Question: playerslice rotate speed too high Game mode+perf. issues

"I"ve looked where it seems sensible,and edit >projects settings > global prefs, and nothing works to slow down fairly chaotic movement of 'camera' in game mode.Everything else is working basically but that.Also, I tried to record video, choosing jpg and starting capture, but its so slow as to be unworkable, and I'm only using medium settings for editor performance.My rig works fantastically, on teh same scene in unrealengine 4.I haven't even textured terrain, as doing a flood of a nice looking rock tex inside engine, and fps goes to 1-4,,ouch :)( and I have an i5 3570 (not a k , no) 8gb ram with 8 gb virltual ( on a SSD though ) and gtx 950 gtx 2gb, so clearly it handles most everything I throw at it beautifully.I know I just meet requirements which is quite odd, as the same scene in ue4 WITH a flood texture does just fine with serveral directional lights going, and a few good sized shaders..in ue4 the only area I"m slowed down in to some degree is when working with BSP's and the wait time to redraw them after altering one.Does this have anything to do with using a 32bit terrain ?I was quite happy to learn ly supports them as I see no other engine that does (not using Unity so no idea there_), as it sure makes a big difference in avoiding jaggies ;0-Anyway looking for some help on the horribly slow fps on my textured terrain herein LY, any ideas anyone ?tyFollow"

Answer: "0I'm having same problem >> " I"ve looked where it seems sensible,and edit >projects settings > global prefs, and nothing works to slow down fairly chaotic movement of 'camera' in game mode."Well my camera shakes like crazy and I cant find a solution. All I know it has to do with the character physics component, because it stops shaking on my player once I remove it. There is some kind of problem with rotation and physics. But I still don't know how to fix. I'm using TransformBus.Event.RotateAroundLocalZ(enitity, value ); to rotate my player and its shaking really bad and is seen in the camera. Any help thank you.SharerePost-User-7620461answered 5 years ago0DIdn't have time to post just yet, allegedly if one adds Camera Framework GEM, it my help deal with this horrible shakiness on moving camera in playmode--haven't been able to test just yet ,,hope that helps someADDing- I see this:https://docs.aws.amazon.com/lumberyard/latest/userguide/component-physics-character.html,but having looking in entity list, I see no where to remove/disable..doyou mean remove from GEM list ? :)That GEM for me isn't enabled or compiled in , so I"m still no further along in figuring out how to get the speed removed from the playerslice .SharerePost-User-2755327answered 5 years ago0@REDACTEDUSERDo you , or any other dev or such, know HOW to fix this maddening part of the engine ?It shakes so bad its unusable , right after adding playerslice to scene by dragging it in.One of the new tutorials on getting started page, notes to 'add camera' to scene, which when I do ( the same camera they talk about in tutorial ) , and after pressing play, there is no player to be seen and I can't rotate scene - moving my mouse does nothing. I"ve seen 3 or posts on this very issue, so LY is going to be losing a few I suspect which I"m not sure they can afford to at this early stage, given UE4 has it all.Any ideas ?thx'SharerePost-User-2755327answered 5 years ago0To reiterate,if I go to the lengthy compilation process ( my rig isn't super fast but decent: i5-3570) to add camera gem will it magically fix the chaotic camera movement on display on player slice ( I found no way to fix it short of current discussion), out of the box on current LY install ?It's not just me, several others are asking about this, and frankly I can't imagine why no one else is unless they are using 1st person &/or 2d.tySharerePost-User-2755327answered 5 years ago0Ty for the info, but I"m in a far worse place than I was, given I'm an artist not a programmer, but I"m dabbing with the latre as I have to obviously. With UE4 I'm not forced to , at least initially as their 3rd person is near perfect out of the box leaving me to do what artists do best, which I have quite well.I saw that there are supposedly examples in components in the new system, but where would I find them ?Ihope this isn't the 'state' of this great engine, bc if it is I"ll haveto pass as there is no way I'm confident enough a programmer to figure this out- I'd have zero idea where to start, unless there is a tutorial I'm unaware of ?I"ll look thru txt tut see if I can get this working.thxOK TY SO MUCH, exactly the verify I was looking for,Made my day ;) Happily following you now ;)SharerePost-User-2755327answered 5 years ago0Btw, ishttps://s3.amazonaws.com/gamedev-tutorials/Tutorials/Getting_Started_05_Adding-a-Player-Controller_1.8.pdf, a workable way to reduce rotate speed as many others have asked ? I can no longer FIND the database icon to open, and the roll up bar tab isgone too so I can't click on ENV button to edit those- did they move that somewhere ?I looked everywhere but its nowhere to be found.SharerePost-User-2755327answered 5 years ago0@REDACTEDUSERThat tutorial was created before the component system existed. The rollup bar and tools it references are removed in a default build, and you probably don't want them back, the new system has you covered.Getting Started Guide is the best introduction to component entities, it has a series of 12 tutorials with videos. It doesn't get into programming though, where you can use both Lua and Script Canvas.For that, you have the current docs: Lumberyard 1.15 DocumentationThe Amazon Game Tech Youtube Channel specifically, the tricks of the trade series have in-depth tutorials that focus on creating things rather than the general assembly of a level.The Lumberyard Slack is a resource as well: https://amazon-lumberyard.slack.com I'm around to chat there.SharerePost-User-7039295answered 5 years ago0Making some progress by just using editor as it is and going straight from creation of enitty and adding camera rig- setting up a few variables(?) from there,]Its still not even close to rights but it feels 'better' I think.Can you check out PIC and see if those are the right areas I need to be altering or if I just got a tad lucky..its a a bit confusing not having sufficient exp. with these values.My only reference is UE4 whose camera system is wonderful, just didn't want you wondering why I expect this level of stability ( STABLE camera, on rotation ) .thxREMOVEDUPLOADSharerePost-User-2755327answered 5 years ago0@REDACTEDUSERI'll post my setup with all the code. It has a player entity and a camera entity. The player entity has an input component that you can control both the player and camera with.First the entity setup: (I do have the camera as a child of the player but I don't think that matters here)REMOVEDUPLOADSo the middle column contains my input bindings. You can see I make it faster going forward than in backward, I put all my multipliers and inverted inputs here to keep things simple later on. 7229-thirdpersonmovement.zip|attachment (881 Bytes)thirdpersonmovement.zip The right column contains all the components I've added to the player entity, the zip file has the input bindings if you don't want to retype the middle column; here is the script canvas graph for player:REMOVEDUPLOADFor the camera entity:REMOVEDUPLOADI have both the camera and camera rig component on this entity...It targets using a tag (which i added to the player entity with the tag component), but you could also use the targeting box and just click on your player instead. The script canvas graph for the camera is super simple:REMOVEDUPLOADIn my camera rig I only target, follow from a distance, and i have an offset so the camera is over the player's right shoulder. All rotation is handled in script canvas and the pitch is only handled in the camera so that the player doesn't need to lean backwards for the camera to follow.You might need to copy at least part of this design. For the settings you have right now, I think that Rotate along target's x axis might be leaning the camera to the right and left. I think the Z rotation is what you expect. The pitch setting might be a bit steep, I'm imagining it is looking up to the sky, if you don't want to do pitch in script canvas like I did try a low value at first (5-10, even 0 deg is fine). There is no target set for your camera rig in the screenshot and I don't see a camera component (though it might be on another entity). My setup is working real well for me though, try it out once. Note: one thing with filling values for 'followTargetFromDistance', you have to set the maximum first, otherwise all the other numbers can't be changed.SharerePost-User-7039295answered 5 years ago0HI and thx for all that, I'll have a look tomorrow morn.The entity picture, sorry I didn't make more clear' is the 'camera', and theother one is 'camera rig' as in your design- I simply couldn't find enough info, or clearly stated to a noob (), what values were effective for a stable camera.TY much for taking time to post all of that.Hopefullymy attempt to utilize that data will live up to your time here- as noted I"m not a programmer in the sense of yrs of experience but I admire and enjoy it nonetheless, as its a powerful platform & at this time my gifts lie in art but my need to sustain my project has fueled my desire and joy of programming ;)- its been some journey-I look fwd to using scriptcanvas similarly to ue4's BP system, & yes clearly your example as laid out is very clear and I've no trouble following it. Great job and again TY for taking that time!tySharerePost-User-2755327answered 5 years ago0How do I invite others in no idea what your email is which it wants,,,I downloaded app and logged in to Essence channelSharerePost-User-2755327answered 5 years ago0@REDACTEDUSERJust in case I didn't get this answered on the Lumberyard slack, the GetForward node was accidentally removed in 1.15.You can replace the file here with the file from 1.14 until the next update: \dev\Gems\ScriptCanvas\Code\Include\ScriptCanvas\Libraries\Math\TransformNodes.hSharerePost-User-7039295answered 5 years ago0HI, trying your setup, but script canvas can NOT find 'GetFor anything, it looks like you have GetForward..is that right ?Is your script outdated now given changes to certain functions ?TYSharerePost-User-2755327answered 5 years ago0OK sounds good, ty for info.SharerePost-User-2755327answered 5 years ago0Hi @REDACTEDUSERIt looks like the Get World Transform nodes are not needed in the current version. The Get Direction nodes are set to use self as the source of the transform, so if you have the script canvas graph attached to your player entity, it will use the player's transform. The graph should work as-is. You may need to tune the values you use for the impulse.SharerePost-User-7039295answered 4 years ago0btw TY forgot to say ;)))SharerePost-User-2755327answered 4 years ago0@BigMonet @REDACTEDUSERIs this what is needed to FIX very uneven, fast rotating camera , that essentially makes it impossible to preview/work with a scene to test out functionality ?https://docs.aws.amazon.com/lumberyard/latest/userguide/gems-system-gem-camera.html .Point I"m making, is why is this not included by default ?There are not such problems in ue4,out of the box is perfection, admittedly, I know, LY is still in beta but its had several iterations so I"m confused why this behavior is still here IF indeed the camera really does fix this odd issue,I"d not mind knowing why its not in by default ;)(SharerePost-User-2755327answered 5 years ago0@REDACTEDUSERYou definitely need the camera and camera framework gems in your project. Luckily, rebuilding the project only involves compiling the new gem's files and should take significantly less time than the first build (my first build takes 3+ hours, so I feel you).I used the answer in this thread to get started with camera work:https://forums.awsgametech.com/t/decoupling-the-camera-and-actor/1080/1It mentions five gems for a third-person camera, I'd install all of them unless you want to write your own controller:CameraFrameworkInput Management FrameworkStarting Point CameraStarting Point InputStarting Point MovementYou can adjust your rotational speed from your input bindings file, which is part of the input management framework gem.SharerePost-User-7039295answered 5 years ago0@BigMonet @REDACTEDUSERAre you still around Steve,,,Asking bc I was wondering if your camera is 'steady' on rotation, and on Z axis movement, as when I look UP, down, I can't control ( x ?) the movement very well, its all over the place.So frustrating I have to deal with this, given the 3rd person character in UE4, out of the box is SPOTLESS.To LY devs > I know LY is still beta ( it is right ?), but why can't we have a 'working' player out of the box ...I don't really mind using Canvas to visually program some of this ( see below where another use was helping me), but so far I'm having trouble finding > 'source' so the vector 3's are showing up > > in graph search (see my post at bottom of this page).I can't do any more dev work until I can literally walk around my level to test it.SharerePost-User-2755327answered 4 years ago0@REDACTEDUSER@BigMonet @REDACTEDUSERP.s.--months later sorry for delays long story---anyway When I try to pull transform from 'get world transform'( player canvas script from yours) to get forward, and get right, - it prompts me to choose from a list, but I can't find 'source'.What am I missing ...BTW I'm using latest, 1.7 as of yesterday.Unable to DELETE images, not working and I did reload website, still logged in so its not that..issues with website code ? ( I just deleted to avoid confusion, but its still an issue, using latest Firefox btw, updated windows 10 pro.Image showing what I mean, can't get 'source' to show up where 'self' is, so I can connect them,,Anyway I wanted to replace with this:REMOVEDUPLOAD, so its more obvious what I was referring to.BTW, is this why my camera is still jerky as others have pointed out ?This just seems FAR too complex, just to get a 'decent' X person character, rotating without wanting to pull your hair out :) I don't mind learning about how things work to get a 'better' character, I'd just like to get one that works right, initially at least ;)thxSharerePost-User-2755327answered 4 years ago0@REDACTEDUSER@REDACTEDUSER@AlexisAlright ty very much ;)Removed 1.17 and installed 1.18, and oddly now, when I try to add in ( project configurator) :Starting Point CameraStarting Point Inputfrom belowCameraFrameworkInput Management FrameworkStarting Point CameraStarting Point InputStarting Point MovementRender to texture < also if checked, and those it doesn't force compile of game, will not allow LE to run, giving error noting render to texture.it wants me to compile game, why did that change ? That would take quite some time on my i5-3570 ?Also:Though I got no errors in project config, and that I have no gems ticked requiring game build, I get this:[Error](Serialization) - Dependent asset ({34A311FB-116D-5C2A-BB9B-66B1748EFB6D}:0:levels/startergame/movement.inputbindings)could not be loaded.[Error] (Serialization) - Dependent asset ({956B3860-89F9-5564-8F33-7B7F76125323}:0:scriptcanvas/ag_cameracontroller.scriptcanvas)could not be loaded.Thoughts what is causing this ?ty- I"ll peek around see if I can find this, but I wanted to post for help in case I can't.SharerePost-User-2755327answered 4 years ago"


Question: I am trying to connect RDS with MYSQL workbench. But I am getting error.

"Error is like below-'Failed To connect to MySQL at "Host name*** with user 'User name***' "'so First of all -I logged in to EMR clusters using putty2)Then I created RDS instance in AWS3)Then connected the RDS instance with EC2 in AWSThen from my local machine i tried to connect with MYSQL workbenchusing hostname, user name and password. And clicking on 'Test Connection'But its failing.FollowComment"

Answer: "0Hi,Can you please provide some additional info about your network configuration?It sounds like you are able to login to an EC2 instance from your local machine over SSH (using Putty) and from there you can connect to RDS, but when you try to connect directly to your RDS instance from your local machine you get that error message.Is your RDS instance in a public subnet with port 3306 open to your local network?Please have a look at this doc which covers common scenarios for connecting to a database in a VPC.CommentSharemicahanswered 5 months ago"


Question: Sagemaker vs. Data Science platforms

What is the distinction (and overlap) in the positioning of Sagemaker vs. Data Science platforms such as KNIME or RapidMiner? I have a client who is asking for my opinion and can't find any documentation that clearly delineates between the Data Science platforms and ML aaS such as SageMaker.FollowComment

Answer: "0Accepted AnswerI have looked at KMine a bit the past couple of weeks and have used SageMaker in depth for a couple of POCs.I like to frame this question in the context of Andy Jassy's three tiers of the AWS ML stack.  My view is that KMine fits into the top layer.  It's a drag'n'drop interface, suitable for those who want a push-button solution to an ML problem.SageMaker fits into the middle layer.  It automates most of the heavy lifting around infrastructure, model training, and model deployment.  But you have to understand which algorithm to use and how to tune it.  It's more flexible than the push-button approaches but far easier than starting with a deep learning AMI.CommentShareMODERATORAWS-User-9919757answered 5 years ago"


Question: My instance is accessible from ipv4 address and public DNS. I want it to be accessible from domain name only.

"Hello,I installed WordPress on Amazon AWS (EC2 Instance)The problem is that my website is accessible from ipv4 address, public DNS and domain name. Like for testing purpose i useddecodewithdude.gaThe domain is accessible from http://13.233.253.149/https://ec2-13-233-253-149.ap-south-1.compute.amazonaws.comhttps://decodewithdude.gaI want the instance only be accessible to public from domain name.ThankyouFollowComment"

Answer: "2Accepted AnswerSounds like you're running a single WordPress instance with a public IP?  The best approach is to make it private and put it behind an AWS load balancer or CloudFront distribution.  Probably CloudFront if you're only running one instance.  Then your DNS can be an A "Alias" record in Route 53 - a special link to an AWS service that isn't tied to a specific IP address (though of course, being DNS, it will still resolve on the fly to an IP address).Note a custom origin like this behind CloudFront still requires the instance to have a public IP address but it can be locked down using an AWS-managed prefix list for CloudFront - it opens ingress only to CloudFront IPs so that's the only way people can access your site - through CloudFront.CommentShareEXPERTskinsmananswered 9 months agoWp-User 9 months agoHi, Thankyou for answering. I really appreciate it. Can you please guide me what should i do first and then further so to achieve it. I am a newbie in AWS . So i will appreciate it if you guide me.ThankyouShare"


Question: "automated and managed cross-account backup S3, RDS, EBS"

"A customer wants to automate the backup for S3 buckets, EBS snapshots and RDS snapshots to another, independent account to be able to restore the application data in case an administrator account in the organization is compromised and a ransomware attack is executed.The customer wants to do this in an automated, maintenance free way.At first I suggested using scheduled Lambdas in the independent accounts that use IAM roles to access the "to-be-backuped" buckets and snapshots and pull them into the independent account. However, this solution requires the implementation and maintenance of code.I was looking into AWS backup as I thought it would be able to create RDS and EBS Snapshot backups on a schedule to S3. I would then have recommended the customer to use this and setup cross-account replication of the buckets with a transfer of ownership of the objects in the replicated bucket to the independent account.However, it seems that AWS backup uses S3 as a storage location for the backups, the backups themselves are not visible/accessible this way.I am looking for a low effort, maintenance free way of achieving cross account (destination account being outside of the org) backups for S3, EBS, and RDSFollowComment"

Answer: "1AWS Backup now provides snapshot backups of EBS, EC2, RDS and S3 with support for cross region and cross account replication. S3 and RDS can have continuous backups to allow for point-in-time recovery of up to 35 days ago. With Vault Lock it is possible to protect backups from being deleted by any account before the retention period has ended.CommentShareFydon_answered a year ago0Accepted AnswerYou can achieve this with AWS Backup and Organizations: https://docs.aws.amazon.com/aws-backup/latest/devguide/recov-point-create-a-copy.html#create-cross-account-backupFor S3, you could also achieve it with S3 Replication: https://docs.aws.amazon.com/AmazonS3/latest/dev/replication-walkthrough-2.htmlUpdate: DLM now supports copying EBS snapshots cross-account: https://aws.amazon.com/blogs/storage/automating-copying-encrypted-amazon-ebs-snapshots-across-aws-accounts/CommentShareEXPERTLuca_Ianswered 2 years ago0Hi all,I understand AWS Backup now supports cross account backups for S3, however I assume it will still be from one backup vault to other backup vault.Is there a way to copy from backup vault to a non AWS managed S3 bucket??ThanksCommentSharerePost-User-4972610answered 4 months ago"


Question: UE5/VS 2019 with Gamelift SDK build error

"I did not see any questions on this forum addressing the problem I got, so I will be the first to ask if its a question or a bug.I have VS 2019 for UE5 (UE5 tends to through a fit if you use 2017). I just downloaded the Gamelift SDK because I wanted to use AWS for a game server fleet. It looks like an awesome choice!However, following the instructions here, I wasn't able to build the project. I got an error MSB8066. A quick Google search yields 1 post on Stackoverflow about it made SEVEN MONTHS ago. I wanted to bring attention to it since UE5 is the latest and greatest from Epic and this is a massive road block to development with AWS. Btw, i ran the EXACT line of code mentioned in the stackoverflow question and was able to reproduce the problem perfectly.Thank you for any advice and help. Hopefully this problem was already resolved long ago, and Google just refuses to show me the light.FollowComment"

Answer: "0So I had to install OPENSSL https://slproweb.com/products/Win32OpenSSL.html (Make sure to download full, NOT THE LIGHT)Add it to the System VariablesCommentShareIan Tolmayanswered 6 months agoAlecValentine 6 months agoThat's what I did, but it causes MASSIVE link problems within the project build. About 200+ missing symbols and such. I'm hoping for an official guide from AWS on how to get this all working. Let me know if you got pass the linking problems too.ShareIan Tolmay 6 months agoYeah, So unfortunately I am also receiving 267 Errors.LNK2019, unresolved external symbolShareCB_Yogev 5 months agoSame thing with Visual Studio 2022 and SDK version 5.0Share"


Question: Is it possible to concatenate two datasets in AWS QuickSight?

"I have several datasets uploaded from xlsx files that have matching column names. Is it somehow possible to concatenate/unify these datasets into one?I tried to do this in Datasets > Edit Dataset > Add data, but there the only option for merging several datasets together was a join operation.Example: if I have a dataset with M -rows and N-columns and another one with M2 Rows and N columns, I would like that the final dataset after concatenation would be M + M2 rows and N columnsFollowComment"

Answer: "2Your best bet might be to create Athena tables for each dataset, use Athena to create a 'view' that is a union all, then import that view into QuickSight.CommentShareAaron Edellanswered a year ago0Can you clarify if you are trying to join theses on Analysis o datasource section?CommentShareElvinanswered a year agoAWS-User-2984292 a year agoWell I do not really mind if the concatenation is done on analysis or dataset level. Example: if I have a dataset with M -rows and N-columns and another one with M2 Rows and N columns, I would like that the final dataset after concatenation would be M + M2 rows and N columnsShareFabrizio@AWS EXPERTa year agoplease post this type of answers as comments to the question.Share0you can use calculated fields for that - it can be done on analysis or dataset levelhttps://docs.aws.amazon.com/quicksight/latest/user/adding-a-calculated-field-analysis.htmlCommentShareAlex_Tanswered a year agoAWS-User-2984292 a year agoHow does this help me? I do not want to add any new fields to the dataset, but I want to basically row-join two datasets. Example: if I have one dataset with M rows and N columns and another with M2 rows and N columns, I would like the final dataset after concatenation to have M + M2 rows and N columns.ShareFabrizio@AWS EXPERTa year agothe user is asking for the ability to make a Union between 2 datasets, not to add a concatenate function as calculated field.Share"


Question: Asking about how to terminate game session

"Hi everyoneI'm working on auto-scaling feature in GameLift. I think that it's possible for game session on gameLift not to be terminated even though no one is in the game session like the picture, below.REMOVEDUPLOADI'm just hypothesizing the case. Actually, it's a bug of my dedicated server in the picture.So is there a way to terminate the game session forcibly in GameLift?Any help is appreciated.FollowComment"

Answer: "0[quote="mskiller2000, post:1, topic:6931"]e in GameLift. I think that it’s possible for game session on gameLift not to be terminated eve[/quote]Is it working as intended for the game session to continue even if no players are connected. You can either call TerminateGameSession or ProcessEnding after X seconds of no players being connected.https://docs.aws.amazon.com/gamelift/latest/developerguide/gamelift-sdk-interactions.html#gamelift-sdk-interactions-shutdownCommentSharerePost-User-2114620answered 4 years ago0I missed adding TerminateGameSession() or ProcessEnding after X seconds of no players being connected. I wondered that there was setting for empty game session.Thank you very much.CommentSharerePost-User-7829175answered 4 years ago0A post was split to a new topic: TerminateGameSession not causing game session terminationCommentSharerePost-User-5332620answered 3 years ago"


Question: Amplify Js with AppSync

"Hi, Can I use Amplify Js to manage connection and and operation with AppSync? I don't want to use Amplify hosting and service.ThanksFollowComment"

Answer: "1I have personally not done it yet but I think it shouldn't be a problem because when we run the front-end using  npm init on our local PC it works fine without deploying the updates on the amplify front-end.but yes you will still need to update the back-end using amplify push.anyways, let us know if it works for you.CommentSharehussainbanswered 8 months ago"


Question: Authenticate GitLab CI job with JWT

"Hello,I'd like to be able to authenticate GitLab CI job token to give permissions to it.Gitlab provides a JWT token in CI_JOB_TOKEN environment variables containing a lot of information regarding the job and signed by gitlab server.I tried to create an OIDC identity provider pointing to gitlab.com, a role using this identity provider, set AWS_ROLE_ARN to the role ARN and AWS_WEB_IDENTITY_TOKEN_FILE to a file containing the content of CI_JOB_TOKEN.When running "aws sts assume-role-with-web-identity --role-arn $AWS_ROLE_ARN --role-session-name test --web-identity-token file://$AWS_WEB_IDENTITY_TOKEN_FILE --duration-seconds 1000" in a pipeline, I get this error:"An error occurred (InvalidIdentityToken) when calling the AssumeRoleWithWebIdentity operation: Missing a required claim: aud".Indeed, the JWT token does not contain a "aud" claim.My goal is to be able to achieve this: https://docs.gitlab.com/ee/ci/examples/authenticating-with-hashicorp-vault/, but without having to deploy HashCorp Vault.Is what I'm trying to do completely dumb? Is there something in OIDC that I don't understand and by design it can't work? To me it looks like what it's possible to do with IRSA, but somehow it does not work because the JWT token does not contain the required claims.It would be very nice to be able to give permission to GitLab jobs using same method as IRSA.FollowComment"

Answer: "0I patched my GitLab instance with this patch: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/71657/diffs?commit_id=fdb7ffdc17b40ee69687aa618ac3bc201c3c8257,Now the error message is: `An error occurred (InvalidIdentityToken) when calling the AssumeRoleWithWebIdentity operation: Couldn't retrieve verification key from your identity provider,  please reference AssumeRoleWithWebIdentity documentation for requirements``I can't figure out what happens now...Any idea welcomeCommentSharemcanevetanswered 2 years agorePost-User-5226633 6 months agoAny ideas how this issue was resolved.Please post solution as we are also encountering same issue.Share0Here is the debug:$ aws sts assume-role-with-web-identity --role-arn $AWS_ROLE_ARN --role-session-name test --web-identity-token file://$AWS_WEB_IDENTITY_TOKEN_FILE --debug  2021-10-05 14:44:37,307 - MainThread - awscli.clidriver - DEBUG - CLI version: aws-cli/2.2.43 Python/3.8.8 Linux/4.14.243-185.433.amzn2.x86_64 docker/x86_64.amzn.2  2021-10-05 14:44:37,308 - MainThread - awscli.clidriver - DEBUG - Arguments entered to CLI: \['sts', 'assume-role-with-web-identity', '--role-arn', 'arn:aws:iam::<REDACTED>', '--role-session-name', 'test', '--web-identity-token', 'file:///tmp/aws_web_identity_token_file', '--debug']  2021-10-05 14:44:37,324 - MainThread - botocore.hooks - DEBUG - Event building-command-table.main: calling handler <function add_s3 at 0x7ff686c1cca0>  2021-10-05 14:44:37,325 - MainThread - botocore.hooks - DEBUG - Event building-command-table.main: calling handler <function add_ddb at 0x7ff686d76700>  2021-10-05 14:44:37,325 - MainThread - botocore.hooks - DEBUG - Event building-command-table.main: calling handler <bound method BasicCommand.add_command of <class 'awscli.customizations.configure.configure.ConfigureCommand'>>  2021-10-05 14:44:37,325 - MainThread - botocore.hooks - DEBUG - Event building-command-table.main: calling handler <function change_name at 0x7ff686e220d0>  2021-10-05 14:44:37,325 - MainThread - botocore.hooks - DEBUG - Event building-command-table.main: calling handler <function change_name at 0x7ff686e22ee0>  2021-10-05 14:44:37,326 - MainThread - botocore.hooks - DEBUG - Event building-command-table.main: calling handler <function alias_opsworks_cm at 0x7ff686c2d700>  2021-10-05 14:44:37,326 - MainThread - botocore.hooks - DEBUG - Event building-command-table.main: calling handler <function add_history_commands at 0x7ff686d41550>  2021-10-05 14:44:37,326 - MainThread - botocore.hooks - DEBUG - Event building-command-table.main: calling handler <bound method BasicCommand.add_command of <class 'awscli.customizations.devcommands.CLIDevCommand'>>  2021-10-05 14:44:37,326 - MainThread - botocore.hooks - DEBUG - Event building-command-table.main: calling handler <function add_waiters at 0x7ff686c63940>  2021-10-05 14:44:37,327 - MainThread - botocore.loaders - DEBUG - Loading JSON file: /usr/local/aws-cli/v2/2.2.43/dist/awscli/data/cli.json  2021-10-05 14:44:37,331 - MainThread - botocore.hooks - DEBUG - Event top-level-args-parsed: calling handler <function resolve_types at 0x7ff686c76790>  2021-10-05 14:44:37,331 - MainThread - botocore.hooks - DEBUG - Event top-level-args-parsed: calling handler <function no_sign_request at 0x7ff686c77310>  2021-10-05 14:44:37,331 - MainThread - botocore.hooks - DEBUG - Event top-level-args-parsed: calling handler <function resolve_verify_ssl at 0x7ff686c77280>  2021-10-05 14:44:37,331 - MainThread - botocore.hooks - DEBUG - Event top-level-args-parsed: calling handler <function resolve_cli_read_timeout at 0x7ff686c77430>  2021-10-05 14:44:37,332 - MainThread - botocore.hooks - DEBUG - Event top-level-args-parsed: calling handler <function resolve_cli_connect_timeout at 0x7ff686c773a0>  2021-10-05 14:44:37,332 - MainThread - botocore.hooks - DEBUG - Event top-level-args-parsed: calling handler <built-in method update of dict object at 0x7ff686b49400>  2021-10-05 14:44:37,333 - MainThread - awscli.clidriver - DEBUG - CLI version: aws-cli/2.2.43 Python/3.8.8 Linux/4.14.243-185.433.amzn2.x86_64 docker/x86_64.amzn.2 prompt/off  2021-10-05 14:44:37,333 - MainThread - awscli.clidriver - DEBUG - Arguments entered to CLI: \['sts', 'assume-role-with-web-identity', '--role-arn', 'arn:aws:iam::<REDACTED>', '--role-session-name', 'test', '--web-identity-token', 'file:///tmp/aws_web_identity_token_file', '--debug']  2021-10-05 14:44:37,333 - MainThread - botocore.hooks - DEBUG - Event session-initialized: calling handler <function add_timestamp_parser at 0x7ff686c20310>  2021-10-05 14:44:37,334 - MainThread - botocore.hooks - DEBUG - Event session-initialized: calling handler <function register_uri_param_handler at 0x7ff68766f310>  2021-10-05 14:44:37,334 - MainThread - botocore.hooks - DEBUG - Event session-initialized: calling handler <function add_binary_formatter at 0x7ff686b8c160>  2021-10-05 14:44:37,334 - MainThread - botocore.hooks - DEBUG - Event session-initialized: calling handler <function no_pager_handler at 0x7ff687667790>  2021-10-05 14:44:37,335 - MainThread - botocore.hooks - DEBUG - Event session-initialized: calling handler <function inject_assume_role_provider_cache at 0x7ff6875c0f70>  2021-10-05 14:44:37,336 - MainThread - botocore.utils - DEBUG - IMDS ENDPOINT: http://169.254.169.254/  2021-10-05 14:44:37,339 - MainThread - botocore.hooks - DEBUG - Event session-initialized: calling handler <function attach_history_handler at 0x7ff686d41430>  2021-10-05 14:44:37,339 - MainThread - botocore.hooks - DEBUG - Event session-initialized: calling handler <function inject_json_file_cache at 0x7ff686d72550>  2021-10-05 14:44:37,352 - MainThread - botocore.loaders - DEBUG - Loading JSON file: /usr/local/aws-cli/v2/2.2.43/dist/botocore/data/sts/2011-06-15/service-2.json  2021-10-05 14:44:37,355 - MainThread - botocore.hooks - DEBUG - Event building-command-table.sts: calling handler <function add_waiters at 0x7ff686c63940>  2021-10-05 14:44:37,372 - MainThread - awscli.clidriver - DEBUG - OrderedDict(\[('role-arn', <awscli.arguments.CLIArgument object at 0x7ff6861110a0>), ('role-session-name', <awscli.arguments.CLIArgument object at 0x7ff686111190>), ('web-identity-token', <awscli.arguments.CLIArgument object at 0x7ff686111160>), ('provider-id', <awscli.arguments.CLIArgument object at 0x7ff686111130>), ('policy-arns', <awscli.arguments.ListArgument object at 0x7ff6861114c0>), ('policy', <awscli.arguments.CLIArgument object at 0x7ff686111580>), ('duration-seconds', <awscli.arguments.CLIArgument object at 0x7ff6861117c0>)])  2021-10-05 14:44:37,372 - MainThread - botocore.hooks - DEBUG - Event building-argument-table.sts.assume-role-with-web-identity: calling handler <function add_streaming_output_arg at 0x7ff686c208b0>  2021-10-05 14:44:37,373 - MainThread - botocore.hooks - DEBUG - Event building-argument-table.sts.assume-role-with-web-identity: calling handler <function add_cli_input_json at 0x7ff6875cb820>  2021-10-05 14:44:37,374 - MainThread - botocore.hooks - DEBUG - Event building-argument-table.sts.assume-role-with-web-identity: calling handler <function add_cli_input_yaml at 0x7ff6875cbaf0>  2021-10-05 14:44:37,374 - MainThread - botocore.hooks - DEBUG - Event building-argument-table.sts.assume-role-with-web-identity: calling handler <function unify_paging_params at 0x7ff686d76d30>  2021-10-05 14:44:37,388 - MainThread - botocore.loaders - DEBUG - Loading JSON file: /usr/local/aws-cli/v2/2.2.43/dist/botocore/data/sts/2011-06-15/paginators-1.json  2021-10-05 14:44:37,389 - MainThread - botocore.hooks - DEBUG - Event building-argument-table.sts.assume-role-with-web-identity: calling handler <function add_generate_skeleton at 0x7ff686cead30>  2021-10-05 14:44:37,389 - MainThread - botocore.hooks - DEBUG - Event before-building-argument-table-parser.sts.assume-role-with-web-identity: calling handler <bound method OverrideRequiredArgsArgument.override_required_args of <awscli.customizations.cliinput.CliInputJSONArgument object at 0x7ff6861113d0>>  2021-10-05 14:44:37,390 - MainThread - botocore.hooks - DEBUG - Event before-building-argument-table-parser.sts.assume-role-with-web-identity: calling handler <bound method OverrideRequiredArgsArgument.override_required_args of <awscli.customizations.cliinput.CliInputYAMLArgument object at 0x7ff686111310>>  2021-10-05 14:44:37,390 - MainThread - botocore.hooks - DEBUG - Event before-building-argument-table-parser.sts.assume-role-with-web-identity: calling handler <bound method GenerateCliSkeletonArgument.override_required_args of <awscli.customizations.generatecliskeleton.GenerateCliSkeletonArgument object at 0x7ff6861119d0>>  2021-10-05 14:44:37,391 - MainThread - botocore.hooks - DEBUG - Event load-cli-arg.sts.assume-role-with-web-identity.role-arn: calling handler <awscli.paramfile.URIArgumentHandler object at 0x7ff68610df70>  2021-10-05 14:44:37,392 - MainThread - botocore.hooks - DEBUG - Event process-cli-arg.sts.assume-role-with-web-identity: calling handler <awscli.argprocess.ParamShorthandParser object at 0x7ff68a9d3820>  2021-10-05 14:44:37,392 - MainThread - awscli.arguments - DEBUG - Unpacked value of 'arn:aws:iam::<REDACTED>' for parameter "role_arn": 'arn:aws:iam::<REDACTED>'  2021-10-05 14:44:37,392 - MainThread - botocore.hooks - DEBUG - Event load-cli-arg.sts.assume-role-with-web-identity.role-session-name: calling handler <awscli.paramfile.URIArgumentHandler object at 0x7ff68610df70>  2021-10-05 14:44:37,392 - MainThread - botocore.hooks - DEBUG - Event process-cli-arg.sts.assume-role-with-web-identity: calling handler <awscli.argprocess.ParamShorthandParser object at 0x7ff68a9d3820>  2021-10-05 14:44:37,393 - MainThread - awscli.arguments - DEBUG - Unpacked value of 'test' for parameter "role_session_name": 'test'  2021-10-05 14:44:37,393 - MainThread - botocore.hooks - DEBUG - Event load-cli-arg.sts.assume-role-with-web-identity.web-identity-token: calling handler <awscli.paramfile.URIArgumentHandler object at 0x7ff68610df70>  2021-10-05 14:44:37,393 - MainThread - botocore.hooks - DEBUG - Event process-cli-arg.sts.assume-role-with-web-identity: calling handler <awscli.argprocess.ParamShorthandParser object at 0x7ff68a9d3820>  2021-10-05 14:44:37,394 - MainThread - awscli.arguments - DEBUG - Unpacked value of '\[MASKED]\n' for parameter "web_identity_token": '\[MASKED]\n'  2021-10-05 14:44:37,394 - MainThread - botocore.hooks - DEBUG - Event load-cli-arg.sts.assume-role-with-web-identity.provider-id: calling handler <awscli.paramfile.URIArgumentHandler object at 0x7ff68610df70>  2021-10-05 14:44:37,394 - MainThread - botocore.hooks - DEBUG - Event load-cli-arg.sts.assume-role-with-web-identity.policy-arns: calling handler <awscli.paramfile.URIArgumentHandler object at 0x7ff68610df70>  2021-10-05 14:44:37,395 - MainThread - botocore.hooks - DEBUG - Event load-cli-arg.sts.assume-role-with-web-identity.policy: calling handler <awscli.paramfile.URIArgumentHandler object at 0x7ff68610df70>  2021-10-05 14:44:37,395 - MainThread - botocore.hooks - DEBUG - Event load-cli-arg.sts.assume-role-with-web-identity.duration-seconds: calling handler <awscli.paramfile.URIArgumentHandler object at 0x7ff68610df70>  2021-10-05 14:44:37,395 - MainThread - botocore.hooks - DEBUG - Event load-cli-arg.sts.assume-role-with-web-identity.cli-input-json: calling handler <awscli.paramfile.URIArgumentHandler object at 0x7ff68610df70>  2021-10-05 14:44:37,395 - MainThread - botocore.hooks - DEBUG - Event load-cli-arg.sts.assume-role-with-web-identity.cli-input-yaml: calling handler <awscli.paramfile.URIArgumentHandler object at 0x7ff68610df70>  2021-10-05 14:44:37,396 - MainThread - botocore.hooks - DEBUG - Event load-cli-arg.sts.assume-role-with-web-identity.generate-cli-skeleton: calling handler <awscli.paramfile.URIArgumentHandler object at 0x7ff68610df70>  2021-10-05 14:44:37,396 - MainThread - botocore.hooks - DEBUG - Event calling-command.sts.assume-role-with-web-identity: calling handler <bound method CliInputArgument.add_to_call_parameters of <awscli.customizations.cliinput.CliInputJSONArgument object at 0x7ff6861113d0>>  2021-10-05 14:44:37,396 - MainThread - botocore.hooks - DEBUG - Event calling-command.sts.assume-role-with-web-identity: calling handler <bound method CliInputArgument.add_to_call_parameters of <awscli.customizations.cliinput.CliInputYAMLArgument object at 0x7ff686111310>>  2021-10-05 14:44:37,396 - MainThread - botocore.hooks - DEBUG - Event calling-command.sts.assume-role-with-web-identity: calling handler <bound method GenerateCliSkeletonArgument.generate_skeleton of <awscli.customizations.generatecliskeleton.GenerateCliSkeletonArgument object at 0x7ff6861119d0>>  2021-10-05 14:44:37,397 - MainThread - botocore.credentials - DEBUG - Looking for credentials via: env  2021-10-05 14:44:37,397 - MainThread - botocore.credentials - DEBUG - Looking for credentials via: assume-role  2021-10-05 14:44:37,398 - MainThread - botocore.credentials - DEBUG - Looking for credentials via: assume-role-with-web-identity  2021-10-05 14:44:37,399 - MainThread - botocore.loaders - DEBUG - Loading JSON file: /usr/local/aws-cli/v2/2.2.43/dist/botocore/data/endpoints.json  2021-10-05 14:44:37,408 - MainThread - botocore.hooks - DEBUG - Event choose-service-name: calling handler <function handle_service_name_alias at 0x7ff6889fb4c0>  2021-10-05 14:44:37,409 - MainThread - botocore.hooks - DEBUG - Event creating-client-class.sts: calling handler <function add_generate_presigned_url at 0x7ff688a2ca60>  2021-10-05 14:44:37,412 - MainThread - botocore.endpoint - DEBUG - Setting sts timeout as (60, 60)  2021-10-05 14:44:37,414 - MainThread - botocore.hooks - DEBUG - Event provide-client-params.sts.AssumeRoleWithWebIdentity: calling handler <function base64_decode_input_blobs at 0x7ff686b8c8b0>  2021-10-05 14:44:37,414 - MainThread - botocore.hooks - DEBUG - Event before-parameter-build.sts.AssumeRoleWithWebIdentity: calling handler <function generate_idempotent_uuid at 0x7ff68899d550>  2021-10-05 14:44:37,415 - MainThread - botocore.hooks - DEBUG - Event before-call.sts.AssumeRoleWithWebIdentity: calling handler <function inject_api_version_header_if_needed at 0x7ff6889a1dc0>  2021-10-05 14:44:37,415 - MainThread - botocore.endpoint - DEBUG - Making request for OperationModel(name=AssumeRoleWithWebIdentity) with params: {'url_path': '/', 'query_string': '', 'method': 'POST', 'headers': {'Content-Type': 'application/x-www-form-urlencoded; charset=utf-8', 'User-Agent': 'aws-cli/2.2.43 Python/3.8.8 Linux/4.14.243-185.433.amzn2.x86_64 docker/x86_64.amzn.2 prompt/off command/sts.assume-role-with-web-identity'}, 'body': {'Action': 'AssumeRoleWithWebIdentity', 'Version': '2011-06-15', 'RoleArn': 'arn:aws:iam::<REDACTED>', 'RoleSessionName': 'test', 'WebIdentityToken': '\[MASKED]\n'}, 'url': 'https://sts.eu-west-3.amazonaws.com/', 'context': {'client_region': 'eu-west-3', 'client_config': <botocore.config.Config object at 0x7ff68608e700>, 'has_streaming_input': False, 'auth_type': None}}  2021-10-05 14:44:37,415 - MainThread - botocore.hooks - DEBUG - Event request-created.sts.AssumeRoleWithWebIdentity: calling handler <bound method RequestSigner.handler of <botocore.signers.RequestSigner object at 0x7ff68608e670>>  2021-10-05 14:44:37,416 - MainThread - botocore.hooks - DEBUG - Event choose-signer.sts.AssumeRoleWithWebIdentity: calling handler <function disable_signing at 0x7ff68899d9d0>  2021-10-05 14:44:37,416 - MainThread - botocore.endpoint - DEBUG - Sending http request: <AWSPreparedRequest stream_output=False, method=POST, url=https://sts.eu-west-3.amazonaws.com/, headers={'Content-Type': b'application/x-www-form-urlencoded; charset=utf-8', 'User-Agent': b'aws-cli/2.2.43 Python/3.8.8 Linux/4.14.243-185.433.amzn2.x86_64 docker/x86_64.amzn.2 prompt/off command/sts.assume-role-with-web-identity', 'Content-Length': '1209'}>  2021-10-05 14:44:37,417 - MainThread - botocore.httpsession - DEBUG - Certificate path: /usr/local/aws-cli/v2/2.2.43/dist/botocore/cacert.pem  2021-10-05 14:44:37,418 - MainThread - urllib3.connectionpool - DEBUG - Starting new HTTPS connection (1): sts.eu-west-3.amazonaws.com:443  2021-10-05 14:44:38,108 - MainThread - urllib3.connectionpool - DEBUG - https://sts.eu-west-3.amazonaws.com:443 "POST / HTTP/1.1" 400 390  2021-10-05 14:44:38,109 - MainThread - botocore.parsers - DEBUG - Response headers: {'x-amzn-RequestId': '33c809b7-3786-4d94-ae82-b2c3d023dc8b', 'Content-Type': 'text/xml', 'Content-Length': '390', 'Date': 'Tue, 05 Oct 2021 14:44:37 GMT', 'Connection': 'close'}  2021-10-05 14:44:38,109 - MainThread - botocore.parsers - DEBUG - Response body:  b'<ErrorResponse xmlns="https://sts.amazonaws.com/doc/2011-06-15/">\n  <Error>\n    <Type>Sender</Type>\n    InvalidIdentityToken\n    <Message>Couldn\'t retrieve verification key from your identity provider,  please reference AssumeRoleWithWebIdentity documentation for requirements</Message>\n  </Error>\n  <RequestId>33c809b7-3786-4d94-ae82-b2c3d023dc8b</RequestId>\n</ErrorResponse>\n'  2021-10-05 14:44:38,110 - MainThread - botocore.parsers - DEBUG - Response headers: {'x-amzn-RequestId': '33c809b7-3786-4d94-ae82-b2c3d023dc8b', 'Content-Type': 'text/xml', 'Content-Length': '390', 'Date': 'Tue, 05 Oct 2021 14:44:37 GMT', 'Connection': 'close'}  2021-10-05 14:44:38,111 - MainThread - botocore.parsers - DEBUG - Response body:  b'<ErrorResponse xmlns="https://sts.amazonaws.com/doc/2011-06-15/">\n  <Error>\n    <Type>Sender</Type>\n    InvalidIdentityToken\n    <Message>Couldn\'t retrieve verification key from your identity provider,  please reference AssumeRoleWithWebIdentity documentation for requirements</Message>\n  </Error>\n  <RequestId>33c809b7-3786-4d94-ae82-b2c3d023dc8b</RequestId>\n</ErrorResponse>\n'  2021-10-05 14:44:38,111 - MainThread - botocore.hooks - DEBUG - Event needs-retry.sts.AssumeRoleWithWebIdentity: calling handler <bound method RetryHandler.needs_retry of <botocore.retries.standard.RetryHandler object at 0x7ff685de80a0>>  2021-10-05 14:44:38,111 - MainThread - botocore.retries.standard - DEBUG - Not retrying request.  2021-10-05 14:44:38,112 - MainThread - botocore.hooks - DEBUG - Event after-call.sts.AssumeRoleWithWebIdentity: calling handler <bound method RetryQuotaChecker.release_retry_quota of <botocore.retries.standard.RetryQuotaChecker object at 0x7ff68608eca0>>  2021-10-05 14:44:38,112 - MainThread - awscli.clidriver - DEBUG - Exception caught in main()  Traceback (most recent call last):    File "awscli/clidriver.py", line 459, in main    File "awscli/clidriver.py", line 594, in __call__    File "awscli/clidriver.py", line 770, in __call__    File "awscli/clidriver.py", line 901, in invoke    File "awscli/clidriver.py", line 913, in _make_client_call    File "botocore/client.py", line 278, in _api_call    File "botocore/client.py", line 597, in _make_api_call  botocore.errorfactory.InvalidIdentityTokenException: An error occurred (InvalidIdentityToken) when calling the AssumeRoleWithWebIdentity operation: Couldn't retrieve verification key from your identity provider,  please reference AssumeRoleWithWebIdentity documentation for requirements  An error occurred (InvalidIdentityToken) when calling the AssumeRoleWithWebIdentity operation: Couldn't retrieve verification key from your identity provider,  please reference AssumeRoleWithWebIdentity documentation for requirements  CommentSharemcanevetanswered 2 years agorePost-User-5226633 6 months agoAny ideas how this issue was resolved.Please post solution as we are also encountering same issue.ThanksShare0When trying to understand how IAM Role for ServiceAccount works, I decoded a ServiceAccount token, here is what it looks like:{    "aud": \[      "https://kubernetes.default.svc.cluster.local"    ],    "exp": 1664781927,    "iat": 1633245927,    "iss": "https://kubernetes.default.svc.cluster.local",    "kubernetes.io": {      "namespace": "kube-system",      "pod": {        "name": "kindnet-xrlgj",        "uid": "314bd99e-c985-48f6-94c0-e19273dc75f8"      },      "serviceaccount": {        "name": "kindnet",        "uid": "dc206c6d-334f-4994-a1f0-6ab50c20dc1b"      },      "warnafter": 1633249534    },    "nbf": 1633245927,    "sub": "system:serviceaccount:kube-system:kindnet"  }  While here is what a GitLab job token looks like:{    "namespace_id": "123456",    "namespace_path": "<username>",    "project_id": "67890",    "project_path": "<username>/<project>",    "user_id": "87398753",    "user_login": "<username>",    "user_email": "<email>",    "pipeline_id": "98080980",    "pipeline_source": "merge_request_event",    "job_id": "1387684868",    "ref": "<branch>",    "ref_type": "branch",    "ref_protected": "false",    "jti": "7f945784-8081-4909-bd97-eb0f7df6dddf",    "iss": "gitlab.com",    "iat": 1633184303,    "nbf": 1633184298,    "exp": 1633187903,    "sub": "job_1387684868"  }  So JWT generated by Kubernetes contains aud claim, but the one generated by GitLab does not contain it.That's why it does not work...Edited by: mcanevet on Oct 5, 2021 6:28 AMCommentSharemcanevetanswered 2 years ago"


Question: Linking/Moving the code commit repos and code pipeline to code catalyst

We use code commit for storing code and code build for build and code pipeline for ci/cd. Now there is a new service released - code catalyst. How to move or link these repositories to new code catalyst ?FollowComment

Answer: 3Amazon CodeCatalyst currently supports only linking a Github repository and not from CodeCommit.  I have raised a feature request with the service team on your behalf.  I request you to keep an eye on our What's New and Blog pages for any new feature announcements.CommentShareMODERATORSundaresh_Ianswered 6 months ago1We don't yet have a way to migrate a CodePipeline pipeline into CodeCatalyst workflows or run a pipeline in CodePipeline from a CodeCatalyst workflow. Do you want to run both of them together or do you want to migrate?CommentShareMODERATORRanjithanswered 6 months agoG V Navin 6 months agoI want to use one. If code catalyst is the way to go then i can migrate to code catalyst and forget code commit and code build and code pipeline.Share


Question: Bastion Host to Private Subnet

"Hello,I am trying to access private subnet from Bastion Host in window system.Can somebody share the commands to add keys in ssh agent. I am using putty and puttygen to convert the .ppk file to .pem file.Thanks,FollowComment"

Answer: "1Accepted AnswerHi,you  can also consider to use SSM to achieve the same, see references:https://aws.amazon.com/blogs/mt/replacing-a-bastion-host-with-amazon-ec2-systems-manager/https://repost.aws/knowledge-center/systems-manager-ssh-vpc-resourcesHope it helps ;)CommentShareEXPERTalatechanswered 16 days ago0I assume you mean how to add SSH public key to an VM?If so, then it might help to have a look at the following link.CommentShareemnedanswered 16 days ago"


Question: Sending an image file from lambda

I have a image file stored in aws lambda /tmp folder how do I send it back as a REST/HTTP response ?FollowComment

Answer: 2You need to base64 encode it and return it in the body of the response. See this doc for an example.CommentShareEXPERTUrianswered 7 months agoEXPERTIndranil Banerjee AWSreviewed 7 months agokkrishna2100 7 months agoIs it necessary to decode the base64 encoding ?Sharekkrishna2100 7 months agoAlso the documentation is not clear on connecting it to api gateway in appropriate manner for sending images as a response .ShareChris_G EXPERT7 months agoThe document mentions using a Lambda proxy integration for API Gateway at the top - https://docs.aws.amazon.com/apigateway/latest/developerguide/set-up-lambda-proxy-integrations.htmlShare


Question: Preload Docker Image on AWS Batch Instance

"Hello,We are using AWS Batch for running Nvidia Cuda based container images hosted on ECR.This containers weight is over 12GB and our AWS Batch instances takes to much time to init (6-7min).Is there any way to preload the image may be on a custom AMI so the start time is reduced considerably?The AMI currently used has neither access from cloudshell nor SSH.Thank you!FollowComment"

Answer: "0I asked a similar question at re:Invent and found much of the time is cleanup / downloading the image each invocation / start of a job.  In the ECS cluster you can change the pull policy to use cached image if available or validate the cached image.  This would allow the pull to be FAR faster, at the risk of running an old image if you aggressively cache (if your nodes fully turn off when the batch is done this may be OK).  The settings aren't in batch however.Unless the nodes generally only run one job then terminate then the only difference between caching and preloading would be the time to run the first job.Good luck, hope it helps.CommentShareSteve Radichanswered 6 months ago"


Question: AWS Pricing Calculator

"Is there a tool for projecting pricing? If so, can I get the link?FollowCommentrePost-User-8583152 7 months agoHi,A couple of useful things to consider and links to the relevant calculator are included in the articles below.https://calculator.aws/Here are some tips and tricks for using it... to get AWS pricing that's relavanthttps://www.igroupltd.co.uk/resources/how-do-i-use-the-aws-calculator-to-get-an-accurate-aws-costhttps://www.igroupltd.co.uk/resources/how-to-keep-your-amazon-aws-pricing-within-budget-with-full-visibility-of-cloud-costsShare"

Answer: "1Accepted AnswerThere is a calculator, yes:https://calculator.aws/CommentShareA-Shevchenkoanswered a year ago1You can forecast by selecting a future time range for your cost explorer report. This forecast is based on your past usage. You can use a forecast to estimate your AWS bill and set alarms and budgets based on predictions.To know more:https://docs.aws.amazon.com/cost-management/latest/userguide/ce-forecast.htmlCommentShareSwwapnilanswered a year ago"


Question: What is the correct way of setting up authorization for API gateway using AWS SAM

"I am trying to set up a very basic API using AWS SAM  and API Gateway.My API is being setup to retrieve engine hours from some machinery.This information is retrieved using a Lambda function (getHoursFromInflux)This is a broken down version of my template.yaml in my SAM-Project# This is the SAM template that represents the architecture of your serverless application# https://docs.aws.amazon.com/serverless-application-model/latest/developerguide/serverless-sam-template-basics.html# The AWSTemplateFormatVersion identifies the capabilities of the template# https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/format-version-structure.htmlAWSTemplateFormatVersion: 2010-09-09Description: >-  hours-api# Transform section specifies one or more macros that AWS CloudFormation uses to process your template# https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/transform-section-structure.htmlTransform:- AWS::Serverless-2016-10-31# Resources declares the AWS resources that you want to include in the stack# https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/resources-section-structure.htmlResources:  # Each Lambda function is defined by properties:  # https://github.com/awslabs/serverless-application-model/blob/master/versions/2016-10-31.md#awsserverlessfunction  #Create API authentication  HOURSAPI:    Type: AWS::Serverless::Api    Properties:      StageName: Prod      Auth:        DefaultAuthorizer: AWS_IAM    getHoursFromInflux:    Type: AWS::Serverless::Function    Properties:      CodeUri: src/telemetry/assetHours/      Handler: index.handler      Layers:        - !Ref apiLayer      Runtime: nodejs16.x      Architectures:        - x86_64      MemorySize: 128      Timeout: 100      Description: Retreives latest engine hours from all vessels that published engine hours in last 24hours      Policies:        # Give Create/Read/Update/Delete Permissions to the VesselIDTable        - DynamoDBCrudPolicy:            TableName: !Ref VesselIDTable      Environment:        Variables:          # Make table name accessible as environment variable from function code during execution          SAMPLE_TABLE: !Ref VesselIDTable      Events:        GetRoot:          Type: Api          Properties:            RestApiId: !Ref HOURSAPI            Path: /assets/hours            Method: POST  # Simple syntax to create a DynamoDB table with a single attribute primary key, more in  # https://github.com/awslabs/serverless-application-model/blob/master/versions/2016-10-31.md#awsserverlesssimpletable    #Lambda Layers  apiLayer:    Type: AWS::Serverless::LayerVersion    Properties:      LayerName: apiLayer      Description: Dependencies for API      ContentUri: dependencies/apiDependencies      CompatibleRuntimes:        - nodejs16.x      LicenseInfo: 'MIT'      RetentionPolicy: Retain    # DynamoDB table to store item: {id: <ID>, name: <NAME>}  VesselIDTable:    Type: AWS::Serverless::SimpleTable    Properties:      PrimaryKey:        Name: id        Type: Number      ProvisionedThroughput:        ReadCapacityUnits: 2        WriteCapacityUnits: 2Outputs:  WebEndpoint:    Description: "API Gateway endpoint URL for Prod stage"    Value: !Sub "MYURL???????"When I deploy this API I create a user in IAM and give it the following permissions:which allows this user to invoke the API and invoke the Lambda{    "Version": "2012-10-17",    "Statement": [        {            "Sid": "VisualEditor0",            "Effect": "Allow",            "Action": [                "lambda:InvokeFunction",                "execute-api:Invoke"            ],            "Resource": [                "*"            ]        }    ]}What I would like to understand is a two part question.1: Why do I need to specifically allow the invoking of the Lambda function when that is the whole intention of setting up the API. If the API has permission to be invoked then it would make sense to me that the Lambda can be invoked too.2: Is there another way to set permissions on this api without having to set up the user permissions to allow the invoking of the lambda function?I tried this in the template:  HOURSAPI:    Type: AWS::Serverless::Api    Properties:      StageName: Prod      Auth:        DefaultAuthorizer: AWS_IAM        InvokeRole: Transdev_API_InvokeRoleThat invoke role (Transdev_API_InvokeRole) has the permissions to invoke the lambda however it does not work.The second question I had around authorisation is the ability to use one generic lambda function for multiple different users.example:my API POST requests takes an argument of "fleetOperator"in the 'getHoursFromInflux' lambda function this 'fleetOperator' value is used to reference a specific AWS-Secret-Manager Secret.I currently have to provide policies for the lambda to access this secret value. Ideally I would like to use the user policies that made the POST request when the lambda is invoked. This was I can set that userA has the permission to access AWS-Secret "fleetOperatorA" and userB has the permission to access AWS-Secret "fleetOperatorB". They cannot then access each others information.Is this possible to set up using the SAM Template?FollowComment"

Answer: "0The reason for users to have permissions to invoke both API Gateway and Lambda are for troubleshooting purposes. In my cases you need to invoke Lambda to a clearer view of the logs than API Gateway, since API Gateway summarizes the results.CommentSharevtjeananswered a month ago"


Question: An SNS message with a double quote in ANY attribute is filtered out. Is this a bug?

"The documentation https://docs.aws.amazon.com/sns/latest/dg/sns-subscription-filter-policies.html saysWhen Amazon SNS evaluates message attributes against the subscription filter policy, it ignores message attributes that aren't specified in the policy.Through some experimentation I have determined that SNS messages with a double quote in one of their attribute values will always be filtered out for a subscription with a filter policy, even if the filter policy doesn't mention the attribute. It does NOT get filtered out if you put a backslash character before the double quote. I can't find any reference to this in the documentation so I don't know if it's expected behavior. It seems like a bug.Example:SNS subscription filter policy:{    "action": ["purchase"]}Message Attributes (PASSES filter):action - DataType: String, StringValue: purchasemetadata - DataType: String, StringValue: abcMessage Attributes (DOES NOT PASS filter):action - DataType: String, StringValue: purchasemetadata - DataType: String, StringValue: "abcMessage Attributes (PASSES filter):action - DataType: String, StringValue: purchasemetadata - DataType: String, StringValue: "abcThis problem occurred because we have a String type attribute with a JSON blob in the value. I eventually narrowed the problem down to just the presence of the double quote character.I have found a few examples of other people encountering this issue:https://forums.aws.amazon.com/thread.jspa?threadID=300797https://forums.aws.amazon.com/thread.jspa?threadID=318176https://forums.aws.amazon.com/message.jspa?messageID=841824Is this a bug?FollowComment"

Answer: "0Hello,Thank you for reaching out to us. SNS service team is aware of the issue with few characters that might cause an issue with filter policy. When there is filter policy associated with a subscription and the published messages contains attributes with escapable characters such as " and , SNS expects the characters to be double-escaped otherwise the message filtering is affected thereby causing the message delivery failure to the endpoint.Please find the list of such special characters:======================Escape Characters List"\/bfnrtuXXXX (where X is hex eg. u123a)For example:Character in escape list:\” bad\” ok\\” badCharacter not in escape list:\p ok\p bad\\p okInternal service team is working towards a fix and I am unable to provide an ETA for this , updates to the services are announced at AWS What's New [1] and RSS feed [2].References:https://aws.amazon.com/new/https://aws.amazon.com/new/feed/CommentShareSUPPORT ENGINEERNamratha_Kanswered a year ago"


Question: No Solution Stack named '64bit Amazon Linux 2 v3.1.2 running Go 1' found.

"I was trying to run TheThingsNetwork quick start integration with AWS, and it fails to complete.https://www.thethingsnetwork.org/docs/applications/aws/quick-start.htmlThe first error it fails on is:No Solution Stack named '64bit Amazon Linux 2 v3.1.2 running Go 1' found. (Service: AWSElasticBeanstalk; Status Code: 400; Error Code: InvalidParameterValue; Request ID: 472190c0-7f96-48e3-9c4f-f5b046790d95; Proxy: null)I've tried to figure out what valid Solution Stack versions are available but cant' find it listed anywhere.  I tried to read the CloudFormation template to see if I could use it as a roadmap to manually create the Elastic Beanstalk application, but nothing matches up what I'm seeing in the template.What's the best way to figure out/resolve this?FollowComment"

Answer: 0Accepted AnswerSo I believe the issue is in the template provided by TTN. If you scroll down in the template in the section under the header "TTNConfigurationTemplate:" they define "SolutionStackName" as "64bit Amazon Linux 2 v3.1.2 running Go 1." If you go into Elastic Beanstalk and try to manually create your own environment you'll see that the only option given by AWS is "64bit Amazon Linux 2 v3.1.1 running Go 1" and that no version 3.1.2 is available. You'll need to download the template and change v3.1.2 to v3.1.1 and then manually create the stack yourself.CommentShareschonnoranswered 3 years ago


Question: "Does S3 Inventory include Overhead, Staging or Restore Object data?"

"Hi,From my analysis, I couldn't find in S3 Inventory any of the data related to the Overhead, Staging or Restore Object ITEM OPERATIONs.I've been only able to find data that has the following Item Operations: DeepArchiveStorage, GlacierStorage, OneZoneIAStorage, ReducedRedundancyStorage, StandardStorage.S3 Inventory only provides data about the Storage Class.But I compared the data from S3 Inventory with other reports where we have the data detailed by Item Operation, and the missing data from S3 Inventory seems to be Overhead, Staging or Restore Object ITEM OPERATIONs.Is this correct to assume this is the expected behaviour?Thank you!FollowComment"


Question: How to achieve multiple Graphql endpoints

"Using amplify add api, I created a Graphql-based api endpoint to retrieve a list of entities from a DynamoDb table. Now I want to retrieve a list of a second entity type from a different DynamoDb table. Given that I cannot create a second Graphql api using amplify add api or amplify update api, how am I supposed to retrieve a second entity type? Am I supposed to manually add to the schema.json file, the schema.graphql file, and the backend-config.json file? Please advise. Thanks.FollowComment"

Answer: "0You can log to the AppSync console  in the AWS management console and use the wizards that are available there such as the "Create Resources" button on the Schema Page. The interface of the web console allows defining resolvers, running queries, and other options to configure your GraphQL schema and backend.Or you can modify the Schema manually and locally in your Amplify files if you are familiar with the syntax of GraphQL and with the structure of the mapping templates.CommentShareMLGuyanswered a year ago"


Question: Cannot unlock snowball edge device

"After a power outage, the device started up locked.When trying to unlock the device locally, i always get a response that the manifest fils is not correctsnowballEdge unlock-device --endpoint https://10.xx.xx.xx:9091 --manifest-file "C:...\JIDfab4e1b7-7c87-41db-xxxxxxxx_manifest.bin" --unlock-code c765x-xxxx-xxxx-xxxx-x7dc1IncorrectDeviceManifestException - The Manifest provided is not correct. Ensure you have the correct Manifest for this device and try again. (Service: AWSSnowballDevice; Status Code: 400; Error Code: IncorrectDeviceManifestException; Request ID: 9f74a435-c9b3-4659-902f-fe33a4cdef1a; Proxy: null)FollowComment"

Answer: "1This issue can occur If you have created multiple jobs and the file downloaded does not belong to the Snowball device. Each Snowball job has  its own unique manifest file and unlock-code.  Please check if your job id on console matches with the name of the manifest file (e.g. JID*_manifest.bin). Also, try downloading the file from a different workstation.CommentShareAWS-User-2606180answered 8 months ago0The following AWS official documentation states that if you encounter problems with the manifest file, you should re-download the file. [1][1] Troubleshooting AWS Snowball Edge - AWS Snowball Edge Developer Guidehttps://docs.aws.amazon.com/snowball/latest/developer-guide/troubleshooting.html#manifest-file-troubleshooting----- excerpt -----Each job has a specific manifest file associated with it. If you create multiple jobs, track which manifest is for which job.If you lose a manifest file or if a manifest file is corrupted, you can redownload the manifest file for a specific job. You do so using the console, AWS CLI, or one of the AWS APIs.----- excerpt -----We hope the above is helpful.CommentSharemn87answered 8 months ago0Yes, that's correct, but the file is not correupted.I tried to re-download it to be sure, but it didn't solve the problem.I am still getting the same errorCommentSharerePost-User-9879926answered 8 months ago0Thanks, I have only one job, so i can't mix with a different job.The manifest file was working fine before the power outage.Suspecting my windows PC, i also tried to re-download manifest+key from a linux machine and i got the same error.CommentSharerePost-User-9879926answered 8 months ago0Given that you've already verified the unlock code and manifest file are for the JID specified on the e-ink display, please contact AWS support via the AWS Console.  Inside the console, click the question mark, then select Support Center.  From there, you can create a case.CommentSharephr0stByteanswered 8 months ago"


Question: Communication through Site to Site VPN Tunnel

"I have the following scenario, an ECS cluster running in a VPC with a VPN Site to Site with a static route, the tunnels are all UP which indicates that the configuration on the Firewall side is 100%, through this VPN I need to access an Oracle database on client side of the network. The route table is configured, as well as the ACLs and security groups. On the Firewall side, the range of Ips of the SubNets was released and even so, it did not participate in the communication with the other side.FollowComment"

Answer: "3Accepted Answerplease Perform a network connectivity test using a tool like traceroute, ping, or nc (netcat) from your ECS instances to the Oracle database server IP. This will help you understand if there's a specific network hop causing the issue.CommentShareEXPERTsdtslmnanswered 2 months agoAltevir 2 months agoI already did and it doesn't pass.Sharesdtslmn EXPERT2 months agoVerify that the security groups attached to your ECS instances and the Oracle database server allow traffic between them. Double-check the ingress and egress rules to ensure that the relevant ports (e.g., 1521 for Oracle) are open for communication.Check the route table associated with the subnets where your ECS instances reside. Ensure that there's a specific route entry for the remote network (where the Oracle database is located) pointing to the virtual private gateway.Share"


Question: Add avatar to email with SES

"I would like to add an avatar of my company to the emails sent from SES (visible in Gmail, Outlook...). How does it work? Is it possible to configure this in AWS?FollowComment"

Answer: "1These avatars shown in email clients are not sent as content of the email. Each provider has its own way of resolving avatars (see blow).If you would use a custom email domain in combination with SES you would get the avatar handling of the email domain provider.gmail:https://stackoverflow.com/questions/9620366/send-email-with-an-avatar#:~:text=The%20avatar%20displayed%20in%20Gmail,picture%20it%20will%20be%20displayed.&text=This%20works%20in%20gmail.outllook:https://answers.microsoft.com/en-us/outlook_com/forum/all/how-do-i-show-my-photo-in-my-outgoing-outlook/b3b51308-4763-4eb1-9f87-c11da6c2cd8eCommentShareJaccoPKanswered a year ago"


Question: Enabling a tls certificate for my domain on a wordpress lightsail doesn't work properly

"So I want to enable https for my domain. I went through the process of  creating, validating and viewing my tls certificate with respect to a distribution on the lightsail console.My distribution is enabled. Its origin is pointing to the static ip address for my lightsail instance. It says my distribution pulls from http only. When I go to the custom domains section i can see the three domains for which i requested encryption. For each it says in the status: "Domain not registered to account". What does that mean? There is one attached certificate, whose status is: "Valid, in use". Then, my default domain is something like 12345abcdef.cloudfront.net. At the Distribution management site it says default domain is the latter and custom domain  is my www.example.com and two more for which the certificate was issued. In the Domains & DNS section I have one global zone sitting that handles all the records. Name servers are pointing to aws as they should and at godaddy i also added the aws domain names. And the a records of the three domains (and subdomains) are pointing to the static ip. And all that works for http.But the https site fails to load. Should I assign something somewhere? Set some CNAME records? What do i put in the resolve to?What I have done now is to change the Domain assignments. So my main domain example.com and www.example.com are now resolving to my distribution. The effect that it has, is that the side now can be visited with https, but the html elements are all weird, like there is no css styling, just plain html. What is going on?FollowComment"

Answer: "0Hi,If you only need HTTPS for your wordpress instance, you can follow the document below to enable https on your lightsail wordpress instance using the bncert tool on the host itself without a distribution.https://lightsail.aws.amazon.com/ls/docs/en_us/articles/amazon-lightsail-enabling-https-on-wordpressIf you would like to use a distribution for the performance benefits, your DNS configuration seems correct.  However, you might need to update some wordpress settings for it to become compatible with the distribution. The below guide should help.https://lightsail.aws.amazon.com/ls/docs/en_us/articles/amazon-lightsail-editing-wp-config-for-distributionCommentShareVarun_Ranswered 2 months ago"


Question: Simultaneous client requests to create game sessions

"I have a Unity Custom GameLift server deployment and everything seems to startup, run, and shutdown correctly.  The clients can connect to the server and communicate as expected.  So all works well in general.My concern is for the case when there are no active game sessions and two clients request to create a new game session at the same time.  With my setup, only one of them gets created and the other client errors out with FleetCapacityExceededException: Unable to reserve a process on fleet.  This create call is wrapped in a retry block so it does retry again after 2, 3, then 5 seconds, but still fails.The Launch Path for the Unity game executable has Concurrent processes set to 1.The Max concurrent game sessions activation is set to No Limit.There’s only one active server instance.I guess I expected that simultaneous requests to create game sessions would actually spawn multiple sessions.  Maybe I’m not understanding the relationship between the Concurrent processes of the game executable and game sessions.  Can you have multiple game sessions for a single game process?Any feedback or help would be greatly appreciated.Thank youFollowComment"

Answer: "0Accepted AnswerYou are right, if you don't have have available processes to host game sessions, your creategamesession calls will fail with that exception. You can use autoscaling, multiple processes per instance etc to get around this problem. Your Fleet metrics should show you all the data you need.Also ensure you are terminating game sessions correctly to free up the server process for another session.And you are also right that when running multiple servers per instance, each server needs to run on its own port and accurately report that port via the ProcessParams passed via ProcessReady.CommentSharerePost-User-5332620answered 2 years ago0Ok, after some more experimentation and a couple re-reads of other posts, it is my understanding that the allowed amount of Game Sessions is tied directly to the number of Concurrent processes for the game executable configured in the fleet.The reason my simultaneous create game session requests failed is because there wasn't another available process to run the game.I also want to say that if you have multiple game sessions, make sure your server picks a different port for each game session, otherwise you'll have some potential cross session communication.If someone else can weigh in on whether or not this is accurate, that would be awesome.thanksCommentSharerePost-User-3643422answered 2 years ago0Also pay attention to the values for GameSessionActivationTimeoutSeconds and MaxConcurrentGameSessionActivations in your CreateFleet settings, both can impact the availability of new sessions.CommentSharerePost-User-5332620answered 2 years ago0This solidifies it for me, thank you!CommentSharerePost-User-3643422answered 2 years ago"


Question: Algorithm arn does not exist when trying to start training job

"When trying to start a training job in sagemaker using AlgorithmEstimator (by inputting the algorithm arn), I get an error saying that the Algorithm arn does not exist.  I have tried this with multiple algorithm arns (both obtained from my own algorithms and algorithms from AWS Marketplace) and they all give a similar error message.Here is a sample notebook that I am trying to execute but fails: https://github.com/aws/amazon-sagemaker-examples/blob/main/aws_marketplace/using_algorithms/autogluon/autogluon_tabular_marketplace.ipynbI am using sagemaker==2.145.0, both locally and in a sagemaker notebook instance.Here is a snippet of the error log:ClientError: An error occurred (ValidationException) when calling the CreateTrainingJob operation: Algorithm arn:aws:sagemaker:us-east-2:[acc-id]:algorithm/arn:aws:sagemaker:us-east-2:[acc-id]:algorithm/autogluon-tabular-v3-5-cb7001bd0e8243b50adc3338deb44a48 does not exist.FollowComment"

Answer: "0Hi - It seems in that example the ARN is coming from https://github.com/aws/amazon-sagemaker-examples/blob/main/aws_marketplace/using_algorithms/autogluon/src/algorithm_arns.py and should be in the format e.g for us-west-2 it should be something like this arn:aws:sagemaker:us-west-2:594846645681:algorithm/autogluon-tabular-v3-5-cb7001bd0e8243b50adc3338deb44a48It seems from your example that format is not correct. Can you please check what is the output of algorithm_arn you get when you run the cell from notebook autogluon_tabular_marketplace.ipynb# Specify algorithm ARN for AutoGluon-Tabular from AWS Marketplace.  However, for this notebook, the algorithm ARN# has been specified in src/algorithm_arns.py file and you do not need to specify the same explicitly.from src.algorithm_arns import AlgorithmArnProvideralgorithm_arn = AlgorithmArnProvider.get_algorithm_arn(region)CommentShareEXPERTAWS-User-Nitinanswered a month agohwgoh a month agoI do get the correct algorithm_arn when running that command:arn:aws:sagemaker:us-east-2:057799348421:algorithm/autogluon-tabular-v3-5-cb7001bd0e8243b50adc3338deb44a48The error message above was just formatted to obfuscate the account ids. However I still get an error saying that the arn does not exist when I start a training job using AlgorithmEstimator.Share"


Question: "SSH to EC2 works temporarily, then fails permanently"

"I've been trying to set up a sandbox Linux EC2 instance, but I am having trouble connecting via SSH.  I've reviewed all of the troubleshooting pages and checked security group inbound settings, VPC gateway/subnet/routes/ACL settings, and I can't figure out what is wrong.The weird part is this: if I stop the instance, then start it back up, I can temporarily connect via SSH right away (i.e. as soon as the instance appears as RUNNING), but only for a limited time.  Within minutes (around the time that the status checks have completed running), SSH ceases to work (I receive a RESOURCE TEMPORARILY UNAVAILABLE message).Is this a known issue?  Could it be an issue with my account?Edited by: bbbill on Feb 15, 2019 4:47 PMFollowComment"

Answer: "0Hello,Please note that the reason why you are unable to connect to your instance is caused by an administrative issue with your account. I have created an internal ticket for our customer service team to remedy this situation. I will inform you as soon as I receive an update.Regards,awstomasCommentShareAWS-User-3892169answered 4 years ago0Hello,I would like to inform you that the issue with your account has now been resolved. You should now be able to connect to your instances. Please let me know if you experience any further issues.Regards,awstomasCommentShareAWS-User-3892169answered 4 years ago"


Question: How can can i make force https on cloudfront url

"I have a CloudFront distribution to serve website hosted on s3 bucket Static Website Hosting has enable website hosting  , but it is** down frequently** what can be resolution to it how can make it force to https I have SSL certification added for that domain in aws as well. In behaviour  i have done all  data served with https, did the following: Go to CloudFront > Your distribution > behaviour tab > select the first element of the list and click Edit. Then should be able to an option for redirecting http to https. What do be the fix?FollowComment"

Answer: 0Here's a link for viewer -> Cloudfront HTTPS: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/using-https-viewers-to-cloudfront.htmlHere's CF -> S3 Origin: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/using-https-cloudfront-to-s3-origin.htmlYou could also consider HSTS headers: https://repost.aws/knowledge-center/cloudfront-http-security-headersCommentSharetparrottanswered 2 months agoEXPERTalatechreviewed 2 months ago


Question: Step Function freezes

"I have noticed that my AWS Step Function freezes after previous run has been aborted with some jobs still left in the pending state.The use case:I have a step function that increments through the files in S3 bucket (using Map for that) and then performs data masking on the files where required (using DataBrew) and then copies files to another s3 bucket.After the test run, if I notice the error in the flow, I stop the run and then using the script stop all the running jobs in the Running state. As the result of this, some jobs remain in the pending state and since the top level run has been stopped they persist there.After fixing the flow and triggering the new run of the function, I have noticed that it starts but I can't see any jobs appering in the pending/Running etc. state. I stopped the run after 5min or so and re-tried again in an hour but the same behaviour persisted.After I ran the job next day the job ran fine however after stopping the job with pending tasks and then trying to start the freeze happened again.FollowComment"


Question: Migrating from MySQL to Aurora (Using Replica)

"I tried searching through the forum and came out empty.We are trying to move from RDS/MySQL to Aurora. Referencing AWS user guide https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/AuroraMySQL.Migrating.RDSMySQL.Replica.html.The Aurora cluster is on "Preparing-data-migration" (and instances are in "Creating") status now for over 3 days now. There are no logs on CloudWatch (Yes, it's enabled), and shows no sign of any activities since the initial few changes in the status. This DB is a little over 2 tib.Any ideas? Any help appreciated.Thanks!FollowComment"

Answer: "0Came here looking for answer to same question - I have a MySQL I'm trying to convert to Aurora in another region.  First time I copied a snapshot over to new region and restored from snapsnot and it worked, took about 3 hours total.Since then, preparing for final migration, I've done it twice and both times it has sat in "preparing-data-migration" for over 24 hours with no other event/log/change etc.  Seems like it's obviously a bug of some type.Very disappointing, I'm now trying to migrate several DBs over using dump and import method, and that is going on 12 hours and counting, so it's not feasible either.  At this point our company may just be stuck due to AWS bug.CommentSharebobbyVREALanswered 3 years ago0Hello,There are various possibilities that could cause this issue as there are lot of processes that need to take place in preparation for the data migration which includes data type conversion and depending on the size of the data being migrated the instance may stuck on this state for sometime. In rare cases, a underlying process might be failing causing the instance to get stuck on the same state for a long time.I came across the below article whereby another user encountered the same issue and they reached out to AWS support for assistance in resolving the issue which helped.[1] https://www.reddit.com/r/aws/comments/jl5314/rds_mysql_aurora_migration_stuck_in/?utm_source=amp&utm_medium=&utm_content=post_bodyYou can also consider using a different approach for migrating your data and for a better migration performance when compared to native migration tools. The Database Migration Service also known as DMS allows migration of data between supported engines with minimal downtime. You will need to take into consideration that since you will be doing cross region migration, you will be charged for the amount of data being migrated.You can refer to this link https://docs.aws.amazon.com/dms/latest/userguide/CHAP_GettingStarted.html to get more information about the service.Let us know if you need anything.regardsjabulileEdited by: Jabulile on Nov 6, 2020 4:36 AMEdited by: Jabulile on Nov 6, 2020 4:50 AMEdited by: Jabulile on Nov 6, 2020 4:50 AMEdited by: Jabulile on Nov 6, 2020 5:09 AMCommentShareJabulileanswered 3 years ago"


Question: "Embedded C SDK: Not Getting SHADOW_ACKs, only SHADOW_TIMEOUTs -- aws_iot_shadow functions not triggering Callback Function"

"I have been referred here by TI Support given that my issue seems to be caused by AWS Embedded C SDK.I am using CC3235S evaluation board.I have had success publishing, subscribing, and updating, Shadows/Topics but receiving JSON payloads from a published topic has been a challenge. I am setting breakpoints in my callback function, and they are never being hit, unless I set my timeout seconds to 0, which results in an immediate timeout. The callback is expected to be called upon Timeout, Rejected, or Accepted statuses.My thing/shadow/get/accepted Topic IS Publishing. The problem is that I'm unable to capture it into my Microcontroller.I also can tell you that my AWS Iot Core / Thing policies are not the problem. I have set my permissions as loose as possible for testing.I have Confirmed that the client IS Subscribing to the /shadow/get/rejected + /accepted topics, and I've confirmed that the Shadow is getting updated form my Device/Thing.I have tried:Adding aws_iot_shadow_yield() / aws_iot_mqtt_yield() after my GET and UPDATE functionsDifferent timeoutsSetting persistent subscribe argument to true and falseAdjusting permissions then reverting them back to known goodThe Return Code always returns SUCCESS for all my aws functions within this routine, and during the GET function I have confirmed that the client IS Connected to AWS.My GET Function:IoT_Error_t rcGS;rcGS = aws_iot_shadow_get(&client, AWS_IOT_MY_THING_NAME, getShadowCallback, NULL, 5, true);My GET function Callback:static void getShadowCallback(const char *pThingName, ShadowActions_t action, Shadow_Ack_Status_t status,        const char *pReceivedJsonDocument, void *pContextData){    IOT_UNUSED(action);    IOT_UNUSED(pContextData);    IOT_UNUSED(pReceivedJsonDocument);    IOT_UNUSED(pThingName);        nop; // breakpoint    if (SHADOW_ACK_TIMEOUT == status) {        IOT_INFO("GET Timeout--");    } else if (SHADOW_ACK_REJECTED == status) {        IOT_INFO("GET RejectedXX");    } else if (SHADOW_ACK_ACCEPTED == status) {        IOT_INFO("GET Accepted !!");        GetFromAWS = true;    }else{        IOT_INFO("Unknown Update Status");    }}I appreciate any help.Thank you.FollowComment"

Answer: "0Accepted AnswerThank you Greg.I don't know how I missed this, but even after combing over AWS policy statements for days, I completely missed the "Receive" action. I succeeded with Connect,  Publish, Subscribe, GET, and UPDATE, but I completely overlooked Receive.This is what happens when an Embedded/Hardware Engineer dives into AWS. I'm learning to swim in the deep end.I feel a bit silly, but that was my problem. I enabled Receiving, and all is well. Thank you for your response. I will keep it in case I run into trouble again.CommentShareMicroTechanswered a year ago0Hi MicroTech. I don't immediately see any obvious issue with your code.Is this taken from sample code in the SimpleLink SDK? I ask because it's an old version of the AWS IoT Device SDK. Version 3.X. This was superseded by a very different design almost 2 years ago. If you are undertaking a new development, I recommend you use the latest release: https://github.com/aws/aws-iot-device-sdk-embedded-C/releasesOr you can take up the latest FreeRTOS Long Term Support (LTS) release: https://github.com/FreeRTOS/FreeRTOS-LTS/releases . FreeRTOS LTS essentially has the same C SDK libraries, but packaged with the FreeRTOS kernel.You can find the shadow demo here: https://github.com/aws/aws-iot-device-sdk-embedded-C/tree/main/demos/shadow/shadow_demo_mainFurthermore, we have a reference implementation of the C SDK libraries and FreeRTOS for the CC3220SF: https://github.com/aws/amazon-freertos/tree/main/vendors/ti/boards/cc3220_launchpadIncluding a shadow demo: https://github.com/aws/amazon-freertos/tree/main/demos/device_shadow_for_awsGetting started guide here: https://docs.aws.amazon.com/freertos/latest/userguide/getting_started_ti.htmlThe 3220 is very similar to your part, so it should not be too hard to adapt as necessary.If you instead wish to persevere with the old SDK, you can search the repo by tag of course. For example, for 3.1.5: https://github.com/aws/aws-iot-device-sdk-embedded-C/tree/v3.1.5And find the shadow demo: https://github.com/aws/aws-iot-device-sdk-embedded-C/tree/v3.1.5/samples/linux/shadow_sampleI would suggest though that you probably need to trace through your code, from reception of the get/accepted to figure out why the callback doesn't fire. Alternatively you may consider to create a support case.CommentShareEXPERTGreg_Banswered a year ago"


Question: WorkDocs Drive Installation

I am having issue with installing WorkDocs Drive. Initially it was installed and worked for about a week before disappearing. Whenever I try to install again I get the following 2 error codes 2503 and 2502. I have received advice to uninstall WorkDocs Drive however the issue that I have is that the WockDocs Drive is not currently installed. I cannot see it in the program list so therefor I cant uninstall it. If I try to uninstall or repair I get the message that it is not installed.I have rebooted the workspace and confirmed that the latest .net framework is installed. Still receive error code 2503 and 2502.Any advice here would be greatly appreciated.FollowComment

Answer: "0First recommendation would be to open a support case for this type of problem, but if you cant, then take a look at these 2 links for troubleshooting WorkDocs ideas. It will depend a lot on your environment configuration with WorkSpace.Troubleshoot WorkDocs DriveWorkDocs IssuesCommentShareAWSdaveanswered 4 months ago"


Question: DKIM-GoDaddy un-recognized

We have attempted to verify DKIM attributes with GoDaddy multiple times but it is still giving the status as "Not Configured"?Note: I have checked the CNAMEs correctly and I have done nslookup and I got back the amazon aws address and still showing "Not Configured".FollowComment