Question: ErrorCode: INTERNAL_ERROR_QUERY_ENGINE

"I am trying to create a view using a table have more than 5 billion rows.using the following query:-withdate_month as(select distinct as_on_month from prod_edp_db_trusted.keyword_metrics_serp_dataforseo_v2_detailswhere as_on_date >= date_add('Month',-2,current_date) ),sim_data as(select *,date as sim_date,substring(date,1,4)||substring(date,6,2) as sim_yr_monthfrom ( select tenant,locale,search_engine,device_type,url,keyword,traffic,cast(date as varchar(255)) asdate,cast(organic_rank as decimal(38,0)) as organic_rank,create_date,row_number() over(partition by tenant,locale,search_engine,device_type,url,keyword order by date desc,create_date) as rnfrom prod_edp_db_trusted.simulated_score_v3_4 WHERE save_type='simulation' ) where rn=1),serp_data as(select * from(select sim.tenant,sim.locale,sim.search_engine,sim.device_type,sim.url,sim.keyword,sim.traffic,sim.organic_rankas sim_rank,sim.sim_date as simulation_date,sim.sim_yr_month,srp.position as rank,srp_mn.as_on_month as serp_year_month, srp.as_on_date as serp_as_on_date,row_number() over(partition bysim.tenant,sim.locale,sim.search_engine,sim.device_type,sim.url,sim.keyword,srp_mn.as_on_monthorder by srp.as_on_date desc,srp.created_date) as rnfrom sim_data simjoin date_month as srp_mnon srp_mn.as_on_month<=sim.sim_yr_month or srp_mn.as_on_month>=sim.sim_yr_monthleft join prod_edp_db_trusted.keyword_metrics_serp_dataforseo_v2_details srpon srp.locale=sim.locale and srp.search_engine=sim.search_engine and srp.device_type=sim.device_type and srp.url=sim.url and srp.keyword=sim.keyword --and srp.as_on_date>=sim.sim_dateand srp.as_on_month=srp_mn.as_on_month and srp.as_on_date>=date_add('Month',-2,date_trunc('Month',current_date))) where rn=1),sv_data AS(select tenant,locale,url,search_engine,keyword,search_volume,sv_yr_monthfrom (select     LKP.tenant ,MAIN.locale ,lkp.url,MAIN.search_engine,MAIN.keyword,MAIN.count as search_volume,MAIN.as_on_month as sv_yr_month,row_number() over(partition by lkp.tenant,main.locale,lkp.url,main.search_engine,main.keyword ,as_on_month order by as_on_date desc,created_date) rnfrom prod_edp_db_trusted.keyword_metrics_search_volume_dataforseo_v2 MAINJOIN (SELECT  tenant,locale,url,search_engine,keyword,Min(SIM_YR_MONTH) AS SIM_YR_MONTH FROM sim_data GROUP BY 1,2,3,4,5) LKP ON MAIN.locale=LKP.locale AND MAIN.search_engine=LKP.search_engine and main.keyword=LKP.keyword where MAIN.as_on_month IN(SELECT * FROM date_month )) where rn=1 ),base_dataset AS(select srp.tenant,srp.locale,srp.search_engine,srp.device_type,srp.url,srp.keyword,srp.sim_rank,srp.rank,srp.serp_year_month,srp.traffic,srp.serp_as_on_date,srp.simulation_date,srp.SIM_YR_MONTH,sv.search_volume  from serp_data srp left join sv_data sv on  srp.tenant=sv.tenant and srp.locale=sv.locale and srp.search_engine=sv.search_engine and srp.keyword=sv.keyword and srp.url=sv.urland srp.serp_year_month=sv.sv_yr_month  ),sim_wavg as((select *  from base_dataset where sim_yr_month=serp_year_month)union(select tenant,locale,search_engine,device_type,url,keyword,sim_rank,rank,serp_year_month,traffic,serp_as_on_date,simulation_date,SIM_YR_MONTH,search_volume from (select *,row_number() over(partition by tenant,locale,search_engine,device_type,url,keyword,simulation_date, SIM_YR_MONTH order byserp_year_month) base_rn from base_dataset where sim_yr_month<(select min(as_on_month) fromdate_month))t3 where base_rn=1 )),sim_latest_mnth as(select *FROM(select *,row_number() over(partition by tenant,locale,search_engine,device_type,url,keyword ,simulation_date,SIM_YR_MONTH order by serp_year_month desc) base_rnfrom base_dataset) t3 where base_rn=1),final_base AS(selectsim.tenant,sim.locale,sim.search_engine,sim.device_type,sim.url,sim.keyword,sim.sim_rank,sim.search_volume,lkp.serp_year_month,lkp.serp_as_on_date,lkp.RANK as SERP_Rank,lkp.traffic,sim.simulation_date,sim.SIM_YR_MONTH,lkp.search_volume as month_sv ,lst.search_volume aslatest_month_sv,sim.sim_rank-lst.rank as rank_difffrom  sim_wavg simleft join  base_dataset lkpon sim.tenant=lkp.tenant and sim.locale=lkp.locale and sim.search_engine=lkp.search_engineand sim.device_type=lkp.device_type and sim.url=lkp.url and sim.keyword=lkp.keywordleft join sim_latest_mnth lston sim.tenant=lst.tenant and sim.locale=lst.locale and sim.search_engine=lst.search_engineand sim.device_type=lst.device_type and sim.url=lst.url and sim.keyword=lst.keyword)selecttenant,locale,search_engine,device_type,url,keyword,search_volume as "Simulation Month Search Volume",simulation_date,latest_month_sv,traffic as "SIMULATION MONTH TRAFFIC",sim_rank  as "Rank as on Last Simulation",rank_diff as "Rank Difference With Latest Month" ,kw_imp['202204'] as Current_Month,kw_imp['202203'] as Last_Month,kw_imp['202202'] as "2nd_Last_Month",kw_imp['202201'] as "3rd_Last_Month"FROM(selecttenant,locale,search_engine,device_type,url,keyword,search_volume,latest_month_sv,simulation_date,traffic,sim_rank ,rank_diff,map_agg(serp_year_month,SERP_Rank) as kw_impfrom final_basegroup bytenant,locale,search_engine,device_type,url,keyword,search_volume,latest_month_sv,simulation_date,traffic,sim_rank ,rank_diff)order by tenant,locale,search_engine,device_type,url,keyword;FollowCommentMLGuy a year agoPlease make the effort to make your query readable here.Share"


Question: Looking for a for hire mentor

"Hello,We are new to AWS and often seek guidance/mentoring (you show us) direction on current and upcoming tasks ieAWS services setup/managing/optimizingClarification on docs that are outdated/inaccurate/confusingWe currently use DynamoDB with APIs that connect to our websites. We have begun creating amplify apps (internally created and hired outside development)Ideally USA based and/or available 8am-4pm ESTConsidered posting in Expert help but not sure what I should be expecting/asking. (per hour per project etc etc)Thanks in advance,JasonFollowComment"

Answer: "3Accepted AnswerHi Jason,AWS can help you out with a lot of your concerns, with various different options.AWS Enterprise SupportAWS Enterprise Support provides you with concierge-like service where the main focus is helping you achieve your outcomes and find success in the cloud.With Enterprise Support, you get 24x7 technical support from high-quality engineers, tools and technology to automatically manage health of your environment, consultative architectural guidance delivered in the context of your applications and use-cases, and a designated Technical Account Manager (TAM) to coordinate access to proactive / preventative programs and AWS subject matter experts. AWS Enterprise Support is recommended if you have business and/or mission critical workloads in AWS.AWS Professional ServicesAdopting the AWS Cloud can provide you with sustainable business advantages. Supplementing your team with specialized skills and experience can help you achieve those results. The AWS Professional Services organization is a global team of experts that can help you realize your desired business outcomes when using the AWS Cloud. We work together with your team and your chosen member of the AWS Partner Network (APN) to execute your enterprise cloud computing initiatives.Our team provides assistance through a collection of offerings which help you achieve specific outcomes related to enterprise cloud adoption. We also deliver focused guidance through our global specialty practices, which cover a variety of solutions, technologies, and industries.AWS Partner NetworkWhether it’s time to modernize your business, take it into an innovative new territory, or expand your solutions, an AWS Partner can be a game-changer. The robust AWS Partner community features over 100,000 partners from more than 150 countries. This vibrant, diverse network of partners can help you deliver greater value for your business, increase agility, and lower costs.Training and CertificationOrganizations need individuals with cloud skills to help transform their business. AWS Training and Certification delivered a 234% ROI, as quantified by Forrester, by upskilling your existing workforce.* Our content is created by experts at AWS and updated regularly so you can keep your cloud skills fresh.We offer both digital and classroom training. Free digital training allows you to learn online at your own pace. Digital subscriptions unlock exclusive access to training, learning games, labs, practice exams, and more. With classroom training, you can learn best practices from an expert instructor. In addition to in-person classes, virtual training lets you take courses from anywhere. Whether you are just starting out, building on existing IT skills, or sharpening your cloud knowledge, AWS Training and Certification can help you be more effective and do more in the cloud.CommentShareEXPERTLeeroy Hannigananswered 4 months agoEXPERTBrettski-AWSreviewed 4 months agorePost-User-9846257 4 months agoThank you so much Leeroy.. this is exactly what we were looking forShare0You can start herehttps://iq.aws.amazon.com/?utm=WNIOr you can contact partners and get quotes.https://aws.amazon.com/partners/msp/?partner-solutions-cards.sort-by=item.additionalFields.partnerNameLower&partner-solutions-cards.sort-order=asc&awsf.partner-solutions-filter-partner-location-finserv=*allPartners are usually more reliable , a bit expensive, but there are partners who manage small customers as well.Or just get AWS Business Support on your account and you can dial into AWS support for guidance. They wont hand hold you, but give guidance and references to accurate info.https://aws.amazon.com/premiumsupport/plans/CommentShareMuhammadanswered 4 months ago"


Question: Estimates for a1.4xlarge Family and Ubuntu

"When I am trying to get cost estimates from AWS calculator, I can't see option of Ubuntu in the drop down. However I can see all other OS such as (Linux, Redhat, Suse, Windows etc) in the drop down but not Ubuntu.I have selected tier type: a1.4xlarge Family and dedicated instance.Is ubuntu is chargeable for a1 family?FollowComment"

Answer: "0If you select Linux and create a quote, no problemCommentShareEXPERTRiku_Kobayashianswered 2 months ago"


Question: MSK Failover and OS Patch

"IHAC, the customer experienced a failure due to OS Patch failure while using MSK. Our advice on this is to scale up MSK.Here, the customer asked additional questions.What is the minimum period of notice (e-mail) for MSK Patch (a week ago?)?Is the problem caused by the number of partitions or is there any other possible case?The customer is using MSK through a triple redundancy configuration(use multi-az with three instance), so was it impossible to avoid failure through this? I am wondering how to respond when OS Path fails or how to set an alarm.If you have a good guide, please let me know.FollowComment"


Question: Cannot send mails to my second AWS workmail mailbox

"Hello,I successfully configured my DNS settings to use it for AWS workmail. My main email address that I configured first is working perfectly! But I also added a second user with his own email address. This user can perfectly login to the AWS workmail web-app and can send emails from there, but when I try to send email to the address, I immediately get the following error before my mail program can even send the mail:"Recipient address rejected: User unknown in virtual mailbox table."FollowComment"

Answer: "1I'm sorry - I just figured it out. It wasn't even a problem with AWS at all. I host both domains on Plesk on the same server. I did not deactivate the email service for the domain I now use in AWS WorkMail, so my server thought, it has to deliver the mail locally but there wasn't the email address because it is on AWS. So disabling email service for the domain was the solutionCommentShareFloriananswered 2 months agoEXPERTalatechreviewed 2 months agoalatech EXPERT2 months agoThanks for sharing resolution thought!Share"


Question: Can we disable the older versions of TLS when using API Gateway?

"Hey, I am planning on deploying my on premise application and I am exploring options for it and came across AWS API gateway but there is a requirement that my API should be running on TLS 1.2 or higher and the lower versions should be disabled so do we have an option to disable the older versions of TLS for the apis(default REST apis) created by API Gateway without using custom domains.FollowComment"

Answer: "0You can only choose a minimum TLS version for a custom domain in API Gateway. BUT for regional, private, and WebSocket API endpoints in API Gateway, only TLS 1.2 is supported, older versions are not supported. So, no action required from you.https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-custom-domain-tls-version.html#apigateway-custom-domain-tls-version-regional-and-websocketCommentShareJED007answered 5 months agoEXPERTiwasareviewed 3 months ago"


Question: CodeArtifact not adding npm packages to my repository

"I've created in CodeArtifact a domain and a main repository called "MainRepo" with two upstreams stores: npm ("npm-store") and pipy ("pipy-store"). Then locally in my PC I've created a new folder and setup the connection using AWS CLI to "MainRepo" specifying npm as tool. After checking successfully that npm is now pointing to my repository with:npm -d pingI proceeded to install husky and commitlint:npm install husky --save-devnpm install @commitlint/cli --save-devAt this point would expected to see those packages (and their dependencies) showing up in my main repository (or at least the npm-store) but to my surprise neither of them where listed. Then I've made a number of tests, installing other packages but not a single one got added.Finally I've tried with:npm install -g aws-cdkand this was indeed added to my repo and showing up in the CodeArtifact console.Any clues on why the others packages got ignored by CodeArtifact?FollowComment"

Answer: "1Accepted Answernpm uses a local package cache. It will only reach out to the remote repository if it doesn't find the package in the cache. If you want to make sure that packages you request are stored in CodeArtifact, you can clear the cache before running npm install with npm cache clear -f. See https://docs.npmjs.com/cli/v7/commands/npm-cache for the docs.If that wasn't the issue, you can confirm if the npm client made requests to your CodeArtifact repository using CloudTrail.CommentShareCarl Lewisanswered 2 months agoEXPERTalatechreviewed 2 months ago"


Question: How to set Log Retention Expire to Log Group by boto3 or AWS CLI?

"Hello, guys.Thank you for your help in advance.I would like to know how to set Log Retention Expire by boto3 or AWS CLI to Log Group.If you know how to do that, please teach it to me.Thank you.FollowComment"

Answer: "1Hello,Both boto3 and AWS CLI support CloudWatch Logs put-retention-policy.Boto3 put_retention_policy() documentation: https://boto3.amazonaws.com/v1/documentation/api/latest/reference/services/logs.html#CloudWatchLogs.Client.put_retention_policyAWS CLI put-retention-policy documentation: https://awscli.amazonaws.com/v2/documentation/api/latest/reference/logs/put-retention-policy.htmlBest,KevinCommentShareKevin-AWSanswered 3 years ago"


Question: RDS MySQL "validate-password" setting in the parameter group questions?

"I am trying to change the "validate-password" setting in the parameter group, by creating a new parameter group and editing the parameter validate-password=ON. After rebooting the instance and changing the parameter group the parameter validate-password=ON does not work. The same procedure when tried using command line from the following link : https://aws.amazon.com/premiumsupport/knowledge-center/rds-mysql-validate-password-plugin/  works? So my question is what is the purpose of the "validate-password" setting in the parameter group then?FollowComment"


Question: Setting the Step Concurrency Level is doing nothing

"https://aws.amazon.com/about-aws/whats-new/2019/11/amazon-emr-now-allows-you-to-run-multiple-steps-in-parallel-cancel-running-steps-and-integrate-with-aws-step-functions/EMR's latest release allows you to run steps in parallel. This is a great feature. Problem is, when I set this value from it's default of 1 to 10, there is no noticeable change. The Steps still execute in sequential order where only one runs and the others are in pending. I'm setting this value after the cluster is made with the modify-cluster command in the cliEnvironment:Version: emr-5.28.0Application: SparkInstance types: Master(1) ->m4.2xlarge, Cores(2)->m4.xlargeI've tried experimenting with the yarn schedulers, but it seems to make no difference. For the sake of simplicity lets just say it's the default Capacity Scheduler that EMR boots with.Even with the default Yarn capacity scheduler I can successfully do the old hack of tricking EMR into adding more applications to Yarn which will cause them to execute in parallel(desired) as outlined here:https://stackoverflow.com/a/54069971 This works because of the spark.yarn.submit.waitAppCompletion=false property which makes an EMR step complete right away and move on to the next one, even before the Spark application finishes. This is making me think the problem is ultimately EMR not obeying the StepConcurrencyLevel for whatever reason unknown to me. This hacky solution is not ideal, because it basically creates a disconnect from EMR and the Spark job, which means if you wanted to use another aws service like the Serverless Step functions communicating with EMR, certain features may not work correctly (https://aws.amazon.com/blogs/aws/new-using-step-functions-to-orchestrate-amazon-emr-workloads/)Does it matter if the spark app is submitted in cluster-mode or client-mode? Any tips, tricks, or pointers would be much appreciated.I would imagine if it was working you would see two or more "RUNNING" steps on the aws EMR console in the Step tab with that also reflected in yarn (yarn application -list)FollowComment"

Answer: 0Turns out that there is a bug in EMR 5.28.0. This feature only works when you set the step concurrency level during the cluster instantiation. Using the cli to modify an existing cluster doesn't work. It's been reported to AWS. Apparently it works in 5.28.1 according to the support rep.CommentSharenjguyanswered 3 years ago


Question: Best approach to migrate 3 tier angular java and db2 to AWS server less architecture

"Hello,We are looking for migrating existing 3 tier angular java and db2 application into server less AWS architecture.What are the best practices we should consider? Any reference or pointers for documentation would help.This is what we are thinking as part of POCs to start with,POC 1 - Migration of DB2 to Aurora (Not sure, which one we should go with, Aurora provisioned or server less)POC 2 -Angular - AWS s3Java - Lambda and API gatewayDB2 - AuroraThanks in advance.FollowComment"


Question: "CodeBuild Cloudformation artifacts for artifacts2, artifcacts3 and so on..."

"according to documentation -> https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-codebuild-project-artifacts.htmlit only takes one artifact object, and hence creates the primary artifact, but there is no documentation on how to create multiple artifacts..here is another place i've asked the question: https://stackoverflow.com/questions/76197317/codebuildproject-cloud-formation-not-able-to-add-artifact-primary-artifcat1FollowComment"

Answer: "0How about the following document as a reference?Samples are provided for cases with multiple artifacts.You can create multiple output artifacts in buildspec.yml.https://docs.aws.amazon.com/codebuild/latest/userguide/sample-multi-in-out.htmlCommentShareEXPERTRiku_Kobayashianswered 16 days agorePost-User-4840211 16 days agoi was asking about Cloudformation script for codebuild to generate those artifacts.ShareRiku_Kobayashi EXPERT16 days agoSorry, I misread that.I checked the documentation and it certainly does not appear that CloudFormation supports the creation of secondary artifacts.The following AWS CLI and SDK documents seem to indicate that the API itself supports the creation of secondary artifacts, so currently the only way to create them is by using CloudFormation's custom resources.https://boto3.amazonaws.com/v1/documentation/api/latest/reference/services/codebuild/client/create_project.htmlhttps://awscli.amazonaws.com/v2/documentation/api/latest/reference/codebuild/create-project.htmlFor more information on custom resources, please refer to the following documents.https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/template-custom-resources.htmlShare"


Question: CPU spike on the 0 minute mark

"Afternoon all.  Trying to figure out an issue I am having with a specific server group.  These are all part of a target group, running docker and a micro python service.   These are all running Amazon EC2 AMI instances, and there is nothing scheduled on the cron except 2 jobs around 11:45pm only.The issue is we have a lot of traffic on these and every hour for about 5-10 seconds there is a huge spike in latency on the requests.  When these were running on the t3.small series (in testing), the spike was very noticeable, I thought I saw a process 'aws' while watching TOP, but we have moved into production, now running on m6a.xlarges and where the spike/latency is still there and seen in the response time logs, I don't really see anything in TOP (I am assuming with the extra horsepower it goes too quickly).So if anyone has thoughts or ideas on how to see what this is, it would be appreciated as we may not be able to fix it but if we at least know the issue it will be better, we just know the more and bigger CPU's, the less impact it has.Thanks all.FollowComment"


Question: Transfer AWS Billing to another account within Organization

"Currently, we've couple of AWS accounts under organization and among which one account being designated as Billing Account.We would like to change the billing service/controls to another account. Can we perform this change and any relevant documentations/suggestions would be helpfulFollowComment"

Answer: "2When using AWS Organizations, the management account is the payer account and responsible for billing and cannot be changed.https://aws.amazon.com/organizations/faqs/CommentShareGeno_AWSanswered a year agoRob_H EXPERTa year agoAS Geno mentioned you cannot just change it, but you can migrate. Keep in mind you lose all historical Cost Explorer data when doing so and may have additional steps to consider depending on your accounts.ShareVishakh a year agoThank You Geno and Rob Let me brief my scenario for better clarity: Account-1: Billing Account and Master AccountAccount-2Account -xSo, we're planning make Account-2 as Billing Account & Master AccountShareamazonchris a year agoHello Vishakh - as noted by Geno, the management account is also the responsible for consolidated billing.  Per the FAQ: "The owner of the management account is responsible for paying for all usage, data, and resources used by the accounts in the organization."You can migrate to another organization but you will have the same situation and you would need to be mindful that you would lose history and also other Organizations configurations (SCP etc...).   Perhaps it's best if we know what problem you are trying to solve with the configuration you are proposing?Share0Regarding your scenario that you mentioned in the comment:Account-1: Billing Account and Master AccountAccount-2Account -xSo, we're planning make Account-2 as Billing Account & Master AccountYou cannot do this easily / seamlessly by (for example) "promoting" your current Account-2 to Management Payer account. You would have to remove all linked accounts from the current Organization, delete current organization from the Account-1, by doing this you would make all the accounts as Standalone... and then you'd have to create a new Organization on your current Account-2 and invite all other accounts into that organization. Keep in mind that while you will be doing this, the billing will continue. Generally, the whole process can be done relatively quickly if you only have a few accounts, however it's not so straight-forward if you have a lot of them. You'd generally need to do some preparation to make sure all your accounts within the organization are ready for this migration.CommentShareEXPERTNataliya_Ganswered a year ago"


Question: while importing s3 data into quicksight from glue database getting the following error

"HIVE_PARTITION_SCHEMA_MISMATCH: There is a mismatch between the table and partition schemas. The types are incompatible and cannot be coerced. The column 'attributes' in table 'clickstream-ctr-database.care_events_dev1' is declared as type 'structaid:string,kvstriggerlambdaresult:string,sak:string,savecallrecording:string,sst:string,startstreamingaudiostatus:string,transcribecall:string,getlang:string,getaeroplanno:string,getemergency:string,getholiday:string,getlanguage:string,getlanguageselected:string,getpin:string,getpriority:string,language:string,userlanguage:string', but partition 'partition_0=ctr/partition_1=2022/partition_2=04/partition_3=04/partition_4=12' declared column 'attributes' as type 'structgetaeroplanno:string,getemergency:string,getholiday:string,getlanguage:string,getlanguageselected:string,getpin:string,getpriority:string'.FollowComment"

Answer: "1Accepted AnswerHi,I expect that you have used a crawler to add the catalog information, is that correct?The issue that the logs is mentioning is that while for the table the crawler had discovered a the schema with a certain number of nested values in the field attribute that is a struct , at least one of the partition has a different set of valued in the same struct.to avoid that you could try to delete the table and re-run the crawler modifying it to prevent changes to the schema as described here, specifically you could try to configure it to Update all new and existing partitions with metadata from the table  .Also, I am not sure QuickSight will support the data type struct, so you might want to modify the data type to string in the console or via APIs.hope this helps,CommentShareEXPERTFabrizio@AWSanswered a year agoAWS-User-8593327 a year agoThank you @Fabrizio@AWS. It's resolved my issueShare"


Question: Appsync composite key (GSI in dynamodb) returns Null in query response

"Hi, I have a appsync Schema which has composite key@key(name: "FinderJobbyDateWithCompositKey", fields: [ "finder_id", "date", "job_status" ], queryField: "JobsFinderWithCompositKey")I did amplify push and it successfully created GSI with the respective table. the table has the data but when I run queryquery MyQuery {JobsFinderWithCompositKey(finder_id: "+929898989898", dateJob_status: {eq: {date: "2022-04-06T09:00:00.000Z", job_status: "15"}}) {items {cod_chargecreatedAt}}}it give me Null in response.Please specify what is the issue and how to solve and get result.I followed this link:https://docs.amplify.aws/cli-legacy/graphql-transformer/key/#example-get-orders-by-customer-email-by-createdatFollowCommentNoneNone a year agoHello Shaista, can you share more info about your schema (full model) and your resolver templates?ShareMLGuy a year agoThe names of the fields are not the same: date and dateJob_status. The simple way to check for it is to call DynamoDB directly using the AWS CLI for example with the relevant query and see if you get any results. You can also enable the "Logs" option in the AppSync Query and see if you get errors or results.Share"

Answer: "0Hello Shaista,I understand that you followed this guideline to make Amplify push, which successfully created GSI in the corresponding DynamoDB table. The table has expected data, however when you run the query, it is giving you null response. We need additional account specific information in order to troubleshoot this issue. Hence, kindly, reach out to AWS Support and work with Premium Support Engineers to resolve this issue. While creating the support case to Premium Support, you will need to provide following details.•Account ID•Region•Table Name•GSI name•Time frame(10-15 minutes window)•DynamoDB Request ID(Important)CommentShareSUPPORT ENGINEERIsha_Kanswered a year ago"


Question: SES slow to send received emails to S3

I have a verified domain set up in SES that saves received emails to S3 and I do some processing on it from there. This has been working completely as expected for a few weeks (at very low volume) but as of this afternoon it has taken up to 50 minutes for an email to arrive in S3. I have been testing at a slightly higher frequency but not more than once per 10 minutes.Is there anything that could cause this or is SES just slow today?Thanks in advanceFollowComment

Answer: "0Hello AWS-User-9039557There are many factors that can influence the speed of SES:* You could have a bottleneck; test this by sending multiple test emails as quickly as possible.* Using only a single thread or using only a single process.* Having your application far away from the SES API endpoint.* Using only a single machine* And more You can also test SES by using a different email domain, sending email from the SES console, and sending email from Gmail, and comparing the results to see if you have a domain issue.For more detailed information, please follow the links provided below.    https://docs.aws.amazon.com/ses/latest/dg/troubleshoot-throughput-problems.htmlhttps://aws.amazon.com/blogs/messaging-and-targeting/three-places-where-your-email-could-get-delayed-when-sending-through-ses/Please let us know if you have any more questions. We are happy to assist you!CommentShareIssac_Aanswered 10 months agoSUPPORT ENGINEERAjinkya B-AWSreviewed 10 months ago"


Question: Pessimistic locking implementation using AWS code commit

"Hi,We want to implement a pessimistic locking of code commit and wanted to find out steps to implement this. Would appreciate if anyone can provide guidance on this.Thank youFollowCommentDmitry Balabanov a year agoCould you please elaborate why would you need pessimistic locks for a git-based version control system (AWS CodeCommit is based on git)? What is your requirement? Any specific workflow you want to implement or a business process you want to support? Is there maybe another way for achieving what you want?Share"

Answer: "0Hello There,As Dmitry asked, CodeCommit is a Git based system and its concurrency handling follows the same logic as other Git systems (such as to use multiple branches to resolve conflicts merges to main branch), please elaborate your use case so we can better assist you with the best tools / technologies.CommentShareSUPPORT ENGINEERZhiyuan_Lanswered a year ago"


Question: API Key per resource?

"In API Gateway, is it possible to manage usage of different resources per API Key? Like a given API Key lets you use /resource1 but not /resource2?FollowComment"

Answer: "0You can use a Lambda authorizer. The Lambda function will return a different policy to each API key that will specify which endpoints are allowed and which are denied.Saying that, I am not sure this is the right approach. API keys should not be used for authorization. If you are using a Cognito authorizer, you could use scopes to protect the different endpoints.CommentShareEXPERTUrianswered a year agoKevin a year agoOh, I always thought API keys were for authorization. What should they be used for instead?ShareUri EXPERTa year agoAPI Keys should be used for usage plans, i.e., limit the usage by different clients and throttle them if they exceed their quota.ShareChristos S 9 months agoHello coming late to the party but I have the same question. I want to limit resource per API key. As I understand from the docs (https://docs.aws.amazon.com/apigateway/latest/developerguide/api-gateway-lambda-authorizer-output.html) I need to provide the api key of the user in the output of the lambda and in usageIdentifierKey property. My question is how am gonna find out which API key belongs to the calling user?Share"


Question: AWS Codepipeline not serving React from a PHP+React Git repository

"0I am new to AWS and I was creating a Codepipeline for my GIT repository. My frontend is in React and backend is in PHP. So first I created an elastic beanstalk environment for php as backend. Then used AWS codebuild to build my code and finaly created a code pipeline.Now issue is, when I am trying to access the pipeline I can only see php in it. React frontend isn't loading.At first I thought maybe my react code is not getting build so I changed little react code and i got it's update in aws codebuild. So, I guess that's not the problem.Please let me know if anyone needs any specific detail, I'll update my question.This is my yaml file.version: 0.2phases:  install:    # runtime-versions:    #   nodejs: 14.11.0    commands:      # - echo installing node 16       # - curl -sL https://deb.nodesource.com/setup_16.x | bash      # - apt install -y nodejs      # - echo installing Yarn...      # -  curl -sS https://dl.yarnpkg.com/debian/pubkey.gpg |  apt-key add -      # - echo "curl -sS https://dl.yarnpkg.com/debian/ stable main"      # - apt install --no-install-recommends yarn  pre_build:    commands:      - echo Installing source NPM dependencies...      - npm install   build:    commands:      - echo Testing ...      # yarn test      - echo Building ...      - npm run build  post_build:    commands:      - echo Build completed on `date`# Include only the files required for your application to run.artifacts:  files:    - "**/*"base-directory : 'build'    # - config.js    # - index.js    # - reset.js    # - package.json    # - node_modules/**/*FollowComment"


Question: Change Currency for Invoices

"Hi,I need to change the currency from invoices from USD to EURThe documentation mention the Following procedure:Sign in to the AWS Management Console and open the AWS Billing console at https://console.aws.amazon.com/billing/On the navigation bar in the upper-right corner, choose your account name (or alias), and choose Account.In the navigation pane, choose Payment preferences.In the Default payment preferences section, choose Edit.On the Payment currency section, choose the payment currency you want to use.Choose Save changes.In my account connected with the root user I hva no such think as " Payment preferences"Can you please help me with that ?RegardsFollowComment"

Answer: "0Hi,You can change the currency by following the steps outlined here. In summary,In the upper-right corner  on the account alias click the drop downSelect "Account"Search for the "Payment Currency Preference" section and click "edit"Hope this helps!CommentShareSUPPORT ENGINEERLundianswered 6 months agoFabienG 6 months agoHi,Thanks for your answer, but I've not section called "payment Currecny Preference" in my accountShare"


Question: Need Help: i could NOT login as root

"I was re-configuring AWS S3 Bucket policy and Accidentally i got locked myself accessing the S3 bucket.So i tried to login as root to delete the s3 bucket policy But i could NOT login as root.I do have Root account credentials and 2FA device and tried resync the device but i am receiving below error.Authentication failedYour authentication information is incorrect. Please try again.any help would be appreciated.Thanks,BommurajFollowComment"

Answer: 0You can recover the MFA device by following the procedure described in this document.https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_mfa_lost-or-broken.htmlCommentShareEXPERTRiku_Kobayashianswered a month ago


Question: TGW service limits

"I understand that TGWs per account are 5 and this limit can be increased.Also understand that a TGW can have 20 route tables and this limit can be increased.Reference: https://docs.aws.amazon.com/vpc/latest/tgw/transit-gateway-quotas.htmlWithout putting a request for the increase, I need to know what is the maximum/hard limit for both of the values?Please advise.FollowComment"

Answer: "1Hard limits are not published and every limit increase request is subject to review.  AWS Support might approve, deny, or partially approve your requests as mentioned hereThat being said, with 1 TGW in a region you can do upto 5000 attachments (VPC/VPN/DXGW/Connect) you really shouldn't need more than 1 TGW in a region. See below 2 statements from Transit gateway design best practicesYou do not need additional transit gateways for high availability, because transit gateways are highly available by design.For redundancy, use a single Transit Gateway in each Region for disaster recovery.CommentShareEXPERTTushar_Janswered 4 months ago"


Question: is it possible to connect Azure Percept Edge AI Dev kit in AWS

"Hi Team, I have Azure Percept Edge AI Dev Kit, I would like to connect with AWS and work. Is it possible? because I couldn't find any examples in the official document and internet?Could you please guide me here?or is there any other similar kit which is owned by AWS? so I can use.FollowComment"


Question: why my s3 policy generator dosen't work?

"When i try to generate my s3 policy, Add statement dosen't work with messaege "Resource field is not valid. You must enter a valid ARN." even if i copied my arn by my bucket and add "/".principal is "".Anyone can help?FollowCommentJulia_Kokorina a year agoHi. I have the same issue with both, my Isengard account and a private one. Did you open a ticket for this?Shareddavies90 a year agoAlso having this issue and have posted another question on the subject here: https://repost.aws/questions/QUMhcDP_qgR9yza4KrchgJvA/aws-policy-generator-bug-for-s-3-arn-flagged-invalid-despite-not-beingDid you have any luck with this?ShareJulia_Kokorina a year agoI have raised a ticket yesterday about this issue - https://t.corp.amazon.com/D49399423. Hopefully it will be solved soon.Shareddavies90 a year agoGreat news. Thanks for the update.Share"

Answer: "0An answer providing a decent workaround on my post regarding the same issue:"Hi,I understand that you are having an error with creating an s3 bucket policy using the AWS policy generator. I did replicate and received the same error.As a workaround:I inserted a * in the ARN section and generated the policy.I, thereafter, replaced the * with my ARN once it has been generated.Please find the attached ARN Format documentation[1].I hope this helpsResources:-[1] https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html. "Thanks to Asisipho for the answer https://repost.aws/community/users/US0lvBJf90StOho6DSWkZivQCommentShareddavies90answered a year agoAsisipho a year agoGlad to help. 🙂Share0Hello,I understand that you are experiencing the error below when attempting to generate s3 policy:"Resource field is not valid. You must enter a valid ARN."I replicated the issue from my end and I got the same error as yours. I believe that this is a bug from S3 regarding the feature. Therefore, I would suggest that you open a ticket with the S3 team for further assistance in this regard[1]. In the meantime, you may consider creating the policy manually, if you face any challenges I am happy to assist. Feel free to share your use case.Reference:[1] https://us-east-1.console.aws.amazon.com/support/homeI hope the information above is helpful.CommentSharePhindianswered a year ago"


Question: SES' documentation recommends using Punycode for local domain - why?

"As per this SES documentation https://docs.aws.amazon.com/ses/latest/dg/send-email-raw.html:For example, to send an email to 张伟@example.com, use Punycode encoding on the local part of the address (the part before the @ sign). The resulting, encoded address is xn--cpqy30b@example.com.I just tested this on gmail, and unless I did something incorrectly, Gmail seems to just show the ASCII characters - I suspect most email providers will do the same base on the information I found here: https://stackoverflow.com/questions/7497468/can-punycode-encoded-email-addresses-clash-with-real-addressesAm I missing something or should there be a warning in that document and maybe even a better recommendation to convert to ASCII instead?FollowComment"


Question: Newbie guidance on DynamoDB design

"I'm new to DynamoDB and NoSQL, so I'm trying to get my head wrapped around table design.I have a simple app that will accept status reports about a series of locations. Each status report will have a location ID (number), the status (number), and a timestamp (string). I also need to store a description of each location, which will have a location ID (number) and four other values (all strings).The read pattern is to query the most recent status report for a subset of location IDs (that may change each time). I can use the design pattern where you query with a limit of 1 and set Scan Forward to false for each location ID. The report that will be built needs to include the status, the timestamp, and the description for each of the queried locations.The first part of the design is easy -- the partition key is the location ID, and the sort key is the timestamp. Next, though -- how do I store the description data?(Important: the app is supposed to be run via several Lambda functions, so I'm a bit limited in terms of caching the description info. Eventually, the number of locations will be in the thousands.)Option 1: Store the description info in each status report. I will need to do two transactions each time a status report comes in -- read the description info, then write the new status report item including the four description fields. Reads then become easy, as the info is all there.Option 2: Store the store the descriptions as separate items in the same table. Use a Global Secondary Index to query the description info. When a report is run, do two reads for each location, one to get the status and timestamp, one to get the description. Receiving a status report needs only one transaction, a write. If this is the best option, how should I structure the GSI?Option 3: Store the descriptions in a separate table. Everything else is as per Option 2.Any and all advice greatly appreciated.FollowComment"

Answer: "1I suggest you go with Option 2, except I don't know why you're thinking of a GSI. Just put another item into the table holding the location metadata. You can put it under the same location PK if you want, with a SK of #metadata so it sorts at the top and you can retrieve it with a get item.The choice of Option 1 vs 2 depends on if you want to put the work onto the reads or writes. If you do lots more reads relative to writes, you might go with Option 1. The normal pattern though would be Option 2 (no GSI needed).CommentSharejzhunteranswered a year ago"


Question: RDS SQL Server Instance Class cannot be modified.

"For the last few days, I am trying to upgrade an RDS SQL Server web-edition instance from db.t2.small to db.t3.small. but every time i receive the following error.We're sorry, your request to modify DB instance xxx has failed.Cannot modify the instance class because there are no instances of the requested class available in the current instance's availability zone. Please try your request again at a later time.I have also used AWS CLI to check the orderable db-instancesdescribe-orderable-db-instance-optionsThis returns command also shows that orderable instances are available in us-east-1 with instance type as db.t3.small , but still i am unable to change the instance type. Is anyone facing the same issue or has a solution to this ?FollowComment"

Answer: "0A few questions! Which version of SQL Server are you using? And have you tried taking a snapshot and restoring into a db.t3.small to a different AZ in us-east-1?CommentShareAWS-User-0986812answered 3 months agoAWS-User-9032900 2 months agoyes, i tried creating a NEW instance db.t3.small with the same sql server edition, and same AZ, and i was able to create it. so will have to use this option to upgrade the instance to db.t3.small.I am still wondering why the existing instance is unable to upgrade from db.t2.small to db.t3.small, if we can CREATE NEW instances in the same AZ with db.t3.smallShare0Available instances vary across AZs.  In our region we had some instance classes not available at all in one of the three AZs for quite a long time, until AWS eventually commissioned them in the third AZ.  More likely though with a db.t3 is that they're just all already in use in that AZ so you can't get one.  You may need to relaunch your DB in a different AZ.CommentShareEXPERTskinsmananswered 3 months ago"


Question: AWS Billing Report files are improperly formatted (contains columns with no headers)

We are trying to ingest AWS billing data from the billing reports generated in S3 by AWS into our Snowflake datawarehouse. We are using a data extraction tool (Fivetran) to get this task done. The tool is working perfectly for every billing report except one file where we have additional columns with no data and no headers (just additional commas in csv file). Can AWS provide csv files which are properly formatted? it would save us some development time/effort to write code to parse the manifest file.FollowComment

Answer: "0That would be very frustrating.  I would highly recommend opening a support ticket or reaching out to your account team to have us investigate this.If you would like support to investigate your specific issue, you are encouraged to raise a Billing Support Case, in the AWS Console, click on the ? with a circle -> Support Center -> Create Case -> Account and Billing Support. The support folks should be able to investigate your specific account and situation.CommentShareLisa_Hanswered a year ago"


Question: Updating Ubuntu on EC2 instance

"I am running Ubuntu 22.04 on an EC2 instance. It is acting as a virtual host using Apache2 for several domains.When I connect to it with SSH, I get the following output:steve@steve-Inspiron-3268:~$ ssh -i ~/.ssh/key-ub-20220725-1.pem ubuntu@13.41.164.129Welcome to Ubuntu 22.04 LTS (GNU/Linux 5.15.0-1017-aws x86_64) * Documentation:  https://help.ubuntu.com * Management:     https://landscape.canonical.com * Support:        https://ubuntu.com/advantage  System information as of Thu Oct  6 14:52:02 UTC 2022  System load:  0.0                Processes:             110  Usage of /:   26.1% of 24.05GB   Users logged in:       1  Memory usage: 33%                IPv4 address for eth0: 172.31.32.80  Swap usage:   0% * Ubuntu Pro delivers the most comprehensive open source security and   compliance features.   https://ubuntu.com/aws/pro57 updates can be applied immediately.To see these additional updates run: apt list --upgradable*** System restart required ***Last login: Thu Oct  6 14:44:47 2022 from 3.8.37.27ubuntu@ip-172-31-32-80:~$ Do I need to run the following three commands to update the system?sudo apt updatesudo apt upgradesudo systemctl reload apache2Is this something I need to do periodically or can I instruct Ubuntu to do it on a regular basis. I do not want to write a script and run it using CRON because that is getting outside my experience and I am trying to keep my system as simple as possible.FollowComment"

Answer: "1Accepted AnswerRestarting apache is not enough. You need to restart the server as you can see in the prompt of you machine:*** System restart required ***Kernel updates require a restart, otherwise the are not being applied.If you want automatic update you have to install "unattended-upgrades" an configure what you want to be installed automatically.CommentSharerePost-User-6972953answered 8 months agorePost-User-8454414 8 months agoIs that done from EC2 console > Instance state > Reboot instance ?Share"


Question: Where is MySQL database located?

"Hello all,I'm trying out aws and wasn't able to figure out where exactly is the SQL database located for my Wordpress website.In other hosting companies, it's usually under cPanel. But here in Lightsail, I can't see it anywhere.I'm running the bare min EC2 instance with Wordpress installed.FollowComment"

Answer: "1Hi,I d suggest To look into this doc: https://lightsail.aws.amazon.com/ls/docs/en_us/articles/amazon-lightsail-connecting-to-your-mysql-database.Hope it helps ;(CommentShareEXPERTalatechanswered a month ago0To access the database on your Wordpress instance, SSH into the instance and run the following command:sudo mysql -u root -pYou can get the credentials by running:sudo cat /home/bitnami/bitnami_credentialsTo connect your WordPress website to a MySQL managed database in Amazon Lightsail, follow the steps provided here:https://lightsail.aws.amazon.com/ls/docs/en_us/articles/amazon-lightsail-connect-wordpress-to-mysql-managed-database.CommentShareAWS-User-6091936answered 22 days ago"


Question: AWS Lambda nltk error: No module named 'regex._regex'

"Hi,I'm using python 3.9 with AWS Lambda. In the lambda I'm using nltk module for few operations.For creating the layer, I've done the following:python3.9 -m pip install nltk==3.6.3 -t <<lambda_function>>/pythonCreated a layer in template.yml :    XXXNLTKLayer:    Type: AWS::Serverless::LayerVersion    Properties:      ContentUri: <<lambda_function>>/python/      LayerName: nltk-layer      CompatibleRuntimes:        - python3.9      CompatibleArchitectures:        - x86_64    Metadata:      BuildMethod: python3.9 I'm testing both in Sam local invoke and AWS console after publishing, getting the following error:{"errorMessage": "Unable to import module 'app': No module named 'regex._regex'", "errorType": "Runtime.ImportModuleError"I'm not able to get a workaround for this using existing google suggestions. I tried with latest version of nltk package but it's giving me the same issue. If someone has encountered this please suggest me a way.FollowComment"

Answer: "1Accepted AnswerHello, Thank you for your query.As you are getting error as ‘ No module named 'regex._regex’. This error generally occurs when the ‘regex’ module is not installed. For this you need to install ‘regex’ module. You can try the following command for installing the ‘regex’ module.pip install regex Orpip install -U regexHope that after installing the regex package you will not encounter with the error. If problem still persists please open a support case with AWS using the following link: https://console.aws.amazon.com/support/home#/case/createReferences :https://pypi.org/project/regex/https://github.com/nltk/nltk/issues/2870https://stackoverflow.com/questions/64498145/aws-lambda-python-unable-to-import-module-lambda-function-no-module-named-rCommentShareAamiranswered a month agorePost-User-2101719 a month agoIt has worked. The solution is given in the link you shared : https://github.com/nltk/nltk/issues/2870 Adding regex>=2021.8.3 in the requirements file. ThanksShare"


Question: How long does restoration of data take on AWS Backup ?

"Hello AWS community, I couldn't find the approximate time required to restore backups from AWS Backup service. On this page (https://docs.aws.amazon.com/aws-backup/latest/devguide/restoring-a-backup.html), it mentionedRestoring from cold storage typically takes 4 hours more than restoring from warm storageDoes someone have an idea about the approximate time range for restoring from warm storage please ?Thank you by advance.FollowComment"

Answer: "0In general time to restore from a recovery point using AWS Backup depends on the size of the data and type of resource being restored. As each restore differs based on the resource type and size of data being restored a time frame cannot be estimated.  Since only the first backup is full and rest are incremental backup, restore operations generally take longer than the corresponding backup.For EFS restoration you can expect the following backup rates with AWS Backup:100 MB/s for file systems composed of mostly large files.500 files/s for file systems composed of mostly small files.The maximum duration for a backup operation in AWS Backup is seven days.For more details on EFS restore refer to article >https://docs.aws.amazon.com/efs/latest/ug/awsbackup.html#efs-performanceCommentShareSUPPORT ENGINEERSathyaanswered a year ago"


Question: Dynamodb : Need sorted + filtered + paginated data

"Hi All,Need some help around dynamodb.We have an app which process the a batch of 44K records and saves the data to DDB table.This hasPK (run_id_random_number)SK (run_id)We want to fetch the filtred datapage by page and in a sorted way .Lets say there 20 attibutes pre row and we have to filter the data byregion,country,statusfor example region='Europe' & country='Luxembourg'the total number of records come down to 20K,and have to sort on status attiribte.How can I get records in a paginated manner(page size is 500) ?Thanks,AshishFollowComment"

Answer: "0Accepted AnswerYou must use Scan with a FilterExpression to achieve your use case.You can set the Limit to 500, but keep in mind that the Filter is applied after the limit is reached, so you are only guaranteed ~500 items, not exactly 500.A single Scan operation reads up to the maximum number of items set (if using the Limit parameter) or a maximum of 1 MB of data and then apply any filtering to the results using FilterExpression. If LastEvaluatedKey is present in the response, you need to paginate the result set. For more information, see Paginating the Results in the Amazon DynamoDB Developer Guide.this will filter the data , I need the data to be ordred by one of the columns In this case , I need the data to be sorted by 'status' attribute ,, status attribute can have values (PASS,FAILED,EVALUATING,DEGRADING,<>)If you need all your data ordered by status, then you would have to create a GSI with a static partition key and status as sort key.GSI_PKGSI_SKData1DEGRADINGData1PASSData1PASSDataThis would ensure you can get the data returned sorted by the sort key as DynamoDB does not provide sorting across partition keys. Keep in mind this solution would limit your writes to 1000 WCU per second. If you require more you can shard the partition key.CommentShareEXPERTLeeroy Hannigananswered 8 days agoAshish 8 days agothis will filter the data , I need the data to be ordred by one of the columnsIn this case , I need the data to be sorted by 'status' attribute ,,status attribute can have values (PASS,FAILED,EVALUATING,DEGRADING,<>)ShareLeeroy Hannigan EXPERT8 days agoUpdated my answer.ShareAshish 6 days agoThank you ,it there a possibility to sort by multiple attibutesShare"


Question: Will RDS add a query accelerator like Heatwave to MySQL

Will Amazon add or even give the option to include a query accelerator like Heatwave which improves MySQL performance more than considerably and is way faster than Aurora?FollowComment

Answer: "0A HeatWave Cluster consists of a MySQL DB System and HeatWave nodes. The MySQL DB System includes a HeatWave plugin that is responsible for cluster management, query scheduling, and returning query results to the MySQL DB System. HeatWave nodes store data in memory and process analytics and machine learning queries. Each HeatWave node hosts an instance of the HeatWave query processing engine (RAPID).On AWS, We have the Aurora MySQL parallel query which is an optimization that parallelizes some of the I/O and computation involved in processing data-intensive queries. This data-intensive work is delegated (in database optimization terms, pushed down) to multiple nodes in the Aurora distributed storage layer. Parallel query works best with Aurora MySQL DB clusters that have tables with millions of rows and analytic queries that take minutes or hours to complete. Therefore, we have Parallel Query that works as a query accelerator for Aurora MySQL.Please refer below document for more details on working with parallel query for Amazon Aurora MySQL:https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-mysql-parallel-query.htmlCommentShareSUPPORT ENGINEERAdilAmeenanswered 9 months ago"


Question: How to decrease size of boot volume on M5 instance using NVMe ?

"I tried following this article to decrease the volume and replace the boot, but it does not work with NVMe based volumes...https://medium.com/@m.yunan.helmy/decrease-the-size-of-ebs-volume-in-your-ec2-instance-ea326e951bceCan anyone offer any help on how to accomplish this?I wish AWS would PLEASE offer a way to easily decrease a volume ( the same way they do with increasing one ). :-/FollowComment"

Answer: "0Hello thereThanks for reaching out to AWS via forum support.Please note that decreasing the volume size is not supported from AWS. There are many 3rd party article trying to achieve this but we would not comment about its effectiveness. The only effective way is to launch another instance with smaller root volume and then migrate your data.CommentShareAWS-User-7041766answered 2 years ago0This is not helpful.CommentShareMike Yrabedraanswered 2 years ago0From "PAID" AWS Support ...********* Please note, before performing the following steps, I would suggest you to take a back up of your instance by taking the EBS snapshot and creating an AMI of instance :[+] https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-creating-snapshot.html[+] https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/creating-an-ami-ebs.htmlNote: Since the steps for this use case involve changes at filesystem and grub level, it is recommended to test them first in a test environment before using them for a production instance. You may consider creating an AMI/snapshot of current instance (creating the snapshot of the root volume is anyways required), launch a new instance from the same and then perform these steps on the new instance. Once it is confirmed that everything is working correctly and volume size is decreased, you may repeat the same on your production instance.[+] Launching instance from AMI : https://aws.amazon.com/premiumsupport/knowledge-center/launch-instance-custom-ami/Please understand, there is no official documentation that has been released by AWS regarding the same. I shall be sharing with you the steps that I have tried in my test environment and have confirmed that they work fine.================Steps:-Stop the instance whose EBS root volume needs to be reduced. Let us call this original instance. We will be working with only this instance and no additional instances.Create a new EBS volume of size 400 GB in the same Availability Zone as that of the original volume.Attach the new volume to the instance original instance as /dev/sdf.Start the original instance and SSH into it.Execute the following commands$ sudo sulsblkExample:-lsblkNAME        MAJ:MIN RM SIZE RO TYPE MOUNTPOINTnvme0n1     259:1    0   8G  0 disk`-nvme0n1p1 259:2    0   8G  0 part / ---> Original volumenvme1n1     259:0    0   2G  0 disk   ---> New VolumeCreate a partition in the new EBS volume using the following command:fdisk /dev/nvme1n1 Remember to use the correct device name.  Note: Press 'n' after executing the above command to create a partition and accept all the defaults ( Create a primary partition 'p' and the partition number should be '1'. Let all other values remain default). When prompted to enter a command again, press 'w' to write the changes made into memory.Create a new XFS filesystem on the partition created in the new EBS volume using the following command:mkfs.xfs /dev/nvme1n1p1Mount the new EBS volume using the following command:mount /dev/nvme1n1p1 /mntCopy the contents from current EBS volume to the new EBS volume device using the following command:rsync -aAXv --exclude={"/dev/","/proc/","/sys/","/tmp/","/run/","/mnt/","/media/*","/lost+found","/","/mnt"} / /mntExecute the following command to add some bind mounts to prepare for doing chroot.for dir in {/dev,/dev/pts,/sys,/proc}; do mount -o bind $dir /mnt$dir; doneChroot to the new EBS volume device using the following command :chroot /mnt /bin/bashMake sure that that the chroot command has executed successfully, without any errors.Note the UUID of the new EBS volume using the following command :xfs_admin -u /dev/nvme1n1p1Note the UUID of the original EBS volume using the following command :cat /etc/fstabReplace the existing UUID (the one found in /etc/fstab) with the UUID of the new EBS volume device (found in Step 19) in /etc/grub2.cfg using the command:sed -i 's/<UUID found in /etc/fstab>/<UUID of new EBS volume device>/g' /etc/grub2.cfgExample:-sed -i 's/388a99ed-9486-4a46-aeb6-06eaf6c47675/cbfd60ce-27af-4e5c-a860-0afe55f854df/g' /etc/grub2.cfgReinstall grub in the new EBS volume and update the grub config :grub2-install /dev/nvme1n1grub2-mkconfig -o /boot/grub2/grub.cfgEdit the file /etc/fstab and change the root filesystem UUID to the one you got from step 12.Save and exit the editor.Exit from chroot :exitStop the original instanceDetach the original and new EBS volumes from the original instance.Attach the new EBS volume to the original instance as /dev/sda1 and start the instance.Wait for the original instance to pass status checks and SSH into the instance. Verify everything is working as intended.Please note, I would like to reiterate here that since the above steps involve changes at the filesystem and grub level, I would suggest that you try these steps on a test instance before using them on a production instance.CommentShareMike Yrabedraanswered 2 years ago0Hi there, step 9 and step 10 are confused because step 9 exclude directories which used in step 10. After step 9, there is no /mnt/dev for example.CommentSharehaianswered a year ago"


Question: Private EKS cluster setup

"Hi,For private EKS how can i configure networking via proxy incase i have TGW in my route table and my cluster should use proxy in between to go over internet.Thank you.FollowComment"

Answer: "0If you want to set up a proxy for containerd, set the following UserData in launch template of managed node group.Content-Type: multipart/mixed; boundary="==BOUNDARY=="MIME-Version:  1.0--==BOUNDARY==Content-Type: text/cloud-boothook; charset="us-ascii"# Set the proxy hostname and portPROXY=${ProxyIP}:${ProxyPort}MAC=$(curl -s http://169.254.169.254/latest/meta-data/mac/)VPC_CIDR=$(curl -s http://169.254.169.254/latest/meta-data/network/interfaces/macs/$MAC/vpc-ipv4-cidr-blocks | xargs | tr ' ' ',')# Create the containerd systemd directorymkdir -p /etc/systemd/system/containerd.service.d# Configure containerd with the proxycloud-init-per instance containerd_proxy_config tee <<EOF /etc/systemd/system/containerd.service.d/http-proxy.conf >/dev/null[Service]Environment="HTTP_PROXY=http://$PROXY"Environment="HTTPS_PROXY=http://$PROXY"Environment="NO_PROXY=172.20.0.1,$VPC_CIDR,localhost,127.0.0.1,169.254.169.254,.internal,s3.amazonaws.com,.s3.ap-northeast-1.amazonaws.com,api.ecr.ap-northeast-1.amazonaws.com,dkr.ecr.ap-northeast-1.amazonaws.com,ec2.ap-northeast-1.amazonaws.com,ap-northeast-1.eks.amazonaws.com"EOF# Reload the daemon and restart docker to reflect proxy configuration at launch of instancecloud-init-per instance reload_daemon systemctl daemon-reload cloud-init-per instance enable_containerd systemctl enable --now --no-block containerd--==BOUNDARY==I hope you find my previous post on Private Clusters helpful as well.https://dev.to/aws-builders/configure-actions-runner-controller-with-proxy-in-private-eks-cluster-36ffCommentSharehayao-kanswered 2 months ago"


Question: How can I get access to buckets in another region in VPC environment?

"Hi,To make sagemker model in us-west-2 can get access to Redis Cluster in us-west-1, I ran this model in VPC environment in us-west-2 and used a peering connection. However, the problem coming with VPC is that this model can not get access to objects in us-west-1 S3 buckets anymore.In VPC, I can set a Gateway endpoint so that it can get access to us-west-2 buckets. However, I can not set a Gateway endpoint for us-west-1 bucket, cause VPC is in us-west-2.May I ask what should I do so that the sagemaker model can get access to us-west-1 buckets?FollowComment"

Answer: 0refer to below linkhttps://repost.aws/knowledge-center/vpc-endpoints-cross-region-aws-serviceshttps://aws.amazon.com/getting-started/hands-on/getting-started-with-amazon-s3-multi-region-access-points/CommentShareAWS-User-3429271answered a month ago0Gateway endpoints are available only from within the VPC. If you are looking to setup remote connectivity then you need to setup VPC Interface Endpoints.Refer the section: Cross Region endpoint accesshttps://docs.aws.amazon.com/whitepapers/latest/building-scalable-secure-multi-vpc-network-infrastructure/centralized-access-to-vpc-private-endpoints.htmlCommentShareEXPERTTushar_Janswered a month ago


Question: Method for converting all values of a field to string when querying with Ion SerDe?

"I have some event logs stored as Ion data in S3, and I am trying to query it using Amazon Athena's Ion Hive SerDe. One of the datafields that is in most of our events is typically an int, but in a few events the value for the datafield is a string. I have tried specifying the datafield as a STRING when creating the external table, which works most of the time, but sometimes returns a HIVE_BAD_DATA error that says the SerDe cannot convert from IonIntLite to IonText. Since the Ion SerDe requires homogenous data, is there an official way in Athena to make all values conform to string when querying? The datafield is an ID so we often just need to check equality to an ID number. Or, is there a way to just ignore any entries that have the datafield not as the type we specify (i.e. specify the ID as BIGINT, and have Athena ignore any events with a string ID)?FollowComment"


Question: Enabling/disabling an entity?

"Hi folks,I'm attempting to enable and disable an entity (with Transform, Static Mesh, Rigid Body Physics and Mesh Collider components) via Lua scripting, using the following code:GameEntityContextRequestBus.Broadcast.DeactivateGameEntity(entityIdHere);GameEntityContextRequestBus.Broadcast.ActivateGameEntity(entityIdHere);However this appears to actually do nothing at all. In Unity or similar this is as simple as setting a property of the entity (like isActive) to true or false via the code, however this isn't possible in LY and even the way to do it through EBuses doesn't seem to work!All I want to do is remove, and then bring back, this entity in the scene, including visuals and physics.Follow"

Answer: "0Accepted AnswerHello @REDACTEDUSERI see what you are attempting to do. By calling these EBus methods you would get the Activate() and Deactivate() methods called on GameEntityContextComponent.cpp which doesn't really do much other than connect and disconnect to some buses and resets the AssetCatalog.To be able to disable and enable entities and their associated components in 1.8, we recommend using the SimpleStateComponent. The SimpleStateComponent allows you to define several states and allows you to assign entities to those states. When a state is enabled all of the entities and the components for each entity is activated, conversely when a state is disabled all of the entities in that state and their components will be deactivated.Let us know if that helps!Thanks!ShareEXPERTrePost-User-8100776answered 6 years ago0Hi @REDACTEDUSERSharerePost-User-8353690answered 6 years ago0I come here to help, but there isn't enough data to make a focused answer.I believe he have to post his script then it will be way more clear to understand why it doesn't work.SharerePost-User-7621041answered 6 years ago0Thanks! @REDACTEDUSERSharerePost-User-8841100answered 6 years ago0@REDACTEDUSERSharerePost-User-8841100answered 6 years ago"


Question: AWS QuickSight Best Practice for creating SPICE

Is it a best practice to create multiple SPICE databases for a single analysis and dashboard creation? Will this add significant monthly cost compared to creating only 1 big SPICE database?FollowComment

Answer: "0Hi, @ZeBron.I understood that SPICE database = dataset.You can calculate the capacity in the following way.https://dev.classmethod.jp/articles/quicksight-spice-sizing/The SPICE usage can be calculated from the field size and the number of columns.The answer is that when you create your analyzes and dashboards it depends on the data structure as the cost will vary depending on how many unnecessary fields and rows are included.The number of SPICE datasets by itself does not matter.CommentShareEXPERTiwasaanswered 8 months ago0HI, First of all there is no Terminology as Spice Databases in QS. Its a in-memory Datastore in spice where you can import Data from your sources like(S3, Athena etc) to serve low latency Visualizations. So for example if you have a scenario where you need a analysis which needs fast execution, needs to be used multiple times and need to join data from multiple datasets , then as a best practice u should all those datasets imported to spice engine . Infact this will be a cost efficient rather than querying a source directly which has cost implications of querying it.Refer this link - https://docs.aws.amazon.com/quicksight/latest/user/spice.htmlAlso the cost of Spice engine is charged per GB/Month and has no co relation with how many  datasets you have in spice engine.So import datasets in spice diligently only for analysis in scenarios mentioned above(refer the link above)Please refer pricing link -https://aws.amazon.com/quicksight/pricing/ThanksCommentSharerePost-User-8827802answered 8 months ago"


Question: CloudWatch Dashboard

Hi AllIs there a way to merge 2 separate CloudWatch Dashboards into one programmatically?I have one dashboard that gets created through a CloudFormation stack and another through a different stack. There really is not an option to insert both in the same stack so I was wondering if  there is any option that I can export the 2 dashboards (which I have been able to do ) and merge into a single JSON (struggling here - how to do that? Any simple API that allows us to do it) and create a new one.ThanksFollowComment

Answer: "1Accepted AnswerYes, there is.  It's however not a single command.If we look at the available CLI commands, you'll need:get-dashboard: you retrieve the dashboard in JSON format. You are interested in the "widgets" array. You apply this API to dashboard1 and dashboard2Now use your preferred method to extract the widgets element from the DashboardBody of dashboard1Use your preferred method to inject these widgets into the DashboardBody of dashboard2 (under the widgets element of course)put-dashboard: to create a new dashboard or update an existing one if you give it a name of an existing dashboardPlease see:Dashboard Body Structure and SyntaxCW CLI commandsCommentShareAWS-User-3784395answered 3 years ago"


Question: Error to view table

After using a crawler to create a table it shows the following error which I don't know how to fix.FollowComment

Answer: "1This is a typicallya permission issue (Resolve it by adding the permissions in AWS Lake Formation. Under Data Lake Permissions, make sure your user has atleast the 'Describe' and 'Select' permissions on the database and the table.)or a Table definition issue (Check with SHOW CREATE TABLE statement).Please refer to AWS Support ArticleCommentShareAnanth Tirumanuranswered 3 months ago"


Question: SMS/Email Localisation in Cognito

"Hi,We are planning a migration to Cognito for our authentication infrastructure, just wanted to find out the best way to send localised notifications (forgot password, email verification etc.) to users in different countries. I know we can send custom lambda triggers, but I couldn't find a documentation related to localisation which I believe is an important topic, thanks in advanceFollowComment"

Answer: "0The nationality of the user is best stored in a custom string attribute of the user pool. Any lambda processing some trigger can then lookup the the value for the user in question.Easiest would be to let an external email system do the localization. Usually a system like that will have mail-merge features and localized Content Management System. Lambda triggers can be used to do the right API calls on you system.https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-custom-sender-triggers.htmlThe custom message triggers is a way to go if you want a lighter weight solution. In these methods you could lookup the nationality and return a email body in the right language. Be aware though that emails have a nasty way of specifiying content and styling. The customer messages are maxed at 20,000 UTF-8 characters. This seems a lot but it is reached sooner than you think when a lot of styling is used for various email client / phone sizes.CommentShareJaccoPKanswered a year ago"


Question: Redirect Issue with WP after replacing all HTTP references

"Hi Gang! I incurred a redirect issue and now I am unable to log in to the WP admin console. Now I just started this website and unfortunately I did not back it up, that was my intention after completing this whole processThe first thing I did was getting through the following steps:https://lightsail.aws.amazon.com/ls/docs/en_us/articles/amazon-lightsail-using-lets-encrypt-certificates-with-wordpressAfter downloading the Really Simple SSL plugin and activating it, I was notified that my request was not successful due to what turned out to be the mixed content warning. Certificate had been issued, however after viewing the page source it turned out that there were CSS and JS files had HTTP referencesI then downloaded the HTTP to HTTPS Remover plugin, replaced all referencesI then went ahead and clicked Go Ahead, activate SSLThe site now does not work and I am unable to log in to the console. It keeps redirecting ( https://www.DOMAIN.com/wp-login.php?redirect_to=https%3A%2F%2Fwww.DOMAIN.com%2Fwp-admin%2F&reauth=1). Not sure if disabling the main theme and then manually load a new one would fix this as  I deleted all default themes and only have the Ocean Extra theme withe the Elementor page editor on the site. I can only gather that going into hta access file might be an option for a solution. Has anyone got an easy fix/explanation for this?FollowComment"

Answer: "0I would suggest removing the Really Simple SSL plugin plug-in, get your blog configured with SSL, then consider forcing a redirect.Personally, I like to handle the redirect at the web server level with a rewrite rule.CommentShareDavid Ganswered 4 years ago"


Question: Is there a way to increase AWS Connect module "Invoke AWS Lambda function"  timeout?

"We were troubleshooting an issue for the customer and encountered the flow wherein the call is routed to the error branch due to the timeout.The Invoke AWS Lambda function timeout is maxed out at 8 seconds but the query to the API takes about 11 seconds.The Lambda is already set at 10mins, but it seems the timeout in connect takes precedence.Is there a way to increase the timeout in the AWS Connect module "Invoke AWS Lambda function" to more than 8 seconds?FollowCommentdmacias 2 months agoDefinitely look at how to speed up your Lambda. Remember that in telephony any pause grater than 5 seconds can confuse the caller and make them think the call hung up.Share"

Answer: "0Hi,you are correct, it is not possible to extend the timeout of 8 seconds for invoking lambda functions associated with AW Connect, as also this guide shows in a screenshot: https://docs.aws.amazon.com/connect/latest/adminguide/invoke-lambda-function-block.html.You could try to decrease lambda execution with mechanisms such as Snapstart  (if Java based) or Provisioned concurrency.Hope it helps ;)CommentShareEXPERTalatechanswered 2 months ago0For processing which may take more than 8 seconds, you can do your work asynchronously. For more details see the blog at https://aws.amazon.com/blogs/contact-center/use-asynchronous-lambda-functions-with-amazon-connect/CommentSharelukwarneanswered 2 months agoEXPERTAWS-samfredreviewed 2 months ago"


Question: Unable to restart apache

"Hi,I started a lightsail instance for Django. Everything was working fine and was able to access the domain. The last thing I was doing was trying to redirect non-www to www. and it worked. The second day I tried to log to the domain I get the following:This site can’t be reachedwww.realjetset.com refused to connect.Also, i cannot restart apache with the following commandsudo /opt/bitnami/ctlscript.sh restart apacheit gives: Failed to restart apache.I even created a new instance and followed exactly the procedure on https://aws.amazon.com/getting-started/hands-on/deploy-python-application/and I end up getting the same errors. I think all are related to one issue or error i made. Appreciate any help as I am stuck and my beginner's luck seems to have run outFollowComment"

Answer: "0Check your server logs for the problem.CommentShareDavid Ganswered 2 years ago0it didn't help, there were no traces of that day work. Thank you for your help, but creating a new instance made it work with a little turnaround that works fine for a demo.THank youCommentSharerabihanswered 2 years ago"


Question: Add Party to Call without Putting Other Parties on Hold - Amazon Connect

We have a requirement where we need to do a warm transfer or add other parties to an active call but we can't put the first caller on hold.  It's a for mental health hotline so keeping the caller active on the call while we add other emergency services is critical.  Is anyone aware of a way add a party to an active call without putting anyone on hold with Amazon Connect?Thanks!FollowComment

Answer: "1Connect does not support this natively, and to complete a conference then transfer, the 3rd leg of the call must pickup before additional steps can be taken like join all the legs together.CommentShareClarenceChoianswered 8 months agoAnthonyU 8 months agoThanks for your answer, Clarence.  Is there a "non-native" to accomplish this?  Because of the mental health-line use case, it may be unsafe to put the caller on hold while emergency services are contacted.  When a conference call being initiated, it also puts the caller on hold, I believe.Share0You can use a transfer flow to conference before dialing the number - note this will still put the caller on hold while setting up the new call leg, but it's only 1-2 seconds, then the caller and agent can both hear the call being dialled.Create a Transfer to queue flowAdd a Hold customer or agent block with status Conference allAdd a Transfer to phone number block with the number you want to conference inPublish the flowCreate a quick connect for a queue (doesn't matter which one), selecting the new flowAdd the quick connect to the relevant queue(s) so it appears for the agentSince you mentioned emergency services, note that there are some limitations called out in the AWS service terms - see section 54.2 under https://aws.amazon.com/service-terms/CommentSharelukwarneanswered 8 months agoEXPERTAWS-samfredreviewed 2 months agoAWS-samfred EXPERT2 months agoThanks for this lukwarne! I learned something new today :)Share"


Question: Security implications of SourceArn (as in AWS::Lambda::Permission)

"These two doc pages:https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-permission.htmlhttps://docs.aws.amazon.com/lambda/latest/dg/API_AddPermission.htmlhave a note:bq. If you grant permission to a service principal without specifying [SourceArn], other accounts could potentially configure resources in their account to invoke your Lambda function.I'm unclear on what, exactly, that means.Let's say I specify a Principal of "s3.amazonaws.com", and I leave SourceArn blank.  Does that mean my lambda could be invoked by any random person's S3 bucket, if they managed to find my Lambda's ARN and configure their bucket accordingly?Edited by: SyntaxColoring on May 27, 2020 9:32 PMFollowComment"

Answer: "0Accepted AnswerAnswering my own question.Yes, if you leave SourceArn blank, other accounts really will be able to execute your Lambda function.I tested this as described here: https://github.com/terraform-providers/terraform-provider-aws/pull/12794#discussion_r431612010CommentShareMaxpmanswered 3 years ago"


Question: RDS: Postgress Instances missing from dashboard

"Hi All, I had 2 instances of postgresSQL running as part of AWS RDS. I had missed the payment for the last billing cycle n the services got suspended. I paid the bills right now and am able to access other services like s3. However not able to find the db instances in the RDS dashboard. Able to see the last backup for the database was done yesterday. Will the instance be restored or should I create a new one ? Any idea how to go about it ?FollowComment"

Answer: "0Hi there, if an account gets suspended for non-payment, RDS takes a snapshot of and then deletes each RDS instance. If the account is reactivated within the available time frame, the customer needs to restore each instance from its snapshot.You can see here the instructions on how to restore an RDS instance, and this link has more information on procedures and timelines for reactivating a suspended AWS account.CommentShareValter_Ranswered a year ago"


Question: "Can I delete Aurora 3 User ( rds_superuser_role, AWS_COMPREHEND_ACCESS, AWS_LAMBDA_ACCESS, AWS_LOAD_S3_ACCESS, AWS_SAGEMAKER_ACCESS, AWS_SELECT_S3_ACCESS)"

Can I delete Aurora 3 User by 'drop user 'rds_superuser_role'@'%'?rds_superuser_roleAWS_COMPREHEND_ACCESSAWS_LAMBDA_ACCESSAWS_LOAD_S3_ACCESSAWS_SAGEMAKER_ACCESSAWS_SELECT_S3_ACCESSFollowComment

Answer: "0The straightforward answer would be no. These are the default roles created during instance creation and their functionalities are as follows :AWS_COMPREHEND_ACCESS - Aurora internal maintenance usageAWS_LAMBDA_ACCESS - Aurora MySQL call lambda functionAWS_LOAD_S3_ACCESS - Upload to S3 bucketAWS_SAGEMAKER_ACCESS - Aurora internal maintenance usageAWS_SELECT_S3_ACCESS - Downloading from S3 bucketrds_superuser_role - superuser roleHence, these are the default roles, except 'rds_superuser_role', any other roles cannot be deleted. But, I would recommend you to keep the 'rds_superuser_role' role as untouched. An attempt of deleting other roles will result into below error :ERROR 1396 (HY000): Operation DROP USER failedYou can also confirm all these default roles on instance creation using the SQL command,SELECT * FROM mysql.role_edges\GI hope I have answered all your queries.CommentShareRajat_Sanswered 6 months ago"


Question: CloudFront and es2

"If one of my domain names points to the es2 server, do I charge for using CloudFront.net to obtain files under this domain name? Is it for free?FollowComment"

Answer: "1Accepted AnswerI am assuming when you say es2, you mean EC2? If so, please see below.Integrated with AWS, there are no transfer fees for origin fetches from any AWS origin such as Amazon Simple Storage Service (S3), Amazon Elastic Compute Cloud (EC2), or Elastic Load Balancers.So, the data transfer fee from the origin is free. However, you still pay for on-demand pricing for transfer out to internet and HTTP requests. Please see Amazon CloudFront Pricing. There are other feature pricing so make sure to take a look at the pricing page.CommentShareTaka_Manswered 7 months agoEXPERTToni_Sreviewed 7 months agorePost-User-6752305 7 months agothank you very much!Share"


Question: Test session is no longer eligible for launch. I have problem with exam

"HiToday I had an exam schedule at 8AM São Paulo Brazil time zone. However, the system did not permit me to launch the exam. Every time I click on the Launch Exam button I receive the same message: Test session is no longer eligible for launch. It is more than 30 minutes after your scheduled session start time.I have some print screens that prove the system was not working as expected.Someone help to understand what happened and help to reschedule a new date as soon as possible.Exam informations:Candidate ID: AWS01801088CONFIRMATION NUMBER: F77170377EXAM DATE: Dec 06, 2020EXAM TIME: 08:00 AMTIME ZONE: America/Sao_PauloRegards,Fernando RochaFollowComment"

Answer: "0Hi Fernandoroch4,This was due to a discrepancy with daylight savings time which Brazil stopped using. Any testers in Brazil who missed their exam due to this discrepancy will be supported and issued a retake voucher from PSI. You should hear back from PSI soon. If you do not hear from them within 5 business days, please submit a ticket to our Customer Support team at https://support.aws.amazon.com/#/contacts/aws-training and we will investigate accordingly.Thanks!MichaelB-At-AWSCommentShareAWS-User-3377119answered 2 years ago"


Question: Can ISV know that buyer is being redirected via CPPO from AWS

I have a product listed as ISV for selling in AWS marketplace. Let's say I authorize a channel partner to resell this product. As customer still has to come to our website(ISV) for registration. Is there a way we can know that this redirection is via channel partner not via our direct listing of product?FollowComment


Question: How to asynchronously scale aurora serverless v2 replicas

"I have an aurora postgresql serverless v2 cluster with 2 instances, one writer and another reader and would like them to scale independently.According to documentation, if the reader instance is in a Failover priority other than 0 or 1. They SHOULD scale independently but still no matter what I do, they always scale synchronously.I have a workload that runs twice a day and demands the higher acu count but the reader instance has very low usage, so I would like them to scale independently to save on costs. In my use case it is not a problem if there is a longer downtime for the reader instance to scale and take over in case of failure.ThanksFollowComment"

Answer: "0The documentation says "When they are idle, they can scale down to the minimum" - have you confirmed in CloudWatch that they really are idle?  Handling replication from a busy writer will put some load on a reader but you would hope not too much.  Still it's worth looking how busy it is.CommentShareEXPERTskinsmananswered 4 months ago0I checked and they are not busy as the writer on the heavy workloads. as an experiment I created a provisioned aurora server (with more resources than the serverless ones had), failed over to it and removed one of the serverless instances. and now the serverless instance hasn't gone past 8 acu a single time. if I get the metrics of serverless capacity of the past 24 hours we can clearly see the difference on acu allocation after the changes.And about replication, I might be wrong but my understanding is that with aurora, replication is done at the storage layer and wouldn't put any pressure on reader instances.CommentShareMichel Galleanswered 4 months ago"


Question: Transit gateway does not show up in Traceroute

"Does anyone know the reason behind the transit gateway not responding to a traceroute packet. I am able to see the end host respond to a traceroute which goes through a TGW, but the TGW hop shows up as a dot and not ! with an ip address.What was the logic behind the behavior by AWS?FollowComment"

Answer: "0There are many places on the internet (and private networks) where routers do not respond during a traceroute. During a traceroute, packets are sent with an ever-increasing TTL (time-to-live) until they reach the destination. At each router hop the TTL is decremented and if it is zero an ICMP Time Exceeded packet is generated and sent back to the origin of the packet (where the traceroute is being run from).There are many routers on the internet that do not generate these ICMP packets - because it takes time and CPU power - which is better spent routing packets.That the traceroute succeeds is good. That you don't get every hop along the way is fairly normal in large networks.CommentShareEXPERTBrettski-AWSanswered 5 months ago"


Question: Why is HTTP/2 not being served on EC2 Linux2 Apache 2.4 although enabled?

I have httpd.x86_64 2.4.43-1.amzn2 and mod_http2.x86_64   1.15.3-2.amzn2 installed with yum in a linux 2 AMI.httpd -Mconfirms that the http2_module (shared) extension is loaded.The httpd.conf file includes:<IfModule mod_http2.c>Protocols h2 h2c http/1.1</IfModule>An SSL certificate is installed.I am using php-fpm to serve php code (principally WordPress)Yet apache is not serving http/2 (tested using https://tools.keycdn.com/http2-test ).Example site on this server:  https://www.anticipate.ac.uk/What could be the problem?FollowComment

Answer: "0The problem is that Apache was using MPM pre_fork, when it has to use MPM event.See https://www.youtube.com/watch?v=zT2iCk7-HLs for an explanation of how to change this.CommentShareNigelanswered 3 years ago"


Question: Nameservers Stuck!!

"I recently moved my domain to AWS, all has gone well and transferred. For some unknown reason, the nameservers are stuck on Cloudflare's NS.AWS is confirmed to be the registrar and my previous domain supplied has assured me that there is nothing at their end stopping the nameservers. The Cloudflare site is also removed, along with all the DNS entries.AWS Hosted Zone all setup with A, CNAME, MX and NS recorrdsBut still, the NS refuses to budge, and hence, the AWS DNS not kicking in. Advice, please?FollowComment"

Answer: 1Accepted AnswerNow resolved.CommentSharerePost-User-9569339answered a year agorePost-User-1858724 6 months agoWhat was the solution?Share


Question: How do I use a custom vocabulary when using Amazon Transcribe streaming?

"Hello, I am following this code: https://github.com/brandonmwest/amazon-transcribe-websocket-expressI was able to get it to work and transcribe my audio in real time. The thing is, I wanted to add a custom vocabulary. I made one on aws services by signing in and uploading a txt file. It says it is Ready. I then went into the code and added a new param &vocabulary-name="myvocab" where myvocab is the name of the vocab I uploaded on aws. I get this:"The specified vocabulary doesn't exist. Check the name and try your request again."What am I doing wrong? Thank you for any helpFollowComment"

Answer: 0I figured it out. I needed the region to match. I was using Amazon Transcribe on us-east-1 and my vocabulary was located on us-east-2 I guess? But it works now.CommentShared5tanswered 2 years ago


Question: Serverless option to subscribe to AMQP broker

"Hi,I need to subscribe to AMQP broker which is hosted outside of AWS and consume the content. Is there a serverless service that is able to maintain the connection without need to run an EC2 instance and forward the data to other services?I have tried to work with Kinesis and EventBridge, but these services doesn't seem to be able to consume amqp, while MQ is only able to setup a broker.FollowComment"

Answer: "1Hello,You can provision an Amazon MQ for RabbitMQ and that can shovel messages(using Shovel plugin) from your self managed AMQP broker.  The only requirement would be that your AMQP has a public endpoint. Once messages are moved to Amazon MQ broker, you can trigger a Lambda function to either move them to other services or process as needed.You can also package AMQP libraries in a Lambda function and trigger it in a scheduled manner to pull messages. It will not maintain the connection but can be a fully serverless option.Thanks,MithunCommentSharemithunm-awsanswered a year ago"


Question: "Aurora Serverless v2 recovery had triggered, without a warning"

"We are using two clusters of Aurora Serverless v2 to host a D2C e-commerce business. On December 3rd, I noticed that one of the clusters had been shut down by recovery for around 10 minutes. According to the event message I discovered,Recovery of the DB instance has started. Recovery time will vary with the amount of data to be recovered. at 01:57(UTC). after that,Recovery of the DB instance is complete. at 02:06(UTC).I discovered that metrics from Performance Insight, mysql-error-running.log, and RDS monitoring had disappeared for 15 minutes, which is appropriate given the situation. Nevertheless, hundreds of SQL queries had been processed normally up to 01:59:18(UTC), as indicated by our DataDog APM metrics. Therefore, there hasn't been a crash or other unusual circumstance to trigger the recovery.I read this post and got to the point. But I want to make sure that the events I described above can be reproduced and, if possible, how often they can be repeated. I also want to have a theoretical understanding of what might have happened. (I know, I could ask AWS Support Engineering Team if I need an analysis, but in theory.)FollowComment"


Question: Missing table size metrics in Cloudwatch for Amazon Keyspaces

"I started to evaluate Amazon Keyspaces and checked available metrics in Cloudwatch related to this service. I found several metrics about used and provisioned capacity units, read and write counts and sizes, but I was not able to find a metrics which would tell me what is table size. As Keyspaces usage is charged by storage size as well, it would be very important to know how much I will pay for storing my data.FollowComment"

Answer: "0Thanks for the feedback! Yes, adding a metric for table size is on our roadmap. I don't have any timing to share at this time, but we will update this forum post when it is available.CommentShareAWS-User-6425534answered 3 years ago0Hello, are there any updates on size metrics? It is essential for our work. Thanks!CommentSharex0ranswered 2 years ago0Hi x0r - no updates yet. Quick questions for you - are you interested in the table size in term of GBs (i.e., billable storage size) or in terms of rows. How are you using this data? Also, do you need it to be real-time, or is periodic updates acceptable (i.e., we would update the metric on an interval).CommentShareAWS-User-6425534answered 2 years ago0To get the storage usage of your Keyspaces workload you can the get-cost- and-usage- with- resource API. You can query this API via the AWS CLI. The API can be used in granularity of Monthly, Daily and Hourly to fit your use case.Here is the documentation for this API and information on how to use it:https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ce/get-cost-and-usage-with-resources.htmlFirst you will need to go into AWS Cost management preferences and click the box that says Hourly and Resource level data.(picture included, screenshot at the top you just have to click on it)Here is an example of a query that will tell you the storage usage Hourly.first you have to use the vi to save a file in the AWS CLI called "filter.json"Copy& Paste this is what you want to include in your filter.json file:{"Dimensions": {"Key": "SERVICE","Values": ["Amazon Keyspaces (for Apache Cassandra)"]},"Dimensions": {"Key": "USAGE_TYPE","Values": ["TimedStorage-ByteHrs"]}}3.The you will need to do this query, You will want to change the time period to you desired date and hour.aws ce get-cost-and-usage --time-period Start="2021-10-18T10:00:00Z",End="2021-10-18T11:00:00Z" --granularity HOURLY --metrics "BlendedCost" "UnblendedCost" "UsageQuantity" --group-by Type=DIMENSION,Key=SERVICE Type=TAG,Key=Environment --filter file://filters.jsonCommentShareAutumnAtAWSanswered 2 years ago0Amazon Keyspaces now reports table size metric to CloudWatch. This will report the billiable table size which is the raw size of a single replica. While Amazon Keyspaces replicates data three times over multiple availability zones, it only charges you for one. You can also leverage the following Cloudformation template to build cloudwatch dashboard. https://github.com/aws-samples/amazon-keyspaces-cloudwatch-cloudformation-templatesCommentShareMichael Raney AWSanswered 6 months ago"


Question: App Runner Multiple Custom Domains (More than 5)

"I am planning on hosting a NextJS application that needs to respond to HTTPS requests from multiple root domains (not subdomains). I looked into App Runner as a viable alternative but it seems to be limited to only 5 custom domains.Is it possible to have more than the 5 domains? I did not find a quota increase for that.Moreover, would there be other suggestions on how to host such an application?As an alternative, I have thought about creating a CloudFront distribution with its own SSL and domain for each root domain I need to support.FollowComment"