Question: cloudshell persistance expiring service is ongoing

i am new user of aws free tier account so i dont no about cloudshell but bymistake the persistance cloud shell service is ongoing instead of closed so how i can close this service and in notification schedule change value is 1 instead of 0FollowComment


Question: AWSIoTPythonSDK - OSError: [WinError 10038] An operation was attempted on something that is not a socket

"Trying to connect to a IoT thing via code to simulate a device with Python. This code was working before and now I'm getting this error.The code is straight forward.import time as tfrom datetime import datetimeimport AWSIoTPythonSDK.MQTTLib as AWSIoTPyMQTTdef helloworld(self, params, packet):    print(packet.payload)myCLIENT = AWSIoTPyMQTT.AWSIoTMQTTClient('test_thing')myCLIENT.configureEndpoint('myEndPoint', 8883)myCLIENT.configureCredentials("Path to AmazonRootCA1.pem", "Path to private.pem.key", "Path to certificate.pem.crt")myCLIENT.configureOfflinePublishQueueing(-1)  # Infinite offline Publish queueingmyCLIENT.configureDrainingFrequency(2)  # Draining: 2 HzmyCLIENT.configureConnectDisconnectTimeout(10)  # 10 secmyCLIENT.configureMQTTOperationTimeout(5)  # 5 secprint('Connecting...')myCLIENT.connect()print('Connected')def loop():    temperature = 20    humidity = 67    while True:        curr_dt = datetime.now()        myCLIENT.publish(            topic='test_thing/test',            payload='{"timestamp": ' + str(int(round(curr_dt.timestamp()))) + ', "temperature": ' + str(temperature) + ', "humidity":' + str(humidity)+', "project_id": 1}',            QoS=1)        if temperature < 25:            temperature += 0.01            humidity += 0.005        else:            temperature -= 0.01            humidity -= 0.005        t.sleep(1)if __name__ == '__main__':    try:        loop()    except KeyboardInterrupt:        myCLIENT.disconnect()And I'm getting this error when trying to connecttest_thing.py:24: in <module>    myCLIENT.connect()..\..\Anaconda3\lib\site-packages\AWSIoTPythonSDK\MQTTLib.py:355: in connect    return self._mqttCore.connect(keepAliveIntervalSecond)..\..\Anaconda3\lib\site-packages\AWSIoTPythonSDK\core\protocol\mqttCore.py:282: in connect    self._pahoClient.connect(self._host, self._port, keepAliveInterval)  # Throw exception.....\..\Anaconda3\lib\site-packages\AWSIoTPythonSDK\core\protocol\paho\client.py:655: in connect    return self.reconnect()..\..\Anaconda3\lib\site-packages\AWSIoTPythonSDK\core\protocol\paho\client.py:807: in reconnect    self._sock.setblocking(0)E   OSError: [WinError 10038] An operation was attempted on something that is not a socketAny ideas where the problem might be?FollowComment"


Question: agility or elasticity ?

"A company's on-premises application deployment cycle was 3-4 weeks. After migrating to the AWS Cloud, the company can deploy the application in 2-3 days. Which benefit has this company experienced by moving to the AWS Cloud?FollowComment"

Answer: "2Accepted AnswerPlease refer : https://docs.aws.amazon.com/whitepapers/latest/aws-overview/six-advantages-of-cloud-computing.htmlIncrease speed and agility – In a cloud computing environment, new IT resources are only a click away, which means that you reduce the time to make those resources available to your developers from weeks to just minutes. This results in a dramatic increase in agility for the organization, since the cost and time it takes to experiment and develop is significantly lower.CommentShareEXPERTAWS-User-Nitinanswered 7 months agoEXPERTIndranil Banerjee AWSreviewed 7 months ago02-3 days seems pretty long for the cloud. Can you provide more details on what is being deployed and what tools are you using for deployment? What step in the process is taking the longest time? Is it the testing that is taking so long? Is the CI/CD pipeline and Infrastructure as Code automated? Is it an application deployed on EC2 or is it a containerized or serverless application? Is the testing automated?If you provide additional details, we may be able to provide recommendations on how to bring down the deployment time significantly.CommentShareEXPERTIndranil Banerjee AWSanswered 7 months agorePost-User-9061490 7 months agoAll excellent questions however I am @ entry level where AWS cloud is concerned and that was a question  I got and just was not sure what the answer was.Share"


Question: implementing secure file upload from deeplens to S3

"Hi I was able to piece together (from other posts) some simple logic that allows my deeplens to upload images with detected objects into a S3 bucket that has wide open access.It seems Deeplens uses some parts of AWS IoT Core - can it be extended onto of this infrastructure to implement secure upload? I've read some of the docs but can't quite piece together what to do. I would appreciate any pointers one how to make this more secure.Thanks, johnFollowComment"

Answer: "0For reference, found this https://aws.amazon.com/blogs/security/how-to-eliminate-the-need-for-hardcoded-aws-credentials-in-devices-by-using-the-aws-iot-credentials-provider/I think its what i'm looking for, lots of setup steps to work through. I think it builds on top of the existing setup of the IoT Core for DL.CommentSharejlwebuseranswered 4 years ago"


Question: Connect to ECS Task

"I have setup my ECS cluster using FARGATE (serverless). Can I connect, through terminal, to a task inside a cluster to make some troubleshooting? My cluster is available on a private subnet reached through a load balancer.FollowComment"

Answer: "2Accepted AnswerHello,For sure, you can connect to your ECS Fargate task using Amazon ECS Exec.With Amazon ECS Exec, you can directly interact with containers without needing to first interact with the host container operating system, open inbound ports, or manage SSH keys. You can use ECS Exec to run commands in or get a shell to a container running on an Amazon EC2 instance or on AWS Fargate [1]. Refer to the documentation on how to use the ECS Exec for debugging[1].[1] - https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-exec.htmlCommentShareOlawale-AWSanswered 6 days agoEXPERTalatechreviewed a day agoEXPERTTushar_Jreviewed 2 days agoMohamad El Bohsaly 6 days agoThank you Olawale! What if my tasks are already launched but with "enableExecuteCommand" set to false? How can I re-enable them?ShareOlawale-AWS 5 days ago@Mohamad, you will need to create a new task with "enableExecuteCommand" set to true.Share"


Question: Add "node name" to managed nodes in fleet manager

"Hello, I'm looking to add node names to my managed nodes but I can't find how/where to do soFollowComment"

Answer: "0Hi,You can add/rename node names directly Fleet Manager by editing the instance tags. Follow below steps to do so:Open SSM, Fleet ManagerClick on the "Node ID" that you want to edit,At the bottom of your screen you should see a column for "Tags"Click "Edit" and set KEY=Name, VALUE=The_Name_OF_Your_NodeSave.Once the "Name" tag has been added/updated this should in turn update "node name". Alternatively you can set a "Name" tag on your EC2 instance from the EC2 Dashboard which should update the node name as well.Let me know if this helps![1] Tagging AWS resources - https://docs.aws.amazon.com/general/latest/gr/aws_tagging.htmlCommentShareSUPPORT ENGINEERLundianswered 7 months agorePost-User-4186883 7 months agoHey thank you for the response, I'm working with raspberry pi instances linked with SSM agents, not sure if this will make a difference. I added a tag with key=name and value=the name i want, and nothing has showed up under node name, let me know if there is anything else I can do, Thank youShareLundi SUPPORT ENGINEER6 months agoHi,Apologies for reaching back to you so late on this as I was offline, okay so as I understand these are Hybrid Instances and not EC2, I haven't tested whether tagging works with hybrid instances. I will schedule sometime to test this on my end today and will advise once done.Share0Hello,Adding this as a seperate answer not to get lost in comments, I tried to replicate the behavour you are experiencing using Hybrid activation on my local virtualbox VM. The changes worked as expected. See below:I created a hybrid activation for my virtualbox Ubuntu VMOnce registered I was able to see my instance on fleet manager and I tagged the instance from Fleet Manager as mentioned in step3.See "Tags Section" with my naming tag "TestingHybrid"As you can see my tag propagated to the "Node Name" field, Some notes below:A. I tested with Ubuntu VM from virtualbox but registration works the same for Raspberry Pi as you can see in docs so this should not be an issue since we tagging the resource on AWS and not the platform or OS.B. If the issue is affecting more than 1 managed instance, it might be beneficial for you to open up a case with AWS Premium Support to further investigate "Why the tags are not propagating"C. To test this further are you able to test with a different platform (e.g virtualbox) to check if it's yielding the same result?Feel free to update this correspondence if I missed anythingCommentShareSUPPORT ENGINEERLundianswered 6 months ago"


Question: Renewing LetsEncrypt  certificate issue

"When I do...sudo lego --tls --email="email@domain.us" --domains="domain.us" --path="/etc/lego" renewReceive error;You have to pass an account (email address) to the program using --email or -mPlease advice....Edited by: Sosadinho on Jan 30, 2019 10:02 AMFollowComment"

Answer: "0I would suggest asking that question on a lego support forum or logging an issue on their tracker.it really has nothing to do with Lightsail.CommentShareDavid Ganswered 4 years ago0I was able to solve this problem by downloading and installing the new lego clientCommentShareSosadinhoanswered 4 years ago0I am not an expert on Let's Encrypt, but depending on the shell you are using the double quotes may not be sufficient to escape some of the special characters in that command line. You might try using single quotes around the values:sudo lego --tls --email='email@domain.us' --domains='domain.us' --path='/etc/lego' renewAlso, as others have suggested, the Lego forum might be a better place to get support for that tool.I hope this helps!DonleyCommentSharedonleyatawsanswered 4 years ago"


Question: Failed to identify volume with AWS Replication Agent

"I want to rehost DB to EC2 using MGN. After running the installer command for Replication Agent, i got this error "Failed to identify volume with AWS Replication Agent". This server is 1 of 2 nodes of Oracle DB clustering.Oracle Linux 6.2, Oracle DB 11.2 Standardkernel 2.6.32-300.3.1.el66uek.x86_64Has anyone encountered this error yet?Thank you advance for your helpingFollowComment"

Answer: "0Hi, Do you see any extended errors message along with the error on your screenshot (or in mgn agent logs)?Example: OSError: [Errno 123] No medium found: '/dev/sdx' ??CommentShareRamSaM-RePostanswered 7 months ago"


Question: Bug: AWS Cognito issuer mismatch when using "common" endpoint for Microsoft OIDC

"Issue has been mentioned by others in the past years but still no fix available.To support both personal and Microsoft accounts to sign up / sign in with Cognito as Microsoft as IDP the docs tell you to use the “common” endpoint.However a bad issuer mismatch error is returned when users try to sign up / log in using a Microsoft account.https://github.com/MicrosoftDocs/azure-docs/issues/38427Other parties such as firebase, okta etc have implemented a fix because Microsoft will not comply with OIDC in the near future.Can cognito team implement a fix so we can support Microsoft personal and work accounts using “common” endpoint? I'm considering moving my Authentication to Firebase because they support it out of the box.I also created this issue on github but seems it's not on the radar of being fixed any time soon.https://github.com/aws-samples/amazon-cognito-example-for-external-idp/issues/98Please do not reply with answers mentioning to use a specific tenant ID because that does not solve the problem, it only allows people to sign in using that Tenant ID. A solution would be how we can support both Work and Personal accounts from Microsoft using the "Common" endpoint or maybe a different endpoint.FollowComment"


Question: moving existing AWS Sumerian scene to Babylon.js-AWS Amplify

How do you move existing AWS Sumerian scenes to Babylon.js-AWS Amplify?What are the specific step instructions to move existing AWS Sumerian scenes to Babylon.js-AWS Amplify?FollowComment

Answer: "1The way you do this will be vary depending on what functionality your scene contains. But generally speaking, you'll do the following:Export your Sumerian scene as glTF. This will give you the models, materials, and animations from your scene. This tutorial will help.Create a new Babylon.js project using either the BabylonJS API (code-only approach) or the BabylonJS Editor (visual approach). In both cases, you'll need to use the documentation provided by Babylon for guidance.If your scene uses Sumerian Hosts or Amazon Lex, we've open-sourced those components of Sumerian. You can find instructions and demo applications that show you how to use them in BabylonJS at our official GitHub repository.Since there is no way to export the logic and interactivity from Sumerian (including logic you've created using State Machines), you'll have to recreate that functionality from scratch directly in BabylonJS using JavaScript or TypeScript.Finally, here are some other Sumerian migration tutorials that may help.CommentShareKrisanswered 4 months agoictLyz 4 months agoThank you Kris for your answer. For some reason when i tried to export to glTF from the Sumerian scene i received the following errors:"...TypeError: Cannot set properties undefined (setting 'baseColorTexture') and...No glTF "meshes" property value with index undefined was found....Please do have any ideas on how to resolve these issues?Thank you for your help!Share"


Question: AWS backup VSS error: Windows VSS Backup job error encountered.

"The original error wasVolume Shadow Copy Service error: Unexpected error calling routine RegOpenKeyExW(-2147483646,SYSTEM\CurrentControlSet\Services\VSS\Diag,...).  hr = 0x80070005, Access is denied.Operation:Initializing WriterContext:Writer Class Id: {e8132975-6f93-4464-a53e-....}Writer Name: System WriterWriter Instance ID: {1c8b51a2-d08e-4c99-91c2-...}I added the Network Service with FullControl in Diag, and the event log doesn't have this VSS error anymore but I still get the VSS backup job error encountered.This Ec2 is a Domain Controller, file server with DHCP role and also have DFS enabled.In my log, I think it required AWS powershell installed?EC2 VSS Agent Version: 2.0.0.0PowerShell version:5.1.17763.2931Get-AWSPowerShellVersion not found.All available PowerShell Modules matching AWS:End diagnostic information.{"Error":"1002","Failures":["Unable to locate AWS PowerShell tools"]}*FollowComment"


Question: Migrate SQL Server 2008/2012 to AWS

"Hello, I have some 2008 and 2012 MS SQL Servers running on windows server in my on-premises. I want to migrate those to AWS. Looking for suggestions on what's the right migration path.Should I first make an in-place upgrade of  those SQL servers on-premise, then move to RDS?Should I migrate those as-is using back and restore to EC2, then use AWS SSM playbook to upgrade to 2019?Is there an option using AWS DMS or backup and restore to directly upgrade to 2019 on RDS?I'm ok to move those servers to either license included EC2 or to RDS with MS SQL.Thank you.FollowComment"

Answer: 0I'm assuming you want to upgrade to put them on a "supported" platform (You can lift and shift these servers to EC2 using AWS Application Migration Servers with minimal effort)I would first use the AWS Schema Conversion Tool (SCT) to assess the upgrade path between your current version of SQL and RDS. This will report on any important compatibility issues. Depending on the results you can use DMS (yes it is possible to have different version source and targets) or backup and restore to go directly to RDS. IMO going directly to RDS you will be able to quickly test the upgrade without setting up and configuring EC2CommentShareEXPERTPeter_Ganswered 7 months agorePost-User-5826234 7 months agoThanks @Peter_G. Sounds Good.Share


Question: Account blocked / http 400 error

"I Am a student with Saint Martins University, currently going through the Aws management console learning. I was out of class for a week and now I’m back trying to continue with class and it says my account is blocked. I can’t launch any instances nor create anything without it saying my account is blocked. What is the next steps ?FollowComment"

Answer: "0Do you login to AWS Console with a username & password (& MFA)? Or does your university login credentials automatically log you with single-sign-on in as a federated user in Active Directory (or whatever identity provider is used at your site).If it's the latter there may be something locally that's changed. You were away for a week, so has a password expired or an account become locked?If it's the former, and this really is your account with no relation to your university, then contact AWS directly and they can help you out. If you can't even login to the console to raise a support ticket then try this https://support.aws.amazon.com/#/contacts/aws-account-supportCommentShareRWCanswered 2 months ago"


Question: I'm new User and i'm curious to know more about this platform.

"I am new user here, can any one describe what repost.aws is and how useful it can be ?FollowComment"

Answer: "1Hi ThereAWS re:Post is a cloud knowledge service for the Amazon Web Services (AWS) community. The mission of re:Post is to provide an environment where every AWS customer feels welcomed to ask questions and share their knowledge about AWS services. Anyone can access re:Post, but to interact with the community, you must sign in with your AWS credentials.See https://repost.aws/faq and https://repost.aws/guidelinesCommentShareEXPERTMatt-Banswered 6 months ago"


Question: QuickSight - How can I visualize event ticket sales YoY with different event dates?

"Hi,I'm working on a ticket sales dashboard in QuickSight (using a csv file that I will regularly upload).Once a year we host an event for which we are selling tickets. To better understand how we are doing in terms of ticket sales, we would like to compare ticketsales for the upcoming event to ticketsales from previous events. However, while in 2021 the event happened in September, in 2022 it took place end of June and in 2023 it will take place mid of June. So instead of tickets sales by respective month YoY, we would like to have something like -20 weeks to event, - 19 weeks to event, etc. on the x-axis, and compare all events within one chart. So always working backwards from the respective day of the event.Is that actually possible? :/Many thanks,AxelFollowComment"


Question: "How do I configure sudoers, fstab, user logons for a domain joined Linux instance at launch? Can I use userdata?"

"Hi all,I've been trying to streamline my process for joining Linux instances to my domain. As such, there are a number of configurations that I still need to take care of manually that I would like to automate it possible. This includes the folowing:Restrict logins to the AWS Delegated Administrators group from my Directory Service implementationAdd the AWS Delegated Administrators group to the sudoers file (is there a better way to achieve this? Should use the /etc/sudoers.d folder instead? This looks like a cleaner way to define permissions but I could not find any documentation on how to configure this folder.Install cifs-utilsConfigure the logon bannerIn some cases, configure the fstab fileI think 3, 4, and 5 are easily done through the userdata file, however, I'm not clear on how to configure all of the necessary files for 1 and 2. For example, to properly allow the AWS Delegated Administrators group to log in to the system, the following files need to be configured:/etc/pam.d/login/etc/pam.d/sshd/etc/security/access.confDocumentation I found showed that I needed to update the pam.d files to allow for spaces in a logon group/username.I imagine these are fairly basic configuration steps for most anyone setting up a domain joined Linux instance in their environment so it would be nice to see this standardized, perhaps in an SSM document that can also be run, or if dynamic options can be set during the instance launch process when selecting domain join, that would be great.FollowComment"

Answer: "2Accepted AnswerHi!What you described can be achieved with user-data, it might be tricky and a not so stylish script, but possible.Now, If you don't mind I would like to recommend the Use of Packer https://www.packer.io/Why? Well with packer you can build what is often called Golden AMI, such AMI can be pushed and used when you deploy your instance. Now setting up the configuration management can be achieved using what Packers call "Provisioners", below you will see an example of each provisioner that might be interesting for you, and if you really want a neat way to build the AMI with the required configuration, you can use Ansible as provisioner and define your tasks in Ansible Playbooks or Roles.{  "variables": {    "aws_access_key": "{{env `AWS_ACCESS_KEY_ID`}}",    "aws_secret_key": "{{env `AWS_SECRET_ACCESS_KEY`}}",    "region": "us-east-1"  },  "builders": [    {      "access_key": "{{user `aws_access_key`}}",      "secret_key": "{{user `aws_secret_key`}}",      "type": "amazon-ebs",      "profile": "default",      "region": "{{user `region`}}",      "instance_type": "t2.micro",      "ssh_username": "centos",      "source_ami" : "ami-0affd4508a5d2481b",      "ami_name": "centos-aws-demo-{{timestamp}}",      "ami_description":"CentOS Linux 7 x86_64 HVM EBS ENA 2002_01 with docker",      "run_tags" : {        "Name" : "packer-builder-docker",        "Tool" : "Packer",        "Author" : "DavidCaballero"      },      "tags": {        "Name": "centos-aws-demo"      }    }  ],  "provisioners": [    {      "type": "file",      "source": "./welcome.txt",      "destination": "/home/centos/"    },    {      "type": "shell",      "inline": ["ls -al /home/centos", "cat /home/centos/welcome.txt"]    },    {      "type": "shell",      "script": "./docker_install.sh"    },    {      "type": "ansible",      "playbook_file": "./playbooks/hostname.yml"    }  ]}CommentShareDavidCaballeroanswered 4 months agothe-aws-architech 4 months agoThis is great. I'll have to have a look at Packer/Ansible. I've been trying to learn Terraform so this should prove to be helpful.Thanks!Share"


Question: Instances stuck in shutting down

"These two instances are stuck in shutting down, can you please terminate them?i-022148dc4a9e9ed72i-0ab972fd462667a17I am unclear what the proper process is to get this fixed. I don't have access to post in these forums with that account, and I can't open a support ticket.  These machines can't be terminated because of a problem on AWS side, and we have been paying for them for about a month.What is the correct and fast process for dealing with this?FollowComment"

Answer: 0Accepted AnswerBoth instances are now in a stopped state.CommentShareAWS-User-8424448answered 4 years ago0Can I get a hand here from an amazonian?CommentShareB. Shermananswered 4 years ago0I can see that one of the instances is currently in a stuck stopping state.I have reached out internally to have this looked at.CommentShareAWS-User-8424448answered 4 years ago


Question: A LightSail instance has stuck in Pending transition for 4 months.

"I Deployed a LightSail instance at 2022-02-12. However, it failed because its been on Pending status for 4 months. I can't remove / stop / start / restart / reset / etc... it by dashboard or cli. The cli reports the following:An error occurred (OperationFailureException) when calling the StopInstance operation: You cannot stop an instance while it is in transition. 'CentOS-1' is in transition (pending).An error occurred (OperationFailureException) when calling the DeleteInstance operation: You cannot delete an instance while it is in transition. 'CentOS-1' is in transition (pending).It starts billing me now, so anyone please advise me what to do. Thanks a lot.ps: The point is, I am only have a basic support plan, there is NO tech support service for me as I know, but there is nothing I can do to delete the lightsail instance and it will be showed in my invoice every month while I'm not using it. I tried to reach the customer account support but they returned some useless documents for me.FollowComment"

Answer: "0Accepted AnswerOK, at last, the CLI command works:$ aws lightsail stop-instance --region My-Instance_Region --instance-name My-Instance-Name --forceThe most important thing is use --force in aws lightsail stop-instance first.The CLI retured the following{    "operations": [        {            "id": "some-uuid",            "resourceName": "My-Instance-Name",            "resourceType": "Instance",            "createdAt": "DateTime",            "location": {                "availabilityZone": "xxx",                "regionName": "xxx"            },            "isTerminal": false,            "operationDetails": "",            "operationType": "StopInstance,            "status": "Started",            "statusChangedAt": "DateTime"        }    ]}CommentShareMagicNightanswered a year ago"


Question: How to Connect Private RDS PostgreSql Instance using Pgadmin locally?

"Hello experts, From above Architecture diagram you can able to get all the required information.Here is the doubts:My goal is to connect RDS Postgresql Engine from my pgadmin locally and to build a dashboard using tableau from that RDS Database.My Ec2 instance will do data extraction process and store it into DB, Now I need to access the database whenever my EC2 instance is turned off or directly connect to DB from my pgadmin locally, However it should present in private subnet.Any guidance and help will be really thankful to you. As I'm beginner please help to solve this problem.🙏🙂🙏FollowComment"

Answer: "2You're right that the DB should be in a private subnet.  In an enterprise environment you typically access it from local desktops via Direct Connect or site-to-site VPN.  In other situations you have a few options including Client VPN, an EC2 jump/proxy server to tunnel through or using an AWS Workspace to run pgadmin.CommentShareEXPERTskinsmananswered 10 months agoEXPERTBrettski-AWSreviewed 10 months agojai_barath18 10 months agoFirst thankyou for your comment, I'll try your solution and I hope this will solve my problem🙂🙏Share0To add on @skinsman answer, In addition to setting up network (VPN or DirectConnect), You will have to ensure that <br/>Security group should allows IP range of your client machines (postgreSQL clients) to Amazon RDSYou would also need to resolve DNS from onpremise, you will require DNS Resolver to resolve RDS DNS from onpremise. REF: https://aws.amazon.com/blogs/security/how-to-set-up-dns-resolution-between-on-premises-networks-and-aws-using-aws-directory-service-and-amazon-route-53/CommentShareSachinSanswered 10 months ago"


Question: Can I use the AWS logo on my S3 static website?

Points of My Scenario:I want to create a S3 static website tracking my progress in personal cloud studies.I want to use the AWS logo on my homepage**Question: **how do I get permission to use AWS logo (and is there a cost)?FollowComment

Answer: "1Accepted AnswerTake a look at this: AWS Trademark Guidelines.CommentShareEXPERTkentradanswered 5 months agowaltforbes 5 months agoThis is EXACTLY what I needed to know! A big bundle of thanks, Kentrad!Share0According to the guidelines, you can use the AWS logo on your website as long as you:Use the logo in a manner that accurately reflects AWS products and services.Do not use the logo in a way that suggests AWS endorses or sponsors your website or business.Do not alter the logo in any way, including changing the color or design.Include the following attribution statement on your website: "AWS is a trademark of Amazon.com, Inc. or its affiliates."You do not need to pay a fee to use the AWS logo on your website. However, you may need to obtain permission from AWS if you want to use the logo in a way that is not covered by the Trademark Usage Guidelines.CommentShareSeanSianswered 5 months ago"


Question: Strange error while creating fleet

"Hi,I'm getting this error while creating fleet:Server process exited without calling ProcessEnding(), exitCode(-1073741515)I have tested dedicated server locally with Amazon GameLift LocalAnd everything looks fine?REMOVEDUPLOADWhat can be a problem?My fleet id: fleet-********* EDIT ***I have installed vc_redist.x64 and directXWhen i connect to fleet machine, and when i try manually to start dedicated server, i recieve this message:REMOVEDUPLOADWhat can be a problem?FollowComment"

Answer: "0Apologies for stating the obvious but theres a dll missing when running on the host machine.Most likely theres a Windows dll mis-match when trying to call certain Windows functions (ie GetFileVersion etc) where the underlying host OS does not have that dll (or provides that functionality via a different DLL).Firstly sanity check your installer:Go to Fleet->EventsScroll down to where it ran your install.bat and check the log linkMake sure it ran your installer without issue . Ensure your redist is correctly named and in the correct location. Then check what your installer is actually providing.Gamelift uses Windows Server 2012 as its base AMI: https://aws.amazon.com/windows/products/ec2/server2012r2/  so my guess is that you are targeting Windows 10 rather than 8 (hence the reason it works for you locally).Some useful links:https://docs.microsoft.com/en-us/windows/win32/apiindex/umbrella-lib-onecore#apis-from-api-ms-win-core-version-l1-1-1dllhttps://stackoverflow.com/questions/55709764/how-to-resolve-mincore-lib-dependencies-such-as-api-ms-win-core-version-i1-1-1-dCommentSharerePost-User-5332620answered 4 years ago0@REDACTEDUSERThnx for your answer.I have checked install.bat and everything is ok.So what do you suggest? Because this was not happening 20 days ago.I'm using Unreal Engine*** EDIT ***I think that i have figure out what is the problem. On build machine i have Visual Studio 2019 and on my personal PC i'm using Visual Studio 2017.. So i will install VS 2017 and additional packages for windows 8 build.ThnxCommentSharerePost-User-0847331answered 4 years ago0@REDACTEDUSERProblem solved, i had a different visual studio versions on my local machine and on build machine.CommentSharerePost-User-0847331answered 4 years ago0Hi I'm having the exact same issue, Not sure where to start with trouble shooting the issue. You mentioned that you connected to the fleet but I don't know how I can do this via CLI if the fleet isn't active... not sure what you meant by "manually starting the server". Could someone give some advice please?The strange part is that I did manage to get this working last week, and now I am doing the exact same steps with the same build files and the fleet just wont activate.CommentSharerePost-User-1971946answered 2 years ago0What's the error you're getting?CommentSharerePost-User-5100160answered 2 years ago0Hi Chris,Any fleet I try to create refuses to activate. The error it returns is :Server process exited without calling ProcessEnding(), exitCode(-1073741515), launchPath(C:\game\MultiTest\Binaries\Win64\MultiTestServer.exe), arguments(null), instanceId(i-05c408d7c406e0fab), publicIP(52.56.159.157), gameSessionId(none), occurrences(3573 for this instance in a 5 minute period)Not sure if the problem is due to the install.bat found in my build root. The log returns:Installer Exit Code: 0It is worth mentioning that I had successfully created a working fleet the first time I tried, I used the exact same build files and method... not sure why this is happening. Any help would be appreciated.CommentSharerePost-User-1971946answered 2 years ago0Easiest way to debug, as it looks your process is crashing, is to search for the error code on the forum (ie https://forums.awsgametech.com/t/fleet-******If you haven't:Ensure your packaged build runs locally against GameLift localOpen the remote debugging port when creating the fleet and remote into the instance once its created. From there you can tail the logs or manually launch it to see if/how its failing.CommentSharerePost-User-5332620answered 2 years ago0Thanks Pip, I'll try to remote into the instance and see what is going on. I'm assuming this documentation page is what I'll need to help me get there: https://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/connecting_to_windows_instance.htmlAs for gameLift local, I had tried this and it reported a healthy status.For the record I'm using the methods described in this video to create my build filesCommentSharerePost-User-1971946answered 2 years ago0You will need to start at the GameLift guide, because the resources are managed for you by GameLift. See https://docs.aws.amazon.com/gamelift/latest/developerguide/fleets-remote-access.html.Theres a bunch of useful threads here about remote instance access for GameLift if you encounter issues, but one thing to remember is that your fleet ports can only be adjusted on launch or when your fleet is in ACTIVE or ERROR state (unless this changed recently), so would suggest until you have stable fleet, always make your fleet launch with the remote debugger ports open (you can always close them later if they are no longer required).CommentSharerePost-User-5332620answered 2 years ago0[quote="Pip, post:10, topic:7073"]ways make your fleet launch with the remote debugger ports open (you c[/quote]Thanks for the tips! I'll let you know how it goes.CommentSharerePost-User-1971946answered 2 years ago0@REDACTEDUSERI am encountering a similar issue, though I have tried to install all sorts of prerequisites, and nothing seems to work. We are using Unreal Engine (4.26). It works fine, locally, too, but on the server instance I get the error in this image below. I strictly followed a tutorial, but on an existing project. I will try on a fresh one, but really that wouldn't get my any further if that would work. Any other ideas what to try?I remoted into the machine and made quadruple sure to even manually install all prereqs.. :(REMOVEDUPLOADCommentSharerePost-User-2411570answered 2 years ago0For future reference, should anyone else ever have the same issue: I solved it.It turned out to be a plugin (specifically WindowsMixedReality). I actually suspected it to be a plugin pretty quickly, but I had already removed it from the build.cs and also added it to the "DisablePlugins" array in the Server.Target.cs. However, I had to also remove it from the .uproject file's plugin list (for whatever reason).I used this DependencyWalker  to iterate the testing a lost faster.Hope this helps anybody at some point.CommentSharerePost-User-2411570answered a year ago"


Question: How to export AWS Security Hub findings to CSV format

I'm trying to deploy this solution (https://aws.amazon.com/blogs/security/how-to-export-aws-security-hub-findings-to-csv-format/) but running into this particular error "Invalid principal in policy (Service: Amazon S3; Status Code: 400; Error Code: MalformedPolicy;".I'd appreciate it if someone could help me figure out what I could be doing wrong.Thanks all.FollowComment

Answer: "3Hi,I understand you would like to know how to fix the particular error you are running into. The error is coming from the S3 bucket policy. ("Invalid principal in policy (Service: Amazon S3; Status Code: 400; Error Code: MalformedPolicy;")It means the value of a Principal in your S3 bucket policy created from the solution is not valid. To resolve this error, follow the instructions here:•https://repost.aws/knowledge-center/s3-invalid-principal-in-policy-errorI hope this helps. Let me know if I answered your question or if you have any follow-up.Kind regards,AhmedReferences:[1] https://docs.aws.amazon.com/AmazonS3/latest/userguide/Welcome.html#BucketPolicies[2] https://docs.aws.amazon.com/AmazonS3/latest/userguide/using-iam-policies.html#specifyingPrincipalsCommentSharerePost-User-5076019answered a month ago0From the blog listed in the query, Lamba function which converts Security hub findings in CSV and write to S3 bucket.  Based on the error message - it seems that you are missing bucket policy on S3 to allow for lambda execution role to have write access to the bucket.  Follow the instruction @ **https://repost.aws/knowledge-center/lambda-execution-role-s3-bucket **which provides example policy to grant Lamdba execution role access to S3 bucket.CommentSharerePost-bhavincs-6606740answered 3 months ago"


Question: Can you query a GSI with IoT Core SQL function 'get_dynamodb()'?

"The documentation makes no reference to index names, but our requirements are to be able to query attributes on a GSI.https://docs.aws.amazon.com/iot/latest/developerguide/iot-sql-functions.html#iot-sql-function-get-dynamodbFollowComment"

Answer: "0Accepted Answerget_dynamodb() function cannot query GSIs, but you can use aws_lambda() to invoke a lambda function that queries the Dynamo DB table GSI.CommentShareEXPERTMassimilianoAWSanswered 5 months agocgddrd 5 months agoThanks, this is a neat alternative solution!Share"


Question: Glue 4.0 Iceberg issues

"Hello,I have two questions issues:spark = (    SparkSession.builder    .config("spark.sql.extensions", "org.apache.iceberg.spark.extensions.IcebergSparkSessionExtensions")    .config("spark.sql.catalog.glue_catalog", "org.apache.iceberg.spark.SparkCatalog")    .config("spark.sql.catalog.glue_catalog.warehouse", f"s3://co-raw-sales-dev")    .config("spark.sql.catalog.glue_catalog.catalog-impl", "org.apache.iceberg.aws.glue.GlueCatalog")    .config("spark.sql.catalog.glue_catalog.io-impl", "org.apache.iceberg.aws.s3.S3FileIO")    .enableHiveSupport()    .getOrCreate())df.writeTo("glue_catalog.co_raw_sales_dev.new_test").using("iceberg").create()CREATED TABLE DDL:CREATE TABLE co_raw_sales_dev.new_test (  id bigint,  name string,  points bigint)LOCATION 's3://co-raw-sales-dev**//**new_test'TBLPROPERTIES (  'table_type'='iceberg');The problem I am having is that there is double // in location between bucket and table name in s3.This one wokrs: df.writeTo("glue_catalog.co_raw_sales_dev.new_test2").using("iceberg").create()but if I remove "glue_catalog" like:df.writeTo("co_raw_sales_dev.new_test2").using("iceberg").create()I am getting error : An error occurred while calling o339.create. Table implementation does not support writes: co_raw_sales_dev.new_test2am I missing some parameter in SparkSession config?Thank you, Adas.FollowComment"

Answer: "0I doubt you can make it work correctly, s3 allows that but for the filesystem it means you have a directory without name, I would move the files and avoid issues in the future (even if you can solve it now).You need to specify "glue_catalog" so it knows it's the Iceberg catalog, otherwise it will treat it as a regular table.CommentShareGonzalo Herrerosanswered 2 months agoAdas Kavaliauskas 2 months agoThank you Gonzalo for explanation.One more question, I am running query below from Glue:query = f"""CREATE TABLE IF NOT EXISTS glue_catalog.{std_database}.{std_table}USING icebergLOCATION 's3://{std_bucket}/{std_table}'PARTITIONED BY (id)TBLPROPERTIES (  'format'='parquet',  'write_compression'='snappy')AS SELECT * FROM source_df"""spark.sql(query)I inserted data, I can query it everything seems fine, but when running"SHOW CREATE TABLE {std_database}.{std_table}" on Athena, I am getting error: CREATE TABLE statement cannot be generated because table has unsupported properties.Both properties I added are described in: https://docs.aws.amazon.com/athena/latest/ug/querying-iceberg-creating-tables.htmlWhat might be wrong?ShareGonzalo Herreros 2 months agoMaybe instead of "using"  use the table property 'table_type' ='ICEBERG', otherwise it works for meShareAdas Kavaliauskas 2 months agoHi Honzalo,I tested various scenarios, and the only way "SHOW CREATE TABLE" on Athena works, when I create table on PySpark without any TBLPROPERTIES.Also "SHOW CREATE TABLE" answer on Athena and PySpark is different:Athena:CREATE TABLE co_raw_sales_dev.test1(  id bigint,  name string,  points bigint,  created string,  updated string)PARTITIONED BY (`id`)LOCATION 's3://co-raw-sales-dev/test1'TBLPROPERTIES (  'table_type'='iceberg');PySpark:CREATE TABLE glue_catalog.co_raw_sales_dev.test1(id BIGINT,name STRING,points BIGINT,created STRING,updated STRING)USING icebergPARTITIONED BY (id)LOCATION 's3://co-raw-sales-dev/test1'TBLPROPERTIES ( current-snapshot-id' = '5704046200302329156',  'format' = 'iceberg/parquet',  'format-version' = '1')I think the problem here is that Glue 4.0 creates Iceberg format=1 and Athena is using Iceberg format=2.ShareGonzalo Herreros 2 months agoSpark defaults to format-version 1, but it should work with 2Share"


Question: IAM -billing access

"Here is the scenario: Customer A with AWS accounts 1-5  and Customer B with AWS accounts 6-10 have recently merged companies and linked all their AWS accounts to the same Management Account, AWS accounts 1-10 are all linked to the same Management Account. Is there a way to give users IAM access to only see billing for accounts 1-5 and not 6-10 and vise versa?FollowComment"

Answer: 0Accepted AnswerHere are some example policies on controlling access to billing.https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/billing-example-policies.htmlCommentShareAWS-User-1697064answered 2 years ago


Question: Problems with animations made in blender that are imported into Lumberyard

Ok I've been at this for 3 day and it seems that the animations that I import from blender into lumberyard that i have made are distorted in some way. I'm not sure if this in my do or a bug. But Please help me so this is resolved.Edit Video link to issue: https://www.youtube.com/watch?v=Ik5iSW_0xUA&feature=youtu.bebad fps tho.This is an image of an animation that is Animating in blender you see there is no distortion.REMOVEDUPLOADBut Here is an image of the animation in lumberyard in animation editor Have no idea why this happens:REMOVEDUPLOADThis is happening on all my animations example:REMOVEDUPLOADHere is a link to the blender and Fbx files Lumberyard team you are the best thank you for your help.Link: https://www.dropbox.com/sh/gw5ibm5qimh7nyh/AAAzzJ-HbSTJglMmZeKQbgR7a?dl=0Follow

Answer: "0Accepted AnswerHey @REDACTEDUSERHave you looked at our docs page about Best Practices around setting up the World Coordinate System and Root Joint for your asset?Initially looking at the FBX file, it looks like you need to make some adjustments to your current set up.Root joint is currently parented under another node called Armature. The root joint should not be under anything.Root joint needs to match the orientation of your scene (Z-up by default with Blender if I recall correctly). Currently, it's flipped upside down. It looks like the majority of your skeleton followed this so if you want to have a clean skeleton, you'll need to adjust all of it.There shouldn't be any scale other than 1 for your Root Joint and your Skinned Mesh. The Armature node is set to 100 scale, which is also impacting the Root Joint. This should be fixed when you correct your root joint and skeleton.If you make those adjustments, then your character and animations should look more like what you have in Blender.SharerePost-User-7951591answered 5 years ago0@REDACTEDUSERSharerePost-User-7620461answered 5 years ago0@REDACTEDUSERSharerePost-User-7620461answered 5 years ago0@REDACTEDUSERSharerePost-User-7620461answered 5 years ago0@REDACTEDUSERGlad to hear it's working now!SharerePost-User-7951591answered 5 years ago"


Question: How to access secured S3 objects without presigned URL or cognito token?

"Look at the social media sites, we can access there content(videos/images) without signup/signin. So we can't use cognito tokens as a authorization to access s3 objects, as we want our user can access content(videos/images) without signup/signin.So many people suggested that I should use presigned URL but one expert said:  Typically we recommend to generate the presigned URLs only when you want to download the object.Then how to acess the objects according to my need :user can see the post of image/video with the post link without signin/signup.I want to make my bucket privateCloudfront with s3 orign is good but that is not secure as we are not going use cognito token.My overall need is user with my site/app can access objects without signin/signupIs there any way to create app token that will expire within 7 days ?FollowComment"

Answer: 0See if the Cloud front signed URL/Cookies help.https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-choosing-signed-urls-cookies.htmlhttps://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-signed-urls.htmlCommentShareRishianswered 6 months ago


Question: SMS not received from SNS

I am trying to send SMS messages using SNS. I've tried to send the messages using the AWS SDK and the AWS Console. I did receive it once via the sample code provided at https://docs.aws.amazon.com/sns/latest/dg/sms_publish-to-phone.html#sms_publish_sdkI've gotten production access now but I am unable to receive any messages. Have tried sending it to multiple different numbers but they are not being received. The delivery status logs show the messages were delivered but they haven't.The phone numbers are able to receive SMS messages otherwise. I am trying to send these messages to numbers globally but primarily in India. The numbers tested for are all indian phone numbers.FollowComment

Answer: "0HiI have used a CLI instead of AWS SDK, It is simple to use CLI here are the Command.aws sns publish \     --message "Hello world!" \     --phone-number +1-555-555-0100I understand that you got production access from AWS but still you are not able to send SMS to the mobile numbers ,Issues/Assumptions:The destination mobile number or carrier blocking the messages [you send you can see successful logs ]You can get free US number from app and use that number for your testtingYou can check account **Spending Limit ** increase the number because the default is 1 USDIf all above points are good for you still you have issues, You can open support ticket in AWS they will help you.I will try to help you as best...!Thank YouGKCommentShareGKanswered a year ago"


Question: FreeRTOS MQTT not connecting with Mi-Fi router

"Hi,I have an IoT device based on the FreeRTOS shadow PIC32 demo. When it's connected to a standard DSL Wi-Fi router it works fine, subscribes to the IoT shadow and everything works OK.However, when I connect to a Mi-Fi 4G router on the sky mobile (O2) network, it fails to connect to MQTT.  I have made sure that I can connect on port 8883 to AWS endpoint on the Mi-Fi 4G router using powershell command:test-netconnection -computer am3w08epmsyee-ats.iot.eu-west-2.amazonaws.com -port 8883A connection is established OK.This is the console out when it fails:33 14822 [IP-task] Socket sending wakeup to MQTT task....44 24823 [MQTT] About to close socket.45 25823 [MQTT] Socket closed.46 25823 [MQTT] Notifying task.47 25823 [MQTT] Received message 0 from queue.48 25824 [IoTShadowClient-Init] Command sent to MQTT task failed.49 25824 [IoTShadowClient-Init] [Shadow 0] MQTT: Connect failed.50 25824 [IoTShadowClient-Init] AWS shadow client connect unsuccessful, returned 2.51 25824 [IoTShadowClient-Init] Failed to connect shadow client.`I have debugged the code and found that the ***prvSendCommandToMQTTTask ***function returns'eMQTTCouldNotBeSent' in the receive message identifier.I have checked all the router settings, firewall is currently off. I have ensured that port 8883 is open. I am using a TP-Link router MR6400 using Sky Mobile (O2). It's worth noting that I have also tried on a Hauwei router also with the same result.Any ideas welcome.Thanks.FollowComment"

Answer: "0I would test the connection with an MQTT client (AWS IoT SDK example or a regular MQTT client like mosquitto) on a computer connected to the affected router.CommentShareBoraanswered a year ago0Thanks, good call I' will do. But to ask perhaps a dumb question, Is there any reason why it would not work on a mobile network provider?CommentShareandylong0206answered a year ago"


Question: ElastiCache multi-AZ setup with no replica

"My customer is migrating to ElastiCache for Redis. They don't require their cluster to be highly available, so to save cost want to run with a single replica of data. Due to high write load it may require multiple shards, meaning cluster mode enabled cluster, which requires multi-az to be enabled.From what I can see contrary to RDS, multi-AZ in ElastiCache uses one of the regular read replicas for failover, it doesn't keep a special replica just for the failover scenario. I see that I can run a cluster as multi-AZ with 0 read replicas, so it just has the primary nodes. In such a setup having multi-AZ enabled seems meaningless since there is nowhere to fail to in case the primary node fails.Is there a benefit to running a cluster without replicas as multi-AZ  besides the fact that it's required for cluster mode enabled setup?Also if a cluster with a single writer will be sufficient to this customer, running it as cluster mode enabled with 1 shard and 0 replicas vs running it as single node cluster probably has the benefit of being able to add more nodes and shards easily if the workload changes over time. Are there any advantages like performance to running a single node cluster in this case?FollowComment"

Answer: "0Accepted AnswerUnless there is a specific requirement to use cluster-mode-disabled, we suggest that customers start with cluster-mode-enabled because they can:scale horizontally in an incremental fashionreduce the blast radius of a single primary node (shard) failurescale vertically (just like cluster-mode-disabled as well)There are no performance benefits in choosing cluster-mode-disabled, even if the intent is to run a single writer/primary node with no replicas.There are a few reasons why a customer may want to choose cluster-mode-disabled, though, a few examples:Redis pubsub use cases can generate significant traffic as each message is replicated to each primary (and then to each primary's replica nodes)if customer's preferred client library does not support cluster modeif a required third party application does not support cluster modeUsing Multi-AZ with no read replicas will still help reduce the blast radius if there are two or more shards. Having primary nodes in different AZs means the remaining shards in the active AZs will continue to operate. If all nodes are placed in a single AZ and there is an AZ failure, then all nodes, of course, are unavailable.CommentShareAWS-User-7048809answered 3 years ago"


Question: Problems using the Amazon Workspaces Client

"I am trying to access my workspaces cloud machine via different Workspaces Clients.While using the app on my phone, i successfully get connected and presented with the cloud-machine screen. But, the keyboard of the phone wouldn't show after i pass successfully the login page.So, I tried accessing via the Amazon WorkSpaces Web client, but i get an error saying that it took to long to log in, and log in failed. Iv'e tried a fast 5G internet connection but it failed as well, after attempting to log for a few minutes.I am using an ARM Linux machine to access the AWS services, so installing the Amazon WorkSpaces client as a software on my machine proved impossible by far. Althrough there is an ARM version for the MAC abviously, there is non for linux (the linux amazon workspaces client software is for amd proccessors only).What should i do in order to solve those issues?FollowComment"


Question: Where are global service logs created?

"I have a cloudtrail  trail that is global and collecting events across my organisation's accounts.I don't use US-East-1, but I've noticed that there are events in US-East-1. The only information I can find on why that might be occurring is that that region contains the control panes for several AWS Services I use. IAM & Route53. It's not clear in the docs I've seen, but I'm assuming that these events are occurring because while I might be accessing the data plane in my region, creating events in that region, events are created in the control plane region.Is that correct or is there more to it?FollowComment"

Answer: "1You are correct that some AWS services have control planes located in specific regions, and the global service logs for those services are created in the region where the control plane is located.For example, IAM has a control plane located in the US East (N. Virginia) region, and the global service logs for IAM are created in that region. Similarly, Route 53 has a control plane located in the US East (N. Virginia) region, and the global service logs for Route 53 are also created in that region.When you use a service like CloudTrail to collect events across your organization's accounts, the global service logs for services with control planes in US East (N. Virginia) will be created in that region, even if the data plane events are created in other regions.It's worth noting that not all AWS services have control planes located in US East (N. Virginia), so the global service logs for those services may be created in different regions. Additionally, some services may have multiple control planes located in different regions, so the global service logs for those services may be created in multiple regions.CommentSharehashanswered a month agorePost-User-2791811 a month agoIs this documented somewhere? It would be really useful for me to have a clearly documented source?Share0There really isn't much more to it.  Global services like IAM & Route53, due to their nature, do not have independent control and or data planes in every region [1], so those CloudTrail Events for those services will reflect that.[1] https://docs.amazonaws.cn/en_us/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.htmlCommentSharerePost-User-6139432answered a month ago"


Question: Converting byte[] array images into Kinesis video stream required format.

"Hi,I need help on the resolving one issue.I'm getting continuous byte[] array format of images and need to push to AWS KVS and that required conversion of H.264 video compression format to store into AWS Kinesis. Could you please help me is there any SDK which i can refer? or is there any sample code which will be converting multiple images into video format/AWS KVS required format.FollowComment"


Question: [SES ]Sending is paused for this account.

"Hi!My sending service has been disabled, and when I try to enable it using the command"aws ses update-account-sending-enabled --enabled --region us-east-1"The service appears as Enabled, but then goes back to disabled, I have my system stopped, I don't know what is happening.FollowComment"


Question: Accessing my AWS Lightsail Container Image Files

"I am running container on lightsail service. I pulled it as a ready image from my container "dockerhub". Thus, I can access my docker image from the "public domain" in my container. But I want to create username and password for this image application. Normally, I was able to create a username and password when using it locally on my own computer. But I have no idea how to access my image's files in container. Can you help me?FollowComment"


Question: Why Can't I Associate Multiple Client VPN Endpoints in the Same Availability Zone?

"I'm using mutual certificate based authentication to quarantine off portions of my VPC to different users. Therefore, I have to have multiple Client VPN Endpoints. Can AWS only handle 1 Client VPN Endpoint per AZ the same VPC, even if they're on different subnets?Example:Client VPN Endpoint 1 is associated with Subnet 1 on us-east-1aClient VPN Endpoint 2 is associated with Subnet 2 on us-east-1aHowever, AWS will not let me do this -FollowComment"

Answer: "1Accepted AnswerAt this moment you cannot associate multiple subnets from the same Availability Zone with a Client VPN endpoint. You can associate multiple subnets with a Client VPN endpoint for high availability. All subnets must be from the same VPC. Each subnet must belong to a different Availability Zone.Refer Limitations and rules of Client VPN section - https://docs.aws.amazon.com/vpn/latest/clientvpn-admin/what-is.htmlCommentShareEXPERTAWS-User-Nitinanswered 8 months agorePost-User-4132807 8 months agoCan I associate multiple different VPN endpoints within different subnets within the same AZ? This is what is not working, but the docs are not clear.ShareAWS-User-Nitin EXPERT8 months agoThe document calls out in the limitations here https://docs.aws.amazon.com/vpn/latest/clientvpn-admin/what-is.html#what-is-limitations.  Also is mentioned over here https://docs.aws.amazon.com/vpn/latest/clientvpn-admin/cvpn-working-target.html"If you associate more than one subnet with a Client VPN endpoint, each subnet must be in a different Availability Zone. We recommend that you associate at least two subnets to provide Availability Zone redundancy."Share"


Question: How to use s3 life cycle policy for multiple buckets those starting with some fixed naming ?

"I have multiple buckets those stating with name dataplatform-raw , I wanted to apply life cycle policy to transition the data to s3 intelligent tiering , though I am aware I can go to life cycle policy per bucket and create rule for the same , but is there way to automate this , for the buckets starting with dataplatform-raw should be transitioned to s3 intelligent tiering storage .FollowComment"

Answer: "0If i am able to understand the question right you want to transition the bucket to S3 intelligent tiering , I am not sure wether you can automate this or not. Amazon S3 has a global namespace. (i.e. No two S3 buckets can have the same name) so i am quite sure that this cannot be automated though i might be  wrongBut you can follow the link for the transition process.https://docs.aws.amazon.com/AmazonS3/latest/userguide/using-intelligent-tiering.htmlCommentShareManibhanswered a year agoManibh a year agoI also read this somewhere that S3 Buckets only support a single lifecycle configuration. Declaring multiple aws_s3_bucket_lifecycle_configuration resources to the same S3 Bucket will cause a perpetual difference in configuration.Share0The API to apply a lifecycle on configuration is "PutBucketLifecycleConfiguration, and it is applied on an individual bucket.  S3 doesn't have a feature where you can apply a lifecycle configuration on multiple buckets at a time. This is however be achieved on the client end, where you can create a script which first gives you a list of all the buckets in your AWS account, then filter it for a common prefix. After that, you simple run the above API in a loop for the filtered list.https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketLifecycleConfiguration.htmlCommentShareAWS-User-7413673answered a year ago"


Question: How to send own failure info in case of failed SageMaker Training Job?

"Good day!My main purpose:Easy way to collect information about different failure scenarios in SageMaker TrainingJob.What do I use currently?Sagemaker SKLearn Estimator(TrainingJobs are inside)Where will my model train?Different datasets. So, I need control and collect all information about all training processes and their final statuses on different datasets.Which failure scenarios do I have?There are plenty of them. I have create my own python Errors for them.For example:There are labels only for one class.Too small dataset(by my own criterions)Missing data for crucial columnse.t.c.Where am I stuck?After failed training I can't get own errors from training job response. All of them are "ExecuteUserScriptError"I can't pass my own info in FailureReason or ErrorMessage(always it's empty). I see which error was raised in CloudWatchLogs and TrainingJobTraceback(from SagemakerNotebook). So, bad solution is parse all CloudWatchLogs in case of failure.**Question:How to provide my own ErrorMessage or FailureReason? **May be I am digging in the wrong direction. Anyway, I need your advice.Thank you so much for possibility to ask an advice here)FollowComment"

Answer: "0In: sklearn_estimator.latest_training_job.describe()['FailureReason']Out: Traceback (most recent call last):  File "/miniconda3/lib/python3.7/site-packages/sagemaker_containers/_trainer.py", line 84, in train    entrypoint()  File "/miniconda3/lib/python3.7/site-packages/sagemaker_sklearn_container/training.py", line 39, in main    train(environment.Environment())  File "/miniconda3/lib/python3.7/site-packages/sagemaker_sklearn_container/training.py", line 35, in train    runner_type=runner.ProcessRunnerType)  File "/miniconda3/lib/python3.7/site-packages/sagemaker_training/entry_point.py", line 100, in run    wait, capture_error  File "/miniconda3/lib/python3.7/site-packages/sagemaker_training/process.py", line 291, in run    cwd=environment.code_dir,  File "/miniconda3/lib/python3.7/site-packages/sagemaker_training/process.py", line 208, in check_error    info=extra_info,sagemaker_training.errors.ExecuteUserScriptError: ExecuteUserScriptError:ExitCode 1ErrorMessage ""Command "/miniconda3/bin/python train.py"ExecuteUserScriptErro```CommentShareAWS-User-2222121answered a year agoAWS-User-2222121 a year agoLook,ErrorMessage "" is empty.Output of FailureReason is limited by 1024. But I look at full text and it's useless too.So I have no way to get any failure information.ShareAWS-User-2222121 a year agoEven the failure was by my own failed scenario and error:This trace from failed training output in SageMager Notebook:    raise NoPositiveLabelscustom_errors.NoPositiveLabels2022-05-18 10:11:09,864 sagemaker-containers ERROR    Reporting training FAILURE2022-05-18 10:11:09,865 sagemaker-containers ERROR    framework error: ```Share0Hello, is the reported problem similar to this issue reported on SageMaker Python SDK project ?https://github.com/aws/sagemaker-python-sdk/issues/1952CommentShareAWS-User-8651363answered a year agoAWS-User-2222121 a year agoHello, thank you for your response! :)Nope. It's other problem.In this issue the author uses ValueError to read input data into input_fn, but failure in this case is unlikely due to this error (it took too long to read the data - 10 hours). But even if it did.The question is different:How to pass the failure training_job information via FailureReason, ErrorMessage or other parameters?I'm causing a failure via own Error and want to understand how this information can be passed and collected?Share0Hi, did you try writing to /opt/ml/output/failure as per the doc here?It's worth mentioning that in the past there was a bug that overwrote this file in the base training toolkit that powers "script mode" containers. This got resolved at source per the linked issue, but I guess there's a chance older containers or frameworks which customize this tool could still be affected? So may be worth upgrading your framework version if you're using an older one.CommentShareEXPERTAlex_Tanswered a year agoAWS-User-2222121 a year agoHi, Alex!Your comment is really worthwhile!I will add my answer with attachments belowShare0This issue looks like related to my problem)There are 2 sagemaker-scikit-learn versions: 0.23-1, 0.20-0.So, I use:683313688378.dkr.ecr.us-east-1.amazonaws.com/sagemaker-scikit-learn:0.23-1-cpu-py3sagemaker version: 2.86.0 (tried to upgrade with pip in terminal to 2.90.0 , but there is the previous version 2.86 in notebooks)Python - 3.7How can I understand which versions I should use to get away of ErrorMessage problem?CommentShareAWS-User-2222121answered a year ago"


Question: Using OSTN02 NTv2 projection with PostGIS in Postgres on RDS - can't add nadgrids file OSTN02_NTv2.gsb

"I'm trying to convert coordinates in and out of the OSGB 1936 / 27700 / "British National Grid" projection, but I'm getting different results to our old Postgres 9.x local DB.  For example, for this query:SELECT st_asewkt(st_transform(geomfromEWKT('SRID=4326;POINT(-0.077731 54.116851 86.778)'), 927700)) AS a;On Postgres 9.6 with PostGIS 2.3, where we have the OSTN02 NTv2 projection set up in spatial_ref_sys and using the OSTN02_NTv2.gsb file, I get this result:SRID=927700;POINT(525745.680454343 470703.162768112 86.778)However, on our Aurora Postgres 14.5 database using PostGIS 3.2 I get:SRID=927700;POINT(525744.779056573 470705.4231788935 86.778)Notice that the eastings and particularly northings values are different - the latter out by a couple of metres.Both have USE_GEOS=1 USE_PROJ=1 USE_STATS=1 returned by select postgis_version();Setting up to use OSTN02 NTv2 involves adding the OSTN02_NTv2.gsb file from Ordnance Survey, and referring to it from spatial_ref_sys - for e.g. this spatial_ref_sys entry:srid      | 927700auth_name | EPSGauth_srid | 27700srtext    | PROJCS["OSGB 1936 / British National Grid",GEOGCS["OSGB 1936",DATUM["OSGB_1936",SPHEROID["Airy 1830",6377563.396,299.3249646,AUTHORITY["EPSG","7001"]],AUTHORITY["EPSG","6277"]],PRIMEM["Greenwich",0,AUTHORITY["EPSG","8901"]],UNIT["degree",0.01745329251994328,AUTHORITY["EPSG","9122"]],AUTHORITY["EPSG","4277"]],UNIT["metre",1,AUTHORITY["EPSG","9001"]],PROJECTION["Transverse_Mercator"],PARAMETER["latitude_of_origin",49],PARAMETER["central_meridian",-2],PARAMETER["scale_factor",0.9996012717],PARAMETER["false_easting",400000],PARAMETER["false_northing",-100000],AUTHORITY["EPSG","27700"],AXIS["Easting",EAST],AXIS["Northing",NORTH]]proj4text | +proj=tmerc +lat_0=49 +lon_0=-2 +k=0.9996012717 +x_0=400000 +y_0=-100000 +ellps=airy +units=m +no_defs +nadgrids=OSTN02_NTv2.gsbNote in particular the reference to +nadgrids=OSTN02_NTv2.gsb there at the end of the proj4text column.I'm at a loss as to how to proceed - I don't think I can install the required file, as, as far as I know, I can't get access to the filesystem of the Aurora database instance hosting the DB, but I think it's not using OSTN02 NTv2 and falling back to the built-in OSTN02 transformation?this blog post suggests "The NTv2-derived northing differs from that of the built-in transformation by nearly 2m. " which is pretty much exactly what I'm seeing.Is there any way I can get the OSTN02_NTv2.gsb file onto the DB instance, or any other way to enable OSTN02 NTv2 support?For reference, that file is found on our Postgres 9.6 (with PostGIS 2.3) local server at /usr/pgsql-9.6/share/contrib/postgis-2.3/proj/OSTN02_NTv2.gsbFull version information from our Aurora cluster:postgres=> select aurora_version(), version(), postgis_full_version();-[ RECORD 1 ]--------+---------------------------------------------------------------------------------------------------------------------------------------------------------------aurora_version       | 14.5.2version              | PostgreSQL 14.5 on aarch64-unknown-linux-gnu, compiled by aarch64-unknown-linux-gnu-gcc (GCC) 7.4.0, 64-bitpostgis_full_version | POSTGIS="3.2.3 0" [EXTENSION] PGSQL="140" GEOS="3.10.3-CAPI-1.16.1" PROJ="6.2.1" LIBXML="2.9.9" LIBJSON="0.12.99" LIBPROTOBUF="1.3.0" WAGYU="0.5.0 (Internal)"This question seems somewhat similar to QUUPbqeryfR5KzFgYxBLx7jg but sadly that's from over a year ago with no answers at all.FollowComment"


Question: How to connect an IoT Thing to Greengrass V2

I'm trying Greengrass V2 and I dont' know how to connect a IoT Thing (a raspberry pi) to my Greengrass core running on my local gateway. Is this similar to V1? What steps should I do to connect a device to core MQTT broker to start sending messages?FollowComment

Answer: "0Hi,Unfortunately Greengrass Aware Device (GGAD) support is not yet available with version 2. We are actively working on addressing this gap and hope to release it in the coming months. Until that time, you can use Greengrass version 1 or you could use this example code for V2 (https://github.com/aws-greengrass/aws-greengrass-component-examples/tree/main/mqtt-bridge) as a skeleton for implementing your own MQTT broker on V2 in order to support remote devices.Cheers,Michael DombrowskiCommentShareEXPERTMichaelDombrowski-AWSanswered 2 years ago0Thank you, Michael Dombrowski.CommentShareHarinarayanananswered 2 years ago"


Question: SES and SNS duplicated notification

"Hello, I have SES and SNS services.When sending an email, I receive a notification for Send and subsequently 2 for Delivery.The difference is that the first one (from Delivery) says notificationType, and the second one says eventType.I want to remove the notificationType one because the other one is more consistent with the rest of the events (Send, Open), and I'm not sure if it also includes Click, Spam, and the others.What I want is to avoid receiving duplicates.FollowComment"


Question: "EXT-X-START support, manifest manipulation"

"Is it possible to set EXT-X-START value somehow, or can we edit manifest so we can insert any unsupported tag at any position?ThanksFollowComment"

Answer: "0Accepted AnswerHello,I spoke with a member of the MediaLive team and learned MediaLive does not support the EXT-X-START tag. If you would like to suggest it as a feature request, you can do so by using the feedback link in the AWS Console while using MediaLive (1).  Select "Feature Request" from the feedback type dropdown.Resources(1) https://aws.amazon.com/premiumsupport/knowledge-center/send-feedback-aws/CommentShareSUPPORT ENGINEERRon_Hanswered a year ago0Hello and thank you for contacting AWS re:Post!I reviewed your information and have some feedback for you. According to RFC8216 (1) for HTTP live streaming, 4.3.5.2 (2) EXT-X-START is the preferred start point of a playlist, one of the Media or Master Playlist tags.  The tag is listed as optional but has 2 attributes:  TIME-OFFSET is required, while PRECISE is not (if omitted, treated as "no").I am inquiring with colleagues to get some additional details, but believe this tag is supported in manifests.  I surmise you've done some internet research and are finding limited details as I am.  I'll update the post with more details when/if I can find them!Thank you!Resources(1) https://datatracker.ietf.org/doc/html/rfc8216(2) https://datatracker.ietf.org/doc/html/rfc8216#section-4.3.5.2CommentShareSUPPORT ENGINEERRon_Hanswered a year ago0Thanks, I just submitted a feature request.CommentShareSylvainDCanswered a year ago"


Question: MSK Connect on t3.small fails due to not-retryable SaslAuthenticationException - reconnect.backoff.ms worker configuration will not help - can AWS remove the connection limit?

"Hello,we are encountering the same issues as e.g. https://github.com/aws/aws-msk-iam-auth/issues/28 regarding the SaslAuthenticationException while using MSK Connect with a kafka.t3.small instance.Setting reconnect.backoff.ms to e.g. 10000 ms will not resolve the issue, since the exception that is being thrown (SaslAuthenticationException) is not retryable (see https://github.com/apache/kafka/blob/trunk/clients/src/main/java/org/apache/kafka/clients/admin/KafkaAdminClient.java#L808) and ultimately leads to a new creation of a client, not a reconnect.When would the reconnect take place? As I went through the implementation, what I see is:that startConnect() in ConnectDistributed is calling the constructor of Workerthe constructor of Worker calls ConnectUtils.lookupKafkaClusterId(config)that method calls Admin.create(config.originals()) - which opens up a new connectionif you follow the calls from there, you will see that you end up not retrying upon obtaining SaslAuthenticationException (https://github.com/apache/kafka/blob/trunk/clients/src/main/java/org/apache/kafka/clients/admin/KafkaAdminClient.java#L808)Even if the retry would work, several AdminClients are created, which all connect to the MSK cluster. Since this is not a reconnect, reconnect.backoff.ms settings cannot work for remediation. There is no mechanism in the Kafka code that would globally allow restricting these connections to happen only every x seconds.  Unless I oversee something, MSK Connect should only work by chance with t3.small instances.This forces us to either:not use IAM and go for SASL/SCRAMuse a kafka.m5.large instance and go from about 32 USD/Month to 151 USD/Month per instance - meaning 90 USD vs 450 USD in our caseThe limitation on the t3.small instance really limits what we want to achieve. The workaround presented here  is not working and thus forces us to buy the larger instance. We have no need for a large instance and we don't want to have additional costs for simply using IAM for MSK Connect.**Can AWS remove the limit on the t3.small instance or present a different workaround? That would be great :)**I cannot open a support case for this, since we don't have the required subscription and I believe that this could be of general interest.See parts of our logs using AWS MSK Connect:[Worker-05ea3408948fa0a4c] [2022-01-01 22:41:53,059] INFO Creating Kafka admin client (org.apache.kafka.connect.util.ConnectUtils:49)[Worker-05ea3408948fa0a4c] [2022-01-01 22:41:53,061] INFO AdminClientConfig values:...[Worker-05ea3408948fa0a4c] reconnect.backoff.max.ms = 10000[Worker-05ea3408948fa0a4c] reconnect.backoff.ms = 10000[Worker-05ea3408948fa0a4c] request.timeout.ms = 30000[Worker-05ea3408948fa0a4c] retries = 2147483647[Worker-05ea3408948fa0a4c] retry.backoff.ms = 10000...[Worker-05ea3408948fa0a4c] [2022-01-01 22:41:54,269] ERROR Stopping due to error (org.apache.kafka.connect.cli.ConnectDistributed:86)[Worker-05ea3408948fa0a4c] org.apache.kafka.connect.errors.ConnectException: Failed to connect to and describe Kafka cluster. Check worker's broker connection and security properties.[Worker-05ea3408948fa0a4c] at org.apache.kafka.connect.util.ConnectUtils.lookupKafkaClusterId(ConnectUtils.java:70)[Worker-05ea3408948fa0a4c] at org.apache.kafka.connect.util.ConnectUtils.lookupKafkaClusterId(ConnectUtils.java:51)[Worker-05ea3408948fa0a4c] at org.apache.kafka.connect.runtime.Worker.<init>(Worker.java:140)[Worker-05ea3408948fa0a4c] at org.apache.kafka.connect.runtime.Worker.<init>(Worker.java:127)[Worker-05ea3408948fa0a4c] at org.apache.kafka.connect.cli.ConnectDistributed.startConnect(ConnectDistributed.java:118)[Worker-05ea3408948fa0a4c] at org.apache.kafka.connect.cli.ConnectDistributed.main(ConnectDistributed.java:80)[Worker-05ea3408948fa0a4c] Caused by: java.util.concurrent.ExecutionException: org.apache.kafka.common.errors.SaslAuthenticationException: [e4afe53f-73b5-4b94-9ac3-30d737071e56]: Too many connects[Worker-05ea3408948fa0a4c] at org.apache.kafka.common.internals.KafkaFutureImpl.wrapAndThrow(KafkaFutureImpl.java:45)[Worker-05ea3408948fa0a4c] at org.apache.kafka.common.internals.KafkaFutureImpl.access$000(KafkaFutureImpl.java:32)[Worker-05ea3408948fa0a4c] at org.apache.kafka.common.internals.KafkaFutureImpl$SingleWaiter.await(KafkaFutureImpl.java:89)[Worker-05ea3408948fa0a4c] at org.apache.kafka.common.internals.KafkaFutureImpl.get(KafkaFutureImpl.java:260)[Worker-05ea3408948fa0a4c] at org.apache.kafka.connect.util.ConnectUtils.lookupKafkaClusterId(ConnectUtils.java:64)[Worker-05ea3408948fa0a4c] ... 5 more[Worker-05ea3408948fa0a4c] Caused by: org.apache.kafka.common.errors.SaslAuthenticationException: [e4afe53f-73b5-4b94-9ac3-30d737071e56]: Too many connects[Worker-05ea3408948fa0a4c] [2022-01-01 22:41:54,281] INFO Stopped http_0.0.0.08083@68631b1d{HTTP/1.1, (http/1.1)}{0.0.0.0:8083} (org.eclipse.jetty.server.AbstractConnector:381)[Worker-05ea3408948fa0a4c] [2022-01-01 22:41:54,283] INFO Stopped https_0.0.0.08443@611d0763{SSL, (ssl, http/1.1)}{0.0.0.0:8443} (org.eclipse.jetty.server.AbstractConnector:381)[Worker-05ea3408948fa0a4c] MSK Connect encountered errors and failed.FollowComment"

Answer: "1Hi there, thank you for providing your valuable feedback regarding the service. Currently we advice that customers do not use IAM authenticated t3 instances with MSK Connect. This is due to connection limits currently in place on t3 instances. Amazon MSK team is aware of this issue and are working on solutions to increase the connection limit for t3 instances, which will allow this combination of connectors, instance type and authentication to function reliably. There is no ETA at the moment but please keep a tab of https://aws.amazon.com/about-aws/whats-new/ for updates on changes to current limits. Hope this helps!CommentShareSUPPORT ENGINEERHarshith_Manswered a year ago"


Question: Requesting support for .no TLD

"Hi,Please consider adding support for the .no TLD (Norway). You already support .se (Sweden) and .fi (Finland) and with AWS new strong presence in Scandinavia the .no TLD would be very much appreciated.Thanks,RuneFollowComment"

Answer: "0Hello RuneI have logged a feature request for this TLD on your behalf. I can't say when support for the TLD will be added but soon it becomes available we will update our documentation.Please make regular checks on the links below to see when it becomes available:https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/registrar-tld-list.htmlhttps://aws.amazon.com/about-aws/whats-new/networking_and_content_delivery/Regards,MatthiasCommentShareMatthias_Zanswered 4 years ago"


Question: Is there a way to recover the deleted lambda function?

HelloI made a mistake. I deleted the lambda function that I was using.I want to restore the deleted lambda function.Can you tell me how?FollowCommentOmid Eidivandi a year agoWhen you deploy a lambda function you upload your code by zip file?If so just recreate a lambda function uploading last zip fileIs it you case?Share

Answer: "3There is no API to restore a function. This is one of the reasons that we recommend using Infrastructure as Code, such as SAM or serverless framework. You keep your functions in a repository and you deploy it from there.CommentShareEXPERTUrianswered a year ago0There is no option or way to retrieve the deleted AWS lambda code, but related logs, roles, test event schemas, and triggers will be retained in your account.CommentShareCloud-Karamcharianswered a year ago"


Question: What is the "AWS Managed Services" or AMS?

"What the "AWS Managed Services (AMS)" and how it is different to generic AWS managed services like RDS, Lambda, Amazon Managed Service for Prometheus (AMP), Amazon Managed Grafana (AMG) etc. ?FollowComment"

Answer: "0Accepted AnswerThe "AWS Managed Services" aka AMS, is the hands on keyboard service by AWS to manage and operate your AWS infrastructure on your behalf. AWS Managed Services (AMS) helps you adopt AWS at scale and operate more efficiently and securely. AMS leverages standard AWS services and offer guidance and execution of operational best practices with specialized automations, skills, and experience that are contextual to your environment and applications. AMS provides proactive, preventative, and detective capabilities that raise the operational bar and help reduce risk without constraining agility, allowing you to focus on innovation. AMS extends your team with operational capabilities including monitoring, incident management, AWS Incident Detection and Response, security, patch, backup, and cost optimization. Refer https://aws.amazon.com/managed-services/ for more information.CommentShareAWS-User-NVanswered 2 months ago"


Question: GDPR-compliance of AWS Athena CloudWatch connector

"We are interested in using the Athena CloudWatch connector to query log statements that can potentially contain personal data. For this we wonder if there is any cross-region data transfer going on under the hood. From what we understand, this seems to be not the case since the stack itself is deployed in a certain region and the processing of the data is done within a Lambda function deployed in this region. But we would like to make sure to comply with European data protection laws.FollowComment"


Question: Comprehensive Log of SCP Deny actions

"Greetings,ContextWe are in the process of building out our SCPs to fit our specific needs.  One of the SCPs we are building is to only allow approved AWS Services.We started with the list of necessary services, as defined in the example for SCP Regions (https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scps_examples_general.html#example-scp-deny-region)We took that baseline set of AWS Services and added the specific list of services we wanted to allow.  Our list is built off the AWS Services that were in our AWS Cloudtrail log.  Just to give you a frame of reference, that's about 90 (or so) allowed Services based on our footprint.QuestionSo far, the SCP seems to be working.  However, I do not have a comprehensive way to validate based off CloudTrail Logs.  As an example, some of the SQS message actions are not put into CloudTrail.Is there a way to get a comprehensive log for a given SCP?  In other words, a log of all SCP Denies that a particular SCP Policy is generating?FollowComment"

Answer: 0One way to determine whether a service is used by an account is to examine the service last accessed data in IAM. Another way is to use AWS CloudTrail to log service usage at the API level. Reference : https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scps.html#scp-warning-testing-effectCommentShareEXPERTAWS-User-Nitinanswered 3 months ago


Question: AWS Client VPN - my systems are in different subnets that are in different VPCs

Is there a way to configure AWS Client VPN to work with multiple subnets in multiple VPCs?  Do I really need 1 VPN endpoint per VPC?I'm getting this when I try to associate a subnet from a different VPC "Only subnets within an endpoint's attributed VPC can be associated with the endpoint."FollowComment

Answer: "0I was able to use 1 VPN endpoint to access systems on different subnets which are on different VPCs.  I followed this: https://docs.aws.amazon.com/vpn/latest/clientvpn-admin/scenario-peered.htmlI updated the routes that were listed in the VPN endpoint.CommentShareelbigbadmoanswered a year agoJiballs-AWS a year agoA peering scenario is different from the question you asked. I wanted to give you that but since it doesn't speak to the original question.You said - "I'm getting this when I try to associate a subnet from a different VPC "Only subnets within an endpoint's attributed VPC can be associated with the endpoint."The Client VPN is still associated to a single VPN and you cannot associate a subnet from a different VPC. However, in a peered scenario, the Client VPN associated subnet can communicate with a peered VPC, which is what this link is pointing out https://docs.aws.amazon.com/vpn/latest/clientvpn-admin/scenario-peered.htmlShare0Yes, the Client VPN endpoint is per VPC!. You can only associate the subnets in a particular VPC and not subnets from another VPC. When creating the Client VPN endpoint, remember you are asked to select a VPC ID and not VPC IDs. Say if there is a way to associate multiple VPC IDs to a single endpoint, then that would be where you can associate subnets from multiple VPC but this is not the case here.According to https://docs.aws.amazon.com/vpn/latest/clientvpn-admin/cvpn-working-target.html#cvpn-working-target-associate"If you specified a VPC when you created the Client VPN endpoint, the subnet must be in the same VPC. If you haven't yet associated a VPC with the Client VPN endpoint, you can choose any subnet in any VPC.All further subnet associations must be from the same VPC. To associate a subnet from a different VPC, you must first modify the Client VPN endpoint and change the VPC that's associated with it."CommentShareJiballs-AWSanswered a year ago"


Question: DEEPRACER : Analysis logs problem

"Hello,I have a problem with the logs on DeepRacer. I downloaded the "DeepRacer Log Analysis for Model Training" Notebook, I easily specify the RoboMaker & SageMaker Log File Locations. My parameters and hyperparameters seems to work but I can't access to the "action_space" for example. I think I did something wrong but I don't know what. Do you have any idea?Thank you veery much !!!Retrieve Action Spaceaction_space = !grep '^Reward Distribution Graph.*racecar' $robomaker_fnameaction_space = action_space[0].replace('Reward Distribution Graph:', '')action_space = action_space.replace('racecar', '')action_space = action_space.replace("'", '"')action_space = json.loads(action_space)action_spaceError Message :IndexError                                Traceback (most recent call last)/tmp/ipykernel_7253/1114400799.py in <cell line: 4>()23 action_space = get_ipython().getoutput("grep '^Reward Distribution Graph.*racecar' $robomaker_fname")----> 4 action_space = action_space[0].replace('Reward Distribution Graph:', '')5 action_space = action_space.replace('racecar', '')6 action_space = action_space.replace("'", '"')IndexError: list index out of rangeOne more time, thank you if you can help me !Have a nice day :)julieFollowComment"


Question: SiteWise OPC UA gateway deployment shows completed but no latest values are coming through.

"I got Greengrass deployment which works fine and then on SitWise I configured the gateway for OPC UA as a data source. I provided the correct URL and enable trust (accepting certificate) on the local machine (OPC UA server) to enable communication. All seems to be working fine. I have the following hierarchy on OPC UA Kepware Server as Reactor 1/Device/Temperature. I have added /Reactor 1 as node id. Then under the asset, I have added the following alias as /Reactor 1/Device/Temperature but there is no value coming in.Not sure what is wrong. Any help would be appreciated. Also, how do I look at the logs to see where the problem is happening? FollowComment"

Answer: "0Accepted AnswerThe way I resolved the issue. By doing the fresh installation of the core device. Then I went on with SiteWise and configure the gateway. At this point still no data stream coming in from the OPC UA server. Then I went and check the aws.iot.SiteWiseEdgeCollectorOpcua.log and aws.iot.SiteWiseEdgePublisher.log. In the Publisher log, I found an error about not having sufficient rights to my policies. I went and update my GreengrassV2TokenExchangeRoleAccess policy as per this:https://docs.aws.amazon.com/iot-sitewise/latest/userguide/configure-gateway-ggv2.htmlLastly, I restart the Greengrass service and this fixes the problem.The manual is not very friendly and it requires good updates for the GreenGrass v2 installation for the OPC UA component.CommentSharerePost-User-8617569answered 8 months ago0Hi,there are several topics that you can validate to make sure data arrive in the Cloud:are there any errors in the logs for the SiteWise collector (aws.iot.SiteWiseEdgeCollectorOpcua.log) or publisher (aws.iot.SiteWiseEdgePublisher.log)did you enable a data stream prefix? Sometimes the console adds a prefix automatically. If there is a prefix you can remove it or add it to your alias definitionis the data source for the gateway in syncdoes your gateway receive the data streams? They are stored in a Greengrass stream: grep -ia propertyalias /greengrass/v2/work/aws.greengrass.StreamManager/SiteWise*Stream/*.logYou can try to use / as Node ID in your data source configuration to capture all data streamswhat is the data type for the measurement exposed by the Kepware server? It must match one of the supported data types for SiteWiseCheers,PhilippCommentSharePhilipp Sanswered 8 months agorePost-User-8617569 8 months agoare there any errors in the logs for the SiteWise collector (aws.iot.SiteWiseEdgeCollectorOpcua.log) or publisher (aws.iot.SiteWiseEdgePublisher.log) - Not sure if I can interpert errors.did you enable a data stream prefix? Sometimes the console adds a prefix automatically. If there is a prefix you can remove it or add it to your alias definition - Nois the data source for the gateway in sync - Yesdoes your gateway receive the data streams? They are stored in a Greengrass stream: grep -ia propertyalias /greengrass/v2/work/aws.greengrass.StreamManager/SiteWiseStream/.log - I don't see any logs. Permission Denied.You can try to use / as Node ID in your data source configuration to capture all data streams - Try it but no change to behavior.what is the data type for the measurement exposed by the Kepware server? It must match one of the supported data types for SiteWise - I am using Double for Float (OPC UA)Share"


Question: Cloudwatch logs serving Jenkins build logs taking 30 seconds to load

"We are using the Jenkins Pipeline Plugin for Cloudwatch logs on a Jenkins instance. It simultaneously uploads and downloads the console logs for our jobs. Initially the console logs loaded pretty much instantaneously however as we have added more instances to our account this duration has increased dramatically taking  up to 30 seconds in some instances.Intermittently we receive the following com.amazonaws.services.logs.model.AWSLogsException: Rate exceededResearching on the web and it appears we're exceeding our  CloudWatch API limits. Would anyone be able to tell me where I can view these limits within our account and how to request to have them increased? Any help would be greatly appreciated.Thanks,Mark.FollowComment"

Answer: "1Hi Mark, thanks for reaching out!You can review your CloudWatch Logs quotas using the Service Quotas console for CloudWatch Logs. This will show you your default and current Logs quotas, as well as which quotas can be increased.You can determine which CloudWatch Logs API is being throttled by checking the Logs service usage metrics in the AWS/Usage namespace, and checking for ThrottleCount metrics related to Logs APIs. Once you have that info, you can use the Service Quotas console to request a limit increase for the affected API, as long as that API allows for limit increases.General info regarding CloudWatch Logs quotas and instructions on requesting increases via the Service Quotas console can be found here.CommentShareSUPPORT ENGINEERJustin_Banswered a year ago"