Question: Is it safe to delete the restore DB to save Cost?

"working on AWS Cost Saving(Billing). In my Non-production environment below DB identifier present.mysql-e1-d-myapp-v8-restored.I have taken snapshot. Now, is it safe to delete? please suggest.FollowComment"

Answer: "0HiYes, it's safe delete when you had final snapshot. To be able to restore your deleted DB instance later with a final DB snapshot. The final snapshot is retained, along with any manual snapshots that were taken.https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_DeleteInstance.html#USER_DeleteInstance.DeletingLet me know if this answers your questions. Thank you for your interest in re:Post community.Regards,ManjunathCommentSharerePost-User-7245599answered 6 months ago"


Question: Athena does not recognize date functions

"Hi,I have date in one of the table columns in the format "8/14/2017". I get an error when I use the function from_unixtime to convert it into ISO time date.The query I am  using isselect TO_DATE(from_unixtime(UNIX_TIMESTAMP('07/03/2013', 'yyyy-mm-dd')))The following is the error:: Can you please take a look at thisYour query has the following error(s):SYNTAX_ERROR: line 1:30: Function unix_timestamp not registeredthanks,sharuEdited by: SSharu on Oct 17, 2017 11:44 PMFollowComment"

Answer: "0I have this same problem. Does anybody have an answer?CommentSharexv23answered 5 years ago0Not sure if these just renamed since you tried but unix_timestamp is not listed on the date functions in Presto - https://prestodb.io/docs/current/functions/datetime.html - you could do to_unixtime though but it takes a timestamp. Given the original query the unixtime stuff looks unnecessary, you could just use date_parse e.g. date_parse('07/03/2013', 'yyyy-mm-dd')CommentSharerruppmgpanswered 5 years ago"


Question: Role chaining problem (aws console role-chaining)

"Hi,Im trying to achieve the "role chaining" as in the https://aws.plainenglish.io/aws-iam-role-chaining-df41b1101068i have an user admin-user-01 with policy assigned:{    "Version": "2012-10-17",    "Statement": {        "Effect": "Allow",        "Action": "sts:AssumeRole",        "Resource": "arn:aws:iam::<accountid>:role/admin_group_role"    }}I have a role, which is meant for admin-user-01, with role_name = admin_group_role and  trust policy ={    "Version": "2012-10-17",    "Statement": [        {            "Effect": "Allow",            "Principal": {                "AWS": "arn:aws:iam::<accountid>:user/admin-user-01"            },            "Action": "sts:AssumeRole"        }    ]}And it also has a policy:{    "Version": "2012-10-17",    "Statement": {        "Effect": "Allow",        "Action": "sts:AssumeRole",        "Resource": "arn:aws:iam::<accountid>:role/test-role"    }}Then, i have another role, which is assigned for the role above (admin_group_role), with role_name = test-role and  trust policy ={    "Version": "2012-10-17",    "Statement": [        {            "Effect": "Allow",            "Principal": {                "AWS": "arn:aws:iam::<accountid>:role/admin_group_role"            },            "Action": "sts:AssumeRole"        }    ]}But when i login as admin-user-01 into account, then switch to the role admin_group_role and then try to switch to role test-rolei get :Invalid information in one or more fields. Check your information or contact your administrator.P.S everywhere <accountid> is the same, all of the roles,users,permissions are created in the same account ( what, i suppose might be the reason why i face the error  )What am i doing wrongly?FollowComment"

Answer: "0Accepted AnswerI tried to do "double switch role" in aws web console, which apparently is not supported, in aws cli everything works fine (https://www.reddit.com/r/aws/comments/rxgjbs/iam_role_chaining_via_console/hriu0mr/)CommentShareJoann Babakanswered a year ago0Looking in the > documentation < that error shows up midway down the troubleshooting.  Without knowing if you're doing this in a corporate account or if you're the full blown admin, there are some steps you can trace in that link. Hope that helps.CommentShareDan_Hanswered a year ago"


Question: RDS Aurora Postgres Instance Memory Usage Fluctuating

Running a RDS Aurora Postgres cluster with two r6g.2xlarge instances that started fluctuating in memory usage around 6:50pm EST yesterday. Typically we are running with ~16gb headroom but it dips to ~5gb at ~10m intervals. At some points it dipped below the threshold that it needed to restart the instance. We rolled back any code changes that had happened during the dayHow can I see which process/query is using this memory?Noticed this corresponded very closely to the announcement of performance insights.FollowComment


Question: Use S3 as a git repo

"I have a sagemaker notebook that has no connections to internet or codecommit but has access to 1 s3 bucket. I would like to use that 1 s3 bucket as a place to house git repos, ideally I would like to be able to pull/push to repos in that bucket from other sagemaker notebooks or ec2 instances that have connections to that bucket. Has anyone tried this before?FollowComment"

Answer: "1Hi! I believe from AWS we don't have an official solution for this strategy. The are some solutions out there like https://github.com/bgahagan/git-remote-s3 you could use if you can upload the latest release to the S3 bucket and install it on your notebook. Hope this helps!CommentShareDani Manswered a year agoAWS-User-8297238 a year agoInteresting choice, it doesn't seem to deal with credentials well. It won't take my credentials from my notebook. But maybe there is some poking around that can be done.Share0Check out these assets to see if they can help to accomplish this:https://aws.amazon.com/blogs/machine-learning/how-to-use-common-workflows-on-amazon-sagemaker-notebook-instances/https://docs.aws.amazon.com/sagemaker/latest/dg/nbi-git-repo.htmlCommentSharerePostfanclubanswered a year agoAWS-User-8297238 a year agoThose are all connecting code commit to my notebook which I can't do since I can't modify the execution role.Share"


Question: security exception on lambda function

"When i'm testing my lambda function i get this error"body": "{\"error\":{\"root_cause\":[{\"type\":\"security_exception\",\"reason\":\"no permissions for [indices:data/read/search] and User [name=arn:aws:iam::xxxxxx:role/service-role/testFunction-role-etjiy0ibBut if i go to IAM dashboard and go to the testFunction-role-etjiy0ib, this role has all this permissions:What am i doing wrong?FollowComment"

Answer: "0Accepted AnswerHi, I recommend you redact all endpoints from the code and screenshots.I see you already asked the same question here: https://repost.aws/questions/QULkoc-0AkQ1yDgN0ANxE7lg/lambda-function-error-list-indices-must-be-integers-or-slices-not-strHave you tried the recommendations and managed to get the print to show?Do you have a stack trace that indicates where its failing?It seems you are not passing a JSON object to the function using the Test method but rather a list of objects. Could you please check that?I also recommend you go through a workshop like this: https://aws.amazon.com/getting-started/hands-on/run-serverless-code/ to learn more about Lambda.Hope it helpsJonCommentShareEXPERTJonathan_Danswered 4 months ago"


Question: GroundTruth Text labeling tasks failing

"I have a text labeling job currently running, but I am getting an alert that many tasks are failing.The realted cloudwatch log error message is:{"event-name":"HUMAN_TASK_FAILED","event-log-message":"ERROR: Human task failed for line 6."}The error in the output.manifest is:"metadata":{"retry-count":1,"failure-reason":"ClientError: Annotation tasks expired.  Probable Reasons are 1) TaskAvailabilityLifetimeInSeconds parameter is too small.  2) Reward is too low for workers to work on the task.  3) If you use a custom html template, your template may be broken.  4) Data (image/video/text) sent for annotation is broken or too big, preventing completion.  5) All workers declined the tasks.","human-annotated":"true"}But I don't know how to interprete it and can't find any mention of it online, so any help would be greatly appreciated!FollowCommentAWS-User-8651363 a year agoHello, could you provide more context of the labeling job that is failing ? Like who are the workers (internal team, third-party workers, Mechanical Turk) performing the labeling job and what customizations have been doneSharePaolo Sacerdoti a year agoHi! I have four workers in a private team, only one of which is currently active and there is no issues on their side. I have made no customizations.I don't know if this helps... Thanks!Share"

Answer: "0Based on the error message, for the files that were not labeled due to the task failure, have the workers been able to view those files for labeling ? Still on the same files, did you notice any correlation with file size or perhaps encoding ?CommentShareAWS-User-8651363answered a year agoPaolo Sacerdoti a year agoWorkers were able to view and label those files, size doesn't seem to matter as both long and short documents sometimes succeded and sometimes failed.As for the encoding, that was my first guess, but I can't find any pattern or clue as to where the problem could be.For instance this document failed "doc_id\u003d36028\nanafilassi da ibuprofene" while this one "doc_id\u003d4962523\nreazione anafilattica di ndd" was accepted.Share"


Question: How do I pass the input of a step function startExecution to the executed function

"I'm trying to use a step function startExecution state to break up a state machine into 2 parts and I want to pass the input of the startExecution function to the executed function, e.g.,"Process chunk": {            "Type": "Task",            "Resource": "arn:aws:states:::states:startExecution",            "Parameters": {              "StateMachineArn": "arn:aws:states:us-west-1:12345:stateMachine:Ingestion-process-parts",              "Input": "$.input.MessageDetails"              },            "End": true,            "ResultPath": "$.input.MessageDetails"          }where the startExecution input is"input": {    "MessageNumber": 0,    "MessageDetails": "<an S3 URL>"  },but no matter what I try for the input to the executed state machine it just passes a literal value, i.e., in the case above, instead of passing the input of the startExecution  state to the executed function it passes"input": {    "MessageDetails": "$.input.MessageDetails",    "AWS_STEP_FUNCTIONS_STARTED_BY_EXECUTION_ID": "arn:aws:states:us-west-1:1234:execution:Ingestion-Chunk-CSV:055ede1a-dc03-4412-a341-d3b6611dbed4"  },Note that the same input parsing Does work for the Result:{  "name": "Process chunk",  "output": {    "MessageNumber": 0,    "MessageDetails": "<an S3 URL>",It doesn't appear the the normal approach of parsing the input using $... works for this purpose.  Is it possible to do what I want?thanksFollowComment"

Answer: "1Accepted AnswerAs documented here,For key-value pairs where the value is selected using a path, the key name must end in .$What you need to do is the following:"Process chunk": {     "Type": "Task",     "Resource": "arn:aws:states:::states:startExecution",     "Parameters": {          "StateMachineArn": "arn:aws:states:us-west-1:12345:stateMachine:Ingestion-process-parts",          "Input.$": "$.input.MessageDetails"       },     "End": true,     "ResultPath": "$.input.MessageDetails" }CommentShareEXPERTUrianswered 7 months agoEXPERTAWS-User-Nitinreviewed 7 months agoAWS-User-9720008 7 months agoThanks Uri, that worked great!I did, however, find that using "StateMachineArn.$": "$$.StateMachine.Id" resulted in an attempted recursion, rather than calling the function I wanted, so I left that as before.ShareUri EXPERT7 months agoMy bad of course. I thought you are passing your own ARN. Of course you need to pass the ARN that you want to invoke so you are correct. Will edit my answer.Share"


Question: CDK on local environment issue

"Whenever I attempt to run a cdk command on my local machine, I receive the following error. For context, I am running CDK v2, I have a Windows device, I have Python 3.7.9 and running cdk --version returns a 2.19.0. I have attempted uninstalling and reinstalling CDK multiple times. I would appreciate anyone's help. The same CDK repository works for my 2 other teammates as well.Traceback (most recent call last):  File "app.py", line 4, in <module>    import aws_cdk as cdk  File "C:\Users\dalade\AppData\Local\Programs\Python\Python37\lib\site-packages\aws_cdk\__init__.py", line 24257, in <module>           from . import aws_apigateway  File "C:\Users\dalade\AppData\Local\Programs\Python\Python37\lib\site-packages\aws_cdk\aws_apigateway\__init__.py", line 1549, in <module>    from ..aws_certificatemanager import ICertificate as _ICertificate_c194c70b  File "C:\Users\dalade\AppData\Local\Programs\Python\Python37\lib\site-packages\aws_cdk\aws_certificatemanager\__init__.py", line 184, in <module>    from ..aws_cloudwatch import (  File "C:\Users\dalade\AppData\Local\Programs\Python\Python37\lib\site-packages\aws_cdk\aws_cloudwatch\__init__.py", line 500, in <module>    from ..aws_iam import Grant as _Grant_a7ae64f8, IGrantable as _IGrantable_71c4f5de  File "C:\Users\dalade\AppData\Local\Programs\Python\Python37\lib\site-packages\aws_cdk\aws_iam\__init__.py", line 654, in <module>     "policy_dependable": "policyDependable",  File "C:\Users\dalade\AppData\Local\Programs\Python\Python37\lib\site-packages\aws_cdk\aws_iam\__init__.py", line 662, in AddToPrincipalPolicyResult    policy_dependable: typing.Optional[constructs.IDependable] = None,AttributeError: module 'constructs' has no attribute 'IDependable'Subprocess exited with error 1FollowComment"

Answer: "0Whenever I've had errors like that from CDK, it's been due a mismatch between the CLI and the construct libraries (although that's hopefully harder with CDK v2). Does pip list show any/all CDK libraries are at the same version as the CLI? Can you reproduce if you install in a clean virtual environment?CommentShareEXPERTJames_Sanswered a year ago"


Question: How does ECS Fargate manage clock sync?

"Hi everyone!I've been trying to understand the clock sync mechanism on ECS with Fargate mode to know its compliance with industry controls such as ISO certifications, I found that local time is managed on the host where containers are running but with Fargate mode which could be that host?I'm still not able to find any AWS documentation that clarifies this other than the usage of the time sync service, this document leads to a post explaining the usage of Network Time Protocol (NTP) and how it utilizes a fleet of redundant satellite-connected and atomic reference clocks in AWS regions, which seems to be a very good explanation but is there something else that I cloud be missing when understanding Farcate clock sync?Thanks in advanceFollowComment"

Answer: "1Accepted AnswerHello,The clock of the container will be the same as the clock of the host that it is running on. In case of Fargate, the containers are run on AWS Managed infrastructure and therefore the containers are synced with the clock of those hosts.As a customer, you will not have visibility into the Fargate infrastructure. However, you can monitor the clock accuracy of AWS Fargate as described in this document - https://aws.amazon.com/about-aws/whats-new/2021/09/monitoring-clock-aws-fargate-amazon-ecs/I hope this answers your question!CommentShareSUPPORT ENGINEERVenkat Penmetsaanswered 7 months agoEXPERTTushar_Jreviewed 7 months ago"


Question: Compiling GameSDK legacy project

"Hi,I've been trying to compile the GameSDK legacy project using Visual Studio 2013 but I get the following error:[...]\dev\code\cryengine\crycommon\CryFixedString.h(29) : fatal error C1083: Cannot open include file: 'AzCore/base.h': No such file or directoryI've setup the project using the setup assistant, setting GameSDK as the default project.Then I ran lumberyard waf using:[...]dev>lmbr_waf configureI then tried to build the game project in profile x64 using both Visual studio 2013 and waf with the following command:[...]\dev>lmbr_waf build_win_x64_vs2013_profile -p gameBoth results in the following error (please tell me if you need the complete build log) :        [ 766/1498] winrc (win_x64_vs2013|profile): BinTemp\win_x64_vs2013_profile\Code\GameSDK\GameDll\GameSDK_rc\GameSDK.auto_gen.rc -> BinTemp\win_x64_vs2013_profile\Code\GameSDK\GameDll\GameSDK_rc\GameSDK.auto_gen.109.GameSDK.resMain.cpp[...]\dev\code\cryengine\crycommon\CryFixedString.h(29) : fatal error C1083: Cannot open include file: 'AzCore/base.h': No such file or directoryReplicaUtils.cpp.14.obj : warning LNK4221: This object file does not define any previously undefined public symbols, so it will not be used by any link operation that consumes this libraryReplicaUtils.cpp.13.obj : warning LNK4221: This object file does not define any previously undefined public symbols, so it will not be used by any link operation that consumes this libraryBuild failed<++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++>Compilation failed - File: 'Main.cpp.5101.obj', Module: 'GameSDKWindowsLauncher', Configuration: 'win_x64_vs2013|profile', error code 2Input Files: '[...]\dev\Code\Launcher\WindowsLauncher\Main.cpp'Output Files: '[...]\dev\BinTemp\win_x64_vs2013_profile\Code\Launcher\WindowsLauncher\Main.cpp.5101.obj'Command: 'C:\Program Files (x86)\Microsoft Visual Studio 12.0\VC\BIN\amd64\CL.exe /FS /Zo /bigobj /nologo /W3 /WX /MP /Gy /GF /Gm- /fp:fast /Zc:wchar_t /Zc:forScope /Gd /wd4530 /Ox /Ob2 /Ot /Oi /Oy- /showIncludes /MD /Z7 /GR- /I[...]\dev\BinTemp\win_x64_vs2013_profile\Code\Launcher\WindowsLauncher /I[...]\dev\Code\Launcher\WindowsLauncher /I[...]\dev\Code\SDKs\boost /I[...]\dev\Code\CryEngine\CryCommon /I[...]\dev\Gems\LmbrCentral\Code\include /I[...]\dev\Gems\LyShine\Code\Include /IC:\Program Files (x86)\Microsoft Visual Studio 12.0\VC\INCLUDE /IC:\Program Files (x86)\Microsoft Visual Studio 12.0\VC\ATLMFC\INCLUDE /IC:\Program Files (x86)\Windows Kits\8.1\include\shared /IC:\Program Files (x86)\Windows Kits\8.1\include\um /IC:\Program Files (x86)\Windows Kits\8.1\include\winrt /D_WIN32 /D_WIN64 /DCODE_BASE_FOLDER="[...]/dev/Code/" /D_PROFILE /DPROFILE /D_ITERATOR_DEBUG_LEVEL=0 /DBINFOLDER_NAME="Bin64vc120" /DPLATFORM_SUPPORTS_AWS_NATIVE_SDK /DUSE_WINDOWS_DLL_SEMANTICS /DLY_BUILD=462636 /D_MT /D_DLL /DAZ_DEBUG_BUILD /DLY_GAMEFOLDER="GameSDK" /DLY_GAMEDLL="GameSDK" /DEXE_VERSION_INFO_0=1 /DEXE_VERSION_INFO_1=9 /DEXE_VERSION_INFO_2=0 /DEXE_VERSION_INFO_3=2 [...]\dev\Code\Launcher\WindowsLauncher\Main.cpp /c /Fo [...]\dev\BinTemp\win_x64_vs2013_profile\Code\Launcher\WindowsLauncher\Main.cpp.5101.obj'Output:Main.cpp[...]\dev\code\cryengine\crycommon\CryFixedString.h(29) : fatal error C1083: Cannot open include file: 'AzCore/base.h': No such file or directory<++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++>I tried building using both lumberyard 1.10 and 1.9 (as this the last officially supported version mentioned on GameSDK documentation page) but both fail.I also looked at the solution proposed by C4PT4IN_C4NUCK_LMBR in this subject but my msvs_version was already set to 12.base.h file is present at [...]\dev\Code\Framework\AzCore\AzCore so I guess there might be some project include/dependency wrong somewhere ?Follow"

Answer: "0Accepted AnswerTo anyone having this issue, you need to build the solution using the [All] profile (or debug, release... depending) and not the [Game] profile solution configuration in Visual studio.SharerePost-User-0985624answered 6 years ago0Hi @REDACTEDUSERI'm sorry to hear the sample isn't building for you in 1.9 and we have created an internal issue to look into this. It is not recommended to use the Legacy Sample Project as a starting point for a new game and has a number of limitations outlined here:http://docs.aws.amazon.com/lumberyard/latest/userguide/sample-project-legacy.htmlWas there a specific feature in the legacy project you wanted to use in a game project?SharerePost-User-5841084answered 6 years ago0Hi @REDACTEDUSERThank you for the heads up.I am aware that the legacy sample project is meant to be deprecated but I'm looking to port a project done using the GameSDK project from cryengine to lumberyard. Even if in the long run I will have to switch every gameobjectextension to your new component system, I'm looking into making a quick and "dirty" migration first using the legacy sample in order to have the project compiling before starting to tackle the gameobjectextension->component conversion.SharerePost-User-0985624answered 6 years ago0After a few more tests, I can confirm this is also happening when compiling with visual studio 2015 on another computer (as mentioned above, i tried using both lumberyard 1.10 & 1.9.0.2).SharerePost-User-0985624answered 6 years ago"


Question: Cognito - Facebook

"Good Morning!We've been trying desperately all evening to use the player account system with a Facebook login. I wanted to seek clarification on a few things.Our goal is to have a user login primarily via Facebook, and have our user pool update with any necessary information (I.E. everything that's available through Facebook's public_profile attribute). We would like to temporarily host this information, process it via AWS and download a processed package to the user's client. Preferably, a single time each in real-time. We've set up federated Facebook support for the user pool on Cognito, but we're at a loss of how to accomplish the user signing into Facebook.Do we need to code/produce another application of some sort to achieve the Facebook login?Maybe a Lambda function pushed through from an html page?Node.js hosted on AWS that manages the request and receives the token?Maybe a Native React application?Please let me know and thank you for your help!Have a great day!Follow"

Answer: "0Accepted AnswerHey @REDACTEDUSERI'm sorry for this frustrating experience -- let me get you some assistance on this topic :) Stay tuned!SharerePost-User-5738838answered 5 years ago0Sure thing! Just let us know when you have found someone to answer it. Thank you for your time and have a great day!SharerePost-User-7931937answered 5 years ago0Thanks for all of your help everyone! We've made LEAPS forward.SharerePost-User-7931937answered 5 years ago0Hello @REDACTEDUSERSo I believe there are a few different parts to what you're trying to build and it sounds like you're on the right track. Step 1 will be creating some sort of UI layer with a web view in order to perform the Facebook login steps as described at Manually Build a Login Flow - this would likely be a 3rd party library of your choosing. Once you have the token retrieved from the facebook login process in Lumberyard you can perform the Login Ebus call in Configuring External Identity Providers at Cloud Canvas Player Identity This will allow cloud canvas to automatically maintain and refresh cognito credentials. It sounds like what you additionally want is to use those player credentials to make custom API calls to Facebook to retrieve the data you're after - this would be a custom lambda you'd want to write and likely add to your Player Accounts gem's resource-template so you could give it permission to add to/modify your PlayerAccounts table and return the desired data to the client.Hope that helps!SharerePost-User-5014759answered 5 years ago0Hello @REDACTEDUSERAre you building your application on a mobile platform? If so, I would recommend using the Facebook SDK to log in the users of your application. Once logged in you would need to retrieve the user's identity from the session object and pass it into the Cognito SDK so that it can provide you with an Amazon Cognito Identity to identify the user.Here is some reading material which hopefully will help you in building the system out.Thanks!SharerePost-User-5162062answered 5 years ago"


Question: SMS sending often fails with "Message body is invalid"

"When I send SMS messages, the messages often fail to be delivered with the error: "Message body is invalid". This happens regardless of what text I include as part of the message, so it seems like the error description is inaccurate. What does this error mean?When this failure occurs it seems like SNS attempts to retry the message over and over for hours or days, which I do not want. How do I stop these retries?FollowComment"

Answer: "1SNS has delivery policies that can give you control over the delivery rate and error handling for SNS.Amazon SNS – Delivery PoliciesAmazon SNS message delivery retriesAs for the errors, it may be worth starting here: How do I troubleshoot mobile text message (SMS) failures in Amazon SNS?CommentShareJBanswered 9 months ago"


Question: How do I find out why I'm being charged for app sync and open search service?

"My app is in beta, so it's not really being used, I received a spike in my bill because of app sync and open search service. I can't figure out why this charge is happening or who triggered it. Could someone help me?FollowComment"

Answer: "0Hello,I'd recommend opening a billing related case in our Support center. Our team has the tools and visibility to assist with billing questions there. You can access the support center here: go.aws/support-center.Here's also an official doc to assist with viewing your bill in the meantime: https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/getting-viewing-bill.html.Hope these help!Best regards,AnnCommentShareEXPERTAWS Support - Annanswered a year agoEXPERTFabrizio@AWSreviewed a year agoAWS-User-9327553 a year agoThanks, Ann! I spoke with the billing center and they said I would need a technical case to explain why there were charges in Virginia even though no one is using the app.Share"


Question: My EC2 is not responding from browser ec2 intance connect or a web server on port 80

"ec2-54-87-201-155.compute-1.amazonaws.com54.87.201.155Instance is inside VPC with internet gateway attached and also route table has 0.0.0.0/0 destinationMy security groups are as followssgr-0f24aa20ece6c10df80TCP0.0.0.0/0launch-wizard-1sgr-0b9cc7da941a4456dAllAll0.0.0.0/32launch-wizard-1sgr-0815f5d840e9d3937443TCP0.0.0.0/0launch-wizard-1sgr-019b0f1241382549122TCPxx.xx.xxx/32launch-wizard-1I am able to connect ssh from my IP with Git bash on windows, I have installed apache there and I am able to curl localhost on the instanceFollowComment"

Answer: 0It takes 5-6 hoursCommentShareCaptainanswered a year ago


Question: Integrate GameLift Realtime Client in a native iOS Swift Project?

I am writing a pure Swift game and thinking about using GameLift RTC. However I noticed that the client SDK is written in C# and the examples are with Unity.Can someone explain if the C# client SDK can be built with native iOS Swift project (not Unity or Unreal)?FollowComment

Answer: "0Thank you for reaching out us regarding the above query.I would like to share that as of now unfortunately GameLift doesn't support Swift officially, which means that we cannot use Gamelift SDK with native IOS swift project. However I would like to thank you for allowing us to improve the service by raising this query. I have passed this feedback to the Gamelift internal team and requested them to consider this as a feature request. While I am unable to comment on if/when this feature may get released, I request you to keep an eye on our What's New and Blog pages for any new feature announcements.Having said that, in case you face further challenges, please feel free to open a support case with AWS using the following link.CommentShareSUPPORT ENGINEERSubhayu_Manswered 9 months ago"


Question: Wisdom create-assistant-association fails

"When attempting to use "aws wisdom create-assistant-association" it returns "An error occurred (ConflictException) when calling the CreateAssistantAssociation operation: ". Looking through documentation it refers to "The request could not be processed because of conflict in the current state of the resource. For example, if you're using a Create API (such as CreateAssistant) that accepts name, a conflicting resource (usually with the same name) is being created or mutated." A support ticket has been opened but I thought I would see what the community has to say? Thank you.FollowComment"

Answer: "0Hello,Tim here and I work on the Connect Support Team at AWS Premium Support.I was checking on my end on how I could help but It'd require some account specific items to best troubleshoot. On the support case you created you'll want to share the debug logs which will give us timestamps and request id information. If you're using the AWS CLI the debugging logs can be enabled by following the steps here: https://docs.aws.amazon.com/cli/latest/userguide/cli-chap-troubleshooting.html#general-debugAnother key item is checking CloudTrail as there may be some additional information that may not bubble back up towards the AWS CLI commands logging (maybe something further downstream for example).CommentShareSUPPORT ENGINEERTim_Panswered a year ago0My apologies for not following up on this earlier. Support did get back to me and logically it didn't make any sense. If I did a "list" of associations on my end nothing showed. However, support looked at it and stated there was already Wisdom association showing. I then listed again and sure enough it showed. I have no idea why. Deleted that association and created with no further issues.CommentSharecarldestefanoanswered a year ago"


Question: What is this Error in Lumberyard 1.9 ? does not work 1.9

"Hi Everyone,when I open Lumberyard 1.9 , this error showed.my system :Windows 10-64bit - last updateCPU : Core i7 - 4.0GHzGraphic Card : GeForce GTX 760 NvidiaRAM : 16GBREMOVEDUPLOADREMOVEDUPLOADREMOVEDUPLOADI can not open lumberyard 1.9.please help me.thanksFollow"

Answer: "0Accepted AnswerI found , I installed Lumberyard 1.9 on the Drive C:\ , then I cleaned inside %Temp% Folder , Now does WorkSharerePost-User-8224505answered 6 years ago0Hi i have same problem you delete BinTemp and AssetProcessorTemp folder in dev ?SharerePost-User-0150549answered 6 years ago0Thank you i try do delete temp, but i can`t install on drive c:. Hope this will work :)SharerePost-User-0150549answered 6 years ago0I delete %Temp% and i have same problem, about drive c: i have not free space on this drive :( ok thank you AhmadKarami i try find how solve this problem. When i will found answer i write here.SharerePost-User-0150549answered 6 years ago0Looking like bug, but i not sure. I run editor many times ~15 and on each run some assets correctly compiled in Asset Processor and after all work fine.SharerePost-User-0150549answered 6 years ago0No No ,I Do,this steps :01- I installed Lumberyard 1.9 on the Drive C:\ , my path : C:\lumberyard-1.9-393006a-pc02- start menu (windows 10) click ->Run->%Temp% -> delete all files and folders03-in the path C:\lumberyard-1.9-393006a-pc-> run SetupAssistant.bat - select Express buttonSharerePost-User-8224505answered 6 years ago0you are welcome , but for install on the Drive c: , you extract lumberyard-1.9.zip on the drive c: ,okay?SharerePost-User-8224505answered 6 years ago0okay Anatoliyso you found , I do after , I told you in the above ;-)SharerePost-User-8224505answered 6 years ago0I'm sorry , but I downloaded zip file 1.9 , I work on the 1.9 without problems :-)SharerePost-User-8224505answered 6 years ago0Yep i do, but i can't copy on drive c: and this did not help me. A see that error again :(. This error not critical, a can work. :)SharerePost-User-0150549answered 6 years ago0Same problem here as on another post of mine.Clearing TEMP does not help at all, I wonder how someone themselves got it working when no one else seemingly can?Look fwd to a resolution.SharerePost-User-2755327answered 6 years ago0Did you see the post from Aman_LY in the other thread:The current work around is to end the asset processor task, gointo your LY dev folder, then into the primary Visual Studio associatedBin64vc... folder and run AssetProcessorBatch.exe.Once the process within the AssetProcessor window is complete, go ahead and trythe Editor.exe again and see if it works. Keep us posted on your progress! :)SharerePost-User-8353690answered 6 years ago0Thanks Binky, it just solved my issue! Looks like my Editor shortcut was actually pointing to the wrong Visual Studio folder. Everything is working great now! :DSharerePost-User-4267712answered 6 years ago"


Question: IAM Login Strangeness

"Support,I'm running Plesk web hosting software and added the AWS S3 extension for automated backup of sites I host. I setup an IAM access account that was given S3 privileges.I was able to login to my IAM assigned account from my Ubuntu laptop but when I try to login from my Windows 10 Pro laptop it shows no S3 buckets are created. The Linux login shows the buckets the Plesk extension created.I'm using the same exact login credentials on both laptops. How can this be?JohnFollowComment"

Answer: "0The only difference between my Linux PC and my Windows PC is when I login under Linux the AWS region is global. I can't access the global region with S3 on my Windows laptop. Looking at the credentials of the IAM user, it says this IAM isn't assigned to a region.How do I access the global region for S3 under my Windows PC?CommentShareScriptBASICanswered 2 years ago0Using the URL from the Linux laptop while in my S3 bucket on my Windows laptop somehow has fixed this issue and it is now the default S3 bucket for my default account. CRAZY!CommentShareScriptBASICanswered 2 years ago"


Question: Aws glue jobs and databases

I want to take data and remove the data from the table in SQL database and then insert the data in a new ORACLE database table.Both tables are having same schema.how to do this job with AWS GLUE.FollowComment

Answer: "0Do consider other options available to move your data. One tool that would fit this scenario would be DMS. DMS would provide a GUI for the data movement and would be possibly be cheap.If you would like to use Glue for the data move, try using Visual job with source as SQL and target as Oracle. I have shown those options below in the Glue Visual editor console:CommentShareAnanth Tirumanuranswered 8 months ago"


Question: sagemaker美国人口普查数据在中国宁夏区下载提示拒绝访问

https://aws.amazon.com/cn/blogs/machine-learning/analyze-us-census-data-for-population-segmentation-using-amazon-sagemaker/#Comments，官方示例文档中的美国人口普查数据无法下载，我执行aws s3 ls s3://aws-ml-blog-sagemaker-census-segmentation。提示我“An error occurred (AccessDenied) when calling the ListObjectsV2 operation: Access Denied”拒绝访问，IAM账号已经给了AmazonS3FullAccess权限FollowComment

Answer: "0hi There,sorry to reply you late but I just tried and I found the sample notebook is still valid and I can still download the sample data using standard AWS account. Not sure it is because you used AWS China account as I can't test it.There is an alternative way you can try it as the data is public accessible, you can either use browser to download the content -  https://aws-ml-blog-sagemaker-census-segmentation.s3.us-east-1.amazonaws.com/Census_Data_for_SageMaker.csv and upload to your Sagemaker notebook locally or start a terminal session with the following commands*     cd SageMaker/*     ls*    cd US-census_population_segmentation_PCA_Kmeans_2023-03-29*     wget https://aws-ml-blog-sagemaker-census-segmentation.s3.us-east-1.amazonaws.com/Census_Data_for_SageMaker.csvhope that worksif it helps you, please accept the answer and we can close your question=== 中文 ===我刚才用标准的AWS 账号测试了一下，这个sample notebook 还是能用的，不知道是不是因为您是使用AWS中国区账号的原因，我没有测试账号无法测试。不过有一个替代方法，因为这是个公开数据集，所以你可以直接用浏览器下载到本地然后上传到sagemaker或者在sagemaker里面开启一个终端用下面的命令*     cd SageMaker/*     ls*    cd US-census_population_segmentation_PCA_Kmeans_2023-03-29*     wget https://aws-ml-blog-sagemaker-census-segmentation.s3.us-east-1.amazonaws.com/Census_Data_for_SageMaker.csv然后通过pandas 的read_csv来读取就行如果您觉得这个方法可以，请accept answer这样我们就可以关掉这个case。多谢CommentShareRafaXuAWSanswered 2 months ago"


Question: Does Timestream support SQL as a query language?

A customer is asking if the new Timestream time series database supports SQL as a query language.FollowComment

Answer: "0Accepted AnswerAs per the article in the section How it works, customers can use SQL-like queries to use time-series data.CommentShareVijayKanswered 5 years ago0Yes, Timestream supports standard SQL  with added interpolation and smoothing functions to identify trends, patterns, and anomalies.  Please see the documentation link below for further details.https://docs.aws.amazon.com/timestream/latest/developerguide/supported-sql-constructs.htmlhttps://docs.aws.amazon.com/timestream/latest/developerguide/reference.htmlCommentShareSreenath_Ganswered a year ago"


Question: Any master's degree teaches AWS Solution Architect - Professional content?

"Hi all,Is there a master's degree anywhere that teaches AWS Solution Architect - Professional content? I'm looking for a master's degree that will make it easier for me to pass the exam. I've seen many online courses, but I think it takes too little time. Two years, I think it's appropriate to be able to sit the AWS Professional Exam and also get a master's degree.Thank you very much.FollowComment"

Answer: "1There isn't any university offering this program, you will have to do it yourself and two years just for this cert is too long a time. There are bunch of on-line courses available that can help you prepare for it.  start your journey by taking the cloud practitioner and then progress to solution architect associate and then take couple others as well like sys ops before taking the pro cert.CommentShareDevinder-theDBGuyanswered a year ago1You can start by looking at AWS Certification Site. You can also review the requirements and training for AWS Certified Solutions Architect – Associate.I hope it helps. Remember to click the Accept button for answers that solve your question.Happy learning.MonicaCommentShareSUPPORT ENGINEERMonica_Lluisanswered a year ago"


Question: RDS MS SQL server ODBC Linked server  connection issues

we tried using the SSMS console to add linked servers but the admin user does not have Sys admin access to add linked servers. so we tried using the sp_addlinkedserver from this article:https://aws.amazon.com/blogs/database/implement-linked-servers-with-amazon-rds-for-microsoft-sql-server/https://aws.amazon.com/premiumsupport/knowledge-center/rds-sql-server-create-linked-server/but have still been unsuccessful. our linked servers are ODBCs and can connect in localhost easilyPlease helpFollowComment

Answer: "0Hi,Thanks for reaching out to us via AWS re:Post - the links that you have referred are the correct ones. sysadmin is not needed to create linked servers here. If you can share more details on the error that would help. Also - this may require an engineer from support to deep dive.Note-> Linked Server is supported for onlySQL Server (EC2 or on-premises) to RDS SQL ServerRDS SQL Server to SQL Server (RDS, EC2, or on-premises)Hope this helps. Have a great rest of the day!P.S.- maybe this will help https://stackoverflow.com/questions/64617084/sql-server-add-a-linked-server-to-aws-rds-instanceCommentShareEXPERTNIRUPAM_danswered 6 months agoAWS-User-Sanjeev 13 days agoHi,I think RDS SQL Server now supports the linked servers to Oracle also, rightRDS SQL Server ----> EC2, RDS SQL Server, On-premises SQL server and On-premises Oracle,Maybe we have limitations like, only Oracle 21 above versions support etc..Please check and updateShare"


Question: I come with an empty dataset(IoT analytics)

"I build IoT analytics and generated data in IoT Device Simulator.https://iot-analytics.workshop.aws/Data goes through IoT core--channel--pipeline--datastore--datasetBut  opening Dataset's content, it's empty(only item name)(I could see data at pipeline's message attribute and dataset's test query preview.)I'd like to know how to write data to dataset csv.FollowComment"


Question: Boto3 Lambda - Existing custom IoT Rule as event source

"Hello forum,We know and are able to set existing custom IoT Rule as a Trigger for AWS Lambda.We are currently using boto3 to create lambda function.After creating lambda function we tried to set an existing custom IoT Rule as trigger using create_event_source_mapping().This is resulting in below error -An error occurred (InvalidParameterValueException) when calling the CreateEventSourceMapping operation: Unrecognized event source, must be kinesis, dynamodb stream or sqs. Unsupported source arn : arn:aws:iot:xx-xx-1:xxxxxxxxxxxx:rule/ruleNamePlease find the code for the same below -import boto3import botocore.exceptionsfunction_name = sample_functiontrigger_arn = arn:aws:iot:xx-xx-1:xxxxxxxxxxxx:rule/ruleNameclient = boto3.client('lambda')client.create_event_source_mapping(EventSourceArn=trigger_arn,FunctionName=function_name)Is this not supported or possible using boto3?How to fix this?FollowCommentehe a month agoHi edgegoldberg,Did you figure out or solve this issue? I am struggling with the same error when trying to set up an IoT Rule as a trigger to a lambda function in a cloudformation template, and using the EventSourceMapping resource.Share"

Answer: "0Lambda event source mapping is used only for the event sources that Lambda needs to poll such as SQS, Kinesis, Kafka, etc. IoT Rules are different. In order to trigger a Lambda function from an IoT rule you need to use the create_topic_rule in the IoT client.CommentShareEXPERTUrianswered a year agoedgegoldberg a year agoHi Uri,Thank you for the response.Yes I checked that earlier and I knew that I can use create_topic_rule to create new rule and set an action to trigger lambda. But I don't think I could use create_topic_rule to set an action to trigger lambda for an already created rule.Could you please point out which API I should use for the same?(I am expecting that I just have to pass the ARN of the existing rule and ARN of the lambda)Share"


Question: "Site-to-Site VPN with dynamic WAN address (LTE, Starlink, etc)"

"Heyo!  I'm trying to create a Site-to-Site VPN between two sites without static WAN addresses. My backup plan is just to create the VPN server on an ec2 instance with a static external IP.The Client VPN Endpoints seem like a possibility but I don't think those will work since I have multiple networks I need to connect at each site and can't NAT through the endpoint. I'm looking at the documentation for Customer Gateways and seeing that specifying the external IP address is optional, so I'm hoping it may connect as a client if I don't specify that? If so I'm having some issues with the certificates that I'll need help with, but I should probably make a dedicated post for that.Is there another method for what I'm trying to do, or should I just spin up the EC2 instance and install my VPN server of choice and do this that way?Thanks so much for any help!FollowComment"

Answer: "1Accepted AnswerHello,You are correct, if you are using cert based authentication for VPN (and not PSK) the CGW IP is optional. That being said every time the CGW external (dynamic IP) changes the Tunnel will be torn down and need to be re-initiated. Please note tunnel initiation from CGW is supported only with IKEv2.https://docs.aws.amazon.com/vpn/latest/s2svpn/cgw-options.html(Optional) The IP address of the customer gateway device's external interface.The IP address must be static.If your customer gateway device is behind a network address translation (NAT) device, use the IP address of your NAT device. Also, ensure that UDP packets on port 500 (and port 4500, if NAT-traversal is being used) are allowed to pass between your network and the AWS Site-to-Site VPN endpoints. See Firewall Rules for more info.An IP address is not required when you are using a private certificate from AWS Certificate Manager Private Certificate Authority.If there is a way for you to do Static NAT (1:1) that might be a better way, with this the CGW external IP would be Static.https://aws.amazon.com/vpn/faqs/Q: Can I NAT my customer gateway behind a router or firewall?A: You will use the public IP address of your NAT device.Hope this helps.CommentShareEXPERTTushar_Janswered a year agoEXPERTToni_Sreviewed a year agorePost-User-8812034 a year agoThanks for confirming that, I'll make a new post specific to my issue with the ACM stuff. The external address will mostly be changing when the CGW is offline, so there shouldn't be any issues with the tunnel automatically connecting at startup, right?ShareTushar_J EXPERTa year agoCorrect, IP changing will not matter because authentication will be certificate based, Startup action from CGW side is only supported via IKEv2.SharerePost-User-8812034 a year agoAm I able to use an ACM created private cert for this implementation, or do I need to generate my own and sign it off my ACM PCA?ShareTushar_J EXPERTa year agoHello, Please see this KC article for guidance on this topic: https://aws.amazon.com/premiumsupport/knowledge-center/vpn-certificate-based-site-to-site/Share"


Question: Processing Job automatically created when I start a training job

"Hi,I haven't used sagemaker for a while and today I started a training job (with the same old settings I always used before), but this time I noticed that a processing job has been automatically created and it's running while my training job runs (I don't even know what a processing job is). I also checked in the dashboard to be sure, this was not happening before, it's the second time (first time was in December) but I've been using sagemaker for the last two years..Is this a wanted behaviour? I didn't find anything related in the documentation, but it's important to know because I don't want extra costs..This is the image used by the processing job, with a instance type of ml.m5.2xlarge which I didn't set anywhere..929884845733.dkr.ecr.eu-west-1.amazonaws.com/sagemaker-debugger-rules:latest  And this is how I launch my training job (the entrypoint script is basically Keras code for a MobileNetV3)import sagemakerfrom sagemaker.tensorflow import TensorFlowfrom sagemaker import get_execution_rolebucket = 'mybucket'train_data = 's3://{}/{}'.format(bucket,'train')validation_data = 's3://{}/{}'.format(bucket,'test')s3_output_location = 's3://{}'.format(bucket)hyperparameters = {'epochs': 130, 'batch-size' : 512, 'learning-rate' : 0.0002}metrics = .. some regex heretf_estimator = TensorFlow(entry_point='train.py',role=get_execution_role(),train_instance_count=1,train_instance_type='ml.p2.xlarge',train_max_run=172800,output_path=s3_output_location,framework_version='2.3.0',py_version='py37',metric_definitions = metrics,hyperparameters = hyperparameters,source_dir="data")inputs = {'train': train_data, 'test': validation_data}myJobName = 'myname'tf_estimator.fit(inputs=inputs, job_name=myJobName)Edited by: rokk07 on Jan 25, 2021 2:55 AMFollowComment"

Answer: "0I can answer myself. It's described  https://docs.aws.amazon.com/sagemaker/latest/dg/use-debugger-built-in-rules.html , must be a recent feature. The documentation explain also how to disable the debugger.CommentSharerokk07answered 2 years ago"


Question: Setting ACL in S3 objects written by an AWS Glue Job

I came across the following issue:I run a Glue job from account A to write into an S3 bucket in account B. This meant that the owner of the object is account A and I couldn't do anything with the objects from account B.Is there a way to tell the Glue job to apply an ACL with full control for the bucket owner?FollowComment

Answer: "0Accepted AnswerYou can use Hadoop java configurations in a spark job to update the S3 canned acls. I haven't tested this with Glue Dynamic Frames, but it works for native Spark DataFrames.import sysfrom pyspark import SparkConffrom pyspark.context import SparkContextfrom pyspark.sql.functions import *from pyspark.sql import SQLContext, Rowsc = SparkContext()sc._jsc.hadoopConfiguration().set("fs.s3.canned.acl", "BucketOwnerFullControl")CommentShareLaith-at-AWSanswered 4 years ago"


Question: Total size of my buckets is not the same as what appears inside them

"Hi,I would like to contact you because I have a question about how the size of my buckets is managed in S3.For this I attach three images. In this account I have only one bucket created, "gualaceo".When I access the S3 dashboard it appears that the total size is 1.4 TB. When I access my bucket and select all the folders to calculate the total size, it appears that the size of the bucket "gualaceo" is 661 GB.I searched and asked if there could be any difference between the overall size and the buckey size and I was provided with the following link:https://aws.amazon.com/premiumsupport/knowledge-center/s3-console-metric-discrepancy/?nc1=h_lsAfter reading it and following the instructions, I proceeded to see if there are incomplete multipart uploads, which the result is 0. The only option I have active is Object versioning.But since the total size is 1.8 TB and the size of the only existing bucket is 661 GB. There is a difference of more than 1TB wherewith I can´t understand where such a difference comes from.Despite the fact that this also implies an increase in the cost of the bill, my "problem" more than anything is to know where that big difference in storage comes from or if you could help me in some way to be able to analyze and thus learn in the case that you are managing something incorrectly. I will appreciate that.Thanks for your attention and for your time.Best regards,Cereza.FollowComment"

Answer: "1Accepted AnswerHi Cereza,Thank you for the interesting question. I do not see any images you posted, but I will attempt to help you find an answer.The article you listed mentions Multipart Uploads (MPU) and Versioning, which you mentioned in your question as well. You said you did not see Multipart Uploads. Do you have versioning enabled on the bucket? The final recommendation in the article is to setup Lifecycle Policies. I urge you to configure a Lifecycle Policy to delete MPUs after something like 3-7 days. If you have versioning enabled, you may want to delete old versions after 7-14 days as well.To get a clearer picture of what is happening in your account/bucket, I recommend enabling S3 Storage Lens [1]. There is a default setup in S3 Storage Lens that does not have a fee associated with it. It'll take a day or 2 for the metrics to populate and once it's there, you'll be able to use the dropdown metric options to see the current versions, noncurrent versions, and MPUs for bytes, object count and/or in %. These options should help you determine what is taking up your S3 storage.[1] https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage_lens_basics_metrics_recommendations.htmlCommentShareEXPERTShlomo Dubrowinanswered a year agoAWS-User-9281158 a year agoHi Shlomo,First of all thanks for your atenttion and your answer. It´s possible to attach photos in this post? Because I was trying to do that but I didn´t find the option.Just to let you know, I have S3 Storage Lens enabled and one lifecycle policy to delete MPUs after 2 days. I will try to add another lifecycle policy as well to delete old versions.But I have checked the Storage panel and there is not MPUs so I don´t understand why there are a lot diference in the total size and the size of my bucket. I will check the link.Thanks for your help.Share"


Question: "Load Balancing HTTPS (port 443) is 'unhealthy' , but HTTP (port 80) is 'healthy'"

"I bought a domain on 'namecheap' and connected it to my EC2 instance (running wordpress). The domain is connected to the instance (http://sasivalec.com/)For the SSL, i requested it from Sectigo and configured it on AWS. The AWS certificate manager shows status: "Issued" and "in use". The load balancer shows state: "Active". But my target on the HTTPS target group shows "unhealthy". And in fact, i cannot connect to https://sasivalec.com/What i think it might be: on the Load Balancer page, i get a DNS name that says (A Record), but on namecheap, i cannot add that DNS name as an A record, because it gives the error "please provide a valid IP address", so i added this DNS name as a CNAME record. Is this the issue?How should i go about fixing this? Many thanksFollowComment"

Answer: "1Accepted AnswerI don't think your listener on port 443 is setup correctly. I issued the following command and no SSL connection can be established.# openssl s_client -connect sasivalec.com:443 -prexitsocket: Bad file descriptorconnect:errno=9---no peer certificate available---No client certificate CA names sent---SSL handshake has read 0 bytes and written 0 bytes---New, (NONE), Cipher is (NONE)Secure Renegotiation IS NOT supportedCompression: NONEExpansion: NONENo ALPN negotiated---CommentShareEXPERTkentradanswered 2 months agomark 2 months agoi've removed the certificate from AWS and i'll be handling ssl inside my ubuntu instance with certbot; i've been battling with the aws console for way too longShare0I don't wish this headache on anybydy :')As i'm new on the AWS console, i've been trying to enable my SSL certificate for quite some hours now.I've decided to swap strategy and i'll tackle SSL from within my ubuntu instance using "certbot" and "Let's Encrypt". It seems to be much easier, faster and free.CommentSharemarkanswered 2 months ago"


Question: Trouble getting custom artifacts in java testng appium run

"I read through the previous posts around this subject and changed my code so that I pass $WORKING_DIRECTORY to my code and the tests execute and tell me that they created reports, etc in 2020-07-01 20:59:26 Messager [main-1] [INFO] [SM-T860] RESULT #1: TEST [SetupOnly - testSetupFlow] PASS [screenshots=file:// /tmp/scratchTm8wqJ.scratch/test-packageJ9ckZb/tmp/customer_artifacts_working_directorytD0aTZ/1593636962238/3fda58af-0cf0-4bed-90a4-707eb8f2efdb/report.html | log=file:// /tmp/scratchTm8wqJ.scratch/test-packageJ9ckZb/tmp/customer_artifacts_working_directorytD0aTZ/1593636962238/3fda58af-0cf0-4bed-90a4-707eb8f2efdb/test.log].URL should look like a file url for tmp/scratchTm8wqJ.scratch/test-packageJ9ckZb/tmp/customer_artifacts_working_directorytD0aTZ/1593636962238/3fda58af-0cf0-4bed-90a4-707eb8f2efdb/report.htmlI do not get the reports in the customer artifacts.  I tried adding $WORKING_DIRECTORY in the artifacts section of the test spec and my test spec output shows:chmod: cannot access ‘/tmp/customer_artifacts_working_directorytD0aTZ/*’: Permission deniedHelp???Edited by: hclmobiletests on Jul 1, 2020 2:09 PMedited the urls in the output pointing to the report.html and test.log so they don't get modified (add space between file: // and the directory).Edited by: hclmobiletests on Jul 1, 2020 2:11 PManother attempt to show the file path for the urlFollowComment"

Answer: "0Hi hclmobiletest,I assume you have been following the approach mentioned in the following link. Please double check that.https://aws.amazon.com/blogs/mobile/custom-artifacts-on-aws-device-farm/If your approach is the same, can you share run url for one of the runs so that we can investigate this.CommentShareGuneesh-awsanswered 3 years ago0Yes, that is the approach I was trying to follow.  For example in projects/7448c707-aa1e-4cea-8e9e-47b516e8902b/runs/6ac81cff-786a-48d9-a926-4eaeac0f1320 , in the test spec, I do a echo "project_report_directory=$WORKING_DIRECTORY" >> target/classes/_config.properties which ended up setting it to. project_report_directory=/tmp/customer_artifacts_working_directoryTGBaBw.  At the end of the run, my framework told me that the output had been created (test spec log line 240), but the path is /tmp/scratchOfaEGq.scratch/test-packageAiHwxW/tmp/customer_artifacts_working_directoryTGBaBw/.CommentSharehclmobiletestsanswered 3 years ago0It seems the framework is getting the base directory from System.getProperty("user.dir") and then appending the path which I was giving $WORKING_DIRECTORY.  That is the issue.  I will try to pass user.dir to testNG in the java command line and see if that will resolve this.CommentSharehclmobiletestsanswered 3 years ago0The problem is solved.  I just need to pass -Duser.dir=$DEVICEFARM_LOG_DIR on the java command line so that the framework puts its screenshots and report content under the Log dir and it is finally getting collected with the testng result.CommentSharehclmobiletestsanswered 3 years ago"


Question: Amazon ECR Enhanced scanning

"I have enabled Enhanced scanning in the private registry by clicking on Scanning - NewStep 1:Edit Selected Enhanced scanning by selecting the check box of Continuously scan all repositories.Step 2:Amazon Inspector of V2 has been enabled, and also a cloud watch event rule have been created automatically.Step 3:Created a new repo and then pushed an image.Step 4:Then I am able to see the Amazon repository  in Amazon inspector.Step 5:I am not able to find the findings generated by inspector after the scan.It is always showing Scan status: ACTIVE but no finding getting generated.I am able to see Amazon inspector sending events to Amazon event bridge for which the rule has been created when we enabled the enhanced scanning. I saw it is in Cloud Trail.Few things to consider, when set the scanning control to Basic and If I  perform the scan manually then I am able to find the findings with respect to the image pushed. (This is not linked to Amazon inspector)FollowComment"

Answer: "1Hi,Amazon Inspector uses AWS Identity and Access Management (IAM) service-linked roles. A service-linked role is a unique type of IAM role that is linked directly to Amazon Inspector. Service-linked roles are predefined by Amazon Inspector and include all the permissions that the service requires to call other AWS services on your behalf.Amazon Inspector uses the service-linked role named AWSServiceRoleForAmazonInspector2refer- https://docs.aws.amazon.com/inspector/latest/user/using-service-linked-roles.htmlCommentSharelearn2skillsanswered a year agoAWS-User-7183347 a year agoBut this is not something, I am looking at.As you have conveyed service-linked role named AWSServiceRoleForAmazonInspector2 gets created when I enable enhanced scanning in Amazon ECR.The scan is not getting completed, instead of that, it shows Scan status is active, but also no findings getting generated. Whereas when I stop enhanced scan do a manual scan, the findings are generated as expected in Amazon ECR.Share0I had a similar problem with Inspector v2 not scanning ECR repos after it was first set up shortly after re:Invent.  I opened a support case on it and they found that a race condition could occur back then that is fixed now.  There was a workaround to get it going for my account.  The workaround was to got to ECR and disable continuous scanning, save it, wait a minute, then re-enable continuous scanning and save that.   Shortly after that ECR repos were producing findings.  You might want to give that a shot.CommentShareklarsonanswered a year agofpg a year agowe still have this issue and the workaround here helped. many thanks :)Share"


Question: Amazon Login not working for AWS Skill Builder

"https://explore.skillbuilder.aws/learn?cta=dt_topbannerWhen I try and log in to AWS Skill Builder with my Amazon account (that I use successfully to log in to my console) I repeatedly get the message "There was a problem     Your password is incorrect". I have tried resetting my password but I continue to get this error, although I can consistently login to https://signin.aws.amazon.com.Thanks for any help/direction you can give.FollowCommentShivam a month agoI'm able to login but when I try to opt for monthly subscription, i get 403 Forbidden error on the siteShare"

Answer: "5Hi,I have successfully logged in using my regular Amazon account, but every time I try to enroll in a course I get a message saying "Something went wrong".CommentShareAnasanswered a month agorePost-User-8444311 a month agoI have the same problem. Even tried incognito to see if it was cache or cookies but I just can't login to the skill builder.Share5hi , im getting same problems here , im logging with my amazon.com account but when i try to logging i got "something worng " isnt the password , isnt the wrong accountCommentShareSebastian Ulloaanswered a month ago2Update!!For anyone who is facing the same issue, I contacted the AWS support team regarding this issue and they replied with the below message. Apparently, they face a technical problem."At this time, AWS Skill Builder is not accepting new account creation or subscriptions. Customers with Team Subscriptions may experience SSO errors.Our technical teams are working to resolve this issue. Continue to check skillbuilder.aws for more information. Additional training can be accessed through the Training Events page, which has hundreds of hours of free content, including Twitch-based trainings, live and on-demand webinars, exam preparation resources, and more.We anticipate your kind understanding in this matter."CommentShareAnasanswered a month ago0This is the console error if it helps.403 in the networking tab.This is only a guess but it might be an issue with the -> sec-fetch-mode: no-corsmain-es2015.50ddf842b33ba829145e.js:1  ERROR TypeError: Cannot read properties of undefined (reading 'inputElement')at main-es2015.50ddf842b33ba829145e.js:1:17799227at i.<computed> (polyfills-es2015.fb27b21b92afafa619a3.js:1:79719)at u.invokeTask (polyfills-es2015.fb27b21b92afafa619a3.js:1:54821)at Object.onInvokeTask (main-es2015.50ddf842b33ba829145e.js:1:6771829)at u.invokeTask (polyfills-es2015.fb27b21b92afafa619a3.js:1:54742)at c.runTask (polyfills-es2015.fb27b21b92afafa619a3.js:1:50230)at invokeTask (polyfills-es2015.fb27b21b92afafa619a3.js:1:55871)at invoke (polyfills-es2015.fb27b21b92afafa619a3.js:1:55773)at n.args.<computed> (polyfills-es2015.fb27b21b92afafa619a3.js:1:79432)CommentSharepgourdetanswered a month agopgourdet a month agoBelow we see a part of the MDN web docs for sec-fetch-mode: no-cors and is the reason I believe this may be the issue. Following reasoning 403 request is valid and was received but was rejected. Most likely due to a missing element that normally would have come after OAuth, which requires the JS to access an element in response and append to the SSO redirect (MAYBE).In addition, JavaScript may not access any properties of the resulting Response. This ensures that ServiceWorkers do not affect the semantics of the Web and prevents security and privacy issues arising from leaking data across domains.Sharepgourdet a month agoI see the new tag good job everyone. sec-fetch-mode: navigateShare0Now, I can sign in to AWS skill builder, so the issue seems to have been resolved!CommentSharekei-pumpkinanswered a month ago0I still can not login :(Is it advisable for me to create a new Amazon account since it's still not functioning properly?I recall being able to utilize Skillbuilder in the past, but if I create a new account, I'll have to begin from the start, losing all of my progress.CommentShareMueschaanswered a month ago-3Accepted AnswerThe credentials you use to sign into AWS Skill Builder are the username and password you use for your Amazon.com account, not your AWS management console (aws.amazon.com) login credentials. Try again using your Amazon.com account, the account you use for purchasing products from Amazon.com.CommentShareAWS-User-4728013answered a year ago"


Question: How to use AWS Batch with AWS embedded metrics?

"Hi,I would like to use the "embedded metrics format" feature in AWS Batch jobs with managed compute environments. In the documentation it says that I should install the CloudWatch agent on the ECS host, however I do not have access to the specified configurations (e.g. port mappings) since it is Batch who manages the environment. There are also multiple docker containers running the multiple instances of my job on the same host.So, from my docker image I can do:MetricsLogger metrics = new MetricsLogger();metrics.putDimensions(DimensionSet.of("Service", "Aggregator"));metrics.putMetric("ProcessingLatency", 100, Unit.MILLISECONDS);metrics.putProperty("RequestId", "422b1569-16f6-4a03-b8f0-fe3fd9b100f8");metrics.flush();However I'm having trouble configuring the CW agent to read these metrics/logs in a Batch managed environment.So I have two questions:Is it possible to use AWS Batch with managed compute environments and also use the AWS Embedded Metrics feature?If yes, is there an example somewhere with how?Thanks!FollowComment"


Question: Experiencing latency on DynamoDB due to CredentialsRequestTime

"Hi everyone,I have an ECS cluster running and one of service container hits DynamoDB with GETITEM request. Most of these requests get completed within 10 ms but every 30 minutes or so I can see latency going over 2+ seconds. I am using Java SDK to hit the DynamoDB. Intially I thought that this might happen due to connections creation latency so I am using keep alive connection now but still facing same issue. To get more depth I started listening to request metrics and pushed them on to Kibana. Below is a sample request metric :{  "HttpRequestTime": 158.081,  "RequestSigningTime": 15.361,  "CredentialsRequestTime": 2184.899,  "ResponseProcessingTime": 17.205,  "totalTime": 2707.05,  "responseCode": 200,  "ClientExecuteTime": 2707.003,  "consistentRead": false,  "RequestMarshallTime": 198.897,  "ApiCallLatency": 242.628,  "HttpClientReceiveResponseTime": 22.391,  "HttpClientSendRequestTime": 2.166}As you can see that totalTime taken by GETITEM request is 2707 and CredentialsRequestTime is taking most of the time. So how can I minimize this?FollowComment"

Answer: "1Hi,Ideally if you application is latency sensitive then you should not allow it to wait for that length of time. Given that most of your requests are sub 10ms, it doesn't make sense for your client wait for almost 3000ms.Firstly you should enable SDK Metrics or AWS X-Ray to understand if the increase in latency is caused by DynamoDB. If so, this is where tuning the client comes into play, you should fail-fast and retry: This Blog is very useful to grasp the concept of client tuning. Your configuration will ultimately depend on your application needs, but reducing the time you wait on a response will greatly reduce the outlier issue you are experiencing.CommentShareEXPERTLeeroy Hannigananswered a year agoGhostFoxGod a year agoSo I finally managed to fix this by extending AWSCredentialsProvider class and creating a custom credentials provider. I simply keep credentials cached and refresh them every 5 minutes.SharerePost-User-4882314 a year ago@GhostFoxGod Could you please share your code snippet/repo for maintaining the credentials with required dependency.Share"


Question: "Network interfaces is in use, cannot be deleted"

"Hi all, I was doing a Udemy course to work with EKS.  After I finished, I deleted EC2 instances created by EKS, removed EKS cluster. Deleted elastic IP and load balancer. Now I want to clean up everything else. However, I can't delete Security groups, VPSc, Subnets, Network ACLs. Most of them say that I have associated networks interfaces. I try to delete the interfaces with ui and console but it says that they are in use. Detach also doesn't work and I have already released elastic IPs. I also went to ColoudFormation and tried to remove the stack there. What else I'm missing??FollowComment"

Answer: "0Hi!Please check out the documentation of Elastic Network Interface, there is a part regarding detaching and deletion of the resource:https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-eni.htmlAlso please make sure to check out the "Description" field of ENI, you will find there information what this ENI was used for, for example:DMS: "DMSNetworkInterface"ElastiCache: "ElastiCache node-name"ALB: "ELB app/alb-name/auto-id"NLB: "ELB net/nlb-name/auto-id"Sometimes time may be the issue as well - if you have deleted the load balancers, IPs etc., you might wait a little until ENI updates itself and you should be able to delete it.CommentSharePiotr Blonkowskianswered a year agoAWS-User-5189103 a year agoI tried all of that which mentioned in the guide. I just can't either detach Eni or delete. it says Attachment statusAttached. Network interface status: In-use. In use by what I don't get it as I delete EC2 instancesShare0First of all, if you created the resource using eksctl create cluster, you should attempt cleanup using eksctl delete cluster command.At the minimal you might want to delete the CloudFormation stack, instead of manually delete resources.That said, if the only issue you face as of now is the ENI cannot be detached, you can force detachment using the --force option of the detach-network-interface CLI command, refer here.Lastly, you should provide feedback to Udemy course instructor for better clean up instructions. And AWS has it's free (you still need to pay for the resource usage) workshops here.CommentShareJason_Sanswered a year agoAWS-User-5189103 a year agoAbout 1st: I deleted a cluster with AWS interface. Now I can't use that command as I don't know the cluster nameI tried to remove CloudFormation stack as mentioned I mentioned. It says status: DELETE_FAILED. "The vpc 'vpc-0270611f0423cb589' has dependencies and cannot be deleted. (Service: AmazonEC2; Status Code: 400; Error Code: DependencyViolation; Request ID: 9e166853-916c-4d69-be50-60343bdecc9f; Proxy: null) The subnet 'subnet-018b2d03759cc821e' has dependencies and cannot be deleted"I tried now to detach with CLI as you advised but it give an error as well(  :: An error occurred (OperationNotPermitted) when calling the DetachNetworkInterface operation: You are not allowed to manage 'ela-attach' attachments.About the last one, will as I tried of this I am at least 1 week try to clean up. I wrote to Amazon but they say they don't provide tech support on a free plan. He sent me a few links I tried all in documentation, nothing has helped meShare0The easy path for this is, go in the console to EC2, then to Elastic Network Interfaces, and next to every interface you will find which service is using it, so delete the service and the ENI will fly away.Best,CommentShareJuanEn_Ganswered a year agoAWS-User-5189103 a year agoSure I tried it. I mentioned it my question. It says: "The network interface can't be deleted. Network interface is currently in use."Share"


Question: Cloudwatch to Firehose problem

"Hello!,Im facing some issue while trying to stream data from cloudwatch to opensearch using firehose as middleware, the message that is giving me Opensearch, after running the transformation Lambda is:Check your function and make sure the output is in required format. In addition to that, make sure the processed records contain valid result status of Dropped, Ok, or ProcessingFailedbut my lambda is returning correctly the expected structure for the transformation:{'records': [{'recordId': '49636899004605693948429040836377972132019587527722663938000000', 'result': 'Ok', 'data': '...'}]}Actually I'm using python for the transformation Lambda recordData = {            'recordId': recordIdD,            'result': 'Ok',            'data': base64.b64encode(dataToSend).decode("utf8")        }Any advice about this issue to make the pipeline work?Thanks in advanceFollowComment"

Answer: "0I also same problem.I used 'Process CloudWatch logs sent to Kinesis Firehose' Blue Print.It problem seems when record[n].data is multi JSON logs.BluePrint code joins multi JSON logs to one encoded data.After that, the following error occurs.{"error":{"root_cause":[{"type":"illegal_argument_exception","reason":"Malformed action/metadata line [3], expected one of [create, delete, index, update] but found [event_timestamp]"}],"type":"illegal_argument_exception","reason":"Malformed action/metadata line [3], expected one of [create, delete, index, update] but found [event_timestamp]"},"status":400}Kinesis can't process multi json data in one record?CommentSharessyunanswered a month ago"


Question: Running .Net Core 6 on CodeBuild throws SDK not supported error

"I'm trying to build an infrastructure using CodePipeline and CodeBuild. I've a .NET project with targetFramework set as .Net Core 6. When the CodeBuild process triggers the build, it throws an error/root/.dotnet/sdk/5.0.202/Sdks/Microsoft.NET.Sdk/targets/Microsoft.NET.TargetFrameworkInference.targets(141,5): error NETSDK1045: The current .NET SDK does not support targeting .NET 6.0. Either target .NET 5.0 or lower, or use a version of the .NET SDK that supports .NET 6.0.If I switch the targetFramework to .Net Core 3.1 or 5, it works fine. Has anyone faced this issue before? If yes, how did they overcome it?FollowComment"

Answer: "0After doing some digging and talking to couple of folks, I realized that CodeBuild doesn't support .Net Core 6 yet. But there is a work around by explicitly installing the latest SDKs on the container as part of your infrastructure setup.I added the following command to my synth workflow which installed the latest SDKs on the docker."/usr/local/bin/dotnet-install.sh --channel LTS"There are different ways to use it depending on your use case. I've added in my C# code as a Install Command when building the pipeline        private static readonly string[] InstallCommands =        {            "/usr/local/bin/dotnet-install.sh --channel LTS"         }; var synth = new ShellStep("Synth",                new ShellStepProps                {                    InstallCommands = InstallCommands,                });            var pipeline = new CodePipeline(this, "Pipeline", new CodePipelineProps { Synth = synth });I believe it can also be added to buildspec.yml file. There's an example in following link.Reference: https://github.com/aws/aws-codebuild-docker-images/issues/497When to expect official .Net Core 6 support on Code BuildI believe the support for .Net Core 6 with CodeBuild will be available in the near future. Found some additional resource for Core 6 support on different AWS Services.CommentShareChiefanswered a year ago"


Question: bgp status stuck in active

Im trying to set up a direct connect and configure a bgp session over a private vif terminated on a DX gateway. I can ping AWS point-to-point ip address but bgp session doesnt get established and is stuck in active state. No firewalls or acls are applied on the CGW. Another thing to point out is that when i try to telent from the CGW to amazon end on port 179 i get no response. Can you please provide some insights? I'm running CISCO ASR 1002xFollowComment

Answer: "1Accepted AnswerFrom the logs, it's clear that the BGP peers aren't agreeing on the BGP capability that is negotiated during BGP Open Message, particularly the sub-AFI.Can you check at the CGW what the AFI/Sub-AFI family is? It should be Unicast-IPv4 and this is defined under the BGP process at your CGW.You can share the output of the command:show run | se router bgpCommentSharemmlanswered 5 months agoEXPERTTushar_Jreviewed 5 months agoJess 5 months agoThanks mml, that solved the issue. We had the wrong address family configured (VPN4). We changed it to unicast IPV4 as you said and BGP is up now.Share1That's great, as for your question on why you don't see a response when you telnet to AWS endpoint on port 179.Remember we use TCP MD5 Signature to encrypt the BGP session and as such, when you try to send a telnet on port 179, the TCP SYN packet doesn't have the MD5 option, and based on TCP protocol rules, it won't respond nor send a TCP RST simply to as a protection mechanism, therefore, you feel the far end isn't responsive. I hope that answers your question.CommentSharemmlanswered 5 months agoJess 5 months agoThanks mml for the explanation, that cleared my doubts. Cheers!Share0Hi, can you post the output of the command "show logs" on your CGW?Also can you run packets capture to see what's happening?You can do so in ASR platform by running these commands:monitor capture capture-name interface interface-name bothmonitor capture capture-name start###keep it running for a couple of minutes and then run:monitor capture capture-name stopmonitor capture capture-name export file-location/file-nameCommentSharemmlanswered 5 months agoJess 5 months ago*Dec  26 04:21:04.042: %BGP-5-ADJCHANGE: neighbor 169.254.254.25 active Down AFI/SAFI not supported*Dec  26 04:21:16.330: %BGP_SESSION-5-ADJCHANGE: neighbor 169.254.254.25 NSAP Unicast topology base removed from session  Capability changed*Dec  26 04:21:16.330: %BGP-3-NOTIFICATION: received from neighbor 169.254.254.25 active 2/7 (unsupported/disjoint capability)*Dec  26 04:21:16.330: %BGP-5-NBR_RESET: Neighbor 169.254.254.25 active reset (BGP Notification received)*Dec  26 04:21:16.334: %BGP-5-ADJCHANGE: neighbor 169.254.254.25 active Down AFI/SAFI not supportedShare0Hello,Check if the DX connection is UP or not. Post that, check if the DX-VIF is in available state.Once verified, there must be connectivity between the BGP peer IPs on both your end and the AWS end.Basically, the TCP connection is not getting established in this case.Check and verify the configuration on your Direct Connect routerThe IP addresses of the local and remote BGP peers, local and remote BGP Autonomous System Numbers (ASN), and the BGP MD5 password must be configured with the downloaded Direct Connect configuration file from the Direct Connect console.Verify that the Direct Connect router or any other device is not blocking ingress or egress from TCP port 179 and other appropriate ephemeral ports.BGP peers can't be more than one hop away from each other because external BGP (EBGP) multi-hop is disabled on the AWS end.If this does not help, to get the connection checked internally, you might have to open up a case with the Direct connect team using your account and support plan.Hope this helps !!CommentShareSUPPORT ENGINEERAWS-User-Chiraganswered 5 months agoJess 5 months agoIt seems that these parameters that you mentioned are not related to the issue as we verified them.Share"


Question: How to get used VCPU's by calling API

"I would like to call the API to get back the number of VCPU's used by all running instances in the region, so I can run some preflight checks before I create new instances, to see if there are enough VCPU's available, without increasing the quota.Is there a way to do that, instead of iterating all vm instances and getting their used VCPU's?Thanks!FollowComment"

Answer: "0I think you can find the code to do this in this solution: AWS Limit Monitor.CommentShareEXPERTkentradanswered a year agoAWS-User-8467687 a year agoCould not find it. Could  you please be more specific?I have also found that I can do:'client.servicequotasClient.GetServiceQuota(ctx, &servicequotas.GetServiceQuotaInput{QuotaCode: aws.String(quotaCode), ServiceCode: aws.String(serviceCode)})'However, the returned quota value, is the current limit. But not the utilization, which I need.Share"


Question: "New to lightsail, domainname"

"Hi!I put up an wordpress multisite lightsail instance with an static ip, and configured my external dns-service to link my domain to my new server, but when I go to my site using my domainname the addressbar in my browser changes to http://xx.xx.xxx.xx.xip.io/wp-signup.php?new=www.yyyyyy.yy.Sorry, I'm new to this, but I would like to see only my domainname in the addressbar, and not the servers IP...FollowComment"

Answer: "0Accepted AnswerHi,Thank you for using Lightsail.Similar question is answered in a previous thread. Please refer this: https://forums.aws.amazon.com/thread.jspa?messageID=894516I hope this helps!CommentShareAWS-User-6182943answered 4 years ago"


Question: Error launching POD in EKS from MWAA

We are trying to launch a POD in EKS from MWAA. Our EKS is authenticated using aws-iam-authenticator in kube_config.yaml. But MWAA shows below error in the MWAA logkubernetes.config.config_exception.ConfigException: Invalid kube-config file. No configuration found.MWAA Environment ARN or Name: arn:axxxxxx:environment/airflow-demoRegion: us-east-1It looks like the DAG is unable to read the config file stored in S3. I am not sure whether its related to using the kube_config.yaml from S3 or using aws-iam-authenticator. We referred below writeup except the kubeconfig authentication part.https://blog.beachgeek.co.uk/working-with-amazon-eks-and-amazon-managed-workflows-for-apache-airflow-v2x/Can someone help?Thanks--VenkyFollowComment

Answer: "0Found the root cause. Looks like below are 2 mandatory requirements for thisThe location of the file in the DAG must be /usr/local/airflow/dags/kube_config.yamlName of the kube config yaml must be kube_config.yamlWe specified s3 folder location in the DAG and it didn't pick up. Looks like MWAA mounts the dags folder in /usr/local/airflow. After fixing this, kube_config seems be to getting loaded.Now we are running into below error[2023-01-26, 16:31:57 UTC] {{kubernetes_pod.py:675}} INFO - Building pod mwaa-pod-test-c7lcxfvu with labels: {'dag_id': 'kubernetes_pod_example', 'task_id': 'pod-task', 'run_id': 'manual__2023-01-26T163152.7629780000-7df477b2b', 'kubernetes_pod_operator': 'True', 'try_number': '1'}[2023-01-26, 16:31:57 UTC] {{kube_config.py:517}} ERROR - [Errno 13] Permission denied: 'aws-iam-authenticator'[2023-01-26, 16:31:57 UTC] {{kubernetes_pod.py:730}} ERROR - 'NoneType' object has no attribute 'metadata'Do we need install aws-iam-authenticator in MWAA environment? If so, how to do that?CommentSharerePost-User-8027811answered 4 months ago"


Question: Mentorship App for Intercultural Development

I am building an app to connect global intercultural development mentors and learners in the workplace. Do I start with Amazon CloudFront?FollowComment

Answer: "0CloudFront is a global content delivery network service so there is a high chance that it will assist you here.However, there's a lot more to an application than delivering the content (even though that's important). I'd suggest reaching out to your local AWS Solutions Architect and having a conversation about how you can design, build and operate your application on AWS.CommentShareEXPERTBrettski-AWSanswered a year ago0Cloudfront is really good if you wanna build an app to connect global intercultural development mentors and learners in the workplace.There are few notable features that can be used:CloudFront points of presence (also known as POPs or edge locations) make sure that popular content can be served quickly to your viewers. CloudFront also has regional edge caches that bring more of your content closer to your viewers, even when the content is not popular enough to stay at a POP, to help improve performance for that content.It provides regional caches, Regional edge caches are CloudFront locations that are deployed globally, close to your viewers. They’re located between your origin server and the POPs—global edge locations that serve content directly to viewers.There are more CDN services to start with, If you want to explore you can check with: https://www.gartner.com/reviews/market/global-cdn/vendor/amazon-web-services/product/cloudfront-cdn/alternativesCommentShareAnirban Chakrabortyanswered 5 months ago"


Question: Windows Instance cannot keep time correctly.

"Hello,I have an application that is timing critical, but for some reason, the Windows Server (t3.small) that I started, is having trouble keeping basic time.I have synced the OS with internet time multiple times. Immediately after syncing, the time (accurate to the seconds) would be correct. But later on in the day, when I check back, it would always be off again. Most of the time, being 3 to 5 seconds faster than the actual present time (There was one instance it was actually slower by around 3 seconds, but most of the time, it would be faster).I have re-synced with internet time multiple times now, and it has not solved the problem. I have scheduled tasks that are timing critical, and must resolve this issue.Thank you.FollowComment"

Answer: "0Accepted AnswerAWS recommend that configure your instance to use the Amazon Time Sync Service also according to article,Windows AMIs use the Amazon Time Sync Service by default since 2018.CommentShareawshakananswered 3 years ago0You can use Amazon Time Sync Service. Natively accessible from all ec2 instances.https://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/windows-set-time.htmlCommentShareawshakananswered 3 years ago0I will look into it, but why is this necessary? Is there something that is preventing it from keeping proper time?Would this help the system time being kept accurate? Because the scheduled tasks are triggered by window's internal scheduler, which is based on system time.CommentShareXresanswered 3 years ago0It has been 2 days since I implemented Amazon Time Sync, and so far, the system is keeping much better time. However, occasionally it would still appear to be off by 1 second, but it this is a major improvement over what it was (3 to 5 seconds).All new AMIs should already use Amazon Time Sync by default, but my instance was built from a saved image I had from 2 years ago, this is probably the reason why my system does not have it set as default.I will observe the system for an additional couple of days, and if things stay within parameters, I will mark your response as the correct answer.Thank you.CommentShareXresanswered 3 years ago"


Question: AWS Site to site vpn connection with synology NAS

Has anyone successfully set up a site-to-site VPN connection to Amazon VPC with a Synology NAS?FollowComment

Answer: 0Hi I believe the S2S VPN feature is only available to Synology router products and not the NAS line.You can check these links for more details:https://www.youtube.com/watch?v=BbdtKuD7R9Qhttps://kb.synology.com/en-id/DSM/tutorial/How_do_I_set_up_my_Synology_NAS_as_a_VPN_serverhttps://www.synology.com/en-au/products/Site_to_Site_VPN_LicenseCommentShareEXPERTSheng Chenanswered a year ago


Question: Cloudformation Templates

Is there a collection of CF templates that can be used from a community of AWS users? Like a repo of collab from others with CF templates?FollowComment

Answer: 1You can consider reviewing the following https://aws.amazon.com/cloudformation/resources/templates/ which has followingTemplates & Snippets by AWS ServiceReference ImplementationsApplication FrameworksSample SolutionsExperimental and Community Samples - Browse AWS Labs for experimental AWS CloudFormation templates and other projects contributed by AWS employees and partners.CommentShareEXPERTAWS-User-Nitinanswered 7 months agoEXPERTIndranil Banerjee AWSreviewed 7 months ago


Question: ERROR 2002 (HY000): Can't connect to local server through socket '/opt/bitnami/mariadb/tmp/mysql.sock' (111)

"My website has a problem, Error establishing a database connectionI fail to access to/wp-admin/maint/repair.phpSo tried to Recover A MariaDB Database.But there are Error message like this.ERROR 2002 (HY000): Can't connect to local server through socket '/opt/bitnami/mariadb/tmp/mysql.sock' (111)I appreciat you guyts if give some advice to solve the database problems[sql log]2022-09-15 11:51:53 0 [Note] InnoDB: Compressed tables use zlib 1.2.112022-09-15 11:51:53 0 [Note] InnoDB: Number of pools: 12022-09-15 11:51:53 0 [Note] InnoDB: Using crc32 + pclmulqdq instructions2022-09-15 11:51:53 0 [Note] InnoDB: Using Linux native AIO2022-09-15 11:51:53 0 [Note] InnoDB: Initializing buffer pool, total size = 2147483648, chunk size = 1342177282022-09-15 11:51:53 0 [Note] InnoDB: Completed initialization of buffer pool2022-09-15 11:51:53 0 [Note] InnoDB: Starting crash recovery from checkpoint LSN=3745665234,37475302772022-09-15 11:51:53 0 [ERROR] InnoDB: Missing FILE_CREATE, FILE_DELETE or FILE_MODIFY before FILE_CHECKPOINT for tablespace 5412022-09-15 11:51:53 0 [ERROR] InnoDB: Plugin initialization aborted with error Data structure corruption2022-09-15 11:51:53 0 [Note] InnoDB: Starting shutdown...2022-09-15 11:51:53 0 [ERROR] Plugin 'InnoDB' init function returned error.2022-09-15 11:51:53 0 [ERROR] Plugin 'InnoDB' registration as a STORAGE ENGINE failed.2022-09-15 11:51:53 0 [Note] Plugin 'FEEDBACK' is disabled.2022-09-15 11:51:53 0 [ERROR] Unknown/unsupported storage engine: InnoDB2022-09-15 11:51:53 0 [ERROR] AbortingFollowComment"

Answer: "1Hello,Can you try the below mentioned approaches:Firstly check if MySQL or MariaDB server is started.Checkservice mysql statusSpecify 127.0.0.1 as the host instead of localhost. That is, mysql -h 127.0.0.1 -u root instead of mysql -h localhost -u root. If you omit the host (mysql -u root), the MySQL client will implicitly use localhost.For SingleStoreDB Cloud, change the socket value in the /etc/mysql/my.cnf file to the location of your SingleStoreDB Cloud socket file.This should help resolve the issue.CommentShareSUPPORT ENGINEERAWS-User-Chiraganswered 9 months agoadshofar 9 months agoI tried to check as below but it failed...mysqladmin -u root -p pingmysqladmin: connect to server at 'localhost' failederror: 'Can't connect to local server through socket '/opt/bitnami/mariadb/tmp/mysql.sock' (111)'Check that mariadbd is running and that the socket: '/opt/bitnami/mariadb/tmp/mysql.sock' exists!Share"


Question: Amazon ElasticSearch (OpenSearch) Advanced Configuration

"In this doc article, I saw only a couple of settings can be adjusted via the advancedOptions param (we're still on ES OSS, version 7.10):https://docs.aws.amazon.com/opensearch-service/latest/developerguide/supported-operations.html#version_7_10So, my question is: can users adjust other settings? The particular setting I'm interested in is the indices.memory.index_buffer_size.A quick google search gave me the impression that other settings cannot be adjusted, except maybe if the AWS Support Team is contacted, and then the new settings can be applied by AWS.Would like to know more on this.Thanks!FollowComment"

Answer: 1Accepted AnswerNew settings cannot be set by the users as they might lead to cluster instability. You will have to reach out to the AWS Support team to get them updated.CommentSharePGanswered 5 months agoAdrian 5 months agoThank you!Share


Question: Upload please Rim Light Shader effect file for Lumberyard!

Upload please Rim Light Shader effect file !!!!Shader effect rim light please!!!!Follow

Answer:
"0Accepted AnswerREMOVEDUPLOADDid this yesterday you decide the color and the contrast the dissolved box with holes in the shadows is just another shader modification I did.As soon as I figure out how to design some additional flags to fine tune what effect it has to interact with I may try to contribute it back even if on the forum is always hard to do.SharerePost-User-7621041answered 6 years ago0Hi @REDACTEDUSERSharerePost-User-8353690answered 6 years ago0How additional flags? glowoutline (rim light) shader please!!!!SharerePost-User-5482715answered 6 years ago0Add a universal common rim light shader even if the material is different for each modeling !!!!Shader effect rim light please !!!!For example,in all other material's .glsl ( shader source )#include "effect_shader.h" <-include effects header files in each and every material shader// rim light effectif %RIMLIGHTcolor = function():endifLumberyard MaterialHumanSkin shader - head, bodyillum shader - item ( weapon, shield, cloth )body, head, cloth = material is different for each modelingrim lighting = all support ( body, head, cloth ) please !!!!effect shader - effect header file for all other shader material support ( add please !!!! )SharerePost-User-5482715answered 5 years ago0Hey @REDACTEDUSERSharerePost-User-5738838answered 5 years ago0Purpose of effect shaderTurns the target effect shader on or off during the action event time (attack or defense)..real time toggle target's effect shader.rim light color change support please..PS.The following conditions must be met:Add generic common effects shader even if the material is different for each modeling!SharerePost-User-5482715answered 5 years ago0Hi @REDACTEDUSERI had a few questions about your implementationwhere exactly you are applying the rim light ?I currently testing my impl of the RimLight in CommonZpass.cfi file exactly after ApplyVegetationTerrainColor (line 644)ApplyVegetationTerrainColor(IN, cAlbedo, cReflectance);#if %RIM_LIGHTApplyRimLightColor(IN, cAlbedo, attribs.NormalWorld);#endif
how did you get normals in view space for this ? can you post your code snippets here?SharerePost-User-2514050answered 4 years ago0I think now I achieved this effect too, here is Hope with rimlight(face and body), also here tree, sphere and capsule with rimlight effectRimLightREMOVEDUPLOADREMOVEDUPLOADprobably I'm upload the shader and add link here soonSharerePost-User-2514050answered 4 years ago0Hi! you could grab shader from here, or see all changes in commits. https://github.com/lastmoonbeam/lumberyard_custom_shadersSharerePost-User-2514050answered 4 years ago0@REDACTEDUSERMany thanks for the assist. Appreciate it!SharerePost-User-2743711answered 4 years ago0Hi @fluffy any chance you could share the method you used for this effect? Very interested to knowSharerePost-User-2743711answered 4 years ago"


Question: Reg: vCPU capacity limit in free tier(t2-micro)

I am unable to install second EC2- instance while 1st ec2 instance is running. how can I run 2 ec2 instances run at a time with  same  AMI (linux) in same region in free tier(t2-micro)?I am not choosing any AZ particularly. I am giving it optional so that it can create any AZ which is available at the time of creation.I understand the problem is with vCPU capacity limit in t2-micro which comes under free-tier eligible.since yesterday Iam getting error in launching second ec2 instance as follows"you have requested more vCPU capacity than your current vCPU limit of 1 allows for the instance bucket that the specified instance belongs to. request an adjustment to this limit"what does this error mean?if I adjust limit is it chargable?where to check the vCPU capacity?If I want to launch 3 to 4 instances in free tier without exceeding 750 limit is possible or not?what kind of AMI's I need to choose  to launch and run 3 instances at atime?please guide.FollowComment

Answer: "0are you using a "Free tier eligible" EC2 instance? and if not pls check. (for more: https://aws.amazon.com/free). For checking your free tier usage: https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/tracking-free-tier-usage.html). furthermore, for increasing the limit, raise a case in support. they will increase it as per your requirements. and in the free tier always use t1.micro and t2.micro.CommentShareVISIanswered 10 months ago0Can you also check the vCPU Limit under the EC2 Instances page.When you select EC2 service, on the left panel (top most section), you would see an option 'Limits'. When you are on Limits page, use the filter option to choose 'Running Instances', this will give you a view of eligible vCPUs by instance family, that can be used at any given time.To make a request to increase the Limit, select the item probably this 'Running On-Demand All Standard (A, C, D, H, I, M, R, T, Z) instances' if you are looking for 't' family, use the button 'Request Limit Increase' on the top right corner, which leads you to a form to request for limit increase.e.g.https://us-east-1.console.aws.amazon.com/ec2/v2/home?region=us-east-1#Limits:To your other questions -If you are within the 750 hour limit across instances, there will not be additional charges for launching multiple instances or increasing vCPU limits.It is possible to launch as many instances as you like within the free tier, with in the predefined limits. 3 or 4 definitely yes.You can use any AMI that is marked as 'Free Tier Eligible' in the section 'Application and OS Images (Amazon Machine Image)' of Instance Launch Page. This section in the new UI has 2 tabs 'Recents' and 'Quick Start'. Tab 'Quick Start' would display the 'Free Tier Eligible' label against the AMI name.An example Free Tier AMI -Amazon Linux 2 Kernel 5.10 AMI 2.0.20220606.1 x86_64 HVM gp2AMI ID : ami-0cff7528ff583bf9aCommentShareRajesh Sanswered 10 months ago"


Question: "Cognito - Invalidate access token, when we having multiple access token in a short time"

"We can create an access token and refresh the token using the Cognito user pool (assume the access token timeout is set to 30 Minutes).Usecase: Generated token two times one after another (T1, T2) as per the Cognito user pool system, both are valid for the next 30 minutes from the created time.Output: Both tokens are valid for the next 30 minutes.Expected Behavior: Once T2 is created, T1 must be an invalid token / expired.Note: You can create  T2 from the refresh token or else you can create a new access and refresh token, both having the same result as mentioned above.How we can manage the tokenization approach in Cognito to overcome this issue? Is there any way or feature in Cognito to achieve this feature?FollowComment"


Question: duplicate with join 2 table

"Hi everyone,I have a problem when join two table. Both of them have format 2 columns is 'nid'; 'tid'When I join them I have some unexpected datathe first table I havenid | tid4    |   05    |   5the second table I havenid  | tid4    |  75    |  56    |  5The resultnid | tid0    |  4  ( THIS IS THE ONE UNEXPECTED)4    |  04    | 75   |  55   |  56   |  5My code isSELECT * FROM(SELECTid_city_test.nid,id_city_test.tidFROMid_city_test)AS aUNIONSELECT * FROM(SELECTid_industry_test.nid ,id_industry_test.tidFROMid_industry_test)AS bCan someone help me.Thanks a lotThangFollowComment"

Answer: 0Magically the problem is solved itself with the previous code this time so I close the topicCommentSharephithang711answered 4 years ago