered 4 months ago"


Question: DocumentDb:  $multiply by NumberInt(-1)

"I've been working on converting mongodb pipelines to documentdb pipelines.   I've posted the same question over on stackoverflow.I've came across this oddity:   I'm seeing behavior where multiplying by negative numbers is failing in AWS documentdb.   This works in mongodb but the same fails in documentdb:            "$addFields" : {                sigh: { $multiply: [ NumberInt(-1), NumberInt(1) ] }            }Just to convince myself that I had the syntax correct I tested against:            "$addFields" : {              sigh: { $multiply: [ NumberInt(1), NumberInt(1) ] }            }Using -1 works in this toy query but still fails in the same way in the context of a$cond query.            "$addFields" : {              sigh: { $multiply: -1, NumberInt(1) ] }            }I thought maybe the NumberInt(-1) could be the problem but this works just fine:            "$addFields" : {                "sigh2": NumberInt(-1),            }document db engine:  db.runCommand({getEngineVersion: 1}{    "engineVersion" : "2.0.8934",    "ok" : 1.0,    "operationTime" : Timestamp(1684438041, 1)}Finally, the error I'm seeing is:Mongo Server error (MongoCommandException): Command failed with error 17287: 'Bad query specified' on server <instance>.docdb.amazonaws.com:27017. The full response is:{    "ok" : 0.0,    "operationTime" : Timestamp(1684439496, 1),    "code" : 17287.0,    "errmsg" : "Bad query specified"}FollowComment"


Question: Unable to receive emails on our private email id from namecheap

"hi, I talked to namecheap support and they advised us to put their MX records and TXT record after which we'll be able to receive emails on our private email id.We did so, but unfortunately we are still unable to receive an email.It is interesting to know that we are able to send emails from our private email address but not receive any email on it.FollowComment"

Answer: 0it seems like my problem has been resolved by removing the @ sign from hostnameI'll re-post if issue is faced.CommentSharezuakanswered 2 years ago