Question: ecs service was unable to place a task because your account is currently blocked

"I created ecs and service, and in the event tab, I could see the following phrase. (fargate)"service xxxx was unable to place a task because your account is currently blocked."It's the first time I've seen this phrase, and I'm not sure how to deal with it.FollowCommentRodney Lester a year agoIs this a brand new account? There is some delay for fraud prevention before you can deploy services into your account. It is usually only a few hours and they will contact you if there are questions.Share"

Answer: "0Is it possible you got past your tasks applied quota? As a quick troubleshooting effort i'd check the Fargate service quota in the console.CommentShareEXPERTmreferreanswered a year ago0My account has been running Fargate ECS task for months. All of sudden, I noticed that site is down. Upon checking my AWS account, I saw that no fargate task was running. I tried to start a task manually but kept getting:"service xxxx was unable to place a task because your account is currently blocked."I do not know that quota I need to check. There are many quota settings.Moreover, the button to request a quota increase is grayed out for me. I can NOT click that button.Thanks.CommentSharerePost-User-2888326answered 9 months ago"


Question: AO maps and Gloss maps

"This was in the "working with diffuse maps" documentation for Lumberyard "The diffuse map should not contain any lighting, shading or shadowing information, as all this gets added dynamically by Lumberyard."So as far as I can tell, lumberyard doesn't really use an AO map, but then it also says this: "In certain cases, pre-baked ambient occlusion (AO) is required, which is stored in a dedicated AO map in the diffuse channel of the Detail Map. For more information, see Working with Detail Maps" but it says to keep detail map sizes small like 512x512 so that's not really for AO.Question: “what's the deal with AO maps and Gloss maps?” Since we don't really know what to do with them.He also just mentioned that “I can't change the material on any object in lumberyard, not even their toad, any of their built in objects I can't assign a texture to. All of the buttons in the material editor are greyed out, so I can't apply a material to a selection, but if I hit the button it says in the log "applied material to selection" which is a lie, because I made a solid blue material and that didn't show up on my model”.That question is from our experienced 3D Modeler, who is using Substance Designer to create some lava flows for our prototype map, and who is working with the level designer to get the model(s) into the engine. He has set up Lumberyard, he reads everything in detail, and has had lots of issues along the way and put his 14K model in there and is having difficultly determining what Substance textures layers relate to Lumberyard.Follow"

Answer: "0Accepted AnswerHey @REDACTEDUSERLet's see if we can help clear up the confusion around AO Maps and Gloss Maps. I also have follow-ups regarding the material assignment problems your artist and designer are encountering.AO MapsWe do not have true support for object-based AO maps, though you can get some information out of the Detail Map as you mentioned previously. With the Detail Maps, we only have 512x512 as a guideline for performance reasons, though by all means for your project you may need to increase the size. It's just a guideline in case you find you hit performance issues later, this might be one of the first things to check if you have a lot of large Detail Maps. But that being said, the Detail Maps are not really the same as true AO maps.We do have a Height Map Ambient Occlusion feature that is more of a global-based AO that works really well for outdoor environments. This still won't fit what your artist is looking for, but it's something else to look into if you still want some type of AO for your level.Gloss MapsOur workflow for Gloss Maps is a bit different since there is not a stand-alone texture map location in the materials. The Gloss Maps are stored in the alpha channel of the Normal Map, and for the Asset Processor to compress the normal map texture with gloss correctly for your game, it is recommended to use the "_ddna" suffix for the texture name.Material AssignmentJust to clarify, which project/set of assets are the built-in objects that you are referring to? For example, if you're just using SamplesProject or if you grabbed assets from the BeachCity asset package.There may be a bug with the states of the buttons in the Material Editor in 1.8. I just did a quick test, and I'm seeing them as the lighter gray (which appears more like the active state) when I have nothing selected, but then they go to a darker gray (which appears more like the deactive state or not-usable state). Apologies for the confusion on this, I'll get a bug filed.Could you clarify if you are using the Brush system or Component Entity system for placing objects in the level, or if you're doing something else to try and assign materials to objects? I'm wondering in what case the material does not actually assign properly to the selected object, so it would be useful to have steps to reproduce the problem.Let us know if that helps!SharerePost-User-7951591answered 6 years ago0Thanks so much!SharerePost-User-4545555answered 6 years ago0Hey @REDACTEDUSERSharerePost-User-8353690answered 6 years ago0Thanks, this has cleared it up for our dev team. I have posted this link in our slack.SharerePost-User-4545555answered 6 years ago0Sorry to resurrect this question but Ambient Occlusion map is actually supported in illum shader youjust need to activate it in shader generation params.SharerePost-User-7621041answered 6 years ago"


Question: Pipeline training step's custom output

"A pipeline train step saves a custom json file in the output path, set in the estimator's  output_path param, as seen below:estimator = TensorFlow(        entry_point=code_entry,        source_dir=code_dir,        output_path='s3://some-bucket/results/',        [... other params...]    )It seems there is no step property to access custom output files, unlike we have for model artificats: step.properties.ModelArtifacts.S3ModelArtifacts.Also, unlike ProcessingStep, there is no outputs argument on  TrainingStep that would allow other steps to access the S3 URI from the arguments e.g., something similar to this:step.arguments["ProcessingOutputConfig"]["Outputs"][0]["S3Output"]["S3Uri"].How can one access the custom outputs of a training step, stored in the output.tar.gz?FollowCommentnanestev 2 months agoRunning into the same issue and found your question. Did you find solution for the above by any chance?Share"

Answer: "0There should be a way to achieve this. The properties attribute just mimics the response of Describe* API call. In DescribeTrainingJob API, we have OutputDataConfig field as in https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DescribeTrainingJob.html#API_DescribeTrainingJob_ResponseSyntaxSo should be something like step.properties.OutputDataConfig.S3OutputPathCommentShareAWS-User-5210721answered 5 months agonanestev 2 months agoHaving the same problem and tried setting an input to my evaluation job with source "step.properties.OutputDataConfig.S3OutputPath", but it doesn't evaluate to correct s3 path. Any other ideas?Share-1Hi,You will need to provide the output path in the EstimatorBase of the training step.Examples   estimator_example = Estimator(        base_job_name="example",        role=role_arn,        instance_count=1,        output_path=f"s3://example-bucket/my-model",        environment={"region": region.name, "scope": scope_parameter},        output_kms_key=kms_key_arn    )    training_step = TrainingStep(        name="ExampleModelTraining",        estimator=estimator_example,        inputs={            "training_data": TrainingInput(                s3_data=transform_step.properties.ProcessingOutputConfig.Outputs[                    transform_training_data_output_name                ].S3Output.S3Uri            ),            "training_target": TrainingInput(                s3_data=transform_step.properties.ProcessingOutputConfig.Outputs[                    transform_training_target_output_name                ].S3Output.S3Uri            ),        },    )Thanks,CommentShareJadyanswered 5 months agoSagebreaker 5 months agoHi! As you can see in my question, Im already providing the output_path in my estimator. The question is: how can other pipeline steps access the custom outputs generated by the training step?Share"


Question: conflicting Lambdas?

"Hi,in order to be able to customize the message and landing page, I have successfully implemented the flow according to the following procedureshttps://medium.com/@jacobjoy/redirect-user-using-amazon-cognito-confirmation-url-d8ccb11bac75however, I need to update my DB when the user confirms his email by clicking on the link in the verification emailI therefore created another lambda to be triggered on "Post confirmation"but now if the user clicks the link in the email, he gets redirected to the error page even if he results confirmed in the user pool and the DB is correctly updated.Everything works if I remove the lambda with the "Post confirmation" trigger.How can I achieve the goal of updating the db when the user clicks successfully on the confirmation link?this it the lambda with "Post confirmation" trigger:const axios = require("axios");exports.handler = async (event, context, callback) => {  console.log("Authentication successful");  console.log("Trigger function =", event.triggerSource);  console.log("User pool = ", event.userPoolId);  console.log("App client ID = ", event.callerContext.clientId);  console.log("User ID = ", event.userName);  console.log("event = ", event.request.userAttributes.email);  const data = {    email:event.request.userAttributes.email,    key:process.env.KEY  }     await axios.post(`${process.env.BASE_URL}/api/ac/user-confirm`,data )  callback(null, event);};whereas this is the Lambda to Confirm the user in Cognito, as described in the tutorial mentioned above"use strict";var AWS = require("aws-sdk");AWS.config.setPromisesDependency(require("bluebird"));var CognitoIdentityServiceProvider = new AWS.CognitoIdentityServiceProvider({  apiVersion: "2019-11-07",  region: process.env.REGION,});const axios = require("axios");exports.handler = (req, context, callback) => {  console.log(req);  const confirmationCode = req.code;  const username = req.username;  const clientId = req.clientId;  let params = {    ClientId: clientId,    ConfirmationCode: confirmationCode,    Username: username,  };  //Validating the user  let confirmSignUp =    CognitoIdentityServiceProvider.confirmSignUp(params).promise();  //Returning the redirect url  confirmSignUp    .then(async (data) => {            context.succeed({        location: process.env.POST_REGISTRATION_VERIFICATION_REDIRECT_URL,      });    })    .catch((error) => {      //callback(error.message);      console.log("ERROR: ", error);      if (error.code == "ERR_BAD_RESPONSE") {        context.succeed({          location: process.env.POST_REGISTRATION_VERIFICATION_REDIRECT_URL,        });      } else {        context.succeed({          location: process.env.POST_REGISTRATION_VERIFICATION_INVALID_LINK,        });      }    });};FollowCommentalatech EXPERT4 months agoIs there anything in Cloudwatch logs for the lambda?SharerePost-User-0179626 4 months agoyes, it says thatUserLambdaValidationException: PostConfirmation failed with error 2023-01-30T15:44:55.664Z 71d18d9b-0dfd-42d5-8b28-bf3610acafae Task timed out after 3.01 seconds.however, in the configuration I raised the timeout to 10 minutes but, as explained, the user status results as "confirmed" despite the error....Share"

Answer: "0Accepted Answeryes, probably it was an error in my env varCommentSharerePost-User-0179626answered 4 months ago0Post Confirmation is called after the confirmation is done, so the that fact the user is Confirmed does not come from your Lambda function.Also what are the logs at the endpoint ${process.env.BASE_URL}/api/ac/user-confirm ?CommentShareJeff Lombardo-AWSanswered 4 months ago"


Question: OpenSearch Serverlles Collections - AccessDenied

"Hi All,I have created a new Open Search Collections and trying to access the dashboard, i am getting the access denied message in my Chorme. Please check and advise.Collection ARN: arn:aws:aoss:ap-southeast-1:<account_id>:collection/diz61r3safzf6f7cou4cOpenSearch endpoint: https://diz61r3safzf6f7cou4c.ap-southeast-1.aoss.amazonaws.comOpenSearch Dashboards URL: https://dashboards.ap-southeast-1.aoss.amazonaws.com/_login/?collectionId=diz61r3safzf6f7cou4cAccess type: Public*Error: *{"status":403,"request-id":"63ab91b9-9b6f-9285-ad22-71a2f4f4118b","error":{"reason":"Cross Account access is not allowed. AWS is trying to access collection from <account_id> account.","type":"AccessDenied"}}FollowComment"

Answer: 1Accepted AnswerCross-account access to collections isn't supported. You can't include collections from other accounts in your encryption or data access policies.You might be logged in with a different account in the console.CommentShareRoianswered 14 days ago


Question: Report Amazon AWS abuse gave me Something went wrong

"A separate post suggest I make a report using https://support.aws.amazon.com/#/contacts/report-abuseI attempted to do so, four times, on two separate days, all brought the same error message "Something went wrong".Might I suggest someone check this out?FollowComment"

Answer: "0Side note that might prove useful:I'm based in Ireland, I selected https://support.aws.amazon.com/#/contacts/report-abuse and then clicked "Sign In and submit AWS support request".After logging in as an AWS user, I noticed the URL changed to the US.https://us-east-1.console.aws.amazon.com/support/contacts?region=us-east-1#/report-abuse?ln=enI am guessing that when I attempted to raise a support request, the "Something went wrong" error occured because the US-East-1 web service doesn't like my Irish setup? Just a suggestion - it might explain why the report-abuse works for some, but not everyone.CommentSharerePost-User-8756184answered a year ago"


Question: AWS Systems Manager

"Hi,I'm looking for details about pricing of AWS SSM Patch Manager module.On AWS Doc we have"Patch ManagerNo additional charges for patching supported operating systems or patching Linux applications on Amazon EC2 instances or on-premises instances. Limits may apply.No additional charges for patching Microsoft applications on Amazon EC2 instances.The advanced on-premises instance tier is required for using Patch Manager to patch Microsoft applications hosted on on-premises instances. To learn more about on-premises instance tier pricing, see On-Premises Instance Management."https://docs.aws.amazon.com/general/latest/gr/aws_service_limits.html#limits_ssmLimits may apply link is about AWS Service quotas.Somebody can explain how I can calculate AWS Service quotas according to AWS SSM Patch Manager? For example if I need patch manager for 200 EC2 and 10 on-premises servers.Thanks.FollowComment"

Answer: "0Hi Michael88,You will not incur any additional charges for using Patch Manager to patch the 200 EC2 instances. For the 10 on-premises instances, if you use Patch Manager to patch the operating system (and not Microsoft applications), you will not incur any additional charge.Service quotas define the default limits for Patch Manager attributes such as the number of patch baselines per account. It does not restrict you from patching your EC2 and on-premises instances.Thanks,DharmiCommentShareAWS-User-7780448answered 3 years ago0Thanks!Could you tell me more about service quotas? Maybe if you can explain on some example.CommentShareMichael88answered 3 years ago"


Question: use study link embedded in the same window of amazon mturk (iframe)

"Hello, I am trying to create a study that opens in the mturk webpage instead of a new window. In the study we are using webcam and I got this message when publish the study in sandbox (so I could try it out). Warning message says: Unable to connect to your webcam, please try again. Perhaps it is being used by another application. So what should I edit in the HTML format so I can give access to webcam using the same page? Is that the solution or should I try to search something else?FollowComment"


Question: Does Workspace use Internet from AWS or local Internet?

"Greetings!Just started playing with Workspaces and I'm curious if the Internet in Workspaces is from my local ISP or from AWS? I noticed it has a different IP so not really sure. If I log in now, I can browse the Internet, but again not sure if it's using mine that I connect to or from AWS. I also have the running mode in "Autostop" but I want to change it to "Always On" with the expectation that I can log in from anywhere and see my desktop in the last state it was in using the same Internet.Any confirmation or clarification on this would be appreciated!FollowComment"

Answer: "1Accepted AnswerWhen you browse the internet from your Workspace its using the AWS internet connection.  https://aws.amazon.com/premiumsupport/knowledge-center/workspaces-enable-internet/For Modifying the RUnning Mode to Always On, see https://docs.aws.amazon.com/workspaces/latest/adminguide/running-mode.html#modify-running-modeTo modify the running mode of a WorkSpaceOpen the WorkSpaces console at https://console.aws.amazon.com/workspaces/In the navigation pane, choose WorkSpaces.Select the WorkSpace to modify and choose Actions, Modify Running Mode Properties.Select the new running mode, AlwaysOn or AutoStop, and then choose Modify.CommentShareEXPERTMatt-Banswered 8 months agoEXPERTBrettski-AWSreviewed 8 months agoWDes2022 8 months agoThanks Matt! This was exactly what I was looking for,WDesShare1When deploying Workspaces you define networking (subnet) and would have two options:Launch your WorkSpaces in private subnets and configure a NAT gateway in a public subnet in your VPC.Launch your WorkSpaces in public subnets and automatically or manually assign public IP addresses to your WorkSpaces.You can look for more details on this admin guide page.Note: Be aware that assigning public IP to your Workspace would mean they might be reachable directly from internet depending on your security groups configuration.CommentShareromerogtanswered 8 months ago"


Question: AWS lightsail wordpress is unresponsive

"Hi,I have a problem in my instance. Almost, every 12 hours my web site can not be reached and is unresponsive. Then, I reboot the instance and it works again. I searched and noticed that CPU utilization exceeds sustainable zone to burstable zone. My web site is new and no traffic untill now. Furthermore, site health is good and there is no problem. Please guide me to solve this issue.ThanksFollowComment"

Answer: "0Thanks for using Lightsail!Here is the Lightsail Doc about troubleshooting high CPU utilization. What is your instance type? Maybe you can try a larger instance type.Thanks,YiranCommentShareYiran-AT-AWSanswered 9 months ago"


Question: Is there a way to enter game mode (with a character controller) from my current viewport position?

"(couldn't find an answer on google for either cryengine or lumberyard)EDIT 1: Clarified question in titleEDIT 2: Clarification: I'm looking for a way to enter game mode from my current viewport position with a character controller, e.g. the sample droid.My map is large (16km) so its not really viable to move my player start to wherever I want to test play from, unless I can teleport it easily to where my viewport is (which I haven't found).Is there such a feature? I know it's in UE (and maybe unity?). Or do I have to build the logic myself?Thank you for greatly improving CryEngine!Cheers!Follow"

Answer: "0Accepted AnswerHi all! I've added this as a Feature Request ticket while Aman tracks down if it is possible (with a camera in the level)SharerePost-User-8353690answered 6 years ago0Good question — let me check in with our tech team about this :)SharerePost-User-5738838answered 6 years ago0+1 on this. Being able to jump in and out of game mode at the very position of the viewport would be super handy!EDIT:Actually, nevermind my +1. This is already working when no camera is in the level.SharerePost-User-5460328answered 6 years ago0If there is a way, I didn't see it listed either. It sure would be handy though! =)http://docs.aws.amazon.com/lumberyard/latest/gettingstartedguide/camera-player-switch-to-game-mode.htmlSharerePost-User-8332794answered 6 years ago0Hmm, what do you mean? Let's say I want to jump in game using the prefab "sphere controller" (the droid) where my current viewport is located. How would I do that? If I remove that controller from the level I just start the game with a fixed cam that I can't control (which feels expected of course)SharerePost-User-6219790answered 6 years ago0Hello @REDACTEDUSERHave you tried the "AI/Physics" button below the viewport? Alternatively, you can use the shortcut Ctrl + P to enable it. If you want to disable it press on the same keys again.Hope that helps!ShareEXPERTrePost-User-8100776answered 6 years ago0Oh you want to be able to do that?You are right, there is nothing like that currently in the engine.SharerePost-User-5460328answered 6 years ago0Hey, thanks for your reply @REDACTEDUSERSharerePost-User-6219790answered 6 years ago0Yes. Sorry, my question must have been unclear :)SharerePost-User-6219790answered 6 years ago0Ah, I see.Unfortunately, that would have to be a game-specific feature to be able to position your character. I am not aware of a way to do that for the SamplesProject.SharerePost-User-5162062answered 6 years ago"


Question: EC2 instance shows status check fail during couple out instances.

"Hi,I have status check failures couple of times this week.id: i-b1c7d047Initial troubleshoots:Checked the perfomance metrics of the instance, not more than 50 %.ELB access logs shows 504.Digging more on the logsMeanwhile,I was wondering if there might be a reason, why I receive these failures?Is it common of this failure occurrence. Do other's have similar experiences?Thank you,FollowComment"

Answer: "0Accepted AnswerHi there ,It had happened due to system status check failure.I would ask you to make use of Autoscaling group behind ELB so that these events can be handled automaticallyCommentShareSUPPORT ENGINEERSatyamanswered 4 years ago0SatyamSinha-AWS wrote:Hi there ,It had happened due to system status check failure.I would ask you to make use of Autoscaling group behind ELB so that these events can be handled automaticallyas in post https://forums.aws.amazon.com/thread.jspa?messageID=886201&#886201:We have the same situation , and looking at the situation during the 504 errors they happens when the Target group contains one or more instances in draining state.I think ALB needs some time to understand that an instance is not available. But this is not the right behaviourCommentSharemarioveltinianswered 4 years ago"


Question: Backup Report EBS usage

"Hello everyone,I wuold like to use your service Amazon Data Lifecicle Manager for backing up my infrastructure and I need to create a report that say me the single EC2 snapshot occupation (TB o GB). How can do I do this? Can I use Tags per machine or per backup job?Thank you in advanceRegards,FollowComment"

Answer: "0Yes, you can use Amazon DLM to manage your EC2 snapshots by following these  stepsUse Amazon DLM to create a backup policy for your EC2 instancesAssign appropriate tags to each policy to differentiate between instances or backup jobsUse the AWS CLI to list all the snapshots created by your DLM policyaws ec2 describe-snapshots --filters "Name=tag-key,Values=BackupJob"Parse the output to calculate the storage usage for each snapshot. (Field : VolumeSize)Create a script that automates the process of retrieving snapshot information and calculating storage usageOptionally, you can use AWS Lambda and Amazon CloudWatch Events to automate the generation and delivery of reportsCommentShareEXPERTsedat_salmananswered 2 months ago"


Question: Simple guide on how to set up Bloom?

"Hello,I am really new to all of this. Can somebody give me a step-by-step guide on how to set up bloom? I don't know where to start.FollowComment"

Answer: 0Accepted AnswerHere is a blog post on how deploy the laregest BLOOM model (176B parameters): https://aws.amazon.com/blogs/machine-learning/deploy-bloom-176b-and-opt-30b-on-amazon-sagemaker-with-large-model-inference-deep-learning-containers-and-deepspeed/For smaller models you can leverage SageMaker Jumpstart: https://aws.amazon.com/blogs/machine-learning/run-text-generation-with-gpt-and-bloom-models-on-amazon-sagemaker-jumpstart/CommentShareHeikoanswered 5 months ago0Thank you.CommentShareChampanswered 4 months ago


Question: WorkDocs Drive hangs during setup.

"When setting up WorkDocs Drive in a Workspace, after typing in the site name, it says "Processing..." and hangs. The log file indicates an authentication error. This is before it asks you to logon. It appears to be an issue with the workspaces (it happens on all workspaces in this AWS account that I have tried). I tried it from a workspace in a different AWS account and it worked fine.FollowComment"

Answer: "0did you get any workaround or solution? (im having the same)CommentSharejboisjoanswered 9 months agorePost-User-2369786 9 months agoYes. I had to recreate the workspaces. Then it worked. Still don't know what the problem was with my other workspaces.Sharejboisjo 9 months agowhen you say re-create the workspaces, you mean the whole instance? we have so many files and storage already...SharerePost-User-2369786 9 months agoYes. I was lucky they were brand new instancesSharejboisjo 9 months agomine is 8 months old and i have plenty of users. Im just having issues installing Drive on PC (Windows 11) :( on Mac everything works fine, even some PC users are working fine too.Sharejboisjo 9 months agoeven tho im putting another instance (when entering the siteURL, like all urls are getting me to the screen Processing) might be a security issue from WindowsShare0I am having the same issue and posting a similar question elsewhere.  I have been using this workspace for 1 + years and regrettably can't simply recreate it to see if the issue would be resolved on a new one.  Hoping someone has made headway on this "Processing..." hang up when trying to mount WorkDocs Drive on Workspace?CommentSharerePost-User-0140959answered 8 months ago"


Question: Account Support Needed

"Hi,I would like to close my aws account but I have misplaced and unable to recall the credentials to it. Is there any aws support that can assist me to close this account?Thank YouFollowComment"

Answer: "1Hi,You could read some links below It might guide you to reset your AWS Root password and after that you can follow some steps to close your AWS Account.Resetting lost or forgotten passwords or access keys for AWShttps://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys_retrieve.htmlRead Section - AWS account root user password – If you forget your root user password, you can reset the password from the AWS Management Console. For details, see Resetting a lost or forgotten root user password later in this topichttps://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys_retrieve.html#reset-root-passwordHow do I close my AWS account?https://aws.amazon.com/premiumsupport/knowledge-center/close-aws-account/Short descriptionBefore closing your AWS account, do the following:Review the following account considerations for closing your account.Review the following billing considerations for closing your account.Be sure to terminate all resources before closing your account.Be sure to pay your outstanding bills.CommentShareJorgeanswered 7 months ago0Hi,I have forgotten the credentials to this account including the email address.Can I see help from one of aws engineers , pls?Thank YouRegards,AlexCommentShareAlezz81answered 7 months ago0Hi,I managed to locate the credentials.Thanks to those who replied.Thank Youregards,AlexCommentShareAlezz81answered 7 months ago"


Question: Clock frequency of CL is fixed or it can be changed for target design?

"Hi,I am using AWS F1 for FPGA development from an year  I had this basic question  from long time. Right now I have selcted a0 clock recipe for my design which is main clock. As per my understanding clock frequency should depend on critical path in design and  may change from design to design or is it like in AWS environment if it will see that for given clock recipe if it finds critical path then it will throw an error in synthesis?We can choose any clock frequency a0 or a1 for CL design ?Another question I had , I am running all my design in non gui mode and have extended from hello world design. After running simulation or synthesis if I want to open project in gui mode what are the steps to do it ? Is there any documentation available for the same ?FollowComment"

Answer: "0Hi aiquanta,Thank you for using AWS F1 instance. Regarding to the question on clock frequency, you're correct. Critical path will be different from design to design, or sometimes even from one build to the other. AWS provide several clocks that we think might be good fits for customer designs with different needs. Customer is required to choose from the clock group recipes (https://github.com/aws/aws-fpga/blob/master/hdk/docs/clock_recipes.csv) and cannot use arbitrary clock frequency. In addition, we have a dynamic clock configuration feature (https://github.com/aws/aws-fpga/blob/master/hdk/docs/dynamic_clock_config.md) in case you want an option to slow down design's clock frequency to meet timing.For the GUI mode, we do have a NICE DCV support (https://github.com/aws/aws-fpga/blob/master/developer_resources/DCV.md). Please follow this page to set up the environment. Hope this helps!Thanks,ChenCommentShareAWS-zhczanswered 2 years ago0Hi Chen ,Thanks for the clarification. Sorry for the confusion. From GUI I meant VIVADO gui.CommentShareaiquantaanswered 2 years ago0Hi aiquanta,You should be able to run Vivado GUI using command vivado once DCV is up and running. Please let me know if you see any problem.Thanks,ChenCommentShareAWS-zhczanswered 2 years ago0Hi Chen,I can open VIVADO gui from command but my query is as following.Till now I have always running in non project mode. I just use provided scripts (makefile and all) to run simulation. My query is if I can run same project from VIVADO GUI so that once it completes I can see source file edit it there and run it again.Right now I run everything in non project mode and then once test case finishes I just open waveform in vivado. To open a project into vivado I need project file. But I am not sure if any project file is created when I run in non project mode. If no project file is created in that case how I can run simulation in project mode?CommentShareaiquantaanswered 2 years ago0Hi aiquanta,Understood. It's feasible to create a local simulation project. That would require to manually add in all the per-compiled libraries and testbnech components to run RTL level simulation in project mode in GUI. Unfortunately, our whole verification environment is set up in the batch mode only in order to provide better compatibility with 3rd party simulators. We don't have a support for Vivado simulation running in project mode that you can directly leverage.  I'll take the feedback to the development team to see if this is something we could support going forward.Thanks,ChenCommentShareAWS-zhczanswered 2 years ago"


Question: Amazon provided Windows AMI removed

"My customer was using a Windows 2012 R2 AMI provided by Amazon, and the image has disappeared, did that already happen?FollowComment"

Answer: "3Accepted AnswerYes, that happens really often (to be precise every month).The reason behind this is the application of the patching policy of Amazon provided AMIs, and Microsoft's patching policy.Every second Tuesday of the month, Microsoft does what is commonly called a "Patch Tuesday" and release all the patches they have available for all their softwares.We then get all the patches, select the ones that apply to our case, test and validate them, and package a new set of images (we have more than a hundred images released every month on Microsoft Windows Server).We get the new images broadly available and listed in the wizards (usually within 5 business days of said "Patch Tuesday"), and leave the previous images available in case of need.Finally we mark the previous images as private and customers can not access them anymore (usually 10 business days after release of the new images).And as this happens a lot, we even have an SNS Topic that sends notifications when new images are available.If you want to see the list of images, and the detailed process (and the steps to register to the SNS Topic), check: http://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/windows-ami-version-history.html#windows-ami-versionsIf however a customer wants to keep using EXACTLY the same image he has been using before and does not want any update on this, first ask him why would he want to do that (as this is a really bad security practice), but tell him he can copy the image to his own account as a private image, and we won't touch it ever. But he will have to suffer the long startup times because of Windows Update, and will have to ensure he follows security best practices in applying the patches.CommentShareJulienAWSanswered 8 years agoEXPERTsedat_salmanreviewed 13 days ago"


Question: Tableau connection error:

"Using Tableau 2021.1.18 version, Trying to connect amazon athena from tableau desktop using domain user credentials( Access key ID & secret access key).Below is the connection error:An error occurred while communicating with Amazon AthenaBad Connection: Tableau could not connect to the data source.Error Code: AA76601Fcom/amazonaws/auth/AWSCredentialsProviderUnable to connect to the Amazon Athena server "athena.us-west-2.amazonaws.com". Check that the server is running and that you have access privileges to the requested database.FollowComment"

Answer:
"0Hello,I understand that you are trying to connect to Athena from Tableau desktop using domain user credentials( Access key ID & secret access key). and getting the below error message+++++
An error occurred while communicating with Amazon Athena Bad Connection: Tableau could not connect to the data source. Error Code: AA76601F com/amazonaws/auth/AWSCredentialsProvider Unable to connect to the Amazon Athena server "athena.us-west-2.amazonaws.com". Check that the server is running and that you have access privileges to the requested database.
+++++Usually this error could occur due to any one of the following reasons .Unable to reach to Athena public endpoints.Missing permissions.Connected VPN on Desktop not allowing Athena endpoint.Ports blocked (Athena uses 443 and 444 port)Installed Athena JDBC Driver related issuesYou can test connectivity from the host where your tableau desktop is located and check the connectivity between the host and Athena.++++++
telnet athena.us-east-1.amazonaws.com  443telnet athena.us-east-1.amazonaws.com  444
++++++If you are able to connect, then the networking aspect does not seem to be causing the problem [1].

check the permission related issues++++++Please make sure that IAM user has the required permissions. Regarding permissions related issues, I would recommend you to once login to AWS console using your IAM user credentials (which you're going to use in Tableau) and access the Athena query section to test if the permissions are working fine.
+++++++In case VPN used in Tableau Desktop, try connecting without VPN and with VPN and see if it worked for any caseWhen connecting to Athena, using either a public or private endpoint, both port 443 and 444 need to be open [1]. Athena uses port 443 to connect to the host, and Athena's streaming API uses port 444 to stream query results. The Tableau documentation for Amazon Athena also notes that port 443 and 444 need to be open [2]. Please check if you have both the ports open and added in the security group.
5. If connection and IAM role is working fine and still facing same issue, To rule out any issues with the JDBC driver, kindly enable debug logs in the Athena JDBC driver, retry the connection, and then verify with the output of the logs to get more details about the error. Please see AWS resource [3] to enable debug logs.There are few references that will be helpful to troubleshoot the errors related to connectivity, please go through them.++++References+++[1] How can I troubleshoot the error "An error occurred while communicating with Amazon Athena" when connecting to Amazon Athena with a JDBC/ODBC driver? https://aws.amazon.com/premiumsupport/knowledge-center/athena-connection-timeout-jdbc-odbc-driver/[2] - Using Athena with the JDBC Driverhttps://docs.aws.amazon.com/athena/latest/ug/connect-with-jdbc.html[3] Enable debug logs in my Athena JDBC/ODBC driverhttps://aws.amazon.com/premiumsupport/knowledge-center/athena-jdbc-odbc-driver-enable-logs/+++++Prerequisites to connect Tableau to Athenahttps://tarsolutions.co.uk/blog/connect-to-athena-from-tableau/    - 3rd party blogAmazon Athena: Before you beginhttps://help.tableau.com/current/pro/desktop/en-us/examples_amazonathena.htm   - 3rd party blog+++++CommentShareSUPPORT ENGINEERAWS-User-7071070answered 2 months agorePost-User-2134540 2 months agoHere domain user means , I created user through DSM tool ( Disk share management tool) and it has admin access.After connecting amazon web console with DSM user , able to access Athena and Query data without any error. but when I try to connect amazon Athena from Tableau desktop with this DSM user ( not IAM user, cannot see under IAM - Users) Access key id, Secret access key getting above error.I have gone through AWS documents and other 3rd party documents also, I don't find any info related to DSM tool user , found only IAM user only. Is it possible to connect amazon Athena from local tableau desktop through DSM tool user?Share0Hello, I tried checking about the details related to the DSM tool ( Disk share management tool) but couldn't find anything concrete in the web. If that's a tool similar to Idp access using okta plugin then currently athena supports authentication to jdbc and odbc only via these provided methods as mentioned in the documentation.https://docs.aws.amazon.com/athena/latest/ug/athena-bi-tools-jdbc-odbc.htmlCommentShareSUPPORT ENGINEERAWS-User-7071070answered 2 months ago"


Question: NoSQL Workbench Feature Request: Adjustable Columns in Aggregate View

Can you please make the columns of the aggregate view grid adjustable that way we can better see data like objects in that view?FollowComment

Answer: "1Thank you for providing your feedback, I will pass this along to the NoSQL Workbench team for their consideration. You can also reach out to the team directly by using the Email us button on the left column of the NoSQL Workbench UI.CommentShareEXPERTLeeroy Hannigananswered a year ago"


Question: AWS device farm -  Install two applications and interface with desktop brow

"Hi,I am working with AWS device farm for a while testing only one Mobile App and also using the Jenkins CI plugins.But at this moment I have the complexity of testing in a one test, two Mobile applications and interaction with a desktop browser (Must be desktop browser). I was thinking of using the desktop version of AWS device farm. This is the stage:Install two AppsInteractue App1Interctue App2Interactue BrowserInteractue App1Interactue BrowserQuestions:I can install two applications on device farm and use with jenkins plugin?I can interact in a single mobile test and desktop browser in aws device farm?It would be very helpful if you have an example of something similarThank youFollowComment"

Answer: 0device farm (Mobile and desktop)CommentSharepipecdlsanswered 3 years ago


Question: IAM Advice for AWS Organization Backup

"I am trying to configure AWS Backup Policy (Organization) from Master account and using following IAM Policy given from the AWS User Guide. But continuously getting permission error and backup failed. When I used IAM Policy Simulator, I am seeing "This action does not support resource-level permissions. Policies granting access must specify "*" in the resource element."I am not an IAM guy, please someone advise, what I should do to fix this.{"Version": "2012-10-17","Statement": [{"Sid": "ManageBackupPolicies","Effect": "Allow","Action": ["organizations:AttachPolicy","organizations:CreatePolicy","organizations:DeletePolicy","organizations:DescribeAccount","organizations:DescribeCreateAccountStatus","organizations:DescribeEffectivePolicy","organizations:DescribeOrganization","organizations:DescribeOrganizationalUnit","organizations:DescribePolicy","organizations:DetachPolicy","organizations:DisableAWSServiceAccess","organizations:DisablePolicyType","organizations:EnableAWSServiceAccess","organizations:EnablePolicyType","organizations:ListAccounts","organizations:ListAccountsForParent","organizations:ListAWSServiceAccessForOrganization","organizations:ListCreateAccountStatus","organizations:ListOrganizationalUnitsForParent","organizations:ListParents","organizations:ListPolicies","organizations:ListPoliciesForTarget","organizations:ListRoots","organizations:ListTargetsForPolicy","organizations:UpdatePolicy"],"Resource": "*"}]}FollowComment"

Answer: 0Are you attaching this policy to a user that is going to manage the backup at the Org level? The message "This action does not support resource-level permissions"  means the action does not support resource-level permissions and requires a wildcard (*) in the Resource element of the policy. Can you elaborate more on what are you trying to achieve?CommentShareskreemanswered a year ago


Question: AWS Secrets Manager SecretCache Java v2

"Does the 'SecretCache' functionality still exist with v2 of the Java SDK? I found this reference, but this appears to be for v1 (https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieving-secrets_cache-java.html).  I'm unable to find any information on it w/ v2?FollowComment"

Answer: "0The latest SDK documentation can be found here, within that documentation there's the following:We recommend that you cache your secret values by using client-side caching. Caching secrets improves speed and reduces your costs. For more information, see Cache secrets for your applications.That link leads you to the page you provided above, so it stands within reason that you're still able to use secret caching in V2.CommentSharetparrottanswered a year ago0It looks like SDK 1.x is required:To use the component, you must have the following:A Java 8 or higher development environment. See Java SE Downloads on the Oracle website.The AWS SDK 1.x for Java. You can use both versions of the AWS SDK for Java in your projects. For more information, see Using the SDK for Java 1.x and 2.x side-by-side.CommentShareHalim Chaibianswered 3 months ago"


Question: API Gateway CORS error

"I set enable CORS in my API Gateway and deployed it. However, my webpage keeps generating CORS error when it calls API. I think it works well at first. What is the problem?FollowComment"

Answer: "0My API is Rest API, and Lambda Proxy integration is checked. Also, I followed "Enable CORS on a resource using the API Gateway console"(https://docs.aws.amazon.com/apigateway/latest/developerguide/how-to-cors-console.html). So I think I don't need more action as "Configure your REST API integrations to return the required CORS header" in your link. However, It still does not work. if there is any mistake in my reaction, please let me know. Additionally, I deployed as well.CommentSharerePost-User-4211924answered 7 months ago0It works now. Thank you.As result, I didenable CORS in API Gateway.set header in response in Lambda return.CommentSharerePost-User-4211924answered 7 months ago0Please take a look at the following troubleshooting guide from AWS Premium Support - https://aws.amazon.com/premiumsupport/knowledge-center/api-gateway-cors-errors/CommentShareEXPERTIndranil Banerjee AWSanswered 7 months ago0Please take a look at this document - https://docs.aws.amazon.com/apigateway/latest/developerguide/how-to-cors.htmlthe following paragraphEnabling CORS support for Lambda or HTTP proxy integrationsFor a Lambda proxy integration or HTTP proxy integration, you can still set up the required OPTIONS response headers in API Gateway. However, your backend is responsible for returning the Access-Control-Allow-Origin and Access-Control-Allow-Headers headers, because a proxy integration doesn't return an integration response.Since you mentioned you are using Proxy integration, is your backend returning these headers.CommentShareEXPERTIndranil Banerjee AWSanswered 7 months ago"


Question: InvalidDBParameterGroupState Unable to remove parameter groups

"Hi all,I have removed all neptune databases and when I was trying to delete 2 parameter groups, I got this error message:Failed to delete default.neptune1: Default DBParameterGroup cannot be deleted: default.neptune1 (Service: AmazonRDS; Status Code: 400; Error Code: InvalidDBParameterGroupState; Request ID: 9c2df930-c3c7-4e93-b2b9-9762cd1ab690; Proxy: null).I can also see in the AWS billing, the neptune is still charging me even though there is 0 neptune database.Can someone tell me how to avoid getting charged by neptune? And how to remove those 2 parameter groups?FollowComment"

Answer: "0Hi,After you create your first Neptune cluster, two default parameter groups get created (one is a database instance parameter group and the other is a cluster parameter group).  These two default parameter groups cannot be deleted.  There's no charge for these or any other parameter groups within Neptune.  There are only four types of billable charges that would appear under the Neptune section of your bill:  GB/month for Neptune cluster storage, GB/month for Neptune snapshot storage, I/O requests, and instance hours.  If you have deleted all of your Neptune clusters, I would check to make sure you've removed any unwanted snapshots as well.CommentShareTaylor-AWSanswered 2 years ago0Is there a way to check where the cluster is? From AWS Console, certainly I can't see anything.CommentShareblackpapersanswered 2 years ago0Found the snapshot. Removed it.Edited by: blackpapers on Mar 4, 2021 2:26 PMCommentShareblackpapersanswered 2 years ago"


Question: Elastic Beanstalk with git submodules - deployed code has no execute permissions

"Hello,I Use Elastic Beanstalk to deploy a Python django server over AWS Linux 2 machine.My git project includes another git repository integrated as git submodule.I followed these instructions. Specifically I configured:.elasticbeanstalk/config.yml - include_git_submodules: true, branch: main (both under the global section).submodules file - auto-update=yes, branch=main under the relevant submodule.Once I eb deploy the whole git repo including the submodule files are deployed successfully to the machine and are visible under /var/app/current.Testing the application throws exception indicating that a certain python module (py file) isn't available.I eb ssh to the machine and discovered that the whole submodule py files has not execute permissions (-rw------- ).Other py files, not under the submodule has appropriate executable permissions (-rwxr-xr-x)My Question: How to properly set/configure the submodule within the repo and/or the eb for proper deployment?FollowComment"


Question: DynamoDB CloudWatch Alarm Tables

"Is it possible to enable an alarm for WriteThrottleEvents across all DynamoDB tables? I thought this would happen when I removed "Dimensions" field of "TableName" but this does not appear to be the case.Is my only option to make one alarm, repeated for each table, just changing each alarm's "Dimensions" field of "TableName" according to each table specified? How else can this be done?FollowComment"

Answer: "0Monitoring of count of Read/Write throttling is useful on table (its indexes) level. Each DynamoDB table and its GSI have their own provisioned capacity (Read/Write) and does not affect operation on other tables within same account. Can you share details of your use case, why do you want to setup one alarm for all tables within your account? I will be able to make some recommendations accordingly.CommentShareAWS-User-2633450answered 3 years ago0To get specific, you can imagine I can have 2 alarms (foo and bar) which are identical except for the TableName value. I guess I was hoping it's possible to merge this alarms to minimize repeating configuration setup.aws cloudwatch put-metric-alarm \--alarm-actions arn:aws:sns:us-west-2:numbers:details \--alarm-description "Alarm trigger when ConsumedWriteCapacityUnits > ProvisionedWriteCapacityUnits" \--alarm-name ims-dynamodb-high-write-units-foo \--comparison-operator GreaterThanThreshold \--dimensions Name=TableName,Value=foo \--evaluation-periods 1 \--metric-name ConsumedWriteCapacityUnits \--namespace AWS/DynamoDB \--period 60 \--region us-west-2 \--statistic Average \--threshold 500 \--treat-missing-data notBreachingaws cloudwatch put-metric-alarm \--alarm-actions arn:aws:sns:us-west-2:numbers:details \--alarm-description "Alarm trigger when ConsumedWriteCapacityUnits > ProvisionedWriteCapacityUnits" \--alarm-name ims-dynamodb-high-write-units-bar \--comparison-operator GreaterThanThreshold \--dimensions Name=TableName,Value=bar \--evaluation-periods 1 \--metric-name ConsumedWriteCapacityUnits \--namespace AWS/DynamoDB \--period 60 \--region us-west-2 \--statistic Average \--threshold 500 \--treat-missing-data notBreachingCommentSharecshobananswered 3 years ago"


Question: Automate deletion of orphaned network interfaces.

"A customer has thousands of network interfaces in the us-east-1. The customer is looking for a way to identify any network interfaces that have not been used in the last 90 days and delete them all.Customer is aware he can use the AWS CLI to identify instances that are not in-use and delete them by providing the id for each interface.My Question:Is there a way to automate this entire process? Finding all the network interfaces older than 90 days and deleting them?If there is no way to identify when they were last used, is there a way for the customer delete all the network interfaces that are not in use and delete all of them at once.FollowComment"

Answer: "0Accepted AnswerWhen you try to delete an ENI, if the interface is in use, you'll be prevented from doing so. You can see ahead of time which ENIs are in use in the VPC console, under Network Interfaces.Programatically, as I see it, you have two choices (or a combination of both). Firstly, if you don't care when an interface was last used so long as it isn't currently being used, then you can parse the output of aws ec2 describe-network-interfaces; the status section of the response is available (if not in use) and in-use (if, well, in use). If you do care, you could take each of these ENI IDs and parse through your VPC Flow Logs to find any traffic over that interface in the last X period, and use that to determine whether or not you delete the interface.However, remember that VPC Flow Logs will log any traffic received by an ENI - if someone tries to connect to a port on an IP served by an ENI from the outside, that will show as activity. If you want to filter just so that you only look for customer-initiated activity to that ENI, then VPC Flow Logs can help, but you'd need to parse a little more to work out the source IP address.CommentShareEXPERTAndrew L.answered 4 years ago"


Question: Cognito group based multitenancy login

"Hello everyone,I am trying to solve issue when one use can register with same email address in two or more different tenants apps. I will have user created for each tenant and will be stored in one pool. When user register, they will be assigned to a cognito group.It should behave in following way:1 pool 2+ groups:user@email.com (group: tenant1)if user user exists in tenant1:tenant1.app.com/login (user@email.com/password) ⇒returns: user@email.com (group: tenant1)if user user does not exists in tenant2:tenant2.app.com/login (user@email.com/password) ⇒returns: 403 unauthenticateduser@email.com (group: tenant2)if user user does exists in tenant2:tenant2.app.com/login (user@email.com/password123) ⇒returns: user@email.com (group: tenant2)Basically as user, I can register in two different websites, with one email and maybe same or different password. For every tenant, i will have new user created with same email address in one user pool but two different groups.My questions are:How to ensure, there is always new user created in cognito pool if we register from different tenant app (groups) ?How can I implement login, so it checks, if the user with given password exist in certain group ?Is there any better way of approaching this problem ? The reason i chose group per tenant over pool per tenant is that i can have 1000 -10000 groups in a pool1, so if i need(i would reach the limit of groups in 1 pool), i could start storing user in new pool so i would have another 1000 - 10000 groups per pool2.So that would give me  in total 1000 x (1000 to 10000) of groups if needed.I hope i explained it in understandable way, i could find clear solution or advice for my problem. The most important for me would be the answer for question #2.Many thanks,Regards,MiroFollowComment"


Question: CloudFront HTTP headers

"I'd like to analyze the number of requests, for example, that contain the HTTP headers that I've included in my CloudFront cache key. How can I do this? For example, when I created my caching policy, I enabled the CloudFront-Is-Mobile/SmartTV/Desktop-Viewer headers because I'd like to see how many requests originate from these different device types. I thought the HTTP header information would be available in CloudFront standard logs, but no such luck. Where to look?FollowComment"

Answer: 0Have you tried using AWS WAF in front of your cloud front? Using WAF ACL rule you will be able to filter any custom http header (and it's value) and based on the header/value you can Deny/Accept/Count/CAPCHA the request.You can also insert custom http header before redirecting to down stream system.https://docs.aws.amazon.com/waf/latest/developerguide/customizing-the-incoming-request.htmlCommentSharerePost-User-2054795answered 3 months ago


Question: Publish to SNS topic using curl

"Is it possible to post (publish) to an SNS topic using a simple curl command from a shell in an EC2 instance?Something like this:curl -d "Test message" https://sns.us-west-2.amazonaws.com/?Action=Publish&TargetArn=arn%3Aaws%3Asns%3Aus-west-2%3A803981987763%3AendpointI've tried various combinations, and the closest I get is port 443 connection error. Does SNS use a different port number? I've not found any actual example of this, not sure it's supposed to work.FollowComment"

Answer: "0Hi, in a nutshell, yes it is possible... but requires re-architecting to:curl --> API Gateway --> SNSReview the following Link: https://www.alexdebrie.com/posts/aws-api-gateway-service-proxy/Here are the steps outlined in the link aboveWe created an SNS topic to receive messages and set up a subscription on that topic to forward all messages to a cell phone.We set up our basic API Gateway resources, including a REST API, a resource (/ingest) and a method (POST) on that resource.We made an IAM role that could be assumed by API Gateway and gave permission to publish messages to our SNS topic.We configured an integration to our SNS topic from our REST API’s resource and method. This integration included a request mapping template, a response mapping template, and a method response.We deployed our REST API to make it live, then sent an HTTP request using curl. We received the message on our cell phone, indicating that it was successfully published to our SNS topic.Hope this helps.-randyCommentShareRandyTakeshitaanswered 4 years ago"


Question: Omit/remove the open tracking pixel from emails send by PinPoint.

"According to aws documentation you can omit the open tracking pixel by doing the following. I have done both approaches.There are two ways to omit the open tracking pixel from your emails. The first method is to send the email without specifying a configuration set. Alternatively, you can specify a configuration set that is not configured to publish data about open events.https://docs.aws.amazon.com/ses/latest/dg/faqs-metrics.htmlBut this doesn't seem to do the trick. I checked e-mail headers and the open pixel is always there.FollowComment"


Question: Error When I create a Bucket Policy Why?

"I am trying to grand a webpage public access however my bucket policy is not being processed through the AWS console or through the command line.So here is was what I have done:I have obviously a created a bucket.Uploaded an html doc called index.htmlEnabled static website hosting pointing to the default page of index.html for the purpose of a Bucket Website EndpointCleared Block Public AccessNow when I go to Bucket Policy I get this error:Unknown ErrorAn unexpected error occurred.API responsePolicy has invalid actionThis is the json code used:{"Id": "Policy1609393710877","Version": "2012-10-17","Statement": [{"Sid": "PublicReadGetObject","Action": ["s3: GetObject"],"Effect": "Allow","Resource": "arn:aws:s3:::1example.com/","Principal": "*"}]}Any suggestions would be greatly appreciated.FollowComment"

Answer: 0I have figured what the problem was.The issue was simply bad syntax of the code itself.Problem solved.CommentSharemilesproweranswered 2 years ago


Question: RDS instance stuck in "Configuring-enhanced-monitoring" state for weeks

"I have an RDS instance (postgres, non-aurora) that someone must have set enhanced monitoring for.  Now it still works, but it is stuck in a state of "Configuring-enhanced-monitoring" and won't let me modify it to increase the disk space, upgrade the version, or anything.  It has been this way for weeks and is not an enormous DB (like maybe 60GB). I can't even reboot it.  It just says it can't do that because the instance is not in an available state.  Is there any way to get it out of that state?FollowComment"

Answer: "0Hello,clearly there is something going on with internal infrastructure with respect to your RDS in question. If not already, please open support ticket with RDS team and we should be able to help. It is definitely not normal to have RDS in "Configuring-enhanced-monitoring" state for weeks and not allowing you to modify the RDS makes situation worse for you.CommentShareBakul_Ranswered a year ago"


Question: "How can I remove VPC, I tried everything I can."

"[cloudshell-user@ip-10-2-84-68 ~]$ #!/bin/bash[cloudshell-user@ip-10-2-84-68 ~]$ vpc="vpc-0451179a01822bb2c"[cloudshell-user@ip-10-2-84-68 ~]$ region="ap-southeast-1"[cloudshell-user@ip-10-2-84-68 ~]$ aws ec2 describe-internet-gateways --region $region --filters 'Name=attachment.vpc-id,Values='$vpc | grep InternetGatewayId[cloudshell-user@ip-10-2-84-68 ~]$ aws ec2 describe-subnets --region $region --filters 'Name=vpc-id,Values='$vpc | grep SubnetId            "SubnetId": "subnet-0a4876918e50d2133",            "SubnetId": "subnet-00690100198abfc2c",[cloudshell-user@ip-10-2-84-68 ~]$ aws ec2 describe-route-tables --region $region --filters 'Name=vpc-id,Values='$vpc | grep RouteTableId                    "RouteTableId": "rtb-0d4576706059012bd",            "RouteTableId": "rtb-0d4576706059012bd",                    "RouteTableId": "rtb-0b59b6e9d69621ab0",                    "RouteTableId": "rtb-0b59b6e9d69621ab0",            "RouteTableId": "rtb-0b59b6e9d69621ab0",[cloudshell-user@ip-10-2-84-68 ~]$ aws ec2 describe-network-acls --region $region --filters 'Name=vpc-id,Values='$vpc | grep NetworkAclId                    "NetworkAclId": "acl-020f2166d2681b0fb",                    "NetworkAclId": "acl-020f2166d2681b0fb",            "NetworkAclId": "acl-020f2166d2681b0fb",[cloudshell-user@ip-10-2-84-68 ~]$ aws ec2 describe-vpc-peering-connections --region $region --filters 'Name=requester-vpc-info.vpc-id,Values='$vpc | grep VpcPeeringConnectionId[cloudshell-user@ip-10-2-84-68 ~]$ aws ec2 describe-vpc-endpoints --region $region --filters 'Name=vpc-id,Values='$vpc | grep VpcEndpointId[cloudshell-user@ip-10-2-84-68 ~]$ aws ec2 describe-nat-gateways --region $region --filter 'Name=vpc-id,Values='$vpc | grep NatGatewayId[cloudshell-user@ip-10-2-84-68 ~]$ aws ec2 describe-security-groups --region $region --filters 'Name=vpc-id,Values='$vpc | grep GroupId            "GroupId": "sg-0438ebaece1906cdf",            "GroupId": "sg-095dd2ffe375ad929",[cloudshell-user@ip-10-2-84-68 ~]$ aws ec2 describe-instances --region $region --filters 'Name=vpc-id,Values='$vpc | grep InstanceId[cloudshell-user@ip-10-2-84-68 ~]$ aws ec2 describe-vpn-connections --region $region --filters 'Name=vpc-id,Values='$vpc | grep VpnConnectionId[cloudshell-user@ip-10-2-84-68 ~]$ aws ec2 describe-vpn-gateways --region $region --filters 'Name=attachment.vpc-id,Values='$vpc | grep VpnGatewayId[cloudshell-user@ip-10-2-84-68 ~]$ aws ec2 describe-network-interfaces --region $region --filters 'Name=vpc-id,Values='$vpc | grep NetworkInterfaceId            "NetworkInterfaceId": "eni-05ff42074c4ed3b6a",            "NetworkInterfaceId": "eni-070c32434d3cdf510",[cloudshell-user@ip-10-2-84-68 ~]$ aws ec2 describe-carrier-gateways --region $region --filters Name=vpc-id,Values=$vpc | grep CarrierGatewayIdAn error occurred (UnsupportedOperation) when calling the DescribeCarrierGateways operation: The functionality you requested is not available in this region.[cloudshell-user@ip-10-2-84-68 ~]$ aws ec2 describe-local-gateway-route-table-vpc-associations --region $region --filters Name=vpc-id,Values=$vpc | grep LocalGatewayRouteTableVpcAssociationId[cloudshell-user@ip-10-2-60-85 ~]$ #!/bin/bash[cloudshell-user@ip-10-2-60-85 ~]$ [cloudshell-user@ip-10-2-60-85 ~]$ REGION=ap-southeast-1[cloudshell-user@ip-10-2-60-85 ~]$ [cloudshell-user@ip-10-2-60-85 ~]$ # Detach subnets from route tables[cloudshell-user@ip-10-2-60-85 ~]$ aws ec2 disassociate-route-table --association-id subnet-0a4876918e50d2133 --region $REGIONAn error occurred (InvalidAssociationID.NotFound) when calling the DisassociateRouteTable operation: The association ID 'subnet-0a4876918e50d2133' does not exist[cloudshell-user@ip-10-2-60-85 ~]$ aws ec2 disassociate-route-table --association-id subnet-00690100198abfc2c --region $REGIONAn error occurred (InvalidAssociationID.NotFound) when calling the DisassociateRouteTable operation: The association ID 'subnet-00690100198abfc2c' does not exist[cloudshell-user@ip-10-2-60-85 ~]$ [cloudshell-user@ip-10-2-60-85 ~]$ # Delete route tables[cloudshell-user@ip-10-2-60-85 ~]$ aws ec2 delete-route-table --route-table-id rtb-0d4576706059012bd --region $REGIONAn error occurred (DependencyViolation) when calling the DeleteRouteTable operation: The routeTable 'rtb-0d4576706059012bd' has dependencies and cannot be deleted.[cloudshell-user@ip-10-2-60-85 ~]$ aws ec2 delete-route-table --route-table-id rtb-0b59b6e9d69621ab0 --region $REGIONAn error occurred (DependencyViolation) when calling the DeleteRouteTable operation: The routeTable 'rtb-0b59b6e9d69621ab0' has dependencies and cannot be deleted.[cloudshell-user@ip-10-2-60-85 ~]$ [cloudshell-user@ip-10-2-60-85 ~]$ # Delete network ACLs[cloudshell-user@ip-10-2-60-85 ~]$ aws ec2 delete-network-acl --network-acl-id acl-020f2166d2681b0fb --region $REGIONAn error occurred (InvalidParameterValue) when calling the DeleteNetworkAcl operation: cannot delete default network ACL acl-020f2166d2681b0fb[cloudshell-user@ip-10-2-60-85 ~]$ [cloudshell-user@ip-10-2-60-85 ~]$ # Delete security groups[cloudshell-user@ip-10-2-60-85 ~]$ aws ec2 delete-security-group --group-id sg-0438ebaece1906cdf --region $REGIONAn error occurred (CannotDelete) when calling the DeleteSecurityGroup operation: the specified group: "sg-0438ebaece1906cdf" name: "default" cannot be deleted by a user[cloudshell-user@ip-10-2-60-85 ~]$ aws ec2 delete-security-group --group-id sg-095dd2ffe375ad929 --region $REGIONAn error occurred (DependencyViolation) when calling the DeleteSecurityGroup operation: resource sg-095dd2ffe375ad929 has a dependent object[cloudshell-user@ip-10-2-60-85 ~]$ [cloudshell-user@ip-10-2-60-85 ~]$ # Delete network interfaces[cloudshell-user@ip-10-2-60-85 ~]$ aws ec2 delete-network-interface --network-interface-id eni-05ff42074c4ed3b6a --region $REGIONAn error occurred (InvalidParameterValue) when calling the DeleteNetworkInterface operation: Network interface 'eni-05ff42074c4ed3b6a' is currently in use.[cloudshell-user@ip-10-2-60-85 ~]$ aws ec2 delete-network-interface --network-interface-id eni-070c32434d3cdf510 --region $REGIONAn error occurred (InvalidParameterValue) when calling the DeleteNetworkInterface operation: Network interface 'eni-070c32434d3cdf510' is currently in use.FollowComment"

Answer: "0Have a good look at the documentation for the commands you're running.  For example if you type "aws ec2 disassociate-route-table help" you'll see what parameters it's expecting.  "--association-id" does not expect a subnet ID.If you're not up to speed with the CLI, and this isn't something you need to do many times, why not use the console to delete what you need to?CommentShareEXPERTskinsmananswered a month agoViKi Vyas a month agoDependency are in dependency are in deadlock. the console does not help. It is like billing ghost to me. dependency check says they are therefore but deleting commands do not found any.ShareViKi Vyas a month agoI am using aws cloud shell and commands are ok. there is no syntax error.Shareskinsman EXPERTa month agoNo, there's no syntax errors but there are semantic errors. Maybe I wasn't clear - you are calling "aws ec2 disassociate-route-table --association-id subnet-0a4876918e50d2133" but this won't work, as you need to pass an Association ID, not a Subnet ID.  BTW if you're deleting these resources because you're worried about being billed for them, note they don't cost anything.Share0Here are some examples of deleting VPC components and the VPC. I'm using tags as the filter, change to whatever you need.Delete route table/subnet association.aws ec2 disassociate-route-table \--association-id \$(aws ec2 describe-route-tables \--output text \--query "RouteTables[*].Associations[?SubnetId==\`\$(aws ec2 describe-subnets \--output text \--query "Subnets[0].SubnetId" \--filters "Name=tag:Name,Values=public-subnet")\`].RouteTableAssociationId" \--filters "Name=tag:Name,Values=public-route-table" \)Delete routeaws ec2 delete-route \--destination-cidr-block "0.0.0.0/0" \--route-table-id \$(aws ec2 describe-route-tables \--output text \--query "RouteTables[0].RouteTableId" \--filters "Name=tag:Name,Values=public-route-table")Delete Route tableaws ec2 delete-route-table \--route-table-id \$(aws ec2 describe-route-tables \--output text \--query "RouteTables[0].RouteTableId" \--filters "Name=tag:Name,Values=public-route-table")Detach and delete internet gatewayaws ec2 detach-internet-gateway \--internet-gateway-id \$(aws ec2 describe-internet-gateways \--filters "Name=tag:Name,Values=internet-gateway" \--output text \--query "InternetGateways[0].InternetGatewayId") \--vpc-id \$(aws ec2 describe-vpcs \--filters "Name=tag:Name,Values=vpc" \--output text \--query "Vpcs[0].VpcId")aws ec2 delete-internet-gateway \--internet-gateway-id \$(aws ec2 describe-internet-gateways \--filters "Name=tag:Name,Values=internet-gateway" \--output text \--query "InternetGateways[0].InternetGatewayId")Delete subnetaws ec2 delete-subnet \--subnet-id \$(aws ec2 describe-subnets \--filters "Name=tag:Name,Values=public-subnet" \--output text \--query "Subnets[0].SubnetId")Delete VPCaws ec2 delete-vpc \--vpc-id \$(aws ec2 describe-vpcs \--filters "Name=tag:Name,Values=vpc" \--output text \--query "Vpcs[0].VpcId")If you have Network Interfaces that prevent deleting the VPC, you will need to find whatever that is an delete them first.CommentShareEXPERTkentradanswered a month agoViKi Vyas a month agoThose Network Interfaces are not getting deleted also security rules are also not getting deleted. I will try you code replaced with name in Name and let you know.Sharekentrad EXPERTa month agoRun this command to get an idea of what the ENIs are used for.aws ec2 describe-network-interfaces --query NetworkInterfaces[*].DescriptionShare0It looks like maybe you're running a bash script (I see '#!/bin/bash' as the first command) and inside their you're setting a region of ap-southeast-1, so you're returning information about your assets in that region.  But after the script terminates, what region do you have set?  Probably a different one as you can't seem to delete the assets your script reported.CommentShareEXPERTskinsmananswered a month agoViKi Vyas a month agoThank you for bringing my attention to it, I have updated code to set region but getting errors in different way.Share0I'm having a similar problem and I've narrowed it down to a mysterious user account ID attached to a network adapter and no such user exists. I get errors telling me that I lack the permissions to remove it despite running through both an admin account and as root. I'm the only user on this account so it's not like someone else attached a network adapter to a running machine built by me. I didn't create an account, attach a network interface, and delete the account - which even if I did, it should then automatically revert to me as root. So whatever the issue is, I'm stumped. I'm of no help to you except to say that you aren't alone. lolCommentSharesleerfanswered 25 days ago"


Question: Amazon EventBridge Rules error with Lambda

"Hi Everybody,I have 2 environments: STG and PROD. I using Medialive for Livestream.I've created below:Environment STG:Amazon EventBridge => Lambda function handler event MedialiveEnvironment PROD:Amazon EventBridge => Lambda function handler event MedialiveAmazon EventBridge STG and Amazon EventBridge PROD have the same rules like:{  "source": ["aws.medialive"],  "detail-type": ["MediaLive Channel State Change"]}When I config above. I found that events Amazon EventBridge environment STG in Lambda PROD, or opposite events Amazon EventBridge environment PROD in Lambda STG. This leads to conflict when operating my website.Please explain or help me fix my issues. Thank you so much.FollowComment"

Answer: "0Recommended option is to create different accounts for the different environments. If you use a single account, each environment should have its own Event Bus in EventBridge. PROD functions will create the rule on the PROD bus and STG functions will create the rule on the STG bus. The functions that send events to the event bus will use an environment variable with the ARN of the bus.CommentShareEXPERTUrianswered a year agoAWS-User-7754781 a year agoHi Bro,Please let me know, with event same:{"source": ["aws.medialive"],"detail-type": ["MediaLive Channel State Change"]}How to config with eventbus. Thank youShareUri EXPERTa year agoThe events will be the same in both buses, but you write them to different buses. As you can see in the PutEvents API, there is a field there for the event bus name. This will be different for the different environments.Share0I am assuming you are using the same Account ID for both environments. This may explain your experience.If that is the case, you would have to further filter the rule by the ARN of the channel. Essentially you would have something like so:{"source": ["aws.medialive"],  "detail-type": ["MediaLive Channel State Change"]  "detail": {    "channel_arn": ["<staging-channel-arn>"]  }}and{"source": ["aws.medialive"],  "detail-type": ["MediaLive Channel State Change"]  "detail": {    "channel_arn": ["<production-channel-arn>"]  }}You can find the schema for this event here -> https://us-east-2.console.aws.amazon.com/events/home?region=us-east-2#/registries/aws.events/schemas/aws.medialive%40MediaLiveChannelStateChange/version/1CommentShareekowcharlesanswered a year agoAWS-User-7754781 a year agoHi bro,Because I will create many channels. Channel is not static, each environment will create when the client requests so can't specify channel ARN.Share"


Question: Using Route53 Health Checks and Failover in front of CloudFront Distribution

"My architecture looks like:Route 53 --> CloudFront --> Application Load Balancer --> EC2 ServersI want to set up failover routing so that if the EC2 Servers go down, Route53 sends our traffic to an S3 bucket with a simple error page as a static site.This all seems pretty straightforward, but when I try to set up failover routing on the DNS record, the option to "Evaluate Target Health" is grayed out:This seems to be because the target is a CloudFront distribution. If I switch it to a different kind of alias, the option is no longer grayed out.How can I proceed to set up the failover DNS if I can't monitor the target's health?FollowComment"

Answer: "1Accepted AnswerHello,"Evaluate Target Health" works with Alias Records that support health checks, CloudFront is not a service supported as it does not return health checks.I think a better option for you is to use CloudFront's custom error responses.  This way if there is an error coming from the ALB, it can redirect traffic to a custom static page hosted on an S3 bucket.See documentation here: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/GeneratingCustomErrorResponses.htmlCommentShareEXPERTChris_Ganswered a year agomlissner 10 months agoThis should work nicely, though I'm having a hard time making it work. Thank you!Share0Another option is to front the site with CloudFront and use an origin group with one origin being the ELB and the other origin being the S3 static page. You would use the NoCache policy so that each request is sent to the origin instead of caching. See: Optimizing high availability with CloudFront origin failover.CommentShareEXPERTkentradanswered a year ago"


Question: please expect delays for additional Amazon Textract preview on-boarding

"Please be advised that due to the US tax season, all new and in-progress on-boarding for Amazon Textract preview sign-ups will be suspended until April 16th.We apologize for any inconvenience that this may cause you.Amazon Textract team.FollowComment"

Answer: "0I was approved for the preview on May 6th, 2019, but receive an 'not authorized error' on the website (regardless of the region I choose).CommentShareAWSusername3409answered 4 years ago"


Question: まとめて動画を変換する方法はありますか  "Is there a way to convert videos all at once?"

"1000件の動画をmp4→HLS(m3u8)に変換する、効率的な方法はありますか。MediaConvertとElastinTranscoder、どちらのGUIからもCUI（API）からも、1件ずつしかできなさそうなので、1000個のリクエストを生成・実行するコードを書こうか検討しています。Is there an efficient way to convert 1000 videos from mp4 to HLS (m3u8)?From MediaConvert and ElastinTranscoder, both GUI and CUI (API) seems to be able to do only one by one, so we are considering writing code to generate and execute 1000 requests.FollowComment"

Answer: "2Accepted AnswerHi there,There are a few ways. If the assets already sit on S3 you could easily write a script to go file by file to create via the API/SDK as you mentioned. The other way is if files do not s3 on s3 you can automate a workflow that will call your create job request when object uploads are complete. We have a blog post that goes over some ways to make an watchfolder style workflow [1]Please keep in mind about our API limits as to not be throttled when creating your request. [2]Kind regards,Jeremy[1] https://aws.amazon.com/blogs/media/vod-automation-part-1-create-a-serverless-watchfolder-workflow-using-aws-elemental-mediaconvert/[2] https://docs.aws.amazon.com/general/latest/gr/aws_service_limits.html#limits_mediaconvertCommentShareAWS-User-8506763answered 4 years ago1Thank you for your reply. I will implement it with Lamda.CommentSharee2fujisawaanswered 4 years ago"


Question: IoT thing auto reconnect using python SDK

"Using AWS Python SDK,  I am communicating with the IoT thing which has a sensor device connected. I am utilizing the MQTT for sending the message to IoT and writing the sensor data to IoT shadow. In the connection code, I have configured the configureAutoReconnectBackoffTime to restablish the connection automatically.whenever network goes, the callback return "REQEUST TIME OUT". When the network comes back, it automatcilly writes the data to IoT Shadow. But sometimes, it takes more time to reestablish the connection. Many times the network is up and I am getting the response from ping. But it takes more time to reconnect. I increased the maxReconnectQuietTimeSecond time in configureAutoReconnectBackoffTime, still I am getting the same error.I am using the below lines in the IoT connection code.    Iot_connection = AWSIoTMQTTShadowClient(clientId)    Iot_connection.configureEndpoint(host, 8883)    Iot_connection.configureCredentials("{}AmazonRootCA1.pem".format(certPath), "{}iot_private.key".format(certPath), "{}iot_cert.crt".format(certPath))    Iot_connection.configureAutoReconnectBackoffTime(1, 6, 5)    Iot_connection.configureConnectDisconnectTimeout(5)FollowCommentDavid Malone EXPERT10 months agoHi, have you tried connecting without invoking configureAutoReconnectBackoffTime and configureConnectDisconnectTimeout to see if it works? This would be helpful to troubleshoot whether you have either issues with your certificates or with the IoT Thing Policy associated with your certificates. Also, while you're at it, please share the IoT Thing Policy attached to your certificates so we can rule out any other required configuration there.ShareVamseekrishna 10 months agoDavid, I am connecting without invoking the configureAutoReconnectBackoffTime and configureConnectDisconnectTimeout. In the meantime, please find the policy attached to the IoT{"Version": "2012-10-17","Statement": [{"Effect": "Allow","Action": "iot:","Resource": ""}]}Share"


Question: output log for RDS stored procedure

"Hi Team,I have an RDS MySQL DB (one aurora serverless and one is normal MYSQL RDS), I created a stored procedure in my DB in which I do some logs outputs :log("begin of my procedure").....log("bla bla bla....")....log("End of my procedure")where can I find the output log after my stored procedure is successfully finished?in RDS console => logs & event;  is empty no log therein the DB cluster parameter group I enabled :  slow_log, server_audit_logging, general_logI see some logs in cloud watch but not my custom logs " "begin of my procedure", "End of my procedure"also in RDS console => logs & event section I only see events, no logs generatedany ideas please to see my custom logs printed by my stored procedure in CWL or in rds logs & event?     thanks a lotFollowComment"

Answer: "0Hi,The standard logging mechanisms: general/slow/audit logs do not capture query results. Since RDS/Aurora do not provide access to the host, it would not be possible to access files that are written locally, so you will need to write to a file externally to a service like S3, for example.Call the stored procedure from a local machine or Lambda and write the execution details to a log file. Configure a Lambda function to query the database and write the output to a log file has more on this. This might be the best option for your use case since you want to log more than just the result of the executionIf you only need the output of the procedure, you can feed it into a table and setup a pipeline to Export MySQL Data to Amazon S3 Using AWS Data PipelineFor Aurora MySQL, you can add SELECT INTO OUTFILE S3 to the procedure and save the result directly into text files stored in an Amazon S3 bucket. Note that this option doesn't support Aurora Serverless or RDS MySQLCommentShareShivanswered a year agoJess a year agoHi,thank you for your answer, in fact, I call my stored procedure from my was glue pyspark job not from a local machine. Is there a way to capture the result of the execution of my stored procedure from within the glue job?because the issue I'm facing now is that my glue job after loading => call the stored procedure => the stored procedure fail but the glue job is marked as succeeded.I'm looking at how to know from within my glue job whether or not the stored procedure runs successfully so that I can pass or fail the job.to avoid the scenario when the stored procedure fails but the job itself is marked as succeeded.Thank youShare"


Question: AWSSecretsManager  ResourceNotFoundException

"Hi ,I am using Java SDK [1.12.166] for secret manager to store and retrieve secrets. After successfully storing the secrets, intermittently getting below exception while retrieving the same. Surprisingly, first time retrieval was successful, second attempt failed with below exception, however it worked on the third attempt. Not sure on what i am missing here ..Service: AWSSecretsManager; Status Code: 400; Error Code: ResourceNotFoundException; Request ID:Appreciate any help regarding this.Thanks,AnandFollowComment"


Question: Assessment Questionaire for AWS workloads moving to AWS - Amazon Managed Services

"I have a customer moving AWS Workloads to AWS - AMS (Amazon Managed Services) most of these services are hosted on ECS and Lambda, is there an assessment questionnaire to help us assess the effort/cost and complexity of these applications?FollowComment"

Answer: 0The best place to start is here: https://docs.aws.amazon.com/managedservices/latest/onboardingguide/og-intro.htmlFurther questions should be directed to your account team. You can use the contact us link of the console or aws.amazon.com pages.CommentShareRodney Lesteranswered a year ago


Question: SSM Agent update failure

"Hi all. We're just starting with SSM and hoping to use this quite extensively moving forward. I have a small handful of devices online using it but I just noticed that one of my devices has gone offline. Luckily it is not in the field yet so I was able to access it locally. What appears to have happened was SSM Agent was attempting to update but failed and never came back. I'm not so concerned that it didn't update and more concerned that it didn't start again. Going through the ssm agent logs I came across this line"standardError": "E: Could not get lock /var/lib/dpkg/lock-frontend - open (11: Resource temporarily unavailable)\nE: Unable to acquire the dpkg frontend lock (/var/lib/dpkg/lock-frontend), is another process using it?\nWARNING: Could not install the python3-apt, this may cause the patching operation to fail.\nfailed to run commands: exit status 1The SSM update log itself ends like this2022-01-20 21:47:09 DEBUG UpdateInstanceInformation Response{}2022-01-20 21:47:09 INFO initiating cleanup of other versions in amazon-ssm-agent and amazon-ssm-agent-updater folder2022-01-20 21:47:09 INFO removing artifacts in the folder: /var/lib/amazon/ssm/update/amazon-ssm-agent2022-01-20 21:47:09 INFO removed files and folders: 3.1.821.02022-01-20 21:47:09 INFO removing artifacts in the folder: /var/lib/amazon/ssm/update/amazon-ssm-agent-updater2022-01-20 21:47:09 INFO removed files and folders: 3.1.715.02022-01-20 21:47:09 INFO initiating cleanup of files in update download folder2022-01-20 21:47:09 INFO Successfully downloaded manifestSuccessfully downloaded updater version 3.1.821.0Updating amazon-ssm-agent from 3.1.715.0 to 3.1.821.0Successfully downloaded https://s3.us-east-2.amazonaws.com/amazon-ssm-us-east-2/amazon-ssm-agent/3.1.715.0/amazon-ssm-agent-ubuntu-amd64.tar.gzSuccessfully downloaded https://s3.us-east-2.amazonaws.com/amazon-ssm-us-east-2/amazon-ssm-agent/3.1.821.0/amazon-ssm-agent-ubuntu-amd64.tar.gzInitiating amazon-ssm-agent update to 3.1.821.0failed to install amazon-ssm-agent 3.1.821.0, ErrorMessage=The execution of command returned Exit Status: 125 exit status 125Initiating rollback amazon-ssm-agent to 3.1.715.0failed to uninstall amazon-ssm-agent 3.1.821.0, ErrorMessage=The execution of command returned Exit Status: 2 exit status 2Failed to update amazon-ssm-agent to 3.1.821.0Then the error log gives me this2022-01-20 16:29:54 ERROR [Submit @ processor.go.140] [ssm-agent-worker] [MessagingDeliveryService] [Association] [associationId=5752f0d0-1f57-492e-83f7-740484b81d73] Document Submission failed: Job with id 5752f0d0-1f57-492e-83f7-740484b81d73 already exists2022-01-20 21:47:02 ERROR [AppendError @ context.go.129] failed to install amazon-ssm-agent 3.1.821.0, ErrorMessage=The execution of command returned Exit Status: 125 exit status 125Could anyone help me out here? I cannot have these fail like this when they go out into the wild.The OS is Ubuntu Server 18 on this box, 20 on others we have.FollowComment"

Answer: "0Hello,I understand that you have been experiencing issues with one of your instances and that after its SSM agent attempted to update, the instance is no longer available.I noticed that in the below error message indicates that the package manager was already being used:Unable to acquire the dpkg frontend lock (/var/lib/dpkg/lock-frontend)This would just prevent the agent from being updated, but it’s not clear why it caused the agent to fail. This is most likely an issue with the operating system and not the CloudWatch agent.To fix the issue, you may consider attempting to manually uninstall and then reinstall the agent as outlined in this documentation: https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/download-cloudwatch-agent-commandline.htmlIf your problem continues to persist after implementing these steps, I strongly encourage you to contact an AWS support engineer who will be able to assist you.CommentShareJessica_Canswered a year agoSUPPORT ENGINEERAWS_SamMreviewed 10 months ago"


Question: how to gather resource information from an account

"hi Guys, I just started at new company and they have multiple aws accounts and I'm still learning AWS. I am trying to create an asset tracking file. I like to know what each accounts has in terms of # of things such as ec2/s3/vpc/subnets/domains/hosted zones/db etc...etc...I do see that VPC dashboard does show many of the resources but not all. So is something like what I am asking possible?Thanks in advanceFollowComment"

Answer: "2There's not a great, all encompassing way to gather resources account wide, but if you're using AWS Config you can gather all resources region wide. That's AWS's answer to a CMDb. To do that via the AWS Console, just search for AWS Config and select Resources on the left hand side of the Config Console. This assumes that Config is turned on of course. If Config isn't setup, you can dig into the Cost Explorer  to see what's billing. Either are good options to start piecing together the resources in your AWS accounts.CommentShareAWSJoeanswered a year ago1Accepted AnswerOne easy way is to use Tag Editor. ("Resource Groups" Management Console -> "Tag Editor")Try to search with the following conditions.  You will get the list of the resources supported tag on the account.Regions : All regionsResource types: All supported resource typeshttps://docs.aws.amazon.com/ARG/latest/userguide/find-resources-to-tag.htmlCommentSharesuzukianswered a year ago"


Question: Electric Vehicle Mobile App on AWS

"Hi AWS,I am looking to build an electric vehicle app and further deploy it on AWS. What factors are to be considered to develop one mobile app with backend architecture to efficient and best practices for e.g when you zoom in or zoom out with your fingers what is and how best we can design that mobile arch and using AWS and mobile app developmentFor e.g. How many api calls needed for zoom out and zoom inAny caching can be usedHow to design this with best efficient architecture for mobile app and on Aws cloudLatitude and longitudeIf we have to depend on 3rd party provides how best we can design this and what factors to go wider and what questions to askBuilding similar Lyft like mobile app, the concept and architecture design and efficient solution and questions to ask are first deliverable we are looking for.Please suggest.FollowComment"

Answer: "0Designing and deploying an electric vehicle app with efficient backend architecture on AWS requires careful consideration of several factors. Here are some suggestions and best practices to consider:Mobile app architecture: To ensure your app is efficient and scalable, consider using a modular architecture design that separates the app into smaller, reusable components. This will allow for easier development, testing, and deployment of the app. For example, you can use AWS Lambda to create serverless functions for the app's backend.API calls: Consider optimizing the number of API calls needed for zoom in and zoom out features. One way to do this is to use a caching layer to store frequently accessed data, such as location data or maps, to reduce the number of API calls required. You can use Amazon Elasticache to create a caching layer for your app.Efficient architecture: To build an efficient architecture for your app, consider using AWS services like Amazon API Gateway, Amazon DynamoDB, and AWS Lambda. Amazon API Gateway can help you create and manage APIs for your app, while Amazon DynamoDB can provide a highly scalable, NoSQL database for storing and retrieving data. AWS Lambda can help you create serverless functions for your app's backend, reducing the need for server maintenance and scaling.Location data: To efficiently manage location data, consider using Amazon Location Service. Amazon Location Service provides geocoding, routing, and mapping services to help you efficiently manage location data in your app.Third-party providers: If you need to depend on third-party providers for certain features, consider evaluating their APIs and services to ensure they meet your requirements for performance, reliability, and scalability. Ask questions about their uptime, support, and pricing to ensure they align with your needs.Lyft-like app: To design a Lyft-like app, consider using AWS services like Amazon Pinpoint for user engagement, Amazon Elastic Beanstalk for app deployment, and Amazon CloudWatch for monitoring and logging. You can also use Amazon S3 for storing user data and Amazon Simple Notification Service for sending push notifications to users.By considering these factors and using AWS services for your electric vehicle app, you can create an efficient and scalable backend architecture that meets your needs for performance, reliability, and scalability.While there is no one-size-fits-all solution when it comes to building an electric vehicle app, using a serverless architecture can be a good option to consider. Serverless architecture can provide several benefits, such as reducing operational overhead, improving scalability and availability, and increasing development agility.However, it's important to keep in mind that there are pros and cons to every approach, and the best architecture for your app depends on your specific use case and requirements. Therefore, it's essential to carefully evaluate your app's needs and consider factors such as cost, performance, security, and scalability before choosing an architecture.That being said, the AWS services and architecture design I suggested earlier can be a good starting point for building an efficient and scalable electric vehicle app using a serverless architecture. By leveraging AWS services like Lambda, API Gateway, DynamoDB, and Elasticache, you can create a modular, scalable, and reliable backend for your app. However, it's still important to assess your specific requirements and adjust the architecture accordingly to ensure the best possible outcome for your app.CommentSharemishdaneanswered 2 months ago"


Question: AWS Parameters and Secrets Lambda Extension does not work with parameter ARN's

"The AWS documentation for the Parameters and Secrets Lambda Extension states:To make a call using the Amazon Resource Name (ARN) for a parameter, make an HTTP GET call similar to the following.GET http://localhost:port/systemsmanager/parameters/get?name=arn:aws:ssm:us-east-1:123456789012:parameter/MyParameterhowever these requests return a 400 stating the parameter name is invalid.Here's a quick example to demonstrate the successful request using the parameter name, and the failed request using the parameter ARN:import jsonimport osfrom botocore.vendored import requestsdef lambda_handler(event, context):    name_url = 'http://localhost:2773/systemsmanager/parameters/get?name=test-param'    arn_url = 'http://localhost:2773/systemsmanager/parameters/get?name=arn:aws:ssm:us-east-2:{ACCOUNT_ID}:parameter/test-param'    headers = {'X-Aws-Parameters-Secrets-Token': os.environ['AWS_SESSION_TOKEN']}        name_resp = requests.get(name_url, headers=headers)    print(f'NAME RESPONSE: {name_resp.status_code} > {name_resp.text}')        arn_resp = requests.get(arn_url, headers=headers)    print(f'ARN RESPONSE: {arn_resp.status_code} > {arn_resp.text}')and the output:NAME RESPONSE: 200 > {"Parameter":{"ARN":"arn:aws:ssm:us-east-2:{ACCOUNT_ID}:parameter/test-param","DataType":"text","LastModifiedDate":"2022-11-26T02:25:14.669Z","Name":"test-param","Selector":null,"SourceResult":null,"Type":"SecureString","Value":"AQICAH....=","Version":2},"ResultMetadata":{}}ARN RESPONSE: 400 > an unexpected error occurred while executing request[AWS Parameters and Secrets Lambda Extension] 2022/11/26 18:09:36 ERROR GetParameter request encountered an error: operation error SSM: GetParameter, https response error StatusCode: 400, RequestID: {REQUEST_ID}, api error ValidationException: Invalid parameter name. Please use correct syntax for referencing a version/label  <name>:<version/label>The docs also state:When using GET calls, parameter values must be encoded for HTTP to preserve special characters.however the error still occurs whether the ARN colons and/or slash are URL-encoded or not like so:http://localhost:2773/systemsmanager/parameters/get?name=arn%3Aaws%3Assm%3Aus-east-2%3A{ACCOUNT_ID}%3Aparameter/test-paramhttp://localhost:2773/systemsmanager/parameters/get?name=arn%3Aaws%3Assm%3Aus-east-2%3A{ACCOUNT_ID}%3Aparameter%2Ftest-paramAm I missing something here or is the documentation incorrect in that an ARN can be used for these requests?FollowComment"


Question: Amazon Connect Conference Chat

"I have two requirementsAgent in Amazon connect instance can chat with other agent of the same instanceMultiple agents are allowed to join same chat like conference where customer, agent, other agent should be present in one chat.I tried to find details, not able to find the information to integrate above in connect instanceFollowComment"

Answer: "0Hi there!As of this post, the two requirements you mentioned above are not currently supported by Amazon Connect.CommentShareEXPERTAWS-samfredanswered 2 months ago"


Question: Glue Hudi get the freshly added or updated records

"Hello,I'm using Hudi connector in Glue, first, I bulk inserted the initial dataset to Hudi table, I'm adding a daily incremental records and I can query them using Athena, what I'm trying to do is to get the newly added, updated or deleted records in a separate parquet file.I've tried different approaches and configurations using both copy on write and merge on read tables but still can get the updates in a separate file.I used these configurations in different combinations:'className' : 'org.apache.hudi','hoodie.datasource.hive_sync.use_jdbc': 'false','hoodie.datasource.write.precombine.field': 'ts','hoodie.datasource.write.recordkey.field': 'uuid','hoodie.payload.event.time.field': 'ts','hoodie.table.name': 'table_name','hoodie.datasource.hive_sync.database': 'hudi_db','hoodie.datasource.hive_sync.table': 'table_name','hoodie.datasource.hive_sync.enable': 'false',# 'hoodie.datasource.write.partitionpath.field': 'date:SIMPLE','hoodie.datasource.write.hive_style_partitioning': 'true','hoodie.meta.sync.client.tool.class': 'org.apache.hudi.aws.sync.AwsGlueCatalogSyncTool','hoodie.datasource.write.table.type': 'COPY_ON_WRITE','path': 's3://path/to/output/',# 'hoodie.datasource.write.operation': 'bulk_insert','hoodie.datasource.write.operation': 'upsert',# 'hoodie.datasource.hive_sync.partition_extractor_class': 'org.apache.hudi.hive.NonPartitionedExtractor',# 'hoodie.datasource.hive_sync.partition_extractor_class': 'org.apache.hudi.hive.MultiPartKeysValueExtractor','hoodie.datasource.write.keygenerator.class': 'org.apache.hudi.keygen.NonpartitionedKeyGenerator',# 'hoodie.compaction.payload.class': 'org.apache.hudi.common.model.OverwriteWithLatestAvroPayload',# 'hoodie.cleaner.policy': 'KEEP_LATEST_COMMITS','hoodie.cleaner.delete.bootstrap.base.file': 'true',"hoodie.index.type": "GLOBAL_BLOOM",'hoodie.file.index.enable': 'true','hoodie.bloom.index.update.partition.path': 'true','hoodie.bulkinsert.shuffle.parallelism': 1,# 'hoodie.datasource.write.keygenerator.class': 'org.apache.hudi.keygen.CustomKeyGenerator'Thank you.FollowComment"

Answer: "0At this moment, Hudi does not have a feature to fit the use case you described. When use Copy on Write table, incremental updates will be compacted into base file in real time automatically. While with Merge on Read table, incremental updates are logged to delta files (in Avro format) and later compacted to base Parquet files. Reference: https://hudi.apache.org/docs/concepts/#table-typesA possible workaround, you can try implement your own data write and compact logic using custom ETL jobs on native Glue Catalog table instead of using hudi table.I hope this helps!CommentShareEthan_Hanswered 2 months ago"