Question: GameSDK :- Player entity

"Hi all,I have to add a component to the player in GameSDK, but I cannot find the player entity anywhere in the editor.Where should I look, I've tried everything I can but with no success.This is a blocker for me.CheersPaulFollow"

Answer: "0Accepted AnswerI went for a walk on the beach, and a few pints... hmmm...Anyway, I'm thinking I can do something better.If I change my code to work as an input device, then I can integrate the demo code cleanly and still do things in a Lumberyard manner.The UI elements can read from the input device, the renderer can read from the input device, I just need something with a Tick event to poll the input device.Before I write the code I will have to identify a point in the engine I could attach an input device to though, so it's not really a solution. More a redefinition of the problem.I still need something I can attach code to, but once I have it everything else is neatSharerePost-User-9173357answered 6 years ago0Hi @REDACTEDUSERYou can't add a component to the player in GameSDK, because the player entity uses the old entity system that doesn't support the new component entity system.Please note that the GameSDK is just a legacy example that was "inherited" from CryEngine, but it will not be updated to the new LY systems.But the old entity system still works, so it's possible for you to implement your features without the new component entity system.The player entity (spawn point) can be found under: RollupBar -> Objects -> Entity -> Browser -> Others -> SpawnPointSharerePost-User-4138534answered 6 years ago0I went for a walk on the beach, and a few pints... hmmm...Anyway, I'm thinking I can do something better.If I change my code to work as an input device, then I can integrate the demo code cleanly and still do things in a Lumberyard manner.The UI elements can read from the input device, the renderer can read from the input device, I just need something with a Tick event to poll the input device.Before I write the code I will have to identify a point in the engine I could attach an input device to though, so it's not really a solution. More a redefinition of the problem.I still need something I can attach code to, but once I have it everything else is neatSharerePost-User-9173357answered 6 years ago0I was having the same issue. You CAN modify this "player entity" and add "components", but not in the Lumberyard sense of those terms. I believe the player start is implemented in a different manner, at the project level instead of the "level" level, as you can create a new level and it will use the standard actor by default without adding an entity. I'm thinking a default script (certainly not a global flow graph from what I can tell). I will let you know if I find out how it is activated in the editor, but if you want to modify the scripts I believe they are located in ..\dev\GameSDK\Scripts\Entities\actorSharerePost-User-4796539answered 6 years ago0Hi Oldsparky,Thanks, I see what is going on now.It's put me in a bad position as I have to do two jobs.Create a demoProvide a coding example for others to use.GameSDK is the only fully featured demo in Lumberyard, so I have to use it. I don't have a team of artists and designers available to sit and create a new demo.However now I have to write code to get the demo working which will be no use as an example.I know Lumberyard is still beta, but a choice has to be made. GameSDK has to be dropped and replaced with a demo of equal quality, or it needs to be brought up to date so it can be used as a demo of how to write a game using Lumberyard rather than a demo of what CryEngine could do when Lumberyard was forked from it.At the moment, it's very poor.SharerePost-User-9173357answered 6 years ago0Hey @REDACTEDUSERSharerePost-User-8353690answered 6 years ago0In Cryengine, players are managed by the Actor system, which is init in CryAction. The SDK then implements IActor for both AI and Players, and then the Player class inherits the IActor implementation; and registers it with the Actor system. All the C++ code should be in the Player filter in Visual Studio. Including PlayerInput, PlayerMovement, Player...etc. You can augment actors via Lua script, as Andrewg suggested in Scripts\Entities\Actors. Hope that helps.SharerePost-User-3220036answered 6 years ago0Thanks Binky,In the end I extended IInput and added my code to that.It is then visible to all elements in the system.The gaze tracker debug UI element works almost perfectly, I think I am half the width of the displayed sprite out, but that's an easy fix.I am now moving on to the shader side of my code.CheersPaulSharerePost-User-9173357answered 6 years ago0Let me know if you need additional assistance with this. The team seems to think @REDACTEDUSERSharerePost-User-8353690answered 6 years ago0Awesome! Nice work on this. Can't wait to see what you are creating. Also, I'm going to make your above reply an answer and select that as accepted. If you run into any more issues we'll reopen this one.SharerePost-User-8353690answered 6 years ago"


Question: "The Node is NotAvailable during opensearch update, how to fix it?"

And the update progress takes some days.Many Thanks!FollowComment

Answer: "0Hello,Node Status in the instance health tab means the status of the AZ where the node belongs. We have released a new feature Multi-AZ with StandBy where the clusters are in multiple AZs with a StandBy AZ. For StandBy AZ, the node status is StandBy and for Active AZ the nodes status is Active.As Multi-AZ with StandBy is supported for OpenSearch versions 1.3 and above. If our domain is having OpenSearch version less than 1.3 then we get NotAvailable status.[+] Configuring a multi-AZ domain in Amazon OpenSearch Service - https://docs.aws.amazon.com/opensearch-service/latest/developerguide/managedomains-multiaz.html[+] https://aws.amazon.com/about-aws/whats-new/2023/05/aws-multi-az-standby-amazon-opensearch-service/I understand currently NotAvailable status in UI can be confusing. We are aware of this issue and UI update is being rolled out in phased manner for each region to provide clear information and avoid confusion.Regarding your Service software update query, Once you request the Service software update on your domain - the update request is received by Amazon OpenSearch service is queued and domains are updated in a phased manner to prevent simultaneous update by all the customers. You should see progress in your update request soon. If the service software update in not installed yet, please reach out to support engineering for further assistance.CommentShareSUPPORT ENGINEERRajat_Canswered a day ago"


Question: Building search experience using Kendra for a data source where new data is added in an ongoing basis

Use case : New documents are added through a web application on ongoing basis to S3. I am trying to build a document search for the documents stored in S3 that can display documents uploaded in near real time. Does Kendra sync data source with index based on an event trigger?FollowComment

Answer: "1Accepted AnswerYou can keep your index up to date by setting up periodic synchronizations between your data source and index. You can choose to update an index manually using the console or the StartDataSourceSyncJob API. Otherwise, you set up a schedule to update an index and have it synchronize with your data source. Refer Amazon  Kendra documentation : https://docs.aws.amazon.com/kendra/latest/dg/data-source.html.For event driven synchronization, publish the triggering event to Amazon EventBridge for invoking StartDataSourceSyncJob API.CommentSharemarancsanswered 2 months ago"


Question: WordPress Address (URL) and Site Address (URL) on Lightsail AWS Wordpress Instance greyed out and need to change as have installed SSL cert

"**WordPress Address (URL) and Site Address (URL) on Lightsail AWS Instance greyed out and need to change as have installed SSL cert**I installed a cert on the website and now need to -> "Configure your WordPress instance to work with your distribution using SSL/TLS termination" because the WordPress Address (URL) and Site Address (URL) are both http:// and not https://So I followed the process herehttps://lightsail.aws.amazon.com/ls/docs/en_us/articles/amazon-lightsail-editing-wp-config-for-distributionand then realised it was looking for the same http:// domainsso I looked again and tried to hard code into wp-config using filezilla direct to the Bitnami Wordpress stack using both the following methods1 - Change WordPress Site URLs Using functions.php FilePlease follow below path and open functions.php file go to /wp-content/themes/your-theme-folder/.Next, you need to add the following code at the bottom:update_option( 'siteurl', 'https://example.com' );update_option( 'home', 'https://example.com' );2 - Change WordPress Site URLs Using wp-config.php FileSimply open wp-config.php file from your root directory You need to add the following code just above the line that says ‘That’s all, stop editing! Happy publishing’.define( 'WP_HOME', 'https://example.com' );define( 'WP_SITEURL', 'https://example.com' );Neither worked and I thought I had killed the site!I have not restarted the lightsail instance after making these changes as am worried about being able to access if it goes wrong.Help greatly appreciatedJonFollowComment"

Answer: "1To change the WordPress Address (URL) and Site Address (URL) to HTTPS, you can try the following steps:Log into the WordPress Dashboard.Go to Settings > General.Change the WordPress Address (URL) and Site Address (URL) to the HTTPS version of your domain name.Click the Save Changes button.If the above steps don't work, try disabling all the plugins and switching to a default theme (e.g. Twenty Twenty-One). Then repeat the steps 1-4.If you still can't change the URLs, you can try editing the wp-config.php file directly on your server using an FTP client like FileZilla.Connect to your server using FileZilla.Navigate to the root directory of your WordPress installation.Open the wp-config.php file.Add the following code just above the line that says ‘That’s all, stop editing! Happy publishing’:define('WP_HOME','https://example.com');define('WP_SITEURL','https://example.com');Save the file and close it.Try accessing the WordPress site again.It's important to backup your site and database before making any changes to the wp-config.php file.CommentShareDivyam Chauhananswered 4 months ago0I would like to add my experience which appears similiar to like this problem.I have installed the WordPress, but still I did not open the website either by IP address or by domain name.I have configured the SSL/TLS of both FQDN and CNAME before open the website.It worked both by AWS Certificate Manager or Let's encrypt (separately).Now open the website either by FQDN or by IP address.Go to the FQDN/wp-admin and open the WordPress.Now if you close the WordPress and reopen the page - it will take you to the https, instead of http either or WordPress site or FQDN site.Please configure the SSL/TLS before you open the WordPress either by IP address or FQDN.CommentSharerePost-User-7136343answered 3 months ago"


Question: DNS Management Conflict

"I, initially, setup Lightsail to manage my domain, "qwikfoto.com". Then, to get AWS SES working, I had to setup Route 53 to manage the DNS. So, I setup my record set in Route 53, and attempted to transfer management of the DNS from Lightsail to Route 53. The documentation instructed me to change the Lightsail name servers to use the Route 53 name servers, however, there's no provision in Lightsail to do this. The only option I had was to delete the DNS zone from Lightsail. I, also changed the TTL setting on the NS record (in route 53) from 2 days to 60 seconds. Now, we're completely off the air. Nothing is being resolved.Was this the best course of action? Is there a better way of doing it?FollowCommentrePost-User-7831137 6 months agoExact same problem. I have a domain in route 53, and my lightsail hosting asks me to do this,   " To make Lightsail the DNS service for a domain, you configure the domain registration to use these name servers ... ."But the name servers Lightsail specified could not be edited and it is different from the name servers route53 specified.  If I follow Lightsail name server, the email stops working ?! Isn't I just ignore the lightsail instructions?Share"

Answer: "0Accepted AnswerHi,Sorry, I should have started by looking at the configuration for qwikfoto.com.Name servers appear in three places, and typically they should all be in synch:~ The name servers that Route 53 assigns to a hosted zone when you create it. These are the "master" name servers and can't be changed. Name servers in the other locations usually match these.~ The name servers in the NS record in the hosted zone.~ The name servers that are associated with the domain registration. These are the name servers that control which DNS configuration is in use.For qwikfoto.com, the "master" name servers match the name servers in the NS record, but they don't match the name servers for the domain registration. This typically means that someone did the following:~ Deleted the hosted zone that Route 53 created during domain registration~ Created a new hosted zone, which has four different name servers than the name servers for the original hosted zoneHere's how to fix that:Get the name servers that Route 53 assigned to the hosted zone when you created it. See "Getting the Name Servers for a Public Hosted Zone" in the Route 53 Developer Guide:https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/GetInfoAboutHostedZone.htmlUpdate the domain registration to use the four name servers that you got in step 1. See "Adding or Changing Name Servers and Glue Records for a Domain":https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/domain-name-servers-glue-records.htmlScottCommentShareEXPERTAWS-User-6179575answered 3 years ago0Hi,Lightsail has documentation about how to use Route 53 as the DNS service for a Lightsail instance:https://lightsail.aws.amazon.com/ls/docs/en_us/articles/amazon-lightsail-using-route-53-to-point-a-domain-to-an-instanceScottCommentShareEXPERTAWS-User-6179575answered 3 years ago0I've read all the documentation, and in each case, it says to, "Use the method that is provided by the current DNS service (that is, Lightsail) for the domain to update the NS record for the hosted zone.". The problem is that Lightsail provides NO method to update the NS record. So, the only thing I can do is to delete zone and wait for the resolver to query the DNS.Edited by: pcameron60 on Mar 31, 2020 12:37 AMEdited by: pcameron60 on Mar 31, 2020 12:38 AMCommentSharepcameron60answered 3 years ago"


Question: "I want to do DynamoDB query items with multiple filters something like: latest post(createdAt), country (According to user country), ByuserId, with specific tagIs this possible?"

"My items in DynamoDB table is according to this model:type Post @model{I'd: IDcontent: stringCountry: stringTag: [string]ByuserId:ID!Createdat:AWSdate}I want mutiple filter like specifictag, specific time, by specific user,post with specific country.Like YouTube feed most posts are: chennal you subscribed, tags that are related to watch history, posts are mainly from current user country , and they promote latest postFollowComment"

Answer: "1You can specify multiple filters using a FilterExpression, however it is highly in-efficient and best to be avoided:FilterExpression="specifictag=123 AND specifictime=92487109247"To make things more efficient you can make use of overloading your keys, or using composite keys. For example, if you always want to filter based on the same attributes in order, then you can define your schema to suit that. This makes our query calls highly efficient, but can take some thought to get the schema design correctpkskdatauser123dynamodb#2022-10-21#IrelandDataKeyConditionExpression="pk=user123 AND sk=dynamodb#2022-10-21#Ireland"CommentShareEXPERTLeeroy Hannigananswered 5 months ago0Check this out https://stackoverflow.com/questions/58253219/dynamodb-how-to-design-and-query-multiple-fieldsCommentShareEvananswered 5 months agoAsit Dixit 5 months agoPlease describe instead of attaching linkShare"


Question: Is there a separate message type for OTP in Pinpoint. We want OTP messages to be delivered soon than transaction messages

"Currently, we are using Pinpoint for delivering OTP but the latency is 100% more than benchmark industry standard of 6-7 seconds. Is there any prioritization possible to deliver OTP sooner?FollowComment"

Answer: "1For messages that are critical or time-sensitive, such as a one-time passwords, leveraging TRANSACTIONAL message type in Amazon Pinpoint is indeed the recommendation.An SMS message is delivered to mobile devices through third-party downstream aggregators, SMS suppliers, and mobile carriers. That is, when you use SMS with Amazon SNS, Amazon Pinpoint, or any AWS service that integrates with either Amazon SNS or Amazon Pinpoint.It is worth noting here that, SMS architecture is distributed by design. It's a best practice to avoid making assumptions about the reliability and performance of SMS message transmission for your applications. For more information, see RFC 5724 from the Internet Engineering Task Force (IETF).Having said that, in case you are facing unusual delays specifically with respect to OTP messages, please feel free to open a support case with AWS using the following link.CommentShareSUPPORT ENGINEERVishal_Nanswered 10 months ago"


Question: Why is Lightsail CDN more expensive than Cloudfront?

"Hi,Cloudfront introduced an 1TB free tier in 2021. Yet Lightsail CDN still costs $35 even for 500GB. Why this discrepancy? It seems counterintuitive as Lightsail CDN even has fewer features than Cloudfront.Thanks,AndreasFollowComment"

Answer: "1Lightsail CDN and CloudFront are two different content delivery network (CDN) services provided by AWS, and their pricing models can vary based on factors such as features, usage patterns, and service levels. While it is generally true that CloudFront has a more flexible and granular pricing structure compared to Lightsail CDN, it's important to consider the following factors that may contribute to Lightsail CDN being more expensive in some cases:Simplicity and Integrated Offering: Lightsail CDN is designed to be an easy-to-use and all-inclusive service, bundled with other features like virtual private servers (VPS) and managed databases. The pricing structure may reflect the convenience and simplicity of having an integrated solution within the Lightsail platform.Predictable Pricing: Lightsail CDN offers a simplified pricing model that includes a fixed monthly fee based on the selected plan, which provides a certain level of predictability for cost planning. In contrast, CloudFront employs a pay-as-you-go model where you are billed based on actual usage, including data transfer, requests, and other factors. This flexibility in CloudFront pricing allows for cost optimization but can also result in higher costs if not managed effectively.Additional Features and Customizations: CloudFront offers a wide range of advanced features, such as real-time logs, Lambda@Edge integration, field-level encryption, and edge computing capabilities. These features provide more flexibility and customization options, but they can also increase the complexity and potential costs associated with CloudFront.4.** Data Transfer and Request Patterns:** Lightsail CDN may be more suitable for certain workloads or usage patterns, such as smaller-scale websites or applications with lower data transfer and request volumes. CloudFront, on the other hand, is designed to handle large-scale, global content delivery with more sophisticated caching and performance optimization capabilities. Depending on your specific needs, the usage patterns may impact the cost comparison between the two services.It's essential to carefully evaluate your requirements, anticipated traffic, geographic distribution, desired features, and budget constraints to determine which CDN service—Lightsail CDN or CloudFront—best aligns with your needs. By doing so, you can make an informed decision based on both functionality and cost considerations.Let me know if it helps you understand the question.CommentSharehimanshustallongmailcomanswered 13 days ago"


Question: Amazon Voice Focus AMI does not exist

"Hello,I have tried launching EC2 instances with the Amazon Voice Focus AMI by referring to the following update blog, but the corresponding AMI does not exist.https://aws.amazon.com/jp/blogs/business-productivity/using-amazon-voice-focus-ami-to-reduce-noise-in-audio/I checked the Tokyo region, Oregon region, etc., but  I can't find  the AMI.Is this AMI not launched yet?FollowComment"

Answer: 1Accepted AnswerThe Amazon Voice Focus AMI is launched but it is not public. You account must be configured to allow access to it.The form to request that access is here: https://pages.awscloud.com/GLOBAL_PM_LA_voice-focus_20211020_7014z000000rfEjAAI-registration.htmlCommentShareDougLanswered a year ago


Question: save flow log to a different account

"Hello all,I am having issue with saving a flog log from account1 to an s3 bucket in account2, i have looked round and was not able to find a way to do that, when I try to set it up I get this error: "Method not allowed for LogDestination: <s3 bucket> Please check LogDestination permission"on the s3 bucket for account 2 i have:{    "Version": "2012-10-17",    "Id": "Policy1",    "Statement": [        {            "Sid": "writeflow",            "Effect": "Allow",            "Principal": {                "AWS": "arn:aws:iam::<account1>:root"            },            "Action": "s3:*",            "Resource": "arn:aws:s3:::<s3 bucket on account 2>"        }    ]}and have also tried on the s3 bucket:Access for other AWS accountsGrantee:<ConID> full accessjust setting up full access for the moment and once i get it working i'll reduce the permissions.FollowComment"

Answer: "0Accepted AnswerHi all, we finally got it working with the below script, just replace the 123412341234 with the account sending the flow long. E.G. 1234-1234-1234 to 123412341234{    "Version": "2012-10-17",    "Statement": [        {            "Sid": "AWSLogDeliveryWrite",            "Effect": "Allow",            "Principal": {                "Service": "delivery.logs.amazonaws.com"            },            "Action": "s3:PutObject",            "Resource": [                "arn:aws:s3:::s3bucketname",                "arn:aws:s3:::s3bucketname/*"            ],            "Condition": {                "StringEquals": {                    "aws:SourceAccount": "123412341234",                    "s3:x-amz-acl": "bucket-owner-full-control"                },                "ArnLike": {                    "aws:SourceArn": "arn:aws:logs:ap-southeast-2:123412341234:*"                }            }        },        {            "Sid": "AWSLogDeliveryCheck",            "Effect": "Allow",            "Principal": {                "Service": "delivery.logs.amazonaws.com"            },            "Action": [                "s3:GetBucketAcl",                "s3:ListBucket"            ],            "Resource": "arn:aws:s3:::s3bucketname",            "Condition": {                "StringEquals": {                    "aws:SourceAccount": "123412341234"                },                "ArnLike": {                    "aws:SourceArn": "arn:aws:logs:ap-southeast-2:123412341234:*"                }            }        }    ]}CommentShareAWS-User-6550659answered a year ago0Hello,I think I understand your issue. Please use the following policy.The issue was with "Resource": "my-s3-arn", as the error message says Action does not apply to any resource(s) in statement.  so we need to correct the Resource ARN.S3 buckets require one ARN at the bucket level and another one for all the objects in the bucket."Resource": ["arn:aws:s3:::testflowlogs84763","arn:aws:s3:::testflowlogs84763/*"],In addition, please turn off Block public access (bucket settings) as we are providing access through a bucket policyI used ap-south-east-2 region and please replace [SoureAccount] with the account from where the flow logs will be generated{"Version": "2012-10-17","Statement": [{"Sid": "AWSLogDeliveryWrite","Effect": "Allow","Principal": {"Service": "delivery.logs.amazonaws.com"},"Action": "s3:PutObject","Resource": ["arn:aws:s3:::testflowlogs84763","arn:aws:s3:::testflowlogs84763/*"],"Condition": {"StringEquals": {"aws:SourceAccount": "[SoureAccount]","s3:x-amz-acl": "bucket-owner-full-control"},"ArnLike": {"aws:SourceArn": "arn:aws:logs:ap-southeast-2:[SoureAccount]:*"}}},{"Sid": "AWSLogDeliveryCheck","Effect": "Allow","Principal": {"Service": "delivery.logs.amazonaws.com"},"Action": ["s3:GetBucketAcl","s3:ListBucket"],"Resource": ["arn:aws:s3:::testflowlogs84763","arn:aws:s3:::testflowlogs84763/*"],"Condition": {"StringEquals": {"aws:SourceAccount": "[SoureAccount]"},"ArnLike": {"aws:SourceArn": "arn:aws:logs:ap-southeast-2:[SoureAccount]:*"}}}]}Please accept as Answer if this works for you or let me know if you need further helpSriCommentShareSrianswered a year agoAWS-User-6550659 a year agoHi Sri,What you sent it did accept and i also turned on public access then tried but got this error:Unable to create flow logAccess Denied for LogDestination: <s3 bucket>. Please check LogDestination permissionalso all of the account are in ap-southeast-2 and thanks for your help so far.JakeShareSri a year agoCould you please double check that the bucket exists in ap-southeast-2 under bucket properties? Sometimes we don't realize while creating the buckets that we are in a different region as it shows Global.Even though S3 is a global service, the buckets are regional for data compliance purposes.I have tried the same example. I have created a flow log from a subnet and launched an EC2 in the same subnet to create some traffic. I was able to see the logs in the bucket of another account.Share0Please try thisReplace [Account1], [Account2] with your account numbersReplace the bucket name as well{    "Version": "2012-10-17",    "Statement": [        {            "Sid": "AWSLogDeliveryWrite",            "Effect": "Allow",            "Principal": {                "Service": "delivery.logs.amazonaws.com"            },            "Action": "s3:PutObject",            "Resource": [                "arn:aws:s3:::testflowlogs84763",                "arn:aws:s3:::testflowlogs84763/*",                "arn:aws:s3:::testflowlogs84763/AWSLogs/[Account1]/*"            ],            "Condition": {                "StringEquals": {                    "s3:x-amz-acl": "bucket-owner-full-control",                    "aws:SourceAccount": [                        "[Account2]",                        "[Account1]"                    ]                },                "ArnLike": {                    "aws:SourceArn": [                        "arn:aws:logs:ap-southeast-2:[Account2]:*",                        "arn:aws:logs:ap-southeast-2:[Account1]:*"                    ]                }            }        },        {            "Sid": "AWSLogDeliveryCheck",            "Effect": "Allow",            "Principal": {                "Service": "delivery.logs.amazonaws.com"            },            "Action": [                "s3:GetBucketAcl",                "s3:ListBucket"            ],            "Resource": [                "arn:aws:s3:::testflowlogs84763",                "arn:aws:s3:::testflowlogs84763/*"            ],            "Condition": {                "StringEquals": {                    "aws:SourceAccount": "[Account2]"                },                "ArnLike": {                    "aws:SourceArn": "arn:aws:logs:ap-southeast-2:[Account2]:*"                }            }        },        {            "Sid": "AWSLogDeliveryAclCheck",            "Effect": "Allow",            "Principal": {                "Service": "delivery.logs.amazonaws.com"            },            "Action": "s3:GetBucketAcl",            "Resource": "arn:aws:s3:::testflowlogs84763",            "Condition": {                "StringEquals": {                    "aws:SourceAccount": "[Account1]"                },                "ArnLike": {                    "aws:SourceArn": "arn:aws:logs:ap-southeast-2:[Account1]:*"                }            }        }    ]}CommentShareSrianswered a year agoAWS-User-6550659 a year agoHi Sri,I tried this one but unfortunately got the same issue:Unable to create flow logAccess Denied for LogDestination: habitat3awslogs. Please check LogDestination permissionShareSri a year agoI will write up a blog article for you soonShare0Hi AWS-User-6550659,I hope you are trying to send VPC flow logs to S3 destination which is located in a different AWS account. As per my understanding, you are seeing issues with the pushing flow logs to S3 from different account. For this scenario to work, S3 has to allow,{"Service": "delivery.logs.amazonaws.com"}.Hope the below article might of some help here.https://docs.aws.amazon.com/vpc/latest/userguide/flow-logs-s3.html#flow-logs-s3-permissionsHappy to help.CommentShareKarthikeyan Venkatramananswered a year agoAWS-User-6550659 a year agoHi Karthikeyan,I tried the bucket permission section and replaced "my-s3-arn" and the "arn:aws:s3:::bucket_name" with the bucket arn and the "arn:aws:logs:region:account_id:*" and the "account_id" with the account number but i got this error:"Unknown ErrorAn unexpected error occurred.API responseAction does not apply to any resource(s) in statementt"JakeShare0ARN my-s3-arn/arn:aws:s3:::bucket_name seems to be incorrect in the policy as per the error, could you please check again?An example ARN arn:aws:s3:::s3bucketnameCommentShareSrianswered a year agoAWS-User-6550659 a year agoHi Sri,That is correct, i was using the "my-s3-arn/arn:aws:s3:::bucket_name" to represent the two places i have to change the arn, I have updated my reply to avoid that confusion.JakeShare0Here is the blog article, hope this helps!https://dev.to/kasukur/how-to-publish-vpc-flow-logs-to-a-different-account-1eadSriCommentShareSrianswered a year ago"


Question: AWS landing zone

What is meant by AWS landing zoneFollowComment

Answer: "1You can refer to this document for more details about AWS Landing Zone: https://aws.amazon.com/solutions/implementations/aws-landing-zone/AWS Landing Zone is a quicker way to set up a secure, multi-account AWS environment based on AWS best practices.AWS Landing Zone can help save time by automating the set-up of an environment for running secure and scalable workloads while implementing an initial security baseline through the creation of core accounts and resources.As noted in the document as well, "AWS Landing Zone is currently in Long-term Support and will not receive any additional features. Customers interested in setting up a new landing zone should check out AWS Control Tower and Customizations for AWS Control Tower."Details about the Landing Zone feature of AWS Control Tower can be found here:https://aws.amazon.com/controltower/features/#Landing_ZoneCommentSharejoahnaanswered 9 months agoEXPERTChris_Greviewed 9 months ago"


Question: Setting up refresh schedules for Amazon Redshift materialized view

"I am looking to refresh materialized views in Amazon Redshift on a schedule. Having read various documentation, I am unable to find details on how (if at all possible) to create a schedule to automatically update the materialized view.FollowComment"

Answer: "0Accepted AnswerThere are several ways this could be achieved -Amazon Redshift now has a scheduler feature to schedule running of queries on a cluster which can easily take care of this. For more details refer Video: Schedule a query or Schedule a queryTo use the new Redshift Data APIs from AWS Lambda to run the REFRESH statement and schedule the AWS Lambda Function through Amazon EventBridge or to add the call to the AWS Lambda in the ETL workflow.Using AWS Glue and AWS Glue Workflow a AWS Glue Python Shell job would also work.CommentShareEXPERTFabrizio@AWSanswered 3 years ago0Amazon Redshift can automatically refresh materialized views with up-to-date data from its base tables when materialized views are created with or altered to have the autorefresh option. For more details, refer to the documentation here, https://docs.aws.amazon.com/redshift/latest/dg/materialized-view-refresh.html.CommentSharesudhiganswered 2 years ago"


Question: Amazon Connect with own Voip Provider

I'm currently using PBXware with a voip carrier. The voip carrier provides me with a trunk and I'm billing through them for all my incoming and outgoing minutes. Am I able to use Amazon connect with my own voip carrier using a trunk or am I forced to use amazon connect as the telephony portion as well. I'm with my voip carrier for over 10 years and prefer to continue with them for the inbound/outbound sip portion. I would just want to use amazon connect to replace Pbxware.FollowComment

Answer: "0Slight clarification. faddi is right on the inbound side, but on the outbound side you can push your call through Chime to your private SIP trunk into your PBX for outbound calls. Additionally, you can pass data via UUI. We're doing this and it works well.davidCommentSharedmaciasanswered 7 months agorePost-User-2344044 3 months agoHi @dmacias, is there a link to documentation on how this is set-up in Connect? I am interested in trying it out.Sharedmacias 3 months agoI’ve not seen a link to it, but I know it’s possible. You need to use a voice connector group which allows you to setup a SIP trunk between Chime and your SBC. Then you’ll be able to use your Chime voice connector in Connect.SharerePost-User-2344044 3 months ago@dmarcias, no luck. I wasn't able to find an Amazon Chime option in the Amazon Connect "Transfer to Phone Number" Flow Block, after falling you steps above and creating a Chime Connector in a Chime Voice Connecter GroupSharerePost-User-2344044 3 months agoThanks @dmacias. The IBM Watson link was very helpful!  Thank You for taking the time to find it.Share0Hi,Amazon Connect, as a managed service, abstract the telephony layer and you're not required to setup any Trunks, SIP endpoints or manage the vendor relationships. As of today you can not bring your own carrier into Amazon Connect.CommentSharefaddianswered 7 months agoEXPERTAWS-samfredreviewed 2 months ago"


Question: Using S3 selectObjectContent in Android Studio

"Hi, I'm developing an Android App in Android studio, and I want to use the select function of S3 to retrieve some data in .csv files stored in S3. However, if I use Java SDK (aws-java-sdk), it has the method selectObjectContent, but there will be some error when running the project because this SDK cannot fully support Android. And if I use android SDK (by adding implementation "com.amazonaws:aws-android-sdk:2.50.0" in build.gradle), the AmazonS3 s3Client has no method named selectObjectContent. Is the select function currently not supported in Android development?FollowCommentrePost-User-8455464 13 days agoI'm having the same issue, did you ever find a solution?SharerePost-User-4805362 12 days agoNo. Instead, I used boto3 in Python to implement the same function and encrypted it into an API by FastAPI, so that I could invoke that API from Android Studio to get the desired functionality. Hope this can help.Share"


Question: Reserved Instances for RDS Aurora

"A customer with 10 RDS (Aurora MySQL) instances (T2.small, R4.large).If they buy T3 reserved instances (RI):can they use these credits for any T type instance from any size? ex, to a T2.small (or later) if you initiate a new generation under the same T family (e.g. T4)could they use half of these RI for T3.large?is there a mapping table? ex. "T3.large equals 2+ T2.small".are RI interchangeable with different types? ex. buying a T3.small RI counts for a R4.largeThanksFollowComment"

Answer: "2Accepted AnswerNo, the customer will not have the flexibility to change instance generations. "Region, DB Engine, DB Instance Class, Deployment Type and term length must be chosen at purchase, and cannot be changed later" as indicated on this page.If a customer would like to purchased T3 reserved instances for RDS, they will have to commit to the T3 family. With Aurora MySQL they have size flexibility -- so they can purchase a T3.Large, and run 4 T3.Smalls to get the discount (or whatever the size factor is). However, they must commit to the T3 family. They will not be able to get the discount by running a T2 RDS instance. That T2 will be billed on-demand rates.CommentSharepechunganswered 3 years agoEXPERTNataliya_Greviewed a year ago"


Question: DMS Multi-AZ standby replica IP address

"Hi,When deploying DMS in a multi-az configuration, I understand the standby replication instance will be in a different AZ and sat in a different subnet.In the event the standby replication instance is called into action as per the documentation;"If the primary replication instance fails or becomes unresponsive, the standby resumes any running tasks with minimal interruption"I am correct in thinking you can specify the standby replication instance IP address from the subnet of the AZ? -Reason being is I use DMS within private subnets that connect to a client via a site-to-site vpn, so I often have to specify the subnets in use and also the IP addresses of the replication instance. There is no such thing as a floating or shared private IP for the primary and standby replication instances?Thanks,DavidFollowComment"

Answer: 0Accepted AnswerWe cannot specify direct ip address but it could be from pool of ipaddress as defined by subnets included to setup the replication instance.Replication instance is setup using DMS replication subnet group which contains atleast two subnetsSay we have two subnets defined 10.0.1.0/27 (with 32 ips)  and 10.0.1.32/27 (32 IPs) then we can open firewall for those total range 10.0.1.0/26 (64 ips)CommentShareAWS-User-8174525-subhashanswered a year ago


Question: Default configuration set with SES IAM user

"Hi,I linked a default configuration set with a verified identity in SES.  The configuration set transfers SES data via Fireshose to S3. All works fine when using the 'Send a test email' in SES.I also created a PHP script, using the same SES verified email address, to send outbound emails.  Here too, without specifying the 'X-SES-CONFIGURATION-SET' custom header parameter, the default configuration set is used to transfer the data correctly to S3.  This uses a SMTPUser/pwd combination.When using the same verified email address via an IAM user, the emails are sent out correctly, but the default configuration set doesn't seem to be taken into account. No data gets sent to Firehose (and so neither to S3).It looks to me like a permission issue, but I tried already different things and nothing seems to fix the issue.Anyone an idea what I missed?Thanks,NicoFollowComment"

Answer: "0Our problem is solved with including the 'X-SES-CONFIGURATION-SET' custom header parameter in the call to SES.  But so, the default configuration set seems not to get used when making the call via IAM userCommentShareclaesnianswered 2 years ago"


Question: Can't connect to my application using ROS Bridge

"Hi there,I trying to set up port forwarding for my simulation so that I can test my FMS. I followed this tutorial https://docs.aws.amazon.com/robomaker/latest/dg/simulation-job-remote-connectivity.html.But I still failed to connect. Could you please instruct me in detail on how to connect to my FMS?Thank you and have a nice day,FollowComment"


Question: Wine crashes when running in Lambda container

"I have a container image that I have built following the guidelines in how to create custom Docker containers for Lambda. It's definitely hooked up correctly because I'm getting logs from the runs.The situation is, I have a windows .exe binary file (provided by an unresponsive vendor) that I need to run, and Lambda sounded like a great tool for this. I installed Wine in the custom container, great. But every time the function fires, I look at that part in the CloudWatch logs and it's clear that Wine has crashed with a coredump in the /tmp directory.I have triedjust having wine print its version and exit, same issue, it's just on running the program at all,using different versions of Wine,using different WINEPREFIX and WINEARCH environment variables,building Wine from source myself as part of the Docker container build process, andposting in the Wine forums for help.Questions:Is there any way to get out one of those core dumps?Could this be because all directories other than /tmp are read-only to the container? How would I figure this out?Is there any other way to run an .exe in Lambda?Thanks in advance. I know this is a niche problem.See this other question for a similar unsolved question. May be the same issue but it is from months ago and has no activity.FollowComment"

Answer: 1Not answering the question but perhaps some background that might help:Lambda functions run in a very limited virtualsiation environment: https://aws.amazon.com/blogs/aws/firecracker-lightweight-virtualization-for-serverless-computing/ - it doesn't contain the full Linux kernel and is deliberately built to be small and have lower overheads - including the base operating system itself. It's highly probably that there are APIs that WINE is expecting to find that simply aren't there.If you need access to the core dumps the best thing is to raise a support case and engage with the support team.CommentShareEXPERTBrettski-AWSanswered 3 months ago


Question: Get Connect Quotas via CLI

"The following command returns a single quota, but based on the documentation I should be returning all, anyone able to confirm this works for them?aws service-quotas list-service-quotas --service-code connect --region us-west-2AWS CLI:aws-cli/2.3.5 Python/3.8.8 Windows/10 exe/AMD64 prompt/offThank you.FollowCommentdmacias 4 months agoBased on the documentation maybe this is why I only see one:If the applied quota value is not available for a quota, the quota is not retrieved.I've found inconsistencies from what the requests are and what the actual quota is and I'm trying to find a way to get the details myself.Share"


Question: Instance unresponsive

"Hi,Instance was unresponsive. Tried rebooting, then stopping it, and then a couple forced stops, but it's still stuck on stopping. Tried to create an image, failed. There was an option to open a support case after it passed 20 minutes being unresponsive, but that seems to have vanished since I tried stopping it. Any ideas?Instance ID: i-0cd84de1FollowComment"

Answer: "0We were apparently affected by the EC2 operational issue reported in the Personal Health Dashboard (datacenter power outage and generator failure), but the issue has been closed and there has been no additional communication. Is this still being worked on? We're still down. The instance finally stopped, but we've been unable to restart it.Same instance ID: i-0cd84de1CommentSharePat0answered 4 years ago0No need for a reply, the instance has been recovered.CommentSharePat0answered 4 years ago"


Question: Can we change AWS account names for the different environments and will there be any impact to the services in the accounts?

"We are planning to change aws account names for different environments. How can we do that and will there be any impact to the services and billing in the accounts? Did anyone do this? If so, how did it go?Below is the account structure we have currently.Under Org./Enterprise account we 4 sub accounts and each sub accounts have 2 role based consolesOrganization Account* account1@abc (1234) --> IAM console, Standard-console* account2@abc (0987) --> IAM console, Standard-console* account3@abc (4567) --> IAM console, Standard-console* account4@abc (7654) --> IAM console, Standard-consoleWe want to rename it as belowOrganization Account* accountPROD@abc (1234) --> IAM console, Standard-console* accountUAT@abc (0987) --> IAM console, Standard-console* accountQA@abc (4567) --> IAM console, Standard-console* accountDEV@abc (4567) --> IAM console, Standard-consoleThanks!FollowComment"

Answer: "0I hope here you are referring single AWS account and question is for account alias.Why we use account alias: If you want the URL for your IAM users to contain your company name (or another easy-to-remember identifier) instead of the AWS account ID.At a time, your AWS account can have only one alias. If you create a new alias for your AWS account, the new alias overwrites the previous alias. The URL containing the previous alias stops working.The account alias must be unique across all Amazon Web Services products. It must contain only lowercase letters, digits, and hyphens.See more details available @ https://docs.aws.amazon.com/accounts/latest/reference/manage-acct-alias.htmlCommentShareNirmalanswered a month ago0Your AWS account name is the name that appears in the AWS Management Console next to your account ID. You choose this name when you first create the account, but you can update the name through the AWS Billing and Management console.Changing an account name is a task that requires root user credentials. Therefore, only the AWS account root user can modify the AWS account name and it can take up to 4 hours for the changes to reflect on the AWS console.In general changing the name should not impact any AWS services unless they have something hardcoded like policies, scripts, or other customer/vendor built integrations which are specifically using the account name.You can watch this video on how to change the account name using the AWS Management Console.CommentShareAWS-User-9543277answered a month ago"


Question: Deploy trained model BERT in aws Lambda

"I already train a BERT model in Python 3.9.16 and I save the .pth files in the models directory (my model ia about 417MB) and I also have my Dockerfile and requirements.txt as following:DockerfileFROM public.ecr.aws/lambda/python:3.9-x86_64ENV TRANSFORMERS_CACHE=/tmp/huggingface_cache/COPY requirements.txt .#RUN pip install torch==1.10.1+cpu -f https://download.pytorch.org/whl/torch_stable.htmlRUN pip install torch==1.9.0RUN pip install transformers==4.9.2RUN pip install numpy==1.21.2RUN pip install pandas==1.3.2RUN pip install -r requirements.txt --target "${LAMBDA_TASK_ROOT}/dependencies"COPY app.py ${LAMBDA_TASK_ROOT}COPY models ${LAMBDA_TASK_ROOT}/dependencies/modelsCMD [ "app.handler" ]requirements.txttorch==1.9.0transformers==4.9.2numpy==1.21.2pandas==1.3.2app.pyimport torchfrom transformers import BertTokenizer, BertForSequenceClassification, BertConfig#from keras.preprocessing.sequence import pad_sequences#from keras_preprocessing.sequence import pad_sequences#from tensorflow.keras.preprocessing.sequence import pad_sequencesfrom torch.utils.data import TensorDataset, DataLoader, RandomSampler, SequentialSamplerimport numpy as npimport pandas as pdfrom typing import Dictimport json# Path to the directory containing the pre-trained model files#model_dir = "./models/"model_dir= "./dependencies/models/"dict_path = f"{model_dir}/model_BERT_DAVID_v2.pth"state_dict = torch.load(dict_path,map_location=torch.device('cpu'))vocab_path=f"{model_dir}/vocab_BERT_DAVID_v2.pth"vocab = torch.load(vocab_path,map_location=torch.device('cpu'))model = BertForSequenceClassification.from_pretrained('bert-base-uncased', num_labels=4, state_dict=state_dict)tokenizer = BertTokenizer.from_pretrained('bert-base-uncased', do_lower_case=True, vocab=vocab)def handler(event):    #payload = json.loads(event)    payload=event # dict with the text    text = payload['text']    df = pd.DataFrame()    df['TEXT']=[text]    sentences = df['TEXT'].values    sentences = ["[CLS] " + sentence + " [SEP]" for sentence in sentences]    tokenized_texts = [tokenizer.tokenize(sent) for sent in sentences]    MAX_LEN = 256    # Use the BERT tokenizer to convert the tokens to their index numbers in the BERT vocabulary    input_ids = [tokenizer.convert_tokens_to_ids(x) for x in tokenized_texts]    # Pad our input tokens    #input_ids = pad_sequences(input_ids, maxlen=MAX_LEN, dtype="long", truncating="post", padding="post")    # Pad our input tokens    input_ids = [torch.tensor(seq)[:MAX_LEN].clone().detach() for seq in input_ids]    input_ids = torch.nn.utils.rnn.pad_sequence(input_ids, batch_first=True, padding_value=0)    input_ids = torch.nn.functional.pad(input_ids, (0, MAX_LEN - input_ids.shape[1]), value=0)[:, :MAX_LEN]    input_ids = input_ids.type(torch.LongTensor)    # Create attention masks    attention_masks = []    # Create a mask of 1s for each token followed by 0s for padding    for seq in input_ids:        seq_mask = [float(i>0) for i in seq];attention_masks.append(seq_mask)    prediction_inputs = input_ids.to('cpu') # cuda    prediction_masks = torch.tensor(attention_masks, device='cpu') # cuda    batch_size = 32    prediction_data = TensorDataset(prediction_inputs, prediction_masks)    prediction_sampler = SequentialSampler(prediction_data)    prediction_dataloader = DataLoader(prediction_data, sampler=prediction_sampler, batch_size=batch_size)    # Prediction     # Put model in evaluation mode    model.eval()    # Tracking variables     predictions = []    # Predict     for batch in prediction_dataloader:            # Add batch to GPU            #batch = tuple(t.to(device) for t in batch)            batch = tuple(t for t in batch)            # Unpack the inputs from our dataloader            b_input_ids, b_input_mask = batch            # Telling the model not to compute or store gradients, saving memory and speeding up prediction            with torch.no_grad():                # Forward pass, calculate logit predictions                logits = model(b_input_ids, token_type_ids=None, attention_mask=b_input_mask)                 # Move logits and labels to CPU            logits = logits['logits'].detach().cpu().numpy()            #label_ids = b_labels.to('cpu').numpy()            # Store predictions and true labels            predictions.append(logits)            #true_labels.append(label_ids)    key = {0:'VERY_NEGATIVE', 1:'SOMEWHAT_NEGATIVE', 2:'NEUTRAL',3:'POSITIVE'}     values=np.argmax(predictions[0], axis=1).flatten() # prediccion maxima de likehood    converted_values = [key.get(val) for val in values] # valor del dict al que corresponde al optimo valor de likehood    # Obtain the score for the intensity    exponents = np.exp(predictions) # Operar sobre la softmax para sacar la prob    softmax = exponents / np.sum(exponents)    intensity={'VERY_NEGATIVE':softmax[0][0][0],'SOMEWHAT_NEGATIVE':softmax[0][0][1],'NEUTRAL':softmax[0][0][2],\           'POSITIVE':softmax[0][0][3]}    score=max(intensity.values())    return converted_values[0]Everything seems correct in local when i create the aws lambda function in the 3.9 version I got this error:{  "errorMessage": "invalid load key, 'v'.",  "errorType": "UnpicklingError",  "requestId": "",  "stackTrace": [    "  File \"/var/lang/lib/python3.9/importlib/__init__.py\", line 127, in import_module\n    return _bootstrap._gcd_import(name[level:], package, level)\n",    "  File \"<frozen importlib._bootstrap>\", line 1030, in _gcd_import\n",    "  File \"<frozen importlib._bootstrap>\", line 1007, in _find_and_load\n",    "  File \"<frozen importlib._bootstrap>\", line 986, in _find_and_load_unlocked\n",    "  File \"<frozen importlib._bootstrap>\", line 680, in _load_unlocked\n",    "  File \"<frozen importlib._bootstrap_external>\", line 850, in exec_module\n",    "  File \"<frozen importlib._bootstrap>\", line 228, in _call_with_frames_removed\n",    "  File \"/var/task/app.py\", line 25, in <module>\n    state_dict = torch.load(dict_path,map_location=torch.device('cpu'))\n",    "  File \"/var/lang/lib/python3.9/site-packages/torch/serialization.py\", line 608, in load\n    return _legacy_load(opened_file, map_location, pickle_module, **pickle_load_args)\n",    "  File \"/var/lang/lib/python3.9/site-packages/torch/serialization.py\", line 777, in _legacy_load\n    magic_number = pickle_module.load(f, **pickle_load_args)\n"  ]}I try multiple things but no solution so far anyone can help meFollowComment"

Answer: "0No idea if this is the issue or not, but your model_dir variable includes a trailing slash, and you also include a slash when you construct dict_path and vocab_path. Try removing one of them to see if it helps.CommentShareEXPERTUrianswered 2 months agorePost-User-7556940 2 months agoHi thanks I already change the model_dir to:model_dir= "./dependencies/models"But didnt workShare"


Question: "Upgraded to 2.1.0, cannot deploy"

"I upgraded to GreenGrass version 2.1.0, and now I cannot deploy. It looks like it's trying to load aws.greengrass.Nucleus? I'm deploying:ggOpcLee=10.0.0    # My lambdaaws.greengrass.Cli==2.0.5aws.greengrass.LambdaManager==2.1.0aws.greengrass.Nucleus==2.1.0aws.greengrass.Cloudwatch==2.0.4aws.greengrass.LogManager==2.1.0Any thoughts appreciated...From /greengrass/v2/logs/greengrass.log:2021-05-04T17:22:44.673Z [INFO] (pool-2-thread-51) com.aws.greengrass.componentmanager.ComponentManager: resolve-component-version-end. Resolved component version.. {ResolvedComponent=aws.greengrass.Cli-v2.0.5}2021-05-04T17:22:44.677Z [INFO] (pool-2-thread-51) com.aws.greengrass.componentmanager.ComponentManager: resolve-component-version-start. Resolving component versionstarts. {component=aws.greengrass.Nucleus, versionRequirements={thing/LeeThing2==2.1.0, aws.greengrass.Cli=>=2.0.5 <2.1.0, aws.greengrass.LambdaManager=>=2.0.0 <2.2.0}}2021-05-04T17:22:44.677Z [INFO] (pool-2-thread-51) com.aws.greengrass.componentmanager.ComponentManager: Searching for best candidate locally on the device.. {VersionRequirements={thing/LeeThing2==2.1.0, aws.greengrass.Cli=>=2.0.5 <2.1.0, aws.greengrass.LambdaManager=>=2.0.0 <2.2.0}, ComponentName=aws.greengrass.Nucleus}2021-05-04T17:22:44.678Z [INFO] (pool-2-thread-51) com.aws.greengrass.componentmanager.ComponentManager: No running component satisfies the requirement. Searching in the local component store.. {}2021-05-04T17:22:44.679Z [INFO] (pool-2-thread-51) com.aws.greengrass.componentmanager.ComponentManager: Can't find a local candidate that satisfies the requirement.. {}2021-05-04T17:22:44.679Z [INFO] (pool-2-thread-51) com.aws.greengrass.componentmanager.ComponentManager: negotiate-version-with-cloud-start. Negotiating version with cloud. {}2021-05-04T17:22:44.941Z [ERROR] (pool-2-thread-51) com.aws.greengrass.componentmanager.ComponentManager: Failed to negotiate version with cloud and no local versionto fall back to. {componentName=aws.greengrass.Nucleus, versionRequirement={thing/LeeThing2==2.1.0, aws.greengrass.Cli=>=2.0.5 <2.1.0, aws.greengrass.LambdaManager=>=2.0.0 <2.2.0}}FollowComment"

Answer: "0Accepted AnswerHi,Please deploy the latest version of all the components. Specifically, deploy CLI version 2.1.0.The error you got: "Failed to negotiate version with cloud and no local versionto fall back to. {componentName=aws.greengrass.Nucleus, versionRequirement={thing/LeeThing2==2.1.0, aws.greengrass.Cli=>=2.0.5 <2.1.0, aws.greengrass.LambdaManager=>=2.0.0 <2.2.0}}" Tells you that Nucleus version 2.1.0 is required by your thing deployment, but less than 2.1.0 is required by the CLI; thus no version can satisfy both requirements. You need to update the CLI version in order to get a CLI version which is compatible.Cheers,MichaelCommentShareEXPERTMichaelDombrowski-AWSanswered 2 years ago0I noticed that I also need to deploy to a "Target type" of "Thing group". If I try and deploy to "Core device", the deploy fails with a similar error message as above. So I'm wondering if the deploy actually worked for a "Thing group"? It stays "Active" even if I revert to Cli version 2.0.5.CommentShareLeeMerrillanswered 2 years ago0I think the deploy is failing even when I deploy to a "Thing group".CommentShareLeeMerrillanswered 2 years ago0I notice on the "AWS IoT > GreenGrass > Core Devices > LeeThing2" page the Greengrass Core software version is 2.0.5, where it needs to be 2.1.0? I deleted and recreated the thing (after verifying that the Greengrass.jar version I was using was 2.1.0) and it still shows 2.0.5. I tried just deploying ggOpcLee (my lambda) with no other components, to LeeThing2, and got:2021-05-06T16:47:48.843Z [INFO] (pool-2-thread-46) com.aws.greengrass.componentmanager.DependencyResolver: resolve-group-dependencies-start. Start to resolve group dependencies. {targetComponents=[ggOpcLee], componentToVersionRequirements={aws.greengrass.Cli=thinggroup/GreengrassQuickStartGroup2==2.0.5}, aws.greengrass.LambdaLauncher={ggOpcLee=>=1.0.0, ggHello=>=1.0.0}, aws.greengrass.TokenExchangeService={ggOpcLee=>=1.0.0, ggHello=>=1.0.0}, aws.greengrass.LambdaRuntimes={ggOpcLee=>=1.0.0, ggHello=>=1.0.0}, ggOpcLee={thinggroup/LeeGroupV2==7.0.0, thing/LeeThing2==11.0.0}, ggHello={thinggroup/GreengrassQuickStartGroup2==2.0.0}, aws.greengrass.LambdaManager={aws.greengrass.LambdaLauncher=>=2.0.0 <2.2.0}, aws.greengrass.Nucleus={aws.greengrass.Cli=>=2.0.5 <2.1.0, aws.greengrass.LambdaManager=>=2.0.0 <2.2.0}}}2021-05-06T16:47:48.843Z [INFO] (pool-2-thread-46) com.aws.greengrass.componentmanager.ComponentManager: resolve-component-version-start. Resolving component version starts. {component=ggOpcLee, versionRequirements={thinggroup/LeeGroupV2==7.0.0, thing/LeeThing2==11.0.0}}2021-05-06T16:47:48.843Z [INFO] (pool-2-thread-46) com.aws.greengrass.componentmanager.ComponentManager: Searching for best candidate locally on the device.. {VersionRequirements={thinggroup/LeeGroupV2==7.0.0, thing/LeeThing2==11.0.0}, ComponentName=ggOpcLee}2021-05-06T16:47:48.851Z [INFO] (pool-2-thread-46) com.aws.greengrass.componentmanager.ComponentManager: No running component satisfies the requirement. Searching in the local component store.. {}2021-05-06T16:47:48.852Z [INFO] (pool-2-thread-46) com.aws.greengrass.componentmanager.ComponentManager: Can't find a local candidate that satisfies the requirement.. {}So I put back components Cli / LambdaManager / LogManager / Nucleus (all 2.1.0 versions) and got:2021-05-06T17:02:49.979Z [INFO] (pool-2-thread-48) com.aws.greengrass.componentmanager.DependencyResolver: resolve-group-dependencies-start. Start to resolve group dependencies. {targetComponents=[aws.greengrass.Cli, aws.greengrass.LogManager, ggOpcLee, aws.greengrass.LambdaManager, aws.greengrass.Nucleus], componentToVersionRequirements={aws.greengrass.Cli={thing/LeeThing2==2.1.0, thinggroup/GreengrassQuickStartGroup2==2.0.5}, aws.greengrass.LambdaLauncher={ggOpcLee=>=1.0.0, ggHello=>=1.0.0}, aws.greengrass.TokenExchangeService={ggOpcLee=>=1.0.0, ggHello=>=1.0.0}, aws.greengrass.LambdaRuntimes={ggOpcLee=>=1.0.0, ggHello=>=1.0.0}, ggOpcLee={thinggroup/LeeGroupV2==7.0.0, thing/LeeThing2==11.0.0}, aws.greengrass.LogManager={thing/LeeThing2==2.1.0}, ggHello={thinggroup/GreengrassQuickStartGroup2==2.0.0}, aws.greengrass.LambdaManager={aws.greengrass.LambdaLauncher=>=2.0.0 <2.2.0, thing/LeeThing2==2.1.0}, aws.greengrass.Nucleus={aws.greengrass.Cli=>=2.0.5 <2.1.0, thing/LeeThing2==2.1.0, aws.greengrass.LambdaManager=>=2.0.0 <2.2.0}}}2021-05-06T17:02:49.979Z [INFO] (pool-2-thread-48) com.aws.greengrass.componentmanager.ComponentManager: resolve-component-version-start. Resolving component version starts. {component=aws.greengrass.Cli, versionRequirements={thing/LeeThing2==2.1.0, thinggroup/GreengrassQuickStartGroup2==2.0.5}}2021-05-06T17:02:49.979Z [INFO] (pool-2-thread-48) com.aws.greengrass.componentmanager.ComponentManager: Searching for best candidate locally on the device.. {VersionRequirements={thing/LeeThing2==2.1.0, thinggroup/GreengrassQuickStartGroup2==2.0.5}, ComponentName=aws.greengrass.Cli}2021-05-06T17:02:49.979Z [INFO] (pool-2-thread-48) com.aws.greengrass.componentmanager.ComponentManager: No running component satisfies the requirement. Searching in the local component store.. {}2021-05-06T17:02:49.980Z [INFO] (pool-2-thread-48) com.aws.greengrass.componentmanager.ComponentManager: Can't find a local candidate that satisfies the requirement.. {}2021-05-06T17:02:49.980Z [INFO] (pool-2-thread-48) com.aws.greengrass.componentmanager.ComponentManager: negotiate-version-with-cloud-start. Negotiating version with cloud. {}2021-05-06T17:02:50.353Z [ERROR] (pool-2-thread-48) com.aws.greengrass.componentmanager.ComponentManager: Failed to negotiate version with cloud and no local version to fall back to. {componentName=aws.greengrass.Cli, versionRequirement={thing/LeeThing2==2.1.0, thinggroup/GreengrassQuickStartGroup2==2.0.5}}I notice "aws.greengrass.Cli={thing/LeeThing2==2.1.0, thinggroup/GreengrassQuickStartGroup2==2.0.5}," here, and I'm not sure where GreengrassQuickStartGroup2 is coming from (it's not listed on my "Groups" page), nor why it's asking for version 2.0.5 for Cli. Also it looks like Cli 2.1.0 is requiring Nucleus < 2.1.0 ("aws.greengrass.Nucleus={aws.greengrass.Cli=>=2.0.5 <2.1.0")Any further thoughts appreciated...CommentShareLeeMerrillanswered 2 years ago0I uninstalled 2.1.0 and reinstalled it, and now the deploy works! Apparently my 2.1.0 installation got scrambled when I upgraded from 2.0.0.Uninstall:  https://docs.aws.amazon.com/greengrass/v2/developerguide/uninstall-greengrass-core-v2.htmlInstall:  https://docs.aws.amazon.com/greengrass/v2/developerguide/install-greengrass-core-v2.htmlCommentShareLeeMerrillanswered 2 years ago"


Question: Textract does not recognize image text

I want to get the text from an image but Textract doesn't read anything.I have tried with similar images and if it reads the information.Would you know what could be the problem for which it does not read the image?FollowComment

Answer: "1Sometimes in general while doing OCR (Optical Character Recognition) you need to pre-process the image, especially when you have some characters that not very defined.In your case:I would crop the image to "focus" on the non-white parttilt the image in order to be as vertical as possibleincrease the contrast by 20-30%Therefore, as you can see from my result, it recognize everything :)You could use a Lambda or the SageMaker Processing Python job with OpenCV or similar product in order to pre-process the images.Usually this is a best practice in order to obtain better results.Please check this blog: https://aws.amazon.com/it/blogs/machine-learning/process-text-and-images-in-pdf-documents-with-amazon-textract/or this notebook: https://github.com/aws-samples/textract-visual-removal/blob/main/visual_removal_canny_edge_detector.ipynbthe output in Textract:[if my response was useful, please click the "Accept" tick]CommentShareAlexRanswered 2 months ago0For This use case Consider using Amazon Rekognition - > https://docs.aws.amazon.com/rekognition/latest/dg/text-detection.html .CommentShareSanjayanswered 2 months agoAlexR 2 months agoRekognition Text has a limit of 100 words, therefore it's not the best choice:https://docs.aws.amazon.com/rekognition/latest/dg/text-detection.htmlShare"


Question: Adding Lightsail Instance to AWS Systems Manager didn't show in Fleet Manager

"Hello everyone,I created a new snapshot of a Lightsail instance because unable to access it via SSH in browser or locally in terminal [error code: UPSTREAM_NOT_FOUND [519]]. I followed the directions here to add it to AWS Systems Manager to gain access:https://repost.aws/knowledge-center/add-lightsail-to-systems-managerHowever, it doesn't show in Fleet Manager at all. The regions are correct, I copied all the information precisely into the launch script, including the correct activation code and ID. I tried both the generic debian launch script and ubuntu specific one.Thanks for helpFollowComment"

Answer: "0Accepted AnswerSo, I got in and so I am answering my own question. However, this may not work for everyone. I managed to connect with the person who setup the LightSail instance in question and it seems like they had changed the default SSH port on the server side and so I had to specify the correct port manually when logging in via SSH in a terminal locally.CommentSharemmwebanswered 24 days ago0I having the same issue. I was about my question then saw yours. I will share some pictures to give more contextMy steps0- Mu LightSail instance ( Ubuntu 22 )1- Installing and Running amazon-ssm-agent using snap.sudo snap install amazon-ssm-agent --classicsudo snap list amazon-ssm-agent2- Connected to AWS system Manager.3- Fleet Manager is emptyCommentSharerePost-User-3483970answered a month agommweb a month agoYeah, my issue is the same, except I'm unable to access my Lightsail instance via SSH so I ran the code to add amazon ssm agent via launch script when loading a snapshot of my instance. I've been unable to find an answer in the forums that solved this.ShareAWS-User-6091936 23 days agoFollowing the instructions in this post should work: https://repost.aws/knowledge-center/add-lightsail-to-systems-manager.Make sure to specify the correct instance limit while creating the Hybrid activation. You can only register instances until this limit is reached.Verify that the commands specified include the correct activation code, ID and region.Also make sure you are using the right commands necessary for the OS running on the instance. More details can be found here: https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-install-managed-linux.html.Another thing to note is that it might take a few minutes for the instance to show up in the fleet management page after it has been registered.Share"


Question: Basic difference between DID Number or Toll free Number

"Hi Team,Can you please explain to me a little bit in detail about the Basic difference between DID Number and a Toll-free Number? During my Amazon Instance creation time, what types of numbers should I claim and why? I am trying to make a aws connect flow from India and test the same flow from India.FollowComment"

Answer: "0Hi,Difference between DID and Toll free:1- DID:  DID is an abbreviation for ( Direct Inward Dialing ). to simplify it for you, its a Local landline number and the reason for you choose claiming landline number ( DID ) depends on your business case, but generally this line can be dialed from anywhere all over the world. Customer ( end user ) normally will be charged making this call whether if they made the call from the same country you claimed the number from or if they dialed its internationally.2- Toll free number: is usually has the example of 0800/0900. Choosing toll free line depends as well on your business case, toll free numbers usually can be dialed only from the country you are claiming the number for. As an example, if you claimed Japanese Toll free line, so this line can be dialed only from inside Japan. Customer ( end user ) will not be charged for this call and this is why its called ( toll free ) but again its possible to dial the number only from Japan using Japanese line and not from outside.Best Regards,Ramy HusseinCommentShareRamyHanswered 2 months ago0Here is a link from Amazon Connect admin guide that explains the difference:https://docs.aws.amazon.com/connect/latest/adminguide/concepts-telephony.htmlCAPACITY: it is very different between the two.  DID has lower capacity then TFN in general from a concurrency perspective, if you plan to have >100 concurrent call using a single DID, you should either think about using TFN or open a ticket with support to ensure what you need is supported.inbound redundancy:  DID is single threaded in carrier while TFN can be used with multiple carrier that AWS controls.  As with TFN, Amazon will be the RESPORG, therefore we can repoint your TFN to another carrier if something is not correct.CommentShareClarenceChoianswered 2 months agoEXPERTAWS-samfredreviewed 2 months ago"


Question: Unable to upgrade from version 5.7 to 8 MySQL

"Hi there, I am having some issues upgrading from version 5.7 to 8. From the log, I can see:Errors: 1Warnings: 2Database Objects Affected: 79However, it looks like the log below is the one error showing up which has been altered/fixed(The y, x and distance has been replaced by st_y, st_x and st_distance as suggested in the logs) but when I am running again the upgrade, it is still failing with the same error. It looks to me the changes have not taken any effect.12) Usage of removed functionsFollowing DB objects make use of functions that have been removed in version 8.0. Please make sure to update them to use supported alternatives before upgrade.More Information:https://dev.mysql.com/doc/refman/8.0/en/mysql-nutshell.html#mysql-nutshell-removalsVIEW uses removed functions X (consider using ST_X instead), Y (consider using ST_Y instead) FUNCTION uses removed function DISTANCE (consider using ST_DISTANCE instead) PROCEDURE uses removed functions X (consider using ST_X instead), Y (consider using ST_Y instead)Your help will be much more appreciated.I wish to thank you in advance for your response.FollowComment"

Answer: "1Accepted AnswerHi, I'm sorry it's not really an answer on why the upgrade is not succeeding (hard to say without looking into the instance specifics), but I hope this suggestion helps you achieve your objective:If I were you, I'dtake a backup of the RDS MySQL 5.7 instancerestore it to a test 5.7 instancesave/dump the code of the view (and any other non-table object that is listed in the pre-patch compatibility log) for laterdrop the object(s)attempt the upgrade to 8.0recreate the object(s) in 8.0test that your code and application works as it shouldThis way, it is possible to both bypass any mistakenly flagged requirements in the pre-upgrade validation, and to make sure that the objects/code are compatible with 8.0.Then, later, when upgrading your production instance, just do the same drop/upgrade/recreate steps.CommentShareValter_Ranswered a year ago"


Question: Why not implement the ST_Buffer function with distance in meters?

"This is really useful for geospatial processing, I've been having a problem in aws athena where it doesn't create consistent buffers across the globe because decimal degrees change with respect to latitude and longitude, this feature would really be appreciatedFollowComment"

Answer: "0Thank you for providing your valuable feedback on the AWS Athena service. I have raised a feature request with the service team on your behalf. While I am unable to comment on if/when this feature may get released, I request you to keep an eye on our  What's New and Blog pages for any new feature announcements.CommentShareMeghana_Sanswered 10 months ago"


Question: Adjust Microsoft SQL RDS SSAS properties

We are processing a cube on a Microsoft SQL RDS SSAS installation and it's failing for the below:Failed to save modifications to the server. Error returned: 'OLE DB or ODBC error: Query timeout expired; HYT00.OLE DB or ODBC error: Operation canceled; HY008.This can be fixed by changing the ExternalCommandTimeout and ExternalConnectionTimeout analysis server properties.  I tried doing it through SSMS and a XMLA script and got access denied messages.  Is there a way to adjust these properties for a managed Microsoft SQL server SSAS RDS instance?FollowComment


Question: How To Copy Files From On-Prem To Amazon S3 With PowerShell Scripts with over 60 days

How To Copy Files From On-Prem To Amazon S3 With PowerShell Scripts with over 60 daysis there any way to filter the data from on-prem to copy files to S3 which are over 60 days old from the current dayFollowComment

Answer: "1Hi rePost-User-7158120,I understand that you are trying to copy files from your on-premises storage to your AWS S3 bucket using a PowerShell Script and would like to filter for files that are over 60 days old from the current day.AWS has a PowerShell module with AWS Tools that enable you to script operations on your AWS resources from the PowerShell command line (https://aws.amazon.com/powershell/). You can download from the website or install by running Install-Module -Name AWSPowerShell if you are running PowerShell 5 or later.For your specific case, I have included a sample script that may fit what you are trying to accomplish. Please test it before using in your production environment.Import-Module AWSPowerShell#---Define current date---#$Current = Get-Date#---Define number of days---#$Days = 60#---Define source folder---#$CopyFrom = ‘C:\Backupsource\’#---Define destination folder---#$CopyTo = ‘C:\Destination’#---Define extension---#$LastWrite = ($Current).AddDays(-$Days)#---Define files to copy from source folder that are older than specified days---#$Files = Get-ChildItem $CopyFrom  -Recurse | Where-Object { $_.LastWriteTime -le "$LastWrite"}#---Define number of files copied/not copied---#$FilesCopied = 0$FilesNotCopied = 0#---Copy each file---#foreach ($File in $Files){    #---Define file exists---#    $FileExists = Test-Path -Path $CopyTo/$File    #---Determine if the file is not null and does not already exist---#    if (($File -ne $NULL) -and ($FileExists -eq $False))    {       #---Copy the file to the destination folder---#    aws s3 cp $File.FullName $CopyTo    #---Alternate option: Copy-Item $File.FullName $CopyTo---#    #---Add to number of files copied---#    $FilesCopied += 1    }    else    {    #---Add to number of files not copied---#    $FilesNotCopied += 1    }}#---Display the number of files copied/not copied---#Write-Host “Files copied:” $FilesCopied -ForegroundColor GreenWrite-Host “Files not copied:” $FilesNotCopied -ForegroundColor RedCommentShareKegan_Sanswered 10 months ago"


Question: AWS Cognito Verified Identity Issue

"Hello,My team successfully created a unique email to send to users on verification for a newly signed up Cogntio User in a Cognito User Pool.  We had the system working by verifying an email address, "example@example.com".  A developer then verified the domain "example.com", and then deleted the example@example.com verification in the hopes of using subdomains in the future.However, this failed with the message: "Email address not verified for arn:aws:ses:us-east-1-XXXXXXXXX:identity/example@example.com".Although I have added back the email address into the Ses verified configuration, we are still getting the error message.  It is also no longer showing up in the dropdown box for Cognito ID.This is clearly something getting set wrong because we added the domain, added the email, then deleted the email from the verified email list in US-Va-1.  I do not want to pay for support when this is clearly Amazon's internal configuration issue.  I've tried creating a new User Pool, but that did not work.How do I go about resetting this email address so that it is recognized as verified by cognito again?  Once again, it is currently verified address in the US-East-1 according to SES and we are unsandboxed at this time, but Cognito can not recognize that the verified address is actually verified.FollowCommentmzr a year agoHaving the same issue but for eu-west-1, I have used this email before so not sure whats going on.Shareconfused_dev 10 months agoI also am experiencing this. On top of what is said above. If you use boto call to list verified identities, https://boto3.amazonaws.com/v1/documentation/api/latest/reference/services/ses.html#SES.Client.list_verified_email_addresses, they do not show up in the response list. So they show in the UI as verified, but not via an api call.Share"


Question: API Gateway Private Integration with multiple NLB listeners

"A customer wants to use API Gateway Private integration to access applications running on EC2 instances.The private integration required a Network Load Balancer in front of the EC2 instances.They have ~100 of such applications. To save costs, can they share the NLB with multiple API Gateway Resources and Methods?Example:/app1 on the APIGW will send traffic to listener1(port 80) on the NLB/app2 on the APIGW will send traffic to listener2(port 8000) on the NLBFollowComment"

Answer: "1Accepted AnswerYes, you can do that.  Your NLB can have multiple target groups for different applications, each with its own listener.  On the API Gateway side, you can configure a VPCLink integration type and specify something like http://example.com:8000 for the Endpoint URL. There are obviously limits on NLB in terms of the number of listeners, but as long as you are within those, you should be able to save some money by using the same NLB for multiple applications.CommentShareDrew Dennisanswered 4 years ago"


Question: Error while using AWSEC2-CloneInstanceAndUpgradeSQLServer

"How could the following error be resolved when upgrading SQL Server on EC2 from 2017 to 2019 using AWSEC2-CloneInstanceAndUpgradeSQLServer "Status": "Failed", "ResponseCode":1, "Output": "MSSQLSERVER MSSQL14.MSSQLSERVER?FollowComment"

Answer: "0Please review the following link for upgrade process and be sure about the prerequisite listhttps://docs.aws.amazon.com/systems-manager-automation-runbooks/latest/userguide/automation-awsec2-CloneInstanceAndUpgradeSQLServer.htmland please provide more info about the errorCommentShareEXPERTsdtslmnanswered a month agorePost-User-4900275 a month agoThanks for the respond @sdtslmn. I used the exact process you referenced and got the error below, even though I was upgrading from 2017 to 2019VerificationErrorMessageCommand dbe82ae6-e303-4ebb-9af2-de756a745210 returns unexpected invocation result:{Status=[Failed], ResponseCode=[1], Output=[MSSQLSERVERMSSQL14.MSSQLSERVER@{Version=14.0.1000.169; SP=0; SQLPath=c:\Program Files\Microsoft SQL Server\MSSQL14.MSSQLSERVER\MSSQL; ProductCode={DED314CA-0EFE-4593-9D66-EF75E5289A4C}; SqlProgramDir=c:\Program Files\Microsoft SQL Server; FeatureList=SQL_Replication_Core_Inst=3 SQL_Engine_Core_Inst=3 SQL_DataFiles_Core_Inst=3 SQL_ENGINE_DB_CNI=3 SQL_Replication_CNI=3 SQL_Replication_FNI=3 SQL_CMDLINETOOLS_CNI=3 SQL_DUMPER_CNI=3 SQL_Engine_CNI=3 SQL_ENGINE_CORE_CNI=3 SQL_LEGACYTOOLS_CNI=3 SQL_SLP_ENGINE_SUPPORT_CNI=3 MPT_AGENT_CORE_CNI=3 MPT_AGENT_CORE_MNGD_CNI=3 SQL_AGENT_FNI=3 SQL_DATA_COLLECTOR_FNI=3 SQL_LEGACYTOOLS_FNI=3 SQL_MAIL_FNI=3 SQL_UPGRADESCRIPTS_FNI=3; PatchLevel=14.0.3023.8; SQLBinRoot=c:\Program Files\Microsoft SQL Server\MSSQL14.MSSQLSERVER\MSSQL\Binn; Language=1033; checksum=System.Byte[]; ProductID=00394-30000-00000-AB625; DigitalProductID=System.Byte[]; EditionType=Standard Edition; Edition=Standard Edition; SQLGroup=S-1-5-80-3880718306-3832830129-1677859214-2598158968-1052248003; Collation=SQL_Latin1_General_CP1_CI_AS; SQLDataRoot=C:\Program Files\Microsoft SQL Server\MSSQL14.MSSQLSERVER\MSSQL; AGTGroup=S-1-5-80-344959196-2060754871-2302487193-2804545603-14661074Share"


Question: Write latency elevated without any obvious cause

"We are running MySQL on a db.r3.4xlarge with 4000 provisioned IOPs on SSD. This morning we started seeing increased write latency for long periods, without any apparent increased load to explain it. CPU was under 12% and write IOPs were below 500, and actually went down to around 100 once the average write latency increased from its normal value of around 2 milliseconds up to 150 milliseconds. It almost looked as if something were throttling the writes, despite the fact that we're paying for provisioned capacity and staying well below that limit.After thorough investigation of our queries, we concluded that it might be caused by hardware degradation of some kind. Since it's a Multi-AZ instance, we rebooted with failover and the problem went away, but then returned a little over an hour later. If this is something we're causing, we'd like to know how to avoid it, but we haven't seen it before in the three years we've been running this instance. Does anyone know what might cause write latency to be increased? It would also be good to understand more about how write latency is measured if that information is available.FollowComment"

Answer: "0Unfortunately there was a defective underlying storage volume on one of your disk. The defect was detected automatically and the volume was replaced. Your performance should be back to normal.You should be able to look at the Enhanced Monitoring physical io metrics from this period and see that one of your volumes had elevated latencies for a periodSorry for the inconvenience.-PhilCommentShareMODERATORphilawsanswered 4 years ago0As far as I know, the defect was not detected automatically, but required creating a case with AWS support to correct. I'm noting this so that if anyone else runs into the same issue, they won't wait too long expecting it to resolve on its own. We experienced approximately 8 hours of degraded service because of this problem.It's also worth noting that because RDS performs a synchronous write to both the primary and standby EBS volumes, elevated latency in either AZ can cause this problem. Manual failover will not help because the same two volumes are still being written to by the new primary instance.CommentSharejessecrossenanswered 4 years ago"


Question: Did not understand performAutoML in Amazon Personalize

"In the documentation it says that when performAutoML is set to true, amazon personalize analyzes your training data and selects the optimal USER_PERSONALIZATION recipe and hyperparameters. In this case, you must omit recipeArn.What does it mean by selecting the optimal USER_PERSONALIZATION recipe..are there multiple USER_PERSONALIZATION recipes? When looking at the documentation, it seemed like there was only one and we would use it's recipeArn while creating a solution.It also says AutoML lengthens the training process as compared to selecting a specific recipe. So what's the cost difference (approximately) if we set it to False vs True? Is it very significant?FollowComment"

Answer: "2Before the User-Personalization recipe was released, we had three (now legacy) recipes. These recipes are still available for use, but User-Personalization is the recommended recipe for most use cases, so AutoML now has limited value. It is difficult to estimate how much longer the training time will be, because each recipe is very different and will have a different training time, but the difference is significant.CommentShareS_Mooseanswered a year agoAnusha G a year agoOkay, thanks got it.Share"


Question: Will Lambda deployed from image pull the ECR image on every startup

"Because of Lambda’s ZIP deployment size limitation I’m changing the way I deploy my Lambda functions to use container image.The deployed function is located within a VPC, so I have a NAT gateway within that VPC to allow public internet traffic, so I need to know if I need to add a VPC endpoints for the ECR services or not (to minimise the traffics going through the NAT gateway).I’m not sure how/when the lambda pull the image from ECR. is it a 1-time pull that occur when deploying a new image version, or whenever a new lambda instance initialised (cold start)?In the following post, it saysLambda also optimizes the image and caches it close to where the functions runs so cold start times are the same as for .zip archives.But its not clear whether if it’ll still use ECR to get the image or it’ll uses some dedicated location “close to the lambda” ?FollowComment"

Answer: "1Please take a look at this document that explains the behavior when a lambda function is deployed as a container image - https://docs.aws.amazon.com/lambda/latest/dg/invocation-images.htmlAs mentioned in the document, Lambda periodically fetches the associated container image from the Amazon Elastic Container Registry (Amazon ECR) repository. Also, if a function is not invoked for multiple weeks, Lambda reclaims its optimized version, and the function transitions to the Inactive state. To reactivate the function, you must invoke it. Lambda rejects the first invocation and the function enters the Pending state until Lambda re-optimizes the image. The function then returns to the Active state.So those are the two scenarios in which lambda will pull the container image from ECR.CommentShareEXPERTIndranil Banerjee AWSanswered 7 months agoamersaw 7 months agoThanks for the clarification, that was very useful, I've tested it, once a new image get deployed, the lambda will pull the image only once. Later newly started instances (Cold start ones) won't pull the image from ECR, instead it seems that it uses the already pulled version (According to ECR metrics in the CloudWatch)Shareamersaw 7 months agoBut I'm still not sure if pulling the image is going through the NAT gateway (located in the same as the lambda's VPC) or not.Share0It is definitely not a one time pull, and it will need to pull on every cold start. However, depending on how often the Lambda executes, it may not pull the image on every execution. Consider the following from Operating Lambda: Performance optimization:The Lambda service retains the execution environment instead of destroying it immediately after execution. The length of the environment’s lifetime is influenced by various factors that aren’t configurable by the developer today. There are also operational factors in the Lambda services that influence the retention time.Hence it is not really possible to know how long it will be kept around. Unless your function is firing quite often, or if you are doing something to keep it "warm" (by using EventBridge rules as discussed in the article linked above), it will likely be pulling the image every time.ECR VPC endpoint is probably the best option for you. Alternatively, note that ingress traffic to EC2 is free, so it might make sense to use a NAT instance instead of a NAT gateway if you are optimizing for cost.CommentShareEXPERTbwhaleyanswered 7 months ago"


Question: Trying to get console.log() calls into a GreenGrass v2 log file

"I'm trying to get console.log() calls from JavaScript to show in a log file in AWS GreenGrass version 2. Version 1 has a "Local logs configuration" option area, under "Groups" -> "Settings", but I haven't been able to find any comparable settings for version 2. I see various log files in /greengrass/v2/logs, but none of them show my console.log() calls.Thanks for any help on this...FollowComment"

Answer: "0I have the aws.greengrass.LogManager component deployed, as well.CommentShareLeeMerrillanswered 2 years ago0My GreenGrass lambda was not getting called, I added console.log() call that always happens, and I uninstalled and reinstalled Greengrass, and now I see log messages.Uninstall: https://docs.aws.amazon.com/greengrass/v2/developerguide/uninstall-greengrass-core-v2.htmlInstall: https://docs.aws.amazon.com/greengrass/v2/developerguide/install-greengrass-core-v2.htmlCommentShareLeeMerrillanswered 2 years ago"


Question: Bug report: cannot move AWS::Elasticsearch::Domain resource to a new VPC

"I'm trying to move an Elasticsearch domain from one VPC to another. The Elasticsearch domain contains two data nodes, each in a different AZ, and I'm using a ZoneAwarenessConfig with enabled set to True.My update fails with:The subnets must be in the same VPC. (Service: AWSElasticsearch; Status Code: 400; Error Code: ValidationException; Request ID: 1382cf1e-961a-40c0-b336-c43887d07c73; Proxy: null)The change is itself is incredibly simple, the diff from the CDK is:[~] AWS::Elasticsearch::Domain Elasticsearch/DocumentSearch ElasticsearchDocumentSearch78F67497└─ [~] VPCOptions└─ [~] .SubnetIds:└─ @@ -1,8 +1,8 @@[ ] [[ ] {[-] "Ref": "VpcPrivateSubnet1Subnet67A4DBCB"[+] "Ref": "VpcTempVpcPrivateSubnet1SubnetF8F05905"[ ] },[ ] {[-] "Ref": "VpcPrivateSubnet2SubnetC8EB537D"[+] "Ref": "VpcTempVpcPrivateSubnet2SubnetFF8C4018"[ ] }The new subnets are both in the same VPC. It's hard to read this as anything other than a bug in Cloudformation.It's also not possible to remove an Elasticsearch domain from a subnet. The update of the AWS::Elasticsearch::Domain fails with:Internal FailureThe change once again is trivially simple:[~] AWS::Elasticsearch::Domain Elasticsearch/DocumentSearch ElasticsearchDocumentSearch78F67497└─ [-] VPCOptions└─ {"SecurityGroupIds":[{"Fn::GetAtt":,"SubnetIds":}FollowCommentJack-Angel-369 a year agoHi yes you were right. I should have post a comment not an answer... Not fully clear how rePost works... don't have any notification... Thanks for the additional info. An interesting issue... here a link with a note at the bottom : https://aws.amazon.com/blogs/aws/amazon-elasticsearch-service-now-supports-vpc ... it seems not possibleShare"


Question: How to use AWS Secret Manager correctly in EKS

"Need Some help!I want to integrate AWS secrets manager in EKS.One way I tried is Secrets Store CSI Driver (SSCSID). It mounts the secrets directly into Pod.If I want to set an environment variable using secret then we need to enable the secretSync option of SSCSID, because of which the SSCSID creates a kubernetes secret for our secret data.This is similar to using the k8s secrets which is base64 encoded.What I want to have is, the k8s secret should not contain the actual data, it should contain the place-holder, and then the driver/k8s should replace the place-holder with data from aws secrets manager at time of mounting/using the secret inside the pod.Can anyone please suggest the right way or tool for it?ThanksFollowCommentalatech EXPERT3 months agoIs this article helping or is basically what you already tried? https://aws.amazon.com/blogs/containers/leverage-aws-secrets-stores-from-eks-fargate-with-external-secrets-operator/Share"

Answer: "0You could either use one approach or the other.  We have a new EKS v2 workshop that goes into Sealed Secrets._----------I saw this online which is a 3rd party blog, but have not tested it.  It is not official though  (https://www.arthurkoziel.com/sync-aws-secrets-manager-to-k8s-secrets/).CommentShareRolyanswered 3 months agoakshayw 3 months agoThanks Roly for your reply. Actually what you suggested is implemented in my current setup. SSCSID creates the k8s secret in this way and that is easily readable. I want to know if we can have secret which will not contain the actual data in k8s secret - It should contain the the place holder for the data.Share"


Question: Managing of individual rules in an ACL deployed by AWS Firewall Manager

"Hello,When you roll out WAF ACLs with the Firewall Manager on organisation level, individual account managers can add rules and rule groups, in addition to the rule groups that were defined through Firewall Manager.Can this be done programatically, via API or CDK for example, or is it only possible via AWS console? I didn't find anything about that in the API description.FollowComment"

Answer: "0Accepted AnswerHello,Unfortunately, there is no public document which specifies the use case for individual account administrators to add rules/rule groups inside the WebACL managed by Firewall Manager using CDK.When you create the Firewall Manager service policy for WAFv2 type, it will create the WebACL resource and adds PreProcessFirewallManagerRuleGroups and PostProcessFirewallManagerRuleGroups properties. Document [1] explains these two properties can only be defined by Firewall Manager.These properties cannot be added directly to the AWS::WAFV2::WebACL resource if you are using CloudFormation template for example. The API reference guide [2] defines the properties with AWS CDK CloudFormation Resources.If your use case involves CloudFormation to manage the rules on Firewall Managed WebACLs, then you can use Lambda backed custom resource. In the custom resource Lambda function, you can use UpdateWebACL API calls to create or modify the rules on the WebACL resources. [3]We recommend to use AWS Console or CLI to avoid any validation issues with CDK in this particular case.CommentShareSUPPORT ENGINEERVimal_Panswered a month ago0That is unfortunate in the spirit of IaC, but thanks for the answer.CommentShareABCKaNianswered a month ago"


Question: Lightsail TXT Records Not Propagating

"Hi all,I run a small business website via Lightsail. It's been running for about a year with no issue. I recently went in to update the SSL certificate and when I created new TXT records to prove domain ownership I was unable to get them to propagate. And additionally, the existing TXT records we also not coming up when checking using mxtoolbox or whatsmydns.Notes:I am only hosting 1 siteI am not using Route53When I lookup MX records or my A record they come up just fine.The domain is hosted at Godaddy and I've verified the nameservers are correct in godaddyns-1547.awsdns-01.co.ukns-499.awsdns-62.comns-882.awsdns-46.netns-1229.awsdns-25.orgMy process for updating the Lightsail domain isLog in to lightsail dashboardGo to Domains & DNSI see 1 DNS Zone (global), I choose it and select ManageI go to DNS Records, Add Record, Select TXTFor record name value I enter: _acme-challenge.mydomainname.comFor value I enter the string provided to me by certbotHit SaveI've waited a few hours, in the past I have only had to wait minutes. And given that the previously existing TXT records are also not visible when I check for them, I don't think simply waiting longer for propagation is a solution.Given that it's been running fine I'm hoping that some sort of AWS update has changed the way I need to have all this configured, but I've been searching an I'm unable to find any info on that.Any help is appreciated!ThanksDanFollowCommentAWS-User-0357409 3 months agoHi Dan,Those TXT records should be exposed globally.  It is interesting that your A and MX records work as expected. Have you tried adding an additional record and seeing if it propagates properly?  e.g. Just adding a custom CNAME or random A record and see if that is globally resolvable.Share"

Answer: "0Can you check because i am able to get the responce here is the screenshotCommentShareGKanswered 3 months agodqpdx 3 months agowhat tool are you using to get the response? I've double checked the entry and I see no issues. I'm still not seeing propagation on whatsmydns or mxtoolboxShareGK 3 months agoI am using google DNS https://toolbox.googleapps.com/apps/dig/ pls check hereShare0HelloI think you are adding everything name provided by the provider are you sure you are doing like the example below ?Easy way you can use google DNS to verify the DNS ThanksGKCommentShareGKanswered 3 months ago0Yes, my record looks like what you've suggested. See below. I put in a dummy value of course in the screen shotCommentSharedqpdxanswered 3 months ago0Hi Dan,This looks to be resolving correctly using external tools.  Was there a specific change that you made?To go back to the root cause, verification of the new cert, I understand that some providers/tools with "rotate" of require a new TXT record value for each validation.  If you are still not getting the validation and I would check in certbot (or any other means) to verify that the TXT record value is correct.CommentShareAWS-User-0357409answered 3 months ago"


Question: Multicast in Outposts through Transit Gateway or Local Gateway

"A customer in the telco industry wants to leverage Outposts for multicast applications.  Questions:Transit Gateway now supports multicast.  Will it work for Outposts as well when Direct Connect or site-to-site VPN is in between Outposts and region?Even if #1 is possible, traffic goes back to the region.  Is it possible to leverage Local Gateway (LGW) for multicast in Outposts and customer's local network?FollowComment"

Answer: "1Accepted AnswerMulticast support in VPC/TGW today is only support where the source and destination are in VPC boundaries. It is not possible to send multicast traffic across Direct Connect, VPN or Local Gateways.If customers wish to bring multicast traffic into a VPC (Outposts or hosted in a region) they need to build an overlay network to do that.CommentShareEXPERTBrettski-AWSanswered 3 years ago"


Question: Connecting TypeScript backend in EC2 to PostgreSQL RDS

"I have a TypeScript backend running in a t3.micro EC2 instance. I'm using NPM as the package manager, and TypeORM to seed the database. I have a PostgreSQL database set up in RDS that I'm trying to connect to. In my local dev environment, I didn't have any problem seeding and running the backend and having it connect to RDS. However, in the EC2, it won't finish seeding when running npm run seed which runs the scriptts-node -r tsconfig-paths/register src/seeder/seed.tsRunning npm run migration:run runs the scriptyarn run typeorm migration:runand gives this error:$ ts-node -r tsconfig-paths/register ./node_modules/typeorm/cli.js migration:runError during migration run:TypeORMError: No connection options were found in any orm configuration files.    at new TypeORMError (/home/ec2-user/backend/src/error/TypeORMError.ts:7:9)    at ConnectionOptionsReader.<anonymous> (/home/ec2-user/backend/src/connection/ConnectionOptionsReader.ts:46:19)    at step (/home/ec2-user/backend/node_modules/typeorm/node_modules/tslib/tslib.js:144:27)    at Object.next (/home/ec2-user/backend/node_modules/typeorm/node_modules/tslib/tslib.js:125:57)    at fulfilled (/home/ec2-user/backend/node_modules/typeorm/node_modules/tslib/tslib.js:115:62)error Command failed with exit code 1.info Visit https://yarnpkg.com/en/docs/cli/run for documentation about this command.I'm not too experienced with this, but I've tried deleting node_modules, dist, yarn install, npm install. Any answers as to what I'm missing?FollowComment"

Answer: "0Hi,Please check if the EC2 instance security group,  if the inbound and outbound rules allow traffic from RDS DB instance.This document can help setup communication between your RDS and EC2 instance[1]https://aws.amazon.com/premiumsupport/knowledge-center/rds-connect-ec2-bastion-host/[2]https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_VPC.Scenarios.htmli hear you want to connect to rds postgres from TypeORM.i have found documentation that will help you connect to Postgres from TypeOrm[3]https://stackoverflow.com/questions/56511947/how-to-connect-to-postgres-amazon-rds-from-typeormreferences[4]https://stackoverflow.com/questions/64011676/error-no-connection-options-were-found-in-any-orm-configuration-filesCommentSharerePost-User-9017359answered a year ago"