Question: Unable to update the default certificate on application load balancer using AWS cli

"I have generated a certificate for a domain using letsencrypt and imported it in acm using aws cli. However when I try to update the default certificate on the loadbalancer, I get below error. I can see that the certificate has been imported into the acm. Please let me know if I am missing anything. Also, I did verify that the loadbalancer is present in the right region. I am not sure why I am getting below error.Error:An error occurred (LoadBalancerNotFound) when calling the SetLoadBalancerListenerSSLCertificate operation: There is no ACTIVE Load Balancer named 'loadbalancer-name'Here are my steps -Generate certificate for my domain 'abc.domain.cocertbot certonly --dns-route53 --dns-route53-propagation-seconds 60 -d abc.domain.co --agree-tos --no-bootstrap --preferred-challenges dns-01Import certificate into ACM -aws acm import-certificate --certificate fileb:///etc/letsencrypt/live/abc.domain.co/cert.pem --certificate-chain fileb:///etc/letsencrypt/live/abc.domain.co/chain.pem --private-key fileb:///etc/letsencrypt/live/abc.domain.co/privkey.pemUpdate the ssl listener on the loadbalancer -aws elb set-load-balancer-listener-ssl-certificate --load-balancer-name loadbalancer --load-balancer-port 443 --ssl-certificate-id arn:aws:acm:us-west-1:8443XXXXXXX:certificate/xxxxx-ab3b-4036-b65e-f6cee35735a8 --region us-west-1FollowComment"

Answer: "1Thank you for the detailed description.For ALB, you have to use elbv2 API. As described in [1], use the modify-listener [2] command to replace the default certificate, for example:aws elbv2 modify-listener \    --listener-arn arn:aws:elasticloadbalancing:us-west-1:8443XXXXXXX:listener/app/my-load-balancer/50dc6c495c0c9188/0467ef3c8400ae65 \    --certificates CertificateArn=arn:aws:acm:us-west-1:8443XXXXXXX:certificate/xxxxx-ab3b-4036-b65e-f6cee35735a8 \    --region us-west-1[1] https://docs.aws.amazon.com/elasticloadbalancing/latest/application/listener-update-certificates.html#replace-default-certificate[2] https://docs.aws.amazon.com/cli/latest/reference/elbv2/modify-listener.htmlCommentShareweidianswered 8 months agorePost-User-5761372 8 months agoThanks for your answer, weidi. I was able to update the listener using the command you shared :)Share"


Question: EC2 Windows Console Connection

"I am a system admin and I have started to use AWS for our cloud solution, currently we are using Vultr.  I have found how to connect to a Linux instance with the EC2 Serial Console and get into SSH but I was wondering on the AWS side is there a way to get a console view of a Windows machine GUI?  I am looking for the same function as a "crash cart" so i can work in Windows if there is an issue.  Vultr has an easy console connect button for any server and you get into your machine to see if during boot etc.  Is there an equivalent for AWS?  If this has been asked before, please point me in the direction of the answer.  Thank you.FollowComment"

Answer: "0There is no console access for Windows instances from AWS console like you have in VMWare and HyperV. Afraid your out of luckCommentShareGary Mcleananswered a month agoRWC a month agoThis answer above is correct, there isn't a way you can interact with the Windows console. But you can view a snapshot of the console screen, which may be useful in terms of finding out if the instance has fully booted to the login screen, or maybe even spotting an error message if it hasn't.In AWS Console -> EC2 select the instance and choose Actions -> Monitor and troubleshoot -> Get instance screenshotShare"


Question: Lambda can not load python modules installed with component

"Hi,I have installed Greengrass Core on a Raspberry Pi 4.I want to run a python script using Lambda functions. For that I created 2 components.ComponentA installs all python dependencies required to run python script.ComponentB is the Lambda component that will run the python script.When I deploy both components I can see that ComponentA installs the python packages under gcc_user user directory.But ComponentB always fails because it can not find/load the packages required.Both components should be run as the same gcc_user. Any ideas?Bests,ComponentA recipe :{"RecipeFormatVersion": "2020-01-25","ComponentName": "componentA","ComponentVersion": "1.0.3","ComponentType": "aws.greengrass.generic","ComponentDescription": "DHT11 dependencies","ComponentPublisher": "SomePublisher","ComponentConfiguration": {},"Manifests": [{"Platform": {"os": "linux"},"Name": "Linux","Lifecycle": {"Install": "python3 -m pip install dht11 RPi.GPIO boto3"},"Artifacts": []}],"Lifecycle": {}}Logs for ComponentA:ComponentA stdout. Downloading https://files.pythonhosted.org/packages/ea/43/4b4a1b26eb03a429a4c37ca7fdf369d938bd60018fc194e94b8379b0c77c/s3transfer-0.3.4-py2.py3-none-any.whl (69kB). {scriptName=services.componentA.lifecycle.Install, serviceName=componentA, currentState=NEW}ComponentA stdout. Collecting botocore<1.20.0,>=1.19.59 (from boto3). {scriptName=services.componentA.lifecycle.Install, serviceName=componentA, currentState=NEW}ComponentA stdout. Downloading https://files.pythonhosted.org/packages/ee/10/08dc3b74cc9c47a2c81b2e88e06c2661783b86fd77fc80f7a3eb1bf56905/botocore-1.19.59-py2.py3-none-any.whl (7.2MB). {scriptName=services.componentA.lifecycle.Install, serviceName=componentA, currentState=NEW}ComponentA stdout. Collecting urllib3<1.27,>=1.25.4; python_version != "3.4" (from botocore<1.20.0,>=1.19.59->boto3). {scriptName=services.componentA.lifecycle.Install, serviceName=componentA, currentState=NEW}ComponentA stdout. Downloading https://files.pythonhosted.org/packages/f5/71/45d36a8df68f3ebb098d6861b2c017f3d094538c0fb98fa61d4dc43e69b9/urllib3-1.26.2-py2.py3-none-any.whl (136kB). {scriptName=services.componentA.lifecycle.Install, serviceName=componentA, currentState=NEW}ComponentA stdout. Collecting python-dateutil<3.0.0,>=2.1 (from botocore<1.20.0,>=1.19.59->boto3). {scriptName=services.componentA.lifecycle.Install, serviceName=componentA, currentState=NEW}ComponentA stdout. Downloading https://files.pythonhosted.org/packages/d4/70/d60450c3dd48ef87586924207ae8907090de0b306af2bce5d134d78615cb/python_dateutil-2.8.1-py2.py3-none-any.whl (227kB). {scriptName=services.componentA.lifecycle.Install, serviceName=componentA, currentState=NEW}ComponentA stdout. Requirement already satisfied: six>=1.5 in /usr/lib/python3/dist-packages (from python-dateutil<3.0.0,>=2.1->botocore<1.20.0,>=1.19.59->boto3) (1.12.0). {scriptName=services.componentA.lifecycle.Install, serviceName=componentA, currentState=NEW}ComponentA stdout. Installing collected packages: jmespath, urllib3, python-dateutil, botocore, s3transfer, boto3. {scriptName=services.componentA.lifecycle.Install, serviceName=componentA, currentState=NEW}ComponentA stdout. Successfully installed boto3-1.16.59 botocore-1.19.59 jmespath-0.10.0 python-dateutil-2.8.1 s3transfer-0.3.4 urllib3-1.26.2. {scriptName=services.componentA.lifecycle.Install, serviceName=componentA, currentState=NEW}ls -ll /home/ggc_user/.local/lib/python3.7/site-packagesdrwxr-xr-x  4 ggc_user ggc_group     4096 Jan  6 12:52 RPidrwxr-xr-x  2 ggc_user ggc_group     4096 Jan  6 12:52 RPi.GPIO-0.7.0.dist-info-rwxr-xr-x  1 ggc_user ggc_group 10834284 Jan  5 11:33 _awscrt.cpython-37m-arm-linux-gnueabihf.sodrwxr-xr-x  4 ggc_user ggc_group     4096 Jan  5 11:33 awscrtdrwxr-xr-x  2 ggc_user ggc_group     4096 Jan  5 11:33 awscrt-0.9.15.dist-infodrwxr-xr-x  4 ggc_user ggc_group     4096 Jan  5 11:33 awsiotdrwxr-xr-x  2 ggc_user ggc_group     4096 Jan  5 11:33 awsiotsdk-1.5.3.dist-infodrwxr-xr-x 10 ggc_user ggc_group     4096 Jan 26 10:31 boto3drwxr-xr-x  2 ggc_user ggc_group     4096 Jan 26 10:31 boto3-1.16.59.dist-infodrwxr-xr-x  7 ggc_user ggc_group     4096 Jan 26 10:31 botocoredrwxr-xr-x  2 ggc_user ggc_group     4096 Jan 26 10:31 botocore-1.19.59.dist-infodrwxr-xr-x  6 ggc_user ggc_group     4096 Jan 26 10:31 dateutildrwxr-xr-x  3 ggc_user ggc_group     4096 Jan  6 12:52 dht11drwxr-xr-x  2 ggc_user ggc_group     4096 Jan  6 12:52 dht11-0.1.0.dist-infodrwxr-xr-x  3 ggc_user ggc_group     4096 Jan 26 10:31 jmespathdrwxr-xr-x  2 ggc_user ggc_group     4096 Jan 26 10:31 jmespath-0.10.0.dist-infodrwxr-xr-x  2 ggc_user ggc_group     4096 Jan 26 10:31 python_dateutil-2.8.1.dist-infodrwxr-xr-x  3 ggc_user ggc_group     4096 Jan 26 10:31 s3transferdrwxr-xr-x  2 ggc_user ggc_group     4096 Jan 26 10:31 s3transfer-0.3.4.dist-infodrwxr-xr-x  6 ggc_user ggc_group     4096 Jan 26 10:31 urllib3drwxr-xr-x  2 ggc_user ggc_group     4096 Jan 26 10:31 urllib3-1.26.2.dist-infoLogs for ComponentB:ComponentB: FATAL: lambda_runtime.py:147,Failed to import handler function "lambda_function.lambda_handler" due to exception: No module named 'boto3'. {serviceInstance=0, serviceName=componentB, currentState=RUNNING}ComponentB: FATAL: lambda_runtime.py:428,Failed to initialize Lambda runtime due to exception: No module named 'boto3'. {serviceInstance=0, serviceName=componentB, currentState=RUNNING}ComponentB: shell-runner-start. {scriptName=services.componentB.lifecycle.shutdown.script, serviceInstance=0, serviceName=componentB, currentState=BROKEN, command=["/greengrass/v2/packages/artifacts/aws.greengrass.LambdaLauncher/2.0.3/lambda-l..."]}FollowComment"

Answer: "0The component which is trying to use these Python libraries is a lambda? Is the lambda running in container mode or no container mode?You may try installing the Python modules globally instead of user-specific which should let the lambda mount them into the container.Cheers,Michael DombrowskiCommentShareEXPERTMichaelDombrowski-AWSanswered 2 years ago0Hi Michael,The component which is trying to use these Python libraries is a lambda function. This Lambda function is running in "no container mode".If I ssh into core device and install the modules globally (as root user) it works as expected but this is not what I want. In a real world environment I might not able to ssh into the core device.Installing dependencies globally requires root privileges and Lambda functions are run as ggc_user as default. So It seems impossible to install the dependencies globally without connecting the device. Besides, it should work as it is I guess.Any other suggestions?Cheers!CommentSharesavcuogluanswered 2 years ago0You can globally install the modules with privileges by telling Greengrass to run the install step as root. See https://docs.aws.amazon.com/greengrass/v2/developerguide/component-recipe-reference.html#recipe-format, look for "RequiresPrivilege".The likely reason why it doesn't load the user's path is because lambdas set the PYTHONPATH environment variable so that local python files will work, however I believe that Python will then not load from the users's path. You can address this by not using a lambda or by setting the PYTHONPATH environment variable in the lambda's recipe so that it contains the user home path. The last option, as I discussed earlier, is to install globally using RequiresPrivilege.CommentShareEXPERTMichaelDombrowski-AWSanswered 2 years ago0Hi Michael,Thanks for the answer.Giving a Lambda root access and installing dependencies globally is not an option for us.I tried setting PYTHONPATH environment variable to the user python package location but Python search paths got messed up totally.I found a very clean method to import a python path on the fly.I finally got it working using "site" python module.At the beginning of the Lambda function I used below code and all the packages installed from another lambda got resolved.import sitesite.addsitedir('/home/ggc_user/.local/lib/python3.7/site-packages')BestsCommentSharesavcuogluanswered 2 years ago0The only thing that worked for me was:sudo -H -u ggc_user python3 -m pip install your_moduleCommentSharejaimedantasanswered 2 years ago0Are you not able to use the site package, and I assume you are not blocked?CommentShareAWS-User-1579492answered 2 years ago"


Question: Differentiating Messages from aws.greengrass.telemetry.NucleusEmitter in a multi-core deployment

"We have multiple greengrass core devices that each have their own deploment. In each deployment, the 'aws.greengrass.telemetry.NucleusEmitter' is configured as follows:{"reset": [],"merge": {"pubSubPublish": "false","mqttTopic": "<IOT-THING-NAME>","telemetryPublishIntervalMs": <interval>}}.This allows us to distinguish between the different MQTT messages returned by the edge devices as they each arrive on a different topic.If we were to place all gg cores under the same deployment, is there a way of distinguishing between the messages that will be published on that topic ?Our requirement is to identify individual gg core devices that have memory/component issues, using the  'aws.greengrass.telemetry.NucleusEmitter' component, while having all devices under one deployment.FollowComment"

Answer: "1Accepted AnswerNucleus 2.6 will support interpolation in component configuration (currently it is only supported in the component recipe Lifecycle section). That will enable you to use the {iot:thingName} variable in the mqttTopic config. Unfortunately, this hasn't been released yet and I can't share a release date. But once that happens, this will definitely be the easiest way.https://docs.aws.amazon.com/greengrass/v2/developerguide/component-recipe-reference.html#recipe-variablesIn the interim, you can either create individual Thing deployments containing only the aws.greengrass.telemetry.NucleusEmitter component. Or, you can write your own custom bridge component that forwards messages from $local/greengrass/telemetry to an MQTT topic of your choice. This component can read Nucleus ThingName information from environment variables.CommentShareJoeAtAWSanswered a year agorePost-User-5440960 a year agoOr, you can write your own custom bridge component that forwards messages from $local/greengrass/telemetry to an MQTT topic of your choice.--> I'm try to write a custom bridge component that forwards messages. But My conpponent can't subcribe to topic $local/greengrass/telemetry. When I read document about mqtt topic it said that:"Topics that start with $ are reserved by AWS IoT Core. They arenot supported for publishing and subscribing except for using the specific topic names defined by AWSIoT Core services (for example, the AWS IoT Device Shadow service)." (https://docs.aws.amazon.com/whitepapers/latest/designing-mqtt-topics-aws-iot-core/designing-mqtt-topics-aws-iot-core.pdf#mqtt-design-best-practices)Share0This does not appear to be working yet as far as I can tell.  I have a deployment that includes the NucleusEmitter component, as well as Nucleus 2.6.0.  I have the configuration for mqttTopic set to device/{iot:ThingName}/telemetry.  However using the MQTT test client subscribed to device/+/#, I can see that the thing name is not being interpolated.CommentShareAWS-User-6789948answered a year ago"


Question: Textract Request has unsupported document format

"Hi,I'm trying to run textract API on a document but it's returning an error: botocore.errorfactory.UnsupportedDocumentException: An error occurred (UnsupportedDocumentException) when calling the AnalyzeDocument operation: Request has unsupported document formatThe thing is the document extraction works fine when uploaded to the Textract Console.Also, other documents that my code is looping through work fine as well.I've checked:The format. It's a .pdf and it worked on the condole.The size. It's only 217KBPages. Only 7Open. Nope I dont have the file open somewhere else.It does not appear to be corrupted or encrypted.Regions. I've checked my bucket and textract regions, they're the same and it works on other documents.I'd say this issue effects about 60% of the documents I'm trying to read.Any help would be appreciated.Thank you.FollowComment"

Answer: "0Please try the sample: https://github.com/aws-samples/amazon-textract-idp-cdk-stack-samples#simple-async-workflowCommentShareMartin Schade _AWS_answered 13 days agoGregory Smith 12 days agoI'm not sure I understand what that is exactly. Are there some sample pdf's in there that you'd like me to try?Share0Hi Gregory, if you are making a call on the sync api AnalyzeDocument, then there is a restriction of pdf pages allowed. Currently Textract sync operation only supports one page pdf Ref here. For multi page pdfs please use the async apis provided.If you are facing error on async APIs only, then please reach out to AWS support and provide jobId details to understand the failure reasons.CommentShareaws-animitra-1811532answered 10 days ago"


Question: Using custom ID instead of Cognito ID (sub)

"Is there a tutorial somewhere showing how to set up a custom auth flow that uses a custom ID (custom:id, configure as an optional attribute) instead of the Cognito ID?FollowComment"

Answer: "0Hello,From the description of the issue, I can see that you wish to implement the custom authentication flow by using a custom attribute of your user instead of using its sub ID.I would like to mention that the authentication flow starts with a call to the InitiateAuth API operation[1]. Now, we have to pass the user's username as an auth parameter to the API[2]. Here, I would like to mention that if we have configured our userpool to use email/phone_number as sign-up/sign-in option then we can pass the sub ID as well to the auth parameter of the API as in this case, the value for the username and the sub attribute of the authenticated user would be the same unique identifier UUID[3]. Currently, it is not possible to start the sign-in for a user by passing any other attribute or custom attribute of the user as an auth parameter.If you wish to use the custom attribute of your user for some validation, then you have to create a custom challenge in your Lambda function involving that attribute and present it to the user as a challenge, once the authentication has initiated. Please refer the documentation[4][5] for sample code snippets for creating custom challenges.[1]. https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_InitiateAuth.html[2]. https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-define-auth-challenge.html[3]. https://docs.aws.amazon.com/cognito/latest/developerguide/amazon-cognito-user-pools-using-the-id-token.html[4]. https://aws.amazon.com/blogs/mobile/extending-amazon-cognito-with-email-otp-for-2fa-using-amazon-ses/[5]. https://github.com/aws-samples/amazon-cognito-passwordless-email-authCommentShareSUPPORT ENGINEERNikita_Canswered 7 months ago0Thank you. Actually I may have this backward. It might sufficient for my needs that the Cognito POST API with the AccessToken as payload that returns a {"UserAttributes": {...}, "Username": "..."} dictionary include the custom ID in the attributes. Currently it includes only the sub, email and email_verified attributes.CommentSharerePost-User-1895156answered 7 months ago0Never mind, I found out: you just need to make the custom attribute readable for the selected app.CommentSharerePost-User-1895156answered 7 months ago"


Question: Performance Insights in RDS is not displaying pretty much any information with PostgreSQL

"Hi,About a week ago we activated Performance Insights for two of our database instances, both of them running with PostgreSQL 14.5Both databases have a nice amount of activity, but for some reason no meaningful stats are being showed in the Performance Insights graphs. For example, there are only 8 queries in a 24h span for our development database, and actually just one of them belongs to the exact database where the queries are being performed (we have two different databases apart of the postgres one).This was weird so I decided to investigate myself. On a different account, I created two different PostgreSQL databases:One running Postgres 12.7The other one running Postgres 15.2I enabled Performance Insights in both of them at creation time. I waited a few minutes until the database were fully up and performed some different queries: CREATE, INSERT INTO, SELECT... and still none of them was being displayed on the Performance Insights graphs for either of the databases.Is this normal? Am I missing any kind of configuration in the Postgres instance?Thanks in advance.FollowComment"

Answer: "0no meaningful stats are being showed in the Performance Insights graphsCould you please share the performance insights graph / view as well? I am trying to understand if nothing at all is shown, or the values are too sparse etcCommentShareVijayanswered a month agofd a month agoHi Vijay,Thanks for your answer. I attached a few days ago the screenshots you asked for. Do you need anything else?Regards.ShareVijay a month agoThanks for the follow up. I see some "Top waits" and "Top SQLs" showing up, that means indeed the queries you are interested in are low TPS and not being picked up in the sampling. Is it possible for you to increase the rate for these queries to confirm they show up after the rate goes up?Sharefd a month agoHi Vijay,Thanks again for your answer. I checked Postgres docs and the stats should be gathered from the pg_stat_statements view. I checked this view and I'm seeing some queries from our own database, with a total_exec_time of 200-650ms. Those queries never showed up in the Performance Insights.Are those numbers not high enough for being picked up by the sampling?Sharefd 11 days agoHi Vijay,It's been a couple of weeks and I've got no updates. Could you quickly help me here, please?Share0Because Performance Insights is a sampling method, queries that are completed in a short period of time may not be sampled.In other words, I think the SQL you executed was not displayed because it was done quickly.https://aws.amazon.com/rds/performance-insights/faqs/?nc1=h_lsPerformance Insights counts active sessions and records each session’s attributes about every second using a lightweight sampling mechanism. The sampled data is encrypted and aggregated to a variety of granularities and served through the API and in the DB Load chart in the Amazon RDS Management Console.If this answer leads to a resolution, please approve the answer for the betterment of the community.CommentShareEXPERTRiku_Kobayashianswered a month ago0Could you share some graphs on CPU or other CW metrics just to see how busy the instance is? Ideally PI should capture some queries/sessions from the sampling point of view. I want to confirm this is not a bug and indeed low activity as answered by earlier comment.CommentShareVijayanswered a month ago0Hi there,Further to the previous answers, the data load on your PostgreSQL DB instance may be below the database load threshold. If you enabled Performance Insights and you can't view your data, then check the Db load chart and Counter metrics in your Performance Insights dashboard. If you see data under Counter metrics, but not Db load chart, then your DB load might be below the database load threshold for PostgreSQL. To test and confirm, run a long-running transaction on your PostgreSQL DB instance, and then check the Performance Insights dashboard again. If the data populates, then your original data load is likely below the data load threshold.I hope that helps :)CommentShareSUPPORT ENGINEERBrandonanswered a month ago0Hi all,Thanks for your answers. Here are a couple of graphs that show the database activity over 1 week:Something tells me that these values are too low to be logged in the Performance Insights?CommentSharefdanswered a month ago0Vijay,Thanks for your answer. Here you have some Performance Insights graphs for reference, for the past week as well. Let me know if this is enough for you or if you need something else.Do mind that in the Top SQL, none of the queries shown belong to our production database. They belong to the default postgres database.CommentSharefdanswered a month ago"


Question: AWS Trusted Advisor Service vs. AWS Well-Architected Framework Tool

What is the best way to think about the relationship between the AWS Trusted Advisor Service and AWS Well-Architected Tool? There appears to be considerable overlap between the two.FollowComment

Answer: "1Accepted AnswerIn short... I'd say, think of Well-Architected Framework Tool as a collection of architectural best practices (think: architecture, design, people and processes), and AWS Trusted Advisor as a collection of operational best practices (resources & infrastructure).Long version of this answer could be as long as you want :) They are indeed tied together. Look at it this way - consider that any service, feature or tool in AWS is tied to the best practices of well-architected framework. Depending on where you are on your cloud journey, and which role you have in your organization, either one tool or another will be more relevant for you.Trusted Advisor is often used on a much more regular cadence (e.g. bi-weekly? monthly?) to monitor operational health of your AWS infrastructure and its resources and monitor trends over time. And for Well-Architected Review (WAR) with WA framework tool, depending on the size of your organization you might likely run it once a year for a specific workload. You may run WAR once, and the next year let's say you have reorganization and changes in your workloads, so you can run it again to see where you are now compared to best practices.I hope it helps! I'd be also happy to see other AWS experts respond with their suggestions.CommentShareEXPERTNataliya_Ganswered a year agopeisenha a year agoGreat, thank you very much!Share0Hello, yes, it's true that Trusted Advisor and Well Architected (and also other services like Security Hub) provides overlapping recommendations and best practices.That's why Trusted Advisor is always working towards aggregating new best practices into it's platform. It recently released an integration with Security Hub so you can now enable showing some of the Security Hub's recommendations in Trusted Advisor.Specifically for Well Architected, four new recommendations were added by them into Trusted Advisor in December 2021. You can see the announcement here: https://aws.amazon.com/about-aws/whats-new/2021/12/aws-well-architected-tool-trusted-advisor-checks/Trusted Advisor teams are continuously working on adding more sources of recommendations to the console.CommentShareRenato_Oanswered a year agopeisenha a year agoGreat, thanks for the further background information!Share"


Question: Can MediaConvert mix a background audio file with the main audio

We have used other encoding services where this feature was availableWith the main input file let say myVideo.mp4 we provided a background track and the transcoding would mix both in the resulting audio.m3u8Is this possible with MediaConvert ? Can't find anything on this.Right now we are premixing with ffmpeg before sending to MediaConvertWould be neat to avoid this lambda stepThanksMatFollowComment

Answer: "0You can combine multiple audio inputs, from Tracks, PID or sidecar files, into an Audio Selector. See here for some details.https://docs.aws.amazon.com/mediaconvert/latest/ug/more-about-audio-tracks-selectors.htmlOnce you have the Audio Selectors defined, on each audio output select the Advanced dropdown in the AWS MediaConvert console, then enable Manual Audio Remixing. There you can create a mix table of the audio from the separate channel included in the Audio Selector. Values of 0 mean no attenuation, values of -60 represent full attenuation.See if this provides the features your are needing.CommentShareMike-MEanswered 4 months ago0So if I add 2 audio selectors (one AAC from mp4 and one mp3 from external file) and use an audio selector group to combine them I get this errorError messageFailed to start pipeline [Audio selector groups cannot combine audio sources that have different codecs.]Error code1040Is it something possible or should I handle this with ffmpeg pre processingCommentSharerePost-User-3026550answered 4 months ago"


Question: Honeycode x QuickSight Integration Issue/Bug

"Hi there,I am trying to integrate a Honeycode app with QuickSight for data visualisation. I've been using this document (https://aws.amazon.com/blogs/business-productivity/use-amazon-quicksight-to-visualize-data-from-amazon-honeycode/) to guide me through the process. However, I keep running into this error when trying to deploy the code (see screenshots below)..Specifically, this is happening after I add the ARNs and IDs of the app into the code provided.Do you know what the problem might be and how I can fix it?Thanks!MarinaFollowComment"


Question: How to determine region and country before creating Amazon connect Instances?

"Hi Team,Can you please guide me on How to determine the region and country before creating Amazon connect Instances? What points should I consider before creating Amazon Instances? I am based out in India, so consider my questions based on my location preference.Thanks in advance.FollowCommentrePost-User-6553031 2 months agohithe languages used in awe is restricted that means the cost is highShare"

Answer: "0Accepted AnswerHi,1- You can follow the link https://repost.aws/knowledge-center/create-and-activate-aws-account to show you how to choose the instance and the region.2- How to determine region and country before creating Amazon connect Instances? The Answer is based mainly on the below 4 items.  and below link as well explain the same.a- Compliance: your company might need the data to stay in a certain region and this can be one of the reasons helping you to choose which region to chooseb- proximity: the close instance created to the end users or  to the operations, the better and reduce any latency. exmaple if your customers calling from UK so its better to have London Region, but if your customers calling from Frankfurt, so its better to choose Frakfurt and so on ..c- Feature availability: some amazon connect features can be available on London and not available on Frankfurt, so it depends which features you need and so on.d- Pricing: reserving lines and and inbound calls charges does different from region to another. to view the prices, you can go through the following link https://aws.amazon.com/connect/pricing/?trk=621ffabb-3956-409c-a119-15520c59022f&sc_channel=ps&ef_id=CjwKCAjw586hBhBrEiwAQYEnHRBWTv9dDk0UUe3lZ1WoSWv980egq3QkhBUDJsvCmX_MJ3au4ovfmBoCwSIQAvD_BwE:G:s&s_kwcid=AL!4422!3!645208884388!e!!g!!amazon%20connect%20pricing!19580264104!146695148553https://aws.amazon.com/blogs/architecture/what-to-consider-when-selecting-a-region-for-your-workloads/ComplianceProximityFeature availabilityPricingBest Regards,Ramy HusseinCommentShareRamyHanswered 2 months ago"


Question: Aurora PostgreSQL: Repeated periodic write IOPS spikes after upgrade to 13.6

"We recently upgraded from PostgreSQL13.5 to 13.6 and since then have seen a pattern of spiky write IOPS activity. The database receives batch updates once daily and has very little query traffic. We are experiencing these spikes even when there is no user activity on the database. The data updates that occur are almost entirely additive -- that is, there are little to no updates or deletions. The cluster has a single instance with no replicas.Given the timing of this behavior, it seems likely it is connected to the upgrade as nothing else has changed. An image of the CloudWatch Write IOPS stats can be found here: https://postimg.cc/fVWjbTdnFollowCommentroscode a year agoI'm seeing the same behavior on a freshly created aurora postgres 10.20 instance. Were you able to find anything else out about what is going on?Share"

Answer: 0Performance Insights will be helpful to identify the issue.CommentShareVetrivelanswered a year ago


Question: How to reduce long provisioning times for CodeBuild steps in CodePipeline?

"We are using CodePipeline to build and deploy our CDK stacks to AWS. However, the pipeline is quite slow and upon investigation we found that the provisioning of a container for the CodeBuild steps were taking between 1.5 - 2 mins and we have 5 CodeBuild steps in our pipeline so the pipeline runs for a long time.We are using the latest CodeBuild image (aws/codebuild/standard:6.0) and so the provisioning should be quick as the latest image is cached from what I have read.Are there any other suggestions as to how we can reduce the pipeline execution time?FollowComment"


Question: 111: Connection refused

"I'm setting up an Elastic Beanstalk setup to run a Django application. However, when trying to load the application in the web browser, a 502 Bad Gateway error appears. Checking the Elastic Beanstalk logs shows the following error:connect() failed (111: Connection refused) while connecting to upstream, client: 123.12.12.123, server: , request: "GET / HTTP/1.1", upstream: "http://127.0.0.1:8000/", host: "foo.eba-1abcdefg.us-east-1.elasticbeanstalk.com"I've tried settingALLOWED_HOSTS = ['*']orALLOWED_HOSTS = ['foo.eba-1abcdefg.us-east-1.elasticbeanstalk.com']as well as trying to set the ec2 instance and load balancer security groups to allow incoming traffic to port 8000 to redirect to the elastic beanstalk instance.But the error persists. What else should I try or look for? Any tips would be much appreciated. Thank you in advance.Edited by: esfaws on Jun 1, 2020 10:51 PMFollowComment"

Answer: "0Hi,I've been getting the same error when I try to deploy a Dash (plotly) application on AWS Beanstalk. Just to clarify did you execute the pip install gunicorn from the CLI on Beanstalk or did you run it in the virtual environment to store the dependency in the requirements.txt file?CommentShareneelm91answered 3 years agoedchelstephens 8 months agoHi, were you able to resolve this?Thanks in advanced!Share0In case anyone comes across this same problem, I never figured out the true root cause for this application. It was probably some configuration conflict between the Django app and the Elastic Beanstalk deployment.I ended up starting from scratch with a fresh Django and Elastic Beanstalk CLI install but still ran into the same error. It turned out that the instructions online on Amazon's website are outdated and the newer Amazon Linux 2 does not have gunicorn installed by default. Installing gunicorn was the biggest help in solving the problem.pip install gunicornAlso, in case it helps, the following buildspec.yml worked:version: 0.2phases:  install:    runtime-versions:      python: 3.8  pre_build:    commands:      - lsb_release -a      - python -m venv venv      - . venv/bin/activate      - pip install --upgrade pip      - pip install -r mysite/requirements.txt  post_build:    commands:      - echo Build completed on `date`artifacts:  files:    - '**/*'  base-directory: mysiteCommentShareesfawsanswered 3 years ago"


Question: Cost of CUDOS dashboard?

"My customer would like to deploy CUDOS dashboard and would like to know the exact associated cost for CUDOS dashboard. When i checked this document  https://www.wellarchitectedlabs.com/cost/200_labs/200_cloud_intelligence/cost-usage-report-dashboards/,  and looked in to the cost section. It states that cost would comprise of (QuickSight Enterprise license starts at $18 per month + Incremental costs associated with AWS Glue, Amazon Athena, and Amazon S3). Is there an estimate amount of cost that will be charged to the customer?FollowComment"

Answer: 0It usually ends up being around $100-$200/month for most large customers.CommentShareAaron Edellanswered 6 months ago0It largely depends on many factors like:-Number of working days per monthSPICE capacityNumber of authorsNumber of readersYou can refer to the below link for more information:-https://www.wellarchitectedlabs.com/cost/200_labs/200_cloud_intelligence/faq/#pricingCommentShareAWS-User-4371564answered 2 months ago


Question: Cannot find module 'aws-cloudfront-sign'

Answer: "0Accepted AnswerFor the missing dependency, you need to deploy your Lambda function as a package with all of the dependencies included.  If your function depends on libraries other than the AWS SDK for JavaScript, use npm to include them in your deployment package.   See https://docs.aws.amazon.com/lambda/latest/dg/nodejs-package.html#nodejs-package-dependenciesAlso please take a look at some example code for your use case here:https://www.npmjs.com/package/aws-cloudfront-sign?activeTab=exploreCommentShareEXPERTMatt-Banswered 6 months ago"


Question: write speed through lambda access point

"Our goal is to move files sized from 4-50 GB from S3 to EFS using lambda.EFS is configured as provisioned speed 1000 MiBsuccessfully mount lambda to the access point.  Lambda and EFS in the same VPC, same subnets.For benchmarking,  we are using file with size of 400MByte. Lambda configured to be 2G memorydownload 400 Mbyte files from S3 using Java API s3Client.getObject(new GetObjectRequest(bucket, key), file);To lambda /tmp directory : 7 secTo an EFS access point. /mnt/files : 8.8 secondsWhy writing to EFS so slow ~45MB?  Is it because downloading from S3 has a slow pipeline?Please advise the right way to do it.  We would like to stay with Lambda instead of using ECS (EC2) instance in this case.if lambda is configured to be 256M Byte of memory, the speed de-grade significantlydownload 400 Mbyte from S3 to/tmp : 30 sec/mnt/g : 44.7 sec.FollowComment"

Answer: "0Hi - thanks for trying out our recent EFS+Lambda integration! EFS should be able to achieve a higher write speed to a large file for a test like this. It looks like the performance of downloading to /tmp and /mnt/files is comparable in both of your cases, so it seems like the download from S3 is the limiting factor. When you give your Lambda function 3 GB/s of memory does the performance improve? Similarly, when you write a file from /tmp to /mnt/files is the performance better? Both of these will help narrow down the bottleneck.CommentShareAWS-User-4040733answered 3 years ago0Thank you for the answers.    They are in-line with what we are thinking and we are testing with lambda which is setup with 3008M byte RAM.Any official AWS document clearly stated the speed of moving large file from S3 to either lambda /tmp or EFS access point?  We have read some online experience where people saying it is 9-25Mbyte/sec but we would love to see some AWS document for that.CommentShareDavidYenanswered 3 years ago"


Question: CallRecording FileName in S3

HiWhen I add Set Call Recording Behavior the conversation is stored in S3 withContact-id_timestamp.wav format file.I can get the contact-id when the call start by Amazon connect stream API(contact.getContactId())is there a way we can get the timestamp so that I can save the exact file name in my internal DB so that I can retrieve the file with the exact name from s3.FollowComment

Answer: "0Hi Siddiq,The right way to do this would be to get this from the Contact Trace Record via the Kinesis stream/firehose. In this JSON object you a Recording Object:"Recording": {"DeletionReason": null,"Location": "mybucket/connect/vf-connect-demo/CallRecordings/2019/02/13/e2e44c3e-9d27-41b7-b581-247f83789bb2_20190213T10:13_UTC.wav","Status": "AVAILABLE","Type": "AUDIO"},The time stamp is HH:MM, but this is when the system connected it to the agent.More info on data: https://voicefoundry.com/amazon-connect-data-sources-part-1/ThxDanCommentShareDanBloyanswered 4 years ago"


Question: How to provide unique filename to each file in each event in aws lambda python?

"Hi There,I have a lambda function which trigger as soon as AWS data pipeline writes a directory with multiple files to s3 bucket. A lambda function which is written in python reads that directory files and convert into csv and write back to different bucket folder.The problem is when i pass the object name as file name it creates the same name file and upload to s3 bucket and it does  for every file this creates mess because everyday i have to point to the new file. I want to give unique name to these files so everyday the same file being replaced instead created new one.EDIT:Here is my codeif event:print(f"Got Events")#Reading file df = pd.read_json(obj['Body'], lines=True, orient='records', dtype='dict')csv_buffer = StringIO()df.to_csv(csv_buffer, index=False)filename = 'file1.csv'client.put_object(Bucket=bucket, Key=filename,Body=csv_buffer.getvalue())Please help...!FollowComment"

Answer: "0You have control on which file name to use. If you want to use a fixed name, just use that in your S3 API.CommentShareEXPERTUrianswered a year agoAWS-User-7692956 a year agoHere is my code:def lambda_handler(event, context):if event:    print(f"Got Events")    #Reading file     df = pd.read_json(obj['Body'], lines=True, orient='records', dtype='dict')   csv_buffer = StringIO()   df.to_csv(csv_buffer, index=False)   filename = 'file1.csv'  client.put_object(Bucket=bucket, Key=filename,Body=csv_buffer.getvalue())six files getting uploaded so this code runs 6 times where to give name which should be changed every event.Please help...!ShareUri EXPERTa year agoYou specify the filename in the client.put_object(Bucket=bucket, Key=filename,Body=csv_buffer.getvalue()) line. Just change filename to the value you want. Currently you gave it file1.csv.Lookin at another answer I see that you want to use filenames such as file1, file2, etc. To make sure that every invocation uses a different N, you will need to persist it somewhere, e.g., DynamoDB, and use it in each invocation. You will also need to make sure to zero it every day.Share0Hello,One possible approach is to append date time to your filename to generate a unique filename before upload in your lambda function. I'm not a Python or code expert but see if following helps.from datetime import datetimenow = datetime.now() # current date and timedt = now.strftime("%Y-%m-%d-%H-%M-%S") #store date time in stringfile = "file-" + dt #append the name to a string to generate filenameYou can test the code on a local machine first and see if it meets the requirement.CommentSharerePostfanclubanswered a year agoAWS-User-7692956 a year agoI want to give names like file1, file2,.....filen don't want to use other name else it will create many files everyday and create mess while consuming themShareAWS-User-7692956 a year agoSorry it won't work cause it will create multiple files every time which i don't want..how can i give unique name to the four files every time so that it will replace the destination files.Share0I'm assuming you are using the boto3 S3 Client.The put_object, upload_file and related methods accept a Key parameter so you can name the file in S3 whatever you'd like.CommentShareKyleanswered a year ago"


Question: how to set up X-Content-Type-Options header?

"i am setting up a REST based api , utilizing api gateway , lambda and a dynamo db . I am assuming as the request/response is handled by my lambda . i can set whatever headers i want in the response in my lambda,but wanted to see if there is anything already built in api gateway to add any headers likeX-Content-Type-Options in api gateway?FollowComment"

Answer: "0You could look at using a mapping template to override an API's request and response parameters and status codes.https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-override-request-response-parameters.htmlThe advantage to doing this header manipulation in the API Gateway is that by doing it there over the Lambda Function it keeps your lambda runtime quicker.  Since Lambda is billed by runtime, this can also be more cost effective.CommentSharetedtrentanswered 4 months ago"


Question: Billing Mexico address

How can I change my billing address in Mexico?FollowComment

Answer: "0Hello,This article will help you change your contact address for your account:https://aws.amazon.com/premiumsupport/knowledge-center/update-aws-account-mailing-address/If you need to update the billing address that appears on your invoice, this article will assist with that:https://aws.amazon.com/premiumsupport/knowledge-center/change-pdf-billing-address/- Brian D.CommentShareEXPERTAWS Support - Briananswered 4 months ago"


Question: AWS Lambda RIC crashes in both lambda environment and when running locally inside docker

"A little bit of context. I am running my docker image on AWS lambda on ARM 64, and on local with M1. I did not have any problems until recently when I noticed the image giving on lambda the errorcontainer-1  | 08 Sep 2022 17:29:01,415 [WARNING] (rapid) First fatal error stored in appctx: Runtime.ExitErrorcontainer-1  | 08 Sep 2022 17:29:01,415 [WARNING] (rapid) Process 14(npx) exited: Runtime exited with error: signal: killedcontainer-1  | END RequestId: b69162dc-da7b-4c3b-8965-2d609f1e2856This error started appearing on the local too, when testing, completely random, and once it happens I am forced to totally stop the docker container and restart it otherwise no more calls will work because the was lambda ric process died (as show by the 2nd error npx exited).What I am curious is where I can get more information on this error to inspect what is causing it. Are there any relevant log files to inspect?FollowComment"

Answer: "0This sort of issue will probably need a core dump file to be analyzed by the team that maintains the Lambda RIC. Is it possible for you to file a Support ticket?CommentShareEXPERTIndranil Banerjee AWSanswered 9 months agoRavenX86 9 months agoyou mean an issue on the git or somewhere else?After testing multiple times I was able to detect crashes are happening when an was API call is made (using node js aws-sdk v3)ShareIndranil Banerjee AWS EXPERT9 months agoYou are right. Since this is an open source project, you can submit issues on Github - https://github.com/aws/aws-lambda-nodejs-runtime-interface-client/issuesShare"


Question: What are the Hardware requirements for AWS CLI V2?

"Why doesn't Amazon specify exactly how much free space will be required by this software? This is kindergarten stuff that's being omitting here, guys.What are the hardware requirements/resource allocations that the AWS CLI will need?Our containers that will run AWS CLI do not have any need for python or other AWS dependencies, so those need to be included in the total space required.FollowComment"

Answer: "0Installing on a server we're about to 86 and it looks like ~200MB which seems like a lot more than what it should need...CommentShareHooHostanswered 4 months ago0The AWS CLI v2 is a command-line tool that can be installed on various operating systems, including Windows, MacOS, and Linux. The specific hardware requirements will depend on the operating system and the version of the AWS CLI that you are using.Here are some general guidelines for the hardware requirements for the AWS CLI v2:CPU: AWS CLI v2 is a command-line tool and does not require a high-performance CPU. However, it may require more CPU resources if it is running commands that involve large amounts of data or if it is running multiple commands at the same time.Memory: AWS CLI v2 does not require a large amount of memory, but it may require more memory if it is running commands that involve large amounts of data or if it is running multiple commands at the same time.Disk space: AWS CLI v2 requires a minimal amount of disk space to be installed, but it may require more disk space if it is used to download large amounts of data or if it is used to upload large amounts of data.Regarding the space that it will take on the containers, AWS does not provide an exact amount of space required since it can vary depending on the specific usage and the number of commands that will be executed, it is also important to note that AWS CLI v2 has a slimmed-down design that will minimize the storage requirements and it is designed to be highly portable.AWS also provides the option of installing the CLI v2 on a Lambda function, which will eliminate the need for disk space on the container.It is important to monitor the disk space usage of the container running the AWS CLI v2 and make sure that it has enough free space to perform its tasks. It is also worth noting that you can use the command aws --version to check the version of the AWS CLI v2 that you have installed and the aws configure list to see the current configuration.CommentSharejayamaheizenberganswered 4 months ago"


Question: Using AWS Activate - Founders credits to pay for Amazon EC2

Is it possible to use AWS Activate - Founders credits to pay for an EC2 instance?FollowComment

Answer: "0This link should provide you with a view of the services to which you can apply the credits.https://aws.amazon.com/activate/faq/Q. What can I use AWS Activate credits for?AWS is the world’s most comprehensive and broadly adopted cloud platform, offering over 200 fully featured services from data centers globally. You can use your AWS Activate credits for AWS services and support from infrastructure technologies like compute, storage, and databases–to emerging technologies, such as machine learning and artificial intelligence, data lakes and analytics, and Internet of Things. For a comprehensive list of eligible services, please review the lowermost section of the credits page here after receiving your AWS Activate credit approval email.CommentShareEXPERTiBehranswered a month ago"


Question: Instance ID uniqueness

"I would like to get some clarifications on the uniqueness of Instance IDs.From the docs (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/resource-ids.html) it says:"we assign each resource a unique resource ID."I just want to clarify the following:If an instance is terminated, can that Instance ID be used again in the same AWS account?Are Instance IDs unique across all regions in the same AWS account?FollowComment"

Answer: "0Accepted AnswerInstance IDs are uniquely generated globally, which means for every region and for every account, and are unable to be reused again. So to answer your questions specifically:No, that same ID cannot be used again.Yes, and even across all accounts.CommentShareLawrence Aielloanswered 2 months agoEXPERTJonathan_Dreviewed 2 months agoidris 2 months agoGreat, thank you for clarifyingShare"


Question: Export of DeepRacer model fails

I am trying to export a DeepRacer model to S3 using "Copy to S3" and an error occurs.Copy to S3 errorA DeepRacer access role could not be created. Make sure you have the appropriate permissions and try again.I tried with other accounts and the same thing happened.I hope you can help me find a solution.FollowComment

Answer: "0Hi there,This should involve your IAM roles so it is likely that you haven't given yourself root user access on the IAM roles assigned to your accounts.Hope this helps.Regards NNCommentShareNtiyiso Ngonyamaanswered 9 months ago"


Question: Schedule Lightsail Instance

What are the ways to schedule lightsail's instance to be automatic turn off and on as per the office hours?FollowComment

Answer: "0Hi,I think you should try use the AutoScaling or use EventBridge set a cron job,then you can auto turn on/off the instance,hope this can help youCommentShareUniStars-CNanswered 6 months agoSujeet Kumar 6 months agoI am unsure about the solution you are giving, Thanks though.I had setup the cron job on the linux server with AWS command and verified this is helping me outaws lightsail start-instance --instance-name poc-lightsail --region ap-south-1aws lightsail stop-instance --instance-name poc-lightsail --region ap-south-1Share"


Question: AWS Glue - Read a 'local' file in Python

"In AWS Glue I use a legacy Python package that reads a constant json file from the same package. To simplify things, let's say testLib package has a test-lib.py and data.json files. test-lib.py has a function:def test():    f = open('data.json')I uploaded testLib.zip to S3 and use it in the AWS Glue job:from test_lib import testtest()The AWS Glue job fails with the error: FileNotFoundError: [Errno 2] No such file or directory: 'data.json'There are many questions about how to manage files on S3 in AWS Glue. But it requires changing the legacy package that I don't want to do.Is there any way to configure AWS Glue job to allow open 'local' files?FollowComment"

Answer: "1For a pythonshell job, dependency should be packaged as .egg or .whl file.To refer to a file or .zip file in S3 from a Glue ETL pythonshell job, add these file path under 'Referenced files path' (ex: s3://bucketName/foldername/depFile1.txt, s3://bucketName/foldername/depFile2.txt) or 'Python library path'These files are available in a directory under '/temp'. Directory has naming structure like 'glue-python-libs*'These files can be referred in ETL job using following code snippet:import sys, osdirs = os.listdir('.')gluelib = list(filter(lambda c: c.startswith('glue-python-libs-'),dirs))## to print files/directories added in job configurationprint(os.listdir(gluelib[0])) ## to read a file added to job configuration 'Referenced files path'with open('/tmp/'+gluelib[0]+'/depFile1.txt', "r") as f:    lines = f.readlines()    print(lines)CommentShareSachin_Kanswered a year ago"


Question: COPY ignoring extra columns

I recently noticed that Redshift COPY command is ignoring any extra columns at the end of the source file which are missing in the table being loaded. I remember copy command used to fail with Extra columns found error earlier. Is this a new behavior recently released?FollowComment

Answer: "0Hello,As per https://docs.aws.amazon.com/redshift/latest/dg/r_COPY.html , there has been no change to COPY command recently.If you use COPY command with "maxerror" parameter then it will ignore the records with additional columns.https://docs.aws.amazon.com/redshift/latest/dg/copy-parameters-data-load.html#copy-maxerrorThank You !CommentSharePriyaAWS2020answered a year ago"


Question: Run C program as EKS POD

"Hi Team,Currently we have a customer running application in C program compiled as dll's and hosted the apps into Windows 2016  server in their on-prem data center.Now we have to migrate the apps into AWS cloud. Customer prefer to deploy this apps into container solution without code change.Is it possible to run C program dlls into EKS with small code change ? If NOT then what is the best possible treatment we should offer to customers for this application seamlessly deployed into AWS cloud.Thanks.FollowComment"

Answer: "1Accepted AnswerDepending on the application itself, it might be difficult to impossible to containerize such a Windows application (e.g. if it requires user interaction via Windows UI). You should first analyze and assess that application to understand whether it can be containerized.If so, you have several options then.Amazon EKS supports running Windows containers, see this blog post for details. Note that running applications in a Kubernetes cluster requires a deep understanding of how Kubernetes works.If there is no requirement to use Kubernetes, you can consider Amazon ECS with Fargate for running your Windows containers. You can read this blog post that explains how to do this. By using Amazon ECS with Fargate, you can take advantage of the serverless, pay-as-you-go compute engine for running Windows applications.If the application in question cannot be containerized, you can run it directly on Windows EC2 instances.UPDATEConsidering the additional information you provided in the comment of this answer:Containerizing a "headless" Windows app should be possible without large code changes. You will still need an executable that loads the app's DLL and runs the code functions.Migrating a native C application code to a managed environment (e.g. .NET or Java) might be challenging; there are some incompatible features in the programming languages and runtimes such as memory management, pointers, object-oriented paradigm, and so on - thus, the code might need to change a lot. Also, a managed environment might execute some functions slower than a native one, so if performance is a strict requirement, this has to be measured.With your current setup (a .NET webapp that calls a native C library), you should be able to integrate that library in the webapp as a dependency and containerize it. Then, use the container options mentioned above (Amazon ECS or Amazon EKS).You can also separate the .NET webapp from the calculation engine and introduce another .NET webapp which will serve as a wrapper for the native library. Consider this approach if you want to offer that calculation engine as a microservice.AWS offers a tool (Porting Assistant for .NET) for migrating from old .NET Framework to the new .NET platform, but not from native to managed.AWS App2Container can help you containerize your existing .NET application.CommentShareDmitry Balabanovanswered 3 months agoElango 3 months agoThanks @Dmitry for your response.This application contains logic of a calculation engine and also it doesn't have any UI. This application is yet again invoked by another neighboring application hosted in the same server. That caller application is a web application written in C#.  It invokes DLL  of this C application and get the calcs response.So it has only functions written inside for various calculations. Can we migrate this application into .NET core  ?  Do we have any  supported tools in AWS for migrating to a new technology ?Thanks.ShareDmitry Balabanov 3 months agoThank you for providing more details! I updated my answer.ShareKirk_D 3 months agoI would add that, since the calculation engine library is written in C, that it may be worth assessing whether (and how many) Windows APIs (or MFC, Win32 API, etc) that the code uses.  If it's none, or minimal, you may consider compiling the C library for Linux (using gcc or another compiler).  If you then port your existing ASP.NET application to ASP.NET Core (and as Dmitry said, we have a tool to help with that), you could then move the entire application to Linux container(s), which would cost less, and launch/scale faster.ShareElango 3 months agoThank you for sharing such a valuable informationShare"


Question: Amazon Polly Newscaster Voice not working with "Synthesize to S3 Bucket"

"I am trying to get the Amazon Polly Newscaster Voice to work.My text has 13,000 characters, so as per the AWS console instruction, my "task must be saved to an S3 bucket", as it's longer than 3,000 characters.I have created an s3 bucket and have configured my s3 task settings to output to the s3 bucket. But when I click on "synthesize to s3", I receive this message - "The input text contains invalid SSML syntax. Fix the SSML syntax, and then try again."I know that my SSML syntax is correct as I have done two checks.I reduced my text to below 3,000 characters and clicked "Listen to speech". My text was successfully read out in Newscaster style.I reduced my text to below 3,000 characters and clicked "Synthesize to S3". The MP3 audio file which perfectly read out in Newscaster style was saved in my S3 bucket.This is my SSML syntax<speak> <amazon:domain name="news"> Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua.</amazon:domain> </speak>Am I doing something wrong? Or is this a bug?Thanks in advance for any assistance.FollowComment"

Answer: "0SOLVEDThe "&" symbol in the text, is not accepted by the SSML syntax engineCommentSharesimon12899answered 4 years ago"


Question: Can not connect to DynamoDB locally

"Hello.I need to set up dynamoDB locally.I made everything by instruction. Run it in docker It works I see this:amazon/dynamodb-local:latest   "java -jar DynamoDBL…"   19 hours ago   Up 2 hours   0.0.0.0:8000->8000/tcp, :::8000->8000/tcpTry to connect by the instructionaws dynamodb list-tables --endpoint-url http://localhost:8000But I don't have any results. It just wailt without any logs in console.I tryed to call it manuallycurl http://localhost:8000It returns{"__type":"com.amazonaws.dynamodb.v20120810#MissingAuthenticationToken","Message":"Request must contain either a valid (registered) AWS access key ID or X.509 certificate."}I totally don't understand what to do. I don't see errors and I don't see result.Do you know how to debug it? Or may be is an instrucation.Help me please.FollowComment"

Answer: "3{"__type":"com.amazonaws.dynamodb.v20120810#MissingAuthenticationToken","Message":"Request must contain either a valid (registered) AWS access key ID or X.509 certificate."}The reason you see this exception is because you curled the endpoint, curl does not sign requests so the exception is expected.As for your actual issue, you need to ensure that you use credentials to connect to DynamoDB Local. You need to use aws configure to configure credentials (for local they do not have to be valid credentials).As you already have credentials saved as local then you should execute this command:aws dynamodb list-tables \--endpoint-url http://localhost:8000 \--profile local \--debug--debug will highlight where the request is failing, if it still fails.CommentShareEXPERTLeeroy Hannigananswered 14 days agoNick 3 days agoHi Leeroy. I have the exact same issue. I am running DDB in a docker container on my WSL Ubuntu. Everything is the same as the original poster except I can confirm that a netcat returns successfully, but anything else refuses to connect. Since this thread is only two weeks old, could this be a new bug or something like that?nick@T490s:~/code$ aws dynamodb list-tables --endpoint-url http://127.0.0.1:8000 --profile default --debugOutput here: https://pastebin.com/zfEBQnd9ShareLeeroy Hannigan EXPERT3 days agoHi Nick, yours looks like a separate issue. Can you create a new question and include the version of Local you are using along with your Docker setup commands?ShareNick 2 days agoHi Leeroy, thanks for the response. I made a separate issue here: https://repost.aws/en/questions/QUN54ZAARaQjSKRGgg-qPnog/Share-1Hi,if above does not fix it, I would suggest to follow this topic as could be related to some bug introduced in specific versions for local DynamoDB.https://repost.aws/questions/QUHyIzoEDqQ3iOKlUEp1LPWQ#ANdBm9Nz9TRf6VqR3jZtcA1gCommentShareEXPERTalatechanswered 14 days ago-2DynamoDB local requires Access Key ID and Secret Key ID to authenticate. This can be any set of valid credentials.I would recommend setting up the Access Key ID and Secret Key ID in your AWS CLI -> https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-files.htmlThen add the --profile parameter to the "aws dynamodb" command referencing the profile name you created when setting up the credentials.aws dynamodb list-tables --endpoint-url http://localhost:8000 --profile myprofileCommentShareBisinaanswered 14 days ago-2Sorry what does it mean: "This can be any set of valid credentials."?Where can I get the credentials for local DB? It has value by default? Or I need to specifiy it some how?CommentSharejangotanswered 14 days ago-2I have this in my credentials file[local]aws_access_key_id=dummy-access-keyaws_secret_access_key=dummy-access-keyand config[local]region = us-west-2And I call it soaws dynamodb list-tables --region local --endpoint-url "http://localhost:8000"or soaws dynamodb list-tables --profile local --endpoint-url "http://localhost:8000"Do I need to use the keys or I need generate it some how? Or specifty it?Whant is wrong?CommentSharejangotanswered 14 days ago-2On your IAM user, you can generate a set of credentials -> https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.htmlWhat I meant by "This can be any set of valid credentials" is that the aws_access_key_id and aws_secret_access_key need to be an actual set of credentials generated in AWS.Generate the credentials then update the local credentials file then you can simply run the following, You do not need to specify the region as local. The region parameter is only valid when we call AWS services in specific regions since we are using the --endpoint-url the CLI automatically calls the local instance.aws dynamodb list-tables --endpoint-url http://localhost:8000 --profile localCommentShareBisinaanswered 14 days ago"


Question: How to change parameter partial_revokes

"I'm running a MySQL 8.0 instance and wonder if it is possible to modify the system parameter partial_revokes, introduced in version 8.0.16: https://dev.mysql.com/doc/refman/8.0/en/server-system-variables.html#sysvar_partial_revokes . I have tried to create a new option parameters group but the option partial_revokes does not show up at all when searching for it.When executing statement SHOW VARIABLES, the option partial_revokes is however shown in the results list.So, anyone knows if this option is possible to modify?Best regards,MaxFollowComment"

Answer: "0Accepted AnswerHi Max-MaxIf you are unable to locate the parameter within the parameter group, that means that parameter is currently not modifiable/supported within RDS.Not all parameters available in MySQL 8.0 are modifiable for RDS MySQL.To determine the supported parameters for your DB engine, you can view the parameters in the DB parameter group used by the DB instance. For more information, see [1].You can easily use the CLI command below to view the parameters for the parameter group, use grep to filter for the parameter you’re looking for:aws rds describe-db-parameters --db-parameter-group-name default.mysql8.0 | grep partial_revokesTo learn more about the CLI and grep commands see [2] & [3]Executing the statement SHOW VARIABLES would indeed show partial_revokes in the results list, however RDS being a managed service, there is limited access to OS level changes and SUPER privileges are restricted. Running the "SET PERSIST partial_revokes = ON;" on the database itself would give an access denied error.I hope this helpsReferences:[1] Viewing parameter values for a DB parameter grouphttps://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_WorkingWithParamGroups.html#USER_WorkingWithParamGroups.Viewing[2]CLI commandhttps://docs.aws.amazon.com/cli/latest/reference/rds/[3] How to use grephttps://www.ibm.com/docs/zh/aix/7.1?topic=g-grep-commandCommentShareMabandlaanswered 2 years ago"


Question: How to see the rows of table in order by their ID with SELECT command in QLDB?

"Hi everyone,When I use the SELECT command, I see my table with no order (i.e., not ordered by ID), would you please guide me on how I can see my table in order?Thanks,FollowComment"

Answer: "0Currently QLDB does not support the "ORDER BY" clause and provides no guarantees for ordering of query results. To learn more about the subset of PartiQL query functions supported by QLDB, you can refer to: https://docs.aws.amazon.com/qldb/latest/developerguide/ql-reference.htmlCommentShareamolsaxena25answered a year ago"


Question: Greengrass LogManager not pushing logs to cloudwatch

"I setup an IoT greengrass core device with the aws.greengrass.LogManager plugin but its not pushing logs to cloudwatch. I created the GreengrassV2TokenExchangeRole + policy with cloudformation (since i want to manage the role and policy myself and deploy it to multiple accounts) and passed that to the greengrass installer as an argument. The policy is of the same type (customer managed) and has the same permission scope as when the installer creates it, Im not sure if this is actually causing issues for the component but I really dont know what else it could be.Questions:Is it possible to manage the IAM policy and role in cloudformation and have AWS greengrass nucleus use it?Should i even be doing it like this?if no then Is there a different/better approach to achieve this?Side notesThere are no errors about the logmanager not being able to push logs to cloudwatch in the greengrass.log file.The access adviser of the policy i see that it has never been accessed throughout the tracking period.Having Greengrass create the roles and policies itself works.FollowCommentMichaelDombrowski-AWS EXPERTa year agoWhen you say "Having Greengrass create the roles and policies itself works.", this means that when Greengrass created the role for you it is then able to upload the logs to CloudWatch? If that is true it sounds like you may have an issue with the IoT Role Alias. If that is the case, then you would see errors in greengrass.log when it tries to use the Role Alias. Common issues here would be that the IAM Role does not have credentials.iot.amazonaws.com as the trusted service.ShareRyan_B a year agoDoes your LogManager deployment configuration specify some log files to upload? Either in systemLogsConfiguration or componentLogsConfigurationMap?ShareLihao a year ago"Enable logging to CloudWatch Logs" section here covers what you need to upload log to Cloudwatch. Do you have both the needed IAM policy and "uploadToCloudWatch": true config?ShareAWS-User-4805351 a year ago@MichaelDombrowski-AWS Thanks for pointing that out. Strange thing is that, to the role there are other policies attached, (eventbridge and S3) these were accessed just fine, only Cloudwatch was not accessed. This is the trust policy that is attached to the role.{     "Version": "2012-10-17",     "Statement": [         {             "Effect": "Allow",             "Principal": {                 "Service": "credentials.iot.amazonaws.com"             },             "Action": "sts:AssumeRole"         }     ] }ShareAWS-User-4805351 a year ago@AWS-User-8932345 & @Ryan_B Yeah, my config looks like this:{   "reset": [],   "merge": {     "logsUploaderConfiguration": {       "systemLogsConfiguration": {         "uploadToCloudWatch": "true",         "minimumLogLevel": "INFO",         "diskSpaceLimit": "10",         "diskSpaceLimitUnit": "MB",         "deleteLogFileAfterCloudUpload": "false"       },       "componentLogsConfigurationMap": {         "com.<company>.<component>": {           "minimumLogLevel": "INFO",           "diskSpaceLimit": "20",           "diskSpaceLimitUnit": "MB",           "deleteLogFileAfterCloudUpload": "false"         }       }     },     "periodicUploadIntervalSec": "300"   } }ShareShow 3 more comments"

Answer: "0Hi, Are you still facing this issue? What version of log manager are you using, and could you share the part of greengrass.log file that show log manager getting started up and doing any work, if you can share debug logs, that will be more helpful. You said S3 and EventBridge access work fine, does that mean you are able to access those from the Greengrass core device using the TokenExchangeService component? (to confirm if the IoT role alias is set up correctly)CommentShareshagupta-awsanswered a year ago"


Question: File Gateway on VMWare ESXi 7.0 on Raspberry Pi

"FYI this is just for educational purposes, I have no intention of running production workloads on a RPi.Anyways, I was wondering if anyone has come around to deploying the aws storage gateway OVA onto ESXi 7.0 on ARM Fling.I tried to do it, but even after tweaking the ovf settings for the vm I was still unable to boot it, so I extracted the ova, and created a VM manually, but even then it did not work and ended up with a core dump...I pastebined the vmware.log for the core dump here: https://pastebin.com/y88AQNjP, and the vmx file here: https://pastebin.com/ckiXPELFAnyways, just curious if anyone has ever tried and if it would be possible at all...FollowComment"

Answer: "0Hello,I'm Mike with the Storage Gateway team.The issue you are having is caused by the fact we don't offer an ARM compatible image for the SGW product line.  I did some research and there aren't any plans to make ARM an option in the near future.Even if we had a workable image, the biggest RPi I saw on their product page (RPi 4) has 4 processors and 8GB of RAM.  The storage gateway requires 4 CPU and 16GB of RAM ( https://docs.aws.amazon.com/storagegateway/latest/userguide/Requirements.html#requirements-hardware ), so a virtualized Raspberry Pi wouldn't run the gateway to an acceptable level for even testing purposes.Please let me know if there are any other questions I can help you with.CommentShareMike-HAWSanswered 2 years ago"


Question: Is Cognito OAuth Logout 'state' param supported?

"Hi there,Try to achieve cognito oauth logout using state parameter as stated on the last example of the call documentation but not getting it injected on the redirect URL.Documentation link: (See Example#2 https://docs.aws.amazon.com/cognito/latest/developerguide/logout-endpoint.html)I see that on the documentation, state is not listed as it's on the login route, however, it's shown on the Example#2, leading to a might support thinking on my side.Is this really not supported on the logout?How we would carry state values on the logout actions? I see that some oauth implementations does support state on their logouts.I don't see state being specified on the OAuth@v2 RFC, thus is the reason why state is not implemented on logout. https://datatracker.ietf.org/doc/html/rfc7009#section-2.1FollowComment"


Question: Workdocks Drive asking for Repair

"Hi TeamI am just wondering if you have anything for workdocs drive asking for repairSo basically it keeps syncing and ended up saying driver need repair, I already did the logout thingy and yes I have reinstalled it and for sanity check I did the restart of my windows machine. Any other suggestions?FollowComment"

Answer: "0Hi, please reach out to customer support and create a ticket. Thank youCommentSharerePost-User-w6522502answered 9 months ago"


Question: "Amplify Hosting Build Error: `Could not initialize categories for 'dev': auth headless is missing the following inputParams facebookAppIdUserPool, googleAppIdUserPool`"

"Hello, I'm getting build errors when deploying the frontend application to my amplify web app. I've read the documentation on headless authentication here. My backend app successfully set up authentication with google and facebook dev keys. But I'm still unsure how to move past this error. I have tried add the environment variables of googleAppIdUserPool, facebookAppIdUserPool, etc.. to the environment variables of the project. I have also changed the frontend to be wrapped in Authenticator.Provider. But there is still no change.Is this to do with my API using other types of authentication like API keys (which is not recommended for production)?Or is this to do with a build script and environment variables not being in the correct place?                                 # Starting phase: build2023-02-28T21:11:27.145Z [INFO]: Amplify AppID found: d3patqdt499898. Amplify App name is: tmtAmplifyApp2023-02-28T21:11:27.195Z [INFO]: Backend environment dev found in Amplify Console app: tmtAmplifyApp2023-02-28T21:11:28.200Z [WARNING]: - Fetching updates to backend environment: dev from the cloud.2023-02-28T21:11:29.423Z [WARNING]: - Building resource api/tmtamplifyapp2023-02-28T21:11:29.703Z [INFO]: ⚠ WARNING: owners may reassign ownership for the following model(s) and role(s): Booking: [owner]. If this is not intentional, you may want to apply field-level authorization rules to these fields. To read more: https://docs.amplify.aws/cli/graphql/authorization-rules/#per-user--owner-based-data-access.2023-02-28T21:11:31.211Z [INFO]: ✅ GraphQL schema compiled successfully.                                 Edit your schema at /codebuild/output/src269408372/src/tmtamplifyapp/amplify/backend/api/tmtamplifyapp/schema.graphql or place .graphql files in a directory at /codebuild/output/src269408372/src/tmtamplifyapp/amplify/backend/api/tmtamplifyapp/schema2023-02-28T21:11:31.214Z [WARNING]: - Building resource auth/tmtAmplifyApp2023-02-28T21:11:31.263Z [WARNING]: - Building resource storage/s3tmtamplifyappstoragec3cc73b42023-02-28T21:11:31.322Z [WARNING]: ✔ Successfully pulled backend environment dev from the cloud.2023-02-28T21:11:31.335Z [WARNING]: ✖ There was an error initializing your environment.2023-02-28T21:11:31.366Z [INFO]: 🛑 Could not initialize categories for 'dev': auth headless is missing the following inputParams facebookAppIdUserPool, facebookAppSecretUserPool, googleAppIdUserPool, googleAppSecretUserPool2023-02-28T21:11:31.366Z [INFO]: Resolution: Review the error message and stack trace for additional information.                                 Learn more at: https://docs.amplify.aws/cli/project/troubleshooting/2023-02-28T21:11:31.375Z [INFO]: Session Identifier: 29680280-992f-412f-a130-fabce1ed85502023-02-28T21:11:31.375Z [WARNING]: - Creating Zip2023-02-28T21:11:31.389Z [INFO]: ✅ Report saved: /tmp/tmtAmplifyApp/report-1677618691379.zip2023-02-28T21:11:31.389Z [INFO]: 2023-02-28T21:11:31.389Z [WARNING]: - Sending zip2023-02-28T21:11:31.390Z [INFO]: File at path: '/codebuild/output/src269408372/src/tmtamplifyapp/amplify/backend/amplify-meta.json' does not exist2023-02-28T21:11:31.390Z [WARNING]: ✖ Sending zip2023-02-28T21:11:31.408Z [ERROR]: !!! Build failed2023-02-28T21:11:31.409Z [ERROR]: !!! Non-Zero Exit Code detected2023-02-28T21:11:31.409Z [INFO]: # Starting environment caching...2023-02-28T21:11:31.409Z [INFO]: # Environment caching completedFollowComment"


Question: Application load balancer blocks websocket connections?

"I made a websocket server on fargate, but I have an connection issue with application load balancer. The server works fine without ALB (with direct access to the IP of the fargate task). But when I access via ALB, it blocks the websocket connection. I enabled the stickiness of the target group. How can we use websocket with ALB?FollowComment"

Answer: "0Check that the client can reach the ALB and that the ALB's security group is configured in your fargate backend.CommentShareEXPERTUrianswered a year agonemy 10 months agoThe security group of the ALB and the service using the ALB is the same one of the fargate service without ALB. What is strange is that the connectivity depends on the client. If I test with wscat, I can connect to the fargate service with ALB. However, if I use other client (for example, minecraft), I cannot connect to it. Of course, I can connect with minecraft to the fargate service without ALB. What is wrong with the ALB?ShareUri EXPERT10 months agoMaybe there is something not standard with the minecraft websocket implementation?Sharenemy 10 months agoBut the only difference is ALB. Why ALB does not behave the same as the direct connection? The implementation of the websocket application must take care of the difference?Sharenemy 10 months agoAnyone has any ideas?Share"


Question: Do lightsail container services have a public IP?

"Nothing in the web UI, the CLI, nor documentation mentions networking details for lightsail containers.  Lightsail instances get a public IP (and the documentation even mentions that there is no such thing as a private subnet for lightsail), but I cannot determine anything for containers.My issue is that the service I am deploying tries to connect to another service on the internet but results in a read timeout.  It is extremely difficult to debug since you cannot connect to the container, nor view any network info.  And apparently lightsail runs its own VPC in a separate AWS account that you cannot view in any way.  I tried turning on "vpc peering", but to no avail.So are lightsail containers completely blocked off from the internet (outbound traffic)?FollowComment"

Answer: "0As far as I can tell from reviewing the following documents, it appears to be possible to connect to the Internet. [1][1] Container services in Amazon Lightsail | Lightsail Documentationhttps://lightsail.aws.amazon.com/ls/docs/en_us/articles/amazon-lightsail-container-services#container-services-endpoints-domainsCommentSharemn87answered 8 months agorePost-User-4746504 8 months agoIt is definitely true that they can receive inbound traffic from the internet, which is what that link describes (a public "endpoint" seems like a load balancer in front of the container(s)), but my question is about outbound traffic.Share0Yes, container services do have public IPs, but they're not stable. When setting up a custom domain, you'll want to point your custom domain to your container service by means of a CNAME record or an ALIAS record. Route53 and Lightsail Domains have special support for ALIAS records and some third-party DNS providers support ALIAS records as well.Lightsail container services can connect to anything on the public internet that accepts the connection. You may want to check your connection string for typos, make sure that the resource you're trying to connect to is reachable from the public internet, and add logging to your application so that you can get more information about the issue.CommentShareAlexanswered 8 months agorePost-User-4746504 8 months agoNo amount of logging inside a container can diagnose a socket timeout error.  Something at the OS or network layer is an issue (maybe there is no route outside of the subnet?).Just to verify, I created an EC2 instance (with a public IP assigned), installed docker, and ran the same container image.  Outbound connections worked with no change.Adding an ALIAS record in my 3rd party DNS worked great for inbound traffic on the lightsail container, but at this point I have given up on it getting outbound traffic.  Making things simple also means that it isn't flexible or transparent.Share"


Question: AWS TwinMaker - Change Icon Tag

"I would like to know how to change in real time, based on the response of the lambda associated with the component, the type of icon of an associated TAG in the 3D model.This is my component:{  "operationStatus": {    "definition": {      "dataType": {        "type": "STRING"      },      "isTimeSeries": false,      "isRequiredInEntity": false,      "isExternalId": false,      "isStoredExternally": true,      "isImported": false,      "isFinal": false,      "isInherited": false    }  }}This is lambda response:Response{  "propertyValues": {    "operationStatus": {      "propertyReference": {        "propertyName": "operationStatus",        "entityId": "sandbox-entity",        "componentName": "sandbox-component",        "externalIdProperty": {          "operationStatus": "WARNING"        }      },      "propertyValue": {        "stringValue": "WARNING"      }    }  }}this is tag config and ruleTag in my Grafana TwinMaker plugin never change icon:Thank you.FollowComment"

Answer: "0Hello,Tags can only change with rules defined for time series properties. This means that in the componentType definition the isTimeSeries field would be set to true. In your lambda you would upload values for your property with a timestamp.You can retrieve time series values for this property by adding a "Get Property Value History by Entity" query on the Scene Viewer panel. Pass the entity ID, component name, and property name to the query, and set the time range to a range with data for your property.CommentShareHarry Wandersmananswered 3 months ago"


Question: Delete a specific file within a Lambda function when cannot use Console Code Editor

"Hello,I deployed a package on Lambda, but I received the following error:deployment package of your Lambda function is too large to enable inline codeI found that an extra, unnecessary file ended up in the exported ZIP package that pushed it over the 3 MB console editor limit as described here:https://docs.aws.amazon.com/lambda/latest/dg/gettingstarted-limits.html#limits-listI'd like to delete that single file from the function without having to remake the entire Lambda function from scratch from a new ZIP file, because of the extensive re-configuration and extra validation work on our end that would be needed to do that.Since I can't access the console editor, however, I cannot simply right click the file and hit Delete like I would normally to delete the file.So my question is: is it possible to check and delete a specific file within a Lambda function when we cannot use the console editor, either through AWS web API or the CLI?Thank you for your help.FollowComment"

Answer: "0This is not possible and not recommended either. Lambda takes the zip file that you upload and does some processing internally with it. That artifact is not made available to users. So you will need to unzip the zip file, delete that culprit file and recreate the zip file and redeploy to lambda.Ideally you should be using SAM or CDK or other tools like Terraform for deploying your Lambda functions and integrate them into a CI/CD pipeline.A good workshop to get hands-on with SAM and AWS CI/CD services is here - https://cicd.serverlessworkshops.io/CommentShareEXPERTIndranil Banerjee AWSanswered a year agoAWS-User-4313191 a year agoHello Indranil,Thank you very much for your help and suggestions!If it can't be done, it can't be done - but it's just frustrating because I could easily delete that superfluous file in the console editor with a simple right click -> Delete, were that editor actually available to me.But because I just happened to cross an arbitrary 3 MB limit, I have no console editor, so the files that comprise the function seem to be set in stone. Just wish there was a way to capture that same functionality in this case.Oh well, thanks anyway, and will check out the resources you mentioned.Share"


Question: [Action required] Amazon Route 53 wasn't able to register

"No matter which domain I choose, com, link, rocks, etc.All the time failed. I'm trying to register as 'personal'.FollowComment"

Answer: "0Hello There,Looks like the domain name which is looking for <PERSONAL> domain name, where most of the TLD's are preregistered by other. You can quickly check herehttps://sg.godaddy.com/domainsearch/find?domainToCheck=personal.comFor that domain, I have listed the few available TLD's : Can looks for these available one's (holdings,construction,contractors,ceo etc...)personal.construction,personal.contractors,personal.holdings,personal.ceoAlso, as a side note the domain <personal.com> is at sale, check more info using the below sitehttps://instantdomainsearch.com/domain/sale?q=personal.comCommentShareChethan SEanswered a year ago0Unfortunately you get me wrong. I want to register a domain like eg. my-family.link, or .rocks or else. As 'personal' I meant for personal purposes, not on behalf of Company or else. And yes, no matter I try all the registrations are failed.CommentShareEugeneanswered a year ago"


Question: Cloud9 constantly 'reconnecting...'

"Hi,I don't know why but when I'm using Cloud9 I constantly (every 10 seconds or so) see a 'Reconnecting' message pop up, in yellow, at the top middle of my tab. It didn't used to do this but being done so for months now. This is the only site I see this kind of behaviour, my wifi connection is strong. Any ideas why or how to fix?Thanks,MarkFollowComment"

Answer: "0If you are using minimal instance types such as t2.micro or t3.small, scaling up instance type may improve this.CommentSharehayao-kanswered 10 months ago0same (and im not hosted on AWS)I think they just broke cloud9 and wont bother ever fixing it. I recommend moving to a different IDE and hosting provider.CommentSharestackersanswered 9 months ago0I had the same problem and unfortunately I wasn't able to find a solution.I tried stopping/restarting the instance, figuring that moves it to a different physical host and might fix it. But no luck.I increased the instance size and disk size but that didn't help either. (The instance was fine, I could ssh into it and it still ran all the services. Only the IDE was messed up.)I waited until the next day, figuring maybe it was a temporary issue. No luck there.Ultimately I rebuild a new cloud9, reinstalling everything again. Not as bad as it sounds, at least for me, as we have templates and scripts to do most of the work. But still disappointing and I wasted half a day on this.CommentSharerePost-User-7524899answered 4 months ago0Hi,Thanks for the response. I found the issue went away on its own, then re-appeared for a couple of days and then went away again. I haven't seen it in a while now. Not sure why/how either unfortunately.I hope it continues to work OK for you.MarkCommentSharerePost-User-2460381answered 4 months ago0Here too!After a few days I just happened to launch my original cloud9 environment that was having this issue and it's gone now.Whatever. :)CommentSharerePost-User-7524899answered 4 months ago"


Question: User Data script not downloading file(s) from S3

"I have been trying for days to get a User Data script for a Windows instance to copy files from S3. At first I was trying to use the 'aws s3 sync' command to copy a large number of files, but since that wouldn't work I zipped the files and I'm trying to now copy just that one zipped file. I am trying to perform the copy with both a script command and powershell command. Since other commands work in both blocks I know the user data script is formatted correctly and executing at launch, but this one file copy command using the AWS CLI is simply not working.It is also worth noting that I am downloading and installing the AWS CLI first, and that the download/install works from either the script block of powershell block. I am also associating an IAM role with sufficient permissions at launch time via an instance profile. And I know both work (CLI and role) as I am able to manually execute the copy command soon as I logon to the instance, it's just not performing the copy from the user data script.Here's the (cleansed) script block I'm running (formatting is fouled up due to <script>):<script>c:\windows\system32\msiexec.exe /i https://awscli.amazonaws.com/AWSCLIV2.msi /qn  aws s3 cp s3://<bucket>/<path/key>/Installers.zip C:\Temp\Installers.zip  </script>Here's the (cleansed) powershell block I'm running (formatting is fouled up due to <powershell>):<powershell> aws s3 cp s3://<bucket>/<path/key>/Installers.zip C:\Temp\Installers.zip</powershell>Obviously it's the exact same CLI command structured the same for both script and powershell, but again I cannot get it to execute the file copy operation from either block. However, the installation of the AWS CLI works fine from either block.After pulling my hair out for days on this trying to figure it out, searching the Internet and AWS documentation, and not finding any possible solutions I'm posting here to try to get this figured out. Thank you in advance for any assistance.More info... I can see in the err.tmp file (for the batch file <script> block that, "'#aws' is not recognized as an internal or external command, operable program or batch file."And in the <powershell> err.tmp file, "aws : The term 'aws' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again."So it appears that the AWS CLI is not installed by the time I am attempting to copy files from S3 to the instance, despite the fact that the AWS CLI is being installed as the first line in the batch portion of the User Data script, and I've even added "timeout 90" right after the install AWS CLI line in an attempt to pause for 1.5 minutes to give plenty of time to install the CLI prior to the first attempt at copying the file (in the batch block), then the second attempt to copy the file is in the 27th line of the script in the powershell portion, long after several other commands complete successfully.Again, thank you in advance for any assistance with this issue.FollowComment"

Answer: "0After the installation of AWS CLI, PowerShell or Command prompt is not recognizing the newly installed aws cli setup. I would recommend you to execute AWS CLI commands using its installed folder path as below:"C:\Program Files\Amazon\AWSCLIV2\aws.exe" s3 cp s3://<bucket>/<path/key>/Installers.zip C:\Temp\Installers.zipCommentShareAjayanswered 10 months agoELAdmin 10 months agoFYI I have made some progress on this.... Not directly in the User Data script, but I have created an AMI using EC2 Image Builder and used User Data there to install the AWS CLI. Then when I launch an instance from the AMI created in Image Builder which has the AWS CLI installed I am able to download files from my S3 bucket.However, I'd still like to figure out how to get this to work as per my original post...ShareELAdmin 10 months agoAjay, thank you for the answer. However - I neglected to post this in my original post - I did try to use the absolute path to aws.exe and that did not work for me either.Share"


Question: Cost for just creating efs and leaving it empty

What is the cost for a empty efsFollowComment

Answer: "0Accepted AnswerAmazon EFS pricing can be found here.  Basically you pay for what you provision even if that provisioned storage sits empty.CommentShareRobert_Fanswered 10 months agorePost-User-2738569 10 months agoThanks for answeringShare0Interesting question. I spun up an empty burstable EFS volume and see the minimum size used is 6KiB. Therefore, I would pay for this 6KiB, which when measured in monthly GB is negligible. So I would think, but haven't confirmed yet, that until you actually put data into the EFS, it'll be free. This is similar to creating an S3 bucket with no objects. You only pay for what you use.CommentShareEXPERTShlomo Dubrowinanswered 10 months ago0If you're just creating but not storing any files or transferring any data to/from, and you are not provisioning throughput, it should be no cost as the pricing is consumption based:Amazon Elastic File System (Amazon EFS) is a simple, serverless, set-and-forget, elastic file system. There is no minimum fee or setup charge. You pay only for the storage you use, for read and write access to data stored in Infrequent Access storage classes, and for any provisioned throughput.Regarding Provisioned Throughput, if you enable this you'll pay for that provisioned capacity regardless of use ($6/mo per 1MB/s provisioned throughput) as you're asking for capacity to be reserved for better performance.If you use the calculator you can input numbers to see expected costs. I.e. entering 0G and 0 provisioned throughput is a $0 bill. 0G but 1MB/s provisioned throughout is $6/mo.CommentShareAaron Doddanswered 10 months ago"


Question: Workdoc Drive for Mac - after Ventura Update

"After updating to Ventura, Workdocs Drive now gives error.  Unsupported macOS Version -The installed version of macFUSE is too old for the operating system. Please upgrade your macFUSE installation to one that is compatible with the currently running version of macOS.Any suggestions on how to resolve/fix this issue?Thanks.FollowCommentrePost-User-1751246 7 months agoI'm currently facing the same issue also. Have tried uninstalling & resintalling Workdocs Drive and installing the latest macFuse separately but Workdoc Drive is still facing the same "Unsupported macOs Version" error. Have only started getting this error after updating to Ventura.SharerePost-User-4398516 7 months agoI am facing exactly the same issue forllowing the upgrade to MacOS Ventura 13.0. How this be resolved?ShareAlexander JP 7 months agoas of today I installed the latest version and have it working on Ventura MBPShare"

Answer: "0@Alexander - thank you.  Update worked for my silicon Mac but not my Intel as of yet.   I will try again later .CommentSharerePost-User-2546261answered 7 months agorePost-User-1751246 7 months agoYou can try updating to Ventura 13.0.1. It's currently working for me on my 2020 intel mbp.Share0Thank you, Alexander. I unistalled and then reinstalled Amazon Workdocs Drive and Companion and it now works smoothly with MacOS VenturaCommentSharerePost-User-4398516answered 7 months ago"


Question: Why AWS WAF (AWS-AWSManagedRulesAmazonIpReputationList) google ip are blacklisted?

The IP shown in the screenshot is blacklisted by AWS WAF. And this IP is used by google for indexing?Will this affect the SEO in my website.FollowComment

Answer: "0Hello AWS Customer,The Amazon IP reputation list is generated by Amazon internal threat intelligence and is capturing IP addresses sending traffic to Amazon properties that demonstrate non-human behavior, such as a scripted bot or unauthorized programmatic interaction.[1]We recommend crafting a custom rule to allow traffic from the trusted IP address which is placed higher up in the rule priority order than the AWSManagedIPReputationList rule group. Alternatively, you could consider overriding the AWSManagedIPReputationList rule group to count mode in the WAF console if the list is blocking a trusted IP address.There are more detailed methods you can implement to avoid blocking.Add your own rule with allowing certain legitimate client IPs and set rule priority that to higher than the AWSManagedIPReputationList rule. This way too, if you want to use a domain, you can set it to host domain by using Header instead of IP.Use the scope down statement in the AWSManagedIPReputationList rule group to exclude the IPs in the IPSet from the scope of the rule group. However, note that since public IP ranges may change regularly, this solution may require a frequent manual updates to the rule config. If you use DNS to react to changes in public IP, you can set it to host domain by using Header instead of IP in the scope down statement.[2]If you want to use IP Range to apply the above ways, you need to set up certain legitimate client IPs by registering them in AWS WAF IP sets.[3]Overriding the actions of a rule group or its rules to COUNT. AWS WAF overrides the terminating action so that the result of the rule group evaluation is only a count action. You can also use this option to troubleshoot a rule group that's generating false positives. However, since this overriding is related to the action of the rule, it should be noted that overriding is applied even in case of true positive of malicious act that needs to be blocked.[4]Hope you will find this information useful. Please let me know if you have any further questions or concerns. We will be more than glad to assist you.CommentShareSUPPORT ENGINEERJisoo_Kanswered 6 months ago"


Question: Aurora v2.10.2 - MySQL Server Has Gone Away

"Since upgrading our Aurora cluster to v2.10.2 a couple of weeks ago we have experienced intermittent "MySQL server has gone away" errors on the Writer instance. So far the readers are not affected. These occur at seemingly random times to queries on various tables. The errors did not occur prior to upgrade.All RDS logs are empty, except for the external/mysql-external.log file. This file appears to show the server being restarted, but it does not include any timestamps or other information that could be used to tie it back to the "MySQL server has gone away errors"This file has now grown to over 80mb in size.We are already on the latest Aurora engine version for v2. Any assistance would be appreciated.FollowComment"

Answer: "0I'd recommend opening up a support case so the RDS team can look into this issue.  Support has access to tooling to review the health of your RDS instances.There are several causes for the server gone away error described here.You can view RDS Events, including restarts, by following this guide.CommentShareHopperanswered 9 months ago0Were you able to get this solved ? We are experiencing an identical issue.CommentShareMarkanswered 5 months ago0I am also facing the same issue.I have tried all the possible changes like.wait_timeout, interactive_timeout, max_allowed_packet  but no luck.Is there any solution you foundCommentShareHimanshu Sharmaanswered 3 months ago"