Question: finally: the android version is not working when compiled in release mode

"So I have compiled android release app for project SampleProject and it was working fine in debug mode but does not in release.for release i did:set r_ShadersPreactivate to 3 in C:\Amazon\Lumberyard\1.11.0.0\dev\Engine\Config\spec\android*changed IConsole.h line 39 to value 1generated shadercache.pak (only gles3_1, I have disabled gles3_0 in android.py)lmbr_waf.bat configurelmbr_waf.bat build_android_armv7_gcc_release -p allrunning the app on android devices and it crashes immediately after startLog:10-12 22:37:35.476: I/OpenGLRenderer(4014): Initialized EGL, version 1.410-12 22:37:35.476: D/OpenGLRenderer(4014): Swap behavior 110-12 22:37:35.478: V/WindowManager(5088): Relayout Window{e2f1549d0 u0 SurfaceView - com.lumberyard.samples/com.lumberyard.samples.SamplesProjectActivity}: viewVisibility=0 req=2560x1440 WM.LayoutParams{(0,0)(2560x1440) gr=#800033 ty=1001 fl=#4218 pfl=0x10040 fmt=1 naviIconColor=0}10-12 22:37:35.478: I/SurfaceFlinger(3126): id=14037 createSurf (2560x1440),1 flag=4, TamplesProj10-12 22:37:35.479: D/libGLESv1(4014): STS_GLApi : DTS is not allowed for Package : com.lumberyard.samples10-12 22:37:35.479: I/SurfaceFlinger(3126): id=14038 createSurf (2560x1440),-1 flag=20004, TamplesProj10-12 22:37:35.481: D/mali_winsys(4014): EGLint new_window_surface(egl_winsys_display*, void*, EGLSurface, EGLConfig, egl_winsys_surface**, egl_color_buffer_format*, EGLBoolean) returns 0x3000, [2560x1440]-format:110-12 22:37:35.485: V/SDL(4014): surfaceCreated()10-12 22:37:35.485: V/SDL(4014): surfaceChanged()10-12 22:37:35.485: V/SDL(4014): pixel format RGBA_888810-12 22:37:35.485: V/SDL(4014): Window size:2560x144010-12 22:37:35.487: I/Sensors(5088): Acc old sensor_state 16384, new sensor_state : 16385 en : 110-12 22:37:35.490: D/SensorManager(4014): registerListener :: 0, K6DS3TR Acceleration Sensor, 20000, 0, 10-12 22:37:35.491: D/WindowManager(5088): finishDrawingWindow: Window{e2f1549d0 u0 SurfaceView - com.lumberyard.samples/com.lumberyard.samples.SamplesProjectActivity} mDrawState=DRAW_PENDING10-12 22:37:35.491: V/SDLExt(4014): Asset manager loaded.10-12 22:37:35.491: I/SDL(4014): SDL_Android_Init()10-12 22:37:35.491: I/SDL(4014): SDL_Android_Init() finished!10-12 22:37:35.494: V/WindowManager(5088): Relayout Window{84bb14dd0 u0 com.lumberyard.samples/com.lumberyard.samples.SamplesProjectActivity}: viewVisibility=0 req=2560x1440 WM.LayoutParams{(0,0)(fillxfill) sim=#20 ty=1 fl=#1810500 pfl=0x20000 fmt=-3 wanim=0x1030001 vsysui=0x400 needsMenuKey=2 naviIconColor=0}10-12 22:37:35.496: V/WindowManager(5088): Relayout Window{e2f1549d0 u0 SurfaceView - com.lumberyard.samples/com.lumberyard.samples.SamplesProjectActivity}: viewVisibility=0 req=2560x1440 WM.LayoutParams{(0,0)(2560x1440) gr=#800033 ty=1001 fl=#4218 pfl=0x10040 fmt=1 naviIconColor=0}10-12 22:37:35.500: D/WindowManager(5088): finishDrawingWindow: Window{e2f1549d0 u0 SurfaceView - com.lumberyard.samples/com.lumberyard.samples.SamplesProjectActivity} mDrawState=READY_TO_SHOW10-12 22:37:35.503: I/SDL/APP(4014): Added joystick Android Accelerometer with device_id -214748364810-12 22:37:35.630: A/libc(4014): Fatal signal 11 __(SIGSEGV), code 1, fault addr 0x24 in tid 4042 (RenderThread)10-12 22:37:35.631: W/(3107): debuggerd: handling request: pid=4014 uid=10355 gid=10355 tid=404210-12 22:37:35.723: A/DEBUG(4060): *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***10-12 22:37:35.724: A/DEBUG(4060): Build fingerprint: '__samsung/hero2ltexx/hero2lte:7.0/NRD90M/G935FXXS1DQHF:user/release-keys'10-12 22:37:35.724: A/DEBUG(4060): Revision: '9'10-12 22:37:35.724: A/DEBUG(4060): ABI: 'arm'10-12 22:37:35.724: A/DEBUG(4060): pid: 4014, tid: 4042, name: RenderThread >>> com.lumberyard.samples <<<10-12 22:37:35.724: A/DEBUG(4060): signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x2410-12 22:37:35.724: A/DEBUG(4060): r0 00000000 r1 c50ff4f0 r2 00000000 r3 0000000110-12 22:37:35.724: A/DEBUG(4060): r4 c5137fd0 r5 eafb734c r6 00000000 r7 f0c2fce410-12 22:37:35.725: A/DEBUG(4060): r8 00000000 r9 00000000 sl 00000d55 fp 0000085510-12 22:37:35.725: A/DEBUG(4060): ip 80000000 sp f0c2fc68 lr de9a1a8c pc de99e7a8 cpsr 200f001010-12 22:37:35.743: A/DEBUG(4060): backtrace:10-12 22:37:35.743: A/DEBUG(4060): #00 pc 003207a8 /system/vendor/lib/egl/libGLES_mali.so (LLVMGetInstructionParent)10-12 22:37:35.743: A/DEBUG(4060): #01 pc 00323a88 /system/vendor/lib/egl/libGLES_mali.so10-12 22:37:35.743: A/DEBUG(4060): #02 pc 00547438 /system/vendor/lib/egl/libGLES_mali.so10-12 22:37:35.743: A/DEBUG(4060): #03 pc 005529e4 /system/vendor/lib/egl/libGLES_mali.so10-12 22:37:35.743: A/DEBUG(4060): #04 pc 0063c190 /system/vendor/lib/egl/libGLES_mali.so10-12 22:37:35.743: A/DEBUG(4060): #05 pc 0065ffdc /system/vendor/lib/egl/libGLES_mali.so10-12 22:37:35.743: A/DEBUG(4060): #06 pc 00661530 /system/vendor/lib/egl/libGLES_mali.so10-12 22:37:35.744: A/DEBUG(4060): #07 pc 0064b53c /system/vendor/lib/egl/libGLES_mali.so10-12 22:37:35.744: A/DEBUG(4060): #08 pc 0064bfc8 /system/vendor/lib/egl/libGLES_mali.so10-12 22:37:35.744: A/DEBUG(4060): #09 pc 005cb1a8 /system/vendor/lib/egl/libGLES_mali.so (glTexImage2D+172)10-12 22:37:35.744: A/DEBUG(4060): #10 pc 0005e1ab /system/lib/libhwui.so10-12 22:37:35.744: A/DEBUG(4060): #11 pc 0005df8d /system/lib/libhwui.so10-12 22:37:35.744: A/DEBUG(4060): #12 pc 0005e6ab /system/lib/libhwui.so10-12 22:37:35.744: A/DEBUG(4060): #13 pc 0005e879 /system/lib/libhwui.so10-12 22:37:35.744: A/DEBUG(4060): #14 pc 00054269 /system/lib/libhwui.so10-12 22:37:35.744: A/DEBUG(4060): #15 pc 00053c27 /system/lib/libhwui.so10-12 22:37:35.744: A/DEBUG(4060): #16 pc 0005428f /system/lib/libhwui.so10-12 22:37:35.744: A/DEBUG(4060): #17 pc 00053c27 /system/lib/libhwui.so10-12 22:37:35.744: A/DEBUG(4060): #18 pc 0005428f /system/lib/libhwui.so10-12 22:37:35.744: A/DEBUG(4060): #19 pc 00053c27 /system/lib/libhwui.so10-12 22:37:35.744: A/DEBUG(4060): #20 pc 0005428f /system/lib/libhwui.so10-12 22:37:35.744: A/DEBUG(4060): #21 pc 00053c27 /system/lib/libhwui.so10-12 22:37:35.744: A/DEBUG(4060): #22 pc 0005428f /system/lib/libhwui.so10-12 22:37:35.744: A/DEBUG(4060): #23 pc 00053c27 /system/lib/libhwui.so10-12 22:37:35.744: A/DEBUG(4060): #24 pc 0005428f /system/lib/libhwui.so10-12 22:37:35.744: A/DEBUG(4060): #25 pc 00053c27 /system/lib/libhwui.so10-12 22:37:35.745: A/DEBUG(4060): #26 pc 0005428f /system/lib/libhwui.so10-12 22:37:35.745: A/DEBUG(4060): #27 pc 00053c27 /system/lib/libhwui.so10-12 22:37:35.745: A/DEBUG(4060): #28 pc 00053af7 /system/lib/libhwui.so (_ZN7android10uirenderer10RenderNode11prepareTreeERNS0_8TreeInfoE+66)10-12 22:37:35.745: A/DEBUG(4060): #29 pc 00094833 /system/lib/libandroid_runtime.so10-12 22:37:35.745: A/DEBUG(4060): #30 pc 00024689 /system/lib/libhwui.so10-12 22:37:35.745: A/DEBUG(4060): #31 pc 00026667 /system/lib/libhwui.so10-12 22:37:35.745: A/DEBUG(4060): #32 pc 000264c1 /system/lib/libhwui.so10-12 22:37:35.745: A/DEBUG(4060): #33 pc 000299e1 /system/lib/libhwui.so (_ZN7android10uirenderer12renderthread12RenderThread10threadLoopEv+80)10-12 22:37:35.745: A/DEBUG(4060): #34 pc 0000e329 /system/lib/libutils.so (_ZN7android6Thread11_threadLoopEPv+144)10-12 22:37:35.745: A/DEBUG(4060): #35 pc 0006b2a5 /system/lib/libandroid_runtime.so (_ZN7android14AndroidRuntime15javaThreadShellEPv+80)10-12 22:37:35.745: A/DEBUG(4060): #36 pc 00047423 /system/lib/libc.so (_ZL15__pthread_startPv+22)10-12 22:37:35.745: A/DEBUG(4060): #37 pc 00019efd /system/lib/libc.so (__start_thread+6)Follow"

Answer: "0Yes, I will do it soon. I think I found why it is not working for me but I still need to double check itSeems there are new folders layout on Android devices and thus I was copying compiled shaders from previous Samples project which is not the latest one. So I will redo the shaders deployment again and if it does not work I will enable logging as you described and will show the log hereSharerePost-User-5007185answered 6 years ago0@REDACTEDUSERThe change @REDACTEDUSERSharerePost-User-6730542answered 6 years ago0Then everything should be installed correctly. Which options do you have enabled in the Deployment Tool? And could you verify there an APK being generated with the suffix "_w_assets" in your BinAndroidGcc.Release directory?SharerePost-User-6730542answered 6 years ago0Found a workaround:in \dev\Code\Framework\AzCore\AzCore\Android\Utils.cppline 111 and 124 needs to be removed.Apparently, someone thought that bootstrap.cfg should be in a pak file for release builds but forgot to actually put it in a pak fileSharerePost-User-3514962answered 6 years ago0Ok,I see it can't find bootstrap.cfg even thou I can see it in folder10-20 00:09:24.641: D/LMBR(24837): BootStrap: Starting Library load10-20 00:09:24.728: D/LMBR(24837): BootStrap: Finished Library load10-20 00:09:25.054: I/LMBR(24837): ******************************************************10-20 00:09:25.054: I/LMBR(24837): * Amazon Lumberyard - Launching Game.... *10-20 00:09:25.054: I/LMBR(24837): ******************************************************10-20 00:09:25.054: I/LMBR(24837): CWD = /10-20 00:09:25.062: E/LMBR(24837): #################################################10-20 00:09:25.062: E/LMBR(24837): [ERROR] Unable to locate bootstrap.cfg - Exiting!10-20 00:09:25.062: E/LMBR(24837): #################################################FolderC:\Amazon\Lumberyard\1.11.0.0\dev\Build\es3\SamplesProject>adb shell ls -l /storage/emulated/0/Android/data/com.lumberyard.samples/files/total 352-rw-rw---- 1 u0_a363 sdcard_rw 14493 2017-10-20 00:05 assetprocessorplatformconfig.ini-rw-rw---- 1 u0_a363 sdcard_rw 1782 2017-10-20 00:05 bootstrap.cfg-rw-rw---- 1 u0_a363 sdcard_rw 712 2017-10-20 00:05 editor.cfg-rw-rw---- 1 u0_a363 sdcard_rw 66 2017-10-20 00:05 engine.json-rw-rw---- 1 u0_a363 sdcard_rw 204 2017-10-20 00:05 engineroot.txtdrwxrwx--x 41 u0_a363 sdcard_rw 4096 2017-10-20 00:05 gems-rw-rw---- 1 u0_a363 sdcard_rw 597 2017-10-20 00:05 lmbr_test_blacklist.txt-rw-rw---- 1 u0_a363 sdcard_rw 4088 2017-10-20 00:05 lyzardconfig.xml-rw-rw---- 1 u0_a363 sdcard_rw 4087 2017-10-20 00:05 projectconfiguratorconfig.xmldrwxrwx--x 26 u0_a363 sdcard_rw 4096 2017-10-20 00:07 samplesproject-rw-rw---- 1 u0_a363 sdcard_rw 75170 2017-10-20 00:05 setupassistantconfig.json-rw-rw---- 1 u0_a363 sdcard_rw 98 2017-10-20 00:05 setupassistantuserpreferences.ini-rw-rw---- 1 u0_a363 sdcard_rw 677 2017-10-20 00:05 shadercachegen.cfg-rw-rw---- 1 u0_a363 sdcard_rw 1253 2017-10-20 00:05 system_android_es3.cfg-rw-rw---- 1 u0_a363 sdcard_rw 1499 2017-10-20 00:05 system_appletv_ios.cfg-rw-rw---- 1 u0_a363 sdcard_rw 554 2017-10-20 00:05 system_buildshaderpak_dx11.cfg-rw-rw---- 1 u0_a363 sdcard_rw 550 2017-10-20 00:05 system_buildshaderpak_gl4.cfg-rw-rw---- 1 u0_a363 sdcard_rw 1489 2017-10-20 00:05 system_ios_ios.cfg-rw-rw---- 1 u0_a363 sdcard_rw 313 2017-10-20 00:05 system_linux_pc.cfg-rw-rw---- 1 u0_a363 sdcard_rw 1192 2017-10-20 00:05 system_osx_osx_gl.cfg-rw-rw---- 1 u0_a363 sdcard_rw 1260 2017-10-20 00:05 system_windows_pc.cfgdrwxrwx--x 4 u0_a363 sdcard_rw 4096 2017-10-20 00:06 user-rw-rw---- 1 u0_a363 sdcard_rw 3712 2017-10-20 00:05 usersettings.xmlSharerePost-User-5007185answered 6 years ago0I am relaying on deployment tool via running command "lmbr_waf.bat build_android_armv7_gcc_release -p all" when device is connected.So when I run that command it is installing APK and deploying assetSharerePost-User-5007185answered 6 years ago0yes, it seems script installing APK without asset.SharerePost-User-5007185answered 6 years ago0and it is still can't find shaders10-24 00:19:49.421: E/Zygote(22739): v210-24 00:19:49.421: I/libpersona(22739): KNOX_SDCARD checking this for 1036710-24 00:19:49.421: I/libpersona(22739): KNOX_SDCARD not a persona10-24 00:19:49.422: E/Zygote(22739): accessInfo : 010-24 00:19:49.423: W/SELinux(22739): SELinux selinux_android_compute_policy_index : Policy Index[2], Con:u:r:zygote:s0 SPD:SEPF_SECMOBILE_7.0_0006 RAM:SEPF_SECMOBILE_7.0_0009, [-1 -1 -9 -1 0 1]10-24 00:19:49.424: I/SELinux(22739): SELinux: seapp_context_lookup: seinfo=untrusted, level=s0:c512,c768, pkgname=com.lumberyard.samples 10-24 00:19:49.458: D/TimaKeyStoreProvider(22739): TimaSignature is unavailable10-24 00:19:49.459: D/ActivityThread(22739): Added TimaKeyStore provider10-24 00:19:49.619: D/ContextRelationMgrBrdg(22739): loadKlass() : caller=com.samsung.android.bridge.multiscreen.common.ContextRelationManagerBridge.<clinit>:28 android.app.LoadedApk.makeApplication:840 10-24 00:19:49.694: D/LMBR(22739): BootStrap: Starting Library load10-24 00:19:50.112: D/LMBR(22739): BootStrap: Finished Library load10-24 00:19:50.485: D/LumberyardActivity(22739): Assets already on the device, not using the OBB expansion files.10-24 00:19:50.632: D/InputTransport(22739): Input channel constructed: fd=5810-24 00:19:50.632: D/ViewRootImpl@1227bd9SamplesProjectActivity: setView = DecorView@41099e[SamplesProjectActivity] touchMode=true10-24 00:19:50.690: D/SensorManager(22739): registerListener :: 0, K6DS3TR Acceleration Sensor, 20000, 0, 10-24 00:19:50.696: I/SDL(22739): SDL_Android_Init()10-24 00:19:50.696: I/SDL(22739): SDL_Android_Init() finished!10-24 00:19:50.710: I/SDL/APP(22739): Added joystick Android Accelerometer with device_id -214748364810-24 00:19:50.711: I/LMBR(22739): ******************************************************10-24 00:19:50.711: I/LMBR(22739): * Amazon Lumberyard - Launching Game.... *10-24 00:19:50.711: I/LMBR(22739): ******************************************************10-24 00:19:50.711: I/LMBR(22739): CWD = /10-24 00:19:50.725: I/AndroidEnv(22739): Application private storage path = /data/user/0/com.lumberyard.samples/files10-24 00:19:50.725: I/AndroidEnv(22739): Application public storage path = /storage/emulated/0/Android/data/com.lumberyard.samples/files10-24 00:19:50.725: I/AndroidEnv(22739): Application OBB path = /storage/emulated/0/Android/obb/com.lumberyard.samples10-24 00:19:50.725: I/AndroidEnv(22739): Main OBB file name = main.1.com.lumberyard.samples.obb10-24 00:19:50.725: I/AndroidEnv(22739): Patch OBB file name = patch.1.com.lumberyard.samples.obb10-24 00:19:50.726: I/LMBR(22739): [INFO] Using APK for game files10-24 00:19:50.726: I/LMBR(22739): [INFO] Log and cache files will be written to app storage10-24 00:19:50.726: I/LMBR(22739): **** ROOT path set to : /APK ****10-24 00:19:50.726: I/LMBR(22739): **** ASSET path set to : /APK/samplesproject ****10-24 00:19:50.726: I/LMBR(22739): **** USER path set to : /data/user/0/com.lumberyard.samples/files/user ****10-24 00:19:50.726: I/LMBR(22739): **** LOG path set to : /data/user/0/com.lumberyard.samples/files/log ****10-24 00:19:50.799: I/OpenGLRenderer(22739): Initialized EGL, version 1.410-24 00:19:50.799: D/OpenGLRenderer(22739): Swap behavior 110-24 00:19:50.814: D/libGLESv1(22739): STS_GLApi : DTS is not allowed for Package : com.lumberyard.samples10-24 00:19:50.815: D/mali_winsys(22739): EGLint new_window_surface(egl_winsys_display*, void*, EGLSurface, EGLConfig, egl_winsys_surface**, egl_color_buffer_format*, EGLBoolean) returns 0x3000, [2560x1440]-format:110-24 00:19:51.009: D/ViewRootImpl@1227bd9SamplesProjectActivity: MSG_RESIZED_REPORT: ci=Rect(0, 0 - 0, 0) vi=Rect(0, 0 - 0, 0) or=210-24 00:19:51.009: D/ViewRootImpl@1227bd9SamplesProjectActivity: MSG_WINDOW_FOCUS_CHANGED 110-24 00:19:51.010: I/InputMethodManager(22739): [IMM] startInputInner - mService.startInputOrWindowGainedFocus10-24 00:19:51.032: D/InputTransport(22739): Input channel constructed: fd=6910-24 00:19:51.395: I/GridMate(22739): GridMate Allocator has already started! Ignoring current allocator descriptor!10-24 00:19:51.395: I/GridMate(22739): ================================================10-24 00:19:51.395: I/GridMate(22739): = GridMate initialized: Version 00.01.0263 =10-24 00:19:51.395: I/GridMate(22739): = Build on: Fri 10/11/2013 11:42:40.81 =10-24 00:19:51.395: I/GridMate(22739): ================================================10-24 00:19:51.455: I/EMotionFX(22739): ==================================================================10-24 00:19:51.455: I/EMotionFX(22739): Trace::Warning10-24 00:19:51.455: I/EMotionFX(22739): c:\Amazon\Lumberyard\1.11.0.0\dev\Gems\EMotionFX\Code\Source\Integration\System\SystemComponent.cpp(510): 'void EMotionFX::Integration::SystemComponent::SetMediaRoot(const char*)'10-24 00:19:51.455: I/EMotionFX(22739): Failed to set media root because alias "@assets@" could not be resolved.10-24 00:19:51.455: I/EMotionFX(22739): ------------------------------------------------10-24 00:19:51.455: I/EMotionFX(22739): ==================================================================10-24 00:19:51.455: I/TickBus(22739): ==================================================================10-24 00:19:51.455: I/TickBus(22739): Trace::Warning10-24 00:19:51.455: I/TickBus(22739): c:\Amazon\Lumberyard\1.11.0.0\dev\Code\Framework\AzCore/AzCore/Component/TickBus.h(125): 'virtual int AZ::TickEvents::GetTickOrder()'10-24 00:19:51.455: I/TickBus(22739): TickBus::Handler::m_tickOrder has been deprecated, implement GetTickOrder() instead.10-24 00:19:51.455: I/TickBus(22739): ------------------------------------------------10-24 00:19:51.455: I/TickBus(22739): ==================================================================10-24 00:19:51.456: I/TickBus(22739): ==================================================================10-24 00:19:51.456: I/TickBus(22739): Trace::Warning10-24 00:19:51.456: I/TickBus(22739): c:\Amazon\Lumberyard\1.11.0.0\dev\Code\Framework\AzCore/AzCore/Component/TickBus.h(125): 'virtual int AZ::TickEvents::GetTickOrder()'10-24 00:19:51.456: I/TickBus(22739): TickBus::Handler::m_tickOrder has been deprecated, implement GetTickOrder() instead.10-24 00:19:51.456: I/TickBus(22739): ------------------------------------------------10-24 00:19:51.456: I/TickBus(22739): ==================================================================10-24 00:19:51.456: I/TickBus(22739): ==================================================================10-24 00:19:51.456: I/TickBus(22739): Trace::Warning10-24 00:19:51.456: I/TickBus(22739): c:\Amazon\Lumberyard\1.11.0.0\dev\Code\Framework\AzCore/AzCore/Component/TickBus.h(125): 'virtual int AZ::TickEvents::GetTickOrder()'10-24 00:19:51.456: I/TickBus(22739): TickBus::Handler::m_tickOrder has been deprecated, implement GetTickOrder() instead.10-24 00:19:51.456: I/TickBus(22739): ------------------------------------------------10-24 00:19:51.456: I/TickBus(22739): ==================================================================10-24 00:19:51.507: I/LMBR(22739): Loading system configuration from system_android_es3.cfg...10-24 00:19:51.507: I/LMBR(22739): GameDir: SamplesProject10-24 00:19:52.185: I/LMBR(22739): BackupNameAttachment=" Build(0) 24 Oct 17 (00 19 52)" -- used by backup system10-24 00:19:52.185: I/LMBR(22739): Log Started at Tue Oct 24 00:19:52 201710-24 00:19:52.185: I/LMBR(22739): Built on Oct 19 2017 23:48:1510-24 00:19:52.185: I/LMBR(22739): Running 32 bit Android version API VER:2410-24 00:19:52.185: I/LMBR(22739): FileVersion: 1.11.0.010-24 00:19:52.185: I/LMBR(22739): ProductVersion: 1.11.0.0 - Build 48640610-24 00:19:52.185: I/LMBR(22739): Using GNU C++ Standard Library implementation10-24 00:19:52.185: I/LMBR(22739): Number of system processors: 010-24 00:19:52.185: I/LMBR(22739): Number of available processors: 610-24 00:19:52.185: I/LMBR(22739): 10-24 00:19:52.185: I/LMBR(22739): Processor 0:10-24 00:19:52.185: I/LMBR(22739): CPU: 10-24 00:19:52.185: I/LMBR(22739): Family: 0, Model: 0, Stepping: 010-24 00:19:52.185: I/LMBR(22739): FPU: 10-24 00:19:52.185: I/LMBR(22739): 3DNow!: not present10-24 00:19:52.185: I/LMBR(22739): MMX: not present10-24 00:19:52.185: I/LMBR(22739): SSE: not present10-24 00:19:52.185: I/LMBR(22739): SSE2: not present10-24 00:19:52.185: I/LMBR(22739): SSE3: not present10-24 00:19:52.185: I/LMBR(22739): Serial number not present or disabled10-24 00:19:52.185: I/LMBR(22739): 10-24 00:19:52.185: I/LMBR(22739): Processor 1:10-24 00:19:52.185: I/LMBR(22739): CPU: 10-24 00:19:52.185: I/LMBR(22739): Family: 0, Model: 0, Stepping: 010-24 00:19:52.185: I/LMBR(22739): FPU: 10-24 00:19:52.185: I/LMBR(22739): 3DNow!: not present10-24 00:19:52.185: I/LMBR(22739): MMX: not present10-24 00:19:52.185: I/LMBR(22739): SSE: not present10-24 00:19:52.185: I/LMBR(22739): SSE2: not present10-24 00:19:52.185: I/LMBR(22739): SSE3: not present10-24 00:19:52.185: I/LMBR(22739): Serial number not present or disabled10-24 00:19:52.185: I/LMBR(22739): 10-24 00:19:52.185: I/LMBR(22739): Processor 2:10-24 00:19:52.185: I/LMBR(22739): CPU: 10-24SharerePost-User-5007185answered 6 years ago0I took a look at the deployment log and noticed some1> The command line is too long.Around line 2284 (dev\Tools\build\waf-1.7.13\lmbrwaflib\android.py) under def flush(self):I added:ctx.user_message('Command[' + str(len(command)) + ']: ' + command)before the line:call(command, shell = True)The following log showed up:1> Packing assets into the APK... 1> Command[8159]: "D:/Android/sdk\build-tools\26.0.2\aapt.exe" add "d:\Amazon\Lumberyard\1.11.0.0\dev\BinTemp\AndroidCache\apk\DeckCasterLauncher_unaligned_unsigned_w_assets.apk" "assets/assetprocessorplatformconfig.ini" "assets/bootstrap.cfg" ... (I edited because it was too long)1> The command line is too long.For some reason, the max command line length on my system is not 8191 but 8158 or 8159. 8157 seems to pass.To workaround this I changed the line around line 2335 from:command_len_max = get_command_line_limit()tocommand_len_max = 8000 #get_command_line_limit()just to be safe. It seems to be working now.If you are getting "command line is too long" error as well then this workaround could also work for you.SharerePost-User-3514962answered 6 years ago0Hi @REDACTEDUSERCould you provide some more information about your environment. What OS are you running? Are you using the default Windows command prompt or something else? e.g. cygwin, PowerShell, etc.SharerePost-User-6730542answered 6 years ago0Hi Scott@AGSI'm using Windows 7 and just the default windows command prompt.I've installed Lumberyard into the default directory at "D:\Amazon\Lumberyard\1.11.0.0\dev" which is 33 characters in length.If you subtract 33 from 8191, you get 8158 which would explain why commands of length 8157 are okay while commands of length 8159 fail.SharerePost-User-3514962answered 6 years ago0Hi @REDACTEDUSERSharerePost-User-6730542answered 6 years ago0No, I didn't. I will redo the same for new version 1.11.1 to see if it is working nowSharerePost-User-5007185answered 6 years ago0Hi @Alexander77,Hmmm, could you try enabling logging in release and provide an updated log? Looks to be something in the Android system UI but I'm curious how far in the start up it's getting.Here are the changes needed to do so:Tools/build/waf-1.7.13/lmbrwaflib/compile_settings_android.pyAdd the following line at the end of the load_release_android_settings functionappend_to_unique_list(env['DEFINES'], [ 'RELEASE_LOGGING', 'AZ_ENABLE_TRACING' ])Code/Launcher/AndroidLauncher/Main.cppAround line 74 change    #if !defined(_RELEASE)#define LOG_TAG "LMBR"to    #if !defined(_RELEASE) || defined(RELEASE_LOGGING)#define LOG_TAG "LMBR"Around line 282 change    #if !defined(_RELEASE)startupParams.pPrintSync = &g_androidPrintSink;#endifto    #if !defined(_RELEASE) || defined(RELEASE_LOGGING)startupParams.pPrintSync = &g_androidPrintSink;#endifSharerePost-User-6730542answered 6 years ago0That seems rather odd the current working directory would factor into the command line limit. Either way, it's still probably better to use a more conservative limit for those commands. Thanks for the info @DavidRNG!SharerePost-User-6730542answered 6 years ago"


Question: "Can I get class probabilities from an XGBoost model, using batch transform?"

"AutoML gave me an XGBoost model, which I would like to now use to run inference on a large CSV file.After "deploying" the model, I figured out how to do this using a "batch transform" job.But the output appears to only be 0.0 or 1.0, class labels.Is there a way to get class probabilities out from the model?FollowComment"

Answer: "1Hi Apullin,May i know how are you making the predictions currently? Here is how i manage to get probability of a class instead of only 0 or 1.#Deployingxgb_predictor = xgb.deploy(initial_instance_count=1,                           instance_type='any')#Serializerxgb_predictor.serializer = sagemaker.serializers.CSVSerializer()#Making the predictionxgb_predictor.predict(array).decode('utf-8')]You may try integrating this method into how you are performing 'batch transform' currently and see if it works.CommentSharejunkaianswered 4 months agojunkai 4 months agoAlso, do check that you did not use np.round() or anything similar on your response and hence converting the results to whole numbers.Shareapullin 4 months agoAh, I am using "batch prediction" through the web dashboard itself, via a CSV uploaded to S3.I am not at all familiar with the boto3 or the sagemaker python APIs ... but maybe I'll have to try it out.Is there a way to do it from just the web interface?For getting it to work in Python, I am up against a slightly different Sagemaker issue:The model (and many others) appear to exist in the output from Autopilot in Studio, but I don't know how to reference it outside of that context. I can "deploy" it to an endpoint, which is why I did the web batch transform.Sharejunkai 4 months agoHi Apullin,Noted that you are using the 'Create batch transform job' from SageMaker Console. I have tested the scenario using XGBoost Model for Binary Classification and is getting the probabilities. May i know what are the configurations you have set when creating the job?Shareapullin 4 months agoOK, after some tinkering, I was able to run this in a Sagemaker Studio notebook:automl_predictor1 = sm.predictor.Predictor( "TestEndpoint1" )automl_predictor1.serializer = sm.serializers.CSVSerializer()resp = pred1.predict( df.values[:100000] ).decode('utf-8')resp[:300]But that still just gives back 0.0\n0.0\n1.0\n0.0\n....So, no idea. I suppose I'll go back to trying to do CV parameter search on XGBoost locally ... so much for AutoML.Shareapullin 4 months agoOne more note: While the "Model Details" view does give me a name for the model, that model does not seem to be actually accessible anywhere. That is, back in the web dashboard view, under "Inference >> Models", the long long list of models tried by AutoML do not exist there.It DOES give the path for an S3 bucket with a model.tar.gz in it, though.Similarly, I am not able to reference that model via the sagemaker python, and ListModels only shows me the same entries as on the web dashboard.ShareShow 1 more comment"


Question: Permanently set agent status to available

I have a contact flow that's working great in Amazon Connect.  When a customer calls they press 1 to be forwarded to an agent that has a desk phone # setup which is actually a cell phone #.  The problem is the cell phone only rings when the agent is logged into the CCP.  Is there a way to configure the agent's status to permanently be set to "Available" so their cell phone will always ring no matter if they are logged into the CCP or not?FollowComment

Answer: "0Accepted AnswerHi,If you always need to goto the same Agent/Mobile Number, then instead of transferring to the queue, send option to ‘transfer to phone number’ action block.Details : https://docs.aws.amazon.com/connect/latest/adminguide/transfer-to-phone-number.htmlThxDanCommentShareDanBloyanswered 3 years ago"


Question: is collecting memory metrics of ec2 instance via cloud watch agent free or paid

"I am performing the below activity.I am collecting memory metrics of ec2 instance via cloud watch agent. I will then use that metrics to make dashboards, please let me know if this activity will extract any charges.FollowComment"

Answer: "1From AWS Documentation:Metrics collected by the CloudWatch agent are billed as custom metrics. For more information about CloudWatch metrics pricing, see Amazon CloudWatch Pricing.CommentShareSydanswered 2 months ago"


Question: Is there a plan to fix the linker errors for AWS gamelift CPP server sdk test.

They create 267 Errors and fail the build. The only workaround being just excluding the tests all together.FollowComment

Answer: "0Hey ClaymoreTeam,Thank you for reporting this issue, we will pass this along to the service team.Regards!CommentShareJackson_AWSanswered 2 months ago"


Question: I get ListMetrics in CloudWatch but I do not know why

"Hello, I got charged this month and I didn't know why.It seems it is from CloudWatch. Today I read about CloudWatch for the first time.It seems I did something which no I do not know how to stop. The support could not help me, and they said "If you do not want to be billed make less requests".Image1Image2I removed all roles.Added MFA to root user.I used to drop DataDog logs using their integration (which was linked to my root user), I deleted that integration.My root user does not have credentials.Could anyone help me figure out what I did in order to stop getting billed?FollowComment"

Answer: "0From what you've posted, I can't tell what is causing the requests. However, I recommend enabling CloudTrail [1]. CloudTrail is the AWS audit system. The first trail is free other than storage fees. You can store the CloudTrail logs in an S3 bucket (I also recommend creating a lifecycle policy [2] or those logs will only accumulate costing you money) and you can search the logs through Athena [3] or by going and downloading the logs. Through the CloudTrail logs, you should be able to find the GetMetric entries and that should tell you the ARN of what is making the requests and the user/role that is doing it. From this, you should be able to determine what is causing the costs in Cloud Watch.[1] https://aws.amazon.com/cloudtrail/[2] https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lifecycle-mgmt.html[3] https://docs.aws.amazon.com/athena/latest/ug/cloudtrail-logs.htmlCommentShareEXPERTShlomo Dubrowinanswered a year agoJames_S EXPERTa year agoCloudTrail makes 90 days' worth of data available in the Console too without you needing to create a Trail (go to Event History on the menu), so you can use that interface to filter for the GetMetric and ListMetric events without having to set anything else up. If you've already stopped the integration which was causing those APIs to be called and since any Trails you create now will only contain new events, the Event History in the Console is the only way you can see related entries.Share0CloudTrail does not log GetMetricData API calls. So, you cannot correlate the number of such API calls to your costs using CloudTrail.Further, if CloudTrail were to log this API call, it'd likely be a data event (a high-volume operation) which would not be listed in Event History (or it'll flood Event History rendering it pretty useless to track other events).The supported CloudWatch API calls (actions) in CloudTrail logs (events) are listed at https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/logging_cw_api_calls.html#cw_info_in_ctCommentSharegsaturanswered 3 months ago"


Question: Using Cloud Trail Console to view all events in multi-account CloudTrail ( created via Organizations )

"Still working on understanding all of the parts. We have a hiearchy of accounts configured using Control Tower and Organizations. There is an organization trail created in the "Log Audit" account that was created via Control Tower and I can see the various accounts individual Cloud Trail logs as "subdirectories" in the main Cloud Trail location.I'm trying to see if there is a way to query all of the Cloud Trail logs in the organization trail. When I query for events using Cloud Trail in an account it seems like it is only looking at the trail for that account, even in the "Log Audit" account. Is there an easy way to query all of the trails in the organization trail like from the "Log Audit" account? I was kind of expecting there would be. If not, any auggestions on how someone would be able to query all events in the organization trail ( ie. across all accounts? )FollowComment"

Answer: "1Accepted AnswerUsing Athena to query is pretty easy and effective, though there's a little setup to do - see https://www.linkedin.com/pulse/using-athena-partition-projection-query-cloudtrail-other-kinsman/.Also you can use CloudTrail Lake, see a comparison with Athena here - https://www.linkedin.com/pulse/querying-aws-cloudtrail-athena-vs-lake-steve-kinsman/.CommentShareEXPERTskinsmananswered a year agolarryjkl a year agoYour linked-in link was immensly helpful; I was able to use the query to create the Athena table and then start running queries across all of the accounts. The only download I really see is having to specify the accountIds as part of the table defintion; that seems like one of those easy things that could be forgotten, but that seems like more of an Athena limitation. Thanks again, worked great. Will look at Cloudtrail Lake at some point in the future.Share"


Question: Certifying Partner

How can I register as a certifying partner of the programs?FollowComment

Answer: "0Hi. Can you please clarify what you're after?If you mean you want to become a training partner: https://aws.amazon.com/partners/training-partner-program/If you mean certifying a device for our partner catalog, then this should help: https://aws.amazon.com/partners/programs/dqp/CommentShareEXPERTGreg_Banswered a year ago"


Question: Importing Datasets into AWS Glue DataBrew from PostgreSQL tables with Case Sensitive names

"Hello,I'm trying to import datasets in DataBrew from a PostgreSQL db. Some tables have Case Sensitive names, others don't.When I try to import Tables with only lowercase letters in their names, everything works well and I'm able to use the dataset.However when the table name includes both lower and upper case letters, the data access fails with the following error :An error occurred while calling o106.count. ERROR: relation "genphensql.sequencingdata" does not existIndeed the table is registered in glue as genphensql.sequencingdata. However the real table name is "GenPhenSQL"."SequencingData".In Glue, all my ETL scripts work for feeding data into my PostgreSQL database. However, as DataBrew uses the table name stored by Glue to try and access the table, this fails.Is there any plan to resolve this problem at the moment from the Glue/DataBrew teams? I think it's a recurrent problem as I have seen other related questions to upper/lowercase table namesThanks a lot for your help !FollowComment"


Question: how to expose put method of spring boot rest api in api gateway

I am building api gateway using REST API and HTTP proxy integration. My spring boot rest end point for PUT method is http://localhost:8080/journey/{id} where id is path variable.How to create method in api gateway so i can use the api gateway's deployed url to hit the spring boot application's put method for updating journey infoFollowComment

Answer: "0Hi,Depends where are you deploying the app.If using lambda (https://docs.spring.io/spring-cloud-function/docs/current/reference/html/aws-intro.html) you can just have a direct proxy integration between api gw and the lambda itself.If using a container, you may need an application load balancer between the api gw and you container (deployed in ECS or EKS).Hope it helps ;)CommentShareEXPERTalatechanswered 25 days agolavanya 25 days agoThank you so much for the reply.I am deploying my spring boot application jar in EC2.I am using request parameters in the GET request but while integrating with api gateway im able to hit get without configuring any request params and without using lambda functions. But i am not able to hit PUT and delete with id as path variables.Sharealatech EXPERT21 days agoI assume you are using HTTP integration? Did you have a read as this? https://awstip.com/spring-boot-application-deployment-with-amazon-api-gateway-ae7272919311Share0In the blog only get method is shown and swagger specs but i would like to know how to do it without swagger.I was able to workaround with @Request Params instead of @Path Variable but please do let me know if an appropriate solution is availbale.Thank you.CommentSharelavanyaanswered 18 days ago"


Question: "Pointing an A Record and CNAME Record to WIX Not Working, A Record not propagating"

"We are tying to point an A Record and a CNAME record to WIX for a www.example.com website.  WIX requires this for verification of the domain.  In this example, lets say the A record would be @.example.com and the IP would be 1.1.1.1 and the CNAME record would be  www.example.com which points to www2@wix.net.  A NS lookup for this example would also show that ww2.wix.net is 2.2.2.2 (for reference).  I have these entries in route 53 under the example.com as requested.  The WIX verifications are failing which at first I believed to be an issue on their end.  Upon further investigation, the A record is not populating out correctly to the rest of the world.  In fact, what's happening is that it is populating as the CNAME records IP of 2.2.2.2 and not the A record that exists stating it is 1.1.1.1   Does anyone have any ideas on why it is behaving in this manner?FollowCommentJason_S a year agoPlease do provide an update to this question and mark it as either accepted or need further assistance. Thank you.Share"

Answer: "0I'm a bit confused because this does seem to be the correct behavior.CNAME does not resolve into any IP and the client DNS resolver will send another request which might lead to an A record.In your case, you seem to suggest you are trying to resolve www.example.com, which is a CNAME of ww2.wix.net, which has a A record of 2.2.2.2.That is the correct behavior. From R53 side it correctly returned a CNAME record (ww2.wix.net) for your inquery (www.example.com) and any DNS resolver you might be using will then send another inquery to the domain specified in the record (ww2.wix.net, which you seem to suggest is not on R53), which returned its A record of 2.2.2.2.CommentShareJason_Sanswered a year ago"


Question: EC2 system upgrade to nitro error

my standard server is down even though I don't have a different account in any way. I'm getting an error switching to nitro how can I fix this? i want to use my server this is a big mistakeFollowComment

Answer: "0It's not clear from your question what has happened here. If this is a production issue, please contact our support team. re:Post is staffed by volunteers and we have no access to your account details. The support team is there to help and can access your account details and find out specifically what is wrong.In this case: If you have switched from one instance type to another (I'm inferring that from the title of the question) then why not switch back to the old instance type?CommentShareEXPERTBrettski-AWSanswered 6 months ago"


Question: Resource Based policy statements for Lambda

I have 2 lambda functions.#1 - calling the #2#2 - with function url with IAM permission setup.Created policy statement with #1's execution role arn and action as lambda:InvokeFunctionUrl and attached to #2But getting a forbidden request by the #2.Do we need to add extra permissions?. Can someone guide me here?FollowCommentkentrad EXPERT19 days agoCan you post your policies?Share

Answer: "0If you are calling Lambda function #2 from Lambda function #1, there shouldn't be a reason why you would want to use a Function URL (which would require you to trigger the function via a Sigv4 signed HTTPS request).Instead, I would suggest updating Lambda function #1 to make an SDK call to invoke the Lambda function #2 directly.CommentShareEXPERTmhjworkanswered 19 days agoAara Amuthan 19 days agoLambda functin #1 is more for orchestration purposes, and lambda function #2 has the actual service implementation.Share"


Question: How do GameLift target-based policies work?

"Hi,I'm looking into scaling options for my fleet and wanted to try target-based scaling (as the simplest option) first.I set the buffer size to 50% (just for the sake of testing) but that doesn't seem to do anything. My fleet has a minimum of 2 instances and a maximum of 12. I would expect this setting to keep 6 instances spun up at all times. Again, this is not my production target, I'm just trying to get a feel for the feature so that I know whether it satisfies our requirements.Am I misunderstanding how this setting works?Thanks in advanceFollowComment"

Answer: "0Hi IngDanko,This doc might help: https://docs.aws.amazon.com/gamelift/latest/apireference/API_PutScalingPolicy.htmlFor example, you might choose to maintain a 10% buffer for a fleet that has the capacity to host 100 simultaneous game sessions. This policy tells Amazon GameLift to take action whenever the fleet's available capacity falls below or rises above 10 game sessions. Amazon GameLift will start new instances or stop unused instances in order to return to the 10% buffer.The scaling policy is based on maintaining number of game sessions rather than number of instance, unless you only specify to host 1 game session per instance.CommentShareJamesM_AWSanswered a year ago"


Question: WorkDocs - Download comments within PDF document

"Is there away to download the comments that were provided in a pdf document on workdocs. Seen the feature for .pptx and .docx, but we cannot seem to find a way to do this for a PDF.FollowComment"

Answer: "0hiThe feature to download PDF with comments do not exist yet in Workdocs. You can download as .pdf, but not the comments. Alternatively, you can install a desktop client for Workdocs and access the .pdf and view the comments on the .pdf file (if you organisation supports the client). The various client versions can be found here https://amazonworkdocs.com/en/clientsThanksArunCommentShareArunanswered 3 months ago"


Question: Log4j with SES or WorkMail

"I have registered a domain "example.com" on Route53, the identity for this domain has been verified on SES, an organisation "example" has been created on WorkMail and a user "user@example.com" has been created and enabled on WorkMail.I'd like to use this user@example.com to send emails from Log4j using the email appender.My .xml property file is as follows:<Appenders>        <Console name="ConsoleAppender" target="SYSTEM_OUT">            <PatternLayout pattern="%d{HH:mm:ss.SSS} [%t] %-5level %logger{36} - %msg%n" />        </Console>        <File name="FileAppender" fileName="application-${date:yyyyMMdd}.log" immediateFlush="false" append="true">            <PatternLayout pattern="%d{yyy-MM-dd HH:mm:ss.SSS} [%t] %-5level %logger{36} - %msg%n"/>        </File>        <SMTP>            <name>EmailAppender</name>            <subject>Error</subject>            <to>recipient</to>            <from>**user@example.com**</from>            <smtpHost>**smtp.mail.us-east-1.awsapps.com**</smtpHost>            <smtpPort>**465**</smtpPort>            <ignoreExceptions>false</ignoreExceptions>            <smtpUsername>**user**</smtpUsername>            <smtpPassword>**********</smtpPassword>            <smtpProtocol>smtps</smtpProtocol>            <HtmlLayout charset="UTF-8" locationInfo="true" />            <ThresholdFilter level="ERROR"/>        </SMTP>    </Appenders>However I get the following error message:ERROR Caught exception while sending e-mail notification.: javax.mail.AuthenticationFailedException: 535 Authentication credentials invalidjavax.mail.AuthenticationFailedException: 535 Authentication credentials invalidI'm having the hardest time trying to find what is missing in my configuration.I've tried to create a SMTP gateway in WorkMail on port 465 with username and password the same as what I use for user@example.com on WorkMail, but I get an error message:Failed to connect to the SMTP gateway. Verify that your gateway configuration is correct and reachable from public network.Finally I've also tried to obtain Amazon SES SMTP credentials using the SES console, and use them instead in my .xml above, but I still get the same error message.At this point I've run out of ideas, any help much appreciated!FollowComment"

Answer: "0Hi,I'm sorry to hear you're experiencing problems sending mail. WorkMail is a Business Email and Calendar Solution which is not intended to be used for automated mailing. SES is the solution to be used for that.The error implies the authentication failed. Are you using the correct region end-point? The SES SMTP credentials are region bound.Kind regards,RobinCommentShareMODERATORrobinkawsanswered 10 months ago"


Question: Website Hosted in s3 bucket is giving the blank for the websire

"I haveenabled public accessbucket policyuploaded filesStill it shows the blank space when browsing the websireFollowCommentmn87 8 months agoI don't know what websire is, but I would encourage you to share screenshots or other information that shows the specific problem or event in detail.Share"

Answer: "2Is this static website hosting in S3? If yes, can you please cross check all the steps in these guide? https://docs.aws.amazon.com/AmazonS3/latest/userguide/HostingWebsiteOnS3Setup.html  and https://docs.aws.amazon.com/AmazonS3/latest/userguide/WebsiteHosting.htmlCommentShareEXPERTAWS-User-Nitinanswered 8 months agoEXPERTIndranil Banerjee AWSreviewed 8 months ago"


Question: Is Systems Manager Default Host Management Configuration (DHMC) compatible with Patch Policy Quick Setup? (Solved)

"I have been testing Systems Manager patching Linux servers for some days.  In the beginning, I struggled with roles setup and autoscaling group with launch templates.  Finally, I figure out the importance of the policies that cannot be added to roles in launch templates and also the tag of the roles.  Now, I can find a working configuration.Afterwards, I notice that AWS has just launched Default Host Management Configuration.  It seems to waive the need to struggle with the IAM roles and policies.  It becomes easy to use Systems Manager to connect to the instances using session manager.  However, when I tried to work out how to use Patch Manager together, it seems that the role added by Quick Setup cannot enable the SSM agent to download the baseline override.  The EC2 do not have a role originally.  The following was logged:/usr/bin/python2.7/usr/bin/python2/usr/bin/python/usr/bin/yumUsing Yum version: 3.4.3Using python binary: 'python2.7'Using Python Version: Python 2.7.1803/21/2023 04:05:07 root [INFO]: Downloading payload from https://s3.dualstack.us-west-2.amazonaws.com/aws-ssm-us-west-2/patchbaselineoperations/linux/payloads/patch-baseline-operations-1.105.tar.gz03/21/2023 04:05:07 root [INFO]: Attempting to import entrance file os_selector03/21/2023 04:05:08 root [INFO]: Running with snapshot id =  and operation = Install03/21/2023 04:05:08 root [INFO]: Downloading Baseline Override from s3://aws-quicksetup-patchpolicy-438724983186-snhqg/baseline_overrides.json03/21/2023 04:05:08 botocore.credentials [INFO]: Found credentials in shared credentials file: /var/lib/amazon/ssm/credentials03/21/2023 04:05:08 root [ERROR]: Unable to download file from S3: s3://aws-quicksetup-patchpolicy-xxxxxxxxxxx-snhqg/baseline_overrides.json.03/21/2023 04:05:08 root [ERROR]: Error loading entrance module.Traceback (most recent call last):  File "common_startup_entrance.py", line 203, in execute    exit(   entrance_module.execute(*argv))  File "/var/log/amazon/ssm/patch-baseline-operations/os_selector.py", line 55, in execute    snapshot_id, override_list=override_list, baseline_override=baseline_override)  File "/var/log/amazon/ssm/patch-baseline-operations/common_os_selector_methods.py", line 279, in fetch_snapshot    baseline_override_dict = load_baseline_override(instance_id, baseline_override, document_step, region)  File "patch_common/baseline_override.py", line 29, in load_baseline_override    baseline_overrides = _download_baseline_override_content(instance_id, baseline_override_path, region)  File "patch_common/baseline_override.py", line 97, in _download_baseline_override_content    if download_file(instance_id, baseline_override_path, file_name, region):  File "patch_common/downloader.py", line 56, in download_file    downloaded = download_from_s3(instance_id, remote_path, local_file_path, region)  File "patch_common/downloader.py", line 35, in download_from_s3    s3_client.download_file(result.group(1), result.group(2), file_path)  File "/var/log/amazon/ssm/patch-baseline-operations/boto3/s3/inject.py", line 172, in download_file    extra_args=ExtraArgs, callback=Callback)  File "/var/log/amazon/ssm/patch-baseline-operations/boto3/s3/transfer.py", line 307, in download_file    future.result()  File "/var/log/amazon/ssm/patch-baseline-operations/s3transfer/futures.py", line 106, in result    return self._coordinator.result()  File "/var/log/amazon/ssm/patch-baseline-operations/s3transfer/futures.py", line 265, in result    raise self._exceptionClientError: An error occurred (403) when calling the HeadObject operation: Forbidden03/21/2023 04:05:08 root [ERROR]: An error occurred (403) when calling the HeadObject operation: ForbiddenTraceback (most recent call last):  File "common_startup_entrance.py", line 203, in execute    exit(   entrance_module.execute(*argv))  File "/var/log/amazon/ssm/patch-baseline-operations/os_selector.py", line 55, in execute    snapshot_id, override_list=override_list, baseline_override=baseline_override)  File "/var/log/amazon/ssm/patch-baseline-operations/common_os_selector_methods.py", line 279, in fetch_snapshot    baseline_override_dict = load_baseline_override(instance_id, baseline_override, document_step, region)  File "patch_common/baseline_override.py", line 29, in load_baseline_override    baseline_overrides = _download_baseline_override_content(instance_id, baseline_override_path, region)  File "patch_common/baseline_override.py", line 97, in _download_baseline_override_content    if download_file(instance_id, baseline_override_path, file_name, region):  File "patch_common/downloader.py", line 56, in download_file    downloaded = download_from_s3(instance_id, remote_path, local_file_path, region)  File "patch_common/downloader.py", line 35, in download_from_s3    s3_client.download_file(result.group(1), result.group(2), file_path)  File "/var/log/amazon/ssm/patch-baseline-operations/boto3/s3/inject.py", line 172, in download_file    extra_args=ExtraArgs, callback=Callback)  File "/var/log/amazon/ssm/patch-baseline-operations/boto3/s3/transfer.py", line 307, in download_file    future.result()  File "/var/log/amazon/ssm/patch-baseline-operations/s3transfer/futures.py", line 106, in result    return self._coordinator.result()  File "/var/log/amazon/ssm/patch-baseline-operations/s3transfer/futures.py", line 265, in result    raise self._exceptionClientError: An error occurred (403) when calling the HeadObject operation: ForbiddenI met similar issues before when I manually created a role for the EC2 without the appropriate tagging.  It seems that the SSM Agent is using the role from DHMC (ie service-role/AWSSystemsManagerDefaultEC2InstanceManagementRole) instead of the role added by Quick Setup (AmazonSSMRoleForInstancesQuickSetup)I guess if I want to use both DHMC and Patch Policy Quick Setup, I need to make some changes to the role from DHMC. Anyone have similar experience?PS. It take a bit time for the EC2 to make use of the newly attached role by quick setup.  After that, it can download the baseline override from S3 and complete the patching task.FollowComment"


Question: VPC peering and Network Firewall

"i am confuse AWS network firewall and peering section.As per AWS documents, it said**AWS Network Firewall cannot be deployed to inspect traffic between VPCs that are peered together; **i did vpc peering VPC 1 (10.1.1.0/16)and VPC2 ( 10.2.1.0/16).VPC 1 have one private subnet ( 10.1.2.0/24) behind the firewallVPC 2 have one private subnet ( 10.2.2.0/24) behind the firewallI have the one private route table destination 10.2.2.0/24 next hop is firewall ID or interface in VPC 2.I add one route to go 10.2.2.0/24 next hop is peer ID in VPC one private route.I have the one private route table destination 10.1.2.0/24 next hop is firewall ID or interface in VPC 1.I add one route to go 10.1.2.0/24 next hop is peer ID in VPC 2.let me know this traffic will pass firewall ? If AWS firewall is didn't support to inspect network traffic if we are using peering ?can we use third party firewall to inspect traffic?FollowComment"

Answer: 1VPC-VPC (east-west) traffic inspection is support with Centralized VPC deployment model with AWS Network Firewall. You will need to leverage Transit Gateway for routing traffic between VPCs. VPC-Peering is not a supported deployment model.You can the reference blog for details.https://aws.amazon.com/blogs/networking-and-content-delivery/deployment-models-for-aws-network-firewall/CommentShareGaryKo_AWSanswered a year ago


Question: Because no permissions boundary allows the cloudformation:DescribeStacks action

"Deploying sns to stage dev (us-east-1)✖ Stack sns-dev failed to deploy (2s)Environment: darwin, node 19.3.0, framework 3.26.0, plugin 6.2.2, SDK 4.3.2Credentials: Local, "default" profileDocs:        docs.serverless.comSupport:     forum.serverless.comBugs:        github.com/serverless/serverless/issuesError:User: arn:aws:iam:::{user} is not authorized to perform: cloudformation:DescribeStacks on resource: arn:aws:cloudformation:us-east-{}:stack/sns-dev/* because no permissions boundary allows the cloudformation:DescribeStacks actionFollowComment"

Answer: 2It seems like the principal that you're trying to deploy with doesn't have the permissions. Can you add a policy such as AWSCloudFormationReadOnlyAccess to the user and try again?CommentShareChris Pollardanswered 5 months ago


Question: Uneven traffic from NLB to the targets in a target group

"I have an NLB -> Target Group -> Targets setup.I added a new target which is healthy. However, the traffic distribution is not even after 4 hours.I came across a couple of posts indicating possibilities around:Target IP cachingLong-lived TCP connectionsAs I don't have control over the client, is there a way I can reach a balanced distribution?FollowComment"

Answer: "1I wanted to address your specific question around how the traffic is distributed across targets.  From the documentation located HERE, we see the following:...For TCP traffic, the load balancer selects a target using a flow hash algorithm based on the protocol, source IP address, source port, destination IP address, destination port, and TCP sequence number. The TCP connections from a client have different source ports and sequence numbers, and can be routed to different targets. Each individual TCP connection is routed to a single target for the life of the connection.For UDP traffic, the load balancer selects a target using a flow hash algorithm based on the protocol, source IP address, source port, destination IP address, and destination port. A UDP flow has the same source and destination, so it is consistently routed to a single target throughout its lifetime. Different UDP flows have different source IP addresses and ports, so they can be routed to different targets...Depending on the timeframe in which you are examining your traffic, you could very well see an imbalanced distribution, based on the number of connections and how they map across the flow hash algorithm described above.  Have you tried testing with a larger group of source IPs against your NLB?  In my experience, as the number of unique flows are established, this "imbalance" is rectified.CommentShareMstein-AWSanswered 3 months agorePost-User-0853392 3 months agoYes, I think the key was to restart the services to give it an opportunity to establish new connectionsShare0Do you have stickyness enabled on the TG?Using sticky sessions can lead to an uneven distribution of connections and flows, which might impact the availability of your targets. For example, all clients behind the same NAT device have the same source IP address. Therefore, all traffic from these clients is routed to the same target.CommentShareGary Mcleananswered 3 months ago0No, it isn't.I ended up restarting the entire service, which broke the long connections, it is more even now.CommentSharerePost-User-0853392answered 3 months ago"


Question: Classic Load Balancer terminates large downloads mid request

"Over the past week, clients have reported that any downloads approximately 600+ MB will be terminated mid request within a few seconds of the original request starting. I've checked multiple places to make sure its not my app that's dropping the connection or the EC2 instance and have verified that instances outside the Classic ELB can download the same file just fine.My production workload is in Opsworks Stacks and I bring up and take down the webservers according to load, and time of day. Opsworks very cleanly adds the instances to the load balancer after they come up and removes the instance from the load balancer before shutting down. I have looked into migrating to NLB or ALB, however since AWS still does not support those load balancers in Opsworks Stacks I am stuck using the Classic Load Balancer.After pounding my head against the wall I opened a support ticket to report a possible problem. AWS Support confirms the bug is known and "Classic Load Balancer experiences high resource utilization, when large files are being uploaded and downloaded to or from the target EC2 instances". Also I was informed there is no ETA of a fix. This was April 11, I have escalated to my account manager as well, but apparently he has not been able to get any traction either.I am posting so there is visibility.FollowComment"

Answer: "0Hello, and thank you for reaching out!I have reviewed the case you opened with AWS Support and the resulting investigation from the internal ELB team regarding this known issue with Classic Load Balancers.This does appear to be a unique situation wherein the recommended workaround of migrating to ALB / NLB is explicitly unsupported by the AWS OpsWorks Stacks service utilizing ELB. I do see that there some environments wherein an Application Load Balancer can be used with some OpsWorks Stacks, but I do understand if this workaround does not fit your environment.I wanted to let you know that I have engaged internal teams further to determine if there is more information or a workaround that can be found for this issue. I encourage you to follow up on this via the original support case or via your account manager.CommentShareSUPPORT ENGINEERJustin_Banswered a year ago"


Question: Safari Browser does not store ApiGateway + S3 app login  cookie because this architecture leads to SameSite: None attribute

"My app has its back-end on API Gateway and front-end is on a S3 bucket. That means they have different URLs and the cookie ends up being samesite: None. Because of that, Safari Browser doesn't store the login cookie I send from the back-end even with secure: true.My question is, is it possible to mantain this architecture and still manage to send a cookie that Safari can store ? If not possible, what would the architecture look like to be able to send cookies samesite: true ? If you can point me to the right direction I appreciate it.FollowComment"


Question: AWS EC2 Cost Reduction - Instance scheduler vs other method for 20 minute daily workload

"I am running a t3.xlarge EC2 instance for daily Veeam backup for MS365.  The job only runs for about 20 minutes per day.  I am looking for the best / most straightforward method to reduce costs of this instance.  I started looking into using instance scheduler to start and stop the instance based on a schedule, and also looked into different instance options that may "bank" compute resources?  Any suggestions would be greatly appreciated.FollowComment"

Answer: "0If this is something that has a persistent configuration then instance scheduler is a good fit. This way it will just start the instance when needed without much manual intervention needed. You can do persistent spot requests as well, which may lower your cost, but you run into the chance if a spot instance isn't available you might run into issues. https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/spot-requests.htmlCommentShareEXPERTRob_Hanswered a year ago0I think I would set up an Auto Scaling Group with a Scheduled scaling policy and use a Spot instance defined in the ASG or Launch Template.CommentShareEXPERTkentradanswered a year ago0The options from both Rob_H and kentrad are both valid. Another possible option is to have a Lambda scheduled through Event Bridge to start the instance [1] and when the processing is done, a simple shutdown script can be executed on the machine (like /sbin/shutdown -h now). This way the instance is only running for the time it needs to be. I personally use this as it's the simplest for me to keep track of.The lambda in the link has a stop option as well, I do not use that option, but it's available if it meets your needs.[1] https://aws.amazon.com/premiumsupport/knowledge-center/start-stop-lambda-eventbridge/CommentShareEXPERTShlomo Dubrowinanswered a year ago"


Question: Running an automation document starting from a specific step?

hi.. is there a possibility to run an automation document starting from step 5 for example all the way to the end? and invoke that as a parameter?FollowComment

Answer: "2Accepted AnswerHello,Have you tried the branch feature ?https://docs.aws.amazon.com/systems-manager/latest/userguide/automation-branchdocs.htmlThanksnabilCommentShareNabilanswered a year ago0To expand on what @Nabil said, you can create (or modify) an Automation Document to use the branch feature, so that it checks a parameter you pass in when you start execution, and then skips (or does not skip) steps based on the value of that parameterCommentSharesetheliotanswered a year ago"


Question: AWS IoT Greengrass: How does the deployment Rollback function work? what kind of errors does it roll back?

"In AWS IoT Greengrass, there is a Rollback option for deployments under "Deployment Policies". If I understood correctly it to rolls back devices to their previous configuration if the deployment fails. I wanted to test this so I purposely build a nonworking ECR docker image and deployed it through a greengrass component. (I basically introduced a python filenotfouderror by commanding to run a nonexistend python script in my Dockerfile.)Before that, I had a working container running. What I would like to see is my device rolling back to running the old (working) container after realizing that the container failed. However, this doesn't happen. Only the device state changes to unhealthy in the AWS console.Now my question: What kind of errors is this Rollback function able to detect/handle? and do you have any suggestions on how I could achieve my goal of rolling back the device if the docker cmd or any file therein shows an error?Thanks a lot for you help!FollowComment"

Answer: "0Hi. Given that your device is unhealthy, it seems the rollback didn't occur or it failed. Please check the device deployment status (describe-job-execution) as described here (or look in the console): https://docs.aws.amazon.com/greengrass/v2/developerguide/check-deployment-status.html#check-device-deployment-statusAnd please check the Greengrass and component logs as described here: https://docs.aws.amazon.com/greengrass/v2/developerguide/monitor-logs.htmlCommentShareEXPERTGreg_Banswered 3 months agorePost-User-9168686 2 months agothanks for your answer. I've been trying to replace one component of my deployment by a new different one (that shall fail). maybe the rollback only works between different versions of the same component?Share0The job execution always stated SUCCESSFUL but the device is unhealthy.This is my Component description:{  "RecipeFormatVersion": "2020-01-25",  "ComponentName": "com.example.MyPrivateDockerComponent",  "ComponentVersion": "1.1.6",  "ComponentType": "aws.greengrass.generic",  "ComponentDescription": "A component that runs a Docker container from a private Amazon ECR image.",  "ComponentPublisher": "Amazon",  "ComponentDependencies": {    "aws.greengrass.DockerApplicationManager": {      "VersionRequirement": ">=2.0.0 <2.1.0",      "DependencyType": "HARD"    },    "aws.greengrass.TokenExchangeService": {      "VersionRequirement": ">=2.0.0 <2.1.0",      "DependencyType": "HARD"    }  },  "Manifests": [    {      "Platform": {        "os": "all"      },      "Lifecycle": {        "Run": "docker run --rm 242944196659.dkr.ecr.eu-central-1.amazonaws.com/test_repo:fileerror",        "Shutdown": "docker stop $(docker ps -q --filter ancestor=242944196659.dkr.ecr.eu-central-1.amazonaws.com/test_repo:fileerror)"      },      "Artifacts": [        {          "Uri": "docker:242944196659.dkr.ecr.eu-central-1.amazonaws.com/test_repo:fileerror",          "Unarchive": "NONE",          "Permission": {            "Read": "OWNER",            "Execute": "NONE"          }        }      ]    }  ],  "Lifecycle": {}}And these are the errors component errors I get on CloudWatch:[WARN] (Copier) com.example.MyPrivateDockerComponent: stderr. Usage:  docker stop [OPTIONS] CONTAINER [CONTAINER...]. {scriptName=services.com.example.MyPrivateDockerComponent.lifecycle.Shutdown, serviceName=com.example.MyPrivateDockerComponent, currentState=BROKEN`and2023-03-27T09:11:24.110Z [WARN] (pool-2-thread-14) com.example.MyPrivateDockerComponent: shell-runner-error. {scriptName=services.com.example.MyPrivateDockerComponent.lifecycle.Shutdown, serviceName=com.example.MyPrivateDockerComponent, currentState=BROKEN, command=["docker stop $(docker ps -q --filter ancestor=242944196659.dkr.ecr.eu-central-1..."]}so apparently there is a problem with my defined shutdown command. Because the container is exited and removed immediately after it fails, tha Shutdown command can't find the container to Shutdown anymore. but is that really the reason why the Rollback doesn't work and the device becomes unhealthy?CommentSharerePost-User-9168686answered 2 months ago"


Question: RDS performance insights Top Sql full query

According to this: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_PerfInsights.UsingDashboard.SQLTextSize.html#view-download-textI should see a way to download the query in question. But I do not see a download button. I only see a copy button which also copies the shown 500 chars.How do I see the full query? Or see the download button to get it?FollowComment

Answer: "1Accepted AnswerYou need to click the plus sign next to the SQL statement you want to download, there should be another entry under that statement that you can select, which will then show both the copy, and the download button in the pane below.Without expanded and selecting the child statement, you will only have a copy button.CommentSharekyageranswered 9 months ago"


Question: intermittent performance issues with the OpenSearch cluster

"We are having intermittent performance issues with our OpenSearch cluster.  There are multiple daily occurrences of long-running OpenSearch queries when executing our lambda function.  When this occurs there is record like the example below in the Open Search es-application-logs2022-09-09T11:37:35.083-04:00[2022-09-09T08:37:34,853][WARN ][o.o.t.TransportService ] [09122640e72c461b2c57179fcc08d339] Received response for a request that has timed out, sent [44029ms] ago, timed out [24016ms] ago, action [PATH], node [{d52117a284ca0ada6bd69784bbd8a8c5}{ekzv2YqtT8q7b-TVvXGKEQ} {aGQCli5rTFKAeGjWRihvTQ}{IP}{IP} {dimr} {dp_version=20210501, distributed_snapshot_deletion_enabled=false, cold_enabled=false, adv_sec_enabled=true, _AMAZON_INTERNAL, cross_cluster_transport_address=IP, shard_indexing_pressure_enabled=true, _AMAZON_INTERNAL}], id [3986058]Normally these queries complete with sub second response times.  The impact to our application is that occasionally requests to API Gateway are timing out due to the long running Lambda and results in 504 Gateway Timeout being returned to the API consumer.Here is an example of the OpenSearch HTTP request{"method": "POST","hostname": "vpc-tycc-analytics-dev-os-qs4p2rpyars2oacibpdih4ctmu.ca-central-1.es.amazonaws.com","query": {"size": "500","_source": ["CurrentAgentSnapshot"],"sort": "CurrentAgentSnapshot.Configuration.Username:asc"},"headers": {"Content-Type": "application/json","host": "vpc-tycc-analytics-dev-os-qs4p2rpyars2oacibpdih4ctmu.ca-central-1.es.amazonaws.com"},"body": "{"query":{"bool":{"must_not":{"term":{"CurrentAgentSnapshot.Configuration.RoutingProfile.Name":"Basic Routing Profile"}}}}}","protocol": "https:","path": "/agent-records-real-time-alias/_search"}Are you able to please investigate and provide feedback as to what is causing the performance issue along with remediation action.Let me know if you require additional information.Thanks,BTWThe following is out cluster specification:• Deployment type: Dev/Test• OS version: 1.2 (latest)• Availability Zones: 1AZ• Instance type: t3.small.search• Number of nodes: 2• Storage type: EBS• EBS volume type: General Purpose (SSD) - gp2EBS storage size per node: 10 GBFollowComment"

Answer: "0Hi,With the limited info available:Look for more log lines (before + after) the one you have shared in the post. There could be some messages related to garbage collection, nodes getting disconnected etc.Check cloudwatch metrics like cluster status, free storage space, indexing rate, search rate, CPU utilization, JVM pressure, Memory utilization at around the incident time for any deviation.Do you have too many shards and indices? You can check some best practices here - https://docs.aws.amazon.com/opensearch-service/latest/developerguide/bp.html#bp-sharding-strategy--SydCommentShareSydanswered 8 months agorePost-User-6696704 8 months agoMany thanks. Please find below the log list for the first part of your answer022-10-10T18:19:51.482-04:00[2022-10-10T15:19:50,699][WARN ][o.o.m.j.JvmGcMonitorService] [09122640e72c461b2c57179fcc08d339] [gc][3851910] overhead, spent [815ms] collecting in the last [1.1s]2022-10-10T18:20:53.519-04:00[2022-10-10T15:20:52,911][WARN ][o.o.m.j.JvmGcMonitorService] [09122640e72c461b2c57179fcc08d339] [gc][3851943] overhead, spent [29.4s] collecting in the last [30.1s]2022-10-10T22:18:23.563-04:00[2022-10-10T19:18:23,014][WARN ][o.o.t.TransportService ] [09122640e72c461b2c57179fcc08d339] Received response for a request that has timed out, sent [54249ms] ago, timed out [34233ms] ago, action [PATH], node [{d52117a284ca0ada6bd69784bbd8a8c5}{ekzv2YqtT8q7b-TVvXGKEQ}{vBbzFjeDTymDJ7NEPqJBLg}{IP}{IP}{dimr}{dp_version=20210501, distributed_snapshot_deletion_enabled=false, cold_enabled=false, adv_sec_enabled=true, AMAZON_INTERNAL, cross_cluster_transport_address=IP, shard_indexing_pressure_enabled=true, AMAZON_INTERNAL}], id [13800571]2022-10-10T22:18:23.566-04:00[2022-10-10T19:18:23,018][WARN ][o.o.t.TransportService ] [09122640e72c461b2c57179fcc08d339] Received response for a request that has timed out, sent [33232ms] ago, timed out [13207ms] ago, action [PATH], node [{d52117a284ca0ada6bd69784bbd8a8c5}{ekzv2YqtT8q7b-TVvXGKEQ}{vBbzFjeDTymDJ7NEPqJBLg}{IPShareSyd 8 months ago[gc][3851910] overhead, spent [815ms] collecting in the last [1.1s][gc][3851943] overhead, spent [29.4s] collecting in the last [30.1s]It seems to be spending considerable time in GC which is not good but there is also 4 hour gap between GC log event and timeout log event. Can you corroborate this by checking the Cloudwatch metrics as mentioned in #2 of the initial comment.Share"


Question: EKS upgraded from 1.21 to 1.22

"I upgraded EKS from 1.21 to 1.22.Later Application not loaded . getting "502 Bad Gateway". Could someone help please . It's urgent.FollowCommentAWS-User-7164347 6 months agoAre you using an old version of nginx ingress controller? Because 1.22 removed some deprecated API versions for ingress related resources, which causes the ingress controller to crash. I had similar issue (on test setup first), and moved to more recent version of ingress controller.Share"

Answer: "0Can you please provide more details of your error. Looks like it's application specific, did you check deprecation guide for moving from 1.21 to 1.22 https://kubernetes.io/docs/reference/using-api/deprecation-guide/. Make sure your application is not using any deprecated API versions.CommentShareAWS-User-0817668answered 6 months ago0Hello,So the error could be due to many reasons. In order to find a cause behind the error I would suggest you to perform below set of actions and see if that help you in finding the issue.kubectl get pods -o wide ---> Look for the application pods which you are trying to connect tokubectl get svc ---> look for the service which is front ending the podskubectl describe svc <service-name>   ---> Look for the endpoints in the output and compare if they are reffering to right pods by matching the IP.kubectl get ing  --> Look for the ingress which has the above service as backend.kubectl describe ing <ingress-name> ---> Check for the events in the output and see if there is any error.In AWS console, go the the load balancer section and look for the target group and check for the registered targets, are they having the same IP as your pods(in case of IP type target) or node IP( in case of instance type target)Check if the targets are healthy?If you do not see any targets in the target group, look for the controller logs.I hope above steps will help you in narrowing down the issue. Please let me know if there is any error which you are not able to figure out or above steps does not helps you.CommentShareSUPPORT ENGINEERLakshay jainanswered 6 months ago"


Question: Log Amazon Connect Calls in Salesforce

"Hello,Can anyone help me understand the call logging functionalities provided by the Amazon Connect CTI Adapter for Salesforce.We need to log the below fields:Direction: inbound/outboundCall fromCall toTime of call (which time zone?)Answered byLengh of phone callQueue nameContact Trace Record URLAny pointers regarding how to go about this?Thanks in advance!FollowComment"

Answer: "0Resolved.CommentSharevkondhaanswered 2 years agoVincentgking a year agoHey! How did you wind up resolving this. I'm trying to find the best way to get all the relationships firing so we can display the CCA in as many places as it makes sense. I can get it to show on cases with the Case field amazonconnect__AC_Contact_Id__c. I can't however for the life of me figure the best way to tackle relating to the contact since I can't update the CCA, or CTR mid call.Share0The docs is a great place to start https://amazon-connect.github.io/amazon-connect-salesforce-cti/CommentShareDanBloyanswered 2 years ago0I did check the document but could not locate anything related to call logging particularly.Would you please share any relevant snippet/page number/anything else that you come across in the docs?Thanks!CommentSharevkondhaanswered 2 years ago0https://amazon-connect.github.io/amazon-connect-salesforce-cti/docs/lightning/05-appendices/appendix-d-cti-flow-examples/01-cti-flow-examplesSee: Create a taskCommentShareDanBloyanswered 2 years ago0Thanks a lot!While this helps greatly the CTI Flow does not pass all the available values to the Task object ex. customer phone number.If I had to save some other details to fields like Phone, Description etc how can that be done?Can you please help me understand how the otherTaskFields in the task block can be used to save these details?Or is there any other way?CommentSharevkondhaanswered 2 years ago0Thank you @DanBloyThis is exactly what I was looking for.While this is greatly helpful it does not save all the available fields on the Task records ex. Customer Phone Number.How can we store details in fields other than the ones on the task block? Ex. Phone, Description etcCan you please help me understand how to use the otherTaskFields on the task block?I tried to put this custom field in the key "Customer_Phone_Number__c" and use "rawPhoneNumber" as the value. It did not copy the value."Description" and "Hello" worked thoughOr if there is any other way to achieve this?Edited by: vkondha on May 20, 2021 3:53 AMCommentSharevkondhaanswered 2 years ago"


Question: Greengrass allow all local operations for a component

"I'm getting started with greengrass(v2) and am just trying a REALLY BASIC call:clientobj = GreengrassCoreIPCClientV2()details_response = clientobj.get_component_details(component_name="hello")and I get BLOCKED."permission denied".to get component details ABOUT MYSELF?!?!?There is no clue what magical string I should even put in the accessControl section of the recipe of the component, in the API docs athttps://aws.github.io/aws-iot-device-sdk-python-v2/awsiot/greengrasscoreipc.htmlSo rather than having to come back and ask what the magic string is, for EVERY SINGLE NEW API call, I'd like to know what the magic string is, to tell the greengrass Nucleus level controls, "shut up and get out of the way".I'm perfectly happy with the access controls we have at the cloud level. I dont want Yet Another Layer of security to deal with at the greengrass Nucleus level.FollowComment"

Answer: "0Well, thanks for the convenient reference to that stuff...I would still prefer, however, some kind of solution that looked likeaccessControl:  aws.greengrass.*:    operations: *    resources: *Or alternatively, some sort of  accessControl:     disable: true?its nuts that there are conflicting examples, for supposedly the same thingFor example, sometimes, the examples say I should use syntax likecom.me.myapp:cli:1but others saycom.me.myapp:getconfig:1?!?!?Where's the sense?Just let me turn all the stupid access stuff OFF completely.CommentSharerePost-User-8057778answered 3 months agoGreg_B EXPERT3 months agoI understand. You can use wildcards for the resources at least, but I appreciate that's not what you're after. Please consider to raise these issues here: https://github.com/aws-greengrass/aws-greengrass-nucleus/issues. Also, in regards to conflicting examples, I'm not sure which parts of the documentation you're specifically referring to. Please be aware that there is a Feedback button near the top right of every page of the Developer Guide. We'd appreciate you calling out any errors, conflicts or confusions you find.ShareMichaelDombrowski-AWS EXPERT3 months agoTo allow all, the following should work. However, I really cannot recommend this as it goes against every security best practice known.accessControl:  "*":    operations: *    resources: *Share0Thanks MIchael,I can confirm that this works:accessControl:  "*":    operations: *    resources: *This will be useful for me in the future If I need it.However, I will also confirm that for just the get_component_details, this works:    accessControl:      randomlabelhere:        com.bolthole.hello:          operations:            - "aws.greengrass#GetComponentDetails"          resources:            - "*"What was confusing me was the bit right after accessControl:I didnt understand why it was "aws.greengrass.Cli", and why some examples used it with ":cli:", but others with "getconfig"Apparently, its just a random user-chosen label, which is why I used the above, and it actually works as is, for my component called com.bolthole.hello.CommentSharerePost-User-8057778answered 3 months agorePost-User-8057778 3 months agowait... maybe it isnt random.. .now its working all the time, even if I put in NO access control??And even if I removed the component before doing a new deploy??This stuff is really confusing.To explain to "insiders", the reason why this isnt clear is:How doesGreengrassCoreIPCClientV2().component_details()relate to "aws.greengrass.Cli" ?!?Its a direct nucleus IPC API call. It should work if the Cli component isnt there.So how does the accessControl spec require using THAT, to grant access to that call??SharerePost-User-8057778 3 months agoOkay, hopefully final summary :-/I had changed my code.GreengrassCoreIPCClientV2().get_component_details(component_name="com.bolthole.hello")requires    accessControl:      aws.greengrass.Cli:        com.bolthole.hello:          operations:            - "aws.greengrass#GetComponentDetails"          resources:            - "*"even if the component is itself.butGreengrassCoreIPCClientV2().get_configuration()Does not require any access control.Still doesnt make sense why the get_component_details access needs to be filed under "aws.greengrass.Cli" though !!!Share0Hi. Authorization details here: https://docs.aws.amazon.com/greengrass/v2/developerguide/ipc-local-deployments-components.html#ipc-local-deployments-components-authorizationCommentShareEXPERTGreg_Banswered 3 months ago"


Question: Set up VSCode with SSO

"I'm trying to authenticate to my AWS account via IAM Identity Center SSO through my VSCode using AWS Toolkit.My account has the 'AdministratorAccess' policy tied to the permission set, and my user was assigned to this account.I authenticate via VSCode's AWS Toolkit.  In the top left, it says 'Connected with IAM Identity Center (Identity Store ID)'.Right below, it shows 'Select IAM credentials to view resources'.  Why is it asking this?  Am I not supposed to be able to view the resources with my SSO access?  I'm trying to follow AWS's security advice to stick with SSO access instead of long-term keys.FollowComment"

Answer: 0Have you followed these instructions https://docs.aws.amazon.com/toolkit-for-vscode/latest/userguide/sso-credentials.htmlMore here https://docs.aws.amazon.com/toolkit-for-visual-studio/latest/user-guide/sso-credentials.html?CommentShareGary Mcleananswered a month ago


Question: Codebuild Batch gone extremely slow in eu-west-1

"Hi AWS,Over the past couple months, I have noticed that the builds in the eu-west-1 region (the only one I use to be fair) has gone incredibly slow, especially with batch builds.2 months ago, the one batch with less than 20 builds in it would complete each x86_x64 based builds in under 5 minutes, and the aarch64 ones would do in about 7 minutes, as noticed that often getting the ARM builds out of the queue takes a couple minutes longer.This has now gone so slow that the exact same build project, working for over a year, is regularly failing due to timeout. The timeout is set to 1h, which is already an average of 6x longer than it was necessary before.What's causing such slowness ?FollowComment"

Answer: "0Hello,The information provided is quite less to dig deep into the issue. There could be multiple factors responsible for the same. Hence the best scenario would be to open up an AWS Support Case & then provide the relevant information related to memory, latency etc to determine the cause for the same.Meanwhile, below is the document provided as a best practice for the AWS Code build to improve performance:https://aws.amazon.com/blogs/devops/improve-build-performance-and-save-time-using-local-caching-in-aws-codebuild/CommentShareSUPPORT ENGINEERAWS-User-Chiraganswered 10 months agoJohnPreston 10 months agoThe builds are not slow to execute. They are slow to start!. It takes a good 40 minutes for a "nested" build project to start. They are stuck in the queue all that time, but once they run, no issues during the build is observed.And not, I am not reaching the per account per region limit of concurrency builds.ShareJohnPreston 10 months agoAlso seen similar posts in other AWS Regions that were posted quite close the time I first started to notice the latency in getting the builds from queued to start / provisioning. So this is something that either is going slow in the codebuild backend or, but much more doubtful, AWS is "running out" of capacity for codebuild projects to run in their allocated pool ?Share"


Question: .well-known dir not deployed

"When deploying a basic Jekyll site, Amplify Console does not seem to include the .well-known dirRepo: https://github.com/huphtur/well-knownRunning this locally works fine: http://localhost:4000/.well-known/dnt-policy.txtOn Amplify the file is missing: https://master.d1u5qctrk5epup.amplifyapp.com/.well-known/dnt-policy.txtNote line 33 in _config.yml: https://github.com/huphtur/well-known/blob/master/_config.yml#L33Anyone have any idea how to fix that?FollowComment"

Answer: 0We explicitly exclude deploying . files unless you give an absolute path.You have to add the .files path in buildSpec file.Example:baseDirectory: /buildfiles:- '**/*'- .well-known/assetlinks.jsonCommentShareAWS-User-0568200answered 4 years ago


Question: SES 10MB Limits

"This is NOT a LIMIT INCREASE question. Using SES we cannot receive e-mails with a total size > 10 MB. Amazon says the maximum RECEIVING (not Sending) size is 40MB. Amazon states that we need to upgrade to SES API V2, but we don't use API's to RECEIVE e-mails to SES. Rather, our SES account receives e-mails from Microsoft Exchange, GMail, Yahoo, Hotmail, etc., etc., etc., and nowhere ever have we been able to RECEIVE an e-mail to SES greater than 10MB.  We've received over 100,000 e-mails to SES and none are over 10MB. For example, If we send a 15MB e-mail to SES it won't process it. We can prove this.It is our position that SES cannot receive e-mails from the outside community (not V2 of their SDK) greater that 10MB. Please, if someone has any information that can assist we'd appreciate it. Currently Amazon wants us to upgrade our plan to pay for support when we feel their published documentation misrepresents their offerings.Cheers!FollowComment"

Answer: "0Accepted AnswerHi,You should be able to receive messages and store them in S3 buckets up to 40 MBs, regardless the sender and whether he uses SESv2 or not. This is mentioned here:https://docs.aws.amazon.com/ses/latest/dg/quotas.html#:~:text=Maximum%20email%20size%20(including%20headers)%20that%20can%20be%20stored,NoThe fact that you cannot receive messages greater than 10MBs could have something to do with the sender and not the receiver. Of course this is not guaranteed or confirmed. To have a more concise answer, you will have to open a case with SES Premium Support, and explain what happens exactly. By the way, I've just tested that and it worked fine with me.Hope this helps!MoCommentShareMoanswered 2 months ago0Hi Mo.Thank you for your response. After some additional testing, I agree with you that SES does receive the e-mail, but SES does something funky. When you're using an SNS trigger on an S3 bucket that SES dumps into and you send an e-mail to SES with a ~8+ MB attachment the Signature becomes to large for SNS to deliver. Interestingly, sending a 30MB e-mail directly to S3 (circumventing SES) works because for some reason the SNS Signature is much smaller. It seems that when SES receives an e-mail the SNS Signature is relative in size to the size of the S3 contents, but this is not the case when SES is not a part of the picture.Cheers!CommentSharecody-s-wireanswered 2 months ago0Hi,I am not sure that I do understand what you are doing correctly, so let me try to validate my understanding.You are using SES to receive messages and store them in S3 bucket.On the S3 side, you configured SNS topic to be triggered once an object is placed in the S3 bucket.This SNS topic is capable of generating a notification, when the message placed in the S3 is smaller than 10MBs. However it is not doing the same, when the message delivered to the S3 bucket is larger than 10MBs.Did I get that right?You also said, that the SNS notification works fine when you send a message to the S3 bucket without SES being involved in the equation. Did I get that right? If yes, how exactly do you send messages to S3 without SES being involved?Thanks!MoCommentShareMoanswered 2 months ago"


Question: Error: The provided entity lists contained only generic or high-frequency words. Please provide additional unique entity names for training

I was trying to train Comprehend to identify my custom types. When I submit a training job to identify my custom entities it comes up with the error below."The provided entity lists contained only generic or high-frequency words. Please provide additional unique entity names for training."What does the error really mean?I had created 5 entity type each having 200 different text and then nearly 40 documents of training data. Each of the training data were store as separate files in the s3 bucket. I provided spearate S3 bucket names for both the entity.csv and for the 40 documents stored as txt filesAny help will be appreciatedFollowComment

Answer: "0Comprehend will filter out stop words, such as "the", from the provided list of entity names. If Comprehend finds no samples for a given entity type after this filtering, then it will result in the error message mentioned. Please make sure you aren't using stop words for entity names.CommentShareAWS-Tonyanswered a year ago"


Question: DNSSEC Removal for transferred domain

"I have a domain that has DNSSEC enabled that I am trying to get removed, but the current registrar is being uncooperative.If I transfer the domain to AWS Route 53, can AWS remove the DS records created by the previous registrar?Thank you in advance.FollowComment"

Answer: "4Accepted AnswerYou can transfer your domain to AWS Route 53, and once the transfer is complete, you can manage the DNSSEC settings for your domain, including removing the DS records.Transferring domains to Route 53https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/domain-transfer-to-route-53.htmlManaging DNSSEChttps://docs.aws.amazon.com/Route53/latest/DeveloperGuide/domain-configure-dnssec.htmlCommentShareEXPERTsedat_salmananswered 2 months agoEXPERTTushar_Jreviewed 2 months ago"


Question: "TransferManager upload times out after 6 to 7 minutes, stops at 50.1%"

"Process ends with an exception and this error message: "Your socket connection to the server was not read from or written to within the timeout period. Idle connections will be closed. (Service: S3, Status Code: 400, "  File I'm trying to upload is 3GB. Ran this four times.  First time it stopped at about 35%, but then last 3 times stopped at 50.1%.  Here's the code and gradle fileS3AsyncClient s3AsyncClient;    S3TransferManager transferManager;public S3Upload() {        s3AsyncClient =                S3AsyncClient.crtBuilder()                        .credentialsProvider(DefaultCredentialsProvider.create())                        .region(Region.US_EAST_1)                        .targetThroughputInGbps(20.0)                        .minimumPartSizeInBytes(8 * MB)                        .build();        transferManager =                S3TransferManager.builder()                        .s3Client(s3AsyncClient)                        .build();}    public void writeFileToS3(String bucketName, String fileName,String filePath) {        UploadFileRequest uploadFileRequest =                UploadFileRequest.builder()                        .putObjectRequest(b -> b.bucket(bucketName).key(fileName))                        .addTransferListener(LoggingTransferListener.create())                        .source(Paths.get(filePath))                        .build();        FileUpload fileUpload = transferManager.uploadFile(uploadFileRequest);        CompletedFileUpload uploadResult = fileUpload.completionFuture().join();        System.out.println(uploadResult);    }           public static void main(String [] args)   {          S3Upload fileUpload = new S3Upload();          String bucket = args[0];          String destFile = args[1];          String srcFile = args[2];          System.out.println("Start date and time: " + LocalDateTime.now().toString());          fileUpload.writeFileToS3(bucket, destFile, srcFile);          System.out.println("End date and time: " + LocalDateTime.now().toString());  }plugins {    id 'java'}group 'org.example'version '1.0-SNAPSHOT'repositories {    mavenCentral()}dependencies {    implementation platform('software.amazon.awssdk:bom:2.20.56')    implementation 'software.amazon.awssdk:s3'    implementation 'software.amazon.awssdk:s3-transfer-manager'    implementation 'software.amazon.awssdk.crt:aws-crt:0.21.14'    implementation 'org.slf4j:slf4j-api:'    implementation 'org.slf4j:slf4j-simple:2.0.6'    testImplementation 'org.junit.jupiter:junit-jupiter-api:5.7.0'    testRuntimeOnly 'org.junit.jupiter:junit-jupiter-engine:5.7.0'}test {    useJUnitPlatform()}FollowComment"

Answer: "0Accepted AnswerDon't know if this is the only solution, but I ended up setting the throughput target to a value closer to my network bandwidth (home internet), instead of using the 20 Gbps from the AWS examples3AsyncClient =                S3AsyncClient.crtBuilder()                        .credentialsProvider(DefaultCredentialsProvider.create())                        .region(Region.US_EAST_1)                        .targetThroughputInGbps(.2)  <================                        .minimumPartSizeInBytes(8 * MB)                        .build();Upload completed in 43 minutes for a 3GB fileCommentSharerePost-User-2320923answered a month ago0Did you see this documentation?  Hope it helps.https://docs.aws.amazon.com/AWSJavaSDK/latest/javadoc/com/amazonaws/services/s3/transfer/TransferManager.htmlCommentSharejschwar313answered a month agorePost-User-2320923 a month agoUnfortunately, I think the link is to a Java 1.x sdk version.  My original upload program was using the 1.x version but the upload would get stuck at 99%. So based on https://stackoverflow.com/questions/65207720/multipart-upload-using-aws-java-sdk-hangs-at-99, I looked for Java 2 flavor of TransferManager. Example found at https://docs.aws.amazon.com/sdk-for-java/latest/developer-guide/transfer-manager.html. The documentation for the .targetThroughputInGbsp() method indicates the default is 10, and that hung. Documentation also says the target should be set to max network bandwidth of the host, so I set the target to .2  It has managed run for more than 8 minutes so far, but progressing more slowly. Will continue to monitorShare"


Question: EFS Replication across accounts

"Hello,As I know, we can create a replication in any EFS to replicate the data to another EFS in another region.Is this approach available for Replication across accounts ?If not, what the best practice to replicate EFS accross accounts?ThanksFollowComment"

Answer: "1Accepted AnswerHi, @MaanYou have several options.First, the EFS backup function and native replication function do not support cross-account.If your multiple AWS accounts are in the same AWS Organizaitons, you can use the AWS Backup cross-account feature.https://docs.aws.amazon.com/aws-backup/latest/devguide/manage-cross-account.html#enable-cross-accountIf you're in another organization, you can use the AWS DataSync cross-account Transfer feature.https://docs.aws.amazon.com/efs/latest/ug/trnsfr-data-using-datasync.htmlCommentShareEXPERTiwasaanswered a year ago"