Question: Amazon Linux 2 livepatch yum update failure

"Folks:I'm running Linux 2 with the livepatch feature enabled.Today I tried to install updates via yum and got the following output:Adding kernel-livepatch-4.14.231-173.360 for removalAdding kernel-livepatch-4.14.232-177.418-1.0-0.amzn2.x86_64 for installation--> Running transaction check---> Package kernel.x86_64 0:4.14.231-173.360.amzn2 will be erased--> Processing Dependency: kernel = 4.14.231-173.360.amzn2 for package: kernel-livepatch-4.14.231-173.360-1.0-2.amzn2.x86_64---> Package kernel-livepatch-4.14.231-173.360.x86_64 0:1.0-2.amzn2 will be erased--> Processing Dependency: kernel = 4.14.231-173.360.amzn2 for package: kernel-livepatch-4.14.231-173.360-1.0-2.amzn2.x86_64--> Finished Dependency ResolutionError: Package: kernel-livepatch-4.14.231-173.360-1.0-2.amzn2.x86_64 (@amzn2extra-livepatch)Requires: kernel = 4.14.231-173.360.amzn2Removing: kernel-4.14.231-173.360.amzn2.x86_64 (@amzn2-core)kernel = 4.14.231-173.360.amzn2Installed: kernel-4.14.231-173.361.amzn2.x86_64 (@amzn2-core)kernel = 4.14.231-173.361.amzn2Installed: kernel-4.14.232-176.381.amzn2.x86_64 (@amzn2-core)kernel = 4.14.232-176.381.amzn2Available: kernel-4.9.62-10.57.amzn2.x86_64 (amzn2-core)kernel = 4.9.62-10.57.amzn2Available: kernel-4.9.70-2.243.amzn2.x86_64 (amzn2-core)kernel = 4.9.70-2.243.amzn2Available: kernel-4.9.75-1.56.amzn2.x86_64 (amzn2-core)kernel = 4.9.75-1.56.amzn2Available: kernel-4.9.76-38.79.amzn2.x86_64 (amzn2-core)kernel = 4.9.76-38.79.amzn2Available: kernel-4.9.77-41.59.amzn2.x86_64 (amzn2-core)kernel = 4.9.77-41.59.amzn2Available: kernel-4.9.81-44.57.amzn2.x86_64 (amzn2-core)kernel = 4.9.81-44.57.amzn2Available: kernel-4.9.85-46.56.amzn2.x86_64 (amzn2-core)kernel = 4.9.85-46.56.amzn2Available: kernel-4.9.85-47.59.amzn2.x86_64 (amzn2-core)kernel = 4.9.85-47.59.amzn2Available: kernel-4.14.26-54.32.amzn2.x86_64 (amzn2-core)kernel = 4.14.26-54.32.amzn2Available: kernel-4.14.33-59.34.amzn2.x86_64 (amzn2-core)kernel = 4.14.33-59.34.amzn2Available: kernel-4.14.33-59.37.amzn2.x86_64 (amzn2-core)kernel = 4.14.33-59.37.amzn2Available: kernel-4.14.42-61.37.amzn2.x86_64 (amzn2-core)kernel = 4.14.42-61.37.amzn2Available: kernel-4.14.47-63.37.amzn2.x86_64 (amzn2-core)kernel = 4.14.47-63.37.amzn2Available: kernel-4.14.47-64.38.amzn2.x86_64 (amzn2-core)kernel = 4.14.47-64.38.amzn2Available: kernel-4.14.51-66.38.amzn2.x86_64 (amzn2-core)kernel = 4.14.51-66.38.amzn2Available: kernel-4.14.55-68.37.amzn2.x86_64 (amzn2-core)kernel = 4.14.55-68.37.amzn2Available: kernel-4.14.59-68.43.amzn2.x86_64 (amzn2-core)kernel = 4.14.59-68.43.amzn2(a bunch of similar lines omitted to keep the message brief)Any suggestions on how to resolve this?I've tried running the update with the livepatch plugin disabled, but no luck.FollowComment"

Answer: "0I decided to just disable live patching on the instance.  https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/al2-live-patching.html#al2-live-patching-disableCommentShareDavid Ganswered 2 years ago0Hi, we recently fixed a similar yum dependency issue and released a new version of yum livepatch plugin: yum-plugin-kernel-livepatch-1.0-0.9.amzn2.Could you please try updating the yum livepatch plugin, if you have not done so, and see if it fixes the issue?Edited by: awsethan on Jul 7, 2021 10:04 AMCommentShareawsethananswered 2 years ago0Sorry, no, I'm no longer using livepatch.CommentShareDavid Ganswered 2 years ago0Hi,I am experiencing the same problem on all my AMZN2 instances. Looking at what it wants to do I can see that it wants to install the Live Patch package for a Kernel that is about to be removed. As you can see I'm already using the version yum-plugin-kernel-livepatch-1.0-0.9.amzn2.noarch but I still can't update the servers kernels without removing and adding back livepatch modules with a reboot in-between.I noticed I can work around my issue by changing the value in yum.conf, I limit my installed kernel count:from (broken)installonly_limit=3to (temp fix)installonly_limit=4This temporarily fixed the issue as when the next kernel release comes, livepatch will also try to install the livepatch version but yum would probably remove the kernel.Error:--> Finished Dependency ResolutionError: Package: kernel-livepatch-4.14.231-173.361-1.0-2.amzn2.x86_64 (@amzn2extra-livepatch)Requires: kernel = 4.14.231-173.361.amzn2Removing: kernel-4.14.231-173.361.amzn2.x86_64 (@amzn2-core)kernel = 4.14.231-173.361.amzn2Info:→ uname -r4.14.232-177.418.amzn2.x86_64→ kpatch listLoaded patch modules:Installed patch modules:livepatch_CVE_2021_33034 (4.14.231-173.361.amzn2.x86_64)→ rpm -qa | grep -e  kernel -e kpatch | sort -ukernel-4.14.231-173.361.amzn2.x86_64kernel-4.14.232-176.381.amzn2.x86_64kernel-4.14.232-177.418.amzn2.x86_64kernel-headers-4.14.232-177.418.amzn2.x86_64kernel-livepatch-4.14.231-173.361-1.0-2.amzn2.x86_64kernel-livepatch-4.14.232-176.381-1.0-0.amzn2.x86_64kernel-livepatch-4.14.232-177.418-1.0-0.amzn2.x86_64kernel-tools-4.14.232-177.418.amzn2.x86_64kpatch-runtime-0.9.2-4.amzn2.noarchyum-plugin-kernel-livepatch-1.0-0.9.amzn2.noarchEdited by: faramirza77 on Jul 16, 2021 3:52 AMCommentSharefaramirza77answered 2 years ago0Are you limiting the installonly_limit in yum.conf? It seems livepatch needs to have the default 5 kernels to function without breaking. Will see if I get any reply on my hunch.CommentSharefaramirza77answered 2 years ago0This resolved the issue for me, thank you!In three of my personal EC2 machines, plus several systems at work that also encountered this same issue today, the value of installonly_limit in /etc/yum.conf is set to 3.  Given how many different systems had the same value - none of which were set manually - I think it's safe to say that this value of 3 is (or used to be) a default for Amazon Linux 2.Setting it to 5, as you suggested, fixes the problem flawlessly.  Thank you so much for the guidance!CommentSharelupiniaanswered 2 years ago05 is the minimum number of kernels that need to be configured in the installonly_limit in yum.conf, otherwise breaks the livepatch functionality. Tested in AMZN2 instance.CommentShareEduardo_Lanswered 2 years ago"


Question: Amazon S3 Issues

"Hello,I wonder if I could get some help for a pending AWS S3 issue. I am on a free tier subscription which is meant to end on the 30th of November ( Two days' time). So Amazon has been sending me emails to terminate all pending services within my subscription to avoid being charged for service usage after the expiration date.The issue, however, is that when I check billing, I can find services connected to S3 buckets, but when I check for buckets in my environment, I cannot find any buckets. I have reported this to Amazon and they are suggesting they are perhaps API requests. Now I am very new to AWS services so not very conversant with where to look or what I am supposed to do to terminate all these services and tools.Therefore, could anyone please help explain exactly what i am supposed to do to terminate all services or sub-service or tools within my Amazon environment to avoid being charged?I have attached a copy of my billing and S3 environments.RegardsK DavidFollowComment"

Answer: "0Did you try cost explorer?  That might tell you what you'll be charged in the future and what for.  https://aws.amazon.com/aws-cost-management/aws-cost-explorer/Also, storage lens sometimes shows storage that the bucket area doesn't show.  Try that, too.  https://aws.amazon.com/blogs/aws/s3-storage-lens/CommentSharejschwar313answered 6 months agokdavid 6 months agoHello,thanks for your response  I have tried both suggestions with no luck.Share"


Question: change lambda to no longer use zip deployment package

I have a lambda function that had been using a zip file deployment package in order to include some python modules. I have added a layer that includes the required packages so I only need my source code in the console editor. How can I remove the deployment package and have my function source in the editor window?FollowComment

Answer: "0Hi thereI understand you want to remove a layer on your lambda function, please run this command on your aws CLI "aws lambda delete-layer-version --layer-name my-layer --version-number 1"Note when you delete a layer version, you can no longer configure a Lambda function to use it. However, any function that already uses the version continues to have access to it.Hope this helps.References:https://docs.aws.amazon.com/lambda/latest/dg/configuration-layers.html#configuration-layers-deleteCommentShareNonkululekoanswered a year agorePost-User-6390885 a year agoThanks for the quick response. I may not have been clear. I want to delete the zip deployment package, not the layer. I created another function with a zip deployment package, no layers. When I do a "aws lambda list-functions" no layers are shown for this new function. I don't see anything in the cli docs that lets me add or delete the zip package.Share0What you can do is create a ZIP file with only one file in it - the one containing your code. Update the Lambda function with that ZIP file as you have previously been doing. Then your file will show up in the Lambda console code editor.CommentShareEXPERTBrettski-AWSanswered a year agoUri EXPERTa year ago@Brettski@AWS is correct, however, using the console to edit code is not really recommended. I would recommend that you use SAM CLI and SAM Templates to define your functions and deploy them.Share"


Question: Ssh port connection error

"i started the ubuntu image instance with ssh port in amazon ec2 and i installed jenkins with related packages after installation it requires the tcp 8080 port so i enabled it after enabling the port 8080 the ssh 22 port restricted to connect and it shows error in security group how to solve the problem? i need the remote of my server i checked security groups, ACL under vpc everything is good.i tried sg with all traffic,also with custom IPFollowComment"

Answer: "0Step 1: Check if the ports are filtered or closed using the command:$ sudo nmap -sS -sU -PN -p 22 <instance public ip>If there are firewalls blocking the traffic, the output will look something like this:$ sudo nmap -sS -sU -PN -p 22 8.8.8.8Starting Nmap 7.80 ( https://nmap.org ) at 2023-04-02 17:16 UTCNmap scan report for dns.google (8.8.8.8)Host is up.PORT   STATE         SERVICE22/tcp filtered      ssh22/udp open|filtered sshIf this is the case, I believe there are OS level firewalls that are preventing the traffic on port 22. You can review the instance's Console Logs to check if there are any log entries such as:Starting ufw....ufw is running. If the ports are Open, then can you please provide more details as to how you are trying to login to the instance and what are the exact commands you are using. Also, please try logging in to the instance using terminal and command:$ ssh -i <path_to_key_pair> ubuntu@<public_ip> -vvvBased on the output, I will be able to make further suggestions to troubleshoot the issue.Hope this helps.CommentShareSUPPORT ENGINEERHarshavardhan_Ganswered 2 months agorePost-User-7907263 2 months agoTo done this steps I need to access my screen ec2 connect tells error and using putty i can't open I don't have any other options then the management console accessShare"


Question: Why when connecting my AWS keyboard that it show the 8 digit serial as invalid?

"Hi I just received my AWS keyboard,When I enter the 8 digit serial on the back where it prompts (https://console.aws.amazon.com/deepcomposer/home?region=us-east-1#deepComposerKeyboard  )it shows as invalid.  Is there a reason for this?Thanks for any help to this question.FollowCommentcmcdonald-only1 4 months agoJust received my keyboard today and same issue - Help!Share"


Question: Close Greengrass IPC Pub/Sub Subscription with C++ SDK

"Hello,I am trying to implement a Request / Response communication pattern on top of Greengrass IPC's Pub/Sub API. The basic design is as follows:The client process generates a unique ID for its requestThe client process subscribes to a specific topic dedicated to responding to the request, such as ipc/upload/response/<request ID generated in step 1>The client process makes a request to the server process at a specific topic, such as ipc/upload/requestThe server process processes the request and publishes the response on the response topicThe client process reads the response on the response topic and unsubscribes / cleans up the response handlerI want to do the unsubscribe and clean up as there may be many requests and it does not seem to leave a number of handlers allocated after they have handled the single message they are intended to. However, I am not seeing anything in the GreengrassCoreIpcClient API docs about how to unsubscribe from a local pub/sub topic. How should I go about this?FollowComment"

Answer: "2Accepted AnswerTo unsubscribe, call close() on the subscription operation. For example: https://aws.github.io/aws-iot-device-sdk-cpp-v2/class_aws_1_1_greengrass_1_1_subscribe_to_configuration_update_operation.html. See "Public Member Functions inherited from ClientOperation"Cheers,MichaelCommentShareEXPERTMichaelDombrowski-AWSanswered 2 months agoEXPERTAWS-User-Nitinreviewed a month agopatwolfe 2 months agoAmazing, that answers my question. Thank you!!Share"


Question: USER_SRP_AUTH is not enabled for the client

"Hello all.I'm getting the message "USER_SRP_AUTH is not enabled for the client." every time I try to login to the system thru amplify SKD (react js website). So far, I have no clue how to fix this.The documentation says very little about it and I am nubby in AWS services. However, I really want to use Cognito as the identity service from my apps.Anyway, does someone knows how to fix this?RenatoFollowComment"

Answer: "0Hello Renato,Thank you for chatting in.Over the chat we discussed that you were seeing this error when calling Auth.SignIn from your project : USER_SRP_AUTH is not enabled for the client. This error occurs when the App Client does not have USER_SRP_AUTH enabled. Cognito supports a set of authentication flows for logging the user in and Amplify internally uses USER_SRP_AUTH. Therefore, when using the sign-in API call of Amplify, it is required to enable this for the app client. This can be done using Cognito user pool console --> App Client --> Show Details --> Check the box against USER_SRP_AUTH and save it. We tested it out and it worked fine. You can read more about the auth flows from here - [1][1] https://docs.aws.amazon.com/cognito/latest/developerguide/amazon-cognito-user-pools-authentication-flow.html#amazon-cognito-user-pools-custom-authentication-flow[2] https://aws-amplify.github.io/docs/js/authentication#manual-setup[3] https://docs.aws.amazon.com/AWSJavaScriptSDK/latest/AWS/CognitoIdentityServiceProvider.htmlCommentSharerenatospakaanswered 3 years ago"


Question: Smooth vs flat shading - I'd like smooth

REMOVEDUPLOADAbove are two object that are both using the same material. The object on the right is a primitive_sphere which is included in LY Engine\game\objects. The object on the left is a FBX imported sphere exported from Blender (FBX export). So the question is why does the imported sphere have flat shading and the primative_sphere have nice smooth shading. Since the material is the same I am assuming there is something about the object itself that fails? I looked at the normals in Blender for the FBX object and they look OK. Could this be an import issue or am I missing something I need to do to get smooth shading? I'm using 1.13Follow

Answer: "0Accepted Answer@REDACTEDUSERYou need to smooth the normals in Blender and then it will work. In Blender, select the object. Then go to Tools / Shading / and click on Smooth. You will see the whole model smooth in Blender. Export the model and then it will work. Good luck!SharerePost-User-1190460answered 5 years ago0Yes this works. Thanks! In "object mode" just setting Smooth works for most objects. I had to go one step further and enter "edit mode" and select Edges then Smooth (same tool area) then my object worked.SharerePost-User-6659809answered 5 years ago0Awesome, I am glad that helped. Have a great day!SharerePost-User-1190460answered 5 years ago"


Question: Aws rabbitmq connection getting closed after 3-4 seconds

telnet ip address of aws rabbitmq 5671Trying 10.xx.xx.xx...Connected to ip  address of aws rabbitmqEscape character is '^]'.Connection closed by foreign host.I am able to access aws rabbit mq through url but when i try to do telnet it is getting connected and after 3-4 second it get disconnected....i have opened the port of the security group....still dont know where i am doing wrong ....can anyone help me urgentlyFollowComment


Question: Doesn't Route53 Weighted Routing switch on every request?

"My problemIn order to test CLB to ALB migration, I set Route53 Weighted Routing at a ratio of 255 for CLB and 1 for ALB.After waiting for more than 5 minutes, no accesses flowed to ALB at all.my researchI have configured ELB-A and ELB-B with Route53 Weighted Routing at a ratio of 1:1.I configured ELB-A to return 200 and ELB-B to return 503.I tested the connection using Curl.(Let's say the DNS name is my-test.com)$ count=0; while true; do echo -n "${count} "; curl -sI my-test.com | grep HTTP | tee -a curl.log; sleep 1; count=`expr $count + 1`; doneThe result was that requests were not switched at 50% probability, but switched by group.$ uniq -c curl.log   1 HTTP/1.1 503 Service Temporarily Unavailable  94 HTTP/1.1 200 OK  46 HTTP/1.1 503 Service Temporarily Unavailable  43 HTTP/1.1 200 OKMy questionDoesn't it switch on a per-request basis?Is the client machine's DNS cache functioning?Am I correct in assuming that there is a 1/255 draw with one chance every 60 seconds for the DNS to be updated?FollowComment"

Answer: "0Doesn't it switch on a per-request basis?When a request makes it to Route 53, the weighting is applied every time.Is the client machine's DNS cache functioning?As mentioned, the request needs to make it to Route 53 in order for the weighting to be applied.  If the record is being cached (client cache or resolver cache), the weighting will appear skewed because the request is being "answered" by the cache.Am I correct in assuming that there is a 1/255 draw with one chance every 60 seconds for the DNS to be updated?With a TTL of 60 and weighting of 1 and 255 respectively for two records, close.  It will be a 1/256 chance to pull the record with weight of 1 and 255/256 for the record of weight 255 [1] when the cache expires.[1] https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/routing-policy.html#routing-policy-weightedCommentShareJustin Ganswered a year ago"


Question: Does AWS managed prometheus support ingestion by Prometheus from a different cloud provider?

I have a few clusters with a different cloud provider and I'm planning to use AWS-managed Prometheus/Grafana to work on the data. Is this even possible? I know the two supported ones are from either an EKS cluster or a self-managed Kubernetes one hosted on EC2.Thank you for the responses.FollowComment

Answer: "0Hello there,Amazon Managed Service for Prometheus includes a remote write-compatible API that can ingest metrics from OpenTelemetry, Prometheus libraries, and existing Prometheus servers. Metrics can be ingested from any clusters running on AWS and hybrid environments.You can continue to use your Prometheus server to collect metrics, and securely remote write them to Amazon Managed Service for Prometheus.Read more about the features here.CommentShareOlawale-AWSanswered 6 months ago"


Question: Error deleting VPC / Subnet / Network Interface

"Hello!After completing some more tutorials (mostly about Kubernetes) I tried to clean up everything I created. A CloudFormation Stack resisted deletion though - I tried multiple times, in the end opting to skip some resources to get rid of it. The stack is now gone. (I did delete two stacks and the EKS cluster simultaneously, that's the only thing I did different compared to previous successful clean-ups)Now there are some bits left that I'm unable to delete:One VPC - says I need to delete the network interface first.One (of three) subnets - says it contains one or more network interfaces.One network interface - 'Detach' says I don't have permission to access the specified resource (???). Using the option '[x] force...' says the same.Network interface ID: eni-0d0d851f513754b64Subnet-ID: subnet-060bdfe7dd3f8804fVPC ID: vpc-0bee6e5754575718cZone: eu-central-1bWhat can I do to get rid of this stuff?Thanks in advance,MichaelFollowComment"

Answer: "0Update: Not sure if someone saw this and fixed it, or some automatic cleanup happened, but the offending network interface was gone, and I could delete the remaining stuff.CommentShareMichaelMucanswered 4 years ago"


Question: Maintain uptime with Amazon Aurora during re-indexing?

"When you run REINDEX VERBOSE INDEX <index-name>;., is it possible to do this on one AZ at a time, or some other way of maintaining up time throughout the process? Would you need a multi-master cluster for this to be possible?This would suggest so:With a multi-master cluster, your application can redirect write operations from the failed DB instance to any other DB instance in the cluster.I wasn't sure by reading this maintenance doc.FollowComment"


Question: how do i change the billing email address to go to our accounts dept and not my email?

How can i add or change the billing settings so that invoices go to an Accounts dept email address instead of the root users email?FollowComment

Answer: "0Here is the link for changing the email address.  See the section under editing your contact information.https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/manage-account-payment.htmlTo edit your contact information(1) Sign in to the AWS Management Console and open the AWS Billing console at https://console.aws.amazon.com/billing.(2) On the navigation bar in the upper-right corner, choose your account name (or alias), and choose Account.(3) Under Contact Information, choose Edit.For the fields to change, enter your updated information and then choose Update.CommentShareMarc Fontenotanswered 9 days ago"


Question: Wireless Gateway disconnect log search

"I am utilizing the newish LoRaWAN event notifications to publish connect/disconnect events to $aws/iotwireless/events/connection_status/+/lorawan/wireless_gateways.  I have a gateway that disconnected which I am trying to diagnose using log insights on the AWSIotLogsV2 log group.My query is:fields @timestamp, @message| filter eventType = 'Disconnect'Which gives me:{"timestamp":"2022-07-09 21:48:36.523","logLevel":"INFO","traceId":"<<redacted>>","accountId":"<<redacted>>","status":"Success","eventType":"Disconnect","protocol":"MQTT","clientId":"<<redacted>>,"principalId":"<<redacted>>","sourceIp":"<<redacted>>","sourcePort":59232,"disconnectReason":"CONNECTION_LOST"}But the results don't seem to help me identify the specific gateway in question.How to I write a query that pinpoints the gateway by either Gateway ID, Gateway EUI, or some other unique identifier?FollowComment"

Answer: "1Hi. AWSIotLogsV2 is not the correct log group for wireless/LoRaWAN log events in CloudWatch. Instead, you need to query the /aws/iotwireless log group. In case you haven't already enabled this log group, please see the instructions here: https://docs.aws.amazon.com/iot/latest/developerguide/connect-iot-lorawan-logging-monitoring.htmlCommentShareEXPERTGreg_Banswered a year ago"


Question: Account status: SHUTDOWN

"Account #605792xxxxxSES sending was paused on 12/13/2013. Email notification was received and appealed several times with no success, until march 2014. Now I'm new in the company, and we need to appeal again, but there is no mean to do that. Old email account ses-enforcement@amazon.com is not working anymore. And tickets open thru console.aws.amazon.com/support are only supporting working accounts not paused ones, like mine.So, here I'm treying to get the attention of support AWS people to get directions about how to appeal again, and try to get working my account SES capabilities.First of all, all email addresses used in the past are removed. We are starting anew, with new project, new software (Sendy which is designated as a SES sending software), we have worked it out with all smap blacklists and white listed one IP which has been reported. All old software was removed, we will only use Sendy. We have gone thru best practices and deliveravility training for our team. And we plan to take advantage of AWS alarms to keep our SES sending into good health in the new Reputation dashboard.My name is Jorge Grippo and I'm new working in this company. Me myself went thru a process like this appealing my personal account #1491466xxxxx successfuly once a year or so ago. I perfectly understand the importance of keeping bounce rate under 5% and complaint rate below 0.1%. This only can be done following best practices, that we already are aware of.Thanks in advanceJorge GrippoFollowComment"

Answer: "0Hey,Yes I can verify that your account is in Shutdown stage.I request you to raise an Appeal with our new SES Review team to move back into healthy status i.e. re initiation of your Amazon SES account.To submit an appeal, send an email to ses-review@amazon.com from the email address associated with your AWS account. In your appeal, explain in as much detail as possible the following three things:An explanation of how and why you think the problem occurred.A list of changes you've already made to address the issue (not changes you plan to make).An explanation of why you believe these changes will prevent the problem from happening again.https://docs.aws.amazon.com/ses/latest/DeveloperGuide/e-faq.html#pr-q5Let me know if you require any assistance.CommentShareapoorv-awsanswered 4 years ago0Thanks a lot, I'll do that.CommentSharegiganetglobalanswered 4 years ago"


Question: runShellScript default shell

Is there a way to change the default shell for runShellScript in System Manager when you execute a run command? It defaults to sh and that does not behave the same as bash.FollowComment

Answer: "0Hello,While executing the run command AWS-RunShellScript, first initialize the shell with shebang and then write the commands.Here is an example of script content#!/bin/bashecho "hello world"Hope this helpsCommentShareSUPPORT ENGINEERVinay_Sanswered 2 months ago"


Question: Workmail account locked out

"I just got locked out from my workmail/webmail this morning. No matter how I reset the password or disable my email account, I just can not login my mailbox (keep loading .....)It is not internet connection issues and it seems that I was just simply locked out manually.I basically have not used my aws email since I set it up until last night when my company started to use this email address to receive about 20 resumes.Can anybody tell me what is going on here?My web page is: https://rfqrelativity.awsapps.com/mail.FollowComment"

Answer: "0Hi Robin,My webmail access has been back normal now. Thank you for your help. However, as you mentioned"Receiving a few emails should not block mailbox access for a prolonged period" but it may cause some issues sometimes, right? How to avoid? Update my workmail?TomCommentSharetomrfqanswered 4 years agoAWS-User-7207676 a year agoHi Tom, I'm encountering the same issue right now. Was there anything you did in particular that helped resolve this issue?Share0Hi,I'm sorry to hear you're experiencing problems with login on to WorkMail. It does not sounds like its an account locking problem as you get past the login page but a problem with opening the mailbox. Are you importing a lot data at the moment? This is known to cause access issues which should be over when the migration/import is finished.Kind regards,RobinCommentShareMODERATORrobinkawsanswered 4 years ago0Thanks for your answer.As you described, it seems it may be an opening mailbox issue since I can open my webmail page. However, I am not sure if receiving 20 emails with a resume each as attachment will cause an importing data issue (too much data?).And the most important is that I met this problem only when I try to access my mailbox with windows/PC but not with mobile device/iPad.TomCommentSharetomrfqanswered 4 years ago0Hi Tom,Receiving a few emails should not block mailbox access for a prolonged period. Are you still experiencing this problem? If so I can ask the service team to take a look at this.The reason the WebMail is the only one that experiences this behavior is that the mobile device mail clients and other desktop mail clients will sync mails. So there is no problem accessing mails locally but syncing might be delayed. The WebMail client needs a connection to the server to get mails.Kind regards,RobinCommentShareMODERATORrobinkawsanswered 4 years ago0Hi Tom,Mail deliveries should not block access to the mailbox at any time. If you experience this please pm me your users email address and I will ask the service team to take a look.Kind regards,RobinCommentShareMODERATORrobinkawsanswered 4 years ago"


Question: How to manage root user by multiple people

"Our group wants to store keys by using  AWS KMS for prevent one of us from using the key without permission.We wants to configure a system that it needs everyone's approval when anyone uses the key.I think we can acheive this by using AWS Systems Manager or any other external application.But I think the person who can access as root user still can use the key if he try.I know we can set up MFA and separate the MFA device from the person who knows password of root user, but i think it doesn't become a solution to the root of the problem.So, is there any service or idea that prevent root user from using the key freely?FollowComment"

Answer: "1As for best practice, besides best practices to protect root user, you could set up GuardDuty, which have a finding: IAM Root Credential Use.If you require a higher level of security, you can take a look at CloudHSM to check if it might be an adequate solution.CommentShareromerogtanswered 9 months ago"


Question: Information about GameLift local

"Hi There,We are using GameLift on a fairly large multiplayer project. So far things have been pretty smooth, clients and server are communicating happily enough and performance is good.However as the project develops its getting more and more time consuming to upload builds, debug server code, add fixes, reupload etc. So I've been looking into running the server on my local machine to test and debug the server quickly and easily.I have followed the amazon guide, but I become stuck at the point of connecting a client to the server. I can run the server locally after running GameLiftLocal.jar, which correctly detects my server starting.  I then changed the IP address it connects to use my local IP (tried both localhost and manually entering the IP).  But I cannot get the client to connect to the server successfully.Reading the documentation it doesnt explicitly state GameLiftLocal is meant for the purpose.  Should I be able to fully test all aspects of the game locally? Or am I misunderstanding its use and actually it is only meant to verify gamelift API calls?From our point of view we really need to test everything locally, the game logic is fairly complex and having to reupload builds every time we need to test a change to server logic is going to be too time consuming in the long run.Any info will be greatly appreciated.Thanks.FollowComment"

Answer: "0GameLift local is a local simulation of GameLift that enables you to test most parts of GameLift outside of FlexMatch and process termination (both are highly requested features that hopefully will get added some day).You should be able to easily test:Server initializationGame session creationPlayer connecting with that game session.For example I do the following all the time (all cribbed from here: https://docs.aws.amazon.com/gamelift/latest/developerguide/integration-testing-local.html)Start GameLift local (note am using port 9080, defaults to 8080 if -p is not provided)cd C:\Amazon\GameLift_04_16_2020\GameLiftLocal-1.0.5java -jar GameLiftLocal.jar -p 9080Start my server (in this case I'm using Lumberyard so I tell it the port to use; ignore the rest of the params as they aren't important. Note: If your server needs to call GameLift then it needs to override the client config to be the local endpoint http://localhost:9080MultiplayerSampleLauncher_Server.exe +sv_port 33435 +gamelift_start_server +map MultiplayerSampleNow in Lumberyard local I should see my server connect, call InitSDK and ProcessReady and my server is now ready to host a game session.Now am going to place a session on gamelift local; not fleet id is immaterial here can be anythingaws gamelift describe-game-sessions --endpoint-url --endpoint-url http://localhost:9080 --fleet-******aws gamelift create-game-session --endpoint-url http://localhost:9080 --maximum-player-session-count 2 --fleet-******Should see GameLift local calling OnGameSession hooks in my local server and server than calling ActiveGameSession when ready. Returns the game session idCreate a player session if required (using game session id from create game session call)aws gamelift create-player-session --game-session-id "arn:******How you test client/server connection is then up to you've wired getting game session/player session ids to your client.If you client needs to call GameLift to get this information (ie describe game session/player id) then you'll need to overide its client config to talk to GameLift etc http://localhost:9080Your client at this point should get the ip address of the session and its port and connect via its normal route. If your client is failing at this point, check all the normal client/server connection troubleshooting spots:Your server is listening on the port that it reported in ProcessParametersYour game session is reported to be on that portThe client is using the right portIf you are using TLS/OpenSSL you have your certs correctly installed for communicationYour server is accepting connections etc.CommentSharerePost-User-5332620answered 2 years ago"


Question: CFM stack is stuck after failure deleting Beanstalk app

"Hi,I have a CloudFormation stack which includes a Beanstalk app along with an environment. I tried to remove this whole Beanstalk app within the CFM stack by simply removing the resources within the template. However, because temination protection was enabled on the nested stack that was created for the Beanstalk app, the deletion failed. The following error appeared within the Beanstalk console.ERROR Service:AmazonCloudFormation, Message:Stack [awseb-e-xxxxxxxxxx-stack] cannot be deleted while TerminationProtection is enabledI fixed it by disabling termination protection on the nested stack, but the problem is that the main/root/parent stack is stuck in the UPDATE_COMPLETE_CLEANUP_IN_PROGRESS state. At no point has CFM/Beanstalk tried to delete the nested stack again since the initial failure. Essentially the stack update has been stuck ever since and has not recovered into a useful state, effectively taking our whole stack as hostage.So basically: Beanstalk failed to delete its nested stack due to a misconfiguration, causing the root stack to be indefinitely stuck. Apparently there is no retry logic happening, since CFM/Beanstalk only attempted the operation once (I fixed the underlying problem almost immediately). It seems like Beanstalk doesn't properly communicate to CFM that the operation failed, causing the stack update to be left hanging.How do I get out of this state? It's been so long now that I doubt CFM is able to handle it automatically. Is it safe to manually delete the nested Beanstalk stack? I just don't want to mess anything up if I do things outside of CFM's control.Thanks!FollowComment"

Answer: "0Accepted AnswerOkay, so this place is absolutely dead.I ended up taking a chance and deleted the Beanstalk environment within the AWS Console. I had to do that since CloudFormation never tried to delete the environment again after the initial attempt. I am disappointed that there is no retry mechanism when the solution is so obvious, but I guess that's just one of the many quirks of CloudFormation. Yes, it was my own mistake that caused me to end up in that situation, but I hoped and expected CFM to handle it a bit more gracefully instead of just getting stuck indefinitely. Disappointing!So delete the environment manually and CFM will "understand" this and proceed with the stack update afterwards. At least that's what happened for me.CommentSharethio123answered a year ago"


Question: Send RAW-EMail in iOS-App with SWIFT

"I want to create a RAW-Email inside my iOS-App. Looking to the documentation, I need to encode my message respectively the message body to MIME-Standard, but I'm not so familiar with this topic. In the documentation https://docs.aws.amazon.com/ses/latest/DeveloperGuide/send-email-raw.html#send-email-mime-encoding  there is also example-code for python and java, but how can I achieve this in SWIFT? How can I create in SWIFT this MIME-Data?func sendRawMail(){    let sender = "sender@mail.com"    let recipient = "recipient@mail.com"    let rawMessage = AWSSESRawMessage()   // rawMessage?.data = "I guess HERE I have to put the MIME-   Data?!"    let rawRequest = AWSSESSendRawEmailRequest()    rawRequest?.destinations = [recipient]    rawRequest?.source = sender    rawRequest?.rawMessage = rawMessage    AWSSES.default().sendRawEmail(rawRequest!) { (response, error) in        if let response = response{            print(response)        }        if let error = error{            print(error)        }    }}With my function, sending an empty email works.Thank youChrisFollowComment"

Answer: "0After a lot of reading, I finally get it working. You need to write a big string, based on MIME-Standards. This big string you have to encode to BASE64. Attachments needed also to transform from data to an BASE64-String.I will post my code, which can send Mails with an .png image. I will test other fileTypes as well, but it have to be the same principle.First I created a enum for my fileTypes.enum DataTypes{case pngcase jpgcase pdf}Now I created a function to get the string-value for the specific DataTypefunc getMIMEDataType(dataType:DataTypes) -> String{    var MIMEData = String()    switch dataType {    case .png:        MIMEData = "image/png"    case .jpg:        MIMEData = "image/jpg"    case .pdf:        MIMEData = "application/pdf"    }    return MIMEData}Finally the function to send the raw-mail. There are already variables in the message-string so you can use this function flexible.func sendRawMail(sender:String,reciepients:[String],subject:String,message:String,attachment:Data?,dataType:DataTypes?,attachmentName:String?,completion: @escaping (_ messageCode:String?,_ error:Error?) -> ()){    let attachmentString = attachment!.base64EncodedString(options: .lineLength64Characters)    let MIMEDataType = getMIMEDataType(dataType: dataType!)    let message:String = """    Subject: \(subject)    MIME-Version: 1.0    Content-Type: multipart/mixed;            boundary="XXXXboundary text"    This is a multipart message in MIME format.    --XXXXboundary text    Content-Type: text/plain    \(message)    --XXXXboundary text    Content-Type: \(MIMEDataType);    Content-Transfer-Encoding: base64    Content-Disposition: attachment; filename="\(attachmentName!).\(MIMEDataType.components(separatedBy: "/")[1])"    \(attachmentString)    --XXXXboundary text--    """    let data = message.data(using: .utf8)    let rawMessage = AWSSESRawMessage()    rawMessage?.data = data    let rawRequest = AWSSESSendRawEmailRequest()    rawRequest?.destinations = reciepients    rawRequest?.source = sender    rawRequest?.rawMessage = rawMessage    AWSSES.default().sendRawEmail(rawRequest!) { (response, error) in        if let response = response{            completion(response.messageId,nil)        }        if let error = error{            completion(nil,error)        }    }}usage:sendRawMail(sender: "sender.mail@mail.com", reciepients: ["recipient.mail@mail.com"], subject: "This is a test", message: "TestMessage", attachment: attachment.data, dataType: .png, attachmentName: "testpicture") { (messageID, error) in                    if let messageID = messageID{                        print(messageID)                    }                    if let error = error{                        print(error)                    }hope it will help somebody in future :)CommentShareChrisSTMSanswered 4 years ago0Hi ChrisSTMS,I'm glad you were able to get it working. I was just researching this myself, and not having much luck. I definitely appreciate you posting the solution for other users to find. Thank you!Brent @ AWSCommentShareAWS-User-4207280answered 4 years ago"


Question: How can I stablished connection to AWS tunnel successfully  (VPC)

"Flow of traffic: source 10.0.0.85 AWS VPC -- site to site to FortiGate -- destination 172.24.147.189Source cannot reach the destinationFollowCommentTushar_J EXPERT9 months agoAre you using route based VPN or Policy based VPN? if route based is it Static route or BGP VPN? From the description it appears AWS is source of the traffic, are you seeing traffic reach Fortigate FW (in the logs)SharerePost-User-1756358 9 months agoI'm using route based, it is static route. I'm not seeing traffic going to FortiGateShareTushar_J EXPERT9 months agoIs the Tunnel itself Up (Phase 1 & Phase2)? Also clarify if you are using VGW or a TGW.SharerePost-User-1756358 9 months agoYes both phase 1 and 2 tunnel are up. It is VGWSharerePost-User-1756358 9 months agoI have another test environment instance that uses both phase 1 and 2, and it is working perfectly fine. I don't know how to check the instance that is configured on my prod environment.Share"

Answer: "1Accepted AnswerBy default, your customer gateway device must bring up the tunnels for your Site-to-Site VPN connection by generating traffic and initiating the Internet Key Exchange (IKE) negotiation process. You can configure your VPN tunnels to specify that AWS must initiate or restart the IKE negotiation process instead. This is supported on IKEv2 only.Startup action: The action to take when establishing the VPN tunnel for a new or modified VPN connection. By default, your customer gateway device initiates the IKE negotiation process to bring the tunnel up. You can specify that AWS must initiate the IKE negotiation process instead.Suggest changing the Start-up Action, reference.Also make sure that the VPC route table has routes pointing towards VGW/TGW as well.CommentShareEXPERTTushar_Janswered 9 months agoEXPERTToni_Sreviewed 9 months ago"


Question: S3 version disappeared if updating file in the Storage Gateway file share in ONE minute

"Hello everyone.We use Storage Gateway's SMB File Share + S3 Versioning to building a backup system.But we found S3 version missing issue  like the following:Update File History:2022-03-22 17:35:57　A2022-03-22 17:36:51　B2022-03-22 17:37:18　CS3 Version:"LastModified": "2022-03-22 17:35:58"　A"LastModified": "2022-03-22 17:36:30"　A"LastModified": "2022-03-22 17:37:19"　C"LastModified": "2022-03-22 17:37:00"　Cthe Second Update "B" to the file  is missing.If I update file to "B" after one minute(eg: after 2022-03-22 17:37:00), B will be stored as a S3 version.I found the comment in the aws document:To maximize write performance, the gateway uses a write-back mechanism where data is first persisted to disk and then **asynchronously **uploaded to S3.・Do we have to update file at least more than one minute since the last update?・Is the "one minute" right?Would you please tell us the timing of send to S3 after storing file in the storage gateway disk.Thanks in advance.RyuuFollowComment"

Answer: "0Accepted AnswerS3 File Gateway tries to optimize the number of versions uploaded to the S3 bucket in order to reduce network bandwidth and storage costs. This will sometimes result in a fewer number of objects than the number of file updates (data or metadata) that occurred on the NFS/SMB file share.If your goal is to preserve every version of a file uploaded to a file share in the S3 bucket, then we suggest using the file upload notification feature. Please refer to the “Getting file upload notification” section in our documentation [[1][. You can also find additional details about this feature in our blog on the same topic [[2]]. This feature will enable you or your processing to wait until you receive “Storage Gateway Object Upload Event” for a file version before uploading 2nd version of that file.[[1]] https://docs.aws.amazon.com/filegateway/latest/files3/monitoring-file-gateway.html#get-notification[[2]] https://aws.amazon.com/blogs/storage/processing-file-upload-notifications-from-aws-storage-gateway-on-amazon-s3/CommentShareShashi-AWSanswered a year agolaughsmile a year agoThank you so much.RyuuShare"


Question: stopping a codepipeline build does not stop the codebuild batch

when using "stop an abandon" in codepipeline for non batch codebuild projects ... the codebuild run is stopped. however in batch mode the codebuild runs continue after using codepipeline's "stop and abandon"is this a known issue? is there a workaround?FollowComment

Answer: 0Accepted Answergoing to codebuild and clicking "stop batch" is the simplest solution. this will fail that build in the pipelineCommentShareben-veroanswered a year ago


Question: How to Use CodeBuild and CodeDeploy to Deploy Lambda to Different Environments

"Hi, I have a very simple C# Lambda that I will execute from a schedule. I want to use CodeBuild and CodeDeploy to be able to deploy new versions of this to either my staging or production environments.At the moment, my CodeBuild project build does the following:Builds the Lambda c# projectPushes the code to the Lambda $latest versionCreates a new Lambda versionUpdates (string replacement) my Lambda deployment appspec.yml file to have the correct 'currentversion'  and 'targetversion'  based on what the current versions are.uploads the appspec to an S3 bucket so that I can use it later in CodeDeploy.My CodeDeploy just takes the appspec.yml file and executes it which then changes the $latest version of the Lambda to the new version.Thats all good (I think) except that my CodeBuild doesn't know where I want to deploy the change to (staging or production) so should I be uploading 2 sets of code (one targeting a 'stage' Lambda alias and the other targeting a 'production' Lambda alias)? Or should there be a separate CodeBuild project for each environment? Or should I be having a completely separate Lambda (instead of using aliases) where one is for staging and the other for production? I feel like I am doing something horribly wrong here :)FollowComment"


Question: New Cluster and also Upgraded Aurora MySQL Aurora 3.03.1 have lots of errors for user rdsadmin

"After a Major Version Upgrade from Aurora 2 MySQL 5.7 to Aurora 3.03.1 MySQL 8.0 I have a lot of Aborted Clients, checking the logs I can see messages like the following:[Note] [MY-010914] [Server] Aborted connection 6165 to db: 'unconnected' user: 'rdsadmin' host: 'localhost' (Got an error reading communication packets). (sql_connect.cc:845)All messages are about the user "rdsadmin". Is there something else I have to do to finish the upgrade, is this an AWS bug ?EDIT: I have tested new cluster all-default parameters Aurora MySQL 3.X.X and all Clusters have the same behaviour. Errors for rdsadmin user.Any help appreciated.FollowCommentJohn 10 days agoWe have the same issue /w 3.02.2 MySQL 8, have a constant stream of them in the error log, over a dozen per minute.ShareHigher 10 days agoI created an empy RDS Aurora 3.03.1 MySQL 8.0 and the situation is the same, lots of erros for rdsadmin.Sharee0steven 9 days agoSame problem 8.0.mysql_aurora.3.03.0ShareDB 2 days agoWe have same issue 8.0.mysql_aurora.3.02.2Share"

Answer: "-2rdsadmin is a built-in administrative account that is managed by AWS. AWS uses this account for maintenance and management tasks, so you should not modify this account. If you're seeing a large number of aborted connections from rdsadmin, it could be a symptom of a deeper problem.So before upgrading please follow  https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/AuroraMySQL.Updates.MajorVersionUpgrade.htmlans check the parameters before and after upgrade sincesometimes major upgrades can affect some parameter values likehttps://dev.mysql.com/doc/refman/8.0/en/packet-too-large.htmlif you detect such differences you need to fix or you need to open case to AWS Support directly.CommentShareEXPERTsedat_salmananswered 10 days agoHigher 10 days agoHello @sdtslmn, thanks for you input, I think the issue is more general, I have created two new Aurora MySQL 3.03.1 also a 3.03.0 and in both new all-default clusters the situation happened, a lot of "db: 'unconnected' user: 'rdsadmin' host: 'localhost' (Got an error reading communication packets)" errors and the AbortedClient metric goes on.Share"


Question: App provision stuck in Provision stage and can't Build or Deploy

"Our app is stuck in Provision state and wont Build. We have never had this happen so not sure what to do.App IdNEW_APPAWS Regionus-east-1Amplify Hosting featureDeploymentsDescribe the bugApp provision stuck in pending and when creating a new app I see this error.Houston, there's a problempageSize must be greater than 0.Expected behaviorI expected the provisioning from Github and build to deploy to work correctly in Amplify.Reproduction stepsCreating new/deploying new via GithubFinal process of deploying you will this error "Houston, there's a problempageSize must be greater than 0."FollowCommentrePost-User-7000824 2 months agoSimilar issue. Everything was deploying good until I needed to add a small change/comment one liner and now stuck provision over 24 hr. Also attempt cancel and redeploy but still stuck Provision stage with no error logShare"


Question: Directory Error when running SageMaker backup-ebs lifecycle for Amazon Linux 2 transition

I'm following this guide for transitioning to Amazon Linux 2 provided by AWSI've set up the two needed lifecycle configurations and created a new S3 Bucket to store the backup. I've also ensured the IAM roles have the required S3 permissions and updated the notebook with the ebs-backup-bucket tag per the instructions.When I run the notebook with the new configuration I get the following error:"Notebook Instance Lifecycle Config [LIFECYCLE ARN] for Notebook Instance [NOTEBOOK ARN] took longer than 5 minutes. Please check your CloudWatch logs for more details if your Notebook Instance has Internet access.Looking at the logs I get the error:/bin/bash: /tmp/OnStart_2022-11-09-01-51ontlqcqt: /bin/bash^M: bad interpreter: No such file or directoryAny thoughts on how to resolve this issue? The code for the backup lifecycle configuration can be found hereFollowComment

Answer: "1Accepted AnswerThe extra ^M symbol (i.e. Ctrl-M) stopped the whole scrip from being interpreted properly.This issue is normally seen in scripts prepared in MSDOS/Windows based system but used in Linux system due to difference of line endings.In Unix based OS, lines end with \n but MSDOS/Win based system ends with \r\nIn Linux based system, you could show your prepared scripts by runningcat -e some-script.sh The results would be something similar to#!/bin/bash^M$... ...^M$$ is normal Unix end-of-line symbol. Windows uses an extra one ^M and this symbol is not recognized by Unix system. That's why, in SageMaker Notebook Lifecycle Configuration, which is running Linux, your script was interpreted as /bin/bash^MTo mitigate the issue, please convert the scripts to Unix based ending and update life cycle configuration. To achieve this, you could use Notepad++ in Windows. You can go to the Edit menu, select the EOL Conversion submenu, and from the options that come up select UNIX/OSX Format. The next time you save the file, its line endings will, all going well, be saved with UNIX-style line endings.Alternatively, you could put the script in a Linux environment, e.g. EC2 instance with Amazon Linux 2 and install dos2unix via sudo yum install dos2unix. After installation, you could convert your files viados2unix -n file.sh  output.sh After the conversion, please update LCC with the new scripts. You could verify that ^M has been removed viacat -e your_script.shThe output will print all special characters directly without hiding.CommentShareAWS-User-5210721answered 7 months agomsolomon 7 months agoI am a mortal among gods. Reformatting to Linux/Unix using Notepad++ worked perfectly. Did try it in VScode first but didn't have the same impact. Good to know about the conversion of shell scripts from MS to Unix. Thanks again for the helpShare"


Question: Java v2 SDK Exception when Waiting for SES Identity

"I'm using the Java SDK version 2.17.116.  In my code, I'm calling:            SES_CLIENT.verifyEmailIdentity(                VerifyEmailIdentityRequest                    .builder()                    .emailAddress(eMailAddress)                    .build()            );            // wait 5 seconds for the identity to be created            Thread.sleep(5000);            SES_CLIENT.waiter().waitUntilIdentityExists(                GetIdentityVerificationAttributesRequest                    .builder()                    .identities(eMailAddress)                    .build()            );But that is throwing the following exception on the call to waitUntilIdentityExists:java.lang.IllegalArgumentException: Unsupported value type: class java.util.Collections$UnmodifiableMapat software.amazon.awssdk.services.ses.waiters.internal.WaitersRuntime$Value.<init>(WaitersRuntime.java:138)at java.base/java.util.stream.ReferencePipeline$3$1.accept(Unknown Source)at java.base/java.util.stream.ReferencePipeline$3$1.accept(Unknown Source)at java.base/java.util.stream.ReferencePipeline$2$1.accept(Unknown Source)at java.base/java.util.Spliterators$ArraySpliterator.tryAdvance(Unknown Source)at java.base/java.util.stream.ReferencePipeline.forEachWithCancel(Unknown Source)at java.base/java.util.stream.AbstractPipeline.copyIntoWithCancel(Unknown Source)at java.base/java.util.stream.AbstractPipeline.copyInto(Unknown Source)at java.base/java.util.stream.AbstractPipeline.wrapAndCopyInto(Unknown Source)at java.base/java.util.stream.FindOps$FindOp.evaluateSequential(Unknown Source)at java.base/java.util.stream.AbstractPipeline.evaluate(Unknown Source)at java.base/java.util.stream.ReferencePipeline.findAny(Unknown Source)at software.amazon.awssdk.services.ses.waiters.internal.WaitersRuntime$Value.field(WaitersRuntime.java:255)at software.amazon.awssdk.services.ses.waiters.DefaultSesWaiter.lambda$identityExistsWaiterAcceptors$3(DefaultSesWaiter.java:96)at software.amazon.awssdk.core.waiters.WaiterAcceptor$1.matches(WaiterAcceptor.java:81)at software.amazon.awssdk.core.internal.waiters.WaiterExecutorHelper.lambda$responseMatches$4(WaiterExecutorHelper.java:105)at java.base/java.util.stream.ReferencePipeline$2$1.accept(Unknown Source)at java.base/java.util.ArrayList$ArrayListSpliterator.tryAdvance(Unknown Source)at java.base/java.util.stream.ReferencePipeline.forEachWithCancel(Unknown Source)at java.base/java.util.stream.AbstractPipeline.copyIntoWithCancel(Unknown Source)at java.base/java.util.stream.AbstractPipeline.copyInto(Unknown Source)at java.base/java.util.stream.AbstractPipeline.wrapAndCopyInto(Unknown Source)at java.base/java.util.stream.FindOps$FindOp.evaluateSequential(Unknown Source)at java.base/java.util.stream.AbstractPipeline.evaluate(Unknown Source)at java.base/java.util.stream.ReferencePipeline.findFirst(Unknown Source)at software.amazon.awssdk.core.internal.waiters.WaiterExecutorHelper.responseMatches(WaiterExecutorHelper.java:106)at java.base/java.util.Optional.map(Unknown Source)at software.amazon.awssdk.utils.Either.map(Either.java:51)at software.amazon.awssdk.core.internal.waiters.WaiterExecutorHelper.firstWaiterAcceptorIfMatched(WaiterExecutorHelper.java:56)at software.amazon.awssdk.core.internal.waiters.WaiterExecutor.evaluate(WaiterExecutor.java:67)at software.amazon.awssdk.core.internal.waiters.WaiterExecutor.doExecute(WaiterExecutor.java:60)at software.amazon.awssdk.core.internal.waiters.WaiterExecutor.execute(WaiterExecutor.java:48)at software.amazon.awssdk.core.internal.waiters.DefaultWaiter.run(DefaultWaiter.java:49)at software.amazon.awssdk.services.ses.waiters.DefaultSesWaiter.waitUntilIdentityExists(DefaultSesWaiter.java:79)at com.company.ccr.ses.CloudFormationCustomResourceSesIdentity.createSesIdentity(CloudFormationCustomResourceSesIdentity.java:149)at com.company.ccr.ses.CloudFormationCustomResourceSesIdentity.doCreate(CloudFormationCustomResourceSesIdentity.java:46)at com.company.ccr.CloudFormationCustomResource.handleRequest(CloudFormationCustomResource.java:68)at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)at java.base/java.lang.reflect.Method.invoke(Unknown Source)at lambdainternal.EventHandlerLoader$PojoMethodRequestHandler.handleRequest(EventHandlerLoader.java:282)at lambdainternal.EventHandlerLoader$PojoHandlerAsStreamHandler.handleRequest(EventHandlerLoader.java:199)at lambdainternal.EventHandlerLoader$2.call(EventHandlerLoader.java:899)at lambdainternal.AWSLambda.startRuntime(AWSLambda.java:262)at lambdainternal.AWSLambda.startRuntime(AWSLambda.java:199)at lambdainternal.AWSLambda.main(AWSLambda.java:193)This seems like a bug.  The eMailAddress variable is a valid String, and the call to verifyEmailIdentity succeeds, and I see the requested identity in the SES console, so I'm sure it's not a null String or anything.Can anyone confirm that I'm calling waitUntilIdentityExists correctly?  What am I missing here?  Or is this really a bug?FollowComment"


Question: EC2 RHEL yum SSL error

"I get an SSL error when trying to run yum update:[OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to rhui.ap-southeast-2.aws.ce.redhat.com:443 ]Error: Failed to download metadata for repo 'rhel-8-appstream-rhui-rpms': Cannot prepare internal mirrorlist: Curl error (35): SSL connect error for https://rhui.ap-southeast-2.aws.ce.redhat.com/pulp/mirror/content/dist/rhel8/rhui/8/x86_64/appstream/os [OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to rhui.ap-southeast-2.aws.ce.redhat.com:443 ]There is no active subscription:subscription-manager status+-------------------------------------------+System Status Details+-------------------------------------------+Overall Status: UnknownSystem Purpose Status: UnknownI've been troubleshooting the proxy server at our company and they state the connection should not be blocked.Are there any additional configuration needed to subscribe or allow access to the repo rhui.REGION.aws.ce.redhat.com?This page references a "basic subscription" but I can't find any more information https://aws.amazon.com/partners/redhat/faqs/Red Hat Enterprise Linux on Amazon EC2 images include a basic subscription for updates and maintenance fixes that is reflected in the price charged by Amazon Web Services. There is no need for a separate agreement with Red Hat or additional charges.EDIT/UPDATE: It seems like this is related to RHEL 8, I don't have this issue with a RHEL 7 AMIFollowComment"

Answer: "0Hello, thank you for your post. I have launched a Red Hat 8 instance in ap-southeast-2 and confirmed that I am able to run yum update and connect to the RHUI URL with no issues. I suspect that the issue is unique to your EC2 instance. No additional configurations are required to allow the instance to connect to the RHUI, however, there may be some unique aspect of your instance that is blocking the connection. I encourage you to open a support case so that our support engineers can inspect the issue with greater detail and assist you with resolving the issue.CommentShareSUPPORT ENGINEERAWS_SamManswered a year ago"


Question: "Call Silent issue for customer side, not at agent side."

"Hello Teami have been using amazon pinpoint and connect to place the outbound campaign Calls in US and Canada. our instance is located in US-west-2 Oregon.  When Campaign Call is placed , customer answers the Call and says Hello, after saying hello there is silence for 4-5 secs and then customer hears the welcome prompt, then Call is connected in 3-4 secs with agent and customer. Please help to fix why this silence issue is there when customer says hello and prior to agent is connected.Call Placed by aws campaign-->customer answers the Call and says Hello--> 4-5 secs of silence-->customer hears the prompt->customer connected in 3 secs with agent.How we can remove this silence ?any idea please i am okay with blind answers as well.FollowComment"

Answer: "0In order to reduce the time taken for the dialer to deliver the call to an available agent, the following best practices are recommended:Ensure there are sufficient agents logged in to the queue.Turn off Answering Machine Detection (AMD) in the campaign.(If possible) Remove any “Play prompt” blocks from the contact flow prior to transferring the call to the queue.Remove any “Play prompt” blocks from in the agent and customer whisper flow.Enable Auto Answer setting on agent CCP.(If possible) Minimize the geographical distance between the locations of the Amazon Connect instance of the agent and your customer. See additional documentation on agent and workstation requirements.(If possible) While creating the segment file for Pinpoint, add the data that is required for routing logic and agent screen pop and avoid dips to Lambda functions to extract additional information prior to connecting to an agent.To achieve lowest call connection latencies, use outbound campaigns to make hundreds of thousands of continuous calls (e.g., to mimic your production environment). Latencies will be relatively higher when making a handful of campaign calls (e.g., when testing).To know more about the Best practices for running outbound campaigns, Kindly refer Amazon Connect – Best practices for running outbound campaignsCommentShareMakendrananswered 2 months agoEXPERTAWS-samfredreviewed 2 months ago"


Question: Is it possible to setup a NLB forwarding to ALB having NLB endpoint secured?

"HiI have an NLB( internet-facing, public subnet) forwarding traffic to ALB(internal; private subnet) with ECS backend services. That works great , but essentially what I want is to have https://api.example.com, but haven't found a way to make that work. Is this even possible?What I am trying to do is pretty much is outlined in this question https://repost.aws/questions/QUoy9PIqmzTOOFo27QHdAoGA/traffic-doesnt-flow-whe-using-alb-as-a-target-of-nlb.FollowComment"

Answer: "1I want to clarify your question first. I think it is "I want to connect to the NLB using api.example.com as the DNS name rather than the default NLB name; and I want the ALB to do the TLS offload using api.example.com as the certificate name."If that's the case, what you need to do is create a DNS record (in Route 53 or your DNS provider) for api.example.com and point that to the IP addresses of the NLB. Configure the NLB for TCP/443 (not HTTPS) because then it will forward the TCP session to the ALB.Now, the clients can resolve api.example.com to the NLB IP address which connects to the ALB which then presents the correct certificate.CommentShareEXPERTBrettski-AWSanswered 9 months agoBrettski-AWS EXPERT8 months agoThis is what I love about AWS - there's always something new to learn even when you work here. Good info in the documentation that you've shown. You definitely want a TCP listener on NLB because you want it to pass the session directly through to the ALB. The ALB must be configured to listen for HTTPS. I'm not sure where that error is coming from but some extra debug output might be handy here.SharerePost-User-2569874 8 months agoWell, researched that error and it got me even thinking more https://aws.amazon.com/premiumsupport/knowledge-center/elb-fix-ssl-tls-negotiation-error/A client TLS negotiation error means that a TLS connection initiated by the client was unable to establish a session with the load balancer. TLS negotiation errors occur when clients try to connect to a load balancer using a protocol or cipher that the load balancer's security policy doesn't support.So it feels like I am back where I started. Have to try again and check Client TLS Negotiation errors on the Monitoring tab.Still not quite sure whether or not this is possible.SharerePost-User-2569874 8 months agoYou are interpreting it correctly, yes. I already have a record in Route53 but I tried to setup not TCP/443 but TLS/443 on NLB, however this is when things don't work - TLS listeners on Network Load Balancers cannot forward to ALB-type target groups.  If you have a use case to terminate TLS, we recommend using HTTPS listeners on your ALB as mentioned here - https://aws.amazon.com/blogs/networking-and-content-delivery/application-load-balancer-type-target-group-for-network-load-balancer/Then in the docs - https://docs.aws.amazon.com/elasticloadbalancing/latest/network/application-load-balancer-target.html, I've found under Step 3, 7a:For Listeners, the default is a listener that accepts TCP traffic on port 80. Only TCP listeners can forward traffic to an Application Load Balancer target group. Keep the listener protocol set to TCP, but you can modify the port as required. This setup allows you to use HTTPS listeners on the Application Load Balancer to terminate the TLS protocol.Tried setting up forwarding from http rule to https rule but that doesn't work.Now if I tried what you suggested TCP/443 on NLB I get SSL error - error:1408F10B:SSL routines:ssl3_get_record:wrong version number.ShareBrettski-AWS EXPERT8 months agoWhat the NLB should do when you select TCP/443 is send traffic directly to the ALB without modifying the payload. What happens if you try and connect to the ALB directly? You might have (temporarily) set up an EC2 instance in the VPC to do that; but it's worth trying.Share0Hi @rePost-User-2569874,Elastic Load Balancing now supports forwarding traffic directly from Network Load Balancer (NLB) to Application Load Balancer (ALB). With this feature, you can now use  AWS PrivateLink and expose static IP addresses for applications built on ALBCreate a Network Load Balancer, and configure the Application Load Balancer as its targethttps://docs.aws.amazon.com/elasticloadbalancing/latest/network/application-load-balancer-target.htmlEnable VPC endpoint services (AWS PrivateLink)https://docs.aws.amazon.com/elasticloadbalancing/latest/network/application-load-balancer-target.htmlIf the Answer is helpful, please click  Accept Answer & UPVOTE, this can be beneficial to other community members.CommentSharelearn2skillsanswered 9 months agorePost-User-2569874 9 months agoHi @learn2skills,Could you please elaborate on why enabling VPC endpoint services is needed ?As per the docs - To use the Network Load Balancer that you set up in the previous step as an endpoint for private connectivity, you can enable AWS PrivateLink. This establishes a private connection to your load balancer as an endpoint service.I m confused on to why I needed a private connectivity to my NLB , as per definition - AWS PrivateLink provides private connectivity between VPCs, AWS services, and your on-premises networks, without exposing your traffic to the public internet.I am exposing NLB to the public internet and I am trying to understand whether or not I can use https listener rules on ALB.Sharekm a month agoYou need 2 listeners on the NLB and 2 ALB Target groups:TCP 80 Listener on the NLB forwards traffic to TCP 80 ALB Target group.TCP 443 Listener on the NLB forwards traffic to TCP 443 ALB Target group.Then you can have HTTP to HTTPS redirect on the ALB level.Works for me.Share"


Question: Connection ID Not getting deleted in dynamo Db table when using websocket API.

"I have a created a websocket api and the routes to connect and disconnect is set to lambda functions which put connection id to a dynamo db table and delete it respectively. But when the client connection to the websocket is terminated unexpectedly ( device shutdown, wifi/data turn off etc) the client id is not deleted automatically. What can i do to avoid this and make sure if a client is disconnected in any way i have the connection id deleted? Please provide code layout if applicable.FollowComment"


Question: ImportError: cannot import name 'dataclass_transform' from 'typing_extensions' (/home/ec2-user/anaconda3/envs/tensorflow2_p38/lib/python3.8/site-packages/typing_extensions.py)

"Hi AWS, I am running the code for dalle mini to convert a text into an image. Here is the code for the same:import jaximport jax.numpy as jnpfrom huggingface_hub import hf_hub_url, cached_download, hf_hub_downloadimport shutilfrom dalle_mini import DalleBart, DalleBartProcessorfrom vqgan_jax.modeling_flax_vqgan import VQModelfrom typing_extensions import dataclass_transformfrom transformers import CLIPProcessor, FlaxCLIPModelfrom IPython.display import display# TF_CPP_MIN_LOG_LEVEL=0print(jax.local_device_count())print(jax.devices())dalle_mini_files_list = ['config.json', 'tokenizer.json', 'tokenizer_config.json', 'merges.txt', 'vocab.json', 'special_tokens_map.json', 'enwiki-words-frequency.txt', 'flax_model.msgpack']vqgan_files_list = ['config.json',  'flax_model.msgpack']for each_file in dalle_mini_files_list:   downloaded_file = hf_hub_download("dalle-mini/dalle-mini", filename=each_file)   target_path = '/home/ec2-user/SageMaker/huggingface-sagemaker/content/dalle-mini/' + each_file   shutil.copy(downloaded_file, target_path)for each_file in vqgan_files_list:   downloaded_file = hf_hub_download("dalle-mini/vqgan_imagenet_f16_16384", filename=each_file)   target_path = '/home/ec2-user/SageMaker/huggingface-sagemaker/content/dalle-mini/vqgan/' + each_file   shutil.copy(downloaded_file, target_path)DALLE_MODEL_LOCATION = '/home/ec2-user/huggingface-sagemaker/dalle_mini/content/dalle-mini'DALLE_COMMIT_ID = Nonemodel, params = DalleBart.from_pretrained(          DALLE_MODEL_LOCATION, revision=DALLE_COMMIT_ID, dtype=jnp.float32, _do_init=False,)VQGAN_LOCAL_REPO = '/home/ec2-user/SageMaker/dalle_mini/content/dalle-mini/vqgan'VQGAN_LCOAL_COMMIT_ID = Nonevqgan, vqgan_params = VQModel.from_pretrained(     VQGAN_LOCAL_REPO, revision=VQGAN_LCOAL_COMMIT_ID, _do_init=False)print(model.config)print(vqgan.config)DALLE_MODEL_LOCATION = '/home/ec2-user/SageMaker/dalle_mini/content/dalle-mini'DALLE_COMMIT_ID = Noneprocessor = DalleBartProcessor.from_pretrained(     DALLE_MODEL_LOCATION,      revision=DALLE_COMMIT_ID)print(processor)# # Works for all available devices to replicate the modulefrom flax.jax_utils import replicateimport randomparams = replicate(params)vqgan_params = replicate(vqgan_params)@partial(jax.pmap, axis_name="batch", static_broadcasted_argnums=(3, 4, 5, 6))def p_generate(    tokenized_prompt, key, params, top_k, top_p, temperature, condition_scale):  return model.generate(      **tokenized_prompt,      prng_key=key,      params=params,      top_k=top_k,      top_p=top_p,      temperature=temperature,      condition_scale=condition_scale,  )#decode the images@partial(jax.pmap, axis_name="batch")def p_decode(indices, params):    return vqgan.decode_code(indices, params=params)# entering the promptsprompts = [    "sunset over a lake in the mountains",    "the Eiffel tower landing on the moon",]tokenized_prompts = processor(prompts)tokenized_prompt = replicate(tokenized_prompts)# create a random keyseed = random.randint(0, 2**32 - 1)key = jax.random.PRNGKey(seed)n_predictions = 4# We can customize generation parameters (see https://huggingface.co/blog/how-to-generate)gen_top_k = Nonegen_top_p = Nonetemperature = Nonecond_scale = 10.0print(f"Prompts: {prompts}\n")images = []for i in trange(max(n_predictions // jax.device_count(), 1)):    # get a new key    key, subkey = jax.random.split(key)    # generate images    encoded_images = p_generate(        tokenized_prompt,        shard_prng_key(subkey),        params,        gen_top_k,        gen_top_p,        temperature,        cond_scale,    )    # remove BOS    encoded_images = encoded_images.sequences[..., 1:]    # decode images    decoded_images = p_decode(encoded_images, vqgan_params)    decoded_images = decoded_images.clip(0.0, 1.0).reshape((-1, 256, 256, 3))    for decoded_img in decoded_images:        img = Image.fromarray(np.asarray(decoded_img * 255, dtype=np.uint8))        images.append(img)        display(img)and the error I am getting is:ImportError                               Traceback (most recent call last)~/SageMaker/huggingface-sagemaker/code/inference.py in <module>5 #import DalleBart6 #from dalle_mini import DalleBart, DalleBartProcessor----> 7 from vqgan_jax.modeling_flax_vqgan import VQModel8 from typing_extensions import dataclass_transform9 #from transformers import CLIPProcessor, FlaxCLIPModel~/anaconda3/envs/tensorflow2_p38/lib/python3.8/site-packages/vqgan_jax/modeling_flax_vqgan.py in <module>8 import jax.numpy as jnp9 import numpy as np---> 10 import flax.linen as nn11 from flax.core.frozen_dict import FrozenDict12~/anaconda3/envs/tensorflow2_p38/lib/python3.8/site-packages/flax/init.py in <module>16 """Flax API."""17---> 18 from . import core as core19 from . import linen as linen20 from . import optim as optim~/anaconda3/envs/tensorflow2_p38/lib/python3.8/site-packages/flax/core/init.py in <module>26 )27---> 28 from .scope import (29   Scope as Scope,30   Array as Array,~/anaconda3/envs/tensorflow2_p38/lib/python3.8/site-packages/flax/core/scope.py in <module>26 from flax import config27 from flax import errors---> 28 from flax import struct29 from flax import traceback_util30 from .frozen_dict import freeze~/anaconda3/envs/tensorflow2_p38/lib/python3.8/site-packages/flax/struct.py in <module>2324 import jax---> 25 from typing_extensions import dataclass_transform  # pytype: disable=not-supported-yet2627ImportError: cannot import name 'dataclass_transform' from 'typing_extensions' (/home/ec2-user/anaconda3/envs/tensorflow2_p38/lib/python3.8/site-packages/typing_extensions.py)Please help me ASAP as I need to fix it urgently.FollowComment"

Answer: "0I am getting a different error now:/home/ec2-user/anaconda3/envs/JupyterSystemEnv/lib/python3.7/site-packages/flax/core/lift.py:112: FutureWarning: jax.tree_flatten is deprecated, and will be removed in a future release. Use jax.tree_util.tree_flatten instead.scopes, treedef = jax.tree_flatten(scope_tree)/home/ec2-user/anaconda3/envs/JupyterSystemEnv/lib/python3.7/site-packages/flax/core/lift.py:729: FutureWarning: jax.tree_leaves is deprecated, and will be removed in a future release. Use jax.tree_util.tree_leaves instead.lengths = set(jax.tree_leaves(lengths))/home/ec2-user/anaconda3/envs/JupyterSystemEnv/lib/python3.7/site-packages/flax/core/axes_scan.py:134: FutureWarning: jax.tree_flatten is deprecated, and will be removed in a future release. Use jax.tree_util.tree_flatten instead.in_avals, in_tree = jax.tree_flatten(input_avals)/home/ec2-user/anaconda3/envs/JupyterSystemEnv/lib/python3.7/site-packages/flax/linen/transforms.py:249: FutureWarning: jax.tree_leaves is deprecated, and will be removed in a future release. Use jax.tree_util.tree_leaves instead.jax.tree_leaves(tree)))/home/ec2-user/anaconda3/envs/JupyterSystemEnv/lib/python3.7/site-packages/flax/core/axes_scan.py:146: FutureWarning: jax.tree_unflatten is deprecated, and will be removed in a future release. Use jax.tree_util.tree_unflatten instead.broadcast_in, constants_out = jax.tree_unflatten(out_tree(), out_flat)KilledI have imported the library in the inference.py script:from jax.tree_util import (tree_flatten, tree_leaves, tree_unflatten)But still I am experiencing this warning and the running of code is interrupts and the session gets killed.Any reason. Please let me know.ThanksCommentSharerePost-User-3199525answered 10 months ago"


Question: Issue with authentication from Java Spring to AWS SES service

"I have a Spring Boot app where at some occasions I am sending automated emails.My App is hosted on AWS ECS(Fargate) and is using AWS SES for sending emails.I added a role to my Fargate task with all needed permissions for AWS SES.Most of the times, app is able to authenticate and send emails correctly however at some occasions authentication fails and because of that email/s are not send.The error I am receiving is:Unable to load AWS credentials from any provider in the chain: EnvironmentVariableCredentialsProvider: Unable to load AWS credentials from environment variables (AWS_ACCESS_KEY_ID (or AWS_ACCESS_KEY) and AWS_SECRET_KEY (or AWS_SECRET_ACCESS_KEY)), SystemPropertiesCredentialsProvider: Unable to load AWS credentials from Java system properties (aws.accessKeyId and aws.secretKey), WebIdentityTokenCredentialsProvider: To use assume role profiles the aws-java-sdk-sts module must be on the class path., com.amazonaws.auth.profile.ProfileCredentialsProvider@6fa01606: profile file cannot be null, com.amazonaws.auth.EC2ContainerCredentialsProviderWrapper@4ca2c1d: Failed to connect to service endpointNow, if this would happen each time I would conclude that I configured something incorrectly. However, since authentication fails only sometimes I am not sure what the problem is.I am using the following  aws-sdk version: 1.12.197When I am building a client, I am doing it on the following way:AmazonSimpleEmailService client =                 AmazonSimpleEmailServiceClientBuilder.standard()                     .withRegion(Regions.US_EAST_1).build();Thank you for help.FollowComment"


Question: Delete whole partition or Delete using "begins_with" on the Partition Key?

"Hello, I would like to know if it is possible to delete a whole partition or perform a delete operation with a "begins_with" or the Partition Key?The problem here is when you use the Hash Key for grouping and the Sort Key for hierarchical data, when you need to delete all the hierarchies in the "grouping" you can't, so you end up having to do several queries and batch deletes on each particular item.I would like a way to do the following pseudo query:DELETE WHERE PARTITION_KEY='Project-123'orDELETE WHERE PARTITION_KEY='Project-123' AND SORT_KEY.begins_with('Activity')Edited by: mojimi on May 16, 2019 11:52 AMFollowComment"

Answer: "0Unfortunately no. You have to get a list of the items and then iterate through them or do them in multiple bulk calls.CommentShareKirkAtAWSanswered 4 years ago0I was sad to hear that the API has limited support to Rick Houligan's modeling instructionsCommentSharemojimianswered 4 years ago0Hi,Unfortunately, there is no DynamoDB API yet to delete the items in bulk.WORKAROUND:As a workaround, you can make use of Hive external table and then perform SQL like queries on DynamoDB table to acheive your use-case.Sample Hive query to create external table on DynamoDB:CREATE EXTERNAL TABLE MyExternalTable(Name STRING, Epoch BIGINT)STORED BY 'org.apache.hadoop.hive.dynamodb.DynamoDBStorageHandler'TBLPROPERTIES ("dynamodb.table.name" = "DDBTable","dynamodb.column.mapping" = "Name:Name,Epoch:Epoch");Hope it helps. Please let us know if you face any further issues. We would be happy to help you.CommentShareAWS-User-8262921answered 4 years ago"


Question: "2 RDS writable databases, in different regions, synchronized between each other."

"Hi, as it is written in a title, i need to have 2 databases, which ones will be located in different regions, they should be synchronized with each other. Both of them should be writable, and they should sync data back to each other.Is there any AWS provided solution?This solution looks good --> https://aws.amazon.com/blogs/database/deploy-multi-region-amazon-aurora-applications-with-a-failover-blueprint/ , but is it possible to make both databases masters (make it multi-master)?FollowComment"

Answer: "0Accepted AnswerIt is possible with DynamoDB - https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/GlobalTables.htmlAurora Global Databases are not active-active. They have primary in one region and up to 5 secondary read-only regions - https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-global-database.htmlCommentShareEXPERTIndranil Banerjee AWSanswered 7 months agoJoann Babak 7 months agoThank you for your answer, It actually does what we need, but this DynamoDB is NoSQL database, which we cant really use for our setup.ShareIndranil Banerjee AWS EXPERT7 months agoYou may want to take a look at this blog - https://aws.amazon.com/blogs/database/implement-active-active-replication-between-amazon-aurora-clusters-using-oracle-goldengate/Or implement your own custom solution using a combination of DynamoDb, DynamoDB Streams and RDS/Aurora to achieve active-active.Share"


Question: Cloudfront IPv6 Geo Restriction

"Hi all, does Cloudfront supports IPv6 geo restriction?FollowComment"

Answer: "0Accepted AnswerYes, The CloudFront supports IPV6 Geo restriction.CloudFront use MaxMind database for doing IP to location mapping. This IP list also has the license of IPv6, and thus we are able to do Geo based restriction on IPV6 addresses as well.CommentShareVivekanswered 3 years ago"


Question: Unable to connect ec2 instance using ssh / website

"I can not access my ec2 with any connection ssh,http,httpsI am getting connection timeout / refused.it always timeout. I added secuiry group inbound rulesI added Route tables  into vpc but no luck to access ec2 instance using sshFollowComment"

Answer: "0Hi, Few additional things to check:Does your ec2 instance have a public IP address?Do you have an internet gateway attached to your VPC and does the subnet where the instance is located have a route to the internet gateway?Do you have any non-defauly Network access control lists that might be blocking traffic?CommentShareVinoopalanswered 7 months agomart31 7 months ago1.yes.2. yes. Default vpc and have subject with route table and attached igw3. Not default custom SG with ssh,https,http, and custom tcp port configured, I had tried default SG it also wont work.Share0yes.yes. Default vpc and have subject with route table and attached igwNot default custom SG with ssh,https,http, and custom tcp port configured, I had tried default SG it also wont work.CommentSharemart31answered 7 months ago0Is the subnet where the instance is located associated to the route table where you have the IGW attached?Do you have a specific IP address in the security group for the source(i.e. x.x.x.x/32) for the inbound rule or do you have 0.0.0.0/0?CommentShareVinoopalanswered 7 months ago"


Question: Opening a project file(.sct) without opening the UI

I would like to know if there a way for me to open a .sct project file without having to navigate to the User Interface > File > Open Project(CTRL+ O). I need to directly open the project with the SCT UI using the CLI.FollowComment


Question: [CodeBuild] Error to build with the CodeBuild

"Hello, my code build not working. I always received this message, but I have a limit in my account.BATCH_START_BUILD_ERROR: Failed calling StartBuild for a batch.. Failed while calling StartBuild for buildType DOWNLOAD_SOURCE with exception message: Cannot have more than 0 builds in queue for the account (Service: AWSCodeBuild; Status Code: 400; Error Code: AccountLimitExceededException; Request ID: <>; Proxy: null).Can anyone help me? I see some answers, but I didn't understand how to solve the problem.FollowComment"

Answer: "1You should log an AWS Support request with these details and ask for the limit to be increased.This can sometimes happen with a new account, or one that has not had much historical activity.CommentSharerowanuanswered a year ago"


Question: JSON Contact schema

I am calling a lambda function which i tested with a sample JSON structure which worked. But when running in situ in a contact flow the function is not getting the Queue name and i think the format of the schema may be different but i cannout find anywhere that i can locate the schema of the in progress call details that my lambda function can query.Do anyone know where i can find this info please?FollowComment

Answer: "0i found alot of examples for lambda use the JSON schemaBut when getting the Queue Name it has changedYou should expect this whilst in the call flow"Queue": {"ARN": "arn:aws:connect:eu-west-2:739126103191:instance/instane_ref/queue/739c77ce-5215-44a7-8eb9-d43753d82300","Name": "Revenue",instead of"Queue": "QueueName",CommentSharem66rusanswered 3 years ago"


Question: DMS Migration MongoDB source and RDS Postgres as destination

"I want to start existing and ongoing replication from source MongoDB to destination RDS Postgres.All the security network is done and successful.RDS VPC and DMS VPC are connected using VPC peering, target endpoint test connection status is successfulDMS VPC IP is added in another AWS account MongoDB server, source endpoint test connection status is successfulIn the Endpoint schemas section both database schemas are visible.Created a DMS migration task to start the migration of one document of MongoDB to Postgres Database.Premigration assessments were successful.Empty scheme with the MongoDB schema name got created in PostgresDB.The table awsdms_apply_execution is also empty in Postgres DB.But the task shows running with error and error, and cloud watch logs also show no error.FollowComment"

Answer: "1Accepted Answerhello there.I hear the DMS task is running with errors. This could be due to multiple reasons. Please kindly ensure check the below:DMS task table statistics. This will help see which tables failed Full Load phase as this can cause "running with errors"Turn on logging level to detailed debug for SOURCE_UNLOAD and TARGET_LOAD to see more information on table failures.Ensure that the DMS replication instance has enough resource for the DMS task (.i.e. CPU, Storage, Memory)Filter through the DMS task log and try find log entry with "]E:" or "]W:" this will display DMS task errors and warnings.If the above does not work, please try testing with a Full load only DMS task. If the issue persists further please open a support case with AWS Premium Support to get an in-depth look at the DMS task failurereferences:to migrate using  MongoDB as a source for AWS DMS for example there are permissions needed which can be found in the below document and other requirements too can be found on the below document[1]https://docs.aws.amazon.com/dms/latest/userguide/CHAP_Source.MongoDB.htmlto migrate using postgres as a target there are also requirements that needs to be considered can be found on document below[1]https://docs.aws.amazon.com/dms/latest/userguide/CHAP_Target.PostgreSQL.htmlCommentSharerePost-User-9017359answered a year ago"


Question: Amazon workspaces - No network : Network connection lost. Check your network connection or contact administrator for help.

"Hello!I'm facing an error while connecting to a Amazon workspace via windows client.This error shows up as soon as I start up the client, so I'm not even able to register using my registration code or see login page.The error is:'No network : Network connection lost. Check your network connection or contact administrator for help.'This workspace is not new, it is one which I have been using for more than 2 years with same registration code.The issue is a lot weird, as I'm not sure what is exactly causing it.I tested using following ways:Primary laptop : laptop1Secondary laptop : laptop2Primary network : net1Secondary network : net2I get the above error when I use the combination of laptop1 and net1. But when I use the combination of laptop1 and net2, I'm able to access the workspace. This made me think maybe something is being blocked on my net1. But then I tried combination of laptop2 and net1, I was able to access my workspace as expected.The only thing different on laptop1 and laptop2 is that laptop2 had a fresh install of Amazon workspace client, as it never had the setup done on it previously.The laptop1 being my daily usage one had the amazon workspace installed on it. I tried removing the amazon workspace client form laptop1 with some advanced uninstallers and system temp directories clean up , restart and then re install of the client, but still the issue persisted.I cannot use laptop2 as my daily one, and have to try to get it working on laptop1 and net1 combo.Also net2 cannot be used continuously as it is a cellular network.Attached are logs from, please let me know if any more details are required:%LOCALAPPDATA%\Amazon Web Services\Amazon WorkSpaces\logsLogs:Laptop1, network1https://pastebin.com/raw/hJQqm7JALaptop1, network2https://pastebin.com/raw/U97UHEbhLaptop2, network1https://pastebin.com/raw/2ZHrMvPPScreen shots:FollowComment"

Answer: "0Accepted AnswerWell a lot of debugging and googling and then a sudden moment of suspicion solved the issue.First off, it is kind of difficult to analyze with just the Amazon Workspaces client as to what IP address/domains are being accessed by it.By searching a lot, I was able to find that the client writes some of the connectivity related logs in a log file at following location:C:\Users\Username\AppData\Local\Amazon Web Services\Amazon WorkSpaces\logsThe log file is created and written when the client is opened and removed when we close it, so need to keep that in mind about it.In the log file there was one line,[ERR] HttpClient Timeout : https://connectivity.amazonworkspaces.com/. Exception: System.Threading.Tasks.TaskCanceledException: The request was canceled due to the configured HttpClient.Timeout of 5 seconds elapsing.So basically if the client fails to get a response from the above URL within 5 seconds, the above error of No network : Network connection lost is shown on the client.Once I came to know this, I could check the URL from browser and each time, it took more than 5 seconds to respond.But again, this was not happening on laptop2 on same network. Then something curiousbee said clicked, the 'network adapter settings '.Although I had checked this previously and assumed as on the laptop1 and net2 combo same adapter settings worked, it must not be an issue. But still when I checked the laptop1 and net1 combo and laptop2 and net1 combo, both had differences in the IP address being allotted to them. The net1 was assigning an IPV4 as well as IPV6 IP address to the laptop1 where as only IPV4 IP address to the laptop2. Then once I updated the network1 to work on IPV4 only(local DHCP, no need for IPV6) and restarted, it resolved my issue!So TL;DR Disable IPV6 address on local network while using AWS client.CommentSharePiyushanswered 2 months ago0Based on the error message you're seeing, it sounds like the Amazon WorkSpaces client is having trouble maintaining a network connection on your primary laptop and network combination. It's strange that the issue doesn't occur on your secondary laptop, but given that it has a fresh install of the client, it's possible that there could be some differences in how the client is configured or how the networking components are set up.Some things you could try to troubleshoot the issue on your primary laptop and network:Check your network settings: Make sure that your network adapter settings are configured correctly and that there are no restrictions or firewalls that could be blocking the client's network traffic.Check for conflicts with other software: It's possible that there could be other software running on your primary laptop that's interfering with the client's network connection. Try disabling any antivirus, firewall, or VPN software temporarily to see if that resolves the issue.Try running the client in compatibility mode: Right-click on the Amazon WorkSpaces client shortcut and select Properties. Then, under the Compatibility tab, check the box for "Run this program in compatibility mode for" and select an older version of Windows, such as Windows 8 or 7. Apply the changes and try launching the client again.Contact Amazon WorkSpaces support: If none of the above steps resolve the issue, it's possible that there could be a problem with your account or the client itself. Contact Amazon WorkSpaces support and provide them with the logs you've collected to see if they can help identify the root cause of the problem.CommentSharemishdaneanswered 2 months agoEXPERTBrettski-AWSreviewed 2 months agoPiyush 2 months agoThank you for the reply!For the client configuration, both of them had new installations with latest version setup downloaded from the website and simple next next, so no separate configuration was done.Both the laptop use same vendor and updated version antivirus, but still didn't work after disabling.In fact, by enabling VPN on laptop1, I was able to access the login page, which is my temporary solution for now.I will try the compatibility way and if nothing else works, share the logs with workspace support.Share"


Question: parallelcluster: nfs performance and cluster scalability - head node unresponsive

"I am performing load/performance tests on my HPC. I am using parallelcluster 3.5.1 with slurm, head node is of c6i-2xlarge type and the queue of interest consists of 1024 c6i-large nodes.  I have two EBS resources mounted, all results are written on-the-fly to one of them, the other one is the installation directory:/dev/nvme1n1      50G   19G   29G  40% /install/dev/nvme2n1     6.0T  4.3T  1.5T  75% /sharedI am queueing 550 identical single-threaded jobs that are expected to write less than 1 MB over the course of 20 minutes each. Jobs are submitted all at once, nodes start as expected and perform computations.Not long after nodes are started the docker and the gunicorn services on the head node go down, followed by the ssh session. Just before the ssh connection closes I get this error in the console:Message from syslogd@ip-172-31-30-213 at May ...kernel:[1645279.869683] watchdog: BUG: soft lockup - CPU#2 stuck for 23s! [kworker/u16:11:1053789]The head node becomes unresponsive, even after the compute fleet completes computations and shuts down. Only restarting the head node via the EC2 console helps to get the ssh back up and running on the head node.Further inspection of the logs shows that the kern.log is flooded with messages related to the nfsd.May 24 12:08:40 ip-172-31-30-213 kernel: [1035689.741509] nfsd: too many open connections, consider increasing the number of threadsMay 24 12:08:40 ip-172-31-30-213 kernel: [1035689.741946] nfsd: too many open connections, consider increasing the number of threadsMay 24 12:08:40 ip-172-31-30-213 kernel: [1035689.745717] nfsd: too many open connections, consider increasing the number of threadsMay 24 12:08:40 ip-172-31-30-213 kernel: [1035689.746760] nfsd: too many open connections, consider increasing the number of threadsMay 24 12:08:40 ip-172-31-30-213 kernel: [1035689.747181] nfsd: too many open connections, consider increasing the number of threadsMay 24 12:08:40 ip-172-31-30-213 kernel: [1035689.747713] nfsd: too many open connections, consider increasing the number of threadsMay 24 12:08:40 ip-172-31-30-213 kernel: [1035689.749130] nfsd: too many open connections, consider increasing the number of threadsMay 24 12:08:40 ip-172-31-30-213 kernel: [1035689.749582] nfsd: too many open connections, consider increasing the number of threadsMay 24 12:08:40 ip-172-31-30-213 kernel: [1035689.750561] nfsd: too many open connections, consider increasing the number of threadsMay 24 12:08:43 ip-172-31-30-213 kernel: [1035692.671422] rpc-srv/tcp: nfsd: got error -32 when sending 240 bytes - shutting down socketMay 24 12:08:44 ip-172-31-30-213 kernel: [1035693.868366] rpc-srv/tcp: nfsd: got error -32 when sending 240 bytes - shutting down socketMay 24 12:08:45 ip-172-31-30-213 kernel: [1035694.539966] rpc-srv/tcp: nfsd: got error -32 when sending 240 bytes - shutting down socketMay 24 12:08:45 ip-172-31-30-213 kernel: [1035694.740959] net_ratelimit: 4056 callbacks suppressedMay 24 12:08:45 ip-172-31-30-213 kernel: [1035694.740963] nfsd: too many open connections, consider increasing the number of threadsMay 24 12:08:45 ip-172-31-30-213 kernel: [1035694.741555] nfsd: too many open connections, consider increasing the number of threadsMay 24 12:08:45 ip-172-31-30-213 kernel: [1035694.742267] nfsd: too many open connections, consider increasing the number of threadsMay 24 12:08:45 ip-172-31-30-213 kernel: [1035694.742885] nfsd: too many open connections, consider increasing the number of threadsMay 24 12:08:45 ip-172-31-30-213 kernel: [1035694.743879] nfsd: too many open connections, consider increasing the number of threadsMay 24 12:08:45 ip-172-31-30-213 kernel: [1035694.744676] nfsd: too many open connections, consider increasing the number of threadsMay 24 12:08:45 ip-172-31-30-213 kernel: [1035694.746571] nfsd: too many open connections, consider increasing the number of threadsMay 24 12:08:45 ip-172-31-30-213 kernel: [1035694.747328] nfsd: too many open connections, consider increasing the number of threadsMay 24 12:08:45 ip-172-31-30-213 kernel: [1035694.749657] nfsd: too many open connections, consider increasing the number of threadsMay 24 12:08:45 ip-172-31-30-213 kernel: [1035694.751490] nfsd: too many open connections, consider increasing the number of threads550 jobs doesn't seem a massive load to me and I am surprised the head node becomes unstable so easily. Is there any configuration change you recommend me to do to my cluster to improve the scalability?Best,MichalFollowComment"

Answer: "1Accepted Answerthe first problem is related with number of threadshttps://access.redhat.com/solutions/2216 (Please read this article)The number of threads defaults to 8, but you may need more for your workload. This can be done by editing the /etc/sysconfig/nfs file and setting the RPCNFSDCOUNT to a higher value. he soft lockup error you're seeing suggests that a process on your head node was monopolizing the CPU and preventing other tasks from running. This could be related to the NFS server being overloaded. Addressing the NFS issue might alleviate this as well.CommentShareEXPERTsedat_salmananswered 10 days agomfolusiak 9 days agoThank you. Indeed, it seems that c6i-2xlarge has 16 threads set  by default. Larger and smaller nodes have proportionally more or less. I quadrupled the number and the problem disappeared. Would it be an idea to add monitoring of nfsd to Cloudwatch?Share"