Question: What is strength of lumberyard compared to Unity or Unreal?

"Whats good points?Have any potential?In this game engine, game dev should use C++ only? or C# provided?Follow"

Answer: "0As far languages go, you can use C++, Lua or visual scripting (called Script Canvas).SharerePost-User-9447706answered 4 years ago0Amazon Lumberyard has peaked my interests way more than any other game engine, because Lumberyard has a some cool systems which are gems, slices, and terrain tools. The gems are very unique because they can be used around all your games, and you don't have to remake them which is the same as slices. With the terrain tool you can use materials to paint onto the terrain which is not allowed in unity and I am not sure about unreal, but Lumberyard is fully free to use and produce games with (excluding the AWS Software) which is very nice as an added feature towards Lumberyards ever growing popularity with every new version that comes with it.SharerePost-User-5598761answered 4 years ago0p.s. Lumberyard has a lot more potential than you might think your just have to work with it. :)SharerePost-User-5598761answered 4 years ago0One of the strengths is from a financial standpoint, it is free & you can either set up your own servers or use AWS & Twich which are top products in their respective industry, instagram used AWS when they started & Twich is industry standard to get gamers to buy games. I have been using this engine for over a month with great results, i just looked deep into the lua api available in the editor & the game examples provided with the engine, it is all there. Now i am looking forward to a release this year. I have a Blender3d pipe with this engine & dumped unity.SharerePost-User-6748027answered 4 years ago"


Question: Is there a way to not change an S3 object's Last-Modified date when copying it to a new bucket?

Can not see the last change on my S3 buket files when I access   html pages why?FollowCommentMaulik_Makadiya a year agoLast Modified is being set automatically by AWS and we can not disable it and it must be showing while viewing thru console.Can you share some more details please if possible :)Share

Answer: "0Hello,You can use S3 Replication feature to retain S3 object’s Last-Modified date when copying to a new S3 bucket where S3 Replication retains all metadata, such as the original object creation time and version IDs. For more details, please refer: Replicating objects - https://docs.aws.amazon.com/AmazonS3/latest/userguide/replication.htmlAmazon S3 automatically updates the last-modified field for object whenever it is created, updated or replaced. You should be able to see it in the S3 console or by using CLI (head-object).Thank you!CommentShareSUPPORT ENGINEERawsprabpawanswered a year ago"


Question: CodePipelines Deploy to ECS

"Hi,I have created a pipline to build and deploy to ECS. However, the pipeline fails at the Staging part with a message"Insufficient permissionsThe provided role does not have sufficient permissions to access ECS"I have tried adding full administrative access to AWS-CodePipeline-Service but its still failing with the same message.What am I missing?FollowComment"

Answer: "0Did you ever find a solution? I'm getting the same error message.What's weird is that I have another pipeline that deploys to ECS without issue. The permissions for the twpipeline's role are essentially identical. So seems like it's a bug on AWS's end..CommentSharebuttersanswered 5 years ago0Unfortunately, no. I'm on eu-west-2 region. I also have a feeling it might be a bug. for some reason, it deployed fine a couple of random times. but generally fails with the ECS role message.CommentShareAmmarRahmananswered 5 years ago0For some reason pipelines started deploying on their own this morning. AWS must have updated something.CommentShareAmmarRahmananswered 5 years ago0I was out of the office last week - sorry for the delayed response.AmmarRahman wrote:For some reason pipelines started deploying on their own this morning. AWS must have updated something.Glad to hear it's sorted for you! Unfortunately I'm still getting this error message in at least one of my pipelines. Would love it if someone from AWS would chime in on this thread as I can't imagine we're the only two customers facing this issue.CommentSharebuttersanswered 5 years ago0I've been trying to debug this for about a week now. I have a cross-account CodePipeline, so I need to specify the roles for each 'action' in CloudFormation (also possible through the CLI). My ECS service also happens to use an EC2 auto-scaling group and a network load balancer.I read through the overly-permissive auto-generated role that the console generated, and discovered it was iam:PassRole that I was missing. It looks like the most relevant policy that includes it is /AmazonEC2ContainerServiceFullAccess, but I think it's kind of overkill. I just included it as an inline policy.Here's the CloudFormation YAML for a cross-account ECS deployment role. It also includes KMS permission for cross-account access and S3 permissions for artifact access. To the best of my knowledge, there are no cross-account CodePipeline ECS examples out there, so I'm including the entire role:edit You know what, screw it. I think it also requires (Start|Stop|Run)Task, (Describe|Register|Deregister)TaskDefinition, ListTaskDefinitions, maybe more. Might as well use ecs:*, so I'm replacing AmazonEC2ContainerServiceRole with AmazonEC2ContainerServiceFullAccess (keeping ...forEC2Role for its ECR permissions).TheRole:  Type: AWS::IAM::Role  Properties:    # You'll need a consistent name for cross-account deployments    RoleName: !Ref EcsDeployRoleName    AssumeRolePolicyDocument:      Version: 2012-10-17      Statement:        - Effect: Allow          Principal:            AWS: !Sub arn:aws:iam::${AccountIdDevo}:root # cross-account            Service: codepipeline.amazonaws.com # same account          Action: sts:AssumeRole   ManagedPolicyArns:     - arn:aws:iam::aws:policy/AmazonEC2ContainerServiceFullAccess     - arn:aws:iam::aws:policy/service-role/AmazonEC2ContainerServiceforEC2Role   Policies:     - PolicyName: PassRole       PolicyDocument:         Version: 2012-10-17         Statement:           - Effect: Allow             Action: iam:PassRole             Resource: '*'     - PolicyName: ArtifactPolicy       PolicyDocument:         Version: 2012-10-17         Statement:           - Effect: Allow             Action:               - s3:GetObject               - s3:GetObjectVersion             Resource: !Sub arn:aws:s3:::${ArtifactBucket}/* # fix parsing :) */           - Effect: Allow             Action: s3:ListBucket             Resource: !Sub arn:aws:s3:::${ArtifactBucket}     - PolicyName: KmsPolicy       PolicyDocument:         Version: 2012-10-17         Statement:           - Effect: Allow             Action:               - kms:Decrypt               - kms:DescribeKey               - kms:Encrypt               - kms:GenerateDataKey               - kms:ReEncrypt             Resource: !Sub arn:aws:kms:${RegionDevo}:${AccountIdDevo}:key/* # fix parsing :) */These CodePipeline error messages are the worst. Why can't they say what they mean?Edited by: markuspeloquin on Feb 5, 2018 11:03 AM(Added a little context to the first paragraph.)Edited by: markuspeloquin on Feb 5, 2018 12:10 PM(Replace AmazonEC2ContainerServiceRole with AmazonEC2ContainerServiceFullAccess)CommentSharemarkuspeloquinanswered 5 years ago0markuspeloquin wrote:... discovered it was iam:PassRole that I was missing.Thank you, ! The iam:PassRole was definitely the missing piece. I added it to my pipeline's role and boom, no more error message and my pipelines are working as expected. Right now I have added{    "Version": "2012-10-17",    "Statement": [        {            "Effect": "Allow",            "Action": "iam:PassRole",            "Resource": "*"        }    ]}but will probably try to narrow down the resource from "*" to whatever role the pipeline is trying to pass.Thanks again for the great tip. AWS really needs to update their docs and/or the mystifying error message.CommentSharebuttersanswered 5 years ago"


Question: Recovering Lost Keys For EC2 FreeBSD13

"Hello All,Yep, I did it. Lost my key pair for an important, (to me),  EC2 server.  Been hacking at it for a few days now. I need help.I am following this guide: -- https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/replacing-lost-key-pair.htmlEverything seems straight forward. It is a well written guide. But when I try to mount the old disk in the new temporary instance, I get an input output error. Using geom list disk, the old disk shows up as nda1 in the temp instance. I have tried mounting using mount /dev/nda1p1 /mnt/temp  I get the error.I have tried using a regular Linux instance but didn't get very far. I was afraid I might mess up my disk. This might be a question better asked in a FreeBSD forum so I'll go looking for one. I am hoping this is a no brainer for somebody out there in the AWS community.Here is the error:root@freebsd:~ # mount /dev/nda1p1 /mnt/tempmount: /dev/nda1p1: Input/output errorThanks for reading this plea for help!John UllomFollowCommentcperciva a year agomount /dev/nda1p1 /mnt/tempThere's your problem.  nda1p1 is the GPT bootfs; and after that comes the UEFI ESP.  You want p3 (assuming you're on x86; if you're on arm then you want p2 since arm doesn't have the GPT bootfs).Share"

Answer: "0cperciva,YOU are my hero!  Thank you!!xoxoxoxoxoxoCommentShareRedboneanswered a year ago0Looks like I wrote my answer in the wrong place before.  Copying it down here for better visibility in case anyone else runs into this problem:mount /dev/nda1p1 /mnt/tempThere's your problem.  nda1p1 is the GPT bootfs; and after that comes the UEFI ESP.  You want p3 (assuming you're on x86; if you're on arm then you want p2 since arm doesn't have the GPT bootfs).CommentSharecpercivaanswered a year ago"


Question: greengrasssdk.stream_manager.exceptions.UnknownFailureException: Broken bit parity

"Hi thereI have some problem with stream manager in ggv1, I can fix this after I reboot the device. However I dont think this is a good solution. Do you have any suggestion where I can look into[2022-04-01T09:19:31.876+11:00][INFO]-imageCamera.py:108,>>> Get frame atm hour:9 - sleep_time:11 s[2022-04-01T09:19:31.876+11:00][INFO]-imageCamera.py:112,>>> Frame size from rtsp: (720, 1280, 3)[2022-04-01T09:19:31.889+11:00][INFO]-imageCamera.py:119,>>> Resized farme: (720, 1280, 3)[2022-04-01T09:19:32.002+11:00][INFO]-imageCamera.py:144, >>>>> realite-data-image Sleep time: 60 - payload size: 189004[2022-04-01T09:19:32.002+11:00][INFO]-Response: 1065[2022-04-01T09:19:39.336+11:00][INFO]-lambda_runtime.py:366,Caught signal 15. Stopping runtime.[2022-04-01T09:20:22.061+11:00][INFO]-imageCamera.py:173,>> Getting hub config ...[2022-04-01T09:20:22.064+11:00][INFO]-ipc_client.py:167,Posting work for function [:function:secret_loader] to http://localhost:8000/2016-11-01/functions/arn:aws:lambfunction:secret_loader[2022-04-01T09:20:22.078+11:00][INFO]-ipc_client.py:177,Work posted with invocation id [14ce6b2c-add7-4dc0-452d-be84d2700e4e][2022-04-01T09:20:22.078+11:00][INFO]-ipc_client.py:290,Getting work result for invocation id [14ce6b2c-add7-4dc0-452d-be84d2700e4e] from http://localhost:8000/2016-11-01/functions/arn:aws:lambda:ap:function:secret_loader[2022-04-01T09:20:26.32+11:00][INFO]-ipc_client.py:298,Got result for invocation id [14ce6b2c-add7-4dc0-452d-be84d2700e4e][2022-04-01T09:20:26.321+11:00][INFO]-imageCamera.py:175,>> Done ...[2022-04-01T09:20:26.321+11:00][INFO]-imageCamera.py:180,Setup tranfer stream[2022-04-01T09:20:26.628+11:00][INFO]-imageCamera.py:151, >>> Stream list: ['kstream1'][2022-04-01T09:20:27.291+11:00][ERROR]-imageCamera.py:209, >>>>> Exception while running: Broken bit parity[2022-04-01T09:20:27.291+11:00][ERROR]-Traceback (most recent call last):[2022-04-01T09:20:27.291+11:00][ERROR]-  File "/greengrass/ggc/deployment/lambda/.imageCamera.14/imageCamera.py", line 182, in main[2022-04-01T09:20:27.291+11:00][ERROR]-    stream_client=setup_data_stream(stream_name,kinesis_stream_name)[2022-04-01T09:20:27.291+11:00][ERROR]-  File "/greengrass/ggc/deployment/lambda/.function.imageCamera.14/imageCamera.py", line 154, in setup_data_stream[2022-04-01T09:20:27.291+11:00][ERROR]-    client.delete_message_stream(stream_name=stream_name)[2022-04-01T09:20:27.291+11:00][ERROR]-  File "/greengrass/ggc/deployment/lambda/arn.aws.lambda.ap-southeast-Camera.14/greengrasssdk/stream_manager/streammanagerclient.py", line 448, in delete_message_stream[2022-04-01T09:20:27.291+11:00][ERROR]-    return Util.sync(self._delete_message_stream(stream_name), loop=self.__loop)[2022-04-01T09:20:27.291+11:00][ERROR]-  File "/greengrass/ggc/deployment/lambda/.function.imageCamera.14/greengrasssdk/stream_manager/util.py", line 28, in sync[2022-04-01T09:20:27.291+11:00][ERROR]-    return asyncio.run_coroutine_threadsafe(coro, loop=loop).result()[2022-04-01T09:20:27.291+11:00][ERROR]-  File "/usr/lib/python3.7/concurrent/futures/_base.py", line 432, in result[2022-04-01T09:20:27.291+11:00][ERROR]-    return self.__get_result()[2022-04-01T09:20:27.291+11:00][ERROR]-  File "/usr/lib/python3.7/concurrent/futures/_base.py", line 384, in __get_result[2022-04-01T09:20:27.291+11:00][ERROR]-    raise self._exception[2022-04-01T09:20:27.291+11:00][ERROR]-  File "/greengrass/ggc/deployment/lambda/arn.aws.lambda.ap-southeast-2era.14/greengrasssdk/stream_manager/streammanagerclient.py", line 352, in _delete_message_stream[2022-04-01T09:20:27.291+11:00][ERROR]-    Util.raise_on_error_response(delete_stream_response)[2022-04-01T09:20:27.291+11:00][ERROR]-  File "/greengrass/ggc/deployment/lambda/ar.imageCamera.14/greengrasssdk/stream_manager/util.py", line 148, in raise_on_error_response[2022-04-01T09:20:27.291+11:00][ERROR]-    raise UnknownFailureException(response.error_message, response.status, response.request_id)[2022-04-01T09:20:27.291+11:00][INFO]-imageCamera.py:210,>>> restart module after 10sFollowCommentvidishataws a year agoHi,Can you please provide the following information:GGC version that you are runningDevice information (OS, CPU, RAM, etc.)How long after reboot does it take for the issue to occurSteps to reproduce the issue, if any.SharesushantAtAWS a year agoHi,Can you please explain the scenario? What are you trying to do in code? (if you can include a snipper of code that will be very helpful).Do you have concrete steps to reproduce the issue?Can you also provide logs for greengrass?Here is how you can locate the logs: https://docs.aws.amazon.com/greengrass/v1/developerguide/greengrass-logs-overview.html#gg-logs-localI am interested mostly in the Stream Manager logs.Share"


Question: EC2 reachability check failed (Linux) from launch instance from snapshot

"Launch instance from a clone AMI and the status check fails. Unable to ssh in the ec2 instance checked the Private IPv4 addresses and it's correct for the current VPC and the correct security group inbound ports is open ie..port 22.Click on Get instance screenshot and the IP showing in the login screen is incorrect.example..ec2 intance IP: 10.2.68.xx screenshot IP: 10.1.x.xThis will happen with any flavor of Linux ie..centos, redhat, ubuntu etcI did shut down the ec2 instance and still had the incorrect private IPFollowComment"

Answer: "0Hi.Can you share the logs from the console outputTo get console outputOpen the Amazon EC2 console at https://console.aws.amazon.com/ec2/In the left navigation pane, choose Instances, and select the instance.Choose Actions, Monitor and troubleshoot, Get system log.If the instance is showing the incorrect IP, I recommend opening up a support case to EC2 Linux to further review your instance.CommentShareSUPPORT ENGINEERLundianswered a year agoAWS-AZUser a year agoHi @lundi, correct the EC2 does show an incorrect IP in the logs and the screenshot.Share0We cant open any support case with AWS my current organization does not have this support. I'm trying to see if anyone has seen this error in the past and fixed the issue.CommentShareAWS-AZUseranswered a year ago"


Question: "ALB Queries, Route53"

"A customer has a static IP pool assigned to their ELB. They have below queries. Wanted to understand if someone can help in addressing those, queries belowHow can we see Traffic distribution across ALB IPs?Does DNS lookup on Route53 level takes care of randomization/order change of IPs of ALB returned by Route53? If yes then can you shed some light on details like which algo it uses etc? To make it more clear, basic intent is to know that on every DNS lookup , IP addresses being used by ALB are being returned in same order, randomized order and if randomized order then by what means?FollowComment"

Answer: "0Accepted AnswerHow can we see Traffic distribution across ALB IPs?If enabled, the ALB access log file will take on the following syntax and the ip-address string will be the address of the ALB which handled the request:bucket[/prefix]/AWSLogs/aws-account-id/elasticloadbalancing/region/yyyy/mm/dd/aws-account-id_elasticloadbalancing_region_load-balancer-id_end-time_ip-address_random-string.log.gzDoes DNS lookup on Route53 level takes care of randomization/order change of IPs of ALB returned by Route53? If yes then can you shed some light on details like which algo it uses etc? To make it more clear, basic intent is to know that on every DNS lookup , IP addresses being used by ALB are being returned in same order, randomized order and if randomized order then by what means?I assume you mean directing traffic via Route53 to the ALBs - you would typically choose a routing policy and route the traffic via alias to the ALB. The response of the DNS queries should then depend on the routing policy chosen.CommentShareAWS-User-1129528answered 2 years ago"


Question: Unable delete Route53 hostedzones

"I can't delete hostedzones, it prompts: HostedZoneNotEmpty 400: The specified hosted zone contains DNSSEC Key Signing Keys and so cannot be deleted., but I already deleted it in the KMS console.FollowComment"

Answer: "0I haven't used DNSSEC myself yet but I'm assuming the usual restrictions on KMS key deletion apply.  You can't delete KMS keys immediately, only schedule them for deletion with a min 7 days, default 30 days waiting period.This is to protect you - deleting a customer master key is destructive and potentially dangerous. It deletes the key material and all metadata associated with the CMK, and is irreversible. After a CMK is deleted you can no longer decrypt the data that was encrypted under that CMK, which means that data becomes unrecoverable.CommentShareEXPERTskinsmananswered 10 months ago"


Question: An beanstalk app that works fine until recently

"Hi - We deployed an elastic beanstalk app (the last update made on 03/01/2022) and it has been working just fine. But the app is not working now - When I checked, the webpage shows "502 - Bad Gateway".We used the python 3.8 platform branch. Has there been any updates between March and now? More importantly, can AWS restore our services back to 03/02/2022 when it was working?Thanks!FollowComment"


Question: coredns remains Degraded after EKS cluster creation

"Hi there,We managed to create a EKS cluster and add managed node group into it to house our containerized applications for a new project. Here are the steps we took:Create a VPC and public subnets with CloudFormation console according to the steps in https://docs.aws.amazon.com/eks/latest/userguide/creating-a-vpc.htmlCreate EKS cluster with EKS consoleAdd-ons tab of newly created EKS cluster always show below exception in corednsStatus: DegradedVersion: v1.8.7-eksbuild.1This coredns issue could hinder launching new managed nodes into the cluster in remaining cluster setup process. Any idea? Thanks.FollowComment"

Answer: "0Hi there,Did you review the description of the health issues reported for the CoreDNS add-on?You can get the description of the health issues reported for the add-on by following the steps below:AWS Console >> EKS Clusters >> click the cluster name >> add-ons >> coredns >> Health IssuesThe CoreDNS status can be Degraded if there are no worker nodes in the EKS Cluster causing the CoreDNS add-on to encounter InsufficientNumberOfReplicas health issues i.e to be unhealthy because it doesn't have the desired number of replicas.To resolve this issue, follow the steps here to launch Amazon EKS managed node groups of nodes that register with your Amazon EKS cluster.CommentShareOlawale-AWSanswered 10 months ago"


Question: Task stopped with No supported plugins found on source error

"Hi,we are facing an issue with DMS. We are trying to migrate a Postgresql RDS 9.5.15  database to a Postgresql RDS 10.6 Database on two AWS different accounts.I've created 5 tasks for 5 sets of tables, the initial loading ran successfully but 2 of the 5 tasks have stopped with the "No supported plugins found on source".Source Endpoint ARN :arn:aws:dms:eu-central-1:815819815090:endpoint:DJMVJEYU75P7WQQQYSTSN5HCJQTarget Endpoint ARN :arn:aws:dms:eu-central-1:815819815090:endpoint:P7J6J4W5GXOAIMDIV42OAQ27OEThe two failed tasks ARN arearn:aws:dms:eu-central-1:815819815090:task:627LGUDZC5SY72TYPSQCZHAYHMandarn:aws:dms:eu-central-1:815819815090:task:BVK3KOPYZ7CO5QW7SBRSJNEHNYBefore created the task, I setrds.logical_replicationon the source RDS server and reboot it successfully.On the source server, I can see 5 replication slots in thepg_replication_slotsPostgres view, but only 3 on 5 are active.I can't understand the problem, and I would be very grateful if someone can help me.Thanks in advanceFrançoisFollowComment"

Answer: "0So I will answer myself.I had 5 DMS tasks with 5 logical replication slots in PG (one for each task, according to the Cloudwatch logs). But DMS said that "all slots are in use" which was wrong.As 2 of my tasks didn't need to be set as CDC, I deleted these and keep three tasks. Then I deleted the two unnecessary logical slots in PG (with a select pg_drop_replication_slot(XXX)). Finally, I was able to resume my two failed tasks and they are running now.So my guess is that unlike the doc said (https://docs.aws.amazon.com/dms/latest/userguide/CHAP_Source.PostgreSQL.html#CHAP_Source.PostgreSQL.Prerequisites), you don't need 5 replication slots for 5 tasks but more. I think I perhaps could have changed the max_replication_slots of the source server, but as I can't reboot it again, it couldn't be a solution.CommentSharefr4nc01sanswered 4 years ago"


Question: Reserved Instances

"What if I have 1 RDS instance A that runs 24 hours a day and I also have 2 instances (B and C) that run concurrently between 7AM and 7PM (they are stopped at night).If I purchase 2 Reserved Instances would that be enough to cover the full usage of my 3 instances A, B and C?  I know that if B and C ran consecutively it would be, but what hapens when they run concurently? Their usage adds up to 24 hour per day, but is that how the RI can be applied?I am assuming all the instances  are in the same region and are the same instance type and size.FollowCommentPrincy A 4 months agoCan someone answer this query on priority?Thanks in advance..Share"

Answer: "1Customers using both Reserved and On-Demand instances will have Reserved Instance rates applied first to minimize costs. You pay the low hourly usage fee for every hour in your Reserved Instance term (which means you’re charged the hourly fee regardless of whether any usage has occurred during an hour). When your total quantity of running instances during a given hour exceeds the number of applicable Reserved Instances you own, you will be charged the On-Demand rate.For example, if you own three Reserved Instances with the same instance attributes and region (or Availability Zone if applicable), the billing system checks each hour to see how many total instances you have running that match those parameters. If it is three or less, you will be charged the Reserved Instance rate for each matching instance running that hour. If more than three are running, you will be charged the On-Demand rate for the additional instances.https://aws.amazon.com/ec2/pricing/reserved-instances/buyer/CommentShareEXPERTkentradanswered 4 months agoEXPERTChris_Greviewed 4 months ago0No, in your scenario you cannot purchase 2 RIs and hope to cover all the instances that are running concurently.The billing works hourly. It means that every hour the system wll be checking how many running instances you have and how many RIs are there to cover them (this works the same for RDS as for EC2, as for any other RIs for other services... like ElastiCache, etc...)In your example... if you purchase 2 RIs, then your first RI will be 100% utilized by your RDS instance that is running 24/7. Your second RI will be only utilized 50% of the time (assuming that you have 2 instances running for 12 hours of the day, and they are not running for the remaining hours), and the second running RDS instance will be charged on-demand rate.For the remaining 12 hours when those 2 instances are not running, your second RI will not be utilized at all. And thus, you will be losing on the $ discount during those hours (that discount cannot be reused at a later time).So, be considerate of your usage - to avail of RDS RIs you need to have consistent HOURLY usage throughout the term of your commitment.CommentShareEXPERTNataliya_Ganswered 4 months ago-1As per the other answer, instances that are running concurrently aren't counted as running consecutively. Instead you might consider Savings Plans.Edit: Of course, Savings Plans are not available for RDS; this would only apply to EC2.CommentShareEXPERTBrettski-AWSanswered 4 months ago"


Question: "Global Accelerator, NLB and Private Subnets"

In the Global Accelerator documention it states that Application Load Balancers can be on private subnets. Is this also true for NLB - can the customer NLB be on a private subnet as well?FollowComment

Answer: 2Accepted AnswerThe NLB needs to be internet-facingFrom https://docs.aws.amazon.com/global-accelerator/latest/dg/about-endpoints.htmlAn Application Load Balancer endpoint can be internet-facing or internal. A Network Load Balancer endpoint must be internet-facing.CommentSharesumitawsanswered 3 years agorePost-User-4232608 8 months agoHow can you restrict access to a internet facing NLB such that only traffic from global accelerator can access?Share


Question: Is it possible for RDS Proxy to ignore a reader instance?

"We have an Aurora cluster with multiple read-only instances.  So far we have set up a custom endpoint in the cluster itself to keep one of those readers from being used in production, so that we can run diagnostic and reporting queries without impacting the production system.  This week we migrated to use an RDS Proxy, but I have not figured out how to sync it to my custom endpoint/prevent it from using that one instance.  Is this possible with a Proxy?FollowComment"

Answer: "0RDS proxy does not currently support custom endpoints.  It goes with the default reader end point. The option would to assign a tiering to all of your reader instances and the instance with highest tiering ( lowest number) will be promoted in case of  a failover.CommentShareDevinder-theDBGuyanswered a year agojonb a year agoThanks for your reply, it helps knowing it's not there.  Tiering the reader, though, doesn't prevent it from being used, does it?I'm thinking the solution I need is to actually make a separate read-only replica cluster as described here https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/AuroraMySQL.Replication.html#AuroraMySQL.Replication.MySQLShareDevinder-theDBGuy a year agoTiering will def not help your issue where you want connections to not go to a specific reader instance, but it can help in case of failover.Share"


Question: Manual Approval step - Ability to customize email body programmatically

"The current implementation CodePipeline is very nice in regards to having the ability to temporarily step the pipeline and ask for manual approval (e.g. by email or whoever subscribed to the SNS topic).One really great addition to that manual approval would be to configure the body of the Manual approval email with some template syntax or variables. Here's an example:Our CodePipeline includes a step that generates output from "cdk synth --output ./cdk.out". We use this output in a subsequent step to provision AWS infrastructure. Between the two steps there is the manual review step (so that a DevOps team member can review that we are not deploying a CDK stack that would break the infrastructure). It would have been really useful if we directly send the "cdk synth" output in the email body, so the DevOps don't have to fiddle with he AWS CodePipeline console UI, download artifacts from S3, unzip them, etc...FollowComment"

Answer: "0Thank you for the suggestion to add a template syntax and/or variables to the manual approval action. We recently added the ability to pass variables between actions: https://docs.aws.amazon.com/codepipeline/latest/userguide/reference-variables.html. The length of a CDK-generated template may be too large to use directly as a variable, but you might be able to link a commit, pipeline execution, etc.CommentShareAaron_Canswered 3 years ago"


Question: Data protection policy for public admin contract

"We need to demonstrate to our customer, a Public Administration entity in Spain that AWS has a contract with us and accomplish data protection policies being AWS data responsible in our behalfAlso we need evidence that AWS is certified to collaborate with public administration in SpainFollowComment"

Answer: "0Amazon Web Services (AWS) is committed to bringing additional services and AWS Regions into the scope of our Esquema Nacional de Seguridad (ENS) High certification to help customers meet their regulatory needs.ENS is Spain’s National Security Framework. The ENS certification is regulated under the Spanish Royal Decree 3/2010 and is a compulsory requirement for central government customers in Spain. ENS establishes security standards that apply to government agencies and public organizations in Spain, and service providers on which Spanish public services depend. Updating and achieving this certification every year demonstrates our ongoing commitment to meeting the heightened expectations for cloud service providers set forth by the Spanish government.https://aws.amazon.com/blogs/security/aws-achieves-spains-ens-high-certification-across-166-services/CommentShareAshraf_Oanswered 2 months ago0In order to demonstrate to your customer you can download the ENS High Certificate from AWS Artifact in the AWS Management Console or from the Compliance page Esquema Nacional de Seguridad High.CommentShareIbrahim Cesaranswered 2 months ago"


Question: AWS Route 53 A record shows up as CNAME in public DNS lookups

I have setup an AWS Route 53 A record (domain name to IP address) with simple routing. However when I use a some public DNS lookup tools this shows up as a CNAME record (domain name to domain name). What could be happening here?FollowCommentjasonbrd a year agoIs Route 53 the SOA for the domain? You could be seeing one response when querying Route 53 directly versus another response from another public server if that service is not seeing Route 53 as the SOA / NS authority for the domain but another. This would be common when preparing a domain for migration to Route 53 but you have not yet pivoted the NS records to Route 53.Share

Answer: "0Hi,I understand that when you do a DNS lookup a Route 53 CNAME record shows up when you had setup a Route 53 A record. I recommend you use the AWS provided tool see how Route 53 responds to your DNS. In addition, the documentation linked [1] provides further guidance on CNAME and A record nslookup query expectations.[1] https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/dns-test.htmlCommentShareLwazianswered a year ago"


Question: save logs of each outbound data transfer response from cloudfront to s3

"I need to do this to charge my clients for data usage, so for each request I would need to get the request header with the output data transfer response and save it to s3FollowComment"

Answer: "0Hi there. I provided some options in your other question, but now I think I understand your request better.My first question is would be is it possible to have your clients traffic on different distributions? If so, the built-in usage report might give you what you need.If not, then I would recommend option 2 that I specified in my other answer, sending log data to AWS OpenSearch. This would allow you to use tools like Kibana to parse the logs and create custom dashboards. You can use the sc-bytes field to get the data transferred, and then correlate with other fields like cs-host (if filtering by host) or cs-uri-step (if filtering by URI), etc. More info on fields available here.Here is a good blog post that gives an overview of how to set this up. Just keep in mind that the ElasticSearch service was recently renamed to AWS OpenSearch in 2021, but the blog post is still relevant.Another option that you could look into is sending the standard CloudFront logs to CloudWatch. I have not used this option as much, so I don't know if it will get you exactly what you need, but it might be worth investigating. Here is another blog post that might help.CommentShareJeremyAWSanswered a year ago"


Question: AWS Cloud9 Environment Trouble Connecting

"Warning Message:This is taking longer than expected. The delay may be caused by high CPU usage in your environment, or your T2 or T3 instance is running out of burstable CPU capacity credits, or there are VPC configuration issues. Please check documentation.Things I've Tired:Rebooting InstanceAdding More CPU'sIncrease Instance Filesystem SizeShutting Down Instance and Starting Back up.I'm at a dead end as to why this instance failing to connect and help would be greatly appreciate.FollowComment"

Answer: "1Attach the volume from the broken instance to the new instance as a separate volume and pull off the information you need. You can also look around at the logs to see if you can find the root cause.CommentShareEXPERTkentradanswered 9 months agorePost-User-7409415 7 months agoThis worked for me as well. I followed the instructions from here: https://aws.amazon.com/premiumsupport/knowledge-center/ec2-linux-resource-over-utilization/I think the issue was a cron job that was scheduled to stress the system every 5 min. After removing some files and making space on the EBS volume again, I tried to re-attach the EBS volume to the broken instance, but the broken instance remained broken. Any thoughts on why it still not worked?Share0Thank you this worked a treat for me, much appreciated !!CommentSharerePost-User-4214943answered 9 months agorePost-User-9754089 9 months agoWhat did you do to get it to work?Share0Can you please take a look at this document - https://docs.aws.amazon.com/cloud9/latest/user-guide/vpc-settings.html and ensure the network settings for your Cloud9 are correctly configured.There is also a blog that you can refer to - https://aws.amazon.com/blogs/security/isolating-network-access-to-your-aws-cloud9-environments/CommentShareEXPERTIndranil Banerjee AWSanswered 10 months ago0Having exactly the same issue here, haven't been able to connect to a cloud9 instance that has been working fine for months.  No recent changes were made to the VPC settings at all.  I've tried changing instance type from T3.medium to T3.large, to T3.xlarge as well as setting the Capacity Reservation settings to None, and altering the credit specification to be enable unlimited mode.  I'm out of ideas and have work on the instance I neeCommentSharerePost-User-4214943answered 10 months ago0I've seen this behavior. I fixed it by clearing my browser cache and cookies. Not sure what the root cause was.CommentShareEXPERTkentradanswered 10 months ago0Sorry I'm just back from vacation and tried clearing cache and cookies but didn't help unfortunately.The latest thing I've tried to at least be able to access my data is tocreate a snapshot image of the failing cloud9 env/ec2create a new cloud9 environment and make sure I can connect to it (all good)stop the new env, detach the new EBS volumecreated a new volume from the snapshot image of the old failing cloud9attach the new volume to the new cloud9 environmenttry to connect - again we time out due to high CPU / burstable credits / VPC config despite being able to connect before switching volumesI'm starting to get worried about this as I will need to access some work off the old instance soon.Any other suggestions welcomeCommentSharerePost-User-4214943answered 9 months ago0I'm having a similar problem where an environment that was working now is giving me strange issues like be extremely slow in terminals, constantly 'Reconnecting' etc. I don't want to attempt all that work if it didn't help things for you - how did it go?Thanks,MarkCommentSharerePost-User-2460381answered 8 months ago0One other thing I would advise is reviewing the EC2 console logs [1] of your instance to see if there are any clear signs of failed startup, disk space running out, etc. I've recently run into a scenario where disk space had run out on the underlying EBS volume resulting in failures starting necessary processes for Cloud 9.[1] EC2 Console Logs - https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-console.html#instance-console-console-outputCommentShareKameron_Banswered 23 days ago"


Question: Codebuild waiting for DOWNLOAD_SOURCE takes to long

"Hey floks,while trying to optimize our time it takes to build or ECS service, we encountered it takes Code Build over three minutes to start the Phase Download Source.Is there a way to optimize this?Logs:[Container] 2023/04/20 13:10:39 Waiting for agent ping[Container] 2023/04/20 13:10:40 Waiting for DOWNLOAD_SOURCE [Container] 2023/04/20 13:14:22 Phase is DOWNLOAD_SOURCE   <---- over three minutes delay[Container] 2023/04/20 13:14:22 CODEBUILD_SRC_DIR=/codebuild/output/....Thanks,OliverFollowComment"


Question: Service Limit Request Unassigned 20 hours later

"I submitted a limit increase request 20 hours ago and I noticed that the status changed from work in progress to unassigned. I’m just wondering is it normal?And I really need the limit increase ASAP cause my deep learning homework is due this Friday. Can anybody help speed up the process?Case ID: 9376450621FollowCommentAWS-User-4374884 a year agoIt's been already more than 30 hours and still, I haven't got any reply from their end. It is still unassigned nearly 30 hours later.Case ID: 9376450621Share"

Answer: "0There is no guaranteed time on service limit increases. If you only have basic support, there is a 24 hour target for first engagement on cases and depending on the limit it can take additional time to increase this.CommentShareEXPERTRob_Hanswered a year ago"


Question: Using External Ontologies on AWS Neptune

"Hi,I am trying to use external ontologies in Neptune and they are not loading into the graph. For example when I useskos: http://www.w3.org/2004/02/skos/core# it doesn't load these ontologies into Neptune. Is there a way to load these external ontologies into neptune or do I have to manually download them into an S3 bucket and load them into the Neptune instance from there.Cheers,JustinEdited by: jtrugman on Feb 18, 2020 2:23 PMFollowComment"

Answer: "0Accepted AnswerThe short answer is that you want to use SPARQL Update LOAD to actually load the external ontology into Neptune, something like this:LOAD <http://www.w3.org/1999/02/22-rdf-syntax-ns#>```There are, however, a couple of caveats/details to be considered:    You must "punch a hole" so that Neptune can actually reach out of your VPC. Do this using a NAT Gateway. This document is helpful: https://aws.amazon.com/premiumsupport/knowledge-center/internet-access-lambda-function/    Also note that Neptune uses HTTP content negotiation to fetch RDF content in the right format. See this (section "Media-types that SPARQL UDATE LOAD can import"): https://docs.aws.amazon.com/neptune/latest/userguide/sparql-media-type-support.html    Some external ontologies may not be "content-negotiable", instead the external server uses some HTTP redirect code to inform the client where the actual RDF content is. Neptune does not handle these situations, so you may need to test (say, using curl) how the external server actually responds. I believe SKOS, for example, is set up this way.CommentShareOra_Lanswered 3 years ago0skos: <http://www.w3.org/2004/02/skos/core#>in itself does not load anything - it's just a namespace prefix, part of the syntax.I think you wantLOAD <http://www.w3.org/2004/02/skos/core>```<https://www.w3.org/TR/sparql11-update/#load>CommentShareZaliakalnisanswered 3 years ago"