Question: Cannot detach EBS volume - Action greyed out

"I have 2 volumes, 8GB and 25GB - both "available". If I select either one or both volumes, the Action for Detach is greyed out. The Delete Action is however available. My understanding is that I should be able to Detach a volume.vol-02101e9dfa66a45e4vol-0ced1f0483c90729aFollowComment"

Answer: "1Hi!  Good question.  if the volume is already detached, you will only be able to delete it.   If the volume shows as available, that means it has already been detached.https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-deleting-volume.htmlCommentSharejsoncanswered a year ago"


Question: Is there an API for Amazon Fresh or Whole Foods

"Hi, I am developing a recipe app, and I'd like users to be able to order groceries from Amazon Fresh or Whole Foods. Is there an API to support this?FollowComment"

Answer: 0AWS does not provide APIs for "Amazon Fresh" and "Whole Foods".CommentShareAshish_Panswered 10 months ago


Question: Bringing Oracle licenses to a migration?

Is there a way for a customer to use the AWS license manager to manage Oracle or existing licenses?We have a lot of people coming in and out of the OnPrem environments and want to migrate from Oracle to MySQL with RDS as a managed service. I think they say "Key Manager" can help? Still new on this one.FollowComment

Answer: "0Yes, you can use AWS License Manager to manage your Oracle licenses and also bring your existing licenses to AWS. AWS License Manager helps you manage licenses for software such as Oracle, Microsoft, SAP, and IBM that are running on Amazon EC2 instances and on-premises servers.To manage your Oracle licenses, you can use AWS License Manager to track license usage, automate license discovery, and help ensure license compliance. You can also use AWS License Manager to bring your existing Oracle licenses to AWS and manage them through License Manager.In addition to AWS License Manager, you can also use AWS Key Management Service (KMS) to manage your encryption keys. AWS KMS is a managed service that makes it easy for you to create and control the encryption keys used to encrypt your data.When migrating from Oracle to MySQL with Amazon RDS, you can use AWS Database Migration Service (DMS) to help you migrate your database schema, data, and database objects from Oracle to MySQL. AWS DMS also supports ongoing replication of data changes between Oracle and MySQL, which can help you migrate with minimal downtime.Overall, AWS provides a range of tools and services to help you manage your licenses and migrate from Oracle to MySQL with RDS as a managed service. It's important to review the AWS documentation and best practices to ensure that you use these services effectively and securely.Thank you.CommentSharerePost-User-0899580answered 2 months ago"


Question: "Best Services for IoT (Raspberry Pi) Software Deployment, Updates, Error Messages, Maintenance etc."

"Hi there,I am working for a project where we want to run python scripts that perform sensor readings, and ML inference on edge. Every now and then, we would like to update the software of these edge devices (add/remove/update scripts  and files such as machine learning model checkpoints, update the device OS etc.). Moreover, we would like to monitor the status of each device to check if everything is still running smoothly (e.g. the python inference script hasn't crashed). Maybe the device could even revert back to the old software if the updated software doesn't work.I know these are a lot of aspects but I would be very happy if anyone could give me some starting points.FollowComment"

Answer: "0Hi,the easiest way to start with what you are trying to achieve is to use AWS IoT Greengrass [1]. This service allows you to manage device software lifecycle remotely including software configuration, ML models, etc. Greengrass provides several managed components [2] to perform much of the undifferentiated heavy lifting that are needed in managing software at the edge. You can also benefit from community contributed components, among others a Jupyter Labs component [4] that allows you to interactively develop the edge logic. For hands-on learning you can check this workshop [5]For more information you can check:[1] https://docs.aws.amazon.com/greengrass/v2/developerguide/what-is-iot-greengrass.html[2] https://docs.aws.amazon.com/greengrass/v2/developerguide/public-components.html[3] https://docs.aws.amazon.com/greengrass/v2/developerguide/greengrass-software-catalog.html[4] https://github.com/awslabs/aws-greengrass-labs-jupyterlab[5] https://catalog.us-east-1.prod.workshops.aws/workshops/5ecc2416-f956-4273-b729-d0d30556013f/en-USCommentShareEXPERTMassimilianoAWSanswered 3 months ago"


Question: Executing "devicetester_win_x86-64.exe run-suite" errors on pretestvalidation.

I'm working to validate my device with Greengrass v2 on a Windows 2019 OS.When executing the devicetester_win_x86-64.exe it launches a pretest validation check to make sure the correct components are installed on Windows.  Below is the messages I'm seeing when this happens.info msg="GGV2 Suite Info" hostArch=amd64 hostName=WIN-JTAA71LE6U1 hostOs=windows testCaseId=pretestvalidation deviceId=ztC-200i groupId=pretestvalidationinfo msg="Running test case"info msg="Setting up device for testing"info msg="Running preTest validation test"error msg="Encountered failure running pretest validation -  \n your device doesn't have Visual C++ 2017 or later versions installed"The last message tells me that it can not validate that Visual C++ 2017 Redistributable has been installed.I have installed this on my machine and validated that it exists in add remove programs.   Microsoft Visual C++ 2015-2022 Redistributable.How is the pretestvalidation tool verifying that it's installed on the machine?I checked the Registry and it looks correct.Is it possible that the latest version of the Redistributable does not work with this pretestvalidation tool?Anyone have any suggestions?Thanks-PeterFollowCommentPeterL 3 months agoThis was do to the users rights in windows that I had created.  ggc_user was just a standard user and could not check the registry.  Once changing that users rights the code passed.Share

Answer: 0Accepted AnswerThis was do to the users rights in windows that I had created.  ggc_user was just a standard user and could not check the registry.  Once changing that users rights the code passed.CommentSharePeterLanswered 3 months ago


Question: AWS MSK IAM Authentication with MSK Connect

From the MSK connect documentation we could see only the ROLE based access to the VPC. But How to assign the MSK permission to an IAM user(aws credentials file) and add it to the MSK connect for Authentication.FollowComment

Answer: "0Hi there, thank you for providing your valuable feedback on the service. In MSK connect workers which runs tasks are managed by AWS and not accessible to the users so it is not possible to create credentials file/profile and pass in the configuration. MSK Connect currently only supports role based access. I will raise a feature request with the service team on your behalf. While I am unable to comment on if/when this feature may get released, I request you to keep an eye on our What's New (1) and Blog pages (2) for any new feature announcements.(1) https://aws.amazon.com/new/(2) https://aws.amazon.com/blogs/aws/CommentShareSUPPORT ENGINEERHarshith_Manswered a year ago"


Question: Need a long term solution feasible to scale up my user base for access to RDS SQL Server.

I have hosted an AWS Managed MS Active Directory and joined to AWS RDS SQL Server to the AD Domain.Option -1 : Create a SQL login for each user and ask the user to login to the SQL server with new login. And provide appropriate grants for the SQL Server login.Option -2 : Enable Windows Authentication. Create a Database login for the each user in AD and provide grants individually.For a large organization this could be laboriousCan you help me with how I can scale this user access method. Also how to give user access to a group and some roles on server or database level ? and also how to give fine grained access (both deny and allow).IAM Roles and Groups cannot be used here as they are limited at DBA level but not inside the Database or SQL server instance level. Do provide with various possibilities too that are feasible. Please provide the relevant links and resources for the sameFollowComment

Answer: "1To scale up your user base for access to RDS SQL Server while minimizing administrative overhead, you can leverage your existing Active Directory infrastructure and SQL Server roles:Establish a trust relationship: If you have an on-premises Active Directory already set up with users defined, you can establish a one-way trust between your on-premises AD and your AWS Managed Microsoft AD. This will allow you to avoid duplicating user creation in the AWS Managed AD. You can find more information on setting up the trust relationship in the AWS Managed Microsoft AD.Organize users into groups: Rather than managing individual users, organize your users into groups in your Active Directory based on their roles, such as Administrators, Developers, and Application Users. This will make it easier to manage permissions and access control on a group level.Leverage SQL Server roles: Use roles within SQL Server to manage permissions and access for the groups you created in step 2. By assigning the appropriate roles to each group, you can grant access to resources at the server or database level, as well as apply fine-grained access control (both deny and allow).Server-level roles: You can use predefined server-level roles, like sysadmin, serveradmin, or securityadmin, or create custom server-level roles to fit your organization's needs. Grant these roles to the corresponding AD groups. For more information, refer to the SQL Server documentation on server-level roles.Database-level roles: Similarly, you can use predefined database-level roles, like db_owner, db_datareader, or db_datawriter, or create custom database-level roles. Grant these roles to the corresponding AD groups. For more information, refer to the SQL Server documentation on database-level roles.CommentShareRafetanswered 2 months ago"


Question: Logging into SDK in Visual Studio using a different machine

"Hi, probably a newbie question...I have a new PC, have set up Visual Studio and downloaded the SDK.  When trying to connect to my instances I get an error: 'The request signature we calculated does not match the signature'.  I'm not calculating anything that I know of and have copied and pasted the input fields from the previous machine.I set this up on the 'old' machine over a year ago and can still log in on that one and deploy my ASP.NET/RDS application.  However, I'm at a loss as to why the copied and pasted credentials won't allow me to log in as all I've done is got a new machine.Is there a setting or something else I need to change?https://docs.aws.amazon.com/sdk-for-java/v1/developer-guide/credentials.htmlFollowComment"

Answer: "0Well, I've done nothing but 'suddenly' this works.CommentSharekamdarcanswered 4 years ago"


Question: Which Database service would be best for this use case?

"I'm working on an online turn-based strategy game called CivPlanet. There will be dozens of CivPlanet games running at once, each with its own unique gameID. The gamestate consists of several uniquely named JSON objects, henceforth called CivPlanet objects. Players interact with the server via REST requests, which are sent somewhat infrequently. When the player plays the game, they're probably sending around 1 request per minute.In short, I need a database service to store all CivPlanet objects. Each CivPlanet object has a timestamp, gameID, and a name to distinguish it from other objects in that game. CivPlanet objects are never created or deleted once the game is added to the database. However, some can be modified. Also, not all games will share the same set of objects.I need to be able to:Retrieve a list of all CivPlanet games, along with some metadata about each game such as whether it is accepting new players.Conditionally retrieve all CivPlanet objects associated with a given gameID that were updated after a given timestamp.Lock all CivPlanet objects under a given gameID as I prepare to update the gamestate.Atomically overwrite certain CivPlanet objects that share a gameID.Release the lock.The server receives a mixture of queries and events from the player. When responding to a query, the server needs to check for any updated data on the database, then process the query and return the result. When responding to the event, it needs to obtain a lock, check for updated data, and process the event. If the event fails, it releases the lock and notifies the player. If it succeeds, it publishes the new data to the database and releases the lock, then notifies the player.My question is, what database service is best suited for these requirements, and what structure should I use within that service? I was looking at DynamoDB. I thought gameID could be the partition key. I'm not sure if I need a sort key, or what that sort key would be.I probably need two databases, one that maps from gameID to metadata, and another that maps from gameID+objectName to JSON.Any thoughts?FollowCommentjzhunter a year agoI think it might be interesting if you rewrote the question without mentioning locks. What are your actual serialization needs? Why are you sure locks is how to achieve them? Do you need database-level locks or just an attribute marking something as locked? How will you handle clients that crash after getting the lock? Also it's unclear with the query what it means exactly for the client to "check for updated data"? Does that just mean it should always query against the latest data? Are you anticipating client-side caching or something?Share"

Answer: "0Hi DrCorchit,I believe you need a database that will be suitable all the following mentioned in your used case. Please note that they are multiple AWS databases that are compatible for your used case, I will recommend you test the debases out on your environment. I conducted some research and the most compatible for gaming were DynamoDB [1] Aurora [2], there is also a documentation on how some customers make use of DocumentDB [3]. I advise you go through the documentation provided about the databases and reach out to solutions architecture for the design of your case.Refer to these references[1] https://aws.amazon.com/blogs/database/level-up-your-games-with-amazon-aurora/[2] https://aws.amazon.com/dynamodb/gaming/[3] https://aws.amazon.com/documentdb/customers/CommentShareLwazianswered a year ago"


Question: I'm unable to establish an NFS session on SnowCone

Ran into issues after initial setup and tried to re-configure and re-connect.   Now the manul configuration and access fails to complete and start the NFS services for data transfer.  Transfer for NFS remains in a loading state.FollowComment

Answer: "0NFS Error on OPS Hub client on Windows 2019 ServerCommand failed: wmic logicaldisk get FileSystem,Name,ProviderName Node - HPS-PRINT ERROR: Description = Call cancelledCommentSharerePost-User-0284818answered 10 months ago0Please restart the Snowcone device and enable NFS service using a Virtual Network Interface (VNI). The instructions are in Page 38 of the Snowcone user guide (https://docs.amazonaws.cn/en_us/snowball/latest/snowcone-guide/AWSSnowball-snowcone.pdf).CommentShareAWS-User-2606180answered 10 months ago"


Question: AWS Batch Multiple Compute Environments Not Working

"I have the following setup for an AWS Batch Job Queue    const queue = new batch.JobQueue(this, 'Ec2JobQueue', {      computeEnvironments: [        {          computeEnvironment: ec2SpotEnvironment,          order: 1,        },        {          computeEnvironment: ec2OnDemandEnvironment,          order: 2,        },      ],    })The intent being that when i submit a job it will try to provision an ec2 instance by trying the spot market but if that is not possible it will fallback to using on demand.What i have observed is that it never uses the on demand compute environment. If there are jobs in the queue and I have hit the service quota limit for number of spot instances I can provision then those jobs will just sit in the queue until a spot instance becomes available. I've confirmed that both compute environments are healthy/valid/enabled in the console.What should be my expectation around when the second compute environment is used? Ideally there would be an additional 'timeout' setting on a compute environment to facilitate something along the lines of (try spot for for 15mins if no luck, try the next compute environment).FollowComment"


Question: how to increase the storage of host instance

"The parameters of a big neural network model can be huge. But the largest storage size of a host instance is only 30G, according to https://docs.aws.amazon.com/sagemaker/latest/dg/host-instance-storage.html. Is there a way to increase the storage volume? I have a model (embeddings) that is very close to 30G and caused a no space error when deploying.Thanks!FollowComment"

Answer: "0Accepted AnswerThe disk size is currently not configurable for SageMaker Endpoints with EBS backed volumes. As a workaround, please use instances with ephemeral storage for your SageMaker endpoint.Example instance types with ephemeral storage:m5d instances: https://aws.amazon.com/ec2/instance-types/m5/c5d instances: https://aws.amazon.com/ec2/instance-types/c5/r5d instances: https://aws.amazon.com/ec2/instance-types/r5/The full list of Amazon SageMaker instance types can be accessed here: https://aws.amazon.com/sagemaker/pricing/instance-types/CommentSharedlraghaanswered 3 years ago0Thanks! Using a x5d instance solves the issue.And a quick note: even though I could download the big model to endpoint now, I got timeout error when loading the model in the endpoint. After some trial and error, I solved it by increasing the timeout value and reducing the number of worker by setting the environment variables. To do it, pass this dictenv={"SAGEMAKER_MODEL_SERVER_WORKERS":"1","SAGEMAKER_MODEL_SERVER_TIMEOUT":"1800"}when creating the model object.CommentSharebill10answered 3 years ago"


Question: Enabling AWS Config

"AWS Config is considered best practice to be enabled in all regions, but do we need to enable it in regions other than the one we are using?FollowComment"

Answer: 0Enabling AWS Config in all accounts and Regions is an industry best practice. By using AWS Config you can audit the configuration of your AWS resources and ensure that they comply with configuration best practices. You can use AWS CloudFormation StackSets to enable AWS Config in multiple accounts and Regions.CommentShareAWS-User-9543277answered 7 months ago


Question: Delete base path mapping in API Gateway doesn't work

"I have manually updated our custom domain name to associate with a base path mapping to our lamdba function in API Gateway, but if I try to undo or remove the base path mapping by clicking the little trash can icon to the right of the base path mapping, it doesn't work.  It appears the trash can icon doesn't work and this seems like a bug and there is no way to remove the base path mapping via the UI (Chrome Version 57.0.2987.133 (64-bit)).FollowComment"

Answer: "0Thanks for reporting this, we'll fix it as soon as possible.CommentShareAWS-User-5277851answered 6 years ago0Any word on this? Our base path mappings won't delete either.(edit) when I click the trashcan this is in the javascript console:Uncaught TypeError: Cannot read property 'delete' of undefinedat t.n.handleDeleteButtonClick (BasePathMappingTableDetail.jsx:44)at onClick (BasePathMappingTableDetail.jsx:93)at HTMLElement.wrappedCb (createClass.js:47)at o (components.js:173)at Object.t [as __fireEvent] (components.js:153)at Object.click (components.js:2521)at HTMLButtonElement.r (components.js:2592)at HTMLButtonElement.<anonymous> (components.js:1316)Edited by: m_ohrt on May 5, 2017 12:21 PMCommentSharem_ohrtanswered 6 years ago0I have the same problem, can't delete base path mappings in the console, with AWS CLI or with CloudFormation. It's bad because it gets CloudFormation stacks stuck.CommentSharekennuanswered 6 years ago0This appears to be fixed in the console, and you can delete with AWS CLI usingaws apigateway delete-base-path-mapping --domain-name foo.com --base-path "(none)"However, it still appears to be completely broken in CloudFormation and causing us issues, too.CommentShareJaikDeananswered 6 years ago"


Question: "HELP - Unable to start the environment. To retry, refresh the browser or restart by selecting Actions, Restart AWS CloudShell."

"Hello,I have tried restarting the cloudshell and deleting aws cloudshell directory however i still face this issue.It loads to 2% and then i get this error "Unable to start the environment. To retry, refresh the browser or restart by selecting Actions, Restart AWS CloudShell."FollowComment"

Answer: "1Try the following.I have had that error in the past, but in that case I fixed the time setting and it solved the problem.You can also try changing other browsers.https://repost.aws/questions/QU0fc_9kRWSF662purgwEacg/questions/QU0fc_9kRWSF662purgwEacg/unable-to-start-the-environment-to-retry-refresh-the-browser-or-restart-by-selecting-actions-restart-aws-cloudshell?CommentShareEXPERTRiku_Kobayashianswered 2 months agorePost-User-8767806 a month agoHello Riku! Thanks for sharing this, i have tried everything on this page and is still facing the same issue.Another issue that is related is also launching an EC2 instance which i feel tie together.Share"


Question: Unable to swap Environment URL's on Elastic Beanstalk

"I am trying to do Blue Green Deployment on AWS Elastic Bean Stalk. I have two environments v_0 and v_1. I am able to access my website from the environment URL's. When I go to Actions-> swap URL from the new environment , it gives an error message: You need at least two web tier environments in the Ready state to complete this operation.FollowComment"

Answer: "0I have also faced same problem. Can't find related details or resolution till now. Surprisingly other threads on web don't have much details on it.@pava, I believe it you resolved it. Can you let me know? Thanks!CommentSharePlkHzanswered 3 years ago0I am having the same issue, did you find a solution or cause?CommentSharebarnaclejiveanswered 3 years ago0Hello,Please ref: https://forums.aws.amazon.com/thread.jspa?messageID=944117&#944117CommentShareKaushikM-AWSanswered 3 years ago"


Question: "While trying to Update a table present in one database using a table present in another database, I'm getting an ASSERT error"

"In Redshift, I'm trying to update a table using another table from another database. The error details:SQL Error [XX000]: ERROR: AssertDetail:error:  Assertcode:      1000context:   scan->m_src_id == table_id -query:     17277564location:  xen_execute.cpp:5251process:   padbmaster [pid=30866]The context is not helpful. I have used a similar join based approach for other tables and there the update statement has been working fine.Update syntax used:UPDATE ods.schema.tablenameSET                "TimeStamp" = GETDATE(),"col" = S."col",FROM ods.schema.tablename TINNER JOIN stg.schema.tablename SON T.Col = S.Col;FollowComment"

Answer: "0Hello,In this context, please note that, assert errors can occur due to a race condition during the processing of a query.The ASSERT error can occur when there's an issue with the query itself. If you get an ASSERT error after a patch upgrade, please update Amazon Redshift to the newest cluster version.[+] https://aws.amazon.com/premiumsupport/knowledge-center/redshift-query-abort/That being said, to further look into this issue more closely, if you would like to do a resource based troubleshooting, please raise a support case with AWS for further information. If a support case has already been created please be assured that we will get back to you and assist you in the best way possible.CommentShareManjushree_Kanswered 3 months ago"


Question: How to wait to trigger Lambda function until specific files are uploaded

"I'm new to AWS and working on Lambda function triggered by S3. I have two json files and need to use the both data to send queue to SQS. For example, two files, "file_a.json" and "file_b.json" are to be uploaded to S3 at the same time.file_a.json{"data": "123"}file_b.json{"data": "456"}Then, Lambda will send queue message like ["123", "456"] which is created with the data from both files.However, S3 invokes Lambda function every time the single file is uploaded and this makes it hard to send queue to SQS as I wrote above. I'm thinking if S3 can wait until the two files are uploaded to trigger Lambda, it can solve the issue. If anyone had faced the similar situation, I would like to know how to resolve this problem. Thanks!FollowComment"

Answer: "3Accepted AnswerYou will need to put this logic inside your Lambda function. Something like this:If (my companion file exists in the bucket) then    if (my file datetime is newer that my companion file) then        parse files and add data to queue    endendCommentShareEXPERTkentradanswered a year agoEXPERTBrettski-AWSreviewed a year ago0Hi, short Answer. That is not possible. The S3 Lambda Trigger sends an Event for every Object.You can send the message to SQS and than trigger the Lambda function via the SQS Trigger. S3 -> SQS -> Lambda -> SQSThe SQS Trigger offers a configurable Batch size and Batch window. That can work if you can guarantee that only these two files trigger the S3 Events in the defined Batch window.CommentShareMarcoanswered a year ago"


Question: Cloudformation tagging for cost management

Can you tag an existing cloudformation resource in the console or cli?FollowComment

Answer: "1Yes, you can. But it would be best if you updated the cloudformation template to include the tags on the resource(s) and updated the stack with the updated template.CommentShareEXPERTkentradanswered a year ago0If you want to have unique tag keys or values per resource then the right the way to include tags into template as Kentrad said. But if you want to have tags applied to all resources of the stack, it is much easier to apply tags to stack (via console or cli) and then Cloudformation will automatically apply the tags for all resources. You can also change/add/remove tags of exiting stack by doing an stack update with new tags. Here is an example how to do this https://carriagereturn.nl/aws/cloudformation/tag/2018/04/24/cloudformationtags.htmlPS. There is a small caveat here, some Cloudformation resources have faulty implementation causing resource to be replaced for tag update. Just pay attention that "Replacement = False" for all resources before applying an update. There are rare cases but TGW is one such example, https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-transitgateway/issues/124CommentShareKalluanswered a year ago"


Question: PHP 7.4 and 8.0 is missing security updates

"HelloThe current version of EB PHP 7.4 is 7.4.21, released on July 1 2021. That is almost five months ago.Since this version, there have been five patch releases, four of them security related.Please update the EB environments to 7.4.26, the latest as of this thread: https://www.php.net/archive/2021.php#2021-11-18-1This current adoption rate of security releases is unacceptably slow. Please work to improve delivery of updates to the PHP platform.PHP 8 suffers from the same problem, currently sitting at 8.0.8 while the latest release is 8.0.13.FollowComment"

Answer: 0I updated the "stats" in my question as there have been additional releases for both PHP 7 an 8.Please resolve this.CommentSharenickdnkanswered 2 years ago


Question: Three way conference call (additional party)

"I'm evaluating Amazon Connect and need to know if it allows at least three people to be conferenced together. I haven't found this feature to be available via the API or the Contact Flow Designer.Example:Customer calls.Customer gets connected to an agent in a queue.Agent adds an additional party (another agent or customer) to the conference.One of the agents can leave the conference without dropping the other calls.This is just one example but there are many cases where adding an additional party to a conference would come in handy.Has anyone done this with Amazon Connect? And if it is not a supported feature, are there plans for releasing something like this in the near future?Thank youFollowComment"

Answer: "0Accepted AnswerHi znas,Yes you can, take a read of the section Work with calls here https://docs.aws.amazon.com/connect/latest/userguide/agentconsole-guide.htmlThanksDanCommentShareDanBloyanswered 4 years ago0Awesome, thank you DanCommentShareznasanswered 4 years ago0Hello,Is there a way to conference more then 3 people on same Call? let say in total 4-5 PeopleThanksCommentShareJoseph193answered 4 years ago0not that i've seen/aware of.CommentShareDanBloyanswered 4 years ago"


Question: instance re-launch after termination

"Hi,I've got a r5a.large instance, which is not in use. when I'm trying to terminate the instance, different instance is being launced automatically. I read that it might be connected to EC2 Auto-Scaling (https://repost.aws/questions/QUE3qVZUzERzeFOzwMMe44gQ/a-new-ec-2-instance-is-created-after-termination-of-the-only-instance), but nothing appears in my console when I'm trying to follow instructions (cannot delete ant auto-scaling group, because I don't have one) (https://docs.aws.amazon.com/autoscaling/ec2/userguide/as-process-shutdown.html).please, help me terminate all EC2s.Thanks,AdiFollowCommentOmid Eidivandi 6 months agoTry to change autoscaling policy,https://docs.aws.amazon.com/autoscaling/ec2/userguide/deleting-scaling-policy.htmlWish that helpsShare"

Answer: "0Hi All,Thanks for your answers. unfortunately, in the "Auto Scaling Groups" page, I have no option as mentioned in the documentation (see first pic below)- only the option to create new auto scaling group, and I don't have any load balancers (second pic below).I also checked my spot instances, and made sure that I don't have any requests (third pic).What else could it be?Thanks Again,AdiCommentSharerePost-User-9776128answered 7 months agoOmid Eidivandi 6 months agoTry to change autoscaling policy,https://docs.aws.amazon.com/autoscaling/ec2/userguide/deleting-scaling-policy.htmlWish that helpsShare0Check the tags on your instance, are there any that start with aws:?  Those would be created by an AWS service and might show what service is maintaining the capacity.Alternatively, around the time the replacement instance is launched, look in CloudTrail and filter by:EventName: RunInstancesEventName: CreateFleetThese are generally the 2 API calls used to create new EC2 instances, and it should say which service is making the API callCommentShareShahad_Canswered 7 months agorePost-User-9776128 7 months agoHi,Thanks for your answer.please check next post, with an additional information.AdiShare0Hi Shahad_C,The Tags tab can be found above:Moreover, it seems that the usage operation is RunIntances.what should I do next?CommentSharerePost-User-9776128answered 7 months agoShahad_C 7 months ago@rePost-User-9776128 - open the RunInstances call and check what the source is (is the call being made by another AWS service?  By a script in your account?).  That should tell you what the source of the launch is.  Since it looks like this may be spot, there could be a persistent spot request as virshu mentionedShare0HiAs you mentioned the autoscaling is causing that ,Try to disable autoscaling attached to your load balancerThis is feasible in console ec2 > load balancerCommentShareOmid Eidivandianswered 7 months agoEXPERTIndranil Banerjee AWSreviewed 7 months ago0You can look at this document - https://docs.aws.amazon.com/autoscaling/ec2/userguide/as-enable-disable-scaling-policy.htmlLook at the section "To disable a scaling policy (console)"CommentShareEXPERTIndranil Banerjee AWSanswered 7 months ago0Other than autoscaling, it could be a spot instance. If you have active spot request, it will launch another instance as well.CommentSharevirshuanswered 7 months ago"


Question: Amazon Workmail & SES - how to setup an email address for sending only?

"I've gotten as far as setting up SES and Workmail so that I can set my server to be able to exclusively send emails. However, I saw that once the Workmail Inbox is full, the account would be unable to send emails. I went looking for a way to either:A) prevent emails from being received and stored in the inboxB) a rule I could setup to delete anything that didn't match the company domainC) be able to read the inbox and delete email messages from the CLI (and I'd setup my own script to manage how and what was deleted when)So far I haven't had any luck.Again, I'm not particular how I achieve the goal, but I do preferably need to find a way to have an email address for a server to use exclusively for sending messages. I worry that if I leave it to employees to remember to login and clear the inbox, someone will forget, and then the server will stop sending emails.Any direction or advice would be greatly appreciated.FollowComment"

Answer: "0Accepted AnswerHi,I think I can give you some advice and possible solutions for your problem. First of if you want a send only exclusive email address I would suggest to using SES. This will allow you to send email without needing a mailbox.There are some options in WorkMail that can help you achieve a similar set-up. You can create a Inbound Email Flow Rule (https://docs.aws.amazon.com/workmail/latest/adminguide/create-email-rules.html) to drop all mail for a mailbox or you can configure a Mailbox rule to permanently delete all incoming mail (Needs Windows Outlook). To access the mailbox via an API you can use the EWS managed API and our EWS end-points.Kind regards,RobinCommentShareMODERATORrobinkawsanswered 4 years ago"


Question: How to create Athena View using CDK

"I want to use this CREATE VIEW option in the Athena console to run a query which will create a View in the Glue Database. But I want to use CDK.My question is : What’s the easiest way to create an Athena View using monocdk, which will create a view in the Glue DataBase?Seeing that creating CfnNamedQuery construct with the 'CREATE OR REPLACE VIEW' query will just create a Saved Query. So I’ll have to run it once via the console to actually create the view, which defeats the purpose.I’m fairly new to Athena and CDK, so would be great help if anyone can point me towards the right direction. Thanks!(PS : Markdown for the embedding the picture doesn't seem to be working. The picture is a screenshot of the Athena console : https://tiny.amazon.com/1dzv084cv/drivcorpamazviewananpublScre)FollowComment"

Answer: "1Accepted AnswerViews are tables with some additional properties on glue catalog.So, you can create a glue table informing the properties: view_expanded_text and view_original_text. This tables will be executed as a view on Athena.More details on https://docs.aws.amazon.com/cdk/api/v1/python/aws_cdk.aws_glue/CfnTable.html#tableinputpropertyCommentSharedidoneanswered a year agoFabrizio@AWS EXPERTa year agoPlease not that the text to be used in the 2 parameter needs to follow some rule, for example view_original_text must contain an encoded Presto view , you can look at this stackoverflow answer for further information https://stackoverflow.com/questions/56289272/create-aws-athena-view-programmaticallyShareAWS-User-3372660 a year agoThanks for this! One concern : I want to create the view from an existing CDK generated glue table(which is populated by a Glue Crawler). Let's say I add a column to the source glue table(ie, its schema changes), can there be a stale view issue(since I read that glue tables are created parallely).What sort of 'stale view' cases like this should I look out for?Share"


Question: How to create a lambda layer for a CodeStar project?

"Hello everyone,I have created a CodeStar project (Python Webservice) and I am using vscode to edit it.So far I have customized the CodeStar generated project to:buildspec.ymlfunctions/lambda1functions/lambda2template-configuration.jsontemplate.ymlIt builds using "sam local build", and when changes are pushed to CodeCommit as well.However, I did not managed to reuse code between "lambda1" and "lambda2". If I try to add a "Layer" using the "Lambda Dashboard" it rewrites the code I have added using git.Any suggestions on how to re-use code in a CodeStar project?Edited by: robsondepaula on Feb 11, 2019 11:32 AMFollowComment"

Answer: "0Thank you for your feedback. The reason that the Lambda Layer which you create through the Lambda console is deleted upon deployments is because the Lambda functions are managed by your project's CloudFormation stack. Any changes performed outside of the stack will be overwritten when that stack is deployed again.If you'd like to create a Lambda Layer within your project, it is best to use the AWS::Lambda::LayerVersion CloudFormation resource to do so https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-layerversion.html. You will also need to update your existing Lambda function resource to reference the new Layer https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-function.html#cfn-lambda-function-layers.However, Lambda Layers may not work the best for your use-case, as source code changes will not update an existing Lambda Layer, so a new Layer has to be created each time you make changes to your code. Instead, we recommend that your two Lambda functions be located within the same code base and reuse code directly from within the repository. Let me know if you are still confused or if this does not work for you.CommentShareAWS-User-4630160answered 4 years ago0hello, robsondepaula.I faced same situation.I wanted to re-use common codes in lambdas, and manage them codecommit and cloudformation.I thought it can achieve making lambda layer.But I gave up because to make lambda layer, I need to upload source code S3.Now, I usually do following way to achieve that.your_project---- lambda1 -- lambda1_code.py                     |                     |--- lambda2 -- lambda2_code.py                     |                     ---- common_modules -- common_module.pyThen, write this in buildspec.yml before do aws cloudformation package(maybe install phase is better?)　- cp ./common_modules/common_module.py ./lambda1/　- cp ./common_modules/common_module.py ./lambda2/In this way, it performs likes lambda layer, and it can be managed by codecommit and cloudformation.For your information.CommentShareheat-exchangeanswered 4 years ago0Thank you!CommentSharerobsondepaulaanswered 4 years ago"


Question: Is there any AWS service that is able to log URL query string?

"Context: I have a use case that requires a hack to store very important data inside a query string.I understand the security drawback of sending sensitive data with a query string so no need to illustrate that further.I want to know how AWS treats URL query string when using HTTPS.Is there any AWS service (API Gateway, CloudFront, Amplify, Lamda) that is able to logs or store any of those data in plain text?What policy does AWS have in order to protect those data?https://forums.aws.amazon.com/thread.jspa?messageID=690297&#690297This is the only resource I found prior to this questionFollowComment"

Answer: "0It all depends on how you are implementing the service.If you come in through CloudFront, the logging is documented here:https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/logging.htmlIf you come in through Application Load Balancer, the logging is document here:https://docs.aws.amazon.com/elasticloadbalancing/latest/application/load-balancer-access-logs.htmlIf you come in through the Network Load Balancer, the logging is documented here:https://docs.aws.amazon.com/elasticloadbalancing/latest/network/load-balancer-access-logs.htmlIf you come in though a Classic Load Balancer, the logging is documented here:https://docs.aws.amazon.com/elasticloadbalancing/latest/classic/access-log-collection.htmlIf you come in through an API Gateway, the logging is documented here:https://docs.aws.amazon.com/apigateway/latest/developerguide/set-up-logging.htmlIf you hit an Elastic IP on an instance, you will have to consult the documentation of the web server you are using.CommentShareRodney Lesteranswered a year ago"


Question: How to clone a Bitbucket repo from a Springboot microservice running on AWS EKS?

"I have a springboot microservice which runs on AWS EKS.I am generating a .tfvars (Terraform runtime parameters) file inside this microserviceI would like to checkin this file on BitbucketI have a couple of queries here:If I create a .tfvars file (or any file), where would that file be saved by Springboot?1. Will the file be stored in the file system of the container?2. Or is it mandatory to use an EFS to store this file?Would I be able to clone a Bitbucket repository to checkin my .tfvars file?1. Will the clone be stored in the file system of the container?2. Or is it mandatory to use an EFS to store cloned repos?FollowComment"


Question: AWS Network Firewall

"We have created 3 subnets ( public, DB & APP) in each 3 Availability Zone in Single VPC and environment running Kubernetes environment in EC2 Instance. We have created a firewall endpoint in each availability zone. We have planned all traffic between the subnets to go through firewall . We have created the route table for flowing the traffic between the subnet.We are facing issue , able get communication between with 1 & 2 AZ , in 3 AZ we are unable to do the communication. if we change the route table we are able get communication 2 & 3 AZ, but unable get communication to 1 AZFollowComment"


Question: Data Key Recycling for SQS

"I need to use recycle keys for SQS. When I recycle the key, both producer and consumer will use same key as per documentation. The calls to SendMessage and ReceiveMessage will each trigger a call to AWS KMS Decrypt to verify the integrity of the data key before using it. This works only if the messages are ordered i.e. Fifo queues. If I am using standard queues, this will not work as the messages may be out of order. Can you  clarify.FollowComment"

Answer: 0I think it will work. Look at this documentation:https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-server-side-encryption.htmlSQS uses "Envelop Encryption": It describes the fact that every message is stored with it encrypted data key with it.That way in- or out-of-order messages will not matter in case of rotation.CommentShareJaccoPKanswered a year ago


Question: Better filters for AWS inspector

"We recently installed AWS inspector and it found quite a lot of CVE's in our ECR repo. We run patching regularly and I thought a tool like Inspector would be useful in find things to patch. Unfortunately most of the images in the repo are old images that are only there for archive purposes and aren't deployed anywhere. I think in this case the only thing that can be done to shorten the list of vulnerabilities is to remove the old images and so also lose the history. Also most of the vulnerabilities appear to have no available patches as of yet.Is there a way to find only CVEs that really are an issue (images actually deployed to an EKS cluster somewhere) and have available patches? This would allow us to find only vulnerabilities that are both real and actionable.  As it is, it's really time consuming sifting through a big list of vulnerabilities where 95% either aren't really a problem and/or there is nothing that can currently be done about them. Other security tools I've used in the past do this out of the box, but I can't seem to find a way in Inspector.FollowComment"

Answer: "0Have you tried to configure filters in ECR?Note that enhanced scanning in ECR refers to the (new) inspector continuous scanning.** This will not directly address your question as they are not available as of now (i.e. filter only findings that either relating images being actually deployed in EKS and/or have patches available), but it will help to reduce # of findings generated and lower cost.CommentShareJason_Sanswered a year agograhamschuckman a year agoI was thinking the same thing. Try putting your actively used images in a different repository from your archived images (ex: active-repository), and then use ECR filters to only scan your active-repository.Share"


Question: AWS VPN with Private IP address

"Good new with this release yesterday, https://aws.amazon.com/about-aws/whats-new/2022/06/aws-site-vpn-introduces-private-ip-security-privacy/So wanted to confirm the steps to set this up.Create DXGCreate Transit VIF - associate with DXG.https://docs.aws.amazon.com/directconnect/latest/UserGuide/create-vif.html#create-transit-vifThe ASN can be private ASN, correct?Create TGWCreate VPN attachementhttps://docs.aws.amazon.com/vpn/latest/s2svpn/create-tgw-vpn-attachment.htmlAll ASN can be private. All need to be unique.FollowComment"

Answer: "1Accepted AnswerHello,Have a look at this Blog that was published just yesterday which has the steps listed and detail explanationhttps://aws.amazon.com/blogs/networking-and-content-delivery/introducing-aws-site-to-site-vpn-private-ip-vpns/Create the Direct Connect GatewayCreate the Transit GatewayTransit Gateway association to the Direct Connect gatewayCreate the Customer gateway (CGW)Create the AWS Site-to-Site Private IP VPN connectionHope this helps.CommentShareEXPERTTushar_Janswered a year agoEXPERTBrettski-AWSreviewed a year ago"


Question: Using S3 bucket as a file server for the public

"We basically want to collect files from external customers into a file server.We were thinking of using the S3 bucket as the file server that customers can interact with directly.Is it possible to accomplish this where we create a bucket for each customer, and he can be given a link to the S3 bucket that also serves as the UI for him to drag and drop his files into directly?i. He shouldn't have to log-in to AWS or create an AWS accountii. He should directly interact with only his S3 bucket (drag-drop, add, delete files), there shouldn't be a way for him to check other buckets. We will probably create many S3 buckets for our customers in the same AWS account. His entry point into the S3 bucket UI is via a link (S3 bucket URL perhaps)If such a thing is possible - would love some general pointers.FollowCommentZJon 3 months agoPlease let me know if I answered your questionShare"

Answer: "0Hi, @ababujiThe S3 bucket has a function that allows you to use it without authentication by making public settings.https://docs.aws.amazon.com/AmazonS3/latest/userguide/configuring-block-public-access-bucket.htmlAlso, some file upload tools support S3 buckets.WinSCPCyberduckCommentShareEXPERTiwasaanswered a year ago0Yes, it is possible to use Amazon S3 buckets as file servers for external customers to upload and download files without the need for them to log in to AWS or create an AWS account. You can create a separate S3 bucket for each customer and provide them with a unique URL that allows them to directly access and interact with their respective buckets.Here are the general steps you can follow to set up an S3 bucket for each customer:Create an AWS account: If you haven't already done so, create an AWS account and sign in to the AWS Management Console.Create an S3 bucket: In the AWS Management Console, create a new S3 bucket for each customer. When creating the bucket, make sure to enable "Block all public access" to ensure that the bucket is not accessible by anyone other than the intended customer.Configure bucket policies: Once you have created the S3 bucket, you can configure the bucket policies to allow the customer to upload and download files. You can use S3 bucket policies to restrict access to the bucket to a specific IP address or range, or to require the use of a pre-signed URL.Provide customer access: Once the bucket policies are configured, you can provide the customer with a unique URL that allows them to directly access and interact with their respective S3 bucket. You can also provide them with instructions on how to upload and download files to and from the bucket.Monitor access: Finally, you should monitor the access to the S3 buckets to ensure that only the intended customer is accessing their respective bucket.It's important to note that setting up an S3 bucket for each customer can be a time-consuming process, especially if you have a large number of customers. Additionally, you will need to ensure that the bucket policies are configured correctly to ensure the security and privacy of the data.I hope this helps! Let me know if you have any further questions.CommentShareZJonanswered 3 months ago"


Question: MTurk sandbox showing "There are no more of these HITs available" message before user has completed all HITs in a group

"Hello, our team is working on testing a group of 6 HITs that we have published on the sandbox, but some workers are only able to complete 2 of the HITs in the group before receiving the message mentioned in the title of this post. After receiving this message they get the same message when trying to complete any other HITs that we publish. We also have team members who have been able to complete all 6 HITs without issue. There are not qualifications set on the HIT and the max number of assignments is much higher than the number of assignments completed before this issue occurred. Any help on this situation would be greatly appreciated!FollowComment"


Question: "Can RDS Proxy support RLS patterns, with many sets of DB credentials dynamically added? Are there alternatives to this pattern for multi-tenant setups / SaaS architectures?"

"tl;dr; I want to create a separate DB user account for each tenant in a SaaS, to support multi-tenant setup for PostgreSQL db using Row Level Security (RLS). It seems this isn't possible or practical with RDS Proxy because the SDK doesn't allow for easy management of secrets / credentials associated with RDS Proxy. What am I missing? How can I achieve a multi-tenant RLS setup with RDS Proxy and PostgreSQL RLS?I'm trying to create a SaaS with a multi-tenant DB setup. RDS Aurora Postgres. Each tenant in the database === a DB account (see: https://aws.amazon.com/blogs/database/multi-tenant-data-isolation-with-postgresql-row-level-security/).This was going fairly well when I was in the PoC stage, because I ignorantly put off storing DB secrets in secret manager and just had a few sample accounts setup to test things out.That said, I've recently realized that with RDS Proxy you need to actually add each database credential to the proxy in order to be able to use that credential through the proxy... and that's not something that happens instantly, it can take an unknown amount of time for RDS Proxy to be updated, and frankly I'm not sure how well this would scale adding potentially hundreds or even thousands of credentials to RDS Proxy.I had hoped / thought maybe that using the "IAM Authentication" would solve the issue, but although it doesn't seem super well documented / clear (at least not through the AWS console), I think IAM Authentication doesn't do anything for us unless we're using SQL server:IAM Authentication. Choose whether to require, allow, or disallow IAM authentication for connections to your proxy. The allow option is only valid for proxies for RDS for SQL Server. The choice of IAM authentication or native database authentication applies to all DB users that access this proxy.https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-proxy-setup.htmlIf I'm misunderstanding something here I'd love to know, and would really appreciate any advice. I feel like I'm fighting a loosing battle with my current approach and would love to know if there is something I'm missing that would salvage things!If not, then I'm left eitherFigure out how to programmatically add secrets / users to the DB Proxy - I think https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-rds/interfaces/modifydbproxyrequest.html#auth is perhaps a mechanism I could use, but again it doesn't feel like it was really built for this - each time a user registered, it looks like I'd have to basically update the entire proxy, I can't "just" add a single user.Switch away from the "each user in the SaaS has a separate DB user" approach to something else, essentially putting the onus of security back on the application layer (which was my entire goal of using RLS originally).??Note that the AWS documentation on RDS Proxy and adding database users of course says that you can certain add DB users, this I know, the issue is adding users at scale, dynamically, via the SDK - it just doesn't feel like RDS Proxy is designed for this (for understandable reasons I might add, I realize there is probably a fair amount of complexity hidden in RDS Proxy).FollowComment"

Answer: "0RDS Proxy is incompatible with PostgreSQL RLS policies based on anything having to do with the connection (who the role/user is that's connecting or any session variable set on the connection). Why? Because RDS Proxy multiplexes (shares) the connections to the database behind the scenes. Because of this there's no guarantee that your different tenants will be handed different (isolated) connections...The only way to use RDS Proxy with this multi-tenant RLS pattern would be to create an RDS Proxy per tenant... which sort of defeats the purpose of RDS Proxy.You should be able to use IAM database authentication for Aurora/RDS PostgreSQL. Again, you can't use RDS Proxy. You'd create an IAM user per tenant and then create your JDBC database connection in your client with the useAwsIam property set to true and the username set to the tenant's IAM username. Make sure your RLS policies are defined by testing against current_user. Note there are limitations to IAM database authentication and limits on the number of IAM users and roles you can have in an account.As the blog post points out along with the sample code, you can use connection session variables instead of usernames to scale your RLS policies for larger numbers of tenants.CommentShareAWS-User-3855171answered 13 days ago"


Question: How to download encrypted Athena query results in readable format

I want to download query results in Athena to csv in a readable format. The problem is that results are encrypted. What is the best practice to do? Or is it a wrong approach? I just need to share a few tables with colleagues who don't use Athena.FollowComment

Answer: "1You can download results files from the console from the Results pane when using the console or from the query History. For more information, see Downloading query results files using the Athena console..If you dont need your query results to be encrypted in the S3 bucket, you can turn off encrytion too and provide the user access to the S3 bucket they files will be named  named as QueryID.csvNOTE: AWS customers rarely choose this option, when they are sure about their end users with access to the bucket.CommentShareAnanth Tirumanuranswered 6 months agoMikeW 6 months agoThanks. I need encryption. I don't want to turn it off completely.Share0As my goal is to keep query results encryption but at the same time to be able to download results, I do not want to disable encryption. I found that to download query output my user/role needs to be granted access to the KMS key that is used for query results encryption. This should allow downloading files and they will no longer be encrypted on the local disk.CommentShareMikeWanswered 6 months ago"


Question: Impact on the application on reducing IOPS limit

"My question is i have got io2 IOPS of 64000, what might be the impact on the application if i reduce it to 32000 or any figure below 64000.FollowComment"

Answer: "2What does CloudWatch Metrics say about the IOPS that you're consuming? Ref: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using_cloudwatch_ebs.htmlBased on that you might be able to make a decision. If you're still not sure, setting up a test system for short time and stress-testing it is what I'd normally recommend.CommentShareEXPERTBrettski-AWSanswered a month ago1I agree, enabling CloudWatch detailed monitoring of the EC2 and observation of the data points collected in the log streams for disk, network, cpu and install the agent for memory metrics.You mentioned the application. Further analysis can be performed through AWS getting superior insights by generating real-world failure conditions, such as impaired performance of different resources.  AWS Fault Injection Simulations for EC2 and RDS fully managed service running fault injection experiments to improve an application’s performance, observability, and resiliency. FIS simplifies the process of setting up and running controlled fault injection experiments across a range of AWS services, so teams can build confidence in their application behavior.CommentShareWyCliffeanswered a month ago"


Question: how implement forgot password for cognito user by email

I have cognito user pool with users. I need to implement forgot password logic with email also like with username. It's means that you can enter email or username and it will start forgot password procedure. Do you know any ways to do it?FollowComment

Answer: "0If you set the email address as a sign in alias, this can also be used for the forgot password flow [1]. Unfortunately, it looks like you can only set this on creation, so you'd need to create a new user pool and migrate users over.More info in the Aliases section here: https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-attributes.html[1] For the Username parameter, you can use the username or user alias. https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ForgotPassword.htmlCommentShareEdanswered a year ago"


Question: Setting Access-Control-Allow-Credentials header to false on S3

"I've got a resource that needs the cors header Access-Control-Allow-Credentials set to false, but it is unclear how to do that via S3 in the amazon consoleFollowComment"

Answer: 0Have you checked this?https://aws.amazon.com/premiumsupport/knowledge-center/s3-configure-cors/https://docs.aws.amazon.com/AmazonS3/latest/userguide/cors-troubleshooting.htmlhttps://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/understanding-response-headers-policies.html#understanding-response-headers-policies-corsCommentShareRajesh Sanswered 10 months ago


Question: Architecture review for Custom Anomaly AI

I am trying to build a architecture for custom anomaly ai on AWS for my startup. Please let me know if my way of thinking is correct or notData Ingestion: Ingesting the data into AWS S3 in JSON formatData Preprocessing: Converting JSON format to Excel format using AWS Glue and storing it back into S3ML : Using AWS Sagemaker to learn from the Excel format createdQuicksight to show the data for data visualizationis my way of thinking correct here?FollowCommentalatech EXPERT10 days agoMay I ask why converting json to excel?Sharehimanshustallongmailcom 9 days agoit is just my way of thinking. I am open ears to learn in case you have any other idea. But I want to implement Custom Anomaly AI detection.Share

Answer: 0I don't see the point of converting to Excel if you are not going to use a spreadsheet editor to open but instead using Quicksight.Any other format like CSV will allow you better support and parallelism.CommentShareGonzalo Herrerosanswered 9 days ago


Question: RDP disconnects - account issue?

"I'm having a lot of trouble getting an EC2 instance working. I've tried spinning up two different t2.micro server 2019 instances. After a few minutes of using them I get kicked off of RDP and cannot reconnect.It sounds a lot like what is happening in this thread where users have older reactivated accounts that are causing issues with EC2 connectivity. Does anyone know if this is still a potential issue?https://forums.aws.amazon.com/thread.jspa?threadID=239202&start=25&tstart=0I'd really like to switch to a more reliable vps host, but this is not a good start.FollowComment"

Answer: 0Issue solved through account support - it was a "system error on our end".CommentSharekeenmadeanswered 3 years ago


Question: Error when passing s3=None to ExportDefinition

"There seems to be a problem with passing None as a value for the s3 parameter for the ExportDefinition when calling create_message_stream. The following code will produce the error below. But, if I remove the parameter: s3=None altogether, the code runs fine.client.create_message_stream(MessageStreamDefinition(name="WednesDayStream",    # Required.max_size=268435456,    # Default is 256 MB.stream_segment_size=16777216,    # Default is 16 MB.time_to_live_millis=None,    # By default, no TTL is enabled.strategy_on_full=StrategyOnFull.OverwriteOldestData,    # Required.persistence=Persistence.File,    # Default is File.flush_on_write=False,    # Default is false.export_definition=ExportDefinition(    # Optional. Choose where/how the stream is exported to the AWS Cloud.kinesis=None,iot_analytics=None,iot_sitewise=None,s3=None)))2021-02-05T15:09:17.112Z [INFO] (aws.greengrass.TokenExchangeService-lifecycle) com.example.stream.create: shell-runner-start. {scriptName=services.com.example.stream.create.lifecycle.Run.script, serviceName=com.example.stream.create, currentState=STARTING, command=["ln -f -s -t . /greengrass/v2/packages/artifacts/com.example.stream.create/1.0...."]}2021-02-05T15:09:17.436Z [INFO] (Copier) com.example.stream.create: Run script exited. {exitCode=137, serviceName=com.example.stream.create, currentState=FINISHED}2021-02-05T15:09:57.236Z [INFO] (pool-2-thread-26) com.example.stream.create: shell-runner-start. {scriptName=services.com.example.stream.create.lifecycle.Run.script, serviceName=com.example.stream.create, currentState=STARTING, command=["ln -f -s -t . /greengrass/v2/packages/artifacts/com.example.stream.create/1.0...."]}2021-02-05T15:09:57.678Z [WARN] (Copier) com.example.stream.create: stderr. Traceback (most recent call last):. {scriptName=services.com.example.stream.create.lifecycle.Run.script, serviceName=com.example.stream.create, currentState=RUNNING}2021-02-05T15:09:57.683Z [WARN] (Copier) com.example.stream.create: stderr. File "create-stream.py", line 27, in <module>. {scriptName=services.com.example.stream.create.lifecycle.Run.script, serviceName=com.example.stream.create, currentState=RUNNING}2021-02-05T15:09:57.684Z [WARN] (Copier) com.example.stream.create: stderr. s3=None. {scriptName=services.com.example.stream.create.lifecycle.Run.script, serviceName=com.example.stream.create, currentState=RUNNING}2021-02-05T15:09:57.684Z [WARN] (Copier) com.example.stream.create: stderr. TypeError: init() got an unexpected keyword argument 's3'. {scriptName=services.com.example.stream.create.lifecycle.Run.script, serviceName=com.example.stream.create, currentState=RUNNING}2021-02-05T15:09:57.705Z [INFO] (Copier) com.example.stream.create: Run script exited. {exitCode=1, serviceName=com.example.stream.create, currentState=RUNNING}20FollowComment"

Answer: "0Accepted AnswerHi,As the error says, there is no keyword argument called "s3". See the documentation for the arguments which you can use: https://aws.github.io/aws-greengrass-core-sdk-python/_apidoc/greengrasssdk.stream_manager.data.html#greengrasssdk.stream_manager.data.ExportDefinitionCheers,Michael DombrowskiCommentShareEXPERTMichaelDombrowski-AWSanswered 2 years ago0Thanks. I had copied and pasted from the docs here: https://docs.aws.amazon.com/greengrass/v2/developerguide/work-with-streams.htmlIt looks like a type then.CommentShareDarrenBanswered 2 years ago0Thank you very much for pointing that out, I'll make sure our documentation gets updated shortly.Cheers,Michael DombrowskiCommentShareEXPERTMichaelDombrowski-AWSanswered 2 years ago"


Question: Cross country outbound calls initiated from Lambda have issues.

"Since today, some agents complain that they cannot hear the sound of the call they received from the connect outbound initiated by a Lambda (response = cclient.start_outbound_voice_contact....) Specifically called to France from a source in UK. Note that calls from UK to my french mobile in Norway work fine.To workaround, I have changed the source number to a french number but there is many possible combinations and I don' t have source numbers in all the countries I outbound to... Are you aware of limitations or known current issues with international calls ? Two weeks ago I had to remove the Caller ID transfer for similar issue in transfers to Luxembourg.FollowComment"

Answer: 0My workaround is to change the source number to a compatible number with the destination number. I'll probably make a mapping table to avoid the problematic borders.CommentShareSebastienanswered a year ago


Question: Creating AWS PrivateLink connections using AWS CloudFormation

"I'm setting up infrastructure with CloudFormation including a VPC with subnets and an interface VPC endpoint.The endpoint is meant to be deployed using the subnets created as part of the stack but when I start the deployment I get the following error:The VPC endpoint service X does not support the availability zone of the subnet: subnet-YThe endpoint service is deployed in subnets in the following AZs:us-east-1a (use1-az1)us-east-1b (use1-az2)us-east-1c (use1-az4)And the VPC in which I'm testing the CloudFormation stack have the subnets in the following AZs:us-east-1a (use1-az2)us-east-1b (use1-az4)us-east-1c (use1-az6)The only matching are use1-az2 and use1-az4.I would like to know if there's a way to automatically lookup the supported AZs by the service and match them with my subnets' AZs.The idea is to create 4 different environments with the same setup (VPC subnets, endpoint) so as to avoid hard coding the values.FollowComment"

Answer: "0Accepted AnswerYou can call DescribeVpcEndpointServices API via custom resource lambda in your CloudFormation, filtering for the specific service and then get the list of availability zones available to that service. You can then use this information in your other resources within the stack. Example output snippet via the AWS CLI:{    "ServiceDetails": [        {            "ServiceName": "aws.sagemaker.us-east-1.notebook",            "ServiceId": "vpce-svc-0e123abc123198abc",            "ServiceType": [                {                    "ServiceType": "Interface"                }            ],            "AvailabilityZones": [                "us-east-1a",                "us-east-1b",                "us-east-1c",                "us-east-1d",                "us-east-1e",                "us-east-1f"            ],            "Owner": "amazon",            "BaseEndpointDnsNames": [                "vpce-svc-0e123abc123198abc.us-east-1.vpce.amazonaws.com",                "notebook.us-east-1.vpce.sagemaker.aws"            ],            "PrivateDnsName": "*.notebook.us-east-1.sagemaker.aws",            "VpcEndpointPolicySupported": true,            "AcceptanceRequired": false,            "ManagesVpcEndpoints": false,            "Tags": [],            "PrivateDnsNameVerificationState": "verified"        },...}CommentSharecloudy2024answered 3 years ago"


Question: how to remove ip from outlook block list of hotmail

"my aws details were compromised but i remove that user and created new smtp detail but now when i am trying to send email then its going to all email but not on outlook or hotmail or live email as its been registered in block list. i did r & d online where its said that AWS support team take care of block list by own and white-list ip address in case of blocked by any provide. but i am still facing the same issue. i have also pasted the message which receiving from outlook provider. What should I do now?smtp; 550 5.7.1 Unfortunately, messages from IP [...] weren't sent. Please contact your Internet service provider since part of their network is on our block list (S3150). You can also refer your provider to http://mail.live.com/mail/troubleshooting.aspx#errors. [CO1NAM11FT021.eop-nam11.prod.protection.outlook.com]FollowCommentrePost-User-5638062 a year agoI am in the same predicament. Any ideas?Share"


Question: Receiving CARRIER_BLOCKED errors on Pinpoint SMS Service

We are using a 10 digit toll free number for our SMS OTP service. I have noticed that occasionally I do not receive an OTP message after attempting to sign in to our website and have confirmed that Pinpoint is marking these missing OTP's as CARRIER_BLOCKED errors. I have read up on some documentation and believe this may be the case because we are not using a short code as our number. Is this the reason why we are receiving these errors occasionally or could there be another issue here?FollowComment

Answer: "0Did you have your originating phone number registered? I realized that SMS messages originating from unregistered phone numbers are being dropped by carriers recently.The registration process is taking a long time. I wonder why making it so hard for legitimate senders of SMS. All our SMS messages are in response to user's requests, e.g. OTP, so never unsolicited. Our volume is low, and there is never any complaint. I feel that the new system is making life hard for legitimate users, but fails to contain real spammers.CommentSharerePost-User-0672156answered 7 months ago"


Question: How to limit s3 mutlipart upload filesize?

"My customer allows users to upload files via multipart upload to S3. We're using the PHP SDK to create the multipart upload.How is it possible with S3 multipart uploads to limit the maximum filesize?Please suggest a way to implement this, the documentation didn't seem to provide any insight into this.FollowComment"

Answer: "0Are you trying to limit the part size for the multipart (i.e. "no multi-part files larger than 1GB")?  If so, there is a >part_size argument for the MultipartUploader object.<CommentShareDan_Hanswered a year agoAWS-User-8337192 a year agoI'm trying to limit the total size of the multipart upload. So the use case is allowing users to upload files directly to s3 by creating the multipart upload and then giving the user presigned upload urls for the parts which works fine. What I'm doing right now is checking after each part upload if the part list is above the size limit I want to enforce, but I wonder if there is a limit I can set on multipart upload creation.Share"


Question: Request over port 80  A (IPv4) record  did not succeed

"I  built my docker Django app with Django-cookiecutter ( It makes a bootstrap application that is ready for production). The application works fine on my local machine with no errors. I pushed the production images to AWS ECR and used docker context ecs to deploy the application.Domain converdfile.com is registered at namecheap.Created a hosted zone converdfile.com on AWS.On https://dnschecker.org, the A and CNAME, NS and SOA records show as propagated (with the expected four NS values).I imported my SSL certificate to AWS ACM and attached it to the Network load balancer that was created for me when I deployed the docker-compose file.It is attached to port 443.I used https://decoder.link/sslchecker to check my SSL certificate and it works fine.The hosted zone A and CNAME record both point to the NLB that was created.When I go to convertdfile.com it gives me a 404 error pageI used https://letsdebug.net/ to test what is wrong and it saidwww.convertdfile.com has an A (IPv4) record (35.153.250.60) but a request to this address over port 80 did not succeed. Your web server must have at least one working IPv4 or IPv6 address.A timeout was experienced while communicating with www.convertdfile.com/35.153.250.60: Get "http://www.convertdfile.com/.well-known/acme-challenge/letsdebug-test": context deadline exceededI checked my logs and found out that there is something wrong with my traefik container it displayedthis at first"Unable to obtain ACME certificate for domains \"convertdfile.com\": unable to generate a certificate for the domains [convertdfile.com]: error: one or more domains had a problem:\n[convertdfile.com] acme: error: 400 :: urn:ietf:params:acme:error:connection :: 54.210.108.238: Fetching http://convertdfile.com/.well-known/acme-challenge/TMGKwtblVaaHETrz1QkZvNl9s3rLNBJ5Wyza_9DDU5o: Timeout during connect (likely firewall problem), url: \n" routerName=flower-secure-router@file rule="Host(`convertdfile.com`)" providerName=letsencrypt.acmethen later changed to thisCannot retrieve the ACME challenge for token letsdebug-test: cannot find challenge for token letsdebug-test" providerName=letsencrypt.acmeI have troubleshooter all I can think of and don't know what else to doI checked the security group attached to it and it allows in coming traffic on the loadbalncer.Here is docker-compose fileversion: '3'volumes:  production_postgres_data: {}  production_postgres_data_backups: {}  production_traefik: {}services:  django: &django    image: public.ecr.aws/t6g1j7b6/image_converter:django    env_file:      - ./.envs/.production/.django      - ./.envs/.production/.postgres    command: /start    networks:      - proxy      - default  postgres:    image: public.ecr.aws/t6g1j7b6/image_converter:postgres    volumes:      - production_postgres_data:/var/lib/postgresql/data:Z      - production_postgres_data_backups:/backups:z    env_file:      - ./.envs/.production/.postgres  traefik:    image: public.ecr.aws/t6g1j7b6/image_converter:traefik    depends_on:      - django    volumes:      - production_traefik:/etc/traefik/acme    ports:      - "0.0.0.0:80:80"      - "0.0.0.0:443:443"      - "0.0.0.0:5555:5555"networks:  proxy:and here is my traefik.yml filelog:  level: INFOentryPoints:  web:    # http    address: ":80"    http:      # https://docs.traefik.io/routing/entrypoints/#entrypoint      redirections:        entryPoint:          to: web-secure  web-secure:    # https    address: ":443"  flower:    address: ":5555"certificatesResolvers:  letsencrypt:    # https://docs.traefik.io/master/https/acme/#lets-encrypt    acme:      email: "pawo@fessburn.com"      storage: /etc/traefik/acme/acme.json      # https://docs.traefik.io/master/https/acme/#httpchallenge      httpChallenge:        entryPoint: webhttp:  routers:    web-secure-router:      rule: "Host(`convertdfile.com`)"      entryPoints:        - web-secure      middlewares:        - csrf      service: django      tls:        # https://docs.traefik.io/master/routing/routers/#certresolver        certResolver: letsencrypt    flower-secure-router:      rule: "Host(`convertdfile.com`)"      entryPoints:        - flower      service: flower      tls:        # https://docs.traefik.io/master/routing/routers/#certresolver        certResolver: letsencrypt  middlewares:    csrf:      # https://docs.traefik.io/master/middlewares/headers/#hostsproxyheaders      # https://docs.djangoproject.com/en/dev/ref/csrf/#ajax      headers:        hostsProxyHeaders: ["X-CSRFToken"]  services:    django:      loadBalancer:        servers:          - url: http://django:5000    flower:      loadBalancer:        servers:          - url: http://flower:5555tls:  options:    default:      cipherSuites:        - TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384        - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384        - TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256        - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256        - TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305        - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305      minVersion: VersionTLS12providers:  # https://docs.traefik.io/master/providers/file/  file:    filename: /etc/traefik/traefik.yml    watch: trueIf there is something I am doing wrong or missing please help out. I have been on this for almost a week now. I am a beginner and don't have anywhere else to turn to.FollowComment"

Answer: "0As per your configuration, your NLB accepts connections just on 443(https). As per the logs, the request was made through 80(http) which the NLB is not setup to handle. Could you kindly post the NLB logs and where exactly you are seeing the cert error?CommentShareKumudhan Cherarajananswered 2 months ago"


Question: Migration from Aurora to Aurora Serverless?

A customer is looking to move from Aurora to Aurora Serverless and is asking what the best way to migrate is. There doesn't appear to be much guidance in our documentation/blogs. The best my customer could find was https://www.dr-chuck.com/csev-blog/2018/07/experiences-with-amazon-aurora-serverless/ suggesting that mysqldump and restore was the best approach and DMS was not a good option.Do we have any guidance on this? The customer setup for evaluation is pretty simple - db.t2.small running Aurora MySQL 5.6.10a with two active databases.FollowComment

Answer: "0Accepted AnswerIf you have a current provisioned Aurora cluster running, you can take a latest snapshot and restore it to the Aurora Serverless. While restoring, you would see the options in  Capacity Type "Provisioned and Serverless" from which you can choose 'Serverless'.CommentShareEXPERTRizwan_Manswered 4 years ago"


Question: AWS neptune gremlin 3.4.x javascript/node.js valueMap() Not returning map

"I upgraded a lambda (node.js 10.x) from gremlin 3.2.9 to 3.4.4 andvalueMap()no longer returns data.  values() does as do most other >functions (though cap() with multiple columns does not).  The return often appears to have data, e.g.JSON.stringify(data)will show a >structure but no data --  the array is blank.  I have tried dozens of independent queries (none now work though they do in 3.2.9) as well as >those same queries from the command line (all work!).  Any help is greatly appreciated!FollowComment"

Answer: "0Accepted AnswerHi,I've seen similar issues before related to GraphSON v3 not being returned from Lambda.  Starting in Gremlin 3.3.5, the default serialization format for Gremlin is now GraphSON v3.  Before that, it was GraphSON v2.  Do you mind trying to change your serialization format to v2 and seeing if that fixes the issue?More details in the StackOverflow post here:  https://stackoverflow.com/questions/54226192/issue-with-project-by-in-gremlin-js-3-4-0CommentShareTaylor-AWSanswered 3 years ago0Thanks!  This was exactly the solution!!altering the connection to fall back to GraphSON v2 was the charmconst dc = new DriverRemoteConnection( `ws://my-neptune-cluster.us-east-1.neptune.amazonaws.com:8182/gremlin`, *{ mimeType: "application/vnd.gremlin-v2.0+json" } // Fall back to GraphSON v2*);Really appreciate the help!Edited by: gcolclough on Dec 12, 2019 8:22 PMCommentSharegcolcloughanswered 3 years ago"


Question: Amazon S3 connectors. Pros and cons

"Hi Team,I couldn't find list/details of the tools to which Amazon S3 integrates with by using a S3 connector. Which tools integrate with S3 to provide in-place querying of S3 data (i.e. data shouldn't move out from S3 in order to be queried).  How much data can be queried at a time? Does it support joins? What data formats can be queried ? Any pointers would really help. Thank youFollowComment"

Answer: "0Amazon Athena, is a distributed that will allow you to use SQL to query S3 data in place.There are no pre-defined limit on size of data, yes it supports joins and you can find supported data format here.To understand how to create tables for Athena (only metadata, data is not moved) please refer to this documentation page.For additional information you can look at the FAQ.If you are already using Amazon Redshift it also can access data in place from S3, using Amazon Redshift Spectrum.CommentShareEXPERTFabrizio@AWSanswered a year agoMayura a year agoThanks Fabrizio. Sorry, I should have mentioned that we are looking at tools other than Athena/Redshift to which S3 can connect using connectors. We are already using Athena/Redshift. Where can I get more information on S3 connectors? Please guideShare"


Question: Snapshots billing

"Hello,I have an EBS volume of 200 gb that has a data consumption of 50 GB.Question---- when I take first Snapshot will it be for full volume size that's 200 GB or is it of actual data that's 50 GB..ThanksFollowComment"

Answer: "0Accepted AnswerThanks for the clear description. In your case, 50 GB will be billed.Check https://aws.amazon.com/ebs/pricing/ and https://aws.amazon.com/premiumsupport/knowledge-center/ebs-snapshot-billing/ for more information.Example 7 – EBS SnapshotsSnapshot storage is based on the amount of space your data consumes in Amazon Simple Storage Service (Amazon S3). Because Amazon EBS does not save empty blocks, it is likely that the snapshot size will be considerably less than your volume size.CommentShareweidianswered 8 months ago"


Question: SSM Policy for Instances Assumed to Be Compromised

"If I wanted to apply a very limited custom SSM policy to instances that were assumed to be compromised, what could I remove from the AmazonSSMManagedInstanceCore managed policy? The basic need is to be able to patch the instance, run commands, change a configuration (e.g. local config file), and initiate a remote session.FollowComment"

Answer: "2Accepted AnswerIn order to patch instances, run commands, change a configuration and initiate a remote session, you would need to retain the following permissions from the AmazonSSMManagedInstanceCore policy:ssm:DescribeAssociationssm:GetDeployablePatchSnapshotForInstancessm:GetDocumentssm:DescribeDocumentssm:GetManifestssm:GetParameterssm:GetParametersssm:ListAssociationsssm:PutInventoryssm:PutComplianceItemsssm:PutConfigurePackageResultssm:UpdateAssociationStatusssm:UpdateInstanceAssociationStatusssm:UpdateInstanceInformationssmmessages:CreateControlChannelssmmessages:CreateDataChannelssmmessages:OpenControlChannelssmmessages:OpenDataChannelec2messages:AcknowledgeMessageec2messages:DeleteMessageec2messages:FailMessageec2messages:GetEndpointec2messages:GetMessagesec2messages:SendReplyYou could remove permissions that grant broader access to other SSM resources or functionalities that are not needed in a compromised instance situation. For example, you could probably remove permissions like ssm:ListInstanceAssociations or ssm:ListComplianceItems.CommentShareEXPERTsedat_salmananswered 16 days ago"


Question: Cannot delete model in AWS Amplify DataStore/ Appsync

"I am writing an app with Amplify and I am unable to delete a Model called booking. Every booking has on client and one tutor relationship:type Client @model @auth(rules: [{allow: groups, groups: ["admins"], operations: [read, create, update, delete]}, {allow: private}, {allow: public, operations: [read]}]) {  id: ID!  email: AWSEmail!  firstName: String!  lastName: String!  authToken: String!  phone: AWSPhone  credits: Float!  Students: [Student] @hasMany(indexName: "byClient", fields: ["id"])}type Tutor @model @auth(rules: [{allow: public, operations: [read, create, update]}, {allow: groups, groups: ["admins"], operations: [read, create, update, delete]}, {allow: groups, groups: ["tutors"], operations: [read, update, delete, create]}, {allow: private}]) {  id: ID!  email: AWSEmail!  firstName: String!  lastName: String!  authToken: String!  phone: AWSPhone  isRemote: Boolean!  isInPerson: Boolean!  hourlyRate: Float!  grade: String!  isSearchable: Boolean!  isActive: Boolean!  location: String  resumeUrl: String  transcriptUrl: String  photoUrl: String  bio: String  subjects: [String]  schoolAttended: String}type Booking @model @auth(rules: [{allow: private}]) {  id: ID!  startDateTime: AWSDateTime!  duration: Int!  Tutor: Tutor! @hasOne  bookingCode: String!  amount: Float!  discount: Float!  clientNotes: String  tutorNotes: String  tutorPaid: Boolean!  clientPaid: Boolean!  resources: String  Client: Client @hasOne  studentName: String  tutorRating: Int  clientRating: Int  bookingType: String  tutorPayAmount: Float  tip: Float  transactionId: String  tutorMileage: Float  meetingUrl: AWSURL  hwFiles: [String]  resourceFiles: [String]  meetingInstructions: String  sessionTaught: Boolean}When I try to delete with App sync:const bookingDetails: DeleteBookingInput = {                id: selectedBookingId,              };              const deletedBooking = await API.graphql<                GraphQLQuery<DeleteBookingMutation>              >({                query: mutations.deleteBooking,                variables: { input: bookingDetails },              });I get this error:Then when I try to delete using DataStore,const b = await DataStore.delete(Booking, selectedBookingId);I get this error:Error: Namespace Resolver for 'Object' not found! This is probably a bug in '@amplify-js/datastore'. at IndexedDBAdapter.namespaceResolver (http://localhost:3000/static/js/bundle.js:84021:11) at IndexedDBAdapter.getIndexKeyValuesFromModel (http://localhost:3000/static/js/bundle.js:88981:30) at IndexedDBAdapter.<anonymous> (http://localhost:3000/static/js/bundle.js:90170:30) at step (http://localhost:3000/static/js/bundle.js:229816:17) at Object.next (http://localhost:3000/static/js/bundle.js:229765:14) at fulfilled (http://localhost:3000/static/js/bundle.js:229724:24)message: "Namespace Resolver for 'Object' not found! This is probably a bug in '@amplify-js/datastore'."stack: I am able to delete the booking usually from the Amplify console, but even that has failed occasionally. How do I work around this?FollowComment"

Answer: "0Based on your schema, you have a one-to-one relationship between the Booking, Client, and Tutor models. When you try to delete a Booking, it's possible that it fails due to the relationships with the Client and Tutor models.To resolve this issue, you can modify your schema to use the @connection directive instead of @hasOne. This will help you establish a one-to-one relationship between the models without causing errors when deleting related items.Update your schema as follows:type Client @model @auth(rules: [{allow: groups, groups: ["admins"], operations: [read, create, update, delete]}, {allow: private}, {allow: public, operations: [read]}]) {  id: ID!  email: AWSEmail!  firstName: String!  lastName: String!  authToken: String!  phone: AWSPhone  credits: Float!  Students: [Student] @hasMany(indexName: "byClient", fields: ["id"])  booking: Booking @connection}type Tutor @model @auth(rules: [{allow: public, operations: [read, create, update]}, {allow: groups, groups: ["admins"], operations: [read, create, update, delete]}, {allow: groups, groups: ["tutors"], operations: [read, update, delete, create]}, {allow: private}]) {  id: ID!  email: AWSEmail!  firstName: String!  lastName: String!  authToken: String!  phone: AWSPhone  isRemote: Boolean!  isInPerson: Boolean!  hourlyRate: Float!  grade: String!  isSearchable: Boolean!  isActive: Boolean!  location: String  resumeUrl: String  transcriptUrl: String  photoUrl: String  bio: String  subjects: [String]  schoolAttended: String  booking: Booking @connection}type Booking @model @auth(rules: [{allow: private}]) {  id: ID!  startDateTime: AWSDateTime!  duration: Int!  bookingCode: String!  amount: Float!  discount: Float!  clientNotes: String  tutorNotes: String  tutorPaid: Boolean!  clientPaid: Boolean!  resources: String  studentName: String  tutorRating: Int  clientRating: Int  bookingType: String  tutorPayAmount: Float  tip: Float  transactionId: String  tutorMileage: Float  meetingUrl: AWSURL  hwFiles: [String]  resourceFiles: [String]  meetingInstructions: String  sessionTaught: Boolean!  clientId: ID! @hasOne  tutorId: ID! @hasOne}Based on your schema, you have a one-to-one relationship between the Booking, Client, and Tutor models. When you try to delete a Booking, it's possible that it fails due to the relationships with the Client and Tutor models.To resolve this issue, you can modify your schema to use the @connection directive instead of @hasOne. This will help you establish a one-to-one relationship between the models without causing errors when deleting related items.Update your schema as follows:graphqlCopy codetype Client @model @auth(rules: [{allow: groups, groups: ["admins"], operations: [read, create, update, delete]}, {allow: private}, {allow: public, operations: [read]}]) {id: ID!email: AWSEmail!firstName: String!lastName: String!authToken: String!phone: AWSPhonecredits: Float!Students: [Student] @hasMany(indexName: "byClient", fields: ["id"])booking: Booking @connection}type Tutor @model @auth(rules: [{allow: public, operations: [read, create, update]}, {allow: groups, groups: ["admins"], operations: [read, create, update, delete]}, {allow: groups, groups: ["tutors"], operations: [read, update, delete, create]}, {allow: private}]) {id: ID!email: AWSEmail!firstName: String!lastName: String!authToken: String!phone: AWSPhoneisRemote: Boolean!isInPerson: Boolean!hourlyRate: Float!grade: String!isSearchable: Boolean!isActive: Boolean!location: StringresumeUrl: StringtranscriptUrl: StringphotoUrl: Stringbio: Stringsubjects: [String]schoolAttended: Stringbooking: Booking @connection}type Booking @model @auth(rules: [{allow: private}]) {id: ID!startDateTime: AWSDateTime!duration: Int!bookingCode: String!amount: Float!discount: Float!clientNotes: StringtutorNotes: StringtutorPaid: Boolean!clientPaid: Boolean!resources: StringstudentName: StringtutorRating: IntclientRating: IntbookingType: StringtutorPayAmount: Floattip: FloattransactionId: StringtutorMileage: FloatmeetingUrl: AWSURLhwFiles: [String]resourceFiles: [String]meetingInstructions: StringsessionTaught: Boolean!clientId: ID! @hasOnetutorId: ID! @hasOne}After updating your schema, you need to run amplify push to apply the changes to your backend.Now, when you delete a Booking, it should no longer fail due to the relationships with the Client and Tutor models. Make sure to update your queries and mutations in your code to reflect the new schema changes.CommentShareEXPERTsedat_salmananswered 2 months ago"


Question: Lambda billing duration for normal traffic

"While I made single request at a time, lambda duration is 500 ms or less. But when I set 50 users concurrency and 10 users started per sec (spawn rate) in LOCUST, lambda duration would be 15000 ms. My Mongodb free tier is 500 connection limit and limit is not reached anytime. When I give traffic , billing duration would be more but 500 ms for very small traffic. Is it lambda side problem or Mongodb side problem?**I have made load testing on single api.FollowComment"

Answer: 0Accepted AnswerIs it possible that as your concurrency goes up the MongoDB is taking longer to respond? I would instrument your Lambda function - you can do this by using log statements inside the function and measuring the time between them; or you can use something like X-Ray.CommentShareEXPERTBrettski-AWSanswered a year ago


Question: Only one viewable SRT connection

"SetupI have a hardware encoder (Caller) streaming SRT video to MediaConnect (flow source: Listener). I then setup an Output in this flow to  SRT Listener.ProblemWhen I connect to that Output SRT Listener from a SRT player (caller) on my LAN, I can only make one connection at a time. When I try and make second connection from a second player, the second player doesn't connect (it just hangs). The players I tried are OBS VLC input, ffplay, and  Larix Player. All the same results.I also tried making a second connection from a different WAN address (while the first connection was connected) and it also didn't work.FollowComment"

Answer: "0Accepted AnswerHello.You can only do one SRT connection per output, but you can have multiple outputs on your flow. So the solution is to create more outputs on your flow and connect to those instead.CommentShareDirkjan_Banswered 6 days ago0Hi,We will need to review Flow details for your MediaConnect to understand the issue better.Feel free to submit a ticket with our MediaConnect Support Team with all the relevant details, ARNs etc.CommentShareSUPPORT ENGINEERRohit_SCanswered 6 days ago"


Question: How can I stop cloud watch agent for just part of metrixes not all

I run Cloud Watch Agent on my ubuntu on ec2 instance to get matrix of mem_used_percent. But unintentionally it started to collect matrix of disk and I want Cloud Watch Agent to stop send information of disks. Is there any solution to stop just part of collection of matrix or should I just unistall it and set up again ?FollowComment

Answer: 1Accepted AnswerThe default predefined metric set (basic) includes disk and memory - see here. You should create a configuration file for the agent which includes only the metrics you want and configure the agent to use that fileCommentShareEXPERTPeter_Ganswered a year agoAWS-User-2169346 a year agoThank you for your answer.I'll check it out and create JSON file for that.Share


Question: [Bug Report] Route 53 Hosted Zone - Search/Filter is not working with new console

"Hello,We have thousands of records in a hosted zone. I'm unable to filter any of the records using specific words from the new console. Tried using prefix too, no luck.Therefore I had to switch back to old GUI(aka Console). Please fix this bug. Please email me, if you need more details. Or make this post as private, so that I can post screenshots.Thanks!FollowCommentHemant Chugh 2 months agoLog in to your AWS web consoleSelect Route53 serviceSelect Hosted Zones in the left paneSelect aa.co (but do not click on the domain name, just select the radio button)Notice the 4 name servers in the right pane.Next, go to domain registrar site (in your case stay in Route53), log in and configure name servers for your domain. In Route53: select 'Registered domains' in the left pane, click on your domain name, verify that in the upper right you have name servers from step 5, if they don't exactly match, click 'Add/Edit Name servers' and enter name servers from step 5)ShareAWS-User-0417258 2 months ago@hemant What you are suggesting is irrelevant. I'm reporting a bug not technical assistance.Share"


Question: Issues with ongoing loads/replication/delta loads using DMS

"Need your help as this falls outside my expertise, here is my customer question:Currently we are using AWS Database Migration service (DMS) to do onetime loads and ongoing loads into red-shift from different Sources.DMS is great when we doing One time loads. However there are some issues with ongoing loads/ replication/ delta loads.Sometimes counts are not matching with the error messages log sequence file is missing, even though that particular log file exists on the server.Solution from support is restart the task. Since we are using this tool in production for daily feeds, restarting the task whenever something issues arises is not a good idea.Coming to the SQL server, again one time loads are fine with minor problems but live replication needs too many functions on the SQL server like CDC, Replication etc.Since Our SQL servers are on  AlwaysOn tech, adding replication to the server will add load, increases latency and requires more man power to fix the replication issues. Always on is more advanced feature than replication with less maintenance than replication.Are there any alternative tools to avoid all these problems? something like AWS Glue, AWS data pipeline, any other third party tools.FollowComment"

Answer: "0Accepted AnswerAlmost all the vendors supporting ongoing replication are based on transaction log- a feature that Oracle, SQL Server and MySQL have. This applies to AWS DMS as well as 3rd party tools such as Attunity.If real time replication is not a requirement then one option is to use a JDBC connector program that can be scheduled to run. The rational of such program is to track changes according to an incremental column in the table- either timestamp or unique sequential value. This is similar to https://redshiftsupport.matillion.com/customer/portal/articles/2955330.CommentShareAWS-User-9244242answered 4 years ago"


Question: Domain transfer not finished correctly

"Hi,We've requested to transfer a domain name from another registrar onto Route 53. The unlock and further confirmation of the transfer via E-mail passed well. AWS Route 53 shows now the registered domains with the one in the list. I am able to change DNS records via UI on AWS console, but dig shows no changes. I've contacted Namecheap (ex-registrar) technical support and they confirmed that the transfer should have been processed successfully, but the name servers are still pointing to Namecheap's BaseDNS. While the AWS Route 53 shows default name servers:dns1.registrar-servers.comdns2.registrar-servers.comPending requests in the Domains also shows nothing, so I assumed that the transfer should have finished successfully. Now I wonder what has to be fixed now so that I regain control over DNS records back?FollowComment"

Answer: "0Hi,To make Route 53 the DNS service for your domain, you need to update the domain registration to use the name servers for your Route 53 hosted zone. Here's how you do that:Get the name servers that Route 53 assigned to the hosted zone when you created it. See "Getting the Name Servers for a Public Hosted Zone" in the Route 53 Developer Guide:https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/GetInfoAboutHostedZone.htmlUpdate the domain registration to use the four name servers that you got in step 1. See "Adding or Changing Name Servers and Glue Records for a Domain":https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/domain-name-servers-glue-records.htmlScottCommentShareEXPERTAWS-User-6179575answered 3 years ago0I have found the issue. Indeed what I needed was just to copy-paste the NS record values from the Hosted Zones DNS records to the Registered Domains name-servers. After that all semi-automatic propagation of required DNS records in the WorkMail and other services worked fine.CommentSharetrolololanswered 3 years ago"


Question: Getting Crc32MismatchException when using dynamodb enhanced client when we are using queryPaginator

Answer: "0The Crc32MismatchException occurs when the CRC32 checksum calculated for the response body doesn't match the expected checksum value.This could be caused by network issues, a corrupt response body, or an issue with the AWS SDK itself.Enable debug logging for the AWS SDKSystem.setProperty("software.amazon.awssdk.services.dynamodb.logging","DEBUG");Or as a last resortDisable CRC32 checksum validationSystem.setProperty("software.amazon.awssdk.checksumValidationEnabled", "false");CommentShareEXPERTsedat_salmananswered a month ago"