Question: Lambda get IOT core things list

"I need to check in a lambda function if a thing (named X) is actually configured.I was thinking on a function like listIotThings and check if X is contained in there.The use case is to register a device in a mobile app, but should only be allowed if the thing is actually configured. So I go from the mobile app -> API Gateway -> lambda verification.Any suggestion welcome.FollowComment"

Answer: "0You can always use iot with boto 3 and use list_things(**kwargs). Use the attributeName and attributeValue parameters to filter your things. For example, calling ListThings with attributeName=Color and attributeValue=Red retrieves all things in the registry that contain an attribute Color with the value Red . You can also pass thingTypeName (string) -- The name of the thing type used to search for things. It will return along with other attributes like thingArn which you can verify.https://boto3.amazonaws.com/v1/documentation/api/latest/reference/services/iot.html#IoT.Client.list_thingsCommentShareEXPERTAWS-User-Nitinanswered 5 months ago"


Question: Using custom domain with AppStream and no applications are available

"I have a fully working custom application in AppStream 2.0.  I can create a streaming URL and it works great.  I followed the instructions for using a custom domain and it successfully goes to the appstream page, but it's saying "No applications available.  Please contact your IT administrator for assistance."  All I'm doing is replacing the "appstream2.us-east-1.aws.amazon.com" with my custom domain, keeping the authenticate?parameters clause intact.  I've tried adjusting which headers are cached but it doesn't seem to change anything.  Any ideas?FollowComment"

Answer: "1Accepted AnswerCan you try the custom domain streaming URL in an incognito/private browser, with developer tools open? I'm curious if any errors are being written to the console that might explain what's going on.Not that it should matter, but is this an Elastic fleet or an Always-On/On-Demand fleet?CommentShareEXPERTMuraliAtAWSanswered a year agoMGrace2022 a year agoGood idea.  I am seeing tons of errors in the console (below).  Don't get these errors when going to the AWS link and the application is running.  Also, this is an elastic fleet.  This definitely explains why there's no apps, I'm just not sure where the 400 error is coming from, yet the AppStream 2.0 landing page appears fine./ctrl/catalog/all-apps:1Failed to load resource: the server responded with a status of 400 ()prod_v9a8a867591b8ff517d78b33fce455378e66bb4ce.gz.js:5647[2022-02-12 05:38:59:515 PST][ERROR][CatalogService] Error getting apps: [object Object]ShareMuraliAtAWS EXPERTa year agoI can't seem to replicate the behavior you're seeing unfortunately, no matter how much I tweak the Cloudfront distribution. Most likely will need a support request to understand why the API call to fetch the applications list is failing specifically when using a custom domain/Cloudfront. I'll ask around internally to see if anyone else has experienced this, too.ShareMGrace2022 a year agoI have it working now, but I can't pinpoint what the exact fix was.  One item that was missing was the wildcard portion of the subdomain.  I set it up in the SSL certificate, but did not define a wildcard CNAME in the DNS record.  That changed the behavior somewhat, but I also had to alter the caching settings.  It seems like the Cloudfront options are different than the documented steps, such as forwarding cookies.  So I believe a combination of those two items got it work.  Really appreciate the help, got me pointed in the right direction.Share"


Question: How to delete Custom Msk Connect Plugin

Hello! I think the question is clear. I searched both AWS CLI and Web UI but could not find any solution. I also deleted the plugin object from S3 but it still seems active in MSK Connect custom plugins tab. How can I delete custom plugins from MSK Connect?FollowComment

Answer: "0The delete API for Plugins in MSK Connect is not available yet. Keeping connectors in your list, won't incur any changes.CommentShareflomairanswered a year ago"


Question: Custom domain name not resolvable

"I've set up a custom domain name for an API gateway HTTP API.  I can see the record in Route 53, but several hours later the domain is not resolvable in DNS.  Am I missing something?FollowComment"

Answer: 0I had created the route 53 record before setting up the custom domain in API gateway - doing it the other way round worked fine.CommentSharerde2answered 3 years ago


Question: MSK Connect not authenticating

"Hi all,I'm having an "Access Denied" error when using the Splunk Connect to Kafka to send data from my AWS MSK cluster to a custom built Splunk application running on an EC2 instance.Using: splunk-kafka-connect-v209 downloading from SplunkWorker config:key.converter=org.apache.kafka.connect.storage.StringConvertervalue.converter=org.apache.kafka.connect.storage.StringConverterkey.converter.schemas.enable=falsevalue.converter.schemas.enable=falseoffset.flush.interval.ms=10000Connector config:connector.class=com.splunk.kafka.connect.SplunkSinkConnectorsplunk.hec.raw=truesplunk.hec.ssl.validate.certs=falsetopics=msk-serverless-tutorialtasks.max=1splunk.hec.ack.enabled=falsesplunk.indexes=<Splunk index name>splunk.hec.token=<Splunk HEC token>splunk.hec.uri=https://<Splunk ec2 ip address>:8088IAM role policy:{    "Version": "2012-10-17",    "Statement": [        {            "Effect": "Allow",            "Action": [                "kafka:*",                "ec2:DescribeSubnets",                "ec2:DescribeVpcs",                "ec2:DescribeSecurityGroups",                "ec2:DescribeRouteTables",                "ec2:DescribeVpcEndpoints",                "ec2:DescribeVpcAttribute",                "kms:DescribeKey",                "kms:CreateGrant",                "logs:CreateLogDelivery",                "logs:GetLogDelivery",                "logs:UpdateLogDelivery",                "logs:DeleteLogDelivery",                "logs:ListLogDeliveries",                "logs:PutResourcePolicy",                "logs:DescribeResourcePolicies",                "logs:DescribeLogGroups",                "S3:GetBucketPolicy",                "firehose:TagDeliveryStream"            ],            "Resource": "*"        },        {            "Effect": "Allow",            "Action": [                "ec2:CreateVpcEndpoint"            ],            "Resource": [                "arn:*:ec2:*:*:vpc/*",                "arn:*:ec2:*:*:subnet/*",                "arn:*:ec2:*:*:security-group/*"            ]        },        {            "Effect": "Allow",            "Action": [                "ec2:CreateVpcEndpoint"            ],            "Resource": [                "arn:*:ec2:*:*:vpc-endpoint/*"            ],            "Condition": {                "StringEquals": {                    "aws:RequestTag/AWSMSKManaged": "true"                },                "StringLike": {                    "aws:RequestTag/ClusterArn": "*"                }            }        },        {            "Effect": "Allow",            "Action": [                "ec2:CreateTags"            ],            "Resource": "arn:*:ec2:*:*:vpc-endpoint/*",            "Condition": {                "StringEquals": {                    "ec2:CreateAction": "CreateVpcEndpoint"                }            }        },        {            "Effect": "Allow",            "Action": [                "ec2:DeleteVpcEndpoints"            ],            "Resource": "arn:*:ec2:*:*:vpc-endpoint/*",            "Condition": {              Logs from the connector:...[Worker-08244672269d6f804] [2022-07-17 06:49:02,474] INFO Successfully logged in. (org.apache.kafka.common.security.authenticator.AbstractLogin:61)[Worker-08244672269d6f804] [2022-07-17 06:49:02,773] WARN The configuration 'producer.sasl.jaas.config' was supplied but isn't a known config. (org.apache.kafka.clients.admin.AdminClientConfig:369)[Worker-08244672269d6f804] [2022-07-17 06:49:02,773] WARN The configuration 'group.id' was supplied but isn't a known config. (org.apache.kafka.clients.admin.AdminClientConfig:369)[Worker-08244672269d6f804] [2022-07-17 06:49:02,774] WARN The configuration 'listeners.https.ssl.truststore.password' was supplied but isn't a known config. (org.apache.kafka.clients.admin.AdminClientConfig:369)[Worker-08244672269d6f804] [2022-07-17 06:49:02,774] WARN The configuration 'plugin.path' was supplied but isn't a known config. (org.apache.kafka.clients.admin.AdminClientConfig:369)[Worker-08244672269d6f804] [2022-07-17 06:49:02,776] WARN The configuration 'producer.sasl.client.callback.handler.class' was supplied but isn't a known config. (org.apache.kafka.clients.admin.AdminClientConfig:369)[Worker-08244672269d6f804] [2022-07-17 06:49:02,776] WARN The configuration 'consumer.sasl.mechanism' was supplied but isn't a known config. (org.apache.kafka.clients.admin.AdminClientConfig:369)[Worker-08244672269d6f804] [2022-07-17 06:49:02,776] WARN The configuration 'consumer.ssl.truststore.location' was supplied but isn't a known config. (org.apache.kafka.clients.admin.AdminClientConfig:369)[Worker-08244672269d6f804] [2022-07-17 06:49:02,776] WARN The configuration 'rest.extension.classes' was supplied but isn't a known config. (org.apache.kafka.clients.admin.AdminClientConfig:369)[Worker-08244672269d6f804] [2022-07-17 06:49:02,776] WARN The configuration 'listeners.https.ssl.key.password' was supplied but isn't a known config. (org.apache.kafka.clients.admin.AdminClientConfig:369)[Worker-08244672269d6f804] [2022-07-17 06:49:02,777] WARN The configuration 'producer.ssl.truststore.location' was supplied but isn't a known config. (org.apache.kafka.clients.admin.AdminClientConfig:369)[Worker-08244672269d6f804] [2022-07-17 06:49:02,777] WARN The configuration 'status.storage.replication.factor' was supplied but isn't a known config. (org.apache.kafka.clients.admin.AdminClientConfig:369)[Worker-08244672269d6f804] [2022-07-17 06:49:02,777] WARN The configuration 'sasl.jaas.config' was supplied but isn't a known config. (org.apache.kafka.clients.admin.AdminClientConfig:369)[Worker-08244672269d6f804] [2022-07-17 06:49:02,777] WARN The configuration 'sasl.client.callback.handler.class' was supplied but isn't a known config. (org.apache.kafka.clients.admin.AdminClientConfig:369)[Worker-08244672269d6f804] [2022-07-17 06:49:02,777] WARN The configuration 'offset.storage.topic' was supplied but isn't a known config. (org.apache.kafka.clients.admin.AdminClientConfig:369)[Worker-08244672269d6f804] [2022-07-17 06:49:02,777] WARN The configuration 'consumer.security.protocol' was supplied but isn't a known config. (org.apache.kafka.clients.admin.AdminClientConfig:369)[Worker-08244672269d6f804] [2022-07-17 06:49:02,777] WARN The configuration 'rest.advertised.listener' was supplied but isn't a known config. (org.apache.kafka.clients.admin.AdminClientConfig:369)[Worker-08244672269d6f804] [2022-07-17 06:49:02,778] WARN The configuration 'value.converter' was supplied but isn't a known config. (org.apache.kafka.clients.admin.AdminClientConfig:369)[Worker-08244672269d6f804] [2022-07-17 06:49:02,778] WARN The configuration 'key.converter' was supplied but isn't a known config. (org.apache.kafka.clients.admin.AdminClientConfig:369)[Worker-08244672269d6f804] [2022-07-17 06:49:02,778] WARN The configuration 'consumer.sasl.jaas.config' was supplied but isn't a known config. (org.apache.kafka.clients.admin.AdminClientConfig:369)[Worker-08244672269d6f804] [2022-07-17 06:49:02,778] WARN The configuration 'config.storage.topic' was supplied but isn't a known config. (org.apache.kafka.clients.admin.AdminClientConfig:369)[Worker-08244672269d6f804] [2022-07-17 06:49:02,778] WARN The configuration 'listeners' was supplied but isn't a known config. (org.apache.kafka.clients.admin.AdminClientConfig:369)[Worker-08244672269d6f804] [2022-07-17 06:49:02,778] WARN The configuration 'producer.security.protocol' was supplied but isn't a known config. (org.apache.kafka.clients.admin.AdminClientConfig:369)[Worker-08244672269d6f804] [2022-07-17 06:49:02,779] WARN The configuration 'rest.advertised.host.name' was supplied but isn't a known config. (org.apache.kafka.clients.admin.AdminClientConfig:369)[Worker-08244672269d6f804] [2022-07-17 06:49:02,781] WARN The configuration 'status.storage.topic' was supplied but isn't a known config. (org.apache.kafka.clients.admin.AdminClientConfig:369)[Worker-08244672269d6f804] [2022-07-17 06:49:02,781] WARN The configuration 'listeners.https.ssl.keystore.location' was supplied but isn't a known config. (org.apache.kafka.clients.admin.AdminClientConfig:369)[Worker-08244672269d6f804] [2022-07-17 06:49:02,781] WARN The configuration 'listeners.https.ssl.keystore.password' was supplied but isn't a known config. (org.apache.kafka.clients.admin.AdminClientConfig:369)[Worker-08244672269d6f804] [2022-07-17 06:49:02,785] WARN The configuration 'producer.sasl.mechanism' was supplied but isn't a known config. (org.apache.kafka.clients.admin.AdminClientConfig:369)[Worker-08244672269d6f804] [2022-07-17 06:49:02,786] WARN The configuration 'config.storage.replication.factor' was supplied but isn't a known config. (org.apache.kafka.clients.admin.AdminClientConfig:369)[Worker-08244672269d6f804] [2022-07-17 06:49:02,787] WARN The configuration 'offset.flush.interval.ms' was supplied but isn't a known config. (org.apache.kafka.clients.admin.AdminClientConfig:369)[Worker-08244672269d6f804] [2022-07-17 06:49:02,787] WARN The configuration 'key.converter.schemas.enable' was supplied but isn't a known config. (org.apache.kafka.clients.admin.AdminClientConfig:369)[Worker-08244672269d6f804] [2022-07-17 06:49:02,787] WARN The configuration 'ssl.truststore.location' was supplied but isn't a known config. (org.apache.kafka.clients.admin.AdminClientConfig:369)[Worker-08244672269d6f804] [2022-07-17 06:49:02,787] WARN The configuration 'listeners.https.ssl.truststore.location' was supplied but isn't a known config. (org.apache.kafka.clients.admin.AdminClientConfig:369)[Worker-08244672269d6f804] [2022-07-17 06:49:02,788] WARN The configuration 'value.converter.schemas.enable' was supplied but isn't a known config. (org.apache.kafka.clients.admin.AdminClientConfig:369)[Worker-08244672269d6f804] [2022-07-17 06:49:02,788] WARN The configuration 'offset.storage.replication.factor' was supplied but isn't a known config. (org.apache.kafka.clients.admin.AdminClientConfig:369)[Worker-08244672269d6f804] [2022-07-17 06:49:02,788] WARN The configuration 'consumer.sasl.client.callback.handler.class' was supplied but isn't a known config. (org.apache.kafka.clients.admin.AdminClientConfig:369)[Worker-08244672269d6f804] [2022-07-17 06:49:02,789] INFO Kafka version: 2.7.1 (org.apache.kafka.common.utils.AppInfoParser:119)[Worker-08244672269d6f804] [2022-07-17 06:49:02,789] INFO Kafka commitId: unknown (org.apache.kafka.common.utils.AppInfoParser:120)[Worker-08244672269d6f804] [2022-07-17 06:49:02,789] INFO Kafka startTimeMs: 1658040542789 (org.apache.kafka.common.utils.AppInfoParser:121)[Worker-08244672269d6f804] [2022-07-17 06:49:05,478] INFO [AdminClient clientId=adminclient-1] Failed authentication with <bootstrap cluster url>/INTERNAL_IP ([4c85d6b5-7f33-451a-b6d3-a49218c6f3ff]: Access denied) (org.apache.kafka.common.network.Selector:616)[Worker-08244672269d6f804] [2022-07-17 06:49:05,482] ERROR [AdminClient clientId=adminclient-1] Connection to node -1 (<bootstrap cluster url>/INTERNAL_IP) failed authentication due to: [4c85d6b5-7f33-451a-b6d3-a49218c6f3ff]: Access denied (org.apache.kafka.clients.NetworkClient:771)[Worker-08244672269d6f804] [2022-07-17 06:49:05,483] WARN [AdminClient clientId=adminclient-1] Metadata update failed due to authentication error (org.apache.kafka.clients.admin.internals.AdminMetadataManager:232)[Worker-08244672269d6f804] org.apache.kafka.common.errors.SaslAuthenticationException: [4c85d6b5-7f33-451a-b6d3-a49218c6f3ff]: Access denied[Worker-08244672269d6f804] [2022-07-17 06:49:05,497] INFO App info kafka.admin.client for adminclient-1 unregistered (org.apache.kafka.common.utils.AppInfoParser:83)[Worker-08244672269d6f804] [2022-07-17 06:49:05,497] INFO [AdminClient clientId=adminclient-1] Metadata update failed (org.apache.kafka.clients.admin.internals.AdminMetadataManager:235)[Worker-08244672269d6f804] org.apache.kafka.common.errors.TimeoutException: Call(callName=fetchMetadata, deadlineMs=1658040572795, tries=1, nextAllowedTryMs=-9223372036854775709) timed out at 9223372036854775807 after 1 attempt(s)[Worker-08244672269d6f804] Caused by: org.apache.kafka.common.errors.TimeoutException: Timed out waiting to send the call. Call: fetchMetadata[Worker-08244672269d6f804] [2022-07-17 06:49:05,498] INFO [AdminClient clientId=adminclient-1] Metadata update failed (org.apache.kafka.clients.admin.internals.AdminMetadataManager:235)[Worker-08244672269d6f804] org.apache.kafka.common.errors.TimeoutException: Call(callName=fetchMetadata, deadlineMs=1658040575485, tries=1, nextAllowedTryMs=-9223372036854775709) timed out at 9223372036854775807 after 1 attempt(s)...[Worker-08dcfd7ddef0e8ded] [2022-07-17 06:43:49,802] INFO Metrics scheduler closed (org.apache.kafka.common.metrics.Metrics:668)[Worker-08dcfd7ddef0e8ded] [2022-07-17 06:43:49,803] INFO Closing reporter org.apache.kafka.common.metrics.JmxReporter (org.apache.kafka.common.metrics.Metrics:672)[Worker-08dcfd7ddef0e8ded] [2022-07-17 06:43:49,803] INFO Metrics reporters closed (org.apache.kafka.common.metrics.Metrics:678)[Worker-08dcfd7ddef0e8ded] [2022-07-17 06:43:49,805] ERROR Stopping due to error (org.apache.kafka.connect.cli.ConnectDistributed:86)[Worker-08dcfd7ddef0e8ded] org.apache.kafka.connect.errors.ConnectException: Failed to connect to and describe Kafka cluster. Check worker's broker connection and security properties.[Worker-08dcfd7ddef0e8ded] at org.apache.kafka.connect.util.ConnectUtils.lookupKafkaClusterId(ConnectUtils.java:70)[Worker-08dcfd7ddef0e8ded] at org.apache.kafka.connect.util.ConnectUtils.lookupKafkaClusterId(ConnectUtils.java:51)[Worker-08dcfd7ddef0e8ded] at org.apache.kafka.connect.cli.ConnectDistributed.startConnect(ConnectDistributed.java:97)[Worker-08dcfd7ddef0e8ded] at org.apache.kafka.connect.cli.ConnectDistributed.main(ConnectDistributed.java:80)[Worker-08dcfd7ddef0e8ded] Caused by: java.util.concurrent.ExecutionException: org.apache.kafka.common.errors.SaslAuthenticationException: [e031d219-c0dd-497b-b176-a87da3b17d8a]: Access denied[Worker-08dcfd7ddef0e8ded] at org.apache.kafka.common.internals.KafkaFutureImpl.wrapAndThrow(KafkaFutureImpl.java:45)[Worker-08dcfd7ddef0e8ded] at org.apache.kafka.common.internals.KafkaFutureImpl.access$000(KafkaFutureImpl.java:32)[Worker-08dcfd7ddef0e8ded] at org.apache.kafka.common.internals.KafkaFutureImpl$SingleWaiter.await(KafkaFutureImpl.java:89)[Worker-08dcfd7ddef0e8ded] at org.apache.kafka.common.internals.KafkaFutureImpl.get(KafkaFutureImpl.java:260)[Worker-08dcfd7ddef0e8ded] at org.apache.kafka.connect.util.ConnectUtils.lookupKafkaClusterId(ConnectUtils.java:64)[Worker-08dcfd7ddef0e8ded] ... 3 more[Worker-08dcfd7ddef0e8ded] Caused by: org.apache.kafka.common.errors.SaslAuthenticationException: [e031d219-c0dd-497b-b176-a87da3b17d8a]: Access denied[Worker-08dcfd7ddef0e8ded] MSK Connect encountered errors and failed....FollowComment"

Answer: 0Is your MSK cluster public or within a VPC? Make sure you have reviewed the documentation sub-sections under this - https://docs.aws.amazon.com/msk/latest/developerguide/client-access.html. Have you ensured that the security group of the EC2 machine where your Splunk is running is allowed access to the right ports in the security group of your MSK cluster. Also look at the "Unable to access cluster ...." sections in this troubleshooting guide - https://docs.aws.amazon.com/msk/latest/developerguide/troubleshooting.htmlAlso have you attached the role that allows access to kafka to the EC2 machine where your Splunk is running?CommentShareEXPERTIndranil Banerjee AWSanswered a year ago


Question: Can ALB route traffic except path?

I want to route traffic with path "/apps1/hello/world" to apps1 "/hello/world".Is it impossible with ALB rules?FollowComment

Answer: "0Hi,if I understand correctly, you would like to strip off part of the path and forward only the other part, like a rewrite you may have in Apache or Nginx.ALBs don't support URI rewriting. I've used different approaches (depending on the use case):you can install and manage an Nginx or Apache proxy downstream of your ALB, to get the requests and rewrite the URIs based on your configuration;you can use Cloudfront ahead of your ALB, and use a Lambda@Edge to intercept your requests and rewrite the URIs before sending them to the ALB.If you have a single domain with different backends and the ALB needs to know the "first block" of URI to know where to route the request, you need to follow case n.1If you have a single backend downstream of your ALB and need to get rid of a legacy URI scheme, you can choose case 2. You can find an example here: https://dev.to/aws-builders/use-aws-cloudfront-functions-for-uri-rewrites-587dHope it helpsCommentShareMonicaanswered 10 months ago"


Question: Problem with EFS filesystem remount after instance stop / start

"Hi, I have created a Linux EC2 instance and added an /dev/sdf volume. After creating a filesystem plus mount point I could run umount and then mount -a without issue. However when I shutdown the instance and later restart the filesystem is not auto-remounted.  Mount -a fails with various errors about missing code-page but I can manually remount the filesystem without problems. I have followed AWS advice on configuring /etc/fstab but still have the problem - Any thoughts?  Kr IanFollowComment"

Answer: "0HiI have understand that you have problem with EBS mount to the Ec2 at the specified path,  I hope you have followed this link Automatically mount an attached volume after rebootBe sure to check:Backup your /etc/fstab fileCheck the the UUID and the configuration show example below - refered from the link aboveFilesystem type is XFS but if you want use another typeUUID=aebf131c-6957-451e-8d34-ec978d9581ae  /data  xfs  defaults,nofail  0  2try a test withsudo umount /pathof the mount/ -- after this you will be unmountedsudo mount -a --  if you dont get errors it works If you check above inputs and let me know if you have issues againCommentShareGKanswered 3 months agorePost-User-2484392 3 months agoHi, many thx for your response. I have tried the above but on restart the file system fails to remount automatically. I can only think that the UUID is changing on reboot.Share"


Question: External internet access for a VPC enabled lambda

"Hi,My first lambda function has no Internet access despite following a number of similar instructions, including Amazon's own documentation.https://aws.amazon.com/premiumsupport/knowledge-center/internet-access-lambda-function/https://forums.aws.amazon.com/thread.jspa?messageID=705279https://gist.github.com/reggi/dc5f2620b7b4f515e68e46255ac042a7Attempts to run a traceroute in a lambda function to see where the problem may lie return "access denied."How does one debug routing issues if I cannot ping/traceroute/etc?Are there instructions somewhere else that actually work?I've got hours into this problem at this point.FollowComment"

Answer: "0Hi,To debug, I would first create a regular EC2 instance in the subnet(s) that you are using for you VPC Lambda to see if you can connect to the Internet from the EC2 instance. That way you can narrow down the scope of the problem (i.e. if you cannot connect, then you can assume for now that Lambda is NOT related to the problem).Is the subnet you are using a public or private subnet?If it is a private subnet, do you have a NAT Gateway setup to allow access to the internet?You can also modify Security Groups to allow "ping"/ICMP traffic if that would be helpful.-randyCommentShareRandyTakeshitaanswered 4 years ago0Thanks!  Allowing icmp got me over the hump.CommentSharecluster-nodeanswered 4 years ago"


Question: Running Steam-enabled servers on GameLift

"There have been one or two similar posts but no clear steps on how to run Steam-enabled servers on Gamelift. Any input would be appreciated.If I am logged into a Steam client with an account that is used for Steamworks and I run the game client, Steam initializes and I see the steam overlay.If I run the game server on Gamelift (including steam_appid.txt in the same directory as the exe) I get the errorSTEAM: Failed to initialize Steam, this could be due to a Steam server and client running on the same machine. Try running with -NOSTEAM on the cmdline to disable.I assume I don't have to run a steam client with a logged-in user on every single server? As that would not scale at all.Our game is built in UE4.22 and works fine with Gamelift until we turn on Steam.FollowComment"

Answer: "0Its a good question and I wish I knew of a good set of resources to point you to.From a GameLift POV I believe the Server SDK doesn't  like any disconnects/network interruptions after the call to InitSDK - if a disconnect is seen then the process gets terminated, so its worth bearing that in mind if you need to switch network stacks.Also if Steam needs to connect to your GameLift fleet, ensure you have any ports open to require inbound traffic.Its been a while since I've integrated anything with Steam, but from memory (and this maybe  out of date) but I believe you can use the install.bat file you provide to GameLift (which is only run once during fleet creation) to generate the information required via steamcmd.exe, update your server etc.GameLift then make a AMI from everything installed on this instance which is used to initiate all other server instances so you can do a lot of set-up here that only has to happen once.I will reach out to the GameLift team to see if they have any guidance.CommentSharerePost-User-5332620answered 3 years ago0Thanks for Gamelift-side guidance.I have the gameplay ports and Steams GameServerQueryPorts open. Not seeing the  GameServerQueryPorts in a netstat though. But that might be because Steam didn't initialize (as the error above outlines).I have also installed the Steam Client on the ec2 instance and logged in to it. Still get that error when I restart the server processes though.Any info on how steamcmd.exe is used to run the server, especially in the context of the install.bat file, would be helpful too  There is some info here: https://developer.valvesoftware.com/wiki/SteamCMD but not very detailed.Thanks again!CommentSharerePost-User-4435701answered 3 years ago0I'm in the same position right now. I was able to debug and see that what's failing on Gamlift is the call to SteamGameServer_Init (which is a Steamworks API), so it seems unrelated to UE. Couldn't find a way to get an error message or something on why that init call failed.CommentSharerePost-User-2638473answered 3 years ago0Unfortunately GameLift doesn't provide official support/debug for Steam usage, so we don't have any examples we can give at this time.CommentSharerePost-User-1112179answered 3 years ago"


Question: How to convert a parquet file into a csv file using AWS Glue.

How can we create a visual ETL job to convert a parquet file to csvFollowComment

Answer: "0Accepted AnswerWe can use glue transform job for transforming parquet data into a csv format.CommentShareSarathanswered 10 days ago0Hi,Please follow this guide ( just change the inputs and the ouput format):https://medium.com/srcecde/aws-glue-tutorial-csv-to-parquet-transformation-end-to-end-6330d4ccc39fShould be an easy task!CommentShareacmanjonanswered 18 days agoSarath 18 days agoThanks for the details but the link has information about csv to parquet but I need parquet to csv.Share"


Question: RDP to Server Is Extremely Slow

"I have tried restarting the server twice.  The server response is very slow. RDP took 15 minutes to bring up windows screen. The server is located at Oregon, Zone A (us-west-2a). From what I can see, the CPU Utilization is very low. With the Windows RDP screen up,  clicking on Windows explorer takes 10 minutes to run. And of course my website response is slow as well. The problem started early this morning.Hardware Issue?Task Manager shows Service Host: Local System as using at least 50-75% of the CPU. The CPU is at 99%.Edited by: WLPOAWebMast on Aug 9, 2021 3:32 PMEdited by: WLPOAWebMast on Aug 9, 2021 3:45 PMEdited by: WLPOAWebMast on Aug 9, 2021 4:32 PMFollowComment"

Answer: "0Still having severe response time issues.  The Windows task is using most of my CPU.  It takes up to 5 minutes to bring up my web pages.  I cannot RDP to the server since the connection process times out. Rebooting the server does not fix the issue.  This has been going on for 3-4 days now! My previous description should have have said the CPU utilization is very high (99%). My Tomcat server is using very little of the CPU.Edited by: WLPOAWebMast on Aug 12, 2021 10:17 AMCommentShareWLPOAWebMastanswered 2 years ago0Under the "Metrics" tab on your instance management page, there is a graph showing the average CPU usage of your instance. Notice that there is a sustainable zone and a burstable zone. If your instance CPU usage is consistently in the burstable zone (which yours seems to be given the high CPU usage you've indicated), you may experience issues with instance availability. Depending on your use-case, it may be worthwhile to upgrade to a more powerful instance type in order to increase availability by remaining in the sustainable zone.CommentShareAlexanswered 2 years ago0Thanks. I am considering it, when I have time. I  am running process explorer and see that svchost.exe (Service Host Process) is taking almost all of the CPU time. This seems concerning to me. I know this covers a variety of things like Windows Update. I am applying the latest cumulative Windows update to see if an issue was introduced from the last one in mid-July.CommentShareWLPOAWebMastanswered 2 years ago0I have moved to a new server instance that is a little larger and that is working well.  Performance is noticeably faster. I think I know what happened o the other server.  The process that was bogging down the server (always at 99% CPU) was a Windows process that is used for Windows Update, Task Scheduler, etc. I listed the process name earlier. Things to remember:The server worked fine for over a year (a little slow, but acceptable).The problem started sometime in July (a month ago).The server I am using is Apache Tomcat. This process was not a big user of the CPU. Neither was the MySQL server. Those are the only 2 processes that I had running.Running Windows Update, there was a cumulative update applied in July and an August cumulative update was available. When I tried to apply the new update, it was unable to start the update download process (0%). Even after 1 day, it was still at 0%.When I RDP'd to the server, there was a message on the screen stating that my copy of Windows needed to be registered.So something caused my Windows license to no longer work/expire.  I think this caused problems with the server and led to that process to continually run and use up all of my CPU. If I ever see that message again on the new instance, I will need to find instructions to fix it for Lightsail.CommentShareWLPOAWebMastanswered 2 years ago"


Question: [Announcement] Amazon Redshift Maintenance (October 18th 2021 - January 18th 2022)

"Major Version (10/20/2021)We will be patching your Amazon Redshift clusters during your system maintenance window in the coming weeks. The timing of the patch will depend on your region and maintenance window settings. You can view or change your maintenance window settings from the AWS Management Console. After your cluster has been patched, the new cluster version will be Build 1.0.32574. Please contact us at redshift-feedback@amazon.com if you have any questions.This version includes the following new features and improvements:• Redshift Spectrum: Advisor now supports new performance recommendation to alter a sort key from INTERLEAVED to COMPOUND or no sort key.• Amazon Redshift: Returning well-known binary in hexadecimal format.• Amazon Redshift: Added support for COPY to split large file of TEXT format into smaller ranges automatically to scan in parallel.• Amazon Redshift: Added support for FILLRECORD when loading data from PARQUET and ORC formats.• Amazon Redshift: Add support to model explainability in Amazon Redshift ML. With model explainability report, you can use feature importance values to help understand how each attribute in your training data contributes to the predicted result.• Amazon Redshift: Reduced audit log export latency to minutes; customers can expect up to an order of magnitude reduction in time for audit log data to arrive in their S3 buckets.• Amazon Redshift: Concurrency Scaling now supports COPY, INSERT, DELETE, and UPDATE queries in following regions: ap-south-1, eu-central-1, us-east-2, us-west-1. More regions will have this capability in the coming weeks.Minor Version(s)(11/03/2021)We will be patching your Amazon Redshift clusters during your system maintenance window in the coming weeks. The timing of the patch will depend on your region and maintenance window settings. You can view or change your maintenance window settings from the AWS Management Console. After your cluster has been patched, the new cluster version will be Build 1.0.32946. Please contact us at redshift-feedback@amazon.com if you have any questions.This version includes the following new features and improvements in addition to what is available in the major version:• Amazon Redshift: Concurrency Scaling now supports COPY, INSERT, DELETE, and UPDATE queries in following regions: ap-south-1, eu-central-1, us-east-2, us-west-1, ap-northeast-2, ca-central-1. More regions will have this capability in the coming weeks.• Miscellaneous fixes(11/15/2021)We will be patching your Amazon Redshift clusters during your system maintenance window in the coming weeks. The timing of the patch will depend on your region and maintenance window settings. You can view or change your maintenance window settings from the AWS Management Console. After your cluster has been patched, the new cluster version will be Build 1.0.33426. Please contact us at redshift-feedback@amazon.com if you have any questions.This version includes the following new features and improvements in addition to what is available in the major version:• Miscellaneous fixes(12/09/2021)We will be patching your Amazon Redshift clusters during your system maintenance window in the coming weeks. The timing of the patch will depend on your region and maintenance window settings. You can view or change your maintenance window settings from the AWS Management Console. After your cluster has been patched, the new cluster version will be Build 1.0.33896. Please contact us at redshift-feedback@amazon.com if you have any questions.This version includes the following new features and improvements in addition to what is available in the major version:• Miscellaneous fixes(12/12/2021)We will be patching your Amazon Redshift clusters during your system maintenance window in the coming weeks. The timing of the patch will depend on your region and maintenance window settings. You can view or change your maintenance window settings from the AWS Management Console. After your cluster has been patched, the new cluster version will be Build 1.0.34271. Please contact us at redshift-feedback@amazon.com if you have any questions.This version includes the following new features and improvements in addition to what is available in the major version:• Miscellaneous fixes(12/20/2021)We will be patching your Amazon Redshift clusters during your system maintenance window in the coming weeks. The timing of the patch will depend on your region and maintenance window settings. You can view or change your maintenance window settings from the AWS Management Console. After your cluster has been patched, the new cluster version will be Build 1.0. 34332. Please contact us at redshift-feedback@amazon.com if you have any questions.This version includes the following new features and improvements in addition to what is available in the major version:• Miscellaneous fixes(01/11/2022)We will be patching your Amazon Redshift clusters during your system maintenance window in the coming weeks. The timing of the patch will depend on your region and maintenance window settings. You can view or change your maintenance window settings from the AWS Management Console. After your cluster has been patched, the new cluster version will be Build 1.0.34685. Please contact us at redshift-feedback@amazon.com if you have any questions.This version includes the following new features and improvements in addition to what is available in the major version:• Miscellaneous fixes(01/18/2022)We will be patching your Amazon Redshift clusters during your system maintenance window in the coming weeks. The timing of the patch will depend on your region and maintenance window settings. You can view or change your maintenance window settings from the AWS Management Console. After your cluster has been patched, the new cluster version will be Build 1.0.34922. Please contact us at redshift-feedback@amazon.com if you have any questions.This version includes the following new features and improvements in addition to what is available in the major version:• Miscellaneous fixesFollowCommentNitin_T SUPPORT ENGINEERa year agoThis is an announcement migrated from AWS Forums that does not require an answerShare"


Question: add existing things to a Greengrass group

"We know how to do this via the console as detailed athttps://docs.aws.amazon.com/greengrass/latest/developerguide/device-group.htmland have demoed this for a few, eg. in this videohttps://www.youtube.com/watch?v=li3oiabEfD8but now want to add 100 (later 1000) existing things to a greengrass group.It is not clear from the API spec what calls to use and I cannot findit in the guides, blogs, videos, etc.Would prefer the Python flavor of the API, but at this point I'll take anything.Thank you.FollowComment"

Answer: "0Figured it out.This shows a scenario of 100 sensors to Greengrass.https://gambitcomm.blogspot.com/2019/10/dynamic-real-time-predictable-testing.htmlCommentShareuwegambitcommanswered 4 years ago0Hi uwegambitcomm,I am glad you figured it out.For others that may be running into this issue, Greengrass APIs use versioned resources so it will take several API calls.You would need to use the following APIs:GetGroup: https://docs.aws.amazon.com/greengrass/latest/apireference/getgroup-get.html to get the latest versionGetGroupVersion: https://docs.aws.amazon.com/greengrass/latest/apireference/getgroupversion-get.html to get the versioned resources in that group. You will use this to get the device definition version id.https://docs.aws.amazon.com/greengrass/latest/apireference/getdevicedefinitionversion-get.html - you get the list of devices from the device definition.https://docs.aws.amazon.com/greengrass/latest/apireference/createdevicedefinitionversion-post.html - you will create a new list of devices using this API and it will return a new device definition idhttps://docs.aws.amazon.com/greengrass/latest/apireference/creategroupversion-post.html - you will create a new group version with the new device definition id.Then you would need to create a deployment using the CreateDeployment api:https://docs.aws.amazon.com/greengrass/latest/apireference/createdeployment-post.htmlThis takes the group version idCommentShareRobanswered 4 years ago"


Question: Is it possible to tag a container?

"Hi,I don't see any option to assign a tag to a MediaStore containerAm I missing something?Is it possible though the API? CLI?ThanksFollowComment"

Answer: "0I guess not ;)CommentShareflvlefanswered 4 years ago0reviving - noticed this bug as well.  No way to tag in console.  You also cannot tag during creation via SDK (which the documentation shows you can).  I reported via support.  Hopefully AWS will address.Edited by: rbalhorn on Jul 29, 2019 3:57 PMEdited by: rbalhorn on Jul 30, 2019 7:53 AMCommentSharerbalhornanswered 4 years ago0fixed in the latest version of the SDK.  Still cant add, edit, or view them in the console however.CommentSharerbalhornanswered 4 years ago"


Question: "XFS: wrong fs type, bad option, bad superblock"

"My AWS Linux 2 instance boot drive is snapshotted daily. I'd like to mount one of the snapshots to my instance to review changes I've made in /etc. I created a volume based on the snapshot, attached to my instance and tried to mount it. I used df -T to determine my existing boot drive filesystem is xfs. I presume my snapshot is xfs. I can't seem to mount it. I tried with several of the snapshots. Am I trying to do something weird, adding a second bootable drive to my instance?mount /dev/xvdi1 /mnt/tmpmount /dev/xvdi1 /mnt/tmp -t xfsmount -t xfs /dev/xvdi1 /mnt/tmpmount: /mnt/tmp: wrong fs type, bad option, bad superblock on /dev/xvdi1, missing codepage or helper program, or other error.from fdisk -l:Disk /dev/xvdi: 16 GiB, 17179869184 bytes, 33554432 sectorsUnits: sectors of 1 * 512 = 512 bytesSector size (logical/physical): 512 bytes / 512 bytesI/O size (minimum/optimal): 512 bytes / 512 bytesDisklabel type: gptDisk identifier: EB7656A9-A5D7-4AAF-B8A8-67A3FBEC56BADevice       Start      End  Sectors Size Type/dev/xvdi1    4096 33554398 33550303  16G Linux filesystem/dev/xvdi128  2048     4095     2048   1M BIOS bootFollowComment"

Answer: "0Hi there ,I understand that you would like to mount the volume that you created and now you are unable to mount it.Correct me if I misunderstood.Based on the tests that I ran you will need to :[1]create  a snapshot[2]attach it to a volume[3]Stop the instance that you want to mount the volume to[4]attach the volume of the snapshot to your rescue instance[5]SSH into the rescue instance[6]Run this command < lsblk -f > to check the name of the disk you want to mount[7]run the following command to mount[7.1] mount -o nouuid  /dev/<diskname> /dataI have provided you with additional documentation under the reference section.I hope this was helpful!Reference[1]https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-creating-volume.html#ebs-create-volume-from-snapshot[2]https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-using-volumes.htmlCommentShareKaraboanswered a year ago"


Question: How to inspect request responses and make complex routing decisions between applications and third party endpoint

I have two boxes let's say box A and Box B. Both has seperate service applications with its own dbs. Both boxes should expected to do calls with third-party legacy endpoint via (webhooks/websocket /rest) which cannot be changed in anyway.When a box A initiate or receive (webhooks/rest/websocket) request to or from 3rd party endpoint relative response should arrive in Box Asame applies to Box B how to achieve this using AWS.Ideally If there is a way we could look at requests and responses and compare it to the data in database then make  decision on which box to send the  response  from third party then problem is solvedBut not sure how we should go about it with awsFollowComment

Answer: "0Accepted AnswerHi rePost-User-9416263,Could you please confirm if I understand the problem statement correctly ?I took an example of the retrieve customer information flow, for better understanding of the scenario.Scenario :There is a LEGACY APPLICATION deployed on one EC2 instance with a dedicated LEGACY CUSTOMER DATABASE.There is a MODERNZED NEW APPLICATION on another EC2 instance with a dedicated MIGRATED CUSTOMER DATABASE.Each of these EC2 instances are behind AWS Application Load Balancer (ALB).Consumer applications makes call to AWS ALB to retrieve customer information based on the customer number.If the customer number exists in the MIGRATED CUSTOMER DATABASE, then ALB should route the call to MODERNZED NEW APPLICATION.If the customer number exists in LEGACY CUSTOMER DATABASE, ALB should route the call to LEGACY APPLICATION.Problem Statement:The information about legacy/migrated customer numbers is in the respective databases of the legacy / modernized applications.How will ALB know, if the customer number is migrated or not ?How will ALB decide, whether to route the call to new modernized application OR to old legacy application.Regards,Prince AroraCommentSharePrince Aroraanswered 14 days agoPrince Arora 14 days agoSo a webhook event will be an asynchronous response from the third party. Below can be a possible solution for this asynchronous communication:While sending the request from Box (A or B)  to 3rd partyretrieve a unique identifier from the request and store this identifier (correlation id) and source BOX hostname in a new mapping table in DB.When the response is received from the 3rd party application to AWS ALB:the response should have the correlation id uniquely identifying the request for which this response is sent.For all incoming events from external party:ALB will invoke a lambda function.This lambda function will retrieve the correlation id from the response event.The lambda function will query the mapping table and retrieve the box hostname corresponding to the correlation id received in the response.The lambda function returns the hostname to ALB. ALB will have the rules configured to route the response based on the hostname of the EC2 instance.Hope this helps.Cheers!Prince AroraShare0Hi prince thanks for your reply.box A and Box B are ec2s in ourside we have full control over them. Both A and B has seperate applications with its own dbs. Both boxes should expected to do calls with third-party legacy endpoint via (webhooks/websocket /rest). This third party endpoint is hosted by different company don't know anything about it's hosting environment or we don't have any access to that third party API. We just could call it via dedicated IP address or it could call us via webhooks That's about itProblem we face is when we receive a response from third party API how do we send it to Box A or Box B. Only way we could think of is storing body data of the request in DB and when response comes back checking to understand where response should go. But how do we redirect reroute responses, how do we check this response against db on the fly is what we are trying to figure outCommentSharerePost-User-9416263answered 14 days agoPrince Arora 14 days agoHi,The third party application is a rest API call. Isn't it a synchronous API ?If the 3rd party rest api call is triggered from Box A the response will be received by box A, if its a sync API. similarly if it is initiated from Box B, the response will be back to box B. Am I missing something ?SharerePost-User-9416263 14 days agoIt has three types rest API, webhooks and websockets. So like you said if it's REST it's all good as the calls are synchronised but if it's webhook where third party calling with data we don't know how to redirect to the relevant box. It could be something to do with data that should go to A or Box B. That case we need to find by querying db where should this goShare0Without further detail, I would suggest you take a look at EventBridge and StepFunctions to see what fits best.With StepFunctions you can create a workflow that helps you manage calls to third parties and receive calls or responses and route it as needed.   In Serverless Land you can find workflow examples that can accelerate you.With EventBridge, you can think with Event-Driven in mind and create rules to route events as desired.Perhaps you would need to persist some information about calls to use for routing as responses are received, DynamoDB might be good for this.Both approaches are different and sometimes they are better together.CommentShareromerogtanswered 15 days agoEXPERTalatechreviewed 14 days ago"


Question: NodeJs server SDK

Is it possible to write game server in NodeJs?FollowComment

Answer: "0Ok I have found something by myself.So there is no server SDK implementation for javascript (NodeJs). But I did some reverse engineering research on C++ SDK and GameLiftLocal and i know that GameLift use WebSockets and JSON to establish connection between Server SDK and GameLift service itself.So it is quite easy to write my own SDK for new programming languages, especially NodeJs.Bad news is I can find any documentation of this API :(Maybe someone can help me with that? Are there any chances to make this documentation available public?CommentSharerePost-User-7819088answered 6 years ago0Hey man. If you still wanna port NODEJS version of the sdk let me know. Id be interested in moonlighting that with you.CommentSharerePost-User-5817503answered 4 years ago0Hey Pablo , have you hosted your nodejs sdk solution someplace ? Or any pointers regarding this would be great helpCheersCommentSharerePost-User-2713320answered 4 years ago0Hi @REDACTEDUSERsomebody already made it.CommentSharerePost-User-4342775answered 4 years ago0If you haven't seen GameLift realtime servers run NodeJS scripts for you:https://docs.aws.amazon.com/gamelift/latest/developerguide/realtime-plan.htmlThe disadvantage is you don't own the server here, but you can update the server scripts without having to remake your fleet.CommentSharerePost-User-5332620answered 4 years ago0Ah thanks, @REDACTEDUSERCommentSharerePost-User-2713320answered 4 years ago0@REDACTEDUSERAlso is there a way to install modules such as crypto-js on the fleet instance  ?Alternate I guess is packging the crypto-js source along with the scriptCommentSharerePost-User-2713320answered 4 years ago0For now I believe you can only zip up everything you need in your 'script' bundle, but then everything should work ie:myscript.jsnode_modules/aws-sdk/…CommentSharerePost-User-5332620answered 4 years ago"


Question: Payment by credit card

On the add payment method page The credit card part of the Cvv2 field is not displayed for meFollowCommentalatech EXPERT4 months agoCan you try different browsers?Share

Answer: "0I'd suggest opening a support case from your account. You don't need to have premium support subscription. Open a case with account/billing support category (available to basic support customers, too), and our customer service team will be able to help. They have the right tools and resources to advise, as this might be an account-specific question.https://docs.aws.amazon.com/awssupport/latest/user/case-management.htmlCommentShareEXPERTNataliya_Ganswered 4 months ago"


Question: RHEL 7 - AWS specific packages

"A customer is in the Enterprise pharmaceutical space. They need to control every aspect of the build and he has asked the question below. Do we have a stock answer to this as well a list of the package information.Customer question:RHEL V7 AMI packages.Yesterday I created my first RHEL V7 system, to look at the package and configuration. No great surprise it is nothing like the our build, so I have to consider creating our own AMI..It appears that the following package are unique to your image:NetworkManager-tuiPyYAMLaudit-libs-pythoncheckpolicychronycloud-initcloud-utils-growpartdracut-config-genericiwl7265-firmwarelibsemanage-pythonpolicycoreutils-pythonpyserialpython-IPypython-babelpython-jinja2python-jsonpatchpython-prettytablerh-amazon-rhui-clientsetools-libsAre these packages necessary for an OS image to run?Where do I get a copy of cloud packages, and is there documentation on their use and configuration?FollowComment"

Answer: "0Accepted AnswerTo answer to your customer, there are a lot of information on the RedHat Partner webpage on our website:  it is explained who is in charge of creating the RHEL AMI. It's RedHat :-)https://aws.amazon.com/partners/redhat/faqs/Extract of the FAQ:Q: Is there any difference between Red Hat Enterprise Linux on AmazonEC2 and the versions I can run in my data center?No, Red Hat Enterprise Linux on Amazon EC2 is maintained by Red Hat and is identical to the version of Red Hat Enterprise Linux available for installation on physical hardware. AWS customers running Red Hat Enterprise Linux on Amazon EC2 receive access to the base images (AMIs) and updates from Red Hat.So, normally, no need for your customer to recreate another RHEL AMI to fit the requirements.In addition, I've compared the list of packages given by your customer and the packages available by default on a vanilla RHEL. I used this official packages list from RedHat:https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/pdf/Package_Manifest/Red_Hat_Enterprise_Linux-7-Package_Manifest-en-US.pdfMost of the packages he listed are not specific to the RHEL AMI designed by RedHat for AWS.The following packages are common and part of the vanilla ISO image:NetworkManager-tuiPyYAMLaudit-libs-pythoncheckpolicychronydracut-config-genericiwl7265-firmwarelibsemanage-pythonpolicycoreutils-pythonpython-IPypython-babelpython-jinja2setools-libsThe main difference is about the Cloud-init packages and its dependencies. Cloud-init is not a AWS specific package, but an opensource project providing the integration between Linux and the most common Clouds (Openstack is part of them).cloud-initHere are some info about this project:https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Virtualization/3.3/html/Administration_Guide/sect-Using_Cloud-Init_to_Automate_the_Configuration_of_Virtual_Machines.htmlhttps://cloudinit.readthedocs.io/en/latest/This package has the following requirements/dependencies:The list is available on Launchpad.http://bazaar.launchpad.net/~cloud-init-dev/cloud-init/trunk/view/head:/requirements.txtYou'll find the need of the 3 packages below. Your customer found them on the RHEL AMI:pyserialpython-jsonpatchpython-prettytableThose packages are maintained by RedHat on the rhel-7-server-rh-common-rpms channel:https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux_OpenStack_Platform/5/html/Release_Notes/sect-RHNCDN_Channels.htmlSamething for thr Cloud-utils Growpart (used to grow the filesystem to the size of the boot volume):This package is maintained by RedHat on the same channel.cloud-utils-growpartFor the latest package of the list provided by your customer, rh-amazon-rhui-client, yes, this one is Amazon specific. But it is, again, maintained by RedHat to be more integrated with AWS.If your customer doesn't use it, it will have less integration.Hope It HelpsCommentShareAWS-User-6535761answered 7 years ago"


Question: DynamoDB scaling characteristics with a single partition key value

"I am considering two DynamoDB models and I would like to understand the performance and scaling differences between them. The table will always be run in on-demand mode.Create a table with a partition key and no sort key.Create a table with a partition key and sort key. For all items, the partition key is set to a static value default.For option 2 specifically:Will I be able to write more than 1000 WRU to my table, or will I be throttled as all data is placed into a single partition?If I am throttled, what is the expected delay until the partition is split?Will the table scale in number of partitions when I exceed 50% of the initial WRU (4000).Are there any other concerns with option 2 over option 1? Note: using both pk and sk and setting pk to multiple values is not an option being evaluated.FollowComment"

Answer: "1Option 1 is by far a better option, as you will have access distributed over the entire key-space. Setting the partition key of your table to a static variable is an anti-pattern and should be avoided at all costs if you want a scalable solution.Will I be able to write more than 1000 WRU to my table, or will I be throttled as all data is placed into a single partition?You will be throttled as all data is written to a single partition.If I am throttled, what is the expected delay until the partition is split?You cannot assume the partition will ever be split, you should not design a schema which relies on DynamoDB's adaptive capacity. For example, if you use a timestamp for your SK which is ever increasing/decreasing then it would not make sense to split the partition, therefore DynamoDB will not and you are capped at 1000WCU.Will the table scale in number of partitions when I exceed 50% of the initial WRU (4000).Yes, if you exceed 50% of your previous high peak for several minutes (~30mins) DynamoDB will split to provide more throughput.Are there any other concerns with option 2 over option 1? Note: using both pk and sk and setting pk to multiple values is not an option being evaluated.Option 2 is a concern as you are expecting a feature of DynamoDB to split partitions, something which you have no control over, and can impact your throughput.CommentShareEXPERTLeeroy Hannigananswered 6 months agoRoss W 6 months agoWhy should I not design a schema with adaptive capacity in mind if it is an advertised feature and the documentation advertises that item collections can be split into multiple partitions? Can you point to documentation stating that table design should not rely on adaptive capacity?I'm trying to understand the failure modes of option 2 and weighing them against the benefit of doing range queries to reduce overall traffic on the table.Sharejzhunter 6 months agoYour Q didn't mention range queries. You presented 2 options, implying your access patterns could be satisfied with either one, and between those choices Opt 1 is simpler and more certain to work. If you need range queries then it maybe you'll want to use a sort key. Maybe with sharded PK values.Sharejzhunter 6 months agoThe downside of relying on adaptive capacity item isolation is the rules for when it applies are unwritten and subject to change, plus even in the best case it takes time under pressure to kick in. Imagine if you provision a large amount of capacity (thus lots of partitions), if you have just one PK value you're still going to start with everything going to one partition.Share"


Question: IP allocation from a given range for Application Load Balancer

"I have an Application Load Balancer that adds instances dynamically based on the current load. To comply with a payment gateway's requirement for IP address, I need to assign a fixed IP address from a specified range of IPs to each instance. Is it possible to configure this setup such that the IP allocation from the range happens automatically when a new instance is added to the target group, and the IP is released when an instance is removed?FollowCommentGovind Kumar a month agoAre you referring to the private ip rage?Share"

Answer: "1It's not clear from your question where the static IP is required.For connections that are established inbound to the ALB (and from there to the target group) the IP address(es) of the instances in the target group aren't of concern to the source - because they are connecting to the ALB IP address (more on that in a moment). So you can absolutely have the instances in a private subnet; scale up and down; and the client is not aware of those IP addresses changing.The challenge is that the ALB IP address may change. The ALB itself may scale up and down; or AWS might replace the ALB (to perform software upgrades; the underlying hardware might become unhealthy; etc.) and in those cases a new IP address will be allocated. The solution here is to use NLB instead where the IP addresses are always static - once created, the IP addresses will not change.For connections that are established outbound from the instances to an external host the best way to have those connections appear to come from a predetermined IP address is to use a NAT Gateway. It has a static IP address; and all the instances in the private subnet can use it to communicate to the internet. Again, as the target group scales up and down all of the instances can use the NAT Gateway and the public IP address (where the traffic appears to come from) of that does not change.CommentShareEXPERTBrettski-AWSanswered a month ago0Yes, it is possible to configure your setup such that the IP allocation from a specified range happens automatically when a new instance is added to the target group and the IP is released when an instance is removed. This can be achieved by using Elastic IP addresses (EIPs) in conjunction with the Application Load Balancer (ALB).CommentShareFrank Idugboeanswered a month ago"


Question: Monitron Gateway

"After install, we have a specific Gateway that is saying "no internet connection". I have used the phone app to recomission the gateway, and according to the lights on gateway, it now shows its connected, however the dashboard is still showing "no internet access" need help please.FollowComment"

Answer: "0This sounds like it is not  getting a proper DHCP address, has the incorrect GW/DNS or something similar.  Check the configuration on one of the other gateways that are working to confirm the settings.  Failing this, try a reset and reconfigure it according to these instructions: https://docs.aws.amazon.com/Monitron/latest/user-guide/setting-up-ethernet-gateways.html or for a WiFi gateway https://docs.aws.amazon.com/Monitron/latest/user-guide/setting-up-Wi-Fi-gateways.htmlCommentShareMstein-AWSanswered 10 months ago0good morning,have we any chance to Update the firmware on the Monitron Gateways?CommentSharerePost-User-1291685answered 4 months ago"


Question: Aws cli associate web acl to cloudfront error

"Hello,I try to associate web acl to cloudfront but I've error. Where I wrong? Thank You:aws waf-regional associate-web-acl --web-acl-id 00a15d51-c2f1-65ca-89f2-e3fe95525557fe --resource-arn aws:cloudfront::84540000050:distribution/E5ZISDGFSGEUXCTH6error:An error occurred (WAFNonexistentItemException) when calling the AssociateWebACL operation: The referenced item does not exist.FollowComment"

Answer: 0Accepted Answerlikely cause might be the arn seems incorrect.should be in the format:arn:aws:cloudfront::<accountid>:distribution/<distid>I think you are missing the arn part at the beginning.CommentSharecloudbuttonanswered 4 years ago


Question: Clarification regarding sh_cl_apppf_irq_ack/req interface

"Hi,can I assume that in the sh_cl_apppf_irq_ack interface, at most one bit is set? Or is it possible that in a single clock cycle multiple bits are set?Let's say I send a request on cl_sh_apppf_irq_req for two interrupts in the same clock cycle (I suppose this is supported, if not please say so). Will both interrupts then ack'ed also in a later, but also same clock cycle? Or will they always be ack'ed one after another?So, two questions:How many bits may be set in cl_sh_apppf_irq_req in the same clock cycle?How many bits can be set in sh_cl_apppf_irq_ack?Thanks!FollowComment"

Answer: "0Accepted AnswerHi,You can think of the multiple user interrupt bits as independent:You can assert multiple bits simultaneouslyThe ACKs may or may not be asserted simultaneouslyThanks,-AsifCommentShareawsasifanswered 4 years ago"


Question: AppStream 2.0: users applications assignment

"Is it possible for AppStream to have a fleet base on an image in which, for example, I have 10 applications installed and to assign specific applications to specific users to limit visibility for users only to their assigned applications ?FollowComment"


Question: trying to ssh into an ec2 instance

after creating my ec2 instance I downloaded the key and tried to use putty to ssh into the server but it gives me network error in northern Virginia region but successful in OhioFollowComment

Answer: 0can you check the security group /NACL rules in Ohio region and add your endpoint/Laptop IP to access the serve via SSH.Also check if server has elastic IP assigned and connected to.a VPC with IGW attachment and then use the elastc IP to SSH into the server.easier/safer way is to use SSM session Manager.CommentShareEXPERTVaibhav_Sanswered a year ago


Question: [Elastic Beanstalk] Nginx configuration is not being copied to /etc/nginx

"As the title sais, the configuration files of nginx are not being copied from /var/proxy/staging to /etc/nginx as it should (maybe?). I have followed the documentation about overwritiing the default nginx conf, so this is my bundle tree:app_root/├─ .platform/│  ├─ nginx/│  │  ├─ nginx.conf│  │  ├─ conf.d/│  │  │  ├─ my_custom_conf.confUnfortunantely the files are copied to /var/proxy/staging and not copied to /etc/nginx. The configuration file is correct (I also manually copied to /etc/nginx and restarted the webserver and it works). If I press "environment rebuild" from the beanstalk console, the new instance won't even start nginx automatically. I had to make another postdeploy script to move the files and restart nginx. In the eb-engine.log logs there's nothing beside the copy command:Running command /bin/sh -c cp -rp /var/app/staging/.platform/nginx/. /var/proxy/staging/nginxI have other applications where this works fine. I can't find the solution.FollowComment"

Answer: "1Hello,Thank you for posting your query on re:Post. As I understand, you are facing issue configuring the Nginx proxy, however the changes are not copying to the desired location.As per the directory structure is concerned, the one you mentioned seems correct to me. Based on the documentation, the .platform directory should be at the root of the source bundle.[] Extending Elastic Beanstalk Linux platforms - https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/platforms-linux-extend.htmlNow, since this is working on other applications, there is something specific to your current application which is causing the issue. Therefore, is it possible for you reach out to AWS Support via the support case (for privacy concerns) for further troubleshooting on the issue.Please share the complete bundle logs, details of the environment like environment name or id. for more insights.Further on the copy command, the command is executed after the nginx configuration is validated. Please refer the below logs for my replication.2022/09/12 14:32:07.721209 [INFO] Executing instruction: start proxy with new configuration2022/09/12 14:32:07.721232 [INFO] Running command /bin/sh -c /usr/sbin/nginx -t -c /var/proxy/staging/nginx/nginx.conf2022/09/12 14:32:07.731058 [INFO] nginx: the configuration file /var/proxy/staging/nginx/nginx.conf syntax is oknginx: configuration file /var/proxy/staging/nginx/nginx.conf test is successful2022/09/12 14:32:07.731356 [INFO] Running command /bin/sh -c cp -rp /var/proxy/staging/nginx/* /etc/nginxTherefore, can you please check if in the logs you are getting anything apart from the log entry you mentioned.Hoping that the above helps. Thank you.CommentShareSUPPORT ENGINEERAWS-User-arpitanswered 9 months ago"


Question: Lightsail instance FTP connection

"I need to delete a few files on the server, only way I know to get to them is via ftp. when I try to delete those files I get permission denied message. I am logged in with bitnami username. Is it possible to fix ?FollowComment"

Answer: "0Hi, are you using Lightsail exclusively or are you also using AWS Transfer Family for FTP?CommentShareEXPERTAWSTransferFamilyanswered 5 months ago"


Question: Unity server built with IL2CPP fails

"Has anyone here had any luck running a Linux server build, created from Unity using IL2CPP?I currently have a mono-based build working great, but I was hoping to increase CPU performance by using IL2CPP instead. Such an increase, I hypothesize, would allow me to squeeze more concurrent game sessions on each ec2.But, no luck. While the fleet does eventually become active, it struggles for a while, throwing events like "Server process exceeded 3 minutes without reporting healthy," and "SERVER_PROCESS_CRASHED: Server process exited without calling ProcessEnding()". Eventually, the Fleet will go to Active, but if I try to connect to it from the client-side, I just get radio silence.I tried to investigate what was going on by running GameLift Local on my personal Linux VM, but I'm not seeing anything interesting in my app logs. It just looks like it's booting up as intended.I'm wondering if any of you have come across anything like this before, or if any of you have been able to get IL2CPP working server-side.FollowComment"

Answer: "0Thanks James! I haven't tried ssh-ing into it so that's a great suggestion. I'll do what you suggest and report back what I find!The Gamelift SDK i'm using is Release-4.0.2, which I believe is the latest since I downloaded it only yesterday.I did have to make a modification, however, to get it to run in IL2CPP. Any reference to log4net had to be commented out, or I'd get a runtime error. At one point, I thought maybe this was why the build failed to "report healthy", however, when I build using mono with the same modified DLL, it works fine.Which leads me to another question I have about log4net -- is it compatible with IL2CPP? I've seen other threads referencing apparent compatibility issues with log4net and IL2CPP, but no solutions in regards to the server side of things.Here's one of the other threads relating to this issue. This person was, however, looking at the client side and was able to resolve their issue by using the latest client-side .NET 2.0 Aws SDK plugins. Server-side, I'm not seeing such luck.CommentSharerePost-User-5690907answered 2 years agomjans71 7 months agoAny luck with this?  Currently working through the same issue with Linux IL2CPP using GameLift Server SDK and erroring on log4net.Share0Hi TheoTowers,Are you using the latest GameLift Server SDK version?If the fleet was able to go Active, that means: 1) your server process was able to start, 2) your server process was able to call the SDK to notify GameLift that the process has started. However, from the fleet events, I suspect your server process crashed afterwards, and the GameLift daemon ("AuxProxy") then perpetually restarts the process. I'll have to see the full fleet event to be certain though. Could you please try opening TCP port 22 via `update-fleet-******CommentSharerePost-User-7108006answered 2 years ago"


Question: AWS Backup  - AWS Organizations

Does the Organizations level functionality for AWS Backup have to be managed from the Organizations Master Account?I want to be able to delegate the AWS Backup management to a separate AWS account in my Organization.FollowComment

Answer: "0Accepted AnswerHello,Currently this has to be setup from the Organization management account.CommentShareEXPERTRob_Hanswered a year ago"


Question: Creating a Main Menu with Script Canvas

"It appears that Flow Graph is gone, I mean, I have the removal gem disabled and can't see it so it must have been removed in 1.15, and so making a UI is really hard now.Can anyone make a tutorial on how to make a simple Main Menu with buttons that allow you to load a level, or exit the game, and using Script Canvas, because their seems to be a big push for Script Canvas but as usual, there is barely any documentation on it, so I have no idea what I'm doing. Annoyingly, I'm having to follow the .lua tutorials from 1.7! (Which even they have deprecated code instructions in them!)Thanks,DanFollow"

Answer: "0Accepted Answer@REDACTEDUSERI've attached the completed graph from the tutorial. It does show disconnecting from an Ebus after it's no longer needed. The quit button will close the editor and standalone .exe! You can go into Console Variables and set ExitOnQuit to False to disable this behavior in the editor I believe.7334-uicontrol.zip|attachment (34.5 KB)uicontrol.zip Completed Script Canvas graph for ui_basics part 2Another way to listen for button clicks:REMOVEDUPLOADSharerePost-User-7039295answered 5 years ago0Yeah, I am aware of the example, I kind of get it, but not really. The reason why I was asking for a tutorial, was because I wanted a step-by-step guide showing the entire process. Because I tried using similar code blocks and well, I just get the console warning me with this:[Warning] (Script Canvas) - Entity Id [13802737740620157576] is not part of the current entity context loaded entities and not an internal node/connection entity. It will be mapped to InvalidEntityId[Warning] (Script Canvas) - Entity Id [13802737740620157576] is not part of the current entity context loaded entities and not an internal node/connection entity. It will be mapped to InvalidEntityId[Warning] (Script Canvas) - Entity Id [13802737740620157576] is not part of the current entity context loaded entities and not an internal node/connection entity. It will be mapped to InvalidEntityIdAnd the buttons don't work, so I don't know what I'm missing!SharerePost-User-9232254answered 5 years ago0@REDACTEDUSEROk, I can put some things together using Script Canvas and the UI Editor.SharerePost-User-7039295answered 5 years ago0@REDACTEDUSERThe samples project gem has a level called 'UI Main Menu Script Canvas Sample'. That is probably the best place to start learning UI, it has a main menu and options screen, with all the associated UI canvases and Script Canvas graph to look at.Let me know if there is something this doesn't cover that you would want to see, I might be able to demo that.SharerePost-User-7039295answered 5 years ago0Thank you.SharerePost-User-9232254answered 5 years ago0Thank you, I really appreciate this.I have been able to create the ui and script canvas following the guide. Will you be adding a section on button creation? (I'm not rushing you, just wondering, because your guide was excellent!)SharerePost-User-9232254answered 5 years ago0@REDACTEDUSERI'll structure this first tutorial as a post later, but here is the starting point of SC/UI work. Following this tutorial, you should be able to create and load a simple UI canvas from Script Canvas. I cover a few other things in detail here so that I can ignore them in the next tutorial. The instructions are written generally enough so you can follow everything in any existing project you have and it will work fine.7301-ui-basics.pdf|attachment (393 KB)ui-basics.pdfSharerePost-User-7039295answered 5 years ago0@REDACTEDUSERGood to hear that worked! I should have the next section done today, a main menu with buttons, and a quit confirmation dialogue with buttons. Beyond that, I'll take another look at the samples project example, I know it implements an options menu, perhaps that can be rebuilt step-by-step. 1.15 added quite a bit more UI control to Script Canvas to explore.SharerePost-User-7039295answered 5 years ago0@REDACTEDUSERThank you, I really appreciate all the work your putting into this, and I hope I'm not bothering you too much by asking for this.SharerePost-User-9232254answered 5 years ago0@REDACTEDUSERNot a bother at all, I wrote up a bit more, at the end I've left sort of an exercise to complete the graph, I'd be interested if it's doable after reading through the tutorial. Let me know what you think.7332-ui-basics-2.pdf|attachment (301 KB)ui-basics-2.pdfSharerePost-User-7039295answered 5 years ago0@REDACTEDUSERYeah so the only step to return control to the main menu canvas would be to change 'Set is Consuming All Input Events' back to 'True'. If you can flip between the canvases by clicking 'quit' then 'no' repeatedly then everything works fine. I didn't have any specific ideas of where you wanted to go after clicking these buttons, but I'll finish the example graph and post it for comparison. Sounds like you got things down though.The way you are handing map/level loads with Execute Console Command (and only outside the editor, the editor only works with one level at a time) is the best way that I know of. I do think there will be updates to this process in the future though, the CryEngine method hasn't been replaced yet. You could think of this as a main menu level that only loads the actual game levels, but you probably want this menu to appear when you hit 'Escape', for example, in any level.In my own project, Clicking new game loaded another canvas where some game options could be set, on that canvas you could hit a start button to unload/hide all canvases revealing the game world on that level and starting another Script Canvas graph that controlled the actual gameplay.SharerePost-User-7039295answered 5 years ago0@REDACTEDUSERThank you, this tutorial has helped a lot, OK so I was able to get the buttons to work, meaning, with the print block, I returned the value of the buttons, and in the console, every time I pressed it, it said true, so that means it works. But with the quit screen, I'm unsure, I was able to load it on top of the other canvas', but I'm not sure what to do next, meaing when I click No, it unloads the canvas, but I don't know how to return control, I probably made it way too complicated, so yeah...But the guide was great, and as I said, the buttons actually work now which is a good sign, I could just do with a continued guide for the quit screen, I tried but I'm still a bit unsure.Thanks again for your help. :)EDIT:I've just removed the "Print" block and replaced it with a "Execute Console Command", which runs the command "map level" so when you press the button to start a new game, it executes the command and starts the level, this only works on the exported launcher as the console says, "won't execute in editor". If you know another way to load a map with the blocks, please let me know, but I don't think that's a feature yet.EDIT 2:I was just able to add a sound effect, so that when you hover over the button, it plays a sound! (It took a bit of trial and error, but I got there eventually!)SharerePost-User-9232254answered 5 years ago0Hi, thank you for everything. It seems everything is working the way I want it to. I was wondering, with your permission of course, would you mind if I created a video tutorial based around these instructions? I would give you full credit of course, and would link people to this forum post if you don't mind. Would you like me to give any links to your Twitter or YouTube or anything?Thanks,DanielSharerePost-User-9232254answered 5 years ago0Thank you. I will be sure to send you a link once it's complete. I plan to hopefully start it some time next week.SharerePost-User-9232254answered 5 years ago0@REDACTEDUSERPlease feel free to use this any way you want. My youtube channel is https://www.youtube.com/user/thistylerisme/ if you want to link.SharerePost-User-7039295answered 5 years ago"


Question: Light Sail VS EC2 selection for web application server

"Hello Guys,We are working on architecture for web application. We currently have three servers in our design - web server ( front end), application server ( backend) and database - all hosted on Amazon EC2. However, we thought of leveraging Amazon light Sail instead of EC2. Our proposed web application will angular based and going to have dynamic reports with option to steam live video with approximately 10k users accessing the video streaming. Please advise if Amazon light Sail will be suitable for this kind of operations or need to go with EC2?FollowComment"

Answer: "0The following official AWS website provides a comparison of EC2 and Lightsail. [1][1] Compare Amazon EC2 and Amazon Lightsailhttps://aws.amazon.com/premiumsupport/knowledge-center/lightsail-differences-from-ec2/?nc1=h_lsSince your application seems to do video streaming, it seems to me that you would need a reasonable specification.Also, you may need to consider scalability, etc., so EC2 is probably a better choice.However, we do not know the specific performance requirements of your application, so please consider verifying this if necessary.CommentSharemn87answered 8 months ago"


Question: Problem with deadlock on AWS RDS MySQL

"Hello,We have an issue regarding AWS RDS MySQL.We have migrated from an AWS EC2 MySQL to RDS MySQL for improving performance, stability and reliability but we are facing a big issue.After we migrated the databases and started a few php crons that are inserting in MySQL various data(statistics for our application) using INSERT .. ON DUPLICATE KEYS UPDATE we are constantly receiving the following error when the cron is being executed: "Deadlock found when trying to get lock; try restarting transactionQuery: INSERT INTO.."We are using InnoDB engine.We have used mysql 5.6.24-log on the EC2 Instance and now on RDS we are using 5.7.21-log.Parameter group: default.mysql5.7.Thank you!Edited by: numanx on Jun 13, 2018 5:29 AMFollowComment"

Answer: "0Hi Numanx,I am sending you a message now with some more details about your instance.Cheers,CommentShareAWS-User-7525455answered 5 years ago0Was there a solution to it? Facing similar issue.CommentSharesiimkanswered 4 years ago"


Question: MediaConvert Job Configure Retry Counts?

"For MediaConvert jobs, I've noticed some of my jobs fail due to issues with the files. Seeing some videos that just have issues being processed which I get support tickets to submit examples of. However, I've seen some of these jobs run for a very long time (hours to even days) and the retry count continues going up and I've seen some exceed 50+ retries.Is there a way to set a maximum retry limit on files before it errors? I have a reserved queue and I'd rather limit the amount of time these are in the in progress state so that I can free up capacity for other jobs.FollowComment"

Answer: "0Hello,Thank you for your inquiry! This functionality is not currently supported in MediaConvert. We have shared this feature request with our product team, for prioritization. No date is available at this time.You can check the AWS “What’s New” section for updates on feature releases to MediaConvert: https://aws.amazon.com/about-aws/whats-new/media-services/Regards,KarenCommentShareAWS-User-1511971answered 3 years ago"


Question: trick-player for streaming service

can you help me to set up a trick player URL with AWS.I have a bif file and I can upload to a bucket but am not sure from there.FollowComment


Question: Cannot Receive WorkMail

"I am able to send emails from WorkMail okay, but cannot receive them in WorkMail.  Even if I send FROM a WorkMail address TO the same WorkMail address, I do not receive the email, and I get no reply detailing what error was encountered.  Can you help me determine what I need to do so that I can receive email in WorkMail?  Thank you for your help.FollowComment"

Answer: "0Hi,I'm sorry to hear you're experiencing problems receiving mail. This can have various reason but is easy to verify. To start you can check if your MX record points to WorkMail and only WorkMail (in the correct region). You can find the required MX record value in the domain details page in the WorkMail console. (This page will also inform you if it detects a incorrect value)If you MX domain record correctly points to WorkMail you can verify that you do not have any failing SES inbound rules. In the SES console you can verify that the active Inbound rule only has a WorkMail action. If there are other actions, you need to make sure they work.If that is all correct you can check the WorkMail console for configured inbound rules to ensure that no mail is dropped.These steps should be enough to troubleshoot the inbound mailflow and enable you to receive mail in WorkMail.Kind regards,RobinCommentShareMODERATORrobinkawsanswered a year agorePost-User-1207839 a year agoHi, Robin.Thank you so much for your quick response.Using your suggestions above as a guide, I made the necessary changes and ensured everything was in order.  Afterwards, my email inbox was able to receive email (thank you!!!), but all other email inboxes were still not able to receive.  I made changes to one other inbox to confirm that it had the same specifications as my inbox, but that did not work.  Now, I am back where I started - I cannot receive email in any of the inboxes and am unsure where I went wrong.  I have deleted all email addresses except mine, to simplify troubleshooting.  Is there any way you can check my account to help me zero in on where the problem lies?Share"


Question: How do I configure the SageMaker Ground Truth verification and adjustment jobs?

"I learnt from the Amazon SageMaker Ground Truth documentation that there is the possibility to run label verification and adjustment jobs. I have the following questions:What's the pricing for these options? Are they similar to the pricing for the labeling jobs?With multiple individuals in the workforce, which one of the following is true?The labeled dataset is split across multiple individuals.A complete dataset is considered per individual doing the verification.Can I use Ground Truth to select a random subset of the labeled dataset for verification?FollowComment"

Answer: "0Accepted AnswerThe following are the responses for your questions:Adjustment and verification jobs are just types of labeling jobs. You can configure an adjustment or verification job through the CreateLabelingJob API or through the Create labeling job option in the Amazon SageMaker console. The same pricing per dataset object (i.e., per image or text document) applies.You can configure these jobs. When you set up a labeling job, you provide the work team ARN. You can configure this work team however you see fit. Typically, customers who want to do the adjustment or verification include only the individuals who are highly trained reviewers or managers. After you create the labeling job, the verification or adjustment tasks are served to the members of the work team.When you create a labeling job in the SageMaker console, use the Additional configuration option to configure Ground Truth to select a randomized subset.CommentShareAWS-User-7192654answered 2 years ago"


Question: WorkMail - required permission for nonexistent user

"It suddenly started report message below in Wokrmail/Users/MyUser/Permission, but there is not such user in Workmail ...  I tried to remove all users and add them back, but it still reports it.Another efect is that no user with permission can send email as the MyUser (stated above) ...Question is where I could find the user or remove the user ID from Permissions ...The message:One or more permissions could not be loaded. Try again later. Contact AWS Support if the issue persists. Reason: Could not find user with id 'S-1-X-2X-XXXX69XXX-22644485-XXXX030447-XXXX'ThanksZd.FollowComment"


Question: AdministratorAccess isn't working for users/user group

"I - the root user - created a user group with (1) user. I gave the user group one permission which is AdministratorAccess. Looking at the json policy, it appears this gives all users within this user group access to any and all services on AWS. I signed in as the one IAM user and attempted to access Billing and Budgets. I wasn't able to access either, nor could I access cost explorer. I attempted the following:-removed the user from the user group, then added the user back, giving it the permission for AdministratorAccess.-I added the BillingFullAccess permission to the user - not the group. I tested it out, I still wasn't able to access Billing, Budgets, nor Cost Explorer. I removed the permission and kept AdministratorAccess as the only permission for the user group.-I created another user, added it to the user group with AdminstratorAccess.All of my troubleshooting attempts were in vain and I'm still unable to access Billing, Cost Explorer, or Budgets as an IAM user. Any ideas on what I should do to troubleshoot through this? Also, I am on the free tier to learn AWS.FollowComment"

Answer: "3Accepted AnswerMost likely you haven't yet enabled IAM access to billing console.AWS documentation could be more visual but this is explained in https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/control-access-billing.htmlCommentShareKalluanswered 3 months agoKallu 3 months agoThs is very old screenshot but gives you a better idea what you're looking for.https://aws.amazon.com/blogs/security/dont-forget-to-enable-access-to-the-billing-console/ShareEcce01 3 months agoThat worked, whew. Thank you Kallu!!Share"


Question: How can I access resources in a peered VPC over site to site VPN?

"Hi, I have a peering connection setup between VPC A and VPC B. And I've also setup a site to site VPN connection to VPC A. How can I access the resources in VPC B through the site to site VPN connection?FollowComment"

Answer: "3Accepted AnswerThe short answer is you can't because VPC peering doesn't support transitive routing.  The rule for transitive routing is that the traffic must either originate or terminate on a network interface in the VPC. This is why VPC Peering isn't transitive - no network interface is involved, so no route table.  Also this is why Transit Gateway is transitive as its attachment points in a VPC use network interfaces.The usual approach is for your site-to-site VPN to have VIFs to each VPC, or better still, to use Transit Gateway.Another workaround is using a proxy instance to put a network interface into that VPC you want to transit through. See for example the standard "Transit VPC" Strategy that was more commonly used before Transit Gateway came along.CommentShareEXPERTskinsmananswered 9 months agoEXPERTBrettski-AWSreviewed 9 months ago"


Question: QuickSight: Split string field by delimiter in custom SQL

"Hi,i have a table in Athena which has 'testcase' and 'tags' fields. here is the sample records of the table:testcase1 has tags 'tag1,tag2,tag3'testcase2 has tags 'tag2,tag4'testcase3 has tags 'tag2'testcase4 does not has tagsI want to get all the tags from this table in QuickSighttag1tag2tag3tag4i've tried with adding new dataset from Athena and choose Use Custom SQL option, using  STRING_SPLIT function, but cannot make it work.Can you please help me with the sql query?Many Thanks,Yj LiuFollowComment"

Answer: "1Accepted AnswerHi,the question is how do you want to receive the data for tags?in different columns or in different rows?If it is ok to have it in multiple rows the following query using the function SPLIT to create an ARRAY and the unnest the results in the array on multiple rows, as described here, could help: with test_data as (select     'testcase1' as testcase, 'tag1,tag2,tag3' as tagsunion allselect     'testcase2'as testcase , 'tag2,tag4'  as tagsunion allselect     'testcase3' as testcase, 'tag2'  as tagsunion allselect     'testcase4' as testcase,''  as tags ) select testcase, tag  from test_datacross join unnest(SPLIT(tags, ',')) as t(tag)result set is:If you want it in multiple columns you should use the SPLIT_PART function as shown here:with test_data as (select     'testcase1' as testcase, 'tag1,tag2,tag3' as tagsunion allselect     'testcase2'as testcase , 'tag2,tag4'  as tagsunion allselect     'testcase3' as testcase, 'tag2'  as tagsunion allselect     'testcase4' as testcase,''  as tags ) select testcase, SPLIT_PART(tags, ',',1) as tag1, SPLIT_PART(tags, ',',2) as tag2,    SPLIT_PART(tags, ',',3) as tag3, SPLIT_PART(tags, ',',4) as tag4    from test_dataresult set is:hope this helpsCommentShareEXPERTFabrizio@AWSanswered 6 months agoAWS-User-6538210 6 months agoHi Fabrizio,Thank you so much for the reply!to have the tags in multi rows is what i'm looking for!save both in my notebook!Thank you again!Yj LiuShare"


Question: Php mail function was not working

my query isPHP EMAIL FUNCTION IS NOT WORKING   my website https://krishnachaturmart.com/   aws easy to instantFollowComment

Answer: "0Accepted AnswerHi rePost-User-5318234,Could you elaborate more your question? Which query are you talking about?Best regards, Gabriel BartholomeuCommentShareGabriel Bartholomeuanswered 10 months agorePost-User-5318234 10 months agoPHP MAIL WAS NOT RECEIVED MY WEBSITE CUSTOMER WAS ORDER SOMETHING ORDER CONFIRMED EMAIL WAS NOT RECEIVED PLEASE YOU WILL ACTIVATE THE PHP  EMAILSharerePost-User-5318234 10 months agoYou will check my website and order something you will find a problem website link attached in the message https://krishnachaturmart.comShareGabriel Bartholomeu 10 months agoHi rePost-User-5318234,I recommend reviewing your Apache and Code configuration. There seems to be some configuration issue in the URL routing and the products roulette.Maybe after fixing the main page, the PHP error will show another error message and after that be able to fix it.Best regards, Gabriel BartholomeuShare"


Question: ECS Fargate tasks not running. Stopping with error CannotPullContainerError

"I am testing out the Unity Fargate serverless solution at github link https://github.com/aws-samples/fargate-game-servers .After going through all the steps - my client is not able to connect with the ECS Fargate tasks because the latter are not starting (not getting into RUNNING state). They get as far as PROVISIONING but then sputter - giving the CannotPullContainerError error.On top of that, I am a noob and cannot figure out where to find the complete error log entry, because it gets cut out. Nor do the cloudwatch logs show me the error.So I'm at a loss of how to troubleshoot.Image attached in problem description video https://youtu.be/AKkPpEOQDGAFollowComment"

Answer: "0Thanks for the answers. However it will help me a lot if one could show me how to read the actual error log - which is getting cut off when I look at the task stopped details. Please see how the error is showing up - marked in red: https://imgur.com/a/vhdLQIOIt's clipped and incomplete. How to read the complete log message so I can actual drill down on the actual error??As for the image repository - the container image is present in the ECS repository with URI https://446446443139.dkr.ecr.us-east-1.amazonaws.com/fargate-game-servers:2022-02-16.113828Check https://imgur.com/a/nZlqSZQHow do I check if the IAM role for ECS has permissions for pulling the image? Do I check for a particular entry in the IAM policies? My tasks are launched by specific lambda services. Should I  check into the AWSServiceRoleForECS for the permissions or the role for the specific lambda service?The VPC seems to be an internet gateway attached to NAT on route table attached to the VPC. Is there something specific I should look for?It will be best if I can read the complete error log . Noob. Please help...CommentShareshaldarworxanswered a year agoMichael_F EXPERTa year agoThe important role here is the Task Execution Role, located in your Task Definition. This Role, which you must create, must have the ability to perform several ECR actions. You can either manually specify a policy document, or you can attach the managed policy AmazonECSTaskExecutionRolePolicy to the Role, and this will allow Fargate to pull the container images for you.Share0CannotPullContainerError would occur ifYour image does not exist in repositoryYour ECS IAM role does not have permissions to pull the imageIf the image comes from Dockerhub, it could be failing due to rate limiting.Usually in the console you can see the description of the error that gives you the reason why the CannotPullContainerError exception occurred.CommentShareJohnPrestonanswered a year ago0Another reason why Fargate may be unable to pull your container image is due to a networking issue. The subnet in which you place your tasks must have access to the Internet (unless you are building a VPC without Internet access, in which case you must set up VPC Endpoints for Amazon ECR).First, your VPC must have an Internet Gateway attached.If you are launching your tasks in a private subnet, make sure you've created a NAT Gateway, and make sure your subnet route table has a default route to the NAT Gateway.If you are launching your tasks in a public subnet, make sure you have enabled public IP address assignments for your task ENIs (elastic network interfaces). See, for example, step 11 (Networking) in the Creating a Service documentation.CommentShareEXPERTMichael_Fanswered a year ago"


Question: How to read and fetch  data from secpol.msc(local security policy) ---> windows defender firewall with advanced security  values in command prompt

We are using Windows server 2019 EC2 Instance . We are working on Windows OS hardening as per cis benchmark rules . We want to fetch the  data  of windows defender firewall with advanced security of local security policy(secpol.msc) .We are using below command to fetch the data in command prompt of our EC2 instance:netsh advfirewall show allprofilesBut command prompt is unable to fetch any latest changed data as we are changing values of windows defender firewall with advanced security  as per our hardening rules .Can anyone please suggest us the right command to fetch the updated data of windows defender firewall with advanced security section of local security policy(secpol.msc) of windows server 2019 EC2 instance .FollowComment