Question: API Gateway generated SDK: "No such host is known."

"I've generated an SDK via the API Gateway UI, and when building a project with it as a dependency per the SDK instructions I get the following error when trying to hit any of the APIs:Exception in thread "main" com.amazonaws.SdkClientException: Unable to execute HTTP request: No such host is known (******.execute-api.eu-west-1.amazonaws.com)at com.amazonaws.http.AmazonHttpClient$RequestExecutor.handleRetryableException(AmazonHttpClient.java:1189)at com.amazonaws.http.AmazonHttpClient$RequestExecutor.executeHelper(AmazonHttpClient.java:1135)at com.amazonaws.http.AmazonHttpClient$RequestExecutor.doExecute(AmazonHttpClient.java:784)at com.amazonaws.http.AmazonHttpClient$RequestExecutor.executeWithTimer(AmazonHttpClient.java:752)at com.amazonaws.http.AmazonHttpClient$RequestExecutor.execute(AmazonHttpClient.java:726)at com.amazonaws.http.AmazonHttpClient$RequestExecutor.access$500(AmazonHttpClient.java:686)at com.amazonaws.http.AmazonHttpClient$RequestExecutionBuilderImpl.execute(AmazonHttpClient.java:668)at com.amazonaws.client.ClientHandlerImpl.doInvoke(ClientHandlerImpl.java:204)at com.amazonaws.client.ClientHandlerImpl.invoke(ClientHandlerImpl.java:185)at com.amazonaws.client.ClientHandlerImpl.execute(ClientHandlerImpl.java:93)at com.amazonaws.opensdk.protect.client.SdkClientHandler.execute(SdkClientHandler.java:42)at com.configuration.api.ConfigurationClient.getAllResults(ConfigurationClient.java:103)at connection.main(MainClass.java:15)Caused by: java.net.UnknownHostException: No such host is known (******.execute-api.eu-west-1.amazonaws.com)at java.base/java.net.Inet6AddressImpl.lookupAllHostAddr(Native Method)at java.base/java.net.InetAddress$PlatformNameService.lookupAllHostAddr(InetAddress.java:929)at java.base/java.net.InetAddress.getAddressesFromNameService(InetAddress.java:1515)at java.base/java.net.InetAddress$NameServiceAddresses.get(InetAddress.java:848)at java.base/java.net.InetAddress.getAllByName0(InetAddress.java:1505)at java.base/java.net.InetAddress.getAllByName(InetAddress.java:1364)at java.base/java.net.InetAddress.getAllByName(InetAddress.java:1298)at com.amazonaws.SystemDefaultDnsResolver.resolve(SystemDefaultDnsResolver.java:27)at com.amazonaws.http.DelegatingDnsResolver.resolve(DelegatingDnsResolver.java:38)at org.apache.http.impl.conn.DefaultHttpClientConnectionOperator.connect(DefaultHttpClientConnectionOperator.java:112)at org.apache.http.impl.conn.PoolingHttpClientConnectionManager.connect(PoolingHttpClientConnectionManager.java:374)at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)at java.base/java.lang.reflect.Method.invoke(Method.java:566)at com.amazonaws.http.conn.ClientConnectionManagerFactory$Handler.invoke(ClientConnectionManagerFactory.java:76)at com.amazonaws.http.conn.$Proxy3.connect(Unknown Source)at org.apache.http.impl.execchain.MainClientExec.establishRoute(MainClientExec.java:393)at org.apache.http.impl.execchain.MainClientExec.execute(MainClientExec.java:236)at org.apache.http.impl.execchain.ProtocolExec.execute(ProtocolExec.java:186)at org.apache.http.impl.client.InternalHttpClient.doExecute(InternalHttpClient.java:185)at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:83)at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:56)at com.amazonaws.http.apache.client.impl.SdkHttpClient.execute(SdkHttpClient.java:72)at com.amazonaws.http.AmazonHttpClient$RequestExecutor.executeOneRequest(AmazonHttpClient.java:1311)at com.amazonaws.http.AmazonHttpClient$RequestExecutor.executeHelper(AmazonHttpClient.java:1127)... 11 moreFollowComment"

Answer: "0Are you able to get a successful response when you run a DNS lookup from other servers? I recommend verifying if the DNS name is resolvable and if yes, see if the issue is specific to the server where the SDK/project is deployed. If it is specific to a particular network, check on the DNS servers being used and see why they are not able to resolve.nslookup <apiid>.execute-api.eu-west-1.amazonaws.comCommentShareTaka_Manswered 6 months ago"


Question: Can I split an AWS Direct Connect connection and assign specific bandwidths to different resources?

"We're looking at using AWS Direct Connect to connect our on-premises data center with AWS.  Is it possible to split the connection bandwidth between different resources and assign specific bandwidths to each resource?For example: We have two workloads—production and development. Both workloads are used for ingesting data from on-premises Kafka using a Direct Connect connection. Is there a way to ensure that the development account consumes only 10% of the Direct Connect connection bandwidth and can't consume more, since going over 10% may affect the production workload?FollowComment"

Answer: 0Accepted AnswerConsider using two separate Direct Connect connections for each workload. Using two connections will allow you to assign a different bandwidth to each workload.CommentShareEXPERTVKanswered 3 years ago


Question: How to view the files in Glacier vault using CLI

"I want to get the list of files in glacier valut using cli, if any commands share me here.FollowComment"

Answer: "0To list the vaults in your AWS account, run the " list-vaults "command.Note: If you don't see any vaults listed, run the configure command. Confirm that the correct Region is configured for the AWS CLI.Also make sure that you are running the most recent version of the AWS CLI.Link- https://awscli.amazonaws.com/v2/documentation/api/latest/reference/glacier/list-vaults.htmlPlease click accepted answer if the solution helped you.CommentShareSUPPORT ENGINEERAWS-User-Chiraganswered 10 months agoAWS-User-3131118 9 months agoI was expecting to view the files inside vault, not the list of vaults in my account.If i could see the file in the vault so that i can delete the unwanted files in valut to reduce the size of vault.Share"


Question: Metric Filter for media live running channel with no stream

"I am trying to create an alarm on the metric filter for every 2 hours. I need it for stopping channels that are running but are not receiving streams.What I need is the query for channels in a RUNNING state, where the SET event for the alarm message was received for X minutes and where a CLEARED event was not received (consecutive order).Something like this: { ($.detail-type= "MediaLive Channel Alert") && ($.detail.alert_type= "RTMP Stream Not Found") && ($.detail.alarm_state= "SET") && ($.resources[0]= "")}FollowComment"


Question: Kafka Monitoring Dashboard question - CPU Usage by Broker

Does CPU usage by broker in the Kafka Monitoring section of a cluster correspond the CPU System or CPU User metrics available from the Kafka cluster ? I have a dashboard with these two metrics however they don't correlate to what I see in the CPU usage by broker.(0.2% in Kafka CPU Usage by Broker VS 8% in the metrics)ThanksJasonFollowComment

Answer: 0We show the CpuSystem metric in the console. You can view the detailed metrics in CloudWatch by clicking the icon on the top right of the monitoring card in the console. Thanks for the feedback we will update this to make it more clear.CommentShareAWS-User-6643836answered 4 years ago


Question: invoking lambda function on receiving email by ses

i used an gmail for aws ses email and got it verified.i then created a rule which invokes lambda function and it added the permission. i have attached awsSesfull access to lambda function.So now if i send an email to the aws ses verified email the lambda function is not invokingFollowComment

Answer: "0In the Lambda console it will show (in the function overview) which services are allowed to invoke it. Does SES show there? There are instructions in the documention for how to give permission for SES to invoke Lambda.Otherwise, check the rule in the "Email receiving" part of the SES console to make sure that the correct Lambda function is selected.Another way to do this is to have SES deliver the mail to S3; then use a trigger from S3 to Lambda. It's an extra step but it gets around the Lambda payload limits for large emails.CommentShareEXPERTBrettski-AWSanswered 2 months agorePost-User-3934257 2 months agoi created a rule in aws ses to store the incoming email to s3 bucket with appropriate name and permissions and also set up sns.When i sent  an email containing spreadsheet attachment to aws ses email sns notification was stored in s3,but not the spreadsheet.please can u help the resolve the issueShareBrettski-AWS EXPERT2 months agoDid the Lambda function get triggered when the email was saved in S3? If not, check the configuration of the bucket to make sure that it covers the correct prefix (where the emails are configured to be saved) and that it is triggering the correct Lambda function.SharerePost-User-3934257 2 months agoi didnt set up lambda function trigger,but the incoming ses email is not stored in s3 bucket.only the sns topic notification is stored in s3 bucket but not the attachment.how to attach iam roles to aws sesShareBrettski-AWS EXPERT2 months agoIn the past, I've set up direct SES delivery to S3 because it handles larger emails better. From there, you can trigger a Lambda function when a message is delivered.Share"


Question: Configure brokers for SimpleAclAuthorizer?

"In MSK, is it possible to customize broker properties like authorizer.class.name to enable the built-in kafka.security.auth.SimpleAclAuthorizer? And, add a listener with the SASL_PLAINTEXT protocol? If so, where do I set these?Edited by: kinghuang970 on May 6, 2019 2:34 PMFollowComment"

Answer: "0Accepted AnswerHello, this is not yet possible with the current version of MSK. Stay tuned for updates in this space. Thanks.CommentShareAWS-User-0635593answered 4 years ago"


Question: AWSServiceRoleForAmazonOpenSearchService has been taken  in this account

"Hi, i'm trying to run the next command from Cloud9 env, and it's getting an issue:$ aws iam create-service-linked-role --aws-service-name opensearchservice.amazonaws.comAn error occurred (InvalidInput) when calling the CreateServiceLinkedRole operation: Service role name AWSServiceRoleForAmazonOpenSearchService has been taken in this account, please try a different suffix.i've tried to unset the credentials variables and export too again, but the issue continuesor how to know  which services this account has taken? (with some CLI command), thanksFollowComment"

Answer: "0Accepted AnswerLooking at the contents of the command, it appears to be an error that occurs when there is already a service linkroll for opensearchservice.amazonaws.com.Since IAM roles cannot be created with the same name, try adding a custom prefix using the "--custom-suffix" command option.https://awscli.amazonaws.com/v2/documentation/api/latest/reference/iam/create-service-linked-role.htmlCommentShareEXPERTRiku_Kobayashianswered 15 days ago0This error indicates that the role is already there.You may want to look in IAM and look for the role.  There can only be one ServiceLinked role with that name per account.You can learn more at https://docs.aws.amazon.com/IAM/latest/UserGuide/using-service-linked-roles.htmlHope this helps!CommentShareCarlos del Castilloanswered 15 days ago"


Question: Addressing Verification Challenges and Seeking a Way Forward for Our AWS Account

"Dear AWS Support Team,We are writing to express our concerns regarding the account suspension we have experienced due to the verification process. We understand the importance of maintaining a secure and reliable platform, but we feel that the current situation is causing unnecessary disruptions to our business operations without providing a clear way forward.We believe that there may be misunderstandings or incorrect information involved in our account's suspension, and we kindly request your assistance in resolving these issues. We are committed to working with the AWS team to provide any necessary documentation or information to clarify our account's standing and ensure compliance with AWS policies.We kindly ask that you review our case and provide us with guidance on the next steps to take in order to reactivate our account. A swift resolution would be greatly appreciated, as it would allow us to continue utilizing the valuable services offered by AWS, and support our business growth and technical requirements.Thank you for your attention to this matter. We hope to find a positive and constructive solution to our account suspension.Sincerely,Mickey PatelFollowComment"

Answer: "0Hi Mickey,I'm sorry to see you're having trouble with verification. Our Account Support team is best equipped to assist, and I've made sure to pass along these concerns to them.In order to have this safely addressed, please continue to communicate directly through your open case correspondence. You can access your case through our Support Center, here: http://go.aws/support-center. Thank you.— Ann D.CommentShareEXPERTAWS Support - Annanswered 2 months ago"


Question: Deleting a S3 bucket of size 500 TB

I want to delete a S3 bucket whose size is 500TB. What is the fastest and cost effective solution for this?FollowComment

Answer: "1Maybe not the fastest, but if I have a bucket with a large amount of objects, I create a lifecycle policy to expire the objects.CommentShareEXPERTkentradanswered 2 months agoEXPERTalatechreviewed 2 months ago0Accepted AnswerTo delete an AWS S3 bucket with 500TB of data, the fastest and most cost-effective solution would be to use the S3 Lifecycle configuration.The S3 Lifecycle configuration can be used to automate the deletion of objects based on their age or version. By setting up a Lifecycle policy to expire objects in the bucket, you can gradually delete the contents of the bucket over time or in specified timeframe.Here is a step-by-step guide to help you:Log in to the AWS Management Console and navigate to the S3 bucket you want to delete.Open the "Lifecycle" configuration tab for the bucket.Create a new lifecycle policy, and set the expiration rules to delete objects that are over a certain age or version.Set the expiration period to a time frame that makes sense for your data, such as 1day, 2day or 7 days.Save the policy and apply it to the bucket.With this policy in place, S3 will automatically delete the objects that meet the expiration criteria, and you can gradually reduce the size of the bucket over time. This is a more cost-effective, less time-consuming and stress-less approach as amazon takes care of running this process rather than manually deleting all of the objects at once as manual processes can break in middle for many reasons.Note that you may still incur charges for the data storage during the lifecycle policy period, so you may want to ensure that your policy's time frame is optimal, however you will not be charged for using Lifecycle Configuration.References:Setting lifecycle configuration on a bucket - https://docs.aws.amazon.com/AmazonS3/latest/userguide/how-to-set-lifecycle-configuration-intro.htmlNote: Please upvote/accept if you like my answer.CommentShareNIHAR-AWSanswered 2 months ago"


Question: Best configuration for inferencing with PyTorch models

"I'm trying to make a public facing web app that allows for inferencing, with probably ten or so available models to my users.  My initial thought was that I would have a front-end basic webpage, that communicates with a REST API server on an EC2 instance. But since I started planning this out a bit more, I found a lot of info about various AWS products, and they seem interesting but it's all pretty over my head.I initially came the site because I heard about elastic inferencing.  After I researched elastic inferencing more, it seems like Amazon is encouraging people to use Inferentia2 instead. I realize that I could just do an EC2 instance, but I don't know how well that'll work for scaling if this app I'm making becomes popular. I've also read a bit about SageMaker, API Gateway, and even "serverless" options like Lambda, but I don't really know if those would integrate well with low cost inferencing products that AWS offers.Any advice on setting this kind of thing up?FollowComment"

Answer: "0Hi, this guide may be a good starting point: https://docs.aws.amazon.com/sagemaker/latest/dg/deploy-model.htmlThis recent post may also help: https://aws.amazon.com/blogs/machine-learning/achieve-high-performance-with-lowest-cost-for-generative-ai-inference-using-aws-inferentia2-and-aws-trainium-on-amazon-sagemaker/CommentShareDidier_AWSanswered 10 days ago"


Question: DataStore save function not updating array property correctly

"Hi,I'm encountering an issue with the AWS Amplify DataStore save function when updating an object that includes an array property. When I use the DataStore save function to update an object with an array property, and the update input includes a new array value, the array property is not updated correctly and the new value is merged with any existing values.Example:Suppose I have an object with an array property called "timeToArrive" that has the value [2, 4]. I use the DataStore save function to update the object, with an update input that includes the new value [1, 1] for the "timeToArrive" property:const original = await DataStore.query(MyModel, id);await DataStore.save(MyModel.copyOf(original, updated => {updated.timeToArrive = [1, 1];}));Instead of setting the "timeToArrive" property to [1, 1], the DataStore save function merges the new value with the existing values, resulting in the value [2, 4, 1, 1] for the "timeToArrive" property.Attempts to fix:I've tried using different approaches to update the array property, including copying the new values using a for loop or the spread operator, and using a custom resolver to update the object. However, none of these approaches have resolved the issue.Expected behavior:I expect the DataStore save function to update the array property correctly, by setting the property to the new value without merging it with any existing values.Current setup:AWS Amplify version: 5.0.18AWS services used: DataStore, DynamoDBSchema definition for model:type MyModel @model {id: ID!timeToArrive: [Int]}Any help or suggestions on how to resolve this issue would be greatly appreciated.FollowComment"

Answer: "0This is an expected behaviour when using AppSync's AutoMerge conflict detection strategy.Conflict on a list: GraphQL type and database type are lists. Concatenate the incoming list with the existing list in the server. The list values in the incoming mutation will be appended to the end of the list in the server. Duplicate values will be retained.You could consider changing the conflict resolution strategy to Optimistic Concurrency and implementing your own conflict resolution. Additionally, you may also refer the discussion on a similar Github discussion - #5541.CommentShareSUPPORT ENGINEERVishal_Nanswered 2 months ago"


Question: OpenVPN unable to connect on ec2

"I have openvpn gui downloaded on my ec2 instance and have it linked to my config file. Upon connection, I'm getting this error on my browserThis site can’t be reachedwww.google.com’s DNS address could not be found. Diagnosing the problem.Try:Running Windows Network DiagnosticsChanging DNS over HTTPS settingsDNS_PROBE_STARTEDCheck your DNS over HTTPS settingsGo to Opera > Preferences… > System > Use DNS-over-HTTPS instead of the system’s DNS settings and check your DNS-over-HTTPS provider.This is my openvpn loghttps://pastebin.com/dHn4EzngFollowComment"

Answer: 0waiting for a replyCommentShareJameslimeanswered 2 years ago0fixedCommentShareJameslimeanswered 2 years ago


Question: Cognito Analytics with Pinpoint?

"Hello-Is it possible to get baseline analytics with Cognito and Pinpoint for a website using Cognito?https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-pinpoint-integration.htmlThe above reads like it should, but I was just told by an Amazon chat support gentleman that sorry the reason I don't have data is it only works for Mobile Apps or Amplify SDK.Am I really not able to obtain sign up counts, and login numbers?We are using C#/.NET SDK and a couple of our Lambda Triggers use the JS SDK.Any help is appreciatedDanFollowComment"

Answer: "0I spoke with Amazon/AWS Support, and though not clear in the documentation, Cognito Analytics with Pinpoint will only auto start working if you are using the iOS/Android SDK or JS SDK.If you are using C# / Java, you need to wire up the Amazon Pinpoint Project Id to:https://docs.aws.amazon.com/sdkfornet/v3/apidocs/index.html?page=CognitoIdentityProvider/TAnalyticsMetadataType.html&tocid=Amazon_CognitoIdentityProvider_Model_AnalyticsMetadataTypePassing that value to certain methods in my sign up with the C# SDK, did get data to begin appearing.I hope this helps someone!CommentShareslattedanswered 3 years ago"


Question: Does SageMaker Multi-Model Endpoint support SageMaker Model Monitor?

Does SageMaker Multi-Model Endpoint support SageMaker Model Monitor?FollowComment

Answer: "0Accepted AnswerAmazon SageMaker Model Monitor currently supports only endpoints that host a single model and does not support monitoring multi-model endpoints. For information on using multi-model endpoints, see Host Multiple Models with Multi-Model Endpoints .  https://docs.aws.amazon.com/sagemaker/latest/dg/model-monitor.htmlCommentShareAWS-User-6881815answered 3 years ago"


Question: ssh: Could not resolve hostname -: Name or service not known(IP address)

"I tried thisssh - i /home/miki/Documents/jk/keys/aws/kjam/python-kjam.pem ubuntu@35.157.98.242ssh: Could not resolve hostname -: Name or service not knownWhen I open session in AWS Systems Managerroot@ip-172-31-40-194:~# ip addr show1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00inet 127.0.0.1/8 scope host lovalid_lft forever preferred_lft foreverinet6 ::1/128 scope hostvalid_lft forever preferred_lft forever2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 9001 qdisc fq_codel state UP group default qlen 1000link/ether 06:8f:5c:fe:5a:c0 brd ff:ff:ff:ff:ff:ffinet 172.31.40.194/20 brd 172.31.47.255 scope global dynamic eth0valid_lft 2611sec preferred_lft 2611secinet6 fe80::48f:5cff:fefe:5ac0/64 scope linkvalid_lft forever preferred_lft foreverWhy is the IP adress different? What is the username of my EC2 instance?FollowComment"

Answer: "0Hi,You need to use username@PublicDNSssh -i /path/my-key-pair.pem ec2-user@ec2-198-51-100-1.compute-1.amazonaws.comIf you click "Connect" from your EC2 dashboard, it will give you exactly what to enter in the terminal.https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/AccessingInstancesLinux.htmlCommentSharerohitvedantwaranswered 4 years ago"


Question: Getting charged for storage and can't find a way to turn it off.

"Hi,I am getting charged small amounts each month for some storage that I am supposedly using.For the life of me, I can't find where to release that storage (which I don't need, I have no idea what's even stored there).Any help would be greatly appreciated. It's not about the money, but about the lack of control I perceive over my resource usage in general.Best,AlexFollowCommentLawrence Aiello 2 months agoWe need a bit more detail here. Is it S3 storage? EBS Storage? Check your bill, it should be there.Share"

Answer: "0Hi there. Difficult to answer without knowing what exactly you are getting billed for. If it is S3 storage it should be as simple as emptying the bucket in question. If it is for an EBS volume or a snapshot, then you'd have to go to the correct region in the EC2 console and remove the volume.Did you check in your bill what the exact wording of the line item in question is? And in what region the charge occurs?That should give you the right pointer where to look.You could also use the Cost Explorer to dive deep into daily usage (even hourly usage, if enabled) per service and identify exactly where the charge comes from.Hope this helpsCommentSharevmuelleranswered 2 months ago"


Question: Can we move Monitron sensors for an industrial to another?

"Hi,Let's say we stick some Monitron sensors on an industrial asset: it starts learning the normal behavior of this asset. After a while, we decide that this asset is not so critical or is reliable enough not to be monitored: can we stick the sensor to another machine? And, more importantly, can we reset the learning based on this new configuration?FollowComment"

Answer: "0Accepted AnswerIt is possible indeed to relocate a sensor:Delete the sensor from the asset/position it's paired to.The sensor then becomes available to be commissioned in a new location.Physically remove the sensor by leveraging a wide flat faced screw driver to dislodge.The historical data is associated with the position: when deleting the sensor from the position it's paired to, you don't lose previous measurements. Hence, Monitron will learn a brand new behavior from the new position.CommentShareMichael Hoarauanswered 2 years ago"


Question: AWS API Gateway integration with an NLB with ACM issued private cert resulting in SSL error

"Here's my contextEC2 instances hosting a REST API microserviceA Network Load Balancer that fronts the EC2 instances with a port 443 Listener that has an ACM issued Private SSL cert installed on itI have created a VPC link to that NLB.Created an instance of the API Gateway and defined a method on it.When I try to invoke the method, I get the following error as a result:Execution failed due to....PKIX path building failed:...certpath.SunCertPathBuilderException: unable to find valid certification path to requested target.Why is that the AWS API Gateway is encountering issues connecting to an NLB that uses an ACM issued Private cert?Any help would be appreciated.FollowComment"

Answer: "1Accepted AnswerI had the same issue. API Gateway does not accept private signed certificates even from ACM. you'd need a public certificate validated. You can even use Letsencrypt.com or an Amazon Public Certificate validated by DNS. Heres' the documentation of the accepted entities:https://docs.aws.amazon.com/apigateway/latest/developerguide/api-gateway-supported-certificate-authorities-for-http-endpoints.htmlCommentSharemleonrivasanswered 7 months agorePost-User-5508452 7 months agoYes ... that's exactly what we ended up doing after contacting AWS Support. I was informed that API Gateway does not accept private certs. So had to get a proper cert and install that on the Listener and that resolved the issue.Share0Just to double check with you, are you sure the integration type you choose is Proxy? review this step by step guide to bee 100% sure that your architecture is aligned with API GW private integrations: https://docs.aws.amazon.com/apigateway/latest/developerguide/getting-started-with-private-integration.htmlBest,CommentShareJuanEn_Ganswered 7 months agorePost-User-5508452 7 months agoHi Juan ... thank you very much for the reply.I don't understand the need for the Proxy integration.My API Gateway method invocation works if I have a plain TCP/80 listener on the NLB. But when I switch over to TLS/443 listener endpoint with a private ACM cert on the NLB, I get this error. How can I setup my API Gateway integration so that I don't get this error.Share0The thing is that the behaviour changes depending if you are using SSL/TLS (port 443) or HTTP (port 80), with the second one the connection terminates at the APIGW but no TLS negotiation needed, so no checks like the domain name or similar. With a SSL/TLS connection occurs the same, but the TLS termination happens on API GW not on your backend, so using the proxy mechanism the TLS will change the behaviour.Best,CommentShareJuanEn_Ganswered 7 months ago"


Question: Thinking about moving to Lightsail from GoDaddy Linux Hosting

"Thinking about moving to Lightsail from GoDaddy Linux HostingI need access to SSH, Wordpress, MySQL… Also does it have AutoSSL or any free https options?Also how many domain names can I have on one account and does it have something like cPanelFollowComment"

Answer: "0Hello,I need access to SSH, Wordpress, MySQL… Also does it have AutoSSL or any free https options?Lightsail provides Wordpress instances that you can SSH into. It also supports MySQL databases and SSL/TLS certificates. More information about these below:Creating Lightsail Wordpress instance: https://lightsail.aws.amazon.com/ls/docs/en_us/articles/getting-started-with-wordpress-and-lightsail.Connecting to instance (SSH): https://lightsail.aws.amazon.com/ls/docs/en_us/articles/getting-started-with-amazon-lightsail.Databases in Lightsail: https://lightsail.aws.amazon.com/ls/docs/en_us/articles/amazon-lightsail-databases.SSL/TLS certificates in Lightsail: https://lightsail.aws.amazon.com/ls/docs/en_us/articles/understanding-tls-ssl-certificates-in-lightsail-https.Also how many domain names can I have on one account and does it have something like cPanelLightsail supports up to 3 domains in one account. More information about Lightsail limits here: https://docs.aws.amazon.com/general/latest/gr/lightsail.html.Lightsail offers cPanel instances. More info here: https://lightsail.aws.amazon.com/ls/docs/en_us/articles/amazon-lightsail-quick-start-guide-cpanel.CommentShareAWS-User-6091936answered 5 months ago"


Question: Error while connecting to SQL Server Express Edition from SCT

"I have installed SQL Server Express Edition and SCT in my system.  I tried connecting to SQL Server from SCT.  But, while testing, it throws an error saying "com.microsoft.sqlserver.jdbc.SQLServerException: The TCP/IP connection to the host <hostname>, port 1433 has failed. Error: "Permission denied: connect. Verify the connection properties. Make sure that an instance of SQL Server is running on the host and accepting TCP/IP connections at the port. Make sure that TCP connections to the port are not blocked by a firewall.".  Can someone assist.  ThanksFollowComment"

Answer: "0As per SCT documentation @  https://docs.aws.amazon.com/SchemaConversionTool/latest/userguide/CHAP_Welcome.htmlMicrosoft SQL Server (version 2008 and later) are supported as source. What is the version of SQL Server Express Edition being used?Edited by: ggnanaraj on Jul 12, 2021 6:28 AMCommentShareggnanarajanswered 2 years ago0Thanks for your reply.  I have installed sql server 2019 enterprise editionCommentSharesekanswered 2 years ago0I got it fixed by self.  Enabled the tcp/ip in the sql configuration manager and updated the all port as 1433 and restarted the sql server service.  This can be done only with windows administrative privileges.CommentSharesekanswered 2 years ago"


Question: Ground Truth Text Format

"HelloWe are trying to setup labeling for text with ground truth. Is it possible to format the source text to be labeled in some way e.g. html, markdown? A new line would already help a lot. I could not find any documentation on this here https://docs.aws.amazon.com/sagemaker/latest/dg/sms-data-input.htmlThanksNicolasFollowComment"

Answer:
"0When you post tasks to Ground Truth they are displayed to workers using a web interface so HTML is the best bet for formatting the text you want annotated. For example, you could simply use the following to create a multi-line input:{"source": "Lorem ipsum
dolor sit amet"}Unfortunately, by default, inputs are HTML escaped to prevent confusion between your variable text and HTML. As a result if you use the Text Classification widget with the text above will just be displayed to workers as Lorem ipsum
dolor sit amet. To pass those values without escaping them you'll need to create a custom template that includes a filter on the variable to prevent it from being escaped.To setup a custom task, start by creating Lambdas to handle for the pre and post processing required. Information on setting these up can be found at https://docs.aws.amazon.com/sagemaker/latest/dg/sms-custom-templates-step3.htmlI've included simple pre and post Lambda examples below that I find are a good place to start for text annotation. Note that the post Lambda doesn't do any answer consolidation, just simply passes back all of the answers provided by Workers.Create a custom template in Ground Truth and use the Sentiment Analysis template to create a starter task for text annotation. To prevent it from escaping HTML values, update the Liquid variables to include the skip_autoescape filter.{{ task.input.text | skip_autoescape }}You can find more info on using Liquid template values here:https://docs.aws.amazon.com/sagemaker/latest/dg/sms-custom-templates-step2.html#sms-custom-templates-step2-automatePredef lambda_handler(event, context):    print(event)    source = event['dataObject'].get('source')    if source:        print("text is {}".format(source))    else:        print("Missing text in dataObject")        return {}        response = {        "taskInput": {            "text": source        }    }    print(response)    return responsePostimport jsonimport boto3from urllib.parse import urlparsedef lambda_handler(event, context):    print(json.dumps(event))    payload = get_payload(event)    print(json.dumps(payload))    consolidated_response = []    for dataset in payload:        annotations = dataset['annotations']        responses = []        for annotation in annotations:            response = json.loads(annotation['annotationData']['content'])            if 'annotatedResult' in response:                response = response['annotatedResult']            responses.append({                'workerId': annotation['workerId'],                'annotation': response            })        consolidated_response.append({            'datasetObjectId': dataset['datasetObjectId'],            'consolidatedAnnotation' : {                'content': {                    event['labelAttributeName']: {                        'responses': responses                    }                }            }        })    print(json.dumps(consolidated_response))    return consolidated_responsedef get_payload(event):    if 'payload' in event:        parsed_url = urlparse(event['payload']['s3Uri'])        s3 = boto3.client('s3')        text_file = s3.get_object(Bucket=parsed_url.netloc, Key=parsed_url.path[1:])        return json.loads(text_file['Body'].read())    else:        return event.get('test_payload',[])CommentShareDSchultzanswered 4 years ago0Ah, great. That was exactly what I was missing. I simply changed the template to{{ task.input.taskObject | skip_autoescape }}and left out the pre-processing lambda.Edited by: nicolasdoodle on Apr 28, 2019 11:56 PMCommentSharenicolasdoodleanswered 4 years ago0I'm trying to do the same thing. But couldn't make it work. Did you still use the post-processing lambda? Or did you just change the template.liquid fileEdited by: apoorvsrivastava on Jun 18, 2021 9:28 AMCommentShareapoorvsrivastavaanswered 2 years ago"


Question: AWS DynamoDbLocal v.1.19.0 is broken

"It seems Amazon released a new version for DynamoDbLocal today (10/08/2022) with an empty jar file into thir specific repository. https://s3-us-west-2.amazonaws.com/dynamodb-local/releaseIf you use the recommended dependency:<dependency>   <groupId>com.amazonaws</groupId>   <artifactId>DynamoDBLocal</artifactId>   <version>[1.12,2.0)</version></dependency>... then your build will mysteriously fail from today, becasue maven will load the latest available version below 2.0.FollowComment"

Answer: 0Change your dependency to the latest working version:<dependency>   <groupId>com.amazonaws</groupId>   <artifactId>DynamoDBLocal</artifactId>   <version>1.18.0</version></dependency>CommentShareSelindekanswered 10 months ago0We are having same issue with DynamoDBLocal/1.21.0 and 1.20.0 latest jars. Latest Jars are only a few KBs in size. Looks like 9 March 2023 update.https://mvnrepository.com/artifact/com.amazonaws/DynamoDBLocal/1.21.0https://mvnrepository.com/artifact/com.amazonaws/DynamoDBLocal/1.20.0CommentShareRaghavendraanswered 3 months ago


Question: Multiple consumers but 1 message in flight?

"Hi,I'm using this library (https://github.com/BBC/sqs-consumer) to consume messages from my queue. I have a small node app built that I'm running on my EC2 instance (using pm2 I do multiple npm start).My expected outcome would be that there would be multiple messages in flight (I have 2 EC2 instances, 10 processes on each).The actual outcome is that in the SQS dashboard I constantly see 1 message in flight.FollowComment"

Answer: "1Accepted AnswerYou don't say whether you're specifying the MessageGroupId or not when sending the message so I'm going to assume for a moment that you're using a single group id.Looking at the documentation for FIFO delivery logic what happens is that the ReceiveMessage call gets the number of messages you ask for (default is 1, maximum is 10) and then will not receive any more messages from the same group id until those message(s) have been deleted or are visible again. This is to ensure that messages are delivered in the correct order - which is what FIFO queues offer.You can have multiple messages in flight if you use multiple group ids - but then ordering is only within the groups rather than the queue as a whole. Then you can have as many messages in flight (assuming you get one at a time) as you have unique group ids.If ordering isn't important then a non-FIFO queue might be the way to go.CommentShareEXPERTBrettski-AWSanswered 4 months agomikejackowski 4 months agothank you, just as I realised this myself I saw your answer :)Share0Apologies, I'm not sure how to close the question. My mistake was that I was sending the same MessageGroupId for every message to this queue, when in fact I shouldn't have. This allows multiple processors to consume the queue.CommentSharemikejackowskianswered 4 months ago"


Question: Amazon DMS table mapping tranformation

"Details:Source: PostgresTarget: S3Format: parquetHi Guys!Currently, in default mode, the DMS task is reading a boolean column in the source and automatically converting to a char format in the target.Theoretically Amazon DMS provides a step to transfor data in the mapping rules task.https://docs.aws.amazon.com/dms/latest/userguide/CHAP_Tasks.CustomizingTasks.TableMapping.SelectionTransformation.Selections.htmlHowever after some attempts the data was not correctly converted in the target. The follow mapping transformations was tried.{    "rules": [        {            "rule-type": "selection",            "rule-id": "1",            "rule-name": "1",            "object-locator": {                "schema-name": "test_schema",                "table-name": "%"            },            "rule-action": "include"        },        {            "rule-type": "transformation",            "rule-id": "2",            "rule-name": "2",            "rule-action": "change-data-type",            "rule-target": "column",            "object-locator": {                "schema-name": "test_schema",                "table-name": "table_test",                "column-name": "column1"            },            "data-type": {                "type": "int8"            }        },        {            "rule-type": "transformation",            "rule-id": "3",            "rule-name": "3",            "rule-action": "change-data-type",            "rule-target": "column",            "object-locator": {                "schema-name": "test_schema",                "table-name": "table_test",                "column-name": "doc"            },            "data-type": {                "type": "boolean"            }        }    ]}I undertood that DMS automatically convert the from Boolean type to the char type, following the doc below.https://docs.aws.amazon.com/dms/latest/userguide/CHAP_Source.PostgreSQL.htmlOk, great...so the "doc" column is currently a "char" type.But, what's the reason the "doc" column has not converted to boolean type in the target when used the transformation above?Would it be for that reason?https://docs.aws.amazon.com/dms/latest/userguide/CHAP_Tasks.CustomizingTasks.TableMapping.SelectionTransformation.Transformations.html"AWS DMS supports column data type transformations for the following DMS data types:"bytes", "date", "time", "datetime", "int1", "int2", "int4", "int8", "numeric", "real4", "real8", "string", "uint1", "uint2", "uint4", "uint8", "wstring", "blob", "nclob", "clob", "boolean", "set", "list" "map", "tuple""FollowComment"

Answer: "1Hi,From the mapping rule mentioned, it seems like you want to achieveSource PG (boolean) --> Target S3 (int 8)Source PG (boolean) --> Target S3 (boolean)Correct me if I am wrong here. Based on documentation: "AWS DMS supports column data type transformations for the following DMS data types"So the key point here is DMS data types.Using 1 as example, source pg having boolean, this will convert to CHAR (5) as (DMS data type) https://docs.aws.amazon.com/dms/latest/userguide/CHAP_Source.PostgreSQL.html#CHAP_Source-PostgreSQL-DataTypes. To get to the target as int 8 then s3 (DMS datatype) should be "INT 1" https://docs.aws.amazon.com/dms/latest/userguide/CHAP_Target.S3.html#CHAP_Target.S3.DataTypes{  "rule-type": "transformation",  "rule-id": "1",  "rule-name": "1",  "rule-action": "change-data-type",  "rule-target": "column",  "object-locator": {    "schema-name": "my_db",    "table-name": "my_table",                    "column-name": "col",        "data-type": "char5"       // DMS Internal data type for pg, boolean -> char5  },  "data-type": {    "type": "int1"               // s3 int8, that is, int1 -> int8  }}However as you pointed correctly, from the list of the supported DMS datatypes: "AWS DMS supports column data type transformations for the following DMS data types: "bytes", "date", "time", "datetime", "int1", "int2", "int4", "int8", "numeric", "real4", "real8", "string", "uint1", "uint2", "uint4", "uint8", "wstring", "blob", "nclob", "clob", "boolean", "set", "list" "map", "tuple""char5" is not in the list thus I am suspecting this might cause some issue.From the release note DMS 3.3.3, it mentioned that: Fixed an issue where boolean columns were transformed to incorrect types with Apache Parquet output.https://docs.aws.amazon.com/dms/latest/userguide/CHAP_ReleaseNotes.html#CHAP_ReleaseNotes.DMS333To investigate further, Please confirm:What is the DMS versionMay you also share a sample Source PG DDLDMS task settings that being used (JSON format)Source and target endpoint settings/ECAs that are being usedcomplete mapping if above is not the complete version.If you have support plan, please raise a support case and let me know the support case number in case I need to review the resources. If not I will try to address the issue through repost.Found a similar post from: https://forums.aws.amazon.com/thread.jspa?threadID=233738&tstart=0CommentShareSUPPORT ENGINEERKevin_Zanswered a year agoAWS-User-0898362 a year agoDetails below.Share0Hi, thank you for analysis. I am enriching with asked information.I changed some names for security, but I believe that it will not impact your analysis.Just a point, in the mapping rule just "doc" column is a  "boolean" datatype in the source and should be a "boolean" in the s3 too. The column "column1" is a "decimal" type in the source and should be a "int8" in the s3 target. However transformation is not working in both.***That what I would like to achieve.Source PG - Column "column1" (decimal) --> Target S3 (int 8)Source PG - Column "doc" (boolean)          --> Target S3 (boolean)*1 - Amazon DMS Engine Version: 3.4.6**2 - May you also share a sample Source PG DDL*CREATE TABLE test_schema.test_table (test_id int4 NOT NULL,test2 bool NULL,doc bool NULL,  # Column in the mappingtest3 bool NULL,test4 bool NULL,test5 varchar NULL,test6 bool NULL,test7 timestamp NOT NULL DEFAULT '2018-11-13 20:24:11.077775'::timestamp without time zone,test8 timestamp NULL,test9 bool NOT NULL DEFAULT false,column1 numeric NULL,  # Column in the mappingCONSTRAINT test_table_id_key UNIQUE (test_id));*3 - Amazon DMS Task Settings*{    "TargetMetadata": {        "TargetSchema": "",        "SupportLobs": true,        "FullLobMode": false,        "LobChunkSize": 250,        "LimitedSizeLobMode": true,        "LobMaxSize": 8000,        "InlineLobMaxSize": 0,        "LoadMaxFileSize": 0,        "ParallelLoadThreads": 0,        "ParallelLoadBufferSize": 0,        "BatchApplyEnabled": false,        "TaskRecoveryTableEnabled": false,        "ParallelLoadQueuesPerThread": 0,        "ParallelApplyThreads": 0,        "ParallelApplyBufferSize": 0,        "ParallelApplyQueuesPerThread": 0    },    "FullLoadSettings": {        "TargetTablePrepMode": "DROP_AND_CREATE",        "CreatePkAfterFullLoad": false,        "StopTaskCachedChangesApplied": false,        "StopTaskCachedChangesNotApplied": false,        "MaxFullLoadSubTasks": 16,        "TransactionConsistencyTimeout": 1800,        "CommitRate": 10000    },    "Logging": {        "EnableLogging": true,        "LogComponents": [            {                "Id": "TRANSFORMATION",                "Severity": "LOGGER_SEVERITY_ERROR"            },            {                "Id": "SOURCE_UNLOAD",                "Severity": "LOGGER_SEVERITY_ERROR"            },            {                "Id": "IO",                "Severity": "LOGGER_SEVERITY_ERROR"            },            {                "Id": "TARGET_LOAD",                "Severity": "LOGGER_SEVERITY_ERROR"            },            {                "Id": "PERFORMANCE",                "Severity": "LOGGER_SEVERITY_ERROR"            },            {                "Id": "SOURCE_CAPTURE",                "Severity": "LOGGER_SEVERITY_ERROR"            },            {                "Id": "SORTER",                "Severity": "LOGGER_SEVERITY_ERROR"            },            {                "Id": "REST_SERVER",                "Severity": "LOGGER_SEVERITY_ERROR"            },            {                "Id": "VALIDATOR_EXT",                "Severity": "LOGGER_SEVERITY_ERROR"            },            {                "Id": "TARGET_APPLY",                "Severity": "LOGGER_SEVERITY_ERROR"            },            {                "Id": "TASK_MANAGER",                "Severity": "LOGGER_SEVERITY_ERROR"            },            {                "Id": "TABLES_MANAGER",                "Severity": "LOGGER_SEVERITY_ERROR"            },            {                "Id": "METADATA_MANAGER",                "Severity": "LOGGER_SEVERITY_ERROR"            },            {                "Id": "FILE_FACTORY",                "Severity": "LOGGER_SEVERITY_ERROR"            },            {                "Id": "COMMON",                "Severity": "LOGGER_SEVERITY_ERROR"            },            {                "Id": "ADDONS",                "Severity": "LOGGER_SEVERITY_ERROR"            },            {                "Id": "DATA_STRUCTURE",                "Severity": "LOGGER_SEVERITY_ERROR"            },            {                "Id": "COMMUNICATION",                "Severity": "LOGGER_SEVERITY_ERROR"            },            {                "Id": "FILE_TRANSFER",                "Severity": "LOGGER_SEVERITY_ERROR"            }        ],        "CloudWatchLogGroup": "dms-tasks-dev-use1-rep-instance",        "CloudWatchLogStream": "dms-task-5MVMA7VE4IBVH2O2QQJBL76BMVFDAJ4D6PJ42UI"    },    "ControlTablesSettings": {        "historyTimeslotInMinutes": 5,        "ControlSchema": "dms",        "HistoryTimeslotInMinutes": 5,        "HistoryTableEnabled": false,        "SuspendedTablesTableEnabled": false,        "StatusTableEnabled": false,        "FullLoadExceptionTableEnabled": false    },    "StreamBufferSettings": {        "StreamBufferCount": 3,        "StreamBufferSizeInMB": 8,        "CtrlStreamBufferSizeInMB": 5    },    "ChangeProcessingDdlHandlingPolicy": {        "HandleSourceTableDropped": true,        "HandleSourceTableTruncated": true,        "HandleSourceTableAltered": true    },    "ErrorBehavior": {        "DataErrorPolicy": "LOG_ERROR",        "DataTruncationErrorPolicy": "LOG_ERROR",        "DataErrorEscalationPolicy": "SUSPEND_TABLE",        "DataErrorEscalationCount": 0,        "TableErrorPolicy": "SUSPEND_TABLE",        "TableErrorEscalationPolicy": "LOG_ERROR",        "TableErrorEscalationCount": 10,        "RecoverableErrorCount": -1,        "RecoverableErrorInterval": 5,        "RecoverableErrorThrottling": true,        "RecoverableErrorThrottlingMax": 1800,        "RecoverableErrorStopRetryAfterThrottlingMax": false,        "ApplyErrorDeletePolicy": "IGNORE_RECORD",        "ApplyErrorInsertPolicy": "LOG_ERROR",        "ApplyErrorUpdatePolicy": "LOG_ERROR",        "ApplyErrorEscalationPolicy": "LOG_ERROR",        "ApplyErrorEscalationCount": 0,        "ApplyErrorFailOnTruncationDdl": false,        "FullLoadIgnoreConflicts": true,        "FailOnTransactionConsistencyBreached": false,        "FailOnNoTablesCaptured": false    },    "ChangeProcessingTuning": {        "BatchApplyPreserveTransaction": true,        "BatchApplyTimeoutMin": 1,        "BatchApplyTimeoutMax": 30,        "BatchApplyMemoryLimit": 500,        "BatchSplitSize": 0,        "MinTransactionSize": 1000,        "CommitTimeout": 1,        "MemoryLimitTotal": 1024,        "MemoryKeepTime": 60,        "StatementCacheSize": 50    },    "PostProcessingRules": null,    "CharacterSetSettings": null,    "LoopbackPreventionSettings": null,    "BeforeImageSettings": null,    "FailTaskWhenCleanTaskResourceFailed": false,    "TTSettings": null}*4 - Source and target endpoint settings/ECAs that are being used*Source Endpoint{    "DatabaseName": "data_samples",    "Port": 999999,    "ServerName": "test-test2-postgresql.dwghr5cbjksyu.us-east-1.rds.amazonaws.com",    "Username": "test_dms"}Target Endpoint{    "ServiceAccessRoleArn": "arn:aws:iam::98998898989898:role/dev-test-testdms-target-data",    "ExternalTableDefinition": "",    "CsvRowDelimiter": "\\n",    "CsvDelimiter": ",",    "BucketFolder": "test/test/data-samples",    "BucketName": "dev-test-data-test",    "CompressionType": "GZIP",    "EnableStatistics": true,    "DatePartitionEnabled": false}*5 - complete mapping if above is not the complete version.*The complete mapping is in the above Comment.CommentShareAWS-User-0898362answered a year agoKevin_Z SUPPORT ENGINEERa year agoThanks for your input here. This is really helpful in troubleshooting it further. Currently, service team is aware of the issue and it has been raised as a feature request that DMS need to support (PG boolean to boolean migration).No work around at the moment as change-data-type not supporting char5You may keep track of the new release note through: https://docs.aws.amazon.com/dms/latest/userguide/CHAP_ReleaseNotes.htmlShare"


Question: AWS Load Balancer not reaching LightSail instance

"I would like to protect my lightsail instances with a AWS-WAF. For that, I need an EC2 Load Balancer instead of the lightsail one. I´ve implemented the following steps (all with root user):Enable VPC peering in lightsail, on the correspondent zone, let say 'Ireland'.AWS VPC is default and in Ireland.Create a Target Group of type IP Address, on previous default VPC; Network 'Other Private IP Address' and the private address of the lightsail instance (instance has an apache listening on port 80). Checked that targets are 'Healty' on Target Group.Create a LoadBalancer in the Default VPC, with the previous created Target Group, and with zones 'a' and 'b' of Ireland. Zone 'a' is the zone of where the lightsail instance is.On Route 53 created a public hosted zone, with the name of my domain (registered directly in Route 53).Create a DNS A record of type 'Alias', with linked point 'Alias Application Load Balancer', in region Ireland and pointing to previous created Load Balancer (showed for selection with the name of the LB, but wit 'dualstack.' appended to it).6.1. Also tried resolving the LB DNS and creating the DNS A record to point directly to the IP instead of the 'Alias'.After all these steps, when trying to browse to my domain, I´m getting an "ERR_CONNECTION_TIMED_OUT".Ping to domain resolves to same ip that Load Balancer DNS; Security Groups in AWS allow all traffic; there is route in AWS to internal network of LightSail (created automatically when peering VPCs in step 1); ACL or Firewall are allowing all traffic; on ligthsail all traffic is allowed as well.What I could be missing? At that point and with all the steps reviewed, I can´t not figure out where the issue is.FollowComment"

Answer: "0Have you checked the security group associated to the AWS ALB if it is allowing 0.0.0.0/0 inbound?CommentShareTimothy_Manswered a year ago0Hello Tim,Issue is already solved. What did I do? I just logged out and login again. I know it sounds dumb but is what I did and suddenly after loging again, browsed to my domain and there it was the content of my LightSail instance.In some part of the documentation I had read something about log out and login, but it was in the case you implement things with different account, which what not my case as I did everything with the root account.Thanks and regards.CommentSharePepeluanswered a year ago"


Question: Can't connect to RDS from task

"I have an ecs task that I cannot get to connect to an rds cluster.  It was working a week ago but it needed to be rebuilt and I've obviously missed something but I cannot for the life of me work out what's missing.  The fargate cluster has full outbound access in the security group, the RDS cluster also has that security group attached.  But the task itself seems to have no outbound access. The networkmode for cluster and task is set to awsvpc and it is all on the same vpc. What am I missing?FollowCommentAWS-User-5664051 7 months agoDid you check the logs on RDS side to see if there are any port of authentication errors?Did you check the VPC flow logs and see if the traffic is hitting from ECS cluster to RDS?Did the task came up healthy? Please check the NACL rules and also if the fargate cluster and RDS cluster are created in right subnets.Where are the RDS Connection details provided in the fargate tasks ex: Task definition? Please review the port and endpoint information.Share"

Answer: "1Accepted AnswerHello,From your post I can see that you are having issues with ECS Fargate to communicate to RDS Cluster. You also did check the SG from both side and all look good.I'm assuming here that you are receiving a timed out error from your application. Thus, there are some things to check in order to make sure that the networking connection will be successful:Check the NACL - Since you did already check the SG's, it worth to check the NACL from the Subnets as well. Just remember that the rules are stateless and it should allow both Inbound/Outbound connections.Check again the RDS SG - You've mentioned that the Task SG has all outbound allowed. What about the RDS SG Inbound rules?Since they are in the same VPC, you don't need to check the Gateway configuration (just make sure that there is a local route for the VPC CIDR in place).Other than that, I'd create a regular EC2 instance, run this container manually and try to see if the connection would be stablished (all SG rules should allow the EC2 instance as well).I hope that this helps you. As a last comment, let me share this ECS Best Practice documentation about Networking mode. It is not directly related to the issue but it worth to check and have it in mind.CommentShareHenrique Santanaanswered 7 months agorePost-User-8788279 7 months agoThanks! It was the RDS SG inbound rule that was missingShare"


Question: Elastic IP address becomes unassociated with instance

"Hi,So we have an EC2 instance setup with a load balancer and elastic IP....It works perfectly, except when the Elastic IP address becomes unassociated with the instance.The EIP addr is still there in the EIP table, just no instance is connected to it.And it does this seemingly at random. It will work for hours - days - then all of a sudden we can't connect. We check the EIP and it's unassociated. We re-associated it, and it's back to working again.  (We do not have the Reassociation checkbox marked when you go to associate an EIP, so that shouldn't be causing it.)Other information:No one has made changes to aws setting when it disassociates.It doesn't coincide with bitbucket pipeline build.Security groups, inbound rules are still all the same and associated with the instance.We also only have a couple EIP, so we shouldn't be hitting any limits.So we are at a complete loss. Nothing else seems to change in aws - just the EIP association.Any ideas? I will happily add more information if needed.FollowCommentRodney Lester a year agoDo you have CloudTrail enabled? You could see what identity is executing that command by looking there.Share"

Answer: "0Hello,To check what could be disassociating the Elastic IP on the instance, you can use the CloudTrail tool. You may follow these steps:[1] Open the CloudTrail console.[2] On the left navigation pane, choose Event History.[3] On the lookup attributes drop down list, choose event name.[4] Enter DisassociateAddress as event name value.[5] Choose the timestamp of when the occured.[6] Then check the user agent that executed the API. The user agent will show the agent that disassoiated the Elastic IP.You can also refer to the following document for more information regarding Cloudtrail event history: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/view-cloudtrail-events-console.html#displaying-cloudtrail-eventsCommentShareKaraboanswered a year ago"


Question: Versioning on Snowball Edge

"Do we support versioning (like we do on S3) on Snowball Edge? If not, is it possible to upload multiple versions of the same files to Snowball Edge and then have it versioned on S3 once it's shipped back to AWS?FollowComment"

Answer: "0Accepted AnswerSnowball Edge does not have versioning implemented on it's S3 bucket.  If you write an object with the same name, it will be overwritten.  If multiple versions of the same file are needed to be imported with snowball edge, the versions will need to have different names as they are written to snowball edge.Versioning in the s3 bucket that you use to import your data into will be supported with objects of the same name as they are imported into s3 from snowball edge....ie, s3 import will use the most recent object as the latest IF versioning is enabled on the bucket.CommentShareAWS-User-8667707answered 4 years ago"


Question: Why i don't have a blue info suggestions box in AWS Console

"Hi guys,How could have a blue information suggestions box like in an image below.ThanksFollowCommentalatech EXPERT3 months agoCan you try an incognito web browser tab?Share"


Question: What is the difference between extentions and powertools when fetching in cache from parameter store?

"What is the difference between extensions and powertools when fetching in cache from parameter store?In the first place, is the mechanism of the cache function different?I want to use cache for reading from parameter store in my lambda and I am comparing below two features.Parameter Store parameters in AWS Lambda functionsAWS Lambda Powertools for Python ParametersPlease tell us about the main points of comparison.Supplementary informationRuntime is pythonI think there is a difference that the TTL setting can be specified for each key or for the entire lambda processFollowComment"


Question: CodeStar CLI - Create CodeStar Project without creating GitHub Repo

"Hello,As of the moment, aws codestar create-project --cli-input-json creates a GitHub repo every time, would be good to have an option to reuse an existing repo. Is there a way I can do that?FollowComment"

Answer: "0Hello,Today, you cannot create a CodeStar project using an existing GitHub repository from either our CLI or the console.Thank you for your interest. We have received multiple requests for this feature. Your interest helps us prioritize our work.SuketCommentShareAWS-User-7398259answered 4 years ago0Thank you, is there a public roadmap (or can you share one) to know more or less when this feature could potentially be implemented?Edited by: amea on Feb 11, 2019 2:37 AMCommentShareameaanswered 4 years ago"


Question: Redshift Cluster CPU cloudwatch metric down for last 2hrs

CPUUtilization Cloudwatch metric for our redhisft cluster stopped an hour and half ago. IT was breaking intermittently for the last couple of days for a few mins but now it completely stopped. Any admins take a look?FollowComment

Answer: "0Try open a case to AWS support center, the engineers will check your cluster from the backend.CommentShareAWS-supipianswered a year ago"


Question: Authentication error while connecting to MySQL RDS using IAM Authentication with VPN

"We have a MySQL RDS in a private subnet which is setup to use IAM authentication. Everything works as expected.Once we attach a policy to the users that restricts access to AWS resources from a specific IP which is the VPN instance public IP. Authentication does not work. We are able to generate token from CLI, it works without the VPN only policy attached but the token does not work once the VPN only policy is applied. VPN is setup to route all requests to *.amazonaws.com through the VPN instance.FollowComment"

Answer: 0Usually when you connect through VPN. You get private IP assigned from a pool in VPN.Then there are two scenarios.1- Traffic gets NAT to Private ENI IP of VPN instanceor2- Traffic dont get NAT but pass actual IPassigned to users through NAT pool of VPN instance.I would suggest to try adding both Private ENI IP of Nat instance and User pool of VPN in your IAM policy to test again.Otherwise VPC Flow logs of MySQL RDS can also show what IP is source IP when it hits MySQL and build policy with thatCommentShareMuhammadanswered 5 months ago


Question: Additional verification required for ACM

"Hello!I cannot issue certificate. I see an error "Additional verification required to request certificates for one or more domain names in this request"and link to https://docs.aws.amazon.com/acm/latest/userguide/troubleshooting-failed.html#failed-additional-verification-requiredIf you don't have a support plan, post a new thread in the ACM Discussion Forum.FollowComment"

Answer: "0What additional information I have to provide?CommentShareBug4janswered 5 months ago0I can see lots of people have had trouble with this.  Assuming you do in fact own the domain, confirm it's not on the Restricted list:.RU.BYБел - BelarusРф - Russian Federation.moscow.москва - Moscow.SU - Soviet Union(http://ru.com/) .RU.COM.РУС.RU.NETIf that's not the problem then from what I've read, I think you're going to need a support plan subscription for a little while to resolve it.CommentShareEXPERTskinsmananswered 5 months ago"


Question: Amazon Rekognition billing

"I'm developing an application with AWS rekognition and have some billing questions. This application allows customers who attended an event to use the app to view the photos in which they appeared.Assume that each person who attended the event has a profile image that will be used to detect their faces in all photos shot at the event. This profile image is saved in indexfaces to form a collection.500 images from a certain event are saved in an S3 bucket.What would it cost if we take a single client image from Indexface and search through all 500 images that are now stored in the S3 bucket to find the images that the customer appeared in and present them to them?Which of the following is how we will be charged?Since we only utilize one index face to search among the 500 stored images in the S3 bucket, will it be just one cost.Is it going to be 1x500? That is, we will be charged based on the quantity of photos kept in the S3 bucket.Assume the customer appears in only 10 of the 500 images stored in the S3 bucket. Will the facial detection fee be 1x10?FollowComment"

Answer: "0The document stated the following.In other words, I think it falls under number 2 in the options you described.https://aws.amazon.com/rekognition/faqs/?nc1=h_lsQ: How does Amazon Rekognition count the number of images processed?For APIs that accept images as inputs, Amazon Rekognition counts the actual number of images analyzed as the number of images processed. DetectLabels,  DetectModerationLabels, DetectFaces, IndexFaces, RecognizeCelebrities, and SearchFaceByImage, and Image Properties belong to this category. For the CompareFaces API, where two images are passed as input, only the source image is counted as a unit of images processed.CommentShareEXPERTRiku_Kobayashianswered 9 days ago"


Question: preparation of JSON data in IoT Analytics for visualization in QuickSight

"Hello,I have JSON data which is sent by IoT device connected to IoT core via message routing rule to IoT Analyticsmy JSON message looks like this:{"mType": "iqrfSensor_ReadSensorsWithTypes","data": {"msgId": "testEmbedSensor","rsp": {"nAdr": 1,"hwpId": 2,"rCode": 0,"dpaVal": 88,"result": {"sensors": [{"id": "TEMPERATURE","type": 1,"name": "Temperature","shortName": "t","value": 26,"unit": "°C","decimalPlaces": 4},{"id": "TEMPERATURE","type": 1,"name": "Temperature","shortName": "t","value": 24.5,"unit": "°C","decimalPlaces": 4},{"id": "BINARYDATA7","type": 129,"name": "Binary data7","shortName": "bin7","value": 81,"unit": "?","decimalPlaces": 0,"breakdown": [{"id": "BINARYDATA7","type": 129,"name": "Light indicator","shortName": "light","unit": "%","decimalPlaces": 1,"value": 36.2}]},{"id": "BINARYDATA7","type": 129,"name": "Binary data7","shortName": "bin7","value": 73,"unit": "?","decimalPlaces": 0,"breakdown": [{"id": "BINARYDATA7","type": 129,"name": "Potentiometer","shortName": "pot","unit": "%","decimalPlaces": 1,"value": 42.5}]}],"sensorIndexes": [0,1,2,3]}},"raw": [{"request": "01.00.5e.01.ff.ff.0f.00.00.00","requestTs": "2023-03-20T15:58:18.066+01:00","confirmation": "01.00.5e.01.ff.ff.ff.58.01.08.01","confirmationTs": "2023-03-20T15:58:18.091+01:00","response": "01.00.5e.81.02.00.00.58.01.a0.01.01.88.01.81.51.81.49","responseTs": "2023-03-20T15:58:18.346+01:00"}],"insId": "iqrfgd2-default","statusStr": "ok","status": 0}}In the IoT Analytics dataset my data is saved in csv format but I only have the fields mtype, data (in which all the data I want to work with in QuickSight is saved) and _dtHow do I work with this data or what is the solution to work with nested data so that QuickSight can process it?FollowComment"

Answer: "0Hi MikMar,AWS IoT Analytics stores the data from first values from a JSON object as rows. Because you have a nested JSON the data does not arrive in a format that makes it easily consumable. You can use a Lambda function as pipeline activity to flatten your data. Please take a look at a similat setup and solution in the IoT SiteWise workshop.Cheers,PhilippCommentSharePhilipp Sanswered 6 days agoMikMar 6 days agoIs there another way to process such a JSON message so I can visualize the data in QuickSight? For example, via TimeStream or other AWS service without the need for encoding?Share"


Question: Unable to create Quicksight Stack

Unable to create cloud formation deployment for quicksight reffered in Module 3 in the below link. Getting the attached error. Please helphttps://catalog.workshops.aws/visualize-amazon-connect-data-and-events-via-quicksight/en-US/4-module-3-automating-amazon-quicksight-dashboard-creation/41-cloudfromationsetupError snap:FollowComment


Question: AWS cost explorer dashboard and CLI result mismatch

"Hello,So i'm having trouble making the 'aws ce get-cost-and-usage' command work and get me the same result I get using the cost explorer consoleapplied filters are:Date range: 2023-04-01 2023-04-10Granularity: MonthlyDimension: Linked AccountCharge type: excludes 2 (refund, credit)Aggregate Costs by: Blended costNow here's the command I run:$ aws ce get-cost-and-usage --time-period Start=2023-04-01,End=2023-04-11 --granularity MONTHLY --group-by Type=DIMENSION,Key=LINKED_ACCOUNT --metrics "BlendedCost"and here's the output I get:{    "GroupDefinitions": [        {            "Type": "DIMENSION",            "Key": "LINKED_ACCOUNT"        }    ],    "ResultsByTime": [        {            "TimePeriod": {                "Start": "2023-04-01",                "End": "2023-04-11"            },            "Total": {},            "Groups": [                {                    "Keys": [                        "aaaa"                    ],                    "Metrics": {                        "BlendedCost": {                            "Amount": "6.136607832",                            "Unit": "USD"                        }                    }                },                {                    "Keys": [                        "bbbb"                    ],                    "Metrics": {                        "BlendedCost": {                            "Amount": "0.3097750801",                            "Unit": "USD"                        }                    }                },                {                    "Keys": [                        "cccc"                    ],                    "Metrics": {                        "BlendedCost": {                            "Amount": "-0.0046580685",                            "Unit": "USD"                        }                    }                }            ],            "Estimated": true        }    ],    "DimensionValueAttributes": [        {            "Value": "aaaa",            "Attributes": {                "description": "L****"            }        },        {            "Value": "bbbb",            "Attributes": {                "description": "Preprod"            }        },        {            "Value": "cccc",            "Attributes": {                "description": "Prod"            }        }    ]}What are these weird negatives and very low values I get for each account compared to the result I get on the dashboard? what is missing on my command so I could get the same result on the dashboard ?Thank youFollowCommentvtjean 2 months agoIn the command it says End=2023-04-11 instead of End=2023-04-10SharerePost-User-6152965 2 months ago@vjtean: no, end_date on cli is exclusive (https://docs.aws.amazon.com/cli/latest/reference/ce/get-cost-and-usage.html#options)Share"

Answer: "0Accepted AnswerIt looks like the reason you are seeing different results in Cost Explorer console vs. CLI command is that you have different filters applied.  In Console, you are filtering on Charge Type to exclude refunds and credits.  Without these exclusions in the CLI command, its possible you are getting total costs that include refunds and credits.Try: aws ce get-cost-and-usage --time-period Start=2023-04-01,End=2023-04-11 --granularity MONTHLY --metrics BLENDED_COST --group-by Type=DIMENSION,Key=LINKED_ACCOUNT --filter Dimensions={Key=RECORD_TYPE,Values=Usage}If you need to find all the specific record type (charge type) values, you can also use: aws ce get-dimension-values --dimension RECORD_TYPE --time-period Start=2023-04-01,End=2023-04-11CommentSharerathmyleanswered 2 months agorePost-User-6152965 2 months agothank you, even though the command you mentioned doesn't work, syntax problem , but I could make it work using an external file:{"Dimensions": {"Key": "RECORD_TYPE","Values": ["Usage","Tax","Support"]}}-then call it with $ aws ce get-cost-and-usage --time-period Start=2023-04-09,End=2023-04-17 --granularity MONTHLY --metrics BLENDED_COST --group-by Type=DIMENSION,Key=LINKED_ACCOUNT --filter  file://file.jsonShare0@vjtean saying "In the command it says End=2023-04-11 instead of End=2023-04-10"Reply:According to AWS documentation, end_date is exclusive, so in order to include 10th April into account, you must mention the day after.even if that was the problem (which is not), it clearly doesn't explain negative and lower than 0 values.CommentSharerePost-User-6152965answered 2 months ago"


Question: Private MWAA with custom domain - connection timeout

"I've set up a PRIVATE_ONLY mwaa instance and created an ALB, which points to private addresses of the VPC endpoint based on this guide:https://docs.aws.amazon.com/mwaa/latest/userguide/vpc-vpe-access.html(I also added a new A record for my ALB in Route53 zone pointing to my ALB)Target group reports both targets to be healthy and I can actually access the custom domain, which shows the Airflow login page (Sign in to Airflow). But after clicking on the login button and logging in, the URL I'm taken to is the URL of the vpce, not my custom domain. And because the mwaa instance is private and I'm not in the VPC, I get a connection timeout.I also tried to use CNAME record instead of A record as mentioned in the docs: https://docs.aws.amazon.com/mwaa/latest/userguide/mwaa-faqs.html#custom-dnsBut the same result - connection timeout.Seems like after logging in, AWS no longer uses the custom domain, but instead tries to use the default (vpce) url. Is there something I'm not doing correctly?Edited by: vlmsgst on Aug 25, 2021 12:28 AMFollowComment"

Answer: 0Have a look at this thread https://forums.aws.amazon.com/thread.jspa?messageID=988951tl;dr "MWAA does not yet support setting an alternate redirect location"CommentShareK4R0L15answered 2 years ago


Question: How can I migrate my computer redmine to aws lightsail?

"I was using remine on my machine.But, I want to use remine in aws lightsail.I have installed redmine from aws lightsail, but I still want to migrate the redmine db on my computer to aws lightsail.But I can't find a related way.Please let me know how it can be done.Best Regards.FollowComment"

Answer: "1Accepted AnswerI'd suggest taking a look at Redmine wiki/forums, e.g. this wiki post might help: https://www.redmine.org/projects/redmine/wiki/HowTo_Migrate_Redmine_to_a_new_server_to_a_new_Redmine_versionEssentially it'll involve migrating your SQL database to the new server and copying over any other data from your local Redmine installation to Lightsail, but the process can vary depending on the data you need to migrate and how much downtime you're willing to tolerate.CommentSharetanbriananswered 8 months ago"


Question: SQL Server on RDS Issue With Linked Server

"I'm testing Linked Server on RDS SQL Server to point to existing SQL Server (non RDS). Test connection throw error with the following message :------------------------------ADDITIONAL INFORMATION:An exception occurred while executing a Transact-SQL statement or batch. (Microsoft.SqlServer.ConnectionInfo)------------------------------Named Pipes Provider: Could not open a connection to SQL Server [53]. OLE DB provider "SQLNCLIThe test connection to the linked server failed.11" for linked server "GFHSVRHRISDEV01.corp.xyz.co.id" returned message "Login timeout expired".OLE DB provider "SQLNCLI11" for linked server "GFHSVRHRISDEV01.corp.xyz.co.id" returned message "A network-related or instance-specific error has occurred while establishing a connection to SQL Server. Server is not found or not accessible. Check if instance name is correct and if SQL Server is configured to allow remote connections. For more information see SQL Server Books Online.". (Microsoft SQL Server, Error: 53)I have validated the network connectivity as well as domain name resolution using EC2, domain resolution works, telnet to port 1433 also open. As this RDS integrated with the Managed Active Directory, I have also checked that the Conditional Forwarding works to lookup target domain.The target database also already configured to accept remote connection.What would be the possible root cause for this? I'm looking for any hints to further troubleshoot this issue.FollowComment"

Answer: "0Accepted AnswerIn addition to checking whether Named Pipes are configured, verify that the server name is resolvable from the device initiating the connection, verify port 1433 and 1434 are permitted inbound from the device you are testing from, and also verify that outbound communication is permitted for return traffic i.e. ephemeral ports are open outbound and also permitted by any firewalls in between. A more simplistic way to test is to leverage UDL files to test connectivity documented here - https://docs.microsoft.com/en-us/sql/connect/oledb/help-topics/data-link-pages?view=sql-server-ver15CommentShareAWS-User-6679012answered 3 years ago"