Question: Time between emailed invoice and credit card charge

"I am seeking information on the financial arrangements associated with an account. I represent a church that wishes to backup their web sites to AWS. However, the financial people have a requirement that they must be able to view an invoice before the monthly charge for the storage service is debited from the credit card. So, my question is: How much time is given between the time an invoice is sent out and the time the credit card is changed for the monthly storage cost?FollowComment"

Answer: "0Accepted AnswerThe bill is finalized the beginning of the month, the default payment method is then charged usually between the third and fifth day.  https://aws.amazon.com/premiumsupport/knowledge-center/monthly-aws-billing/#:~:text=Your%20AWS%20bill%20for%20the,check%20the%20bill%2FInvoiceID%20column.CommentShareSeanManswered a year agoAWS-User-8973218 a year agoIs the invoice emailed on the first day of the month?Share"


Question: NOT_SUPPORTED: ORDER BY LIMIT > 2147483647 is not supported

"SELECT count(*) as count ,accountname,deviceaction,ipaddress from "zinble"."zinble_2_enriched" where (rg_id IN ( 41 )) and ((resourcegroupidpq = '41' AND yearpq = '2022' AND dayofyearpq = '203') )  and eventtime >= 1657093590000 and eventtime < 1659685590000 and '785a9f0c-6187-4f50-8e7f-742a3ed0feda'='785a9f0c-6187-4f50-8e7f-742a3ed0feda' group by accountname,deviceaction,ipaddress ORDER BY count DESC LIMIT 62500000000;When i run the above query i get this error ->. NOT_SUPPORTED: ORDER BY LIMIT > 2147483647 is not supportedThis query ran against the "zinble" database, unless qualified by the query.Can we increase the limit's value from Integer.MaxValue to Long.Maxvalue. If yes, can you please tell me how.FollowComment"

Answer: 0Currently there is no option to change the upper limit to be able to support numbers bigger than 2147483647CommentShareAnanth Tirumanuranswered 10 months ago


Question: How best to learn to build a cloud 'sites' architecture in AWS similar to Atlassian Jira

"Which strategy documents should I look at to learn how to create an AWS architecture with scalable, dedicated 'sites' for each of my customers?  For example, I would like have customer-site-1.my-root-domain.com, customer-site-2.my-root-domain.com, etc. where each site has  dedicated environment, web app, and database.   I would like these 'sites' to able to scale/migrate/deploy to additional AWS resources when needed.  These per customer dedicated web apps will share other scalable resources such authentication and messaging services.   There are so many AWS services, I do not know where to begin.  Thanks in advance for pointing me in the right direction.-EricFollowComment"

Answer: 1It sounds like Elastic Beanstalk would definitely be a good place to start.  You can deploy web applications and point your sub-domains to each web app using Route53.  You can then build on top of this and integrate other AWS servicesCommentShareEXPERTMatt-Banswered 10 months agorePost-User-2083591 10 months agothanks!  I will check those out.Share


Question: Transit Gateway to AWS Instance Encryption

"Hello, is the traffic between the transit gateway to the AWS encryption encrypted?  I've been requested to open an unencrypted SQL port (1433) from on-prem to AWS.  Traffic will be going through VPN which is encrypted from on-prem to the AWS transit gateway.  My concern is the traffic from the transit gateway to the AWS instance.  Thanks in advance.FollowComment"

Answer: "1By default all traffic through the AWS transit gateway is encrypted if the peering is between regions. Peering inter-region is not encrypted.source documentation:https://docs.aws.amazon.com/vpc/latest/tgw/tgw-peering.htmlCommentSharebleepingcodeanswered a year ago1Today, traffic between Transit Gateway and instances is not encrypted at the network layer.In a more general case (and now I'm talking about every network that your packets may pass across): If you are relying on network-level encryption there are always going to be places where your traffic will be unencrypted. For example, even if using MACSec the switches and routers on your network will have access to the unencrypted packets and are therefore a potential place of intercept. There are likely others as well.Therefore, if you need to ensure that your traffic is encrypted end-to-end then you need application-layer encryption (normally TLS but there will always be other protocols and ways of doing this).For this particular question: I would strongly encourage you to encrypt the traffic to your SQL server at the application layer.CommentShareEXPERTBrettski-AWSanswered a year ago"


Question: API connection error - connection refused

Shows Failed to load resource.  connection refused in EC2 (ssl secured)FollowComment

Answer: 0Have you assigned a security group to the EC2 instance that allows connection to the EC2? The security group is something like firewall configuration. You have to explicitly allow all ports that should be accessible. See EC2 >> instances >> the-instance >> Actions >> Security >> Change security groups.CommentSharerePost-User-3196201answered a year ago


Question: Textract to multi column pdf files

"I am using the code below that I took from an example https://aws.amazon.com/pt/blogs/machine-learning/automatically-extract-text-and-structured-data-from-documents-with-amazon-textract/, in the example it is used only for a case of 2 columns, in the code where there is division by 2, if my file has 4 columns for example, I just change that it works. But how to detect the amount of columns automatically or some way that I don't need this manual input anymore?In summary I want to use this code for cases of pdf files that have more than 2 columns, how to do it?import boto3# Documents3BucketName = "amazon-textract-public-content"documentName = "blogs/two-column-image.jpg"# Amazon Textract clienttextract = boto3.client('textract')# Call Amazon Textractresponse = textract.detect_document_text(    Document={        'S3Object': {            'Bucket': s3BucketName,            'Name': documentName        }    })#print(response)# Detect columns and print linescolumns = []lines = []for item in response["Blocks"]:      if item["BlockType"] == "LINE":        column_found=False        for index, column in enumerate(columns):            bbox_left = item["Geometry"]["BoundingBox"]["Left"]            bbox_right = item["Geometry"]["BoundingBox"]["Left"] + item["Geometry"]["BoundingBox"]["Width"]            bbox_centre = item["Geometry"]["BoundingBox"]["Left"] + item["Geometry"]["BoundingBox"]["Width"]/2            column_centre = column['left'] + column['right']/2            if (bbox_centre > column['left'] and bbox_centre < column['right']) or (column_centre > bbox_left and column_centre < bbox_right):                #Bbox appears inside the column                lines.append([index, item["Text"]])                column_found=True                break        if not column_found:            columns.append({'left':item["Geometry"]["BoundingBox"]["Left"], 'right':item["Geometry"]["BoundingBox"]["Left"] + item["Geometry"]["BoundingBox"]["Width"]})            lines.append([len(columns)-1, item["Text"]])lines.sort(key=lambda x: x[0])for line in lines:    print (line[1])FollowComment"

Answer: "0You may like to try the Amazon Textract Response Parser for this, and note in particular that the JavaScript/TypeScript library's getLineClustersInReadingOrder() implementation is very different from the Python library's getLinesInReadingOrder().From a very biased (author's) perspective I would argue that the JS library's current heuristic is better. You can see a couple of example images it's tested against in the code repository - and I'd suggest it's well worth trying out if you're able to consume components in JS or TS as well as Python.But ultimately, all these methods are rule-based heuristics and none are perfect: Often what you gain in performance on some use cases, you lose in code maintainability and weird/counter-intuitive errors on others. At the extreme, many complex layouts even challenge/break the idea that there's "one correct reading order" for content on a page anyway - like posters or advertisements with very variable text.I'd suggest to go with the simplest method that works well enough for your actual documents, and also to revisit why you're trying to extract this columnar structure in the first place in case there are better options:If you're just looking for a 1D text sequence to feed into a downstream NLP model, maybe revisit whether Textract Queries, Comprehend Native Document NER or other custom 2D layout-aware language models on SageMaker could solve that end task better?If you're just looking for a transcript of the document, maybe you could present it to end users in 2D format (using the word positions & boxes returned by Textract) instead of trying to reduce to a single sequence?CommentShareEXPERTAlex_Tanswered a year agoAWS-User-8895452 a year agoHi thanks for your reply!Basically i need to extract all the text from several pdf files. and I will save in a structured way.And within these pages I have the variation of 1 to 5 columns sometimes and sometimes not, but the average is 2 columnsShareAWS-User-8895452 a year agoIn this code my big problem is that the columns are variables and this division /2 that is done varies and can be /2, /3, /4 or /5Share"


Question: Unknown reason for cross AZ failover

"Hello,Our Aurora cluster has recently started doing cross AZ failovers almost 10 times / day.We recently updated to Aurora (MySQL 5.7) 2.10.2. How can we find out why is this happening?In the error/mysql-error-running.log (319 kB) I saw info about Segmentation fault (core dumped) but how can I know what is causing this?Thank you!FollowComment"

Answer: "0I suggest creating a support ticket for this issue, they will be able to take a look at what was happening and help with the remediation.CommentShareYUTAKA_Hanswered a year ago"


Question: Cloudfront distribution for S3 Public Website  - custom origin  not working but S3 origin working ? Why ?

https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/GettingStarted.SimpleDistribution.htmlI was trying this exercise in my account :I configured a public S3 bucket as static website and hosted website by uploading the Helloworld filesWorked wellNext step I wanted to create a cloud front distribution with Custom S3 origin as shown was selected. Other settings left default. Selected website S3 endpoint  as shown while selecting the bucket as shown in figureThe resultant cloudfront distribution is giving Error as follows :Step : 2 Created other Cloudfront Distribution with S3 origin and this worked fine as follows Why ?WHY This difference in Distribution hosted from S3 and Custom OriginPFA the two cloudfront distribution :FollowComment

Answer: "1When you choose a custom origin you're accessing some arbitrary website by URL.  So you need to provide a website URL like in your first image, with "s3-website" in it.  The "origin domain" you provided as shown in your second image is not pointing to the S3 bucket's static website.When you use an S3 origin you're not accessing the bucket's static website, you're accessing its REST interface.  You could (and should!) disable the static website and make the bucket non-public, and this will stll work via the Origin Access Identity.CommentShareEXPERTskinsmananswered 4 months ago"


Question: No result from AI SocialMedia Dashboard

"Hi All,I'm a complete Novice to AWS. Hope to have your guidance on this.I tried deploying the AI Social Media Dashboard template twice. Both times with stack successfully created.In the first attempt, I was able to find some csv and metadata objects inside the S3 bucket. The files can be downloaded, but they contain nothing other than the column headers. I kept the EC2 instance running for a month and was charged $15 for that, but still couldn't find any no content in the objects.The second time I tried with a random keyword. After the whole stack is created successfully, I can't even find the objects.Hope you could shed some light.Thanks!hawkoli1987FollowComment"


Question: RDS (OS) update is available - Don´t see it in RDS Dashboard

"Hello there,we got a notification in AWS Health Dashboard that a OS update is available for three RDS Databases.The problem is, i don´t see a Update avaiable in the RDS Dashboard under "Pending maintenance". Furthermore, i don´t see any update event log with AWS CLI command "aws rds describe-events". Also no update to see with AWS CLI command "aws rds describe-pending-maintenance-actions".Therefore the question, is the OS update still remaining or did it happend? Maybe i look at the wrong place?FollowComment"

Answer: "1hi we ask AWS supprt team "By upgrading your DB instance engine version to a version suitable for this operating system update, you can check for applicable required OS updates."MySQL : 5.6.51+/5.7.33+/8.0.23+Mariadb : 10.5.12+I think you need to update to the above RDS version, you will see "RDS OS update message".CommentSharerePost-User-2291513answered a year agoMMoench a year agoWhat "rePost-User-2291513" is writing is very interesting.We are also affected by this and got a similar message, claiming that two instances running MariaDB 10.3.31 had mandatory OS updates, but there is no way to apply them nor can we see 'em with "describe-pending-maintenance-actions". But if the previous user is right, we would first have to upgrade to MariaDB 10.5.12 or beyond before the OS can be patched? Is there any information about what would happen if we don't upgrade our engine before the due date set by AWS?Share0Hello Rao,thank you. We don´t see any Update avaiable with "AWS CLI – ‘describe-pending-maintenance-action’"  or under the ‘RDS Maintenance & backups’ Field for all RDS Databases.Therefore, i guess no updates are pending?But I am still wondering why we got the notfication in the AWS Health Dashboard on May 27 and don´t see any Update avaiable. Auto minor version upgrade is disabled.CommentSharerePost-User-7537700answered a year agoD-Rao a year agoIf you do not see any events being listed when you run "AWS CLI – ‘describe-pending-maintenance-action’", then nothing is pending.Please note that "Auto minor version upgrade" is DB upgrade, where as OS updates are for the underlying Operating System.It might be possible that it was an Online OS Patch which has been completed.Share0That's most likely because AWS PHD shows the updates and notifications only for 7 days on the default Dashboard view. Also, after an AWS service resolves an event, the notification is removed from your dashboard view. However, you can still list all the notifications beyond last 7 days as well, by clicking on the 'View Event log' option.You can find more details in here - https://docs.aws.amazon.com/health/latest/ug/getting-started-health-dashboard.html#dashboardIn order to list out the pending actions on RDS instance, there are two ways:You may also use AWS CLI command ‘describe-pending-maintenance-action’ for your RDS instances to check if there are any pending maintenance items.AWS CLI – ‘describe-pending-maintenance-action’[+] https://docs.aws.amazon.com/cli/latest/reference/rds/describe-pending-maintenance-actions.htmlFurther these maintenances can be tracked from the RDS console ‘Databases’ overview page under the ‘Maintenance’ field where the value would be ‘required’. You can confirm the same by selecting such DB instances and checking under the ‘Maintenance & backups’, you will find “New Operating System update is available” pending maintenance item.CommentShareD-Raoanswered a year ago"


Question: Secure architecture with two front-ends and private back-end

"For a fintech startup, I am looking for a secure "bank-grade", scalable architecture reference, especially for protecting the back-end.The public web app and mobile apps would use AWS Cognito for authentication (Amplify environment for hosting etc.). Anyone can register/log in and manage their profile info. The public facing setup is relatively straight-forward.As for the back-end, beside the database (PostgreSQL) and custom logic (.NET on EC2), employees of the company must be able to access a private web-based front-end "dashboard" for managing registered user's data (those who registered on the public app).For simplicity, narrowing the scope down to the resources only an employee would be able to access, assuming the private deployment of the sample ( https://github.com/aws-samples/aws-netcore-aspnetmvc-amazon-cognito-authentication-authorization-samples ) , with the front-end used as the employee dashboard, what is the best combination of AWS services with a private VPC to allow an employee to access the dashboard only, but without a public IP of the dashboard?What is the most secure architecture to host and entirely hide the back-end, but also host a private web-based dashboard that is only accessible to employees of the company? Which AWS services are the best for this scenario? Are there any templates or samples available?Thank you in advance!FollowComment"

Answer: "0Take a look at this: Fintech Blueprint on AWS. It is using Client VPN connections for the internal employees.This is another one that is a little more complicated, Compliant Framework for Federal and DoD Workloads in AWS GovCloud (US). You don't have to run this architecture in GovCloud.CommentShareEXPERTkentradanswered a year ago"


Question: Greengrass V2 | Stream Manager Aborts File Upload if File Size Changes

"I'm uploading log files from my Greengrass device to S3 buckets using the aws.greengrass.StreamManager=2.1.2 component.Then I realized that one of my log file's upload job was aborted according to this log in the aws.greengrass.StreamManager.log due to the file size has changed.I'm not able to disable logging to that log file while it is being uploaded, thus have little control over the changing file size. Is there a way to prevent the job from being aborted?FollowComment"

Answer: "1Accepted AnswerStream manager is not made to upload log files (or any file that changes). The file should be completely static when you attempt to upload it.To upload logs, use LogManager: https://docs.aws.amazon.com/greengrass/v2/developerguide/log-manager-component.htmlCheers,MichaelCommentShareEXPERTMichaelDombrowski-AWSanswered 3 months ago"


Question: One specific domain can't receive emails from one specific SES account

"Hey,I have two applications which send transaction emails through ses accounts. Both ses accounts are in production mode and working fine.The first of this apps is suffering from a problem that emails to the domain henkel.com/henkel.de are beeing send without errors in smpt relay but never reaches the recipient. The recipients are not on account suppression list. The verified identity has feedback notifications configured and when sending to any other domain we get delivery or bounce messages. But when sending to any henkel recipient, we don't get any messages. After some days the email still don't arrive and there are still no bounce messages triggered. The emails just disappear into nirvana.The second app is able to send to the same henkel recipients and everything is OK. Both apps uses smpt relay with right credentials. Both apps are on eu-central-1.I will send further informations like account ids to someone via pm.ThanksAlexFollowComment"

Answer: 0After some time we received bounce messages.CommentShareleik-softwareanswered 2 years ago


Question: Please provide a solution to the error in AWS codedeploy on windows : No such file or directory - rd /s /q "C:/ProgramData/Amazon/CodeDeploy/f3aa6849-0470-40d0-bd3d-39c07f923a9d/d-ELOVEWK2E" 2>&1

Getting this error sometime after pipeline is created successfuly. The error came during some deployments: No such file or directory - rd /s /q "C:/ProgramData/Amazon/CodeDeploy/f3aa6849-0470-40d0-bd3d-39c07f923a9d/d-ELOVEWK2E" 2>&1. Although this folders and sub folders are still there in place. What is the cause of the error and any resolution to this?FollowComment


Question: Billing charge for Amazon Rekognition Custom Labels

I want to use Amazon Rekognition Custom Labels but get confused in billing charges for the service.Particularly for Inference hour.This Inference hour is basically  define as sum of time which is using for the uploading of image and result generated as output?Basically for using to upload image and get the result till this duration only.ORSum of time which from start of model to stopping of model?Pricing (US)Inference hour                    $4 per hourFollowComment

Answer: "2Accepted AnswerYou can see the details of Rekognition pricing in the next link: Rekognition pricing.The inference hours is the total hours that your model is available, that means the time that the model is running up. From the moment you start the model until you stop it (So this is second option that you indicated in your comment).As recommended in the pricing guide, If you expect to process images in batches (e.g. once a day or week, or at scheduled times during the day), you should provision your custom model at scheduled times, process all your images, and then deprovision your resources. If you do not deprovision your resources, you will continue to be charged even if no images are processed.CommentShareigsalvaranswered a month agoMayur a month agoWhile searching estimation for Rekognition pricing.I get to know of the Estimate based on --Number of images processed per monthANDNumber of inference hours per monthFor us Number of images processed per month is suitable and it is cost effective.So how can we enable this (Number of images processed per month) service for running our model in Rekognition service.Thank youShare"


Question: Migration from AWS KSM to a combined solution with CloudHSM

"Hey,I'm working on a solution that I want to propose to my customer for a move to cloud project.They want to start with a small of services and cost on AWS. So I have to start to land the applications in AWS with limited services.For encryption purpose, I'll start with AWS KMS only at the beginning with a dedicated CMK for each application and each related AWS service.But the customer want to possess the key material for the new step of the project. That's why I suggest to bring CloudHSM with AWS KMS.However, I don't know what can be the impact of this new encryption services combination, on the existing keys, backed up keys, ...?Do you have any suggestion?RegardsFatihFollowCommentkumo-hiyori 5 months agoWhat are the risks that customer wants to protect against by "possessing the key material"? You are always in control of the key that you create in KMS through the key policy and IAM policy. You have full control over the lifecycle of CMKs. The common pitfall that we see a lot of customers fall into is when they fail to properly evaluate the cost of key management vs. threats they face. Customer often delegate the decision to their compliance/governance team who may not fully understand about AWS and KMS to make informed decision.Sharekumo-hiyori 5 months agoAlso, one point to note is that migrating between KMS and CloudHSM and vice versa later on is difficult. You would need to recreate the new key, switch other AWS service that was dependent on old key, and re-encrypt the data. You will incur additional charge from respective AWS services to do the operation.Share"

Answer: 1Cloud HSM is pretty expensive. If they want to control the keys they can import their key using BYOK. https://docs.aws.amazon.com/kms/latest/developerguide/importing-keys.html. Not saying don't  use CMK but if the only reason for using HSM is to own the key then that can also be done with KMSCommentShareEvananswered 5 months agoFatih 5 months agoThanks for feedback.The purpose of using HSM is regulatory compliance and to not manage (import) CMK and let it to HSM.Share


Question: Importing json that has a nested array

"My json looks like this:{"userid" : "10","actions" :[{"type":"flip", "timestamp":"5pm"},{"type":"jump", "timestamp":"6pm"}]}I want to bring that into a table in redshift that has columns "userid, type, timestamp"Do I need to reformat the file into flat lines or is this possible with a standard copy command?FollowComment"

Answer: "0Accepted AnswerIt is not currently possible to import such data using COPY. However, you can define the data as a Spectrum external table and use our nested data support to bring the data in. https://docs.aws.amazon.com/redshift/latest/dg/tutorial-query-nested-data.htmlCREATE EXTERNAL TABLE spectrum.nested_example     ( userid     int     , actions    array<struct<type:varchar(20), timestamp:varchar(20)>>     ) ROW FORMAT SERDE 'org.openx.data.jsonserde.JsonSerDe'LOCATION 's3://benchmark-files/temp/nested_data/nested_example/';SELECT u.userid      ,a.type      ,a.timestampFROM spectrum.nested_example uINNER JOIN c.actions a ON true;CommentShareAWS-User-2965899answered 4 years ago0I'm guessing this degrades query performance significantly over having it stored flat?CommentSharemeyerovbanswered 4 years ago0Hi meyerovb,You could always take the SELECT against the external table that Joe gave you and put it into a CTAS statement to materialize the data in local Redshift storage if you're concerned about the unnest the columns at query time.  It's really an alternate load pattern for Redshift and one that only need be executed once each time the external table data changes.However, don't be too surprised when you find case where Spectrum query performance on external data beats Redshift local storage performance, especially when not joining big tables.  This happens because Redshift Spectrum parallelism is up to 10x wider than Redshift slice parallelism.  So even though the data is read from S3 instead of local disk there are 10x more scan workers to get the heavy lifting at the access operator level of the query plan done faster, assuming there are enough splits in S3 to feed them all relatively evenly.I hope this helps you at least a little,-KurtCommentShareklarsonanswered 4 years ago"


Question: "Can Amazon Sumerian be intergated with Google Dialogflow chatbot or IBM Watson chatbot ? If yes, how ?"

"Can Amazon Sumerian be intergated with Google Dialogflow chatbot or IBM Watson chatbot ? If yes, how  ?FollowComment"

Answer: 1Amazon Sumerian is no longer accepting new customers. We recommend taking a look at the Amazon Sumerian Hosts open source project which has integrations with Babylon.js and Three.js engines. Hosts provides integrations with Amazon Lex and Amazon Polly and you can take a look at those integrations as a a reference implementation for other machine learning services.CommentShareEmily_Janswered a year ago


Question: How can I connect to a private Amazon RDS instance from local node js application which was earlier using non-ssh sequelize connection?

"After successfully making Amazon RDS instance private (by following this method), I am not able to connect to the same RDS instance from the node.js application running on my local machine which was earlier using non-ssh sequelize connection.FollowComment"

Answer: "0Does this help to troubleshoot? https://stackoverflow.com/questions/59272750/ssh-tunnel-to-sequelize-postgresql-databaseCommentShareEXPERTskinsmananswered 6 months ago0Hi, to connect to a private Amazon RDS instance from a local Node.js application, you will need to use an SSH tunnel. This will allow you to securely connect to the RDS instance from your local machine.Here are the steps to set up an SSH tunnel to connect to an Amazon RDS instance:Install an SSH client on your local machine. If you are using a Mac or Linux system, you can use the built-in ssh command. Otherwise, you can use a third-party SSH client such as PuTTY.Generate an SSH key pair on your local machine. This will consist of a private key and a public key. The private key will be used to authenticate your connection to the RDS instance, and the public key will be added to the RDS instance's security group to allow access.Create a new security group in Amazon RDS, and add the public key to it. This will allow your local machine to access the RDS instance using the private key.Use the ssh command (or your third-party SSH client) to create an SSH tunnel to the Amazon RDS instance. The tunnel will forward traffic from your local machine to the RDS instance, allowing you to connect to the instance using your local application.In your Node.js application, use the sequelize library to connect to the RDS instance using the tunnel. The connection details will be the same as if you were connecting to the RDS instance directly, but you will need to specify the localhost port that the tunnel is forwarding traffic to.Here is an example of how to create an SSH tunnel to an Amazon RDS instance using the ssh command:ssh -i /path/to/private/key -N -L localhost:3306:rds-instance-endpoint:3306 ec2-user@rds-instance-endpointThis command will forward traffic from your local machine's port 3306 to the RDS instance's port 3306 over an encrypted SSH connection. You will need to replace /path/to/private/key with the path to your private key file, rds-instance-endpoint with the endpoint of your RDS instance, and ec2-user with the user name for the EC2 instance hosting the RDS instance.Once the tunnel is established, you can use the sequelize library in your Node.js application to connect to the RDS instance using the localhost port that the tunnel is forwarding traffic to. For example:const sequelize = require('sequelize');const db = new sequelize('database', 'username', 'password', {  host: 'localhost',  port: 3306,  dialect: 'mysql',});This will connect to the RDS instance through the SSH tunnel, allowing you to access the database from your local Node.js application.Follow meCommentSharedominguezdanielanswered 6 months ago"


Question: Athena views can't include Athena table partitions

"Hi,I found out this weird bug in Athena when showing table partitions using Athena engine version 2.When retrieving the most recent partition for a table, I can easily create this simple query which picks the latest year according to the partition.In my example I have a table which is partitioned by year e.g. year=2021/file.csv , year=2022/file.csv. If I run this query in Athenaselect*from"my_year_table$partitions"order byyear desclimit 1I get 2022 backHowever, If I try to create a view that does this automatically for mecreate or REPLACE view HURR_DURR as select*from"my_year_table$partitions"order byyear desclimit 1I'm greeted with the following errorline 5:2: Table [aws-account-number].my_database.my_year_table$partitions does not exist. This query ran against the "my_database" database, unless qualified by the query. Please post the error message on our forum  or contact customer support  with Query Id: 266fb6e9-4a14-47de-8760-a9a21b88387eThe reason why I want to create a view is because I have tables with much more partitioning and I want some end users that query athena to simply run the view to retrieve the most recent partition key.Is there perhaps another way to go on about it?Best regardsFollowCommentottarg a year agoBump Up - does such a feature work here?Share"


Question: API call via SDK to send SES email via interface endpoint

"Hi team,I have a private VPC in which I added an endpoint for email service to be able to send emails via Amazon SES but the job that sends the SES email runs forever and doesn't do anything.I opened port 25 in the SG as mentioned here :https://docs.aws.amazon.com/ses/latest/dg/send-email-set-up-vpc-endpoints.htmlMy SDK code (in a glue job) use an API call to the SES send email command to send the emailnot sure if the email interfaces SMTP endpoint work for SES?FollowCommentFabrizio@AWS EXPERTa year agoCould you please explain if you have an issue or encounter an error in your Glue job?Share"

Answer: "0Hello,From the details I understand that you are trying to send emails via Amazon SES associated with Glue ETL job. Can you please provide below details :Did your Glue ETL job fail and you did not receive emails ?Have you already worked with AWS support to get port 25 restriction removed as I see that the port 25 restriction can't be removed from non-VPC functions. Do you see any timeout issues ?Do you see any Access Denied/other authorization issues for the Glue IAM user/role in Cloud Trail while trying to send emails to SES ?I would recommend you to please open a ticket with Glue premium support providing Glue job run ID, AWS region in which the job ran and we can work on a screen-share.REFERENCES:https://aws.amazon.com/premiumsupport/knowledge-center/ec2-port-25-throttle/CommentShareSUPPORT ENGINEERVishali_Nanswered a year ago"


Question: Integrate OAuth2.0 to SSO in AWS

"I'm creating a Spotify data analysis tool to communicate with the company API so I can provide a service on my web for people to see some insights of their spotify profiles. To do so, I need to incorporate the SSO on my web with the OAuth2.0 protocol (given by Spotify to use their API).I would like to know if someone can guide me into the steps to do this since I have no prior experience working with external users authentication.FollowComment"

Answer: "0Hello,As you said in your message, Spotify requires that you use OAuth 2.0 for authorization against their API.  Docs here https://developer.spotify.com/documentation/general/guides/authorization/  Based on the docs and your message above, it looks like the Authorization Code-Flow would be your best choice.  https://developer.spotify.com/documentation/general/guides/authorization/code-flow/They do point you to a github repo with a full functioning example, but unfortunately it looks like the link in the docs is broken.  Ive found the repo here https://github.com/spotify/web-api-examples/tree/master/authentication/authorization_codeHope this helpsCraigCommentShareCraig Simonanswered 3 months ago"


Question: CloudWatch writing to expired logstreams?

"We have a log group (with a 1-day expiry) set to receive events from Route53. Of course, these get split into multiple streams. We have an app that queries the last few hours of logs by requesting all the streams associated with the group and then filtering based on the last ingestion time before performing a regex on the remaining text.For the most part, this works well but we have been known to miss messages. While looking into this, I found a recently written message (05/09/23 13:59:00) in a logstream that was marked as expired with a last ingestion date/time of 05/07/23 02:17:58.By 15:37, as I am writing this, the last ingestion date on the expired logstream had finally updated. I understand these fields are eventually consistent, but I always thought of this as being a matter of seconds, not over an hour.Given that this kind of delay isn't acceptable to our application, is there a better way to filter these messages or even receive them directly from Route53? Even if I took off the time-window in my call to DescribeLogStreamsRequest() I'd need to widen out further to get those marked as "expired" to cover this scenario, so I'm at a loss as to how this can be improved.FollowComment"

Answer: "0Hello,Greetings from AWS Premium Support !From the case notes, I undertsand that you have observed delay in updation of last ingestion date on the expired logstream.Please correct me If I misunderstood your query.-> As you said, While looking into this, I found a recently written message (05/09/23 13:59:00) in a logstream that was marked as expired with a last ingestion date/time of 05/07/23 02:17:58. So, Can you please elaborate about expired log streams?, means Is it related to deleted log stream?, please confirm.-> As you are observing huge delay, So are you facing this issue with particular log group or other log group also.To ivestigate this type of issue, We will have to check on the log group level to find root cause. So I would like to request you to Please reachout to our Support team by opening a case with same account in which resources are available, and they would be able to check in detailed way.I will await your response.Have a great day ahead.CommentShareSUPPORT ENGINEERShivam_Vanswered 22 days ago"


Question: Deploy Rest API in Django

I have made one Rest API in Django and now I have to deploy that in AWS. Any ideas to which AWS Service should be used? What will be the architecture? Any diagram?FollowComment

Answer: "1Accepted AnswerSince Django handles auth, api throttling etc. on its own its usually deployed on EC2 instanced directly. So Elastic Bean Stalk would be the recommendation. You can deploy it on Lambda as well but you'll expose it using API gateway which conflicts with what Django Rest Framework does. So EC2 is the best bet deployed through Elastic Bean Stalk.CommentSharePronoy_Canswered a year ago0You can launch a Lightsail instance with Django pre-installed if that helps. As for what's best...depends on many factors including use-case, expected traffic, etc.CommentShareJohn Voldanswered a year ago"


Question: How to define a Cost Category with additional logical operators such as NOT and OR besides AND

"The General AWS Cost Categories FAQs and documentation mention that using the JSON Editor in the Cost Category creation Console, one candefine a Cost Category with additional logical operators such as NOT and OR besides ANDBut I can not find any example and my attempts all lead to errors being flagged in the JSON editor. Would love to find some examples of how to specify the OR of several Tags.The CostCategoryRule saysRoot level OR isn't supported. We recommend that you create a separate rule instead.But I have no idea how one could create a separate rule that would do what I need.What I would like to do is the following, but it currently gives me the error Failed to create Cost Category: Expression cannot contain OR on root level:{"RuleVersion": "CostCategoryExpression.v1","Rules": [{"Type": "REGULAR","Value": "production-001","Rule": {"Or": [{"Tags": {"Key": "Environnment","Values": ["prod"],"MatchOptions": ["EQUALS"]}},{"Tags": {"Key": "Environment","Values": ["prod"],"MatchOptions": ["EQUALS"]}},{"Tags": {"Key": "TerraformWorkspace","Values": ["prod"],"MatchOptions": ["CONTAINS"]}},{"Tags": {"Key": "aws:ecs:clusterName","Values": ["prod"],"MatchOptions": ["CONTAINS"]}}]}}]}FollowComment"

Answer: "0You can view these documentation:https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_Expression.html#awscostmanagement-Type-Expression-NotUses Expression Syntax: https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_Expression.htmlExample:{"Not": {"Dimensions": { "Key": "USAGE_TYPE", "Values": ["DataTransfer"] }}}CommentShareYoungCTO_quibskianswered a year agoRobert J Berger a year agoThe link to Expression Syntax is helpful, but not to answer my Question. It won't let me use OR at the top level. I will update the question to have more info.ShareAWS-User-4501171 a year agoDid you get a resolution to this? Having the same issue.Share"


Question: Greengrass Kinesis Video Pause Stream

"Hello,I have a Greengrass Core Device with an IP camera connected and the Kinesis component running on the device for viewing the video stream from AWS Kinesis Video Streams. This device has 3G mobile network connectivity. My question is if there is a way to only send the video stream on demand or pause the video sending, in order to reduce data consumption.Thank you very much in advance.Best regardsAlbertoFollowComment"

Answer: "0Hi there,I have a quite similar system but using WiFi communications instead of 3G. In any case, I would like to reduce the network consumption since I have some lag problems with other devices (the camera is using almost all the bandwidth), is anyone facing this situation and has found any workaround / solution?Thanks beforehand, looking forward to hearing from you.Kind regards.Daniel.CommentSharedpergarcanswered 6 months ago"


Question: CodeBuild job triggered by Githab occasionally gets wrong commit

"From time to time CodeBuild job which is configured to run on Github PR create/update events is not getting the latest commit, which actually triggered a build. This has happened approximately 5 times today, it is clearly visible since we were changing buildspec file in commits and we saw that builds were using buildspec from previous commit. We don't have developer support plan, but need this reported and fixed to continue using AWS services.FollowComment"


Question: Future of FPGA AMI

"Hello all,I'm interested to hear if AWS is willing to share their plans on future version of OS that will be used for FPGA AMI. Currently, FPGA AMI is running on CentOS 7 (or Amazon Linux 2, which is based on CentOS), which is already pretty ancient, and will see end-of-support in 2024. Also, RHEL has announced that CentOS releases will stop in currently known form, and they'll start with "rolling releases". This all leads me to believe that AWS will, at some point, stop using CentOS 7, and switch to either rolling release CentOS, or perhaps some other Linux distro.By reading the documentation and this forum, I've concluded that using Ubuntu with Vivado is currently not supported on AWS Instances, but Ubuntu is able to handle AWS PCIe drivers, meaning that FPGA designs synthesized on CentOS 7 are available to be used on Ubuntu. Is this still valid statement?FollowComment"

Answer: "0Hi jelicicm,We provide free Xilinx tools on our FPGA Developer AMI's on Centos 7 and AL2. Xilinx also has a list of supported OS's for Vivado: https://www.xilinx.com/support/documentation/sw_manuals/xilinx2021_1/ug973-vivado-release-notes-install-license.pdf. Based on that list, Vivado on Ubuntu would be supported on AWS if you bring your own install and license as we currently do not provide an Ubuntu based FPGA Developer AMI.For building AFI's and FPGA designs targeting AWS F1, our Developer Kit would be able to run with any of those OS's if they are Linux based. Our developer kit will not run on Windows machines.As far as running your accelerator on an F1 instance goes, that support is determined by the drivers you use. If you use XRT, Our SDK will work on most Linux installations to let you run AFI management commands on F1. You can absolutely use your AFI's created on Centos 7 on an F1 instance running Ubuntu.With this in mind, would you say your primary development OS is Ubuntu? We are constantly evaluating our offerings and we can take this as a feature request to offer our FPGA Developer AMI on Ubuntu if that better suits our customer needs.Hope this helps, and let us know if you have more questions.-DeepCommentShareDeep_Panswered 2 years ago0Hello Deep, thanks for the quick reply.Yes, I'm aware AWS offers free Xilinx tooling, accompanied with AL2 (which is based on CentOS 7). My question was - since I suspect AWS's plan is to always have a "Xilinx tool AMI" (such as the one you're mentioning), what OS will that AMI be based on once CentOS 7 support stops? To have an access to Xilinx tools is great, so my company plans to use this in the long run.I've just tried to start a new instance with Ubuntu 20.04, installed aws-fpga/sdk_setup.sh on it, loaded an AGFI and done some basic FPGA tests, which proved functional, so PCIe communication works on Ubuntu too, as expected. So its completely possible to build an AGFI on AL2 instance, and then load it up in Ubuntu and use it, just like you indicated.My company's primary development OS is Ubuntu, so it's handy to use Ubuntu on AWS too. I don't see why its better to use Xilinx tools on CentOS then on Ubuntu, but you probably have reasons on why you opted to go in that direction.CommentSharejelicicmanswered 2 years ago0Hi jelicicm,This is great feedback for us to take into account for our future plans. We don't have anything to share as of now, but we will reach out to you once we have more information!-DeepCommentShareDeep_Panswered 2 years ago"


Question: setup CloudFront in ec2 instances

"i am using cloud panel in my ec2 instances , i have only 1 ec2 instances, i have installed by 3 WordPress website, how i can setup CloudFront on it thishttps://check-host.net/check-report/cecd7d5k47cplease help me for setup my wordpress bypassFollowComment"

Answer: 0Accepted AnswerHere are some resources that will help you:https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/DownloadDistS3AndCustomOrigins.html#concept_CustomOriginhttps://aws.amazon.com/cloudfront/getting-started/EC2/https://aws.amazon.com/blogs/networking-and-content-delivery/deliver-your-apps-dynamic-content-using-amazon-cloudfront-getting-started-template/https://aws.amazon.com/blogs/networking-and-content-delivery/how-to-accelerate-your-wordpress-site-with-amazon-cloudfront/CommentShareEXPERTIndranil Banerjee AWSanswered 8 months agoEXPERTAWS-User-Nitinreviewed 7 months ago


Question: Is it possible to send a SIGTERM signal before connection draining when deploying a new task definition in ECS?

"We have an application that requires clients to have long lasting socket connections, and have code in place application side to gracefully handle a SIGTERM event. It does depend on connections remaining established but my observation is that the SIGTERM happens after the de-registration delay has elapsed and thus all active connections are killed.Is there a mechanism by which the SIGTERM can be sent before connection draining starts, or perhaps some other signal that would otherwise tell us that the application instance will soon be terminated?FollowComment"

Answer: 0The ALB connection draining will always happen before a SIGTERM signal is sent to the container. After the deregistration delay any remaining connections will get 5xx errors and SIGTERM is sent to the container.  The 'Reacting to SIGTERM' section of the Graceful shutdowns in ECS blog has a diagram describing the sequence of events when a service is scaled down.CommentShareNoah_Lanswered 3 months ago


Question: TCP connection dropped on load from NLB

"Hi,I am using nlb for serving rtmp connections. Targets of nlb are multiple nodes in eks cluster and on nodes there are nginx-rtmp pods. When i stream multiple streams, i am getting connection dropped at client side, and getting "drop idle stream" log on nginx-rtmp. my idle timeout configuration on nginx-rtmp is 30 sec. I am using ec2 instances to generating load which have 5GB bandwidth.I am not able to found why this is happening. Multiple connections dropping in a single second. and sometimes all of them are on same node.Also when i am checking NLB access logs i found only two ips in target ip and i am not able to found both ip on any pod or node.FollowComment"

Answer: "0Rather than setting the nodes as the targets of the NLB, and relying on further resolution by the Kubernetes service, please consider using a Kubernetes LoadBalancer Service object with the AWS LoadBalancer Controller and run it in IP mode to directly target each pod.Installing AWS LoadBalancer Controller: https://kubernetes-sigs.github.io/aws-load-balancer-controller/v2.5/deploy/installation/Creating the Kubernetes Service object: https://kubernetes-sigs.github.io/aws-load-balancer-controller/v2.5/guide/service/nlb/CommentShareAWS-Harrisonanswered a month ago"


Question: EventBridge and Message Deduplication

"I have a UI application which is not responsive sometimes. As a result, the user clicks the submit button multiple times. I'm planning to integrate this application with EventBridge. It is possible that the application can send the same message from the UI multiple times.We want to filter out the duplicate messages that come from the UI. Is there any AWS framework CDK which is written with de-duplication in mind and can be used along with EventBridge?FollowComment"

Answer: "1Accepted AnswerI suppose that EventBridge can't help you. It's an event bus service that ingresses your click events and simplify forward them to targets based on predefined rules. Think it as a bridge, it's not reasonable if you prevent the same car model goes through the bridge over and over again.On cloud environment, duplication is normal behavior and you have to handle that situation yourself so I advise you to update your source code in this case.CommentShareLinhTrananswered a year agowonderful world a year agoAre you suggesting storing the messages in a database, and every incoming message is checked against what is in the database to find out whether it has been processed already?Share"


Question: What are some of the strategies to handle Overlapping IP Ranges

"What are some of the strategies to handle Overlapping IP Ranges for various integrations, within AWS as well as while planning hybrid connectivity with on-premises networks using VPN, DX etc.Note: This is a common question asked by AWS customers. Posting it to provide an answer that can benefit everyone.FollowComment"

Answer: "1Accepted AnswerShort answers:If you can avoid overlapping IP addresses you should.If you are a SaaS provider then you should design your solution so that it works with PrivateLink as it takes care of the IP overlap for you.Otherwise, more details available in this blog post.CommentShareEXPERTBrettski-AWSanswered a year ago"


Question: How to reset AWS certification account password - Urgent

I have an exam in a hour. Can you please guide me how to reset AWS certification account passwordFollowComment

Answer: "0If you know what you are looking for, please click on "Schedule an exam" at the following site.https://aws.amazon.com/certification/?nc1=h_lsAfter that, the AWS certification page will open, click on Sign In, and from the login screen, go to the Forgot Password section to reset your password.CommentShareEXPERTRiku_Kobayashianswered a month ago"


Question: Init script no longer running

"I have my Cloud9 init script set up to run some important set up for my environment as well as register my custom plugins for code snippets. Just the other day, these functions stopped working, and it seems that the init script is not running on page load.Is anyone else having issues with their init script running?FollowComment"

Answer: "1Hi Avery,Thanks for reaching out. Support for initialization scripts has been discontinued. We're sorry for the inconvenience. If you want to run a script after page load you can do so by installing a browser extension that supports the same functionality.Best,Cloud9 TeamCommentShareAWS-User-4366929answered 3 years ago0Thanks for the response.  Has support for custom plugins also been discontinued?CommentShareAveryanswered 3 years ago0The init script used to execute JavaScript code on the server.  What kind of "browser extension" is going to replicate that functionality?CommentShareNateGasseranswered 3 years ago0I believe the init script only executed JS code on the client side on page load. So an extension that has permission to execute JS code on the current page could be set up to run on page load to replicate the functionality.However, in my case, I was using the init script to set up a custom plugin using the global services object.  But it looks like the services object is no longer available, even if I try to run my scripts manually from the developer console.  Was support for the services object also dropped?Edited by: Avery on Sep 1, 2020 10:36 AMCommentShareAveryanswered 3 years ago"


Question: What is the best way to have multiple authorizer on a single endpoint?

"For our use case, we want to implement multiple authorizers on an API endpoint irrespective of the method. So if the method is GET /test-api, it could have JWT authorizer as well as Lambda authorizer. We want to add JWT authorizer for maintaining RBAC on endpoints via CDK but the problem is if there are multiple apps, in CDK json we will end up having a large segment dedicated to maintaining the endpoints along with their RBAC rules. So is there a better way to solve for this?FollowComment"

Answer: "0Hi, i believe there are two parts to your query which i have addressed below:how to have multiple authorizer for HTTP API endpoint (i assumed HTTP API since you mentioned you want JWT authorizer).You can only have a single authorizer on every endpoint. If you need more than one, you will need to use a Lambda authorizer to verify both. for example, you can code to authorize JWT token using Lambda along with custom logic to authorize using LambdaIs there a better way to implement RBAC control with JWT token using CDK without having a large segment dedicated to maintaining the endpointsUnfortunately, you would need to mention it for all the routes & method that you would be attaching the authorizer to. I am cutting a feature request on your behalf to allow inheriting Authorizer to all the methods and sub-routes under a parent route.CommentShareSUPPORT ENGINEERAWS-User-0774443answered 7 months ago"


Question: "New Container Creation in ECS, not viewable from DNS name"

"So I am starting out with Docker deployment in AWS, followed the getting started guide etc and have everything up and running load balancer etc. But trying to open the dns name results in nothing. Is there something missing from the guide ??EC2Co-EcsEl-IYFDE1DL9APM-367342814.eu-north-1.elb.amazonaws.com - dns nameFollowComment"

Answer: "0To further investigate this, please run the command “dig ns <DNS_name>". It helps to identify the issue in DNS validation.CommentShareRam_AWSanswered 2 months ago"


Question: API Gateway:  AWS Service integration using IAM authorization

"I'm using AWS Service integration to connect API Gateway to DynamoDB.E.g.PUT orders/{id} -> AWS Service: DynamoDB, Action: UpdateItem (using a mapping template to transform the HTTP body to a UpdateItem request).Works fine.  Now I'd like to secure the table so that a user can only access their own records.  I've created a Cognito Identity Pool to limit a user's access and I've configured the method to use AWS IAM for auth.  But I don't see a way to tell the integration to use that as the Execution role.  As far as I can see, you have to hard-code that.Is there a way to use the IAM role as the execution role?WorkaroundI'm aware that I can put a Lambda in the middle, getting it to make the DynamoDB call using the user's IAM credentials, but that's an extra hop and more code to look after.  If anybody know a way to go IAM -> Gateway -> Dynamo that would be much better.FollowComment"

Answer: 1Something worth trying - https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_examples_dynamodb_items.htmlAmazon DynamoDB: Allows item-level access to DynamoDB based on an Amazon Cognito IDCommentShareEXPERTIndranil Banerjee AWSanswered 10 months agoANeeson 10 months agoInteresting suggestion.  thanks! +1Share


Question: Is Linux (client) support for Lumberyard canceled

"In Lumberyards FAQ a few weeks ago you could read the following*Q. What device platforms does Lumberyard support?*Lumberyard currently supports PC, Xbox One, PlayStation 4, iOS (iPhone 5S+), and Android (Samsung Note 4 and equivalents). Support for broader mobile hardware is coming soon, along with additional support for Mac and Linux. Please note that Sony and Microsoft only permit developers who have passed their screening process to develop games for their console platforms.For me that sounds like Amazon is talking about Linux clients and not just Linux servers.But now you find this at the same place*Q. What device platforms does Lumberyard support?*Lumberyard currently supports PC, Xbox One, PlayStation 4, iOS (iPhone 5S+), and Android (Samsung Note 4 and equivalents). Lumberyard also supports dedicated servers on Windows and Linux. Additional support for MacOS is coming soon. Please note that Sony and Microsoft only permit developers who have passed their screening process to develop games for their console platforms.Does that mean support for Linux clients is completely canceled?Follow"

Answer: "0Let me follow up with the team. It may be a prioritization issue. I'll let you know.SharerePost-User-8353690answered 6 years ago0Of course Linux support has a low priority and I really can understand that.Butif the reason for the change in the FAQ is, that the priority of Linux support is even lower than before, I think it would be better to replace"Mac and Linux support is coming soon" with "Mac support is comming soon, followed by Linux support at a later time" instead of completely removing it.SharerePost-User-4009545answered 6 years ago0Did you ever get an answer on this? I'd very much like to use lumberyard for some machine learning tasks as well as game development. If you ever get it running in linux, I'd love to give it a try - but adding a windows VM to my workflow is not something I'm interested in. For now, looks like Panda3D or Unity it is. :-(SharerePost-User-8515322answered 6 years ago0A Linux editor isn't currently on the near-term horizon. We're currently prioritizing getting a MacOS client first as we have a lot of customer demand for this platform (especially iOS developers). Once we've gotten that out of the way, we'll take another look at overall customer interest for Linux editor.Of course, we'll continue to support and improve Linux for Lumberyard dedicated servers.SharerePost-User-6344572answered 6 years ago0It's unlikely that most macOS devs care about gaming more than us Linux... Well, maybe they are more willing to pay for AWS. But we Linux users don't use many things for free, we can pay too if we make profit...SharerePost-User-4491880answered 2 years ago0I can definitely say that Linux support is not dropped. I can’t provide any timelines on when we’ll deliver full client and editor Linux support though.SharerePost-User-6925239answered 2 years ago"


Question: My student credit expired before it is due. How can I reactivate it?

"Hello,I have received student credit from AWS Educate and I have applied the promo code successfully. Now I log in to my account and I find that my credit has expired without even three months passing and it should last a year!Can this credit be reactivated or can I receive a new one?I contacted support on Thursday and I haven't received any reply yet.FollowComment"

Answer: "0Hi Raafat,Credits are good for a year from when they are issued, not from when they are applied to an account. If there has been an error, this article explains how to get help from AWS Educate support: https://aws.amazon.com/premiumsupport/knowledge-center/get-support-educate/CommentShareEXPERTAWS Support - Briananswered a year ago"


Question: Redshift GetClusterCredentials - DurationSeconds Question

"Hi,I have a general question regarding Redshift's GetClusterCredentials API.The DurationSeconds can be set to maximum value of 3600 seconds / 1 hour.If a user is connected to the cluster with temp. credentials obtained trough the GetClusterCredentials API, will he automatically be unable to execute SQL queries after 'DurationSeconds' seconds or only unable to login again after 1 hour with the same credentials?In other words, would a business userneed to re-connect each hour to execute queriesor would the redshift session remain open and he can execute queries the whole day (unless he disconnects)Thanks muchFollowComment"

Answer: "0Hi rstel,I believe it's the interval the credential and any session obtained with the credential is valid.  IOW, the connected session should timeout at the end of the interval and require obtaining an new temporary credential.So, yes there is different behavior here compared to a session obtained with a Redshift user/pwd credential login that will typically last until something outside of Redshift causes the session to be severed below the application layer, like NAT port recycling or TCP layer timeout.Regards,-KurtCommentShareklarsonanswered 3 years ago"


Question: Trying to make sense of InvalidInputException

"Full Exception:InvalidInputException: An error occurred (InvalidInputException) when calling the CreateDatasetImportJob operation: Input csv has rows that do not conform to the dataset schema. Please ensure all required data fields are present and that they are of the type specified in the schema.I am trying to create an interactions dataset import job in Amazon Personalize from Amazon SageMaker. My interactions schema looks like this:interactions_schema = {"type" : "record",                        "name" : "Interactions",                       "namespace" : "com.amazonaws.personalize.schema",                       "fields" : [{"name" : "ITEM_ID",                                    "type" : "string"},                                   {"name" : "USER_ID",                                    "type" : "string"},                                   {"name" : "TIMESTAMP",                                    "type" : "float"},                                   {"name" : "EVENT_VALUE",                                    "type" : "long"},                                   {"name" : "EVENT_TYPE",                                    "type" : "string"}],                       "version" : "1.0"}The only thing I can think of that could lead to the above exception is that when I save my CSV to my S3 bucket, the fields with type 'string' get saved as type 'object'. Otherwise not sure what I could be doing wrong.Edit:I have now tried the following:interactions_schema = {"type" : "record",                        "name" : "Interactions",                       "namespace" : "com.amazonaws.personalize.schema",                       "fields" : [{"name" : "ITEM_ID",                                    "type" : "string"},                                   {"name" : "USER_ID",                                    "type" : "string"},                                   {"name" : "TIMESTAMP",                                    "type" : "long"},                                   {"name" : "EVENT_VALUE",                                    "type" : "float"},                                   {"name" : "EVENT_TYPE",                                    "type" : "string"}],                       "version" : "1.0"}FollowComment"

Answer: "0One possible/likely issue is that the TIMESTAMP column type is float. It should be type long. Also, EVENT_VALUE is typically float but I believe it works as a long.CommentShareJames_Janswered 6 months agocmq 6 months agoSo I tried that (making TIMESTAMP a long and EVENT_VALUE a float) and I'm still getting the same exception. Is there anything else I can try (or more information I can give to help diagnose the problem)?ShareJames_J 6 months ago@cmq What does your interactions dataset look like? Can you share the first few rows? Are the USER_ID, ITEM_ID, TIMESTAMP, and EVENT_TYPE columns fully populated?Share"


Question: AWS Pricing Tool

"Hi guys!I'm looking for a tool to estimate AWS price. Currently, I use AWS Pricing Calculator, but I feel this seem to be stupid. I can't save my estimate when a problem with my laptop, my estimate will be lost. Moreover, when I export the estimate to csv file, the detail configuration sometimes makes me confuse with lots of information, but it doesn't contain what I need, and I have to reformat them.Therefore, I want to find another tool to estimate AWS price instead of using AWS Pricing Calculator.If you know any tool, please recommend to me.Thanks!FollowComment"

Answer: "0Accepted AnswerMaybe it will be informative if you can explain what problem stopping you from saving estimate. Pricing tool saves estimate by clicking the Share button which will generate a unique link to your estimation. There are a lot of information there to give the most accurate context about your estimation. If you can share what information exactly you need, it will be helpful to point you to the right info/tools.CommentShareapradanaanswered 9 months agoSteven 9 months agoI expect a "Save" button so I can save my estimate anytime when I calculate my BoM by my AWS account. If you used to use DELL, CISCO, HPE estimate tool then you will know the idea.Share0In Japan, volunteers have created and released the following sites. [1][1] Roughly AWS - Roughly AWS charges in Japanese Yenhttps://aws-rough.cc/The above is Japanese and can only be calculated in Japanese Yen, but if you do machine translation or currency conversion, you can use it as a reference.I'm glad if you can use it as a reference.CommentSharemn87answered 9 months agoSteven 9 months agoThanks, but I'm looking for tool that displays in English :)Share"


Question: How to communicate with GameLift Server with Java Client

"I have a Java Client I am attempting to integrate with GameLift.  I am able to use it to search for Active Fleets, Search Game Sessions, Create Game Sessions and Create Player Sessions.  I do not know where to go from there.  What API or Java method is used to communicate with the Server.  I have the example Server setup and running.  The example server code is shown here: https://docs.aws.amazon.com/gamelift/latest/developerguide/realtime-script.htmlThe Java code I have written:////////////////////////////////////////AmazonGameLift gameLift = AmazonGameLiftClientBuilder.standard().withCredentials(new AWSStaticCredentialsProvider(credentials)).withRegion("us-east-2").build();DescribeFleetAttributesRequest dfar = new DescribeFleetAttributesRequest();DescribeFleetAttributesResult describeFleetResult = gameLift.describeFleetAttributes(dfar);CreateGameSessionRequest cgsRequest = new CreateGameSessionRequest().withFleetId(describeFleetResult.getFleetAttributes().get(0).getFleetId()).withName("Sim Game").withMaximumPlayerSessionCount(MAX_PLAYERS);CreateGameSessionResult cgsResult = this.gameLift.createGameSession(cgsRequest);byte[] array = new byte[[PLAYER_ID_LENGTH]]; // length is bounded by PLAYER_ID_LENGTHnew Random().nextBytes(array);String playerID = new String(array, Charset.forName("UTF-8"));CreatePlayerSessionRequest cpsRequest = new CreatePlayerSessionRequest().withGameSessionId(cgsResult.getGameSession().getGameSessionId()).withPlayerId(playerID);CreatePlayerSessionResult cpsResult = this.gameLift.createPlayerSession(cpsRequest);////////////////////////////////////////////////////////////////////////////////////////I am assuming there is a way to communicate using to the Server using some call to cpsResult.  My theory is to use cpsResult.getPlayerSession().marshal()But I do not understand how to use the marshall function.void marshall(ProtocolMarshaller protocolMarshaller)I am also not sure that is even the correct function to use.If anyone can point me in the right direction to start attempting Server communication I would be very grateful.FollowComment"

Answer: "0You should build user own communication model for you Java client and Game server. The GameLift doesn't cover that area.There are two ways of using GameLift managed service.One is using the game build, that you should build your own communication model into the game server application. It doesn't handle game client connection or communication. You also have to integrate your game server with GameLift agent, via GameLift server SDK, which is not support for JAVA currently. You can refer the architecture from following document : https://docs.aws.amazon.com/gamelift/latest/developerguide/gamelift-architecture.html.The other is realtime server that you linked. It support client, server communication, and GameLift integration is the server side, and you can use custom node.js script for you own game logic. To use realtime server, you should use realtime client sdk for communicating with the server script. Currently the client sdk is not support in Java environment officially. The architecture of realtime server is in following document: https://docs.aws.amazon.com/gamelift/latest/developerguide/realtime-architecture.html.So if you want to use Java client, you should build you own communication model from the other network library or you should find or implement realtime client sdk that is unofficial.CommentShareJunseong_Janswered a year ago"


Question: Where are amplify logs?

"Trying to access logs to troubleshoot why some of my DataStore tables are syncing and others fail. The instructions on [https://docs.aws.amazon.com/amplify/latest/userguide/access-logs.html] in several places say that logs are available as follows:"Sign in to the AWS Management Console and open the Amplify console.Choose the app that you want to view access logs for.In the navigation pane, choose App Settings, Monitoring."When I do that, my navigation pane under App Settings has only "General" and "Amplify Studio Settings", in neither of those is there a "monitoring" section.Are the docs out of date or is there something else I need to do to find logs?I'm working on iOS. Thanks!FollowComment"


Question: closure of the service that I used in free mode

"pardon my english, i'm using google translateHi, I would like to know how to end the free period that I have used so far.i was able to close the account but i could not disable the services.If you can show me via a link the section in which to disable everything.Thank youFollowComment"

Answer: 0There is no disable all services option in aws at the moment. You would need to go through the various services you utilized and terminate any resources that you provisioned to ensure they were completely gone.You can check for active resources that are currently in use by following the belowhttps://repost.aws/knowledge-center/check-for-active-resources/However  it sounds like you have already closed your account so everything should be disabled / removed after the 90day waiting period that is mentioned under the Close account section.https://console.aws.amazon.com/billing/home?#/accountCommentShareAWS-User-6621777answered 13 days agoEXPERTChris_Greviewed 13 days ago


Question: Should I Buy Developer or Business Support?

"Hi, I am a Developer work for my company (small to medium company, you can call it startup).Currently we have a plan to migrate our asset/image/file from our server (we have TB amount of file) to S3. After several research and comparing to another storage service provider, we decide to plan to migrating to AWS S3.The thing that I want to ask is since I am a Developer, not an Infrastructure guy, I want to buy the support plan.  I need a professional support because I never use any AWS service (I used Digital Ocean, Linode, GCP before). What I know is just some article, tutorial in the internet. I don't know if the solution they tell is the reliable one and suitable or base practice for our case. And AWS have a lot (yes, a lot) service that makes me overwhelm. A lot of option makes me more confuse what to choose.I am a Developer, what I supposed to do is the matter one: Building an app, making the idea happened. I Develop app, not infrastructure.I plan to buy the Developer or Business support which confusing me too, lol. If I want AWS support to help me to do my project that I tell earlier, which support should I choose? I want the support that hold handy, give me clear technical guide, how to install this, that, how to do this that based on our servers, etc.I see the enterprise support is out of our budget range so the plan is only Developer support and Business support.Hope you understand what I said, I appreciate any feedback given to me.Thanks :)FollowComment"

Answer: "1Hi!  Good question.Here's a good chart with the differences between support plans: https://aws.amazon.com/premiumsupport/plans/While Business will offer better architectural guidance (contextual to your use-cases), if your architectural design is primarily S3, you may be ok with the Developer Support Plan.Both plans will have enhanced technical support to help answer questions.  There is a difference between level of support such as Developer only will have business hours email access to cloud support associates and business will have 24x7 phone, email, and chat access to Cloud Support Engineers.One thing you can do is start with the Developer Support Plan and then upgrade to Business if you want more support.Good luck building in AWS!CommentSharejsoncanswered a year ago"


Question: sam build for Clojure projects on Java 11 runtime

"I can build a tar file with the following command inside my SAM project:clj -T:build uberThen, I can upload that jar to a lambda function and it just works.How to make the command sam build use that step, or at least, how to make sam local ... commands work with that jar, or trigger that command clj -T:build uber and use its output in a way the local lambda works?Aside note: I'm not interested in solutions based on docker, nor custom Lambda runtimes with graalvm (yet). Just the plain ZIP (jar) solution. I also know the price of using Java in Lambda in terms of the Coldstar time, and I'm assuming the costs.#Clojure #SAMFollowComment"


Question: Middleware Costs?

"I have been looking at Lumberyard for the last couple of days and I am interested in moving forward with it, however I noticed that Wwise is used for audio in the engine. Is there an alternative to Wwise as licensing costs for that can get really expensive also are their other middleware in the engine that needs licensed and or paid for when releasing a game?Follow"

Answer: "0Accepted Answer@REDACTEDUSERSharerePost-User-5084441answered 6 years ago0@REDACTEDUSERSharerePost-User-1685585answered 6 years ago0@REDACTEDUSERFmod is nice as it allows for a free license for one game per year with no limits other than your game budget has to be under $500k which should fit most indie developers. If your budget goes over 500k then its $5000 and if your budget is over $1.5 million the license cost is $15,000. Personally I am interested because my budget is under $500,000 and also one game no limit on platforms works for me as I don't think you could honestly build a good quality project to release more than once a year though I could be wrong...I really like that their is no sound limits or anything like that.SharerePost-User-1685585answered 6 years ago0Wwise LTX, included with Lumberyard, is a totally free version of Wwise with a smaller feature set than the full product. There is no sound limit with LTX. The full version of Wwise can be used for free with a 200 sound limit. Check Audiokinetic's license page for details.Currently we don't have an FMOD solution, but we are interested in hearing from the community to gauge the level of interest in adding support for it.SharerePost-User-2819140answered 6 years ago0We very interested in FMOD.  Please add support it.SharerePost-User-0401227answered 3 years ago0It would be nice to have realtime representations of positional sound falloff (if that's not already doable). I don't really mind wwise personally but I haven't delved too far into sound design other than the bare minimum. WWISE LTX so far as met my needs perfectly other than not having the realtime editor representation for falloff so that I can more accurately do soundscapes.SharerePost-User-9359627answered 3 years ago"


Question: Link certification email id to the re:post profile

"Hi,My AWS certification is associated with my personal email id which is different to my current logged AWS re:post account. When I try to add my certification to my re: post profile it is failing. How can I link multiple emails to re:post profile or if I want to change my AWS account can I do it by keeping the my personal email id permanent?What is the best practice to maintain the same re:post account even we change the AWS accounts(often stick to current employer)Cheers!FollowComment"

Answer: "0I had this problem as well for one of my certs.Even though they all fall under the same certificate account and email on aws.training, one cert I took when that was configured with a different email.What I did that worked was, I temporarily changed my Builder ID email address to match that as the cert.Then I linked the cert and switched my Builder ID to the email for my other two certs.It looks like the other cert is staying attached.Hopefully AWS will allow linking of multiple Cert Emails at some point. But it seems to be a weird Credly bug.CommentShareRoss Wickmananswered 6 months ago"


Question: How to use Systems Manager - Fleet Manager across an AWS Organization

"I'm guessing I just need to keep digging into this more, but it feels very complicated to get Systems Manager up and going. Between the different Quick Setup configurations and/or enabling the various OpsData sources it seems overly confusing but maybe it needs to be.But what I'd like to do seems straightforward, at least on the surface; I'd like to use the Node Manager functions, initially Fleet Manager across my whole Organization. I see the nodes when I'm in the individual accounts; I would just like a way to see them across the Organization in the main account or the account I've delagated.Anyway, if I'm missing something straightforward on how to do that please let me know. Otherwise I'll keep digging and trying things.FollowComment"

Answer: "0Accepted AnswerFleet Manager is not a Systems Manager capability that is integrated with AWS Organizations according to this: AWS Systems Manager and AWS Organizations.CommentShareEXPERTkentradanswered 4 months agolarryjkl 4 months agoI know you aren't going to believe, but I looked at all kinds of documentation and blog articles; but didn't see this. Yes, it clearly says that it's not. So I'll accept this answer but it does seem like a gap. AWS keeps saying that Organizations and many accounts is the way to do things; but using Organizations does make somethings a little bit more difficult or a lot more difficult than using fewer accounts, Thanks again.Share"


Question: AWS-hosted Snowflake integration with API Gateway?

"Hi folks,Curious to know if it is possible to expose an AWS-hosted Snowflake data lake/warehouse directly using an API Gateway?  I found documentation on Snowflake's site which mentions the use of a Lambda function between the API Gateway and Snowflake.  Is this Lambda function really necessary?  Or does Snowflake offer an API that can be exposed directly via API Gateway?Thank you.FollowComment"

Answer: "0Reading through the snowflake documentation, I am not sure how the data in snowflake (that is hosted in AWS) can be exposed via API gateway. Could you please share the documentation that mentioned how this can be done?I am aware of using external functions that are hosted in AWS. Here is the reference: https://docs.snowflake.com/en/sql-reference/external-functions-creating-aws-ui.html. This rather talks about how to define an external function (similar to defining an UDF). The UDF is defined in Snowflake and uses Snowflake compute while the external function uses AWS compute/resources.CommentShareAnanth Tirumanuranswered 5 months agoEG83 5 months agoHi there,Thanks for your response.  I'm looking here: https://docs.snowflake.com/en/sql-reference/sql/create-api-integration.html.  Perhaps I did not word my question very clearly.  I believe that just as one can have a solution  with an API Gateway proxying to a Lambda function, which in turn could communicate with a backend service (ex: SQS), it is also very possible for the API Gateway to communicate directly with the SQS service via its API.Now take the scenario above and replace the SQS service with AWS-hosted Snowflake.  It should be possible for the API Gateway to communicate directly with Snowflake via API without the requirement of a lambda function between the API Gateway and Snowflake, correct?  Or am I mistaken in this assumption?  According to the capabilities of the API Gateway, it is able to expose all services' APIs directly, as well as http endpoints.Thanks.Share"


Question: CORS localhost error

"Hi Guys I have two origins, S3 for react app, and LB for backend server.On my localhost I am calling api endpoint with LB/api and everything is working, no CORS error, when calling with full subdomain name which is connected to CF, I am getting CORS error. I tried all options below nothing is working.https://repost.aws/knowledge-center/no-access-control-allow-origin-errorAny ideas and suggestion?thanksFollowComment"

Answer: "0Considering you have tried all the options suggested in the KC link you mentioned ,you may want to enable CloudFront logging if not already and review the logs to see if they provide any additional insight into the issue. Additionally, you could consider reaching out to AWS support for assistance with troubleshooting the issue.You can enable CloudFront logging by following these steps:Open the AWS Management Console and navigate to the CloudFront dashboard.Click on the distribution for which you want to enable logging.Click on the "Distribution Settings" tab.Scroll down to the "Logging" section and click "Edit".Select "On" for "Enable Logging".Enter a name for the S3 bucket that will store the log files.(Optional) Enter a prefix to be added to the log file names.Click "Yes, Edit" to save the changes.Once you have enabled logging, CloudFront will start writing log files to the specified S3 bucket. The log files will be in a specific format, and will contain information such as the time of the request, the client's IP address, the requested URL, and the response code.You can then use tools such as Amazon Athena, Amazon EMR, or your own custom scripts to analyze the log data and gain insight into the traffic patterns and usage of your CloudFront distribution.CommentSharemishdaneanswered 2 months ago"


Question: Accidentally change ownership of /etc/sudoer back to ec2-user

"Got this error when trying to change it back to root. What is the best way to fix it, best if there's no need to reboot server.Thanks in advanced for willing to assist on it!Note:root does not set with password, so unable to su -unable to install pkexec now as it require sudo$sudo chown root:root /etc/sudo.confsudo: /etc/sudo.conf is owned by uid 1000, should be 0sudo: /etc/sudo.conf is owned by uid 1000, should be 0sudo: /etc/sudoers is owned by uid 1000, should be 0sudo: no valid sudoers sources found, quittingsudo: unable to initialize policy pluginUnameuname -aLinux xxx.amzn2.x86_64 #1 SMP Fri Feb 4 17:12:04 UTC 2022 x86_64 x86_64 x86_64 GNU/LinuxFollowComment"

Answer: "0From aws console > instance > connectuser: change to "root" > connectchown root:root /etc/sudo.confchown root:root /etc/sudoerschown -R root:root /etc/sudoers.dNow you should be able to run sudo command using ec2-user accountCommentSharekennganswered a year ago0From aws console > instance > connect user: change to "root" > connectThis ^ is inaccessible for me.Alternative method:https://aws.amazon.com/premiumsupport/knowledge-center/ec2-sudo-commands/ - I used the "Debian-based" script, but their commands are incomplete.I simply added (to the bottom) the commands that @kenng provided, and that worked for those specific files & folders. However, in my case I also needed to add:chown root:root /usr/libexec/sudochown -R root:root /usr/libexec/sudo/sudoers.soCommentShareUser-2125294answered 7 months ago"


Question: Cannot get the contact attributes of Amazon Connect by aws-sdk Javascript

"I am using call recording on Amazon Connect.I am trying to get the contact attribute of Amazon Connect by using the metadata value of the .wav file on S3 where the conversation was recorded.This is my Lambda function.Object.defineProperty(exports, "__esModule", { value: true });const AWS = require("aws-sdk");const connect = new AWS.Connect();const s3 = new AWS.S3();exports.handler = async (event, context) => {await Promise.all(event.Records.map(async (record) => {const bucket = event.Records[0].s3.bucket.name;const key = decodeURIComponent(event.Records[0].s3.object.key.replace(/+/g, ' '));var params = {Bucket: bucket,Key: key,};const metadata = await s3.headObject(params).promise();console.log(metadata);const contactid = metadata.Metadata['contact-id'];const instanceid = metadata.Metadata['organization-id'];var params = {InitialContactId: contactid,InstanceId: instanceid,};console.log(params);const connectdata = await connect.getContactAttributes(params).promise();console.log(connectdata);}));  };This is the JSON value of the .wav file (I hide my personal information).{AcceptRanges: 'bytes',LastModified: 2021-09-01TXX:XX:XX.000Z,ContentLength: 809644,ETag: '"XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX"',ContentType: 'audio/wav',ServerSideEncryption: 'aws:kms',Metadata: {'contact-id': 'XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX','aws-account-id': 'XXXXXXXXXXXX','organization-id': 'XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX'},SSEKMSKeyId: 'arn:aws:kms:ap-northeast-1:XXXXXXXXXXXX:key/XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX'}However, when I used Connect's getContactAttributes method using aws-sdk, there was no value in the obtained parameters.Even though the parameter values are certainly included.console.log(params){InitialContactId: 'XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX',InstanceId: 'XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX'}console.log(connectdata){ Attributes: {} }The getContactAttributes method is based on this document.https://docs.aws.amazon.com/AWSJavaScriptSDK/latest/AWS/Connect.html#getContactAttributes-propertyAnd I have registered this Lambda function with an instance of Amazon Connect.I want to know what {Attributes: {}} stands for.Is there something wrong with the argument of the getContactAttributes method, or the output method of console.log?In the first place, can't I get the contact attribute from the metadata of the .wav file?There may be many mistakes because it is a beginner, but I would like advice for this.Thanks.Edited by: hagiohagi on Sep 6, 2021 11:22 PMFollowComment"

Answer: 0This problem has been self-solved.The connect.getContactAttributes method seems to get only the value of Attributes in the contact flow. I misunderstood that it was to get the JSON itself sent from the contact flow.I found that the value of Attributes is set by posting a key-value pair in the "Set contact attributes" block of the Amazon Connect contact flow.CommentSharehagiohagianswered 2 years ago


Question: There is nothing on my RDS databases but i keep getting charged for RDS usage

"I want to terminate all services that im using. I have deleted some of it but there is still something that keeps me charging. It foresees that i will be charged for another 5,81 dollars and says there is 7 services that i am currently using but i cant find those.  Can anybody help me about that?FollowComment"

Answer: "1Please try navigating to the Account Activity page in Billing and Cost Management console using the steps outlined in https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/invoice.html. On the Bills page, select the month from the Date list and view the summary and details of your charges for that month.After the RDS DB instance is terminated, backup storage is billed at $0.095 per GiB-month - https://aws.amazon.com/rds/mysql/pricing/?pg=pr&loc=2. It is possible you still have your RDS DB snapshots which could attribute to the charge you are seeing.CommentShareEXPERTGokulanswered a year agoAWS-User-5397116 a year agoI have already deleted all of my snapshots. When i enter the rds i dont see anything on the databases section. I dont know what to do to stop the charging.ShareAWS-User-5397116 a year agoI have an another question. What will happen if i delete my account. Does it still charges me with the bills? Now i only have 0,42 cents of payment but i need to wait May 2 to pay it. But as i said it keeps me charging with more.ShareGokul EXPERTa year agoInteresting, so you don't see any explanation in the Bills page for the current month? Please refer to the "Access the Bills Page" in https://aws.amazon.com/blogs/aws-cloud-financial-management/student-focus-keeping-an-eye-on-your-aws-costs-and-usage/ to see what those 0,42 cents payment was for.ShareAWS-User-5397116 a year agoNo on the bills page it said that im getting charged for Amazon Relational Database Service Backup Storage and Amazon Relational Database Service Provisioned Storage but when i go to the RDS section i cant find those to delete or close.ShareGokul EXPERTa year agoCan you please check if you are still being charged using Cost Explorer - Group by Usage Type as shown in https://aws.amazon.com/blogs/aws-cloud-financial-management/getting-started-with-aws-cost-explorer-part-1/?Share0The RDS might be active in a different region to which you are on. You should be able to see that under cost center.CommentSharesamhuygensanswered a year agoAWS-User-5397116 a year agoI know that but im only on the EU(Frankfurt) region and the bills only shows Frankfurt too.Share"


Question: Issue using RPi.GPIO in greengrass but not from command line

"So I am trying to read the status of pins on a Raspberry Pi 4 Model B using python. I am using GPi.GPIO library for this. Simply stated when I use the same python logged in a default user (pi) from python3 interpreter RPi.GPIO runs fine. If I execute the same lines in a Greengrass component the I get an error that states that I must not be running on a Pi:2022-09-07T22:32:59.086Z [WARN] (Copier) com.xxxxxxxxx.Publisher: stderr. RuntimeError: Not running on a RPi!. {scriptName=services.com.xxxxxxxxx.Publisher.lifecycle.Run, serviceName=com.xxxxxxxxx.Publisher, currentState=RUNNING}2Tracking this down further it looks like the logic in RPi.GPIO for detecting the processor is here starting at line 43:   if ((fp = fopen("/proc/device-tree/system/linux,revision", "r"))) {      uint32_t n;      if (fread(&n, sizeof(n), 1, fp) != 1) {         fclose(fp);         return -1;      }      sprintf(revision, "%x", ntohl(n));      found = 1;   }   else if ((fp = fopen("/proc/cpuinfo", "r"))) {      while(!feof(fp) && fgets(buffer, sizeof(buffer), fp)) {         sscanf(buffer, "Hardware: %s", hardware);         if (strcmp(hardware, "BCM2708") == 0 ||             strcmp(hardware, "BCM2709") == 0 ||             strcmp(hardware, "BCM2711") == 0 ||             strcmp(hardware, "BCM2835") == 0 ||             strcmp(hardware, "BCM2836") == 0 ||             strcmp(hardware, "BCM2837") == 0 ) {            found = 1;         }         sscanf(buffer, "Revision: %s", revision);      }   }   else      return -1;   fclose(fp);The file /proc/device-tree/system/linux,revision exists on my system. When I run cat /proc/device-tree/system/linux,revision I do get some kind of character. In addition the file /proc/cpuinfo exists and does have a line Hardware        : BCM2835. It would seem to my non C literate mind that cpu detection should work.Is this a permissions issue? When I run the python commands manually It works. When I run the python commands in the component as the greengrass user it does not.EDITI did discover I can run python as user ggc_user. When I do this I get the error. It definitely has to do with user permissions. How to fix? sudo runuser ggc_user -c 'python3'Python 3.9.2 (default, Feb 28 2021, 17:03:44)[GCC 10.2.1 20210110] on linuxType "help", "copyright", "credits" or "license" for more information.>>> import RPi.GPIO as GPIO>>>>>> channel = 20>>> GPIO.setmode(GPIO.BCM)>>> GPIO.setup(channel, GPIO.IN, pull_up_down=GPIO.PUD_DOWN)Traceback (most recent call last):  File "<stdin>", line 1, in <module>RuntimeError: Not running on a RPi!FollowCommentJoeAtAWS 9 months agoHave you added ggc_user to the gpio group?Shareflycast 9 months ago@JoeAtAWS - That fixed my issue. Thanks so much!!!Share"

Answer: "3Accepted AnswerOn Raspbian, your user needs to be part of the gpio group to access GPIOs. Make sure ggc_user is part of that group.sudo useradd ggc_user gpioCommentShareJoeAtAWSanswered 9 months ago"


Question: Performance of Redshift Stored Procedure is not upto mark

"Hi All,In my stored procedure, I have scursor which loops through the table and each record will go through many IF Conditions and as per result I will move further using fetch next while being inside loop itself.I am not able to do BULK UPDATE cause my requirement demand row level processing.It is performing good for just One id, but i have large number of ids which needs to be processed by this sp and time taken is beyond the expectation.How to speed up this stored procedure in Redshift?FollowCommentjgrcloud EXPERTa year agoRow by row processing is not ideal in Redshift or really any MPP database. Can you provide sample code and maybe we can help you convert it into a set based approach?Share"

Answer: "0Hello,Thank you for posting your question.To further dive deep on the specifics of the slow execution of this stored procedure, I would ask that you open a support case and include the output of:SHOW PROCEDURE sp_nameReference: https://docs.aws.amazon.com/redshift/latest/dg/r_SHOW_PROCEDURE.htmlCommentShareAWS_Dylananswered a year ago"


Question: How to securely connect to ElastiCache Redis instances?

Answer: "1Hello,The insecure flag on redis-cli skips the certificate validation, and allows the use of "untrusted" (or unrecognized) certificates to establish the TLS/SSL session.Technically, data in-transit is encrypted, but you haven't confirmed if the remote peer is actually who it claims to be, hence it is considered insecure.In your case, the docker container does not include the Amazon Root CA (Certificate Authority) used to sign Elasticache certificates.This can be easily overcome by installing the ca-certificates package (package name valid on Debian, which is the base Operating System for Redis images).As an example:$ docker run -it --rm redis /bin/bash -c "apt-get update && apt-get install ca-certificates -y && redis-cli --verbose -h ***.cache.amazonaws.com --tls"Verifying the package contents:# dpkg -L ca-certificates | grep Amazon/usr/share/ca-certificates/mozilla/Amazon_Root_CA_1.crt/usr/share/ca-certificates/mozilla/Amazon_Root_CA_2.crt/usr/share/ca-certificates/mozilla/Amazon_Root_CA_3.crt/usr/share/ca-certificates/mozilla/Amazon_Root_CA_4.crtYou probably want to update or create a custom image including the ca-certificates package so you don't need to install it every time the container starts.CommentShareSUPPORT ENGINEERTulio_Manswered a year agotam-le a year agoThank you for the response. I thought there might be a configuration on the redis cluster so that I don't have to do additional certificate installation, because I didn't have to use --insecure on a different redis cluster.Share"


Question: How to move emails from one AWS WorkMail user account to another

"We have different email domains in our AWS WorkMail organization. This domains have common user names, as separate inboxes. Example:anne@company_a.comanne@company_b.com...We would like to have them merged, into one single user (company_a) and add the rest of the email addresses as alias. But for that, first we need to migrate (move) the emails from one inbox to the other.Is there a way to do this from the AWS Console or programatically?FollowComment"


Question: AWS EKS secret encryption

"Hi, from some time I have EKS cluster and now I want to enable the cluster secrets encryption with the use of my KMS key. In documentation it's mentioned:  After you enabled encryption on your cluster, you must encrypt all existing secrets with the new keyBut in a console I read that it will be automatically encrypted. What action should take after I enabled this encryption. In my cluster I have a lot of secrets for different namespaces (argocd, kube prometheus stack and so on...). I don't want to break anything.Thank you,MFollowComment"

Answer: "0Accepted AnswerHello there,When enabling secret encryption on an existing cluster, you have 2 options depending on your use case:Have your secrets re-encrypt automaticallyOpt out of automatically re-encrypting your secretsYou do not need to take any other steps if you haven't set this flag --encrypt-existing-secrets=falseIf you enabled encryption to your cluster with this single command below:eksctl utils enable-secrets-encryption \    --cluster my-cluster \    --key-arn arn:aws:kms:region-code:account:key/keyThe following operations will be performed:KMS encryption successfully enabled on clusterupdating all Secret resources to apply KMS encryption in the clusterRefer to the doc here for the stepsCommentShareOlawale-AWSanswered 4 months agomyronix88 4 months agoHi. If I have one repo with Argo CD applications, and two clusters/ two different AWS accounts are watching this repo. For secrets just the {env} key is different. It means if encrypt the secret in one account/eks cluster with one kms key, another cluster/account will not have access to this secret? I would have to share KMS key between clusters/accounts? Sounds scary, if I lose access to secrets.Sharemyronix88 4 months agoYour 1st point means that I just enable encryption via AWS console for EKS cluster and it's done? Then how can check if my existing secrets are encrypted?ShareOlawale-AWS 4 months agoYes, you just need to enable encryption via the AWS console for the EKS cluster and it will automatically encrypt existing k8s secrets in the cluster.You can check if your existing secrets are encrypted by checking for the Decrypt API call Events in CloudTrail.From AWS Console >> CloudTrail >> Event history >> For Lookup attributes,  choose Event Name from the drop down >> For Enter an Event Name, paste Decrypt.Choose the time range when you enable encryption for the cluster. The number of Decrypt calls should be equivalent to the number of existing secrets you have in the cluster.Share"


Question: How I can Remove Member Organization with error code ConstraintViolationException?

How I can remove member organization?When im remove pop up error code and said : ConstraintViolationException.FollowComment

Answer: "0I suggest to open an account support case with AWS Support (you don't need to have paid support plan for this) - https://docs.aws.amazon.com/awssupport/latest/user/case-management.html - as they will be able to advise better. Without looking at your account or having additional information, it's hard to tell you the exact reason.One reason why you may not be able to remove account from your Organization may be that the account is not set up to exist as a standalone account (no payment information, contact details or verified phone number added to the account). You can find more information about restrictions and requirements of removing accounts from Organization in the documentation, here - https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_remove.htmlYou can also check this Knowledge Base article with the video that talks about this scenario, too - https://aws.amazon.com/premiumsupport/knowledge-center/remove-account-from-consolidated-billing/CommentShareEXPERTNataliya_Ganswered 10 months ago"