Question: Fargate pricing confusion

"Hi Guys,I am having hard time to understand Fargate pricing. So the example here is telling me if my tasks run 10 minutes  a day for 30 days..Why giving me 10 minutes? If I create 4 different micro services each at least 2 instance=8 and all of them wll be running whole day. My confusion is running 10 mins idea. Are you saying you should run your services 10 minutes, and sometimes stop or am I missing. This 10 minutes example does not make sense. If I put my MS definitely they will run 24 hourX30 day. If documentation is giving me 10 minutes example , I feel like I am missing something here. Last example is giving 1 hour example =$47, if I keep all my services run 24 hours the cost will be really high, compare to manually creating = ALB+EC2For example in Lambda the price is about execution time. in case of Fargate what is if "running" 10 mins mean,Thankshttps://aws.amazon.com/fargate/pricing/FollowComment"

Answer: "0Yes so AWS Fargate is a serverless compute option in that you only worry about running your Task (container) so the billing is based on number of task plus vCPU and Memory per second used. This is because AWS is taking on the undifferentiated heavy lifting of managing the provision, configuration or scale of the nodes your task run on, as well no longer need to optimize your cluster, so thus cost associated with it. As well the security benefits of running on Fargate (isolation boundaries).Also with ECS you have the scheduler which allows you to run tasks as always on or schedule them or kick them off through your own processes or operator [1], if they dont need to run all the time and save money. The best way to look at pricing is to the use the calculator to get a good idea of cost [2].AWS Fargate is serverless but you need to determine if the cost of operating your own is worth the money saved for your compute.[1]https://docs.aws.amazon.com/AmazonECS/latest/developerguide/scheduling_tasks.html[2]https://calculator.aws/#/addService/FargateCommentShareAWS-Aaron-Sanswered 3 months agoozy cozy 3 months agoHi Aaron,Seems like I am completely on wrong path by choosing Fargate. Because my microservices are not small task that I can stop sometimes and run sometimes, it is logistic and commerce app that has multiple functionality in it, it has membership, shipment, delivery, payment and reporting  features. Instead if keeping all features in one monolithic  app, I divided them in separate MS.So there is no time that these MS will stop or they can run as small tasks sometimes. I was trying to choose between Kubernates and Fargate, none of docs told me that Fargate is only for  a tasks that can run sometime. In my case I am trying to run many apps that must be up all the time. Now I am thinking the cost is going to be too high.What will be other better deployment option?Thank youShareAWS-Aaron-S 3 months agoHi Ozy,With any design there are trade offs, Fargate can still work for a complete MS application but it will cost more because you are allowing AWS to do the heavy lifting for you (isolation, manage the cluster(scaling), manage the OS etc) so if those are things you dont want to do Fargate would be a good choice but with higher cost. If you prefer to roll it your own and try to save operational cost then you could simply run your MS on EC2 instance with ECS, you till take on some of the operational up keep but it still easier to manage then EKS(unless you have alot of experience or need more advanced features). Also you could do a mix here, for a service in your cluster you want that more secure boundary or some of the heavy operational lift removed from you, you could run on Fargate and then the rest on EC2.As well I would like to point out since these sounds like steady workloads (for most part) you can use Saving Plans to agree to a certain term of spend on your Compute and AWS will give you a discount, this can be used with either EC2 or Fargate instances.Share"


Question: Unable to log into my MTurk requester account

"Hi,I get the following error when I try to login to my MTurk requester account with my AWS credentials (as an IAM user):"✖There is a problem with your session.Please sign in again."The login information is correct, since I am able to login to the aws.console.amazon.com page. I have also used this account with MTurk a year ago and had no issues, so this issue appears to be recent. Any suggestions on what could be going on here?Thank you very much in advance!FollowCommentrePost-User-1090067 10 months agoI'm also getting this, becoming a real blocker:(with root user it works fine, but when using IAM with "AmazonMechanicalTurkFullAccess", getting this same error messageShare"

Answer: "1I am experiencing the exact same problem. Have tried many things, including create a new IAM User just for MTurk access. No dice. Same error as OP when trying to login at https://requester.mturk.com/signin_options. Would really appreciate any help. Thanks!CommentShareAWS-User-4599834answered a year ago1Having this same exact issue.  Ran through all the setup instructions and still unable to login with the IAM user you setup so you shouldn't have to hand out your root credentials.  It seems like this was updated recently and is just broke.  I get the same exact error as the poster.  If i open a new tab and just go to the AWS console dashboard it actually says i'm logged in not that any services work because this IAM users has only TurkFullAccess>. I don't need the main AWS  console i need the requester.mturk.com console.CommentShareJffSanswered a year ago1from aws-cs-mturk-requester-support-form@amazon.com at June 8th 2022 :"From what you described, it seems you're trying to create a new MTurk account using IAM credentials. Please note that while it's possible to grant IAM access using API, new MTurk accounts can only be registered using root account credentials."!!! And you have to be logged-out from AWS before!!!CommentSharemyToys ITanswered a year ago1I am having this problem also. Accessing through https://requester.mturk.com/signin_options . When I AWS login as root user, I get "To sign in with an AWS account, please enable AWS Billing. First, sign in with your Amazon account and then navigate to the My Account page and opt in for AWS Billing." (I don't get this since as root user I already have access to Billing). When I login with IAMS username I get "There is a problem with your session. Please sign in again."  I am still successfully accessing my account programmatically through the Mechanical Turk command line API. Any suggestions?CommentSharerePost-User-9619066answered a year ago"


Question: Add intent to bot

"Can you help me with the following and thanks.I need to know if it is possible to add an intent to an existing bot. I was reading the documentation and is the putbot method but in this function I must specify an array with the intents that the bot will have ( this involves me creating another function to list the intent that I want in the bot in the format: array: {intentName: "", intentVersion: ""} ).Edited by: sebasxyz on Jan 23, 2020 12:35 PMFollowComment"

Answer: 0I already build a function to generate the array of intents.CommentSharesebasxyzanswered 3 years ago


Question: EC2 of private subnet to S3 bucket flow log

"Topology: I have EC2 instances hosted in a private subnet. This EC2 instance communicates to S3 bucket through NAT gateway.Requirement: Analyse "which EC2 communicates with which S3 bucket (bucket name)".Failed experiments to get EC2 to S3 bucket log:Using VPC flow logs of subnet: It has S3 bucket IP as destination IP. But as S3 bucket IP is ephemeral. So, it cannot be co-related to S3 bucket name.Using NAT flow logs: It has EC2 IP, S3 IP and NAT IP. Again as S3 IP is ephemeral, it cannot be co-related to S3 bucket nameUsing Cloudtrail logs of S3 bucket: It has NAT IP as Source IP instead of EC2 IP.Question: Is there any way/logs by which I can get which EC2 is talking to which S3 bucket information directly or by co-relating 2 or more logs? Is there any setting that needs to be done to get this information.FollowComment"

Answer: "0Accepted AnswerFlow logs are not the appropriate tool to use here because (as you've discovered) the bucket name isn't related to the IP address. Instead, it is part of the higher-level protocol (it's transmitted as part of the HTTPS request to the S3 API) - so even if you were doing deep-packet inspection it would still be encrypted which makes it difficult (again) to determine.To get the information you require, you might try the following:Create a S3 Gateway Endpoint - this has no extra charge (in fact, it may reduce your NAT Gateway charges) and is transparent to your application(s).Enable S3 access logging - note that you will pay for storage of the logs so I'd recommend deleting old logs to save costs.The access log format has the source IP address of the requester in it.Followup question: What do you need this information for?CommentShareEXPERTBrettski-AWSanswered 4 months agorePost-User-1968636 3 months agoThanks for the answer! We need this information to monitor communication between EC2 and S3 for some analytics purpose.Share"


Question: Using an EC2 instance as a remote DHCP server

"Hello, I need to solve this problem for my bachelor thesis. I want to run ubuntu ami on EC2 and use it as a remote DHCP server. This has to be within the free tier so I can't use elastic IPs and also NAT. I'm running Ubuntu 22.04 LTS with public IPv4 assigned and an access security group configured. Should I use EC2 public IPv4 address as default gateway when configuring DHCP? In theory it should work with the configured ip helper address from the remote router (my local router). Do I need to worry about AWS because they only route unicast? If you have any advice I will be grateful. Thank you very much for any answers.FollowComment"

Answer: "1You can use an Elastic IP if you want, as it's free to have one associated with your instance.  You're only charged for >1 on an instance or for ones that are unassociated.CommentShareEXPERTskinsmananswered 2 months agoJakub Makuka 2 months agoI didn't know that. I assigned public IP within creation of instance. Also, I'll be using only 1 instance so I will not use that elastic IP's potential. Or is there any advantage by using that elastic IP?Shareskinsman EXPERT2 months agoThe purpose of an Elastic IP is to get a public IP address that doesn't change on instance restart.  If you're relying on the instance having a specific IP because something else is referring to it, then use an Elastic IP.Share0When you configure the DHCP server on your EC2 instance, you can use the EC2 instance's public IPv4 address as the default gateway. This should work with the configured IP helper address from your local router.note 1 : such configurations are not recommendednote 2: You do not need to worry about AWS only routing unicast, as DHCP requests and responses are unicast messages.CommentShareEXPERTsedat_salmananswered 2 months agoJakub Makuka 2 months agoI know it's not recommended, but in my case it must be free so i cant use any utility to secure that connection, I can use only security group to set some rules, for example inbound/outbound rule only for my local router's public IP.Share"


Question: Amazon QuickSight - is it possible to fully automate a dashboard creation with AWS SDK

"I am trying to automate a QuickSight dashboard creation using the AWS SDK and I need some clarification.It looks like the create dashboard API requires a template and the create template API requires an analysis or another template.In summary, it is not possible to fully automate a dashboard creation because an initial analysis is needed.Is the above assumption correct?ThanksFollowComment"

Answer: "1Accepted AnswerYes, you are correct. Currently there are no QuickSight APIs to create initial analysis (or to describe/update etc.,).CommentShareEXPERTGokulanswered 3 years ago"


Question: Return HTML to browser from API Gateway using Lambda Proxy Integration

"I have a Lambda function built and deployed which accepts a collection of data in the request, processes and returns an HTML string for presentation to the user's browser.  I have the Lambda function working.  the function is to be integrated with API gateway.  The return to the user is represented as a JSON object.the python code is    return {    "statusCode": 200,    "body": userResponse}where userResponse would contain ".......I have an API set up in API gateway, which is implemented using Lambda Proxy Integration.  It appears all I can do is define a model, but no body mapping template.When I submit my querystring to the API endpoint, I get a response displayed in my web browser which is the html text as in<meta http-equiv="Content-Type" content="text/html"/><meta charset="utf-8" />...the html is not rendered by the browser.If I save the file to my machine as an html file, it is correctly rendered in the browser.So, how do I tell API gateway to return html to the web browser with Lambda proxy integration turned on?  What does the Model look like?  Where does the body mapping happen?thanksFollowComment"

Answer: "1If you add a content type header to your returned data it should render properly:return {"statusCode": 200,"body": userResponse,"headers": {"Content-Type": "text/html"}}CommentSharemnahmiasanswered 3 years ago"


Question: Incremental Copy of RDS Aurora MySql Table to RedShift

"Hi!!!To copy/incrementally copy data from Aurora MySql 5.7 to RedShift, can anyone share implementation steps? i couldnt do it with DataPipeline, Glue, DMS due to Certificate Issues at the Db.Scheduled Jobs that does S3 exports of initial/changed data. This is the least expensive as you can decide what tables to export data from and how often. You can decide to do that every 10 mins or so. AWS Batch can be used with Lambda to accomplish this. - any references to Achieve this?Any other better optimised ways?Thanks!!FollowComment"

Answer: "3The below link should be helpful for your use-case. The Incremental copy of Amazon RDS MySQL table to Amazon Redshift template copies data from an Amazon RDS MySQL table to an Amazon Redshift table by staging data in an Amazon S3 folder.  This template copies changes that are made to the Amazon RDS MySQL table between scheduled intervals, starting from the scheduled start time.[https://docs.aws.amazon.com/datapipeline/latest/DeveloperGuide/dp-template-redshiftrdsincremental.html]CommentShareSrikant Dasanswered 2 months ago"


Question: Lost connection to EC2 instance

"Can anyone tell me how to fix this?Instance i-0c2471f7af8dd9d44 is running (and serving web pages via http on port 8080) but has stopped connecting via ssh - either through the browser console or via putty (console just says there was a problem, and putty times out before checking any credentials or anything)============ PuTTY log 2020.12.17 01:12:40 ============Event Log: Looking up host "52.89.137.160" for SSH connectionEvent Log: Connecting to 52.89.137.160 port 22Event Log: We claim version: SSH-2.0-PuTTY_Release_0.74Outgoing raw data at 2020-12-17 01:12:4000000000  53 53 48 2d 32 2e 30 2d 50 75 54 54 59 5f 52 65  SSH-2.0-PuTTY_Re00000010  6c 65 61 73 65 5f 30 2e 37 34 0d 0a              lease_0.74..Event Log: Failed to connect to 52.89.137.160: Network error: Connection timed outEvent Log: Network error: Connection timed outFollowComment"

Answer: "0Hello,I can see that this has been marked as answered. It would appear that the issue has since resolved. As doing a test to port 22 I am not getting a timeout from my test instance.ec2-user@$  nc -vz 52.89.137.160 22Connection to 52.89.137.160 22 port tcp/ssh succeeded!Edited by: aws-chrisa on Dec 21, 2020 2:52 AMCommentShareAWS-User-8424448answered 2 years ago"


Question: Amazon Cognito user pool LOGOUT endpoint is not working as expected

In Amazon Cognito Developer Guide - LOGOUT endpoint https://docs.aws.amazon.com/cognito/latest/developerguide/logout-endpoint.htmlIt says the only required request parameter for logout endpoint is client_idBut when I call the logout endpoint with my client_id it is throwing an error Required String parameter 'redirect_uri' is not present (screenshot https://drive.google.com/file/d/1i14NI6s-ygzvyNWYprURn6wqZD8IMO6I/view?usp=sharing)This is the URL I used for logout https://<mydomain>.auth.us-east-1.amazoncognito.com/logout?client_id=<my app client id> (I just redirected my web application to this URL for logout)FollowComment

Answer: "1Accepted AnswerWhen logging out of Cognito, I have had success using the following format:https://<your-cognito-domain>/logout?client_id=<your-app-client-id>&logout_uri=<url-for-your-logged-out-page>In your Cognito User Pool, under the App Client settings, you will need to add the URL for your logged-out page in the "Sign out URLs" text box.You can have your loggedout.html page redirect users to a different page if needed.CommentShareMiranda Swensonanswered a year ago0Don't forget to urlencode "logout_uri" in a GET call if your framework isn't doing it for you (for example when testing from a browser manually).For sending to https://locahost/ for example I did the following:https://blrefactor.auth.us-east-1.amazoncognito.com/logout?logout_uri=https%3A%2F%2Flocalhost&client_id=xxxxAlso, adding to the current answer for clarity.The docs say EITHER:logout_uri OR redirect_uri are required. doc linkLogout_uri is used when sending back to a static logout page.redirect_uri is used to redirect to a page that can request login and maintain state. In that case things like "response_type" are also required.CommentSharekarrade7answered 9 months ago"


Question: Lambda random long execution while running QLDB query

"I have a lambda triggered by a SQS FIFO queue when there are messages on this queue. Basically this lambda is getting the message from the queue and connecting to QLDB through a VPC endpoint in order to run a simple SELECT query and a subsequent INSERT query. The table selected by the query has a index for the field used in the where condition.Flow (all the services are running "inside" a VPC):SQS -> Lambda -> VPC interface endpoint -> QLDBQuery SELECT:SELECT FIELD1, FIELD2 FROM TABLE1 WHERE FIELD3 = "ABCDE"Query INSERT:INSERT INTO TABLE1 .....This lambda is using a shared connection/session on QLDB and this is how I'm connecting to it:import { QldbDriver, RetryConfig } from 'amazon-qldb-driver-nodejs'let driverQldb: QldbDriverconst ledgerName = 'MyLedger'export function connectQLDB(): QldbDriver {  if ( !driverQldb ) {    const retryLimit = 4    const retryConfig = new RetryConfig(retryLimit)    const maxConcurrentTransactions = 1500    driverQldb = new QldbDriver(ledgerName, {}, maxConcurrentTransactions, retryConfig)  }  return driverQldb}When I run a load test that simulates around 200 requests/messages per second to that lambda in a time interval of 15 minutes, I'm starting facing a random long execution for that lambda while running the queries on QLDB (mainly the SELECT query). Sometimes the same query retrieves data around 100ms and sometimes it takes more than 40 seconds which results in lambda timeouts. I have changed lambda timeout to 1 minute but this is not the best approch and sometimes it is not enough too.The VPC endpoint metrics are showing around 250 active connections and 1000 new connections during this load test execution. Is there any QLDB metric that could help to identify the root cause of this behavior?Could it be related to some QLDB limitation (like the 1500 active sessions described here: https://docs.aws.amazon.com/qldb/latest/developerguide/limits.html#limits.default) or something related to concurrency read/write iops?FollowComment"

Answer: "1Hi @thiagoscodeler,Please check out the proposed answer on stackoverflow to this question you posted there.https://stackoverflow.com/questions/73780825/lambda-random-long-execution-while-running-qldb-query/73816697#73816697CommentSharebwinchester-awsanswered 8 months agothiagoscodeler 8 months agoHi @bwinchester-aws, thank you. I'll check the stackoverflow answer.Share"


Question: How to export tresained models to ECR as container image

"I want to train and build the model in Sagemaker studio and then be able to export the model as a container image to ECR, so I can use the model in external platform by sharing the ECR image to another account where I Can create container with the image  from ECRFollowComment"

Answer: "0Accepted AnswerThe models you train in SageMaker are stored in S3 as .tar.gz files that you can use to deploy to an endpoint, or even test locally (extracting the model file from the tar file).If you are using a built-in algorithm, you can share the .tar.gz file to the second account and deploy the model in the second account, since built-in algorithm containers can be accessed from any AWS account.If you are using a custom training image (docs here), you can push this image to ECR and allow a second account to pull the image and then use the image with the model that you have trained. However, note that Studio at this time does not support building Docker images out of the box. You can use SageMaker Notebook Instances instead.I would recommend keeping the model (.tar.gz) and the image (Docker) separate, since you can easily retrain and deploy the newer versions of models without updating the image every single time.CommentShareDurga_Sanswered 9 months agoAWS-User-1802444 9 months agoso escentially, If I need to host the model on a container outside of sagemaker, then I take the .tar.gz file and build a container image, correct ?Share"


Question: How I can delete my account?

HelloHow I can delete my account and disconnect my card?FollowComment

Answer: "0To disconnect your card, you can remove the payment method from your account by going to the "Payment methods" section of the "My Account" page and removing the card information.To delete your AWS account, you need to sign in to your account, go to the "My Account" page, click on "Close Account" at the bottom of the page.Here are the linksDeleting an AWS Account:https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/manage-account-close.htmlhttps://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/close-account.htmlDeleting your payment profileshttps://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/manage-paymentprofiles-delete.htmlCommentShareEXPERTsedat_salmananswered 2 months ago"


Question: non-IAM authentication for MSK Serverless

"Since IAM authentication on MSK requires monkey-patching the client libraries's classpath in order to work, it's unsuitable for the vast majority of use cases, such as:Usage with any non-JVM Kafka tools or librariesLambda code written in any non-JVM language (most 'serverless' code is NOT written for JVM)Scenarios where modifying a packaged JVM client library would void support contractsScenarios where maintaining modifications to packaged JVM clients every time they're updated is not realisticI'm trying to think of realistic scenarios where a development team would want the simplicity and lack of maintenance of a serverless kafka cluster, but also are willing to commit to throwing out the majority of the available Kafka tools and libraries out there, while also committing to maintaining monkey-patched versions of all of the remaining tools. It's pretty difficult for me to imagine.Given the above, are there any plans for the future to support any security mechanisms on MSK Serverless other than IAM? If not, given the enormous compromises required in order to support IAM usage on MSK, who is the MSK Serverless offering actually targeted at?FollowComment"

Answer: 0Thank you for raising a request with AWS.Please note that currently the IAM based authentication is the only security mechanism. Inorder to check for future release timeline of other security mechanism and answer to your questions we would be required to reach out internal service team and PM team. Thus we request you to please open a support case with AWS support. Please refer to the following links on how to open a case and support plans available:-- https://docs.aws.amazon.com/awssupport/latest/user/case-management.html-- https://aws.amazon.com/premiumsupport/pricing/CommentShareSUPPORT ENGINEERAWS-User-2071047answered a year ago


Question: Amazon WAF Implementation Guide blog related FAQ

"This question was targeted at collect following blog's questionsAmazon WAF Implementation Guide (1) WAF priciple, default implemtation and log storeAmazon WAF Implementation Guide (2) A cost effective way - Log InsightAmazon WAF Implementation Guide (3) Leverage OpenSearch to start security investigationAmazon WAF Implementation Guide (4) Use Log Hub solution to start WAF security operationFollowComment"

Answer: "0I have question on Log Hub solutions. Who should I reach to get support from AWS?CommentShareAWS-User-2608919answered a year agoAWS-User-2608919 a year agoPlease reach AWS sales team , they will find resource for you.Share"


Question: AWS Lambda Python Code

"Hi Dears,Hope all is goodI have lambda function written in python (event driven ETL), I use two packaged functions to handel one csv file. I want to use the input csv file (S3 object uploaded to the bucket) in the two functions and put two json files  in two different s3 buckets as an output.But When I used the code as below, It convert the first function(df_out_1) successfully but in second function (df_out_2) give me error message that " No columns to parse from file" for the second function :The code as below:def lambda_handler(event, context):s3_client = boto3.client('s3')s3 = boto3.resource('s3')if event:    try:        obj = event['Records'][0]        bucket_name = obj['s3']['bucket']['name']        file = obj['s3']['object']['key']        csv_object = s3_client.get_object(Bucket = bucket_name , Key = file)        csv_content = csv_object['Body'].read()        bite = io.BytesIO(csv_content)        df_out_1 = csv_json_function_alex_dep(bite)        s3.Object('midibus-sagemaker-ai-engine-2' , jsonkey ).put(Body=json.dumps(df_out_1))        print('The file is converted successfully for model-1 input!')                #change input later to be jsonkey        df_out_2 = csv_json_function_alex_arri(bite)        s3.Object('midibus-sagemaker-ai-engine-2',  jsonkey ).put(Body=json.dumps(df_out_2))        print('The file is converted successfully for model-2 input!')            return {        'statusCode': 200,        'body': json.dumps('The file is converted successfully!')        }    except BaseException as err:        print("Oops! Something went wrong ! \\n")        print(err)        print(err.args)        traceback.print_exc(limit=5)        return {        'statusCode': 400,        'body': json.dumps('Something went wrong!')        }thanks,BasemFollowComment"

Answer: "1Accepted AnswerHave you tried doing bite = io.BytesIO(csv_content) again before the second function call?CommentShareEXPERTBrettski-AWSanswered a year agoBasem Khalaf a year agoThanks!! It works well, Why we put it again with the second function?Share0If your first function uses bite.read() to get the content of the buffer, the internal buffer cursor will be advanced to the end of the buffer and a subsequent read() call will return an empty buffer. You can reset the cursor to the beginning of the buffer using bite.seek(0). Alternatively, if  you can control how the functions you invoke are reading data from the buffer, you could usebite.getvalue().CommentShareEXPERTMassimilianoAWSanswered a year agoBasem Khalaf a year agoThanks for your proposed solution, I used the above answer and it works well now.Share"


Question: Understand accuracy ofvacuum_sort_benefit

"Hi All,Greetings for the day.I am curious to undersand the significance and accuracy of the field "vacuum_sort_benefit" in system view "svv_table_info".In the current cluster that I am working, I see tables where column "unsorted" is 100 but the vacuum_sort_benefit is 0.0 which is making me to think if its really worth to run a vacuum and analyze on these tables.Any inputs in this regard is greatly appreciated.FollowComment"

Answer: "0Accepted AnswerIt might be due to full refresh, like it depends that are you truncating table or deleting rows or dropping table. And as documented, if Redshift does not see any query improvement from sorting of the data it will not show benefit. I request you to raise support case with details. So, we can check and help you better. Also, you can use best practice to avoid vacuum. Because, you are doing full refresh where this will be more helpful. Please check : https://docs.aws.amazon.com/redshift/latest/dg/c_loading-data-best-practices.html & https://docs.aws.amazon.com/redshift/latest/dg/vacuum-load-in-sort-key-order.htmlThanks for your response.One of the tables (with 100% unsorted value and 0%- vacuum_sort_benefit ) is heavily used but we do a full refresh (delete n reload) on a daily basis.Can you pls help me in understanding why the vacuum_sort_benefit is 0. Is it to do with the full refresh?CommentShareSUPPORT ENGINEERJayanswered 6 months ago0The unsorted column reflects the physical sort order of a table. The vacuum_sort_benefit column specifies the impact of sorting a table by manually running VACUUM SORT.Now, if you find the unsorted is 100% and vacuum_sort_benefit is 0%, then this might be either because only a small portion of the table is accessed by queries, or very few queries accessed the table. So, it indicates that query performance does not have impact due to unsorted rows of that table even if it is 100% unsorted.Please check detailed explanation with example here:  https://docs.aws.amazon.com/redshift/latest/dg/t_Reclaiming_storage_space202.html#automatic-table-sort . We have explained both column indications here.I hope this helps you!CommentShareSUPPORT ENGINEERJayanswered 6 months agoAWS-User-8821482 6 months agoThanks for your response.One of the tables (with 100% unsorted value and 0%- vacuum_sort_benefit ) is heavily used but we do a full refresh (delete n reload) on a daily basis.Can you pls help me in understanding why the vacuum_sort_benefit is 0. Is it to do with the full refresh?Share"


Question: How do i get billed for using Salesforce Knowledge with Amazon Connect

"Hello,I am following the https://aws.amazon.com/blogs/contact-center/integrate-salesforce-knowledgebase-with-amazon-connect-wisdom/ blog to surface Salesforce Knowledge with in AWS Connect via wisdom. I have following questions:How do i get billed for using Salesforce knowledge?What type of APIs limits i should be considering while deploying this solution?A knowledge article may contain link to each other or may have contextual information or different views based on the type of call, How can Wisdom bring such information with in Amazon connect workspace?Thanks for your help in advance.FollowComment"

Answer: "0The wisdom pricing is based on the number of contacts for which this functionality is used. With Amazon Connect Wisdom, you are billed $0.04 per contact (e.g., call) in which Wisdom is enabled. A contact is enabled with Wisdom whenever a Wisdom flow block is executed in the contact flow. There is no cost associated to the ingestion of the Salesforce data into WisdomYou can find the service quotas for Wisdom here: https://docs.aws.amazon.com/connect/latest/adminguide/amazon-connect-service-limits.html#wisdom-quotasPlease let me try this scenario, and I will get back with the description of the behavior. Can you provide more information on where the links are redirecting? Is there additional authentication required?CommentShareMagdaanswered a month agorePost-User-0011308 a month agoIs there any information on what type of licenses or API limits would be needed on the salesforce platform or these external sources?Share0If this is purely using the Wisdom SF KB integration.  You are not accessing the Connect public API so there is no limit on AWS side to worry about.From SF API limit perspective, the default frequency to ask SF is hourly, you can change this to every 3 hrs or daily.   So take this into consider for your SF API limit licensinghttps://docs.aws.amazon.com/connect/latest/adminguide/enable-wisdom.htmlThe Wisdom API limit mentioned in the blog is if you ingest html or other supported docs via API.CommentShareClarenceChoianswered a month ago-1Hello,How do I get billed for using Salesforce knowledge?=> Wisdom usage – per contact$0.04With Amazon Connect Wisdom, you are billed $0.04 per contact (e.g., call) in which Wisdom is enabled. A contact is enabled with Wisdom whenever a Wisdom flow block is executed in the contact flow.Pricing exampleLet's assume you have 10,000 contacts in which Wisdom is enabled in a month.Total charge calculation:Total monthly units = 10,000 contacts with WisdomTotal monthly cost = 10,000 contacts * $0.04 = $400For more information, please refer to the below link:       [+] https://aws.amazon.com/connect/pricing/2. You can find the service quotas for Wisdom here:       [+] https://docs.aws.amazon.com/connect/latest/adminguide/amazon-connect-service-limits.html#wisdom-quotas3. I assume you mean links between salesforce knowledge documents. Kindly allow me to share that at the moment these links are not well supported in the connect agent app, but if you are using the CTI adapter [+] I believe you can open the knowledge documents in salesforce.       [+] https://docs.aws.amazon.com/connect/latest/adminguide/salesforce-integration.htmlCommentShareSUPPORT ENGINEERrePost-User-1557200answered a month agorePost-User-0011308 a month agoThank you. 3rd point helps to understand what capabilities may not be available while pulling in the content from external sources. I am assuming it will be the same for ServiceNow, Sharepoint and Zendesk system as well. What about embedded images or similar features?ShareClarenceChoi a month agoWisdom and SF KB is very well supported in both Agent Workspace (In the link I pasted below on enabling Wisdom on Connect) and SF CTI Adapter (https://amazon-connect.github.io/amazon-connect-salesforce-cti/docs/lightning/cti-adapter/12-wisdom-integration)Share"


Question: Cloud Quest VPC peering exercise issue -Step 21

"I feel I have followed the instructions on the cloudquest game very well but I am having issues, I did it about 5 times and still the same issue..Please if someone can walk me through it or can we do a zoom link or something so I can show what is going on and can someone help me?So I am on step 21 but my target pcx-* is not showing up.. .Link to Videohttps://www.loom.com/share/0186c7db67c14102b1a20d00333bb22dFollowComment"

Answer: "1Accepted AnswerIs your PCX in available status or pending acceptance ?If in available state. Is it in same VPC for which you are adding route ?If all correct then just copy paste pcx-xxxx ID in Target section. Sometime its just GUI playing.If still dont work, then share screenshot of VPC peering configurationCommentShareMuhammadanswered 5 months agoJohnathanSmith 5 months agothanks so much.. the issue was that I was typing "pcx" and nothing was showing up but if I type in "pcx-" then it showed.. thanks so much..Share"


Question: Created Lifecycle policy for deleting objects but didn't delete

I have created a lifecycle policy for deleting the objectsTotal Object count 10MTotal Object Size 10TBPolicy StructureData exists in the prefixIts been 30 hrs since the policy is enabled but the files are still not deletedPlease help me to figure out if I am missing somethingFollowComment

Answer: "0Accepted AnswerHello,I checked the screenshot and the Lifecycle rule configuration. I can see you have set it up to expire the current version of the objects after 130 days of it's creation on prefix "frames/1/" . Since the S3 bucket name is not given could you please check if the versioning is enabled or not. If the versioning is enabled please apply the lifecycle rule on the non-current versions of the objects as well.Moving ahead if the versioning is not enabled the Lifecycle rule seems to be correct. As you have mentioned that you have 10M of objects please note that depending upon the number of objects, actual time of expiration and expiry date set by life cycle rule may differ. However, please be assured that once the rule sets the expiry date you will not be charged for those object storage.Please note that there might be a delay between when the lifecycle rule is satisfied and when the action for the rule is complete. Changes in billing are applied when the lifecycle rule is satisfied, even if the action hasn't been completed. Examples of this include:- If you have a lifecycle rule for object expiration, then you won't be charged for storage after the object expiration time, even if the object isn't expired immediately.So, Kindly wait for few more days and please be assured that lifecycle will asynchronously delete the objects and you will not be charged for the objects marked for expiry.Meanwhile in order to check if the Lifecycle rule has been applied or not you can perform head-object API.aws s3api head-object --bucket bucket-name --key frames/1/objectnameCommentShareSUPPORT ENGINEERUjjawal_Sanswered 18 days agoShithanshu Mishra 18 days agoHello,Thank you for the responseThe bucket was not versionedIt seems like the issue was the one you have mentioned in 3rd point. there is a delay between deletion of objects and it's reflection on the metrics.The issue is now resolved. Today I was able to see a dip in metrics of storage consumption so the lifecycle policy is now running properly.Share"


Question: AWS personalize get-recommendations bug

"Hello everyone. I have a problem with the get-recommendations response. For example:Input data (utf-8 encoding):{'ItemId': '1', 'properties': '{'description': 'random string\\nnext line '}'}Output data (using the  get-recommendations method):{'ItemId': 'next line', 'score': 0.1}So, in my example, I get broken string instead ItemId.What is a problem can be? How can I fix it?Is it possible that \n or similar symbols can break the response of this method and return some broken string instead?FollowComment"

Answer: "0The GetRecommendations API request and response payload you shared above does not match the API definition. Are you using a language SDK or calling the Personalize endpoint directly?If making a REST call directly to the Personalize campaign/recommender endpoint, the request payload should be in the following format.{   "campaignArn": "string",   "context": {       "string" : "string"    },   "filterArn": "string",   "filterValues": {       "string" : "string"    },   "itemId": "string",   "numResults": number,   "recommenderArn": "string",   "userId": "string"}If using a language SDK like the AWS SDK for Python, the request parameters are passed as arguments to a function that wraps the REST call.import boto3personalizeRt = boto3.client('personalize-runtime')response = personalizeRt.get_recommendations(    campaignArn = 'Campaign ARN',    userId = 'User ID',    numResults = 10)print("Recommended items")for item in response['itemList']:    print (item['itemId'])See examples here.CommentShareJames_Janswered a year agorePost-User-1515185 a year agoI use boto3 library. I don't have any error with putting item or getting them, but in special cases which I describe above, if putting item has \n or similiar in properties, I get wrong data - I expect to get {'ItemId': '1, 'score': 0.1}, but getting {'ItemId': 'next line', 'score': 0.1}.Example:personalize_events = boto3.client("personalize-events")stream = {'itemId': '1', 'properties': '{"creationTimestamp": 1654676112, "description": "random string\\nnext line ", "userId": "1"}'}personalize_events.put_items(items=[stream])I get response using next code, but instead of {'itemList': [{'ItemId': 'next line', 'score': 0.1}]}personalize_events = boto3.client("personalize-events")personalize_events.get_recommendations()Share"


Question: "RDS Mariadb instance, crazy storage consumption"

"i had a problem with my instance with 200gb space and 24gb used... suddenly (with no code uploaded and structure modification) throw message"Error Code: 1021. Disk full (/rdsdbdata/tmp/#sql_150_1.MAI); waiting for someone to free some space... (errno: 28 "No space left on device")"Weird cause when i check the databases and tables we just get 24gb used.. i increase 100gb and in 30 seconds was full too... then i config auto scaling storage top in 600gb, but the curious is after a 40 min the "full space" activity in the graph disappear.. i did not delete any log or temp (could not find the temp files).type => db.t3.largeMariaDB version => 10.3.36Storage type => General Purpose SSD (gp2)FollowComment"

Answer: 0Here are some debugging tips to find out what is consuming RDS MariaDB storage;https://repost.aws/knowledge-center/view-storage-rds-mysql-mariadbCommentShareKalluanswered a month ago


Question: [MOVED] How to use openpgp card to store secret access key?

"Hello, I'm trying to find a way to store AWS secret access key in secure "only read" hardware in order to be PCI DSS complaint, for now i tried to store this secret access key in yubikey NEO, but the yubikey supports only 38 characters of "known" password ( all of the types of yubikey ), and the AWS generated secret access key is 40 characters, i tried to find " a way around " : i tried to compress this secret key ( dosnt work because of key complexity ),was thinking of storing this secret access key in yubikey as everyone do with ssh but for that i need to convert this string to pgp format (and i dont know how;P) , i was thinking of dividing this key in 2 parts and store it in different slots of the yubikey, but this sounds as very bad practice implementation. So the questions are : If someone has any other "work around" for this problem? Is it possible to generate 38 character access secret key?P.S I use AWS CLI mainly , and no access to browser needed is appreciated, so the U2F ( as far as i have read ) is not an option.FollowCommentJoann Babak a year agomoved to the https://repost.aws/questions/QUoCrDYpcbTj6szO11T2bFUw/password-ssh-based-authentiaction-for-aws-cli-authentication-for-aws-cli-without-needing-access-keysShare"

Answer: "0You can use a MFA Token with the AWS CLI. We have a Support Article How do I use an MFA token to authenticate access to my AWS resources through the AWS CLI? there is also a video showing the process.CommentShareMichael_Kanswered a year agoJoann Babak a year agoTrue, but, im not sure if it will be enough to cover PCI DSS , because we still will need to store somewhere the access keys, and to be full PCI DSS complaint, they cant be stored in PC memory , so or we get rid of access keys ( that, if we use AWS cli is not an option? ) , or we store secret access key in something "secure" like yubikey ( which apparently if the key exceeds 38 characters we cannot ), so any suggestion on how to "get rid" of access keys or shortening them will be appreciatedShare0How about trying pass utility? Pass utility is based on GPG to encrypt their vault. And then, you can use your YubiKey with OpenPGP.For convenience, try to use aws-vault together. This is integrated with pass utility.CommentShareEXPERTposquit0answered a year agoJoann Babak a year agoLooks like a promising utility, but as far as i have tested, i encrypted my secret access key under my PGP key, but.... now what? How i can store this PGP encrypted file in yubikey? so whenever i will need it, i will be able to "pull" it out?Share"


Question: Are there any unintended side effects of disabling the EC2 instance metadata service endpoint (both IMDSv1 & IMDSv2)?

"In evaluating the AWS Security Hub finding for [EC2.8] EC2 instances should use IMDSv2, I am considering to turn off access to instance metadata all together. My EC2 instances don't explicitly use the metadata service. If I disable the IMDS endpoint are there any unintended consequences I should know about? Will the CloudWatch and SSM agents still work normally? Any effects on ECS EC2 hosts or EKS nodes?FollowComment"

Answer: "3Accepted AnswerI wouldn't do that - if security is a concern disabling IMDSv1 is a reasonable step; but IMDSv2 is most probably being used even though you're not explicitly calling it.Consider that IMDS is the "place" where the instance role temporary credentials are stored. Many libraries and tools (think AWS CLI) automatically reach out to IMDS to retrieve those credentials and then use them to access AWS services in accordance with the permissions assigned by the instance role. If access to it were blocked or unavailable then all of those things would fail.Certainly CloudWatch and SSM use IMDS so those will not work correctly (read: they will fail).Could you get around that? Yes, but putting static credentials on the host; but the whole point of those temporary credentials is to avoid that.There are other things available via IMDS (think current AZ, region, etc.) that could also be used silently by your existing applications so I think it unwise to disable it completely.CommentShareEXPERTBrettski-AWSanswered a year ago"


Question: Why huge AWS Personalize bills for unused service?

"Several months ago I wanted to test out AWS Personalize and uploaded a 35MB .csv file with some data, abandoned it and certainly didn't "use" the service in any way. Nevertheless AWS has been billing me around 1000EUR a month, for "2,157.000 Recommender Hours - $0.375 per recommender hour for first 100k users"Needless to say I'm horrified at having been billed such a huge amount over 5000 EUR for a service I wasn't using (I only discovered it this late because my payment method is connected to a bank account that I thought was dormant with no reason for me to monitor it ... lesson learned)The docs say: "With Amazon Personalize, you pay only for what you use. The costs of Amazon Personalize depend on data processing, training, and number of recommendation requests."How can I find out what exactly I've been billed for? Is it possible that someone abused my account in any way? The 2175 hours on the last invoice corresponds to 90 days, so I guess 3 recommenders were running full time? Why would this be the case if this service is (afaik) not being used or accessed in any way?Is there any way I can dispute or reclaim these charges?ThanksFollowComment"

Answer: "0Hello,Sorry to hear this happened. You may want to contact our Billing team to discuss the next steps to take to prevent further charges from accruing: go.aws/support-center.Additionally, it might be worth looking in to the AWS Cost and Usage report to breakdown your bill: https://docs.aws.amazon.com/cur/latest/userguide/what-is-cur.html.You may also find this resource on unexpected charges helpful: https://aws.amazon.com/premiumsupport/knowledge-center/resources-unexpected-charges/.Once you've created a case with Support, they'll respond via email in the order it was received.Kind regards,-Marc O.CommentShareEXPERTAWS Support - Marcanswered 8 months ago"


Question: Does AWS Elemental MediaLive support RTMPS input

"I have create a RTMP push input, but the destination use RTMP protocol instead of RTMPS. Does the MediaLive Input support RTMPS? If true, how to create a RTMPS push input?I have searched the result of messageId 917977 on Oct 1, 2019, and it said the MediaLive doesn't support RTMPS as an input. and t will take how much time around 1-2 months or 6 months. So does it support rtmps now?Edited by: akata on Mar 23, 2021 3:11 AMEdited by: akata on Mar 23, 2021 3:15 AMFollowComment"

Answer: 0MediaLive doesn't currently support inputs using the RTMPS protocol. A full list of MediaLive supported input types can be found here:https://docs.aws.amazon.com/medialive/latest/ug/inputs-supported-formats.htmlCommentShareAbbasanswered a year ago


Question: IoT Events custom payload error

"I'm trying to use IoT Events custom payload with Lambda action.When I pass a JSON list format data from input and use it in the Lambda Action with JSON payload the following error occurs:We couldn't evaluate your expression for the action. Make sure that the variable names, input names, and paths to the data refer to the existing variables and input values. Note that the maximum allowable size of the payload is 1KB.input json{"thingname": "test device","status": [          {              "device1": "normal"          },          {              "device2": "error"          }        ]}custom payload for Lambda"{\"thingname\": \"${$input.inputname.thingname}\", \"device_status\": ${$input.inputname.status}}"Does the custom payload not support JSON data? Or am I missing something?FollowComment"

Answer: "0Accepted AnswerNot having tested it but quick guess: $input.inputname.status is a list. Might be a list is not considered to be a datum.Try the following:{    "thingname": "test device",    "status": "somestatus"}CommentSharePhilipp Sanswered 3 years ago"


Question: Migrating from RDS MariaDB 10.2 to Aurora MySQL 5.6

"Hi there,We currently use RDS MariaDB for our database and I'd like to migrate over to begin using Aurora MySQL 5.6.I understand that some of the functions available in MariaDB 10.2 are unavailable in MySQL 5.6, but we are not using any of those functions. Our queries are actually very basic.The naive approach here would be to do a mysqldump of our MariaDB database and then import it into Aurora, but that would result in downtime for our customers. I'm trying to come up with a solution that would result in ZERO downtime..Does anyone have any ideas here?FollowComment"

Answer: 0Accepted AnswerYou can use the AWS Database Migration Service to achieve a near zero downtime migration. https://docs.aws.amazon.com/dms/latest/userguide/CHAP_Source.MySQL.htmlCommentShareHalTempanswered 4 years ago


Question: Servers Deleted

"I have a problem, one serve that I have It was deleted and I need to show who deleted, its possible to know who deleted?FollowComment"

Answer: "2Yes, you can see this information in CloudTrail. See: Viewing CloudTrail events in the CloudTrail console.CommentShareEXPERTkentradanswered 6 months ago"


Question: AWS EC2 instance API: Error "Request failed with status code 451"

"My api service was up and running on the ec2 instance but suddenly started throwing error message: {"status":false,"message":"failure","result":{"code":0,"message":"Request failed with status code 451","data":{}},"responseCode":500} while any user trying to re-login. The API is allowing new users to register but not allowing to login back.I fear is it something https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/451. If yes how can I verify?FollowComment"

Answer: 0It may have nothing to do with either the website server (hosting) or the client (usually your web browser) but perhaps  internet service provider (ISP) may have blocked the site at a network level or your API/Website may be displaying it . However please do cross check using logs in your AWS resources and also open a support ticket to investigate further.CommentShareEXPERTAWS-User-Nitinanswered 6 months ago


Question: How to see the total network traffic usage of a Lightsail instance

"I've recently created a 10-dollar-per-month Lightsail instance in the Stockholm region, and I'm on my 3-month trial period. This instance has a network transfer limit of 3 TBs per month. How may I see the total amount of traffic I have consumed in a given date range?Unfortunately, in the Metrics section of the Lightsail website, I can only see the last-two-week network traffic in one-hour intervals, but I need the total used traffic for the current month.FollowComment"

Answer: "0According to this post, the only way available is to use AWS CLI.CommentSharerePost-User-3123013answered 6 months ago"


Question: Credit system on RDS Postgresql gp3 volumes

"Hi,Recently we switched from a gp2 volume to a gp3 in our PostgreSQL RDS databases, which is almost 4tb so over the 400gb for the 12000 IOPS minimum baseline.Still we are seeing the credit metrics on the cloudwatch monitoring tab, and apparently it seems the old 3k to 4k limit to use credits are still being applied when IOPS loads are over the old limits.According to the documentation, no credit system is applied to gp3 PostgreSQL RDS volumes and only the baseline limit (12k IOPS) is applied: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_Storage.htmlWhy is the credits metrics still showing and RDS is still using the old limits?FollowComment"

Answer: "1Accepted AnswerHi,I've seen cases for the same, because this volume was GP2 earlier, the BurstBalance metric is still reported to CloudWatch. BurstBalance is only valid for gp2,st1 and sc1 volume types and also depends upon the volume specifications, like size.Ideally the metric shouldn't affect the performance even if the balance drops, you can ignore the metric.However, If you are experiencing performance degradation + able to see the credits drop in cloudwatch + in gp3, you can open up a case with support to verify the GP3 state of the volumes internally.CommentShareSUPPORT ENGINEERsuveshan_panswered 8 days ago"


Question: SSO is not working~

"Hello!$ aws configure sso --> this command is not working in Ubuntu (wsl2).I am attempting to resolve this issue for 2 hours.  Although it is working fine in Powershell and all other commands are fine too...and even for "aws configure" , ONLY SSO is not working. It displays as below when I tried $aws configure sso"To see help text, you can run:Any one can help?FollowComment"

Answer: "1Accepted AnswerThis sounds like you may not have the right version of the AWS CLI installed on your uBuntu instance.By default V1 is available from the uBuntu repository, for V2 (which I recommend you use), you'll need to install it.https://docs.aws.amazon.com/cli/latest/userguide/getting-started-install.htmlFollow the instructions on how to install it on Linux in the guide for version 2.Hope this helps.CommentShareCarlos del Castilloanswered 7 days agorePost-User-5471206 6 days agoThank you! ResolvedShare0Thanks for your prompt reply!One thing I found strange is that it shows currently running on version 2 like belowowner@a-Desktop:/mnt/d$ wsl.exe -l -vNAME                   STATE           VERSIONUbuntu                 Running         2docker-desktop         Stopped         2docker-desktop-data    Stopped         2which means I am running on version 2 nowHowever, I found shell commandLine is version 0.2.1owner@a-Desktop:/mnt/d$ wslWsman Shell commandLine, version 0.2.1I clicked the accepted button for my appreciation to you but pls advise me if you have any clue on this ..CommentSharerePost-User-5471206answered 7 days agoCarlos del Castillo 7 days agoDo the following:'aws --version'  at the command line.  It should return something like aws-cli/2.10.0 Python/3.11.2If it is 1.x. update it following the steps above.Share"


Question: how can i increase elastip ip quota by region

"My actual limit is 5. how can i increase this, since i am in a basic support plan and do not have the 'technical' opt on issues at suport dashboard?FollowComment"

Answer: "0Accepted AnswerYou can request a quota increase via the Service Quotas dashboard even with Basic Support. To view this, click on the top-right of your AWS console where your role is, and select "Service Quotas". From there, go to the left-navigation and choose AWS Services, then EC2. From there you should be able to find the applicable quota and request and increase.A shortcut link specifically to Elastic IP quota can be found here (just be sure to select the correct AWS region in the region selector): https://console.aws.amazon.com/servicequotas/home/services/ec2/quotas/L-0263D0A3CommentSharegzappia_awsanswered 10 months ago"


Question: "RDS instances running postgres 9.5 or 9.6,"

"Hello, if I have RDS instances of postgres running version 9.5 and 9.6 what do I need to do in order to trigger an upgrade to a supported version that is no deprecated? Auto minor version upgrade is enabled. I know this version is no longer supported and honestly, I am surprised they didn't automatically upgrade by now to a supported version.FollowComment"

Answer: 1Auto minor version upgrade will only upgrade the minor version. You need to upgrade to a new major version. You can do that by just modifying the instance in the console to upgrade to a newer major version. Or through the API with modify-db-instance.CommentShareMODERATORphilawsanswered 4 months ago


Question: Prometheus not being able to scrape through https app runner domain

We want to scrape a https app runner domain without a port number and the prometheus configuration is according to that .Is there a way to prevent the default port number for https(443) to get applied in the domain name of app runner when the prometheus targets the https domain?FollowComment


Question: Failed to expose AWS ECS Fargate Service via ALB

"Hi,I follow AWS Blog to provision and expose service through Application Load Balancer (https://aws.amazon.com/blogs/compute/building-deploying-and-operating-containerized-applications-with-aws-fargate/).I found that after I follow the step, ECS service is provisioned, but when I tried to access from internet, it cannot be accessed, is there any way for me to trace it. Whether Application Load Balancer is not configure properly or what?Thank You.FollowComment"

Answer: "1Check whether the ECS tasks are running successfully or not. Looking at logs to confirm might helpIs the service active and has the load balancer configured?Are the target tasks healthy?Is the load balancer active? Check access logs and CloudWatch metrics to check if it is getting requests. Are there any HTTP 400 or 500 error responses etc.Further, you can deploy the following ECS/Fargate Load Balanced example. It uses AWS CDK. The solution should deploy successfully and you can use that to compare to your setup to get further pointers on what the issue could be.CommentShareRajarshi_Danswered a year agoAWS-User-6022443 a year agoSorry for late response.Yes. It's running successfully, and stated on event log :a856f3dc-9b08-44e0-8e5a-dc2e9e1c2a6e2022-05-23 14:06:11 +0700service NGINX has reached a steady state.bcbcc586-ce9f-4b6b-b457-67fe6178bff82022-05-23 08:05:54 +0700service NGINX has reached a steady state.Yes, Service is active, I can access with Public IP Address for each pod in the tasks. I created Application Load Balancer & Target Group by IP type already. But cannot accessed via Application Load Balancer End Point.Yes, it's healthy.OK, this will check.Thanks also for the CDK, will take a look on that.ShareAWS-User-6022443 a year agoUpdates :4. it's timeout. I call using Application Load Balancer DNS Name, it's getting timeout. and not shown in the CloudWatch.ShareAWS-User-6022443 a year agoI think I find the issue, after I check everything is fine, except the ALB can't be accessed. I just link to Internet Gateway through Route Tables edge association, the VPC also support for internet-facing already, but ALB still can't be accessed.Share1Is your ALB on a public subnet ? Did you open the ports from internet to the ALB' SG ? Same from the ALB to the container' SG?I'd recommend one of two things though, If you want to use a friendly format (docker compose specs) to define your services and AWS Resources to deploy, checkout ECS Compose-X or AWS AppRunner. The latter is very hands-off and friendly for people who are starting with ECS and AWS. The former is too, but will allow for much more complex settings and deployments options.Going down the CDK route is much more involved. I'd rather recommend Copilot before CDK at this point.CommentShareJohnPrestonanswered a year ago0Hi John & Rajarshi,Thanks for your reply.I've found the issue already. It's related with Route Tables. I missed out to associate the subnet.Thank You.CommentShareAWS-User-6022443answered a year ago"


Question: Gamelift Server API 5.0.2 Unable To Reserve A Process

"Hey, I have run into an issue that isn't allowing any players to create a game session on a fleet running API 5.02 WINDOWS_2016. On the Gamelift fleet side of things, everything seems to be working as normal. I had to add a few missing binaries from OpenSSL to the packaged project for it to not fail to call Process Ready.Upon the fleet being active, there are no signs that any of the processes are failing:I have also included a screenshot of how the server-side api calls are made in case something is wrong there:After the player calls "CreateGameSessionAsync" they receive this error back from Amazon.Unable to reserve a process(No active and available server processes found on the fleet)FollowComment"


Question: problem with "pip install gcc" in terminal

"So we are trying in AWS SageMaker console code to detect images and to configure it we need gcc compiler. which we added in cloud console, refreshed the studio but after running in terminal python setup.py install" it says that the gcc isnt installed. How should we proceed?FollowComment"

Answer: 0Accepted Answergcc doesn't install via pip. You should install  this wayhttps://github.com/aws/amazon-sagemaker-examples/issues/1890CommentShareDidier_AWSanswered 18 days ago


Question: Stopped instance restarted - unable to login

I have TWO EC2 instances that I have been using for more than a month.  2 wks ago - I STOPPED both instances.Today - when I try to start the instances - I am not able to login (ssh) into that machine --- 20min after 2/2 checks have passed.  I tried to START those instances last week as well --- and had the same issue.Both instances have Elastic-IP addresses.Both machines are standard g4dn.xlarge instances.Both machines had free-disk-space (10G+) when they were stopped.Both machines have magnetic/spinning disks (so they take a little longer to spin up)Console shows that 2/2 checks have passed.I have enabled ICMP-ALL on that instance and I CAN ping that machine => IP-stack is UPSecurity group assigned to that instance has the SSH port OPEN.I have that same security group assigned to other instances and I am able to login to those instances => not a security-group issueTrying to ssh into that machine - I get a "Connection refused" error on port 22.$ ssh -i <pem-file> ubuntu@<static-ip-of-instance>ssh: connect to host <static-ip-of-instance> port 22: Connection refusedIs there some kind of ongoing issue with AWS EC@ g4dn.xlarge instances (I have run into AWS capacity issues for this instance-type in the past)?FollowComment

Answer: "0Hi"ssh: connect to host <static-ip-of-instance> port 22: Connection refused" This message comes from a host remotely.The following are common causes for this error:The host reached the instance but there was no service listening on the SSH port.A firewall blocked and was set to reject the package instead of dropping it.Please Verify the following:There isn't a firewall blocking the connection.The SSH service is running on the instance.The SSH TCP port 22 is in the listening state.The server's IP address or hostname.The security group and network ACLs allow incoming traffic on TCP port 22.please refer to this  link for steps on  troubleshooting the issue :https://aws.amazon.com/premiumsupport/knowledge-center/ec2-linux-resolve-ssh-connection-errors/CommentSharestevenanswered a year agopk-dori a year agoThank you for your suggestions:There is no firewall blocking the connectionSSH in the security-group is OPENServer IP is an elastic-IP and has not changed; I am logging into the correct instanceYes, security-group allows incoming SSHRegarding verifying that SSH is actually running on a port is something of a catch22 situation.  Unless I login to the machine - I cannot tell if the SSH service is running.Is there another way for me to login to that instance?  If so, that would be something to try.Share0Here is an article on connection refused error. See if it helps:https://aws.amazon.com/premiumsupport/knowledge-center/ec2-linux-resolve-ssh-connection-errors/CommentShareSandeepVudataanswered a year ago"


Question: How can I deploy a rails app + slite3 to AWS?

"I have been trying to deploy a rails app with sqlite3 to AWS but the youtube videos are all over the place on methods to do so. I am new to AWS and I just need an easy guide with steps from start to finish.I was able to deploy a simple app without sqlite3, but it seems like things change a bit when you involve a database.FollowComment"

Answer: "0Accepted AnswerI'd recommend using Amazon RDS with PostgreSQL or MySQL instead of SQLite3 for better scalability and ease of use. However, if you still want to proceed with SQLite3, here's a step-by-step guide to deploy your Rails app using EC2 and Elastic Beanstalk:Install the Elastic Beanstalk CLI in your pc: Download and install the Elastic Beanstalk Command Line Interface (EB CLI) on your local machine: https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/eb-cli3-install.html.Configure the AWS CLI: Run aws configure and provide your AWS Access Key ID, Secret Access Key, default region, and default output format.Prepare your Rails app:a. Add the sqlite3 gem to your Gemfile and run bundle install.b. Make sure to commit all your changes to your app's Git repository.Initialize Elastic Beanstalk:a. In your app's root directory, run eb init and follow the prompts to configure your application.b. Choose a region and select "Ruby" as your platform.c. If prompted, set up SSH for your instances.Create an environment and deploy your app:a. Run eb create and provide a name for your environment.b. Wait for the environment to be created and the app to be deployed. This might take a few minutes.Configure your environment:a. In the AWS Management Console, navigate to the Elastic Beanstalk service and open your app's environment.b. Go to the "Configuration" tab, and click the "Edit" button in the "Software" card.c. Add the following environment variables:RAILS_ENV: productionRAILS_SERVE_STATIC_FILES: trueRAILS_MASTER_KEY: your Rails master key (found in config/master.key)d. Click "Apply" to save your changes and restart your instances.Open your Rails app:a. Once the environment update is complete, run eb open to open your app in a web browser.CommentShareJorgeanswered a month agorePost-User-2056837 a month agoThank you, Jorge!I will try those instructions on my own, but I was wondering if you would be willing to join me on a Zoom/teams meeting eventually for quick guidance. I have followed every tutorial online and I seem to always get stuck at some point.In case you decide you wouldn't mind sharing your knowledge with me, here is my LinkedIn account: http://www.linkedin.com/in/albertogonzalez1091I would really appreciate your in-person guidance, send me a message on LinkedIn if you are interested.Thank you again!Share"


Question: throttling and quota information for Chime Messaging

"We recently received some throttling errors, likely related to our use of Chime Messaging for chat within our application. However, I can't seem to find which specific metric's quota was exceeded, nor any existing monitors/metrics for our usage of AWS Chime Messaging (as opposed to Chime Meetings, video calls, etc.).The throttling errors did occur during an event when many people were online and likely using our chat feature, and spanned about an hour. The errors were reported for many different users as well.Questions:Is there a console or something where we can see our Chime Messaging usage, or a report of errors (like these throttling events)? Also, is there a way to tell which specific quota we exceeeded?The AWS CLI service-quotas command requires a service-code param. Does anyone know which value corresponds to Chime Messaging? There's just chime, but that only seems to include Chime Meetings related things (and not Messaging). Is the Service Quotas Console a better way to check values and request increases?Thanks!FollowComment"

Answer: "0Hello,Answering your questions to the best of my ability & knowledge:Questions:Is there a console or something where we can see our Chime Messaging usage, or a report of errors (like these throttling events)? Also, is there a way to tell which specific quota we exceeded?--> I believe the only quotas that is visible to the customers are the below links,-> https://docs.aws.amazon.com/general/latest/gr/chime.html -- Chime-> https://docs.aws.amazon.com/general/latest/gr/chime-sdk.html -- Chime SDKThe AWS CLI service-quotas command requires a service-code param. Does anyone know which value corresponds to Chime Messaging? There's just chime, but that only seems to include Chime Meetings related things (and not Messaging). Is the Service Quotas Console a better way to check values and request increases?-> Yes, Service Quotas Console is the best way to check and increase the values, since using that link you will be directly working with the AWS Support team that have visibility into the quotas per account/per region.Hope this helps !!CommentShareSUPPORT ENGINEERAWS-User-Chiraganswered 8 months agorePost-User-6415562 8 months agoThanks for the response!For the visible quotas, it looks like that first link you sent (chime.html) only includes those relevant to Chime Meetings (i.e. not Messaging). The second link (chime-sdk.html) does have a section for messaging, and there are several, though maybe 2 or 3 as likely candidates which we could be hitting.Ideally, we'd have a way to see some metrics that could show us our usage, so we could possibly see which quota we were exceeding. Or, if the error response we're getting specifies it somewhere (that I'm just missing).Also, sounds good about using the quota console!Share"


Question: Data ingestion in Opensearch Serverless

"I want to ingest logs from onpremise syslog server to opensearch serverless service. I am transferring now the log files to S3 and using lambda, I am ingesting data to to opensearch serverless collection. Can I continue to do that or is there any other efficient way to do it?FollowComment"

Answer: "2Accepted AnswerYou can use Kinesis Firehose to automate that with some buffering ( it will help to call in batches to OpenSearch, that is automatically done by Firehose).Are you doing this with lambda? I mean, your approach is valid, but maybe just using Kinesis Firehose from your On-premises Server is enough.You can read about this approach here.https://docs.aws.amazon.com/firehose/latest/dev/writing-with-agents.htmlBestsCommentShareacmanjonanswered a month ago1HI,The Amazon OpenSearch service is compatible with multiple integration tools for ingesting data from different data sources , but choosing the right ingestion mechanism depends on your use case requirements such as data latency and data type.Thus, If you need to ingest logs in real time, a common solution is to use the Kinesis Agent to send data to Kinesis Data Firehose and configure your OpenSearch as the delivery destination. Kinesis Data Firehose is a fully managed auto scalable service, so requires no ongoing administration, and allows transforming data via AWS Lambda function.CommentShareMikel Del Tioanswered a month ago"


Question: Unable to connect to ec2 this morning

"Last night, I was working on an ec2 instance, went to bed, woke up this morning and am unable to connect.Several restarts did not help. I don't anticipate it's an issue with Security Groups etc. (After all, it was working until last night).The instance ID is i-09a21d2cc0206d7e6Any pointers? Thanks!FollowComment"

Answer: "0Looks like the browser-based shell doesn't work (or I don't know how to use it). Was able to connect via MacOS Terminal.CommentSharedhruvkhanswered 4 years ago0Hi dhruvkh,I am glad that you have been able to solve your issue. Please let us know if you need any further help.Regards,awstomasCommentShareAWS-User-3892169answered 4 years ago"


Question: Transcoding Duration via Reserved-Queue takes way longer then with On-Demand Queue (MediaConvert)

"Hi,we noticed that the transcoding duration differs a lot between the on-demand queue and the reserved queue when transcoding an asset with the exact same encoding-settings.In particular the asset took about 45min on the on-demand queue and about 2h on the reserved-queue.Is that a normal behaviour?Kind regards,RivaFollowComment"

Answer: "0AWS MediaConvert Reserve Transcodes are designed for a low cost transcode solution for a volume of low priority jobs. It is not focused on speed. A Reserved Transcode queue is a fixed slot size, and will run each job as the slot resources will allow. On-demand transcode jobs have the ability to choose between different slot sizes, based on job complexity and size of source file.If you want to estimate how long a job will take with Reserved Transcode, you can enable the Simulate Reserve queue in the Job Management under Job Settings when running a test job.CommentShareMike-MEanswered a year ago"


Question: DynamoDB Read from Boto3 API Call

"I am currently attempting to analyze data from my DynamoDB database, with a focus on querying for both current and past dates. However, I have encountered some issues while using the AWS web app. Specifically, when I set the date as the primary key, the data is visible, but when attempting to scan it, the data does not appear.In addition, I have also tried using the Boto3 API, but the output has shown an incorrect last evaluated key of 20230318, with a scanned count of 12279 that is not accurate. Below is an portion of the code to scan the table:import boto3import csvfrom datetime import datetime, timedeltafrom boto3.dynamodb.conditions import Attr# Initialize the DynamoDB clientdynamodb = boto3.resource('dynamodb', region_name='us-east-2')# Replace 'your_table_name' with the name of your DynamoDB tabletable = dynamodb.Table('table_name')# Get the current day timestampcurrent_day = "20230405"previous_day = "20230404" # datetime.now(timezone.utc).date().strftime("%Y%m%d")#today = datetime.now()#current_day = today.strftime('%Y%m%d')#previous_day = (today - timedelta(days=1)).strftime('%Y%m%d')# Scan the tableresponse_current_day = table.scan(ProjectionExpression='ip_address, pk, c2_name, #counter',ExpressionAttributeNames={'#counter': 'counter',},FilterExpression=Attr('pk').eq(current_day))Output of the request:{'Items': [],'Count': 0,'ScannedCount': 12279,'LastEvaluatedKey': {'pk': '20230318', 'sk': 'redacted'},'ResponseMetadata': {'RequestId': 'redacted','HTTPStatusCode': 200,'HTTPHeaders': {'server': 'Server','date': 'Wed, 05 Apr 2023 21:14:11 GMT','content-type': 'application/x-amz-json-1.0','content-length': '126','connection': 'keep-alive','x-amzn-requestid': 'REDACTED','x-amz-crc32': '3416724477'},'RetryAttempts': 0}}FollowComment"

Answer: "1Accepted AnswerI would first try to understand why you are doing a Scan if the partition key is date:pkskdata20230318mainData20230318activeData20230318redactedData20230324mainDataIf your data looks like above, and you want all the items which match the date 20230318 then you should use a Query API call which means you do not have to read from the entire table, just the selection which matches your date.response_current_day = table.query(    ProjectionExpression='ip_address, pk, c2_name, #counter',    ExpressionAttributeNames={        '#counter': 'counter',    },    KeyConditionExpression=Key('pk').eq(current_day))CommentShareEXPERTLeeroy Hannigananswered 2 months agoEXPERTalatechreviewed 2 months agorePost-User-7141157 2 months agoThis worked as intended. I didn't know about the difference between the scan vs query. Thank you for the help. If anyone else in the future is looking at this you would also need to add an import of "Key".from boto3.dynamodb.conditions import KeyShare"


Question: TwinMaker Grafana plugin: dynamic selection of the scene

"Hi,In the configuration of the TwinMaker plugin in Grafana, we can define the scene which will be display into the dashboard.Is possible the use a variable of the dashboard, to be able to select the scene dynamically?Thank youFollowComment"

Answer: "0Currently, the dynamic selection of the scene is not supported in the TwinMaker Grafana plug-in. Depending on the selected datasource, a list of the available scenes are provided to the user to select from. Could you please share the use case when you would like to change the scene dynamically?CommentShareMukesh_Sahay-AWSanswered 5 months ago0Thank you for your answer.I have a dashboard which contains the data of all our connected sites.We have a Grafana variable to select and filter which site we want to display.So I would like to be able to use this variable to display the 3D scene of the site selected through the Grafana variable.I guess that others AWS customers could be interested, do you think so?Best regards,CommentShareraffianswered 4 months ago"


Question: migrate database from my local to AWS

"I have schema and populated with data into MySql on my local machine. However, due to the large-scale of the datasets, the computing time suffers in the following analysis stage in python. So I decide to try to move all my work to cloud. I'm wondering if there is anyway to let the server in AWS directly connect to the mysql server in my laptop so that I can use the existing datasets without recollect them.FollowComment"

Answer: 0Accepted AnswerYou can use DMS database migration service of aws which will do everything for you.https://aws.amazon.com/dms/But you have to take care about foreign key and other data. sometime it is generating the error.DMS will transfer all of your data from laptop to aws database which will be on RDS or you can choose.CommentShareharshmanvaranswered 4 years ago0There are several options:https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/MySQL.Procedural.Importing.External.Repl.htmlYou might want to consider replicating from your laptop directly into an RDS instance:https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/MySQL.Procedural.Importing.Other.html-PhilCommentShareMODERATORphilawsanswered 4 years ago


Question: CloudFront and ALB Integration

"CloudFront - ALB - EC2(Wordpress)- S3 (OAI)I'm trying to configure something like the above. But there are some problems.[ACM: example.com, *.example.com]HTTPS communication using CloudFront's CNAME and ACM(N.Virginia) + ALB's ACM(Asia/Seoul).With this configuration, a 502 error occurs when connecting to the xxxx.cloudfront.net domain of CloudFront.Conversely, if I register the example.com - xxxx.cloudfront.net A record in Route53 and access the A record, the page loads normally.Please tell me the answer to the problem.CloudFront and ALB IntegrationPlease tell me the answer to the problem.FollowComment"

Answer: "0Hello,When you setup HTTPS origin in CloudFront, the certificate returned from the origin must be valid and include one of the following domain names:The domain name in the origin’s Origin domain field (the DomainName field in the CloudFront API).The domain name in the Host header, if the cache behavior is configured to forward the Host header to the origin.Please refer to this document for further information: https://go.aws/3Q0VBuRRegards,Franky ChenCommentShareFranky Chenanswered a year ago"


Question: Date Format Errors when importing CSV file data from S3 to SPICE

My data contains 3 columns with dates using this format:2022-01-01T12:47:33.116+00:00I have about 27 million rows within a dozen or so CSV files in S3  that I want to import.The import fails so I then mark the 4 columns as strings for a successful import.I cannot have the source change the format of the dates.Can someone please tell me what the simplest thing I can do to import the dates into SPICE as dates without modifying the source CSV data?I appreciate any help and your input. Thank you.-AjayFollowComment

Answer: "0So I ran some tests:WHAT IS A GOOD SPICE DATE?:now():2022-06-18T21:55:10.312Z    Proper SPICE Date:2011-02-02T00:00:00.000Z (from Documentation)MY DATES THAT WILL NOT BE RECOGNIZED AS DATES; RECOGNIZED AS STRINGS ONLY:      Time Of Viewing:Raw Data (String)2022-01-01T12:47:33.116+00:00  (Can be converted to date but fails) test:left({Time Of Viewing},19)2022-01-01T12:47:33 (Unable to convert String column to Date)test2:replace({test}, "T", " ")2022-01-01 12:47:33 (Unable to convert String column to Date)  rtp_Time_of_Viewing:replace({test2}, "-", "/")2022/01/01 12:47:33 (Unable to convert String column to Date)Keep note that this is all done through the QuickSight Edit Dataset interface. I need to know what I am doing wrong. The column options will not allow the conversion of these "test" or "rpt" columns as Dates. Only the original "Time Of Viewing" column has that option to convert from String to Date. However if I do convert this "Time Of Viewing" column to Date it fails.CommentShareaprasharanswered a year ago"


Question: ASP.NET Core app deploy to AWS Beanstalk on Linux

"Hi all,I am trying to push my ASP.NET Core 3.1 app to an AWS Beanstalk (Linux) instance, but it's giving me an error during the deployment.That's the error - NB the placeholder "SLNNAME" is my Visual Studio solution name:[ERROR] An error occurred during execution of command [app-deploy] - [CheckProcfileForDotNetCoreApplication]. Stop running the command. Error: error stat /var/app/staging/staging_SLNNAME_server/SLNNAME.dll: no such file or directory with file /var/app/staging/staging_SLNNAME_server/SLNNAME.dllThe project I am trying to deploy is called "SLNNAME.Server.Web" as well as  the corresponding DLL. But according to the error above AWS is looking for a DLL named just "SLNNAME".So I tried to rename the DLL to "SLNAME.dll" and magically it started to work correctly!Trying to set the correct DLL name, I created a Procfile with this directive:web: dotnet SLNNAME.Server.Web.dllThe Procfile is at the root level of the zip along with all the application DLLs, but it seems to be ignored.I have uploaded the code using a simple zip file, AWS Toolkit for Visual Studio and the GitHub actions. All of them are returning the same error.How can I tell the correct DLL name?I attach a screenshot of the zip file uploaded to AWSThanks in advanceUPDATE: If I change the output DLL name to SLNNAME.dll the Procfile is read and executed correctly. So to make it work I have to change the Procfile to:web: dotnet SLNNAME.dllAnd the csproj file with:<AssemblyName>SLNNAME</AssemblyName>```But this is NOT a solution, it's just a workaround. I think there's something wrong with the service itself that must be fixed    Edited by: krusty on Jul 10, 2020 9:55 AMFollowComment"

Answer: "0Anyone's here?This is a very big bug that needs to be solved as quick as possibleOther posts are about this bug are:https://stackoverflow.com/questions/62698712/codepipeline-elasticbeanstalk-error-an-error-occurred-during-execution-of-comm/62770639?noredirect=1#comment111277316_62770639https://stackoverflow.com/questions/62810938/asp-net-core-app-deploy-to-aws-beanstalk-using-github-actions?noredirect=1#comment111170981_62810938CommentSharekrustyanswered 3 years ago0Yes, this is indeed very annoying, I noticed the same when the assembly file name is composed by intermediate periods elastic beanstalk will only take the first part and tries to find a .dll named wrongly.For example: Company.Module.Functionality.dll will be looked up as Company.dll hence the deployment fails. And happens even with the Procfile configured properly.This needs to be fixed since it is common to have assemblies named as mentioned.CommentSharekdev29answered 3 years ago0Today I received an email from AWS support saying the issue has been fixed. I have tried it and actually it works!Please be sure to use Linux 2/2.0.1 as platformCommentSharekrustyanswered 3 years ago"


Question: Pushing Docker Container to ECR Hangs Then Fails

After running the commanddocker push 123456.dkr.ecr.us-west-2.amazonaws.com/myappI then see111111 Retrying222222 Retrying...444444 Waiting...EOFI know that I authenticated to AWS through the AWS CLI. What could be blocking my attempts to push my Docker image to ECR?FollowComment

Answer: "0Weird! I just logged out and back in to the AWS console, and re-executed the docker push command. Then the image went through. Hmm.CommentShareAWS-User-9698935answered a year ago"


Question: Unable to connect to database MYSQL created in EC2 instance

I'm trying to connect to database MySQL that i create in EC2 instance by using Navicat ver.11.2.16 and SQLyog Community ver.13.2.0 and got an error 10061 "Unknown Error"..I also added SQL port into Inbound Rules but still the same. Please help how to connect by using this GUI..FollowComment

Answer: "0If you are encountering an "Unknown Error" (Error 10061) when trying to connect to a MySQL database hosted on an EC2 instance using Navicat or SQLyog, here are a few troubleshooting steps you can follow:Verify the EC2 Instance Security Group: Ensure that the security group associated with your EC2 instance allows incoming connections on the MySQL port (default is 3306). You mentioned that you added the SQL port to the inbound rules, but double-check the configuration to make sure it is correctly set up.Confirm MySQL Service Status: Verify that the MySQL service is running and active on your EC2 instance. SSH into the EC2 instance and check the status of the MySQL service. You can use the following command: sudo service mysql status, If the service is not running, start it using: sudo service mysql startCheck MySQL Binding Address: Ensure that MySQL is configured to bind to the correct IP address. Open the MySQL configuration file (typically located at /etc/mysql/mysql.conf.d/mysqld.cnf) and confirm that the bind-address directive is set to the private IP address of your EC2 instance. If it is set to 127.0.0.1 or localhost, modify it to the private IP and restart the MySQL service.Verify MySQL User Credentials: Double-check the username and password you are using to connect to the MySQL database. Ensure that they are correct and have sufficient privileges to access the database.Check Firewall Settings: Confirm that there are no additional firewalls or network-level restrictions (such as Network ACLs in AWS) blocking the connection between your local machine and the EC2 instance.Test Connectivity with Telnet: Use the telnet command to check if you can establish a network connection to the MySQL port on your EC2 instance. Run the following command from your local machine: telnet <EC2-instance-IP> 3306. If the connection is successful, you should see a blank screen. If it fails to connect, it indicates a network issue or a misconfiguration.Verify GUI Tool Configuration: Double-check the connection settings in Navicat or SQLyog. Ensure that you have entered the correct host (EC2 instance IP or hostname), port (3306), username, and password. Also, confirm that you have selected the appropriate connection method (e.g., Standard TCP/IP).Update GUI Tool Versions: Consider updating to the latest versions of Navicat or SQLyog, as older versions may have compatibility issues or bugs.If nothing of the above point works. Check the MySQL error log on the EC2 instance for any relevant error messages that could provide more insight into the issue.Let me know if this works.CommentSharehimanshustallongmailcomanswered 17 days agoKFN1220 9 days agoI tried to follow all above suggestion but none working. Here is your resultConfirmedActiveTried bind with private IP but failed. Tried also public IP doesn't workedDeleted and Created new user, but failed during connectionchecked ufw but status is inactiveTELNET to private or public IP got Network ErrorFailed to connect and still error (Error No. 2002 Can't connect to MySQL server on 'xx.xxx.x.xxx' (10061)Updated to latest versionShare0Maybe you allowed MySQL traffic by using AWS Network ACLs etc. but you need to reconfigure mysql instance also.The MySQL user that you're using to connect must have privileges to connect from the host where Navicat/SQLyog is running. You can grant these privileges via a command like GRANT ALL PRIVILEGES ON dbname.* TO 'username'@'%' IDENTIFIED BY 'password'; Be cautious with this kind of operation as it might affect the security of your database.By default, MySQL only listens on localhost (127.0.0.1). To accept connections from remote systems, you need to configure MySQL to listen on 0.0.0.0 or the public IP of your EC2 instance. This is typically done by modifying the MySQL config file (often located in /etc/mysql/mysql.conf.d/mysqld.cnf or /etc/my.cnf), finding the line that says bind-address = 127.0.0.1 and changing it to bind-address = 0.0.0.0. After making this change, restart your MySQL serviceCommentShareEXPERTsedat_salmananswered 17 days agoKFN1220 9 days agoI tried bind the IP (private and public IP) in /etc/mysql/mysql.conf.d/mysqld.cnf and restart the service plus the tried also reboot the instance but no luck..Share"


Question: Lambda to register manual snapshot repository

"Hi,Im trying to automate the deployment of opensearch as well as setting up snapshots to s3 (we want to keep backups longer than 14 days)Im currently running the opensearch cluster in cognito mode. But not sure how to configure boto3 auth.reference: https://docs.aws.amazon.com/opensearch-service/latest/developerguide/managedomains-snapshots.htmlFollowComment"

Answer: "0Does this help? https://docs.aws.amazon.com/opensearch-service/latest/developerguide/managedomains-snapshots.html#managedomains-snapshot-client-pythonCommentShareLiz Snyderanswered 9 months ago0Hi,Not sure what happened there, half my question got removed!I am basing my lambda function on that code, and run the lambda via a role that has the iam:Passrole / ESHttpPut attached to it, How do i update the example script for using a role instead of a user?Ie: update the below 2 lines to work with a role instead of usercredentials = boto3.Session().get_credentials()awsauth = AWS4Auth(credentials.access_key, credentials.secret_key, region, service, session_token=credentials.token)im looking at the boto3 docs and not seeing an option, but might be in the wrong place?!https://boto3.amazonaws.com/v1/documentation/api/latest/reference/core/session.htmlAny help greatly appreciatedCommentSharerePost-User-0903394answered 9 months ago0If i just create a new IAM user with the IAM:PassRole setup it errors below, which looks like it needs opensearch access (aka has to be a cognito user!) But i dont understand how i could can set up a cognito user to have the specific policy? or how i you would have to re-write that script to run via cognito user?403{"error":{"root_cause":[{"type":"security_exception","reason":"no permissions for [cluster:admin/repository/put] and User [name=arn:aws:iam::11111:user/manual-snapshot-reg, backend_roles=[], requestedTenant=null]"}],"type":"security_exception","reason":"no permissions for [cluster:admin/repository/put] and User [name=arn:aws:iam::11111:user/manual-snapshot-reg, backend_roles=[], requestedTenant=null]"},"status":403}CommentSharerePost-User-0903394answered 9 months ago"


Question: Getting strange error after attach Cloudfront to S3 website.

I created distribution and connected stg.songo.mn domain to it. When I try to see the website it returning following error.The ap-east-1 location constraint is incompatible for the region specific endpoint this request was sent to.FollowComment

Answer: 0Seems problem persists only in Hong Kong data center. I moved my S3 bucket to Singapore and it is working fine now.CommentShareZolbooanswered 4 years ago


Question: Domain registration failed: [We can't finish registering your domain.

My Domain registration failed whish is millerlu.link  so how can I fix it? on Amazon Route 53. Thanks.FollowComment

Answer: "0We do not know what type of failure it is, but it would be best to refer to the following official AWS documentation and contact AWS support. [1][1] Contacting AWS Support about domain registration issues - Amazon Route 53https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/domain-contact-support.html----- Excerpt -----AWS provides a Basic support plan, free of charge, for all AWS customers. The plan includes assistance for the following issues related to domain registration:----- Excerpt -----CommentSharemn87answered 9 months ago"


Question: AmazonL2 kernel problem with software raid - mitigation

"Hi,The latest kernel for Amazon Linux2 experiences problems when using software RAID, which results in a RAID accessing process to reach 100% CPU and to hang, eventually rendering the ec2 instance unresponsive.My question is if there is any way to mitigate this issue as it does not happen with CentOS7, RedHat7 and RedHat8, it also doesn't occur with older AmznL2 kernel (4.14.77-81.59.amzn2.x86_64)?Details:Kernel: 4.14.232-177.418.amzn2.x86_64OS: Amazon Linux 2Steps to reproduce (devices might be different):mdadm --create --verbose /dev/md0 --level=stripe --raid-devices=2 /dev/xvdb /dev/xvdcmdadm --stop /dev/md0; mdadm --assemble /dev/md0 /dev/xvdb /dev/xvdc;The "mdadm" process hangs when trying to assemble the raid, also any process trying to access this raid. This happen when the "/dev/md0" is cleared, but "/sys/block/md0" is left.Best regards and thank you in advance,Edited by: rga on Jul 12, 2021 11:14 AMFollowComment"

Answer: "0The latest tested kernel (4.14.238-182.422.amzn2.x86_64) of Amazon Linux 2 does not show the mentioned "mdadm" assembly problem.Edited by: rga on Jul 27, 2021 7:53 AMCommentSharergaanswered 2 years ago"


Question: Credential should be scoped to a valid region error

"Using the Eclipse "Upload function to AWS Lambda" to upload trial Java Lambda function code to Lambda hosted in EU (Ireland), I get this error:Failed to load iam role in EU West (Ireland): com.amazonaws.services.identitymanagement.model.AmazonIdentityManagementException: Credential should be scoped to a valid region, not 'us-west-2'. (Service: AmazonIdentityManagement; Status Code: 403; Error Code: SignatureDoesNotMatch; Request ID: c411e78c-eb09-11e7-ab2c-af0c632aa4a6)I created an IAM  user with admin permissions and API access and configured the access key in Eclipse.  It can see the name of the Lambda function created in AWS but fails with this error at the next step.FollowComment"

Answer: "0Did some more testing.  I had to set the AWS Preferences Detault Region to US East (Virginia) to get this to work.  Looks like this default region is being used in calls to IAM which accepts only us-east-1.I would classify this as a bug in the Eclipse AWS plCommentSharerde2answered 5 years ago0I have the same problem. Trying to upload a new Lambda function to EU-west-1 and get the same error message. Also get it if I try and upload an updated Lambda function that I previously uploaded successfully some time back.What's going on? why are we getting this error now? And how to we solve it?CommentShare101appsanswered 5 years ago0See my reply to myself ... I found I had to set the Default region to US East (Virginia) in Window -> Preferences -> AWS Toolkit -> Regions.I believe that this region is used to form the endpoint when the plugin queries IAM for roles.  IAM is in US East only so the request fails if the default region is not US East.CommentSharerde2answered 5 years ago0thanks. made changes as you suggested and it works.weird as it worked perfectly a week or 2 ago without your change. anyway just glad it's working again.thanks for saving me a lot of wasted timeCommentShare101appsanswered 5 years ago0Thank you so much!Edited by: shingo on Jan 27, 2018 7:49 PMCommentShareshingoanswered 5 years ago"


Question: Migrate EC2 Instance from one account to another with Elastic IP Address

I want to migrate EC2 Instance from one account to another with Elastic IP AddressFollowComment

Answer: "2Accepted AnswerHello,Since October 31th 2022,  it is possible to transfer Elastic IP addresses between AWS accounts. Official announcement hereYou can take a look to the following AWS documentation - Enable Elastic IP address transfer and find the steps to complete the operation in your source account.Hope it helps.CommentShareMickael-AWSanswered 4 months agoEXPERTTushar_Jreviewed 4 months ago0This post outlines how to move the EIP: https://repost.aws/questions/QUImID0dYDRR24o4PAEUPvyg/is-it-possible-move-migrate-eip-to-another-accountCommentShareEXPERTkentradanswered 4 months ago"