Question: AWS Rekognition and Sagemaker Running Local to automate annotation base on video streaming

"Hi everyone, I have a project in manufacturing area that I would like to improve by implementing computed vision capability. I already work with AWS services, but I still have no experience with Rekognition and Sagemaker, so I will explain my application below and would like to know if it is possible to make and what are the key point I need to put my attention and study.Today in a manufacturing plant, anytime a machine stops, the worker annotates the downtime cause on a tablet(running my app) with predefined options.I'd like to implement computed vision to automate this annotation, or suggest the most probable cause. I'm expecting a way for the application to auto train and improve itself given the historical data composed by: downtime cause annotated by operator + period of time when that downtime occurred + video.I plan to run on an edge through greengrass with a tpu processor.Thanks in advance.FollowComment"

Answer: "0Amazon Monitron could be a good addition to consider in this scenario. Monitron is an IoT platform that includes a suite of sensors, gateways, and machine learning algorithms that help industrial customers monitor the health and performance of their equipment. Monitron can be used to automatically detect equipment anomalies and predict when maintenance is required. There's actually also a whole suite of other solutions and services for industrial.In your case, Monitron could be a complementary solution to implement along with Amazon Rekognition and SageMaker. You could use Monitron to collect sensor data and use Rekognition to process the video data and SageMaker to train the machine learning models. Or you could you use Monitron by itself, as it is an end-to-end system.A knowledge of AWS services such as Amazon Rekognition, SageMaker, and Greengrass would help. For studying, https://workshops.aws/ has some good hands-on training on some of these topics. It would also be helpful to study Monitron in more detail and understand how to integrate it with the other AWS services you plan to use.Here's a blog that talks about using Monitron to reduce unplanned downtime: https://aws.amazon.com/blogs/aws/amazon-monitron-a-simple-cost-effective-service-enabling-predictive-maintenance/I would also recommend you also get in touch with your AWS account team. They may be able to provide some time with a Solutions Architect to dive a little deeper into helping you think through the architecture.CommentShareyann_stonemananswered 4 months ago0If you can have connectivity then Amazon Rekognition Photo Custom Labels can be a good start, by sampling a live video stream for annotation event - this would be the simplest solution but with less flexibility in terms of personalization of your model.Otherwise, if you want what your model to work offline or you want to train a custom Computer Vision model, the Greengrass for the inference but leverage the power of the SageMaker + GPU ML instances for training your model in cloud.For the later approach, please try the Quick Starts in SageMaker Studio that you can try for Image Classification sample notebook:https://github.com/aws/amazon-sagemaker-examples/blob/main/introduction_to_amazon_algorithms/imageclassification_mscoco_multi_label/Image-classification-multilabel-lst.ipynbNote that in this case you can leverage the SageMaker framework to train faster, optimize the hyperparameters using build-in tools like "hyperparameters tuning" feature:https://docs.aws.amazon.com/sagemaker/latest/dg/automatic-model-tuning-how-it-works.htmlA 3rd option could be Amazon Lookout for Vision agent for Greengrass if you want only to detect a defect:https://docs.aws.amazon.com/greengrass/v2/developerguide/lookout-for-vision-edge-agent-component.htmlCommentShareAlexRanswered 4 months ago"


Question: lambda@edge accessing lambda function via api gateway getting {"message":"Forbidden"}

"I am able to access the Lambda function directly or via the custom domain with a 200 status. However, configuring a Lambda@edge function to redirect to the custom origin results in a   {"message":"Forbidden"} responseThe API is open so its not an authorizer issueHere is the redirect code'use strict';exports.handler = (event, context, callback) => {     const request = event.Records[0].cf.request;     if (request.headers['x-ssr-token'] && request.headers['x-ssr-host'] && request.headers['x-query-string']) {       request.querystring = request.headers['x-query-string'][0].value;       request.origin = {           custom: {               domainName: 'myapi.mydomain.com',               port: 443,               protocol: 'https',               readTimeout: 20,               keepaliveTimeout: 5,               customHeaders: {},               sslProtocols: ['TLSv1', 'TLSv1.1', 'TLSv1.2'],               path: '/https%3A%2F%2F' + request.headers['x-ssr-host'][0].value               }       };    }    callback(null, request);};FollowComment"

Answer: "0It would be helpful if you could post the Lambda@Edge function code (please sanitise it, or post the relevant snippet if needed). To dynamically update the origin, your Lambda@Edge function should run on the Origin Request trigger. Sometimes it is easy to forget to update the Host header in the request to match the new origin. There are some example functions available here: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/lambda-examples.html#lambda-examples-content-based-custom-origin-request-trigger which you can refer to if needed.CommentSharePaul_Lanswered a year ago0Thanks for the tip, added request.headers['host'] = [{ key: 'host', value: 'myapi.mydomain.com'}];Now getting {"message":"Not Found"}I've enabled logging for the API and I see logs when I access the endpoint directly or via the custom domain. However, no logs for any access via lambda@edge/CloudfrontCommentShareRazBalanswered a year ago"


Question: AWS MediaPackage live video preview not showing up

"Hi!I followed this workflowhttps://aws.amazon.com/blogs/media/connecting-obs-studio-to-aws-media-services-in-the-cloud/to try to push live content to AWS MediaPackage. I followed all the instructions, and OBS is successfully connected to Medialive. However, when I open the preview page on MediaPackage, it just shows that cannot load the end point URL, with the error below:`response code:0 This might be a CORS issue, consider installing Allow-Control-Allow-Origin Chrome Extension1.308 | A network error occurred: manifestLoadError`I then installed the Chrome Extension but the problem remains.I don't know what went wrong as I follow the instruction step by step. Can someone help me with it? Thank you!FollowComment"

Answer: "0Greetings!Thanks for your question. It appears the preview player provides the same error message in multiple scenarios. I was able to replicate your issue by creating a new MediaPackage channel and endpoint without pushing any content to it.The first things to check are to make sure you've configured your MediaLive channel properly to connect to MediaPackage, using the drop-down to select the appropriate channel in the MediaPackage Output Group settings. Once your MediaLive channel is up and running, confirm in the Health tab of the channel console that there are no alerts present that might indicate an issue with the workflow, that could prevent the stream from reaching MediaPackage. It might also be helpful to enable logging in MediaLive, see https://docs.aws.amazon.com/medialive/latest/ug/monitoring-with-logs.html to set that up.MediaPackage also offers operational metrics for the channel on its console, so confirming data is coming in there (and also pay attention to "Egress Request HTTP Status" to confirm the player is getting successful transfer requests).If you have any questions about what you're seeing please follow-up here.Regards,SteveCommentShareSteve_Wanswered 2 months agorePost-User-5999181 2 months agoHi! I solved the problem by re-creating my IAM role and granting them all access to MediaLive and MediaPackage. Thank you for the support!Share"


Question: all newly created aws account will say : "Error! Cannot create the fleet. Reason: Current limit of fleets of 0 have been reached.." when create its first fleet

"I'm not post this for this account. But if I post with newly create aws account, you guys will think I'm a beginner and ask me to increase service limit and tell me my resource usage is minimal. I have reported this issue many times since two or three months ago via email, support case and feedback, but you guys didn't realize it's actually a bug.So please, supporter, please don't use your manual book when you see this post, just report it to the real developer team.All newly created aws account's gamelift service limit will return 0 now in all regions and all instance types, which should be anything other than 0 (1 or 20, normally). which make all new account can't even create its first fleet.You can ask the developer team to create a new account to try and confirm it yourselves, it's very easy to reproduce.FollowCommentznnxzz a year agoHello!We facing the same problem, and AWS support team keeps sending the boilerplate answers.Did you manage to solve this issue?Share"

Answer: 0It's because aws's new feature. soft service limit. they will fix it. I will report back when it's fixed.CommentShareAWS-User-4774012answered a year ago


Question: slack user-id

I have created a bot and integrated with slack following the instructions. The bot works as expected and posts to a lambda for fulfilment.In the lambda i see as part of the request:'x-amz-lex:user-id' which i expect to be the slack user id but its not in the normal slack format of something like UXXXXXX but is a long int  such as 'x-amz-lex:user-id': '396498713242.12.691123599936'. How do i translate this to the real slack userid so i can look up the profile for that user?thanksAndrewFollowComment

Answer: 0My mistake i was looking at the x-amz-lex:user-id and the user-id fieldthanksAndrewCommentShareAMC777answered 4 years ago


Question: docker container crashing

"Hi,I've basically followed this guide the docker setup guide [1], but with one difference. Since I'm using an ARM based Raspberry Pi, I've built the armv7l docker image from [2].Starting the docker containersudo docker run --rm --init -it --name aws-iot-greengrass --entrypoint /greengrass-entrypoint.sh -v /tmp/certs:/greengrass/certs -v /tmp/config:/greengrass/config -v /tmp/log:/greengrass/ggc/var/log -p 8883:8883 armv7l/aws-iot-greengrass:1.9.1I then see a fatal error occuring in log/system/runtime.log:[2019-05-14T14:31:59.282Z][INFO]-Downloading artifact.  {"artifactId": "blabla"}[2019-05-14T14:32:00.761Z][INFO]-Successfully downloaded the artifact.  {"artifactId": "blabla"}[2019-05-14T14:32:01.994Z][INFO]-Finished executing the group downloading step.[2019-05-14T14:32:01.994Z][INFO]-Stopping All running workers.[2019-05-14T14:32:01.994Z][INFO]-Stopping all workers.[2019-05-14T14:32:01.994Z][INFO]-Lifecycle manager is stopped.[2019-05-14T14:32:02.034Z][INFO]-The current core is using the AWS IoT certificates with fingerprint.   {"fingerprint": "blabla"}[2019-05-14T14:32:02.039Z][INFO]-Finding mounted cgroups.[2019-05-14T14:32:02.063Z][INFO]-Starting file sync.    {"src": "/etc/resolv.conf", "dst": "/greengrass/ggc/packages/1.9.1/dns/etc/resolv.conf"}[2019-05-14T14:32:02.08Z][FATAL]-Failed to reset thread's mount namespace due to an unexpected error. To maintain consistency, GGC will crash and need to be manually restarted.       {"errorString": "operation not permitted"}Why does this happen?[1] https://docs.aws.amazon.com/greengrass/latest/developerguide/run-gg-in-docker-container.html[2] https://d1onfpft10uf5o.cloudfront.net/greengrass-core/downloads/1.9.1/aws-greengrass-docker-1.9.1.tar.gzFollowComment"

Answer: "0Hi andersgb,From the Greengrass Dockerfile README.md, https://docs.aws.amazon.com/greengrass/latest/developerguide/what-is-gg.html#gg-docker-downloadIf you see the error message \[FATAL]-Failed to reset thread's mount namespace due to an unexpected error: "operation not permitted". To maintain consistency, GGC will crash and need to be manually restarted. in /greengrass/ggc/var/log/system/runtime.log. This is most probably caused by deploying a GreengrassContainer lambda to GGC running in Docker Container as this use-case is not yet supported. All the lambdas should be deployed in NoContainer mode. To fix this, disregard the current deployment stuck In Progress. Start a new deployment and make sure that all the lambdas are deployed in NoContainer mode. After that, while starting the GGC Docker Container, do not bind-mount the existing deployment directory onto GGC Docker Container. Create a new empty deployment directory in its place and bind-mount that in the GGC Docker container instead. New GGC Docker Container should receive the latest deployment with lambdas running in NoContainer mode.If you change the container mode for your Lambda it should work. You might want to specify the group default to non-container.Thanks,KR-AWSCommentShareKR-AWSanswered 4 years ago0Thanks KR-AWS,I thought I had switched to NoContainer already, but apparently not.If you change the container mode for your Lambda it should work. You might want to specify the group default to non-container.It seems like overriding to IsolationMode: NoContainer for my single Lambda was not sufficient (while keeping the default setting for group function defaults). I actually had to specify the group default to get it working.CommentShareandersgbanswered 4 years ago"


Question: Not able to access the nodejs application properly from ecs containers when configured to an aws load load balancer

"I have a sample development mode nodejs application. I've used the following for DockerfileFROM node:14-alpineWORKDIR /appCOPY package*.json ./RUN npm installCOPY . .RUN npm run buildEXPOSE 5180CMD ["npm", "run", "dev", "--", "--host", "0.0.0.0"]Built an image and pushed it to aws ecr repo and created a cluster in ecs I defined a task and here I'm using dynamic port mapping (0 5180)since my requirement is to run multiple containers in a single EC2. The task is then made into a service using EC2 where I've used AWS load balancer.I'm using an application load balancer with listeners 80 and health check at Working Directory as "/app" as mentioned in the Dockerfile. This has been attached the ECS service as well.My problem is when tasks are running at a steady state and I checked the Load Balancer target group and the targets show healthy but when I tried to access my application using the DNS of ALB the browser is trying to reach the page and the page becomes blank after multiple refreshing I'm able to reach the page but this is not consistent.I open the container's security group to all traffic and I tried accessing a single task with its dynamic port number and it's working but not with the ALB DNS.FollowComment"

Answer: 0Are there any errors in the application log or response status?CommentShareEXPERTRiku_Kobayashianswered 2 months ago


Question: S3 endpoint for unspecified region

"When I don't specify a region, the command "aws s3 ls" goes to s3-1.amazonaws.com.I cannot find a prefix list which contains this URL, so I cannot easily create an allow list or route traffic to this endpoint.FollowComment"

Answer: 0Accepted Answers3-1.amazonaws.com is an alias for s3.us-east-1.amazonaws.com. You can do an nslookup for it and see:bash$ nslookup s3.amazonaws.comServer:10.106.65.245Address:10.106.65.245#53Non-authoritative answer:s3.amazonaws.comcanonical name = s3-1.amazonaws.com.s3-1.amazonaws.comcanonical name = s3.us-east-1.amazonaws.com.Name:s3.us-east-1.amazonaws.comAddress: 52.216.8.101The default is us-east-1 if you dont export AWS_DEFAULT_REGIONCommentShareEXPERTagardezianswered 3 years ago


Question: Pinpoint : There are no long codes available right now for country AT.

"Hi,I use AWS Pinpoint and get this error while I try to add a phone number:Request Id e5bdddf8-444e-4ce1-804a-b503f59433c7 : There are no long codes available right now for country AT. Please try again in a few minutes or open a ticket. https://docs.aws.amazon.com/pinpoint/latest/userguide/channels-sms-awssupport-long-code.htmlAny idea what I can do? I tried it with different locations and have switched the pinpoint project from sandbox to production.Support is just sending me non-sens links which are not related to the problem and tell me to buy a paid support plan.Is this a bug in AWS or can I do something here on my own?Thank you :)FollowComment"

Answer: "1Hi,I feel your pain. Last May we decided we would contact Support to ask for a long voice number for Spain. Three months later and no luck. In that same error message they ask you to open a ticket, but there is nothing they can do and it the end, like you say, they ask you to come to the forum or pay for a support plan.They will ask you over and over again to do a test message first, but it is not possible to do so in the EU apparently. Any country you try, will fail. No numbers available anywhere. So you may end up in a catch-22 situation. I don't think the EU is supported at the moment for this.Any conversation with Support will go in circles. At some point they did ask some legal details, so I guess it was going somewhere, just to contact me later about price changes, send the test message (again and again), etc. Did provide screenshots of all the steps to demonstrate it is not possible to create a test message in Spain (or any other EU country for that matter).I hope I did something wrong or I am missing something, but after three months of waiting, we do have to look for alternatives. The whole thing looks half-baked in AWS, with errors like the one you have posted about that lead you nowhere.Best of luck and let us know if you manage to get it working!CommentSharesiliconcatanswered 10 months agoPhilippS 10 months agoThak you for sharing my pain.I opened a lot of tickets and wrote again and again and finally I got one long code for SMS.But I fell very lucky to find someone who could help.I tried to get a new long code number which is voice enabled. Unfortunately I am stuck like you in this infinity loop.They want me first to send a test message but they don't understand that this is impossible without a number ...Can you recommend some other services? Pinpoint is very buggy at all and has 0 support. I also posted about there internal bugs on stackoverflow without getting any response. Only up-votes for my questions ...Share"


Question: Access to S3- thousands of users

"Hi Team,I have a scenario where some of our end customer should be able to upload some files to s3.These end customers are thousands in number.How can I provide access to these customers without having to use SSO or any other.Is there any service that is offered by AWS to provide access to S3 for thousands of users without having to manually create login links and all.Any leads are appreciated.ThanksFollowCommentGK 10 months agoThis may help ? https://aws.amazon.com/blogs/compute/uploading-to-amazon-s3-directly-from-a-web-or-mobile-application/Share"

Answer: 0You could use an HTML form as detailed here.CommentSharejwesleyanswered 10 months ago


Question: Are sso-directory role permissions used for anything still?

Are "sso-directory" role permissions used for anything still? From what I see the Identity Store has taken over the SSO directory's role and there are separate "identitystore" role permissions. Are they roughly equivalent?FollowComment


Question: Lightsail instance location how to choose Hongkong?

"I need to build a website mainly server people in and around Hongkong area.So i need a server and the routes to be in there for the best connection.but aws doesnt let me create a lightsail instance in Hongkong Region there is no option for it.i did googled. https://aws.amazon.com/cn/blogs/aws/now-open-aws-asia-pacific-hong-kong-region/it says need to enable Hongkong region in my account which i already did.but getting into the lightsail instance creating page it doesnt show Hongkong region.https://lightsail.aws.amazon.com/ls/webapp/create/instance?region=ap-east-1/this is the link to the page creating the lightsail instance, even i changed the link ref region=ap-east-1  which is for Hongkong, it still jump back to the region im living.Could anyone give me some advice on creating a lightsail instance in Hongkong region please?Thanks heaps.FollowComment"

Answer: "0Lightsail is not currently supported in the Hong Hong Region. While AWS does have a Hong Kong region, not all services are supported at launch.Regions and Availability Zones in Amazon LightsailAWS Regional Services ListCommentSharetmsmithanswered 10 months ago"


Question: MTurk Requester encountering error: 'There was a problem submitting your results for this HIT'

"Hi,I'm creating a survey in which workers respond to questions at a survey link and then provide a unique 5 digit survey completion code on MTurk.When previewing the survey in MTurk as if I was a worker, and entering a survey code, I always get the following error:There was a problem submitting your results for this HIT. This HIT is still assigned to you. To try this HIT again, refresh the page. If this problem persists, you can contact the Requester for this HIT by clicking "HIT Details" above and then clicking "Contact This Requester" at the bottom of the pop up. To return this HIT and continue working on other HITs, click the "Return" button on the top or bottom of the right side of the page.Does anyone know how to fix this?Do I need to change the source code to fix this? If so, how?Thank you,Catherine SFollowComment"


Question: Not able to Enable and Verfiy TOTP based MFA token using Cognito

"Hi,I was trying to write a React code for enabling TOTP based MFA for an user in cognito userpool. but i am not able to enable it. as i tried different code these is the error i am getting .**Reason:{message: "Code mismatch",code: "EnableSoftwareTokenMFAException",time: "2022-05-04T12:53:02.136Z",…}error: "EnableSoftwareTokenMFAException: Code mismatch"success: false**i tried google authenticator and microsoft authenticator but still the same error message. sometimes code works but most of the time i am getting this error.how to resolve this ? what may be the reason for this error ?here's the link to my codebase i been refering : https://github.com/AlexzanderFlores/Worn-Off-Keys-Cognito-Tutorials/blob/master/10-TOTP-MFA/lambda/get-qr-code/index.jsFollowComment"


Question: how to show Instance status for users inside the SageMaker Studio domain?

Is there a way to check with the AWS SDK or CLI whether instances are created at a specific time for users inside the SageMaker Studio domain?FollowComment

Answer: "0You cannot view instance status since these are managed by SageMaker service. You can, however, use the list-apps and describe-app CLI calls to see the apps in service for the user, and work backwards to find the instances that are being used by the user.CommentShareDurga_Sanswered 4 months ago"


Question: CGF MTL issues?

"HeyThis might be a bug, or I am missing something. But when you go to add a MTL to a object, you can do so with the fbx by applying to the set object. However when you try with CGF, there is no option and CGF does not show up in the MTL Editor, so only way is to make a MTL and attach it through the mesh settings once the object is place. I would have assumed the MTL would be the same for FBX and CGF.Follow"

Answer: "0Accepted AnswerHi @REDACTEDUSERThe way you make assets now is to natively create an FBX file from your DCC application (3ds Max, Maya, etc.), and make sure that file is in your project path so that it is processed by the Asset Processor. There is no longer any idea of an "exporter" inside 3ds Max or Maya.So just make an FBX in 3ds Max in the normal way by going to File > Export > Export... or File > Export > Export Selected... and then in the "Save as type:" box at the bottom select "Autodesk (*.FBX)" as your file type. This will package your assets into an FBX file that will then be read by the Lumberyard engine.Sorry for any confusion - I didn't realize that you were using the legacy exporter. The new FBX pipeline does not require an exporter, it just consumes FBX files.Hope this helps!SharerePost-User-0479726answered 5 years ago0When i go to Import the files created in 3ds Max through the import option in the file menu, It imports it fine. Its fine for both fbx and cgf. When i go to add a textures to the objects i am going through the material editor and for the fbx the mtl file is there but for the cgf files the mtl has to be created. I am using 1.12.0.1SharerePost-User-1354821answered 5 years ago0Hi @REDACTEDUSERSharerePost-User-0479726answered 5 years ago03ds max does not allow me to export the mtl file through lumberyard exporter as it shows an error all the time, and when i change a setting to fix it, it breaks the textures. As for the cgf, I am not able to export fbx with lumberyard exporter hence why I am using the cgf as thats the file type that it only supports for static objects.SharerePost-User-1354821answered 5 years ago0Hi @REDACTEDUSERFor the new FBX pipeline, the Asset Processor automatically processes any FBX files it finds in the project path. So for instance, if you have set up your game project to work in the Starter Game (where it is by default in the Project Configurator), you would place any FBX files you want to be automatically processed in the path:<root drive letter><root path to LY Installation><LY version>\dev\StarterGame\ObjectsFor example:C:\AMAZON\Lumberyard\1.12.0.1\dev\StarterGame\ObjectsSo you would place the FBX files for any objects you wanted processed into that folder, and open the Lumberyard editor at that point. There is no need to do anything like File > Import to bring in static CGF objects. Once you check that the Asset Processor has processed your object (check in your hidden icons tray to find the Asset Processor icon, then right-click and select "Show" to see the Asset Processor window) successfully, you can use the Asset Browser to see what it has automatically derived from your FBX file.When you are in the Lumberyard editor, you go to Tools > Asset Browser, then navigate to your FBX file in the project. You can right-click the file and select "Edit Settings" to see what things the Asset Processor has derived from your FBX file, as well as seeing the actual sub-types in the Asset Browser window.If you have set up a material on your object in 3ds Max, that material will still be associated with the CGF file automatically, there is no need to assign that material to the static mesh. If you want to see your static mesh on a level with the material applied, you can add a new empty component to a test level in the Entity Outliner, then add the "Mesh" component from the Rendering menu in the Add Component menu of the Entity Inspector.You should then see your static mesh on your test level with the material applied, without having to do any type of material assignment through the material editor. If you have NOT applied a material in 3ds Max, you can then just point the Mesh component to a Material Override material.Hope that helps - please let me know if there's any more info I can give.SharerePost-User-0479726answered 5 years ago0Hi @REDACTEDUSERAsset Processor:https://docs.aws.amazon.com/lumberyard/latest/userguide/asset-pipeline-processor.htmlAsset Browser:https://docs.aws.amazon.com/lumberyard/latest/userguide/asset-browser-intro.htmlEntity Outliner:https://docs.aws.amazon.com/lumberyard/latest/gettingstartedguide/placing-entities-creating-doorway.htmlEntity Inspector:https://docs.aws.amazon.com/lumberyard/latest/gettingstartedguide/placing-entities-static-mesh.htmlSharerePost-User-0479726answered 5 years ago0Here is a link to a description of how the FBX files are being processed:https://docs.aws.amazon.com/lumberyard/latest/userguide/char-fbx-importer.htmlSharerePost-User-0479726answered 5 years ago"


Question: Ly 1.24 cannot build - Warning as Errors

"Suddenly this is happening not sure why, I rebuild and now I cannot get rid of:e:\Amazon\Lumberyard\1.24.0.0\dev\Code\CryEngine\CryCommon\ILevelSystem.h(94): error C2220: the following warning is treated as an errore:\Amazon\Lumberyard\1.24.0.0\dev\Code\CryEngine\CryCommon\ILevelSystem.h(94): warning C5208: unnamed class used in typedef name cannot declare members other than non-static data members, member enumerations, or member classese:\Amazon\Lumberyard\1.24.0.0\dev\Code\CryEngine\CryCommon\ILevelSystem.h(94): note: to simplify migration, consider the temporary use of /Wv:18 flag with the version of the compiler with which you used to build without warningsIn the meantime I'll reinstall everything... coz I'm blocked.Follow"

Answer: "0Accepted AnswerThey used std::runtime_error in Sandbox's code.Another error for " std::runtime_error " can be solved by add this line in StdAfx.h of Editor module:[Lumberyard_Root]\dev\Code\Sandbox\Editor\StdAfx.h#include <stdexcept>SharerePost-User-4237560answered 3 years ago0The code that creates problems is:typedef struct{string  name;string  xmlFile;int         cgfCount;void GetMemoryUsage(ICrySizer* pSizer) const{pSizer->AddObject(name);pSizer->AddObject(xmlFile);}} TGameTypeInfo;In C++ you don't need typedef... Solution:struct TGameTypeInfo{    string  name;    string  xmlFile;    int         cgfCount;    void GetMemoryUsage(ICrySizer* pSizer) const    {        pSizer->AddObject(name);        pSizer->AddObject(xmlFile);    }};SharerePost-User-8749857answered 3 years ago0I also added in ObjectManager.cpp:#include <stdexcept>I'm using VS2019 btw.SharerePost-User-8749857answered 3 years ago0A lot of people are saying VS2019 is not working for them, if you can try 2017 and see if that fixes any issues. 👍SharerePost-User-7556027answered 3 years ago0VS2019 works well, just they have few little errors.@REDACTEDUSERSharerePost-User-8749857answered 3 years ago0vs2019_fix.patch|attachment (3.3 KB)FYI, here is my unofficial fix up for VS2019 16.6 on my local system. We will fix it in the next release.SharerePost-User-9447706answered 3 years ago0helloThanks ...I did, but there is another problem for meCan you help?lmbr_create2.txt|attachment (3.8 KB)SharerePost-User-7025444answered 3 years ago0The @REDACTEDUSER@REDACTEDUSERSharerePost-User-8749857answered 3 years ago0Looks like you didn't check VS2017 or VS2019 in SetupAssistant.SharerePost-User-4237560answered 3 years ago"


Question: Querying rows containing GZipped and Base64 encoded string in Athena

I have a setup where I am using Athena to query data exported from DynamoDB table. I am using DDB export to S3 capability as mentioned in this blog post.The table that I am querying contains some rows which are first Gzipped and then base64 encoded before writing to DDB. I am looking for some best practices on how can I make this data available for query in Athena?Two options that I can think of areTransforming file in S3 once they are exported to base64 decode and uncompress the data.Write an Athena UDF to do the same during query execution.Any recommendation on what might be the best option for such use-case? Is there something in built in Glue transformation that I can take advantage of?FollowComment

Answer: "0Probably makes sense to try from_base64() built-in function that Athena supportsCommentShareAlex_Tanswered 7 months agoSaket 7 months agofrom_base64() will give me the zipped binary. I also need ability to unzip the data. Any built-in function to do that?ShareAlex_T 7 months agoI see, apologies, i thought you have data in gz file and one of columns is base64 encoded. there's no built-in function in Athena that would extract the data in this case. If you plan to query that data multiple times i suggest to process that data before you query it with Athena.Share"


Question: When will TLS 1.3 be supported for SES Email Receiving?

"The security protocols page says:The Amazon SES HTTPS endpoint supports TLS 1.2, TLS 1.1, and TLS 1.0For STARTTLS connections, Amazon SES supports TLS 1.2, TLS 1.1, TLS 1.0 and SSLv2HelloandFor TLS Wrapper connections, Amazon SES supports TLS 1.2, TLS 1.1 and TLS 1.0I don't believe this is an issue for receiving emails - I expect most clients are happy to negotiate TLS. I was curious because I noticed that mx.google.com was negotiating TLS 1.3 (cipher TLS_AES_128_GCM_SHA256). According to Require a secure connection for email:Google Workspace supports TLS versions 1.0, 1.1, 1.2, and 1.3.The supported ciphers are also documented.I've found references to other AWS services supporting TLS 1.3, such as Network Load Balancer now supports TLS 1.3 in October 2021, along with the benefits of that feature.FollowComment"

Answer: "0Hello,Thank you for contacting Re:post.I have attached your request "TLS 1.3 support for SES Email Receiving" to the internal feature request for SES service teams consideration. However, I don't have an ETA as to if or when this may be implemented, but any new updates on this and other features will be published on the following links:New features - https://aws.amazon.com/new/Jeff Barr's Blog - https://aws.amazon.com/blogs/aws/Subscribe to our weekly newsletter for AWS announcements - https://aws.amazon.com/s/dm/landing-page/subscribe-to-aws-release-notes-blog/Let us know if you have any questions.CommentShareAWS-User-0855300answered 10 months ago0Hello,Is there any news about TLS 1.3 for SES ? in documentation it is still specified that the max supported version is 1.2.Is the documentation up to date ?Thanks !CommentShareValentinanswered 2 months ago"


Question: PostgreSQL 12 in Amazon Linux AMI 2

Hi for all.PostgreSQL 12 is now available in RDS but in Amazon Linux AMI 2 client is still at 11.2.This causes a version mismatch issue for us in pg_dump.Anybody has any suggestion or know if is there any forecast to make PostgreSQL 12 available in Amazon Linux AMI 2?Regards.https://aws.amazon.com/about-aws/whats-new/2020/03/amazon-rds-now-supports-postgresql-12/?nc1=h_lsFollowComment

Answer: "0I would be really interested in the answer to thisCommentShareericmonchanswered 3 years ago0Hi Fernando,Next are the step to install PostgreSQL 12.X on your environment:1.- Create an EBS snapshot of your system (highly recommended)2.- Create a new repo for "PostgreSQL 12 for RHEL/CentOS 7 - x86_64" with the following command:$ sudo tee /etc/yum.repos.d/pgdg.repo<<EOF[pgdg12]name=PostgreSQL 12 for RHEL/CentOS 7 - x86_64baseurl=https://download.postgresql.org/pub/repos/yum/12/redhat/rhel-7-x86_64enabled=1gpgcheck=0EOF3.- Generate the metadata cache (this can take a while)$ sudo yum makecache4.- Install PostgreSQL 12.x$ sudo yum install postgresql12.x86_64 postgresql12-libs.x86_64 postgresql12-server.x86_645.- Initialize the database for  PostgreSQL 12.x$ sudo  /usr/pgsql-12/bin/postgresql-12-setup initdbInitializing database ... OK6.- Start the PostgreSQL 12 engine$ sudo systemctl start postgresql-12.service$ sudo systemctl status postgresql-12.service● postgresql-12.service - PostgreSQL 12 database serverLoaded: loaded (/usr/lib/systemd/system/postgresql-12.service; enabled; vendor preset: disabled)Active: active (running) since Tue 2020-12-01 15:53:22 UTC; 1s agoDocs: https://www.postgresql.org/docs/12/static/Process: 4519 ExecStartPre=/usr/pgsql-12/bin/postgresql-12-check-db-dir ${PGDATA} (code=exited, status=0/SUCCESS)Main PID: 4525 (postmaster)CGroup: /system.slice/postgresql-12.service├─4525 /usr/pgsql-12/bin/postmaster -D /var/lib/pgsql/12/data/├─4527 postgres: logger├─4529 postgres: checkpointer├─4530 postgres: background writer├─4531 postgres: walwriter├─4532 postgres: autovacuum launcher├─4533 postgres: stats collector└─4534 postgres: logical replication launcherDec 01 15:53:22 ip-10-0-1-48.ec2.internal systemd[1]: Starting PostgreSQL 12 database server...Dec 01 15:53:22 ip-10-0-1-48.ec2.internal postmaster[4525]: 2020-12-01 15:53:22.393 UTC [4525] LOG:  starting PostgreS...-bitDec 01 15:53:22 ip-10-0-1-48.ec2.internal postmaster[4525]: 2020-12-01 15:53:22.394 UTC [4525] LOG:  listening on IPv4...5432Dec 01 15:53:22 ip-10-0-1-48.ec2.internal postmaster[4525]: 2020-12-01 15:53:22.395 UTC [4525] LOG:  listening on Unix...432"Dec 01 15:53:22 ip-10-0-1-48.ec2.internal postmaster[4525]: 2020-12-01 15:53:22.397 UTC [4525] LOG:  listening on Unix...432"Dec 01 15:53:22 ip-10-0-1-48.ec2.internal postmaster[4525]: 2020-12-01 15:53:22.407 UTC [4525] LOG:  redirecting log o...cessDec 01 15:53:22 ip-10-0-1-48.ec2.internal postmaster[4525]: 2020-12-01 15:53:22.407 UTC [4525] HINT:  Future log outpu...og".Dec 01 15:53:22 ip-10-0-1-48.ec2.internal systemd[1]: Started PostgreSQL 12 database server.Hint: Some lines were ellipsized, use -l to show in full.Have a good day!Edited by: RamonResendiz-AWS on Dec 1, 2020 7:56 AMEdited by: RamonResendiz-AWS on Dec 1, 2020 7:57 AMCommentShareRamonResendiz-AWSanswered 3 years ago0RamonResendiz-AWS wrote:Hi Fernando,Next are the step to install PostgreSQL 12.X on your environment:1.- Create an EBS snapshot of your system (highly recommended)2.- Create a new repo for "PostgreSQL 12 for RHEL/CentOS 7 - x86_64" with the following command:$ sudo tee /etc/yum.repos.d/pgdg.repo<<EOF[pgdg12]name=PostgreSQL 12 for RHEL/CentOS 7 - x86_64baseurl=https://download.postgresql.org/pub/repos/yum/12/redhat/rhel-7-x86_64enabled=1gpgcheck=0EOF3.- Generate the metadata cache (this can take a while)$ sudo yum makecache4.- Install PostgreSQL 12.x$ sudo yum install postgresql12.x86_64 postgresql12-libs.x86_64 postgresql12-server.x86_645.- Initialize the database for  PostgreSQL 12.x$ sudo  /usr/pgsql-12/bin/postgresql-12-setup initdbInitializing database ... OK6.- Start the PostgreSQL 12 engine$ sudo systemctl start postgresql-12.service$ sudo systemctl status postgresql-12.service● postgresql-12.service - PostgreSQL 12 database serverLoaded: loaded (/usr/lib/systemd/system/postgresql-12.service; enabled; vendor preset: disabled)Active: active (running) since Tue 2020-12-01 15:53:22 UTC; 1s agoDocs: https://www.postgresql.org/docs/12/static/Process: 4519 ExecStartPre=/usr/pgsql-12/bin/postgresql-12-check-db-dir ${PGDATA} (code=exited, status=0/SUCCESS)Main PID: 4525 (postmaster)CGroup: /system.slice/postgresql-12.service├─4525 /usr/pgsql-12/bin/postmaster -D /var/lib/pgsql/12/data/├─4527 postgres: logger├─4529 postgres: checkpointer├─4530 postgres: background writer├─4531 postgres: walwriter├─4532 postgres: autovacuum launcher├─4533 postgres: stats collector└─4534 postgres: logical replication launcherDec 01 15:53:22 ip-10-0-1-48.ec2.internal systemd[1]: Starting PostgreSQL 12 database server...Dec 01 15:53:22 ip-10-0-1-48.ec2.internal postmaster[4525]: 2020-12-01 15:53:22.393 UTC [4525] LOG:  starting PostgreS...-bitDec 01 15:53:22 ip-10-0-1-48.ec2.internal postmaster[4525]: 2020-12-01 15:53:22.394 UTC [4525] LOG:  listening on IPv4...5432Dec 01 15:53:22 ip-10-0-1-48.ec2.internal postmaster[4525]: 2020-12-01 15:53:22.395 UTC [4525] LOG:  listening on Unix...432"Dec 01 15:53:22 ip-10-0-1-48.ec2.internal postmaster[4525]: 2020-12-01 15:53:22.397 UTC [4525] LOG:  listening on Unix...432"Dec 01 15:53:22 ip-10-0-1-48.ec2.internal postmaster[4525]: 2020-12-01 15:53:22.407 UTC [4525] LOG:  redirecting log o...cessDec 01 15:53:22 ip-10-0-1-48.ec2.internal postmaster[4525]: 2020-12-01 15:53:22.407 UTC [4525] HINT:  Future log outpu...og".Dec 01 15:53:22 ip-10-0-1-48.ec2.internal systemd[1]: Started PostgreSQL 12 database server.Hint: Some lines were ellipsized, use -l to show in full.Have a good day!Edited by: RamonResendiz-AWS on Dec 1, 2020 7:56 AMEdited by: RamonResendiz-AWS on Dec 1, 2020 7:57 AMRamonResendiz-AWS wrote:Hi Fernando,Next are the step to install PostgreSQL 12.X on your environment:1.- Create an EBS snapshot of your system (highly recommended)2.- Create a new repo for "PostgreSQL 12 for RHEL/CentOS 7 - x86_64" with the following command:$ sudo tee /etc/yum.repos.d/pgdg.repo<<EOF[pgdg12]name=PostgreSQL 12 for RHEL/CentOS 7 - x86_64baseurl=https://download.postgresql.org/pub/repos/yum/12/redhat/rhel-7-x86_64enabled=1gpgcheck=0EOF3.- Generate the metadata cache (this can take a while)$ sudo yum makecache4.- Install PostgreSQL 12.x$ sudo yum install postgresql12.x86_64 postgresql12-libs.x86_64 postgresql12-server.x86_645.- Initialize the database for  PostgreSQL 12.x$ sudo  /usr/pgsql-12/bin/postgresql-12-setup initdbInitializing database ... OK6.- Start the PostgreSQL 12 engine$ sudo systemctl start postgresql-12.service$ sudo systemctl status postgresql-12.service● postgresql-12.service - PostgreSQL 12 database serverLoaded: loaded (/usr/lib/systemd/system/postgresql-12.service; enabled; vendor preset: disabled)Active: active (running) since Tue 2020-12-01 15:53:22 UTC; 1s agoDocs: https://www.postgresql.org/docs/12/static/Process: 4519 ExecStartPre=/usr/pgsql-12/bin/postgresql-12-check-db-dir ${PGDATA} (code=exited, status=0/SUCCESS)Main PID: 4525 (postmaster)CGroup: /system.slice/postgresql-12.service├─4525 /usr/pgsql-12/bin/postmaster -D /var/lib/pgsql/12/data/├─4527 postgres: logger├─4529 postgres: checkpointer├─4530 postgres: background writer├─4531 postgres: walwriter├─4532 postgres: autovacuum launcher├─4533 postgres: stats collector└─4534 postgres: logical replication launcherDec 01 15:53:22 ip-10-0-1-48.ec2.internal systemd[1]: Starting PostgreSQL 12 database server...Dec 01 15:53:22 ip-10-0-1-48.ec2.internal postmaster[4525]: 2020-12-01 15:53:22.393 UTC [4525] LOG:  starting PostgreS...-bitDec 01 15:53:22 ip-10-0-1-48.ec2.internal postmaster[4525]: 2020-12-01 15:53:22.394 UTC [4525] LOG:  listening on IPv4...5432Dec 01 15:53:22 ip-10-0-1-48.ec2.internal postmaster[4525]: 2020-12-01 15:53:22.395 UTC [4525] LOG:  listening on Unix...432"Dec 01 15:53:22 ip-10-0-1-48.ec2.internal postmaster[4525]: 2020-12-01 15:53:22.397 UTC [4525] LOG:  listening on Unix...432"Dec 01 15:53:22 ip-10-0-1-48.ec2.internal postmaster[4525]: 2020-12-01 15:53:22.407 UTC [4525] LOG:  redirecting log o...cessDec 01 15:53:22 ip-10-0-1-48.ec2.internal postmaster[4525]: 2020-12-01 15:53:22.407 UTC [4525] HINT:  Future log outpu...og".Dec 01 15:53:22 ip-10-0-1-48.ec2.internal systemd[1]: Started PostgreSQL 12 database server.Hint: Some lines were ellipsized, use -l to show in full.Have a good day!Edited by: RamonResendiz-AWS on Dec 1, 2020 7:56 AMEdited by: RamonResendiz-AWS on Dec 1, 2020 7:57 AMRamonResendiz-AWS wrote:Hi Fernando,Next are the step to install PostgreSQL 12.X on your environment:1.- Create an EBS snapshot of your system (highly recommended)2.- Create a new repo for "PostgreSQL 12 for RHEL/CentOS 7 - x86_64" with the following command:$ sudo tee /etc/yum.repos.d/pgdg.repo<<EOF[pgdg12]name=PostgreSQL 12 for RHEL/CentOS 7 - x86_64baseurl=https://download.postgresql.org/pub/repos/yum/12/redhat/rhel-7-x86_64enabled=1gpgcheck=0EOF3.- Generate the metadata cache (this can take a while)$ sudo yum makecache4.- Install PostgreSQL 12.x$ sudo yum install postgresql12.x86_64 postgresql12-libs.x86_64 postgresql12-server.x86_645.- Initialize the database for  PostgreSQL 12.x$ sudo  /usr/pgsql-12/bin/postgresql-12-setup initdbInitializing database ... OK6.- Start the PostgreSQL 12 engine$ sudo systemctl start postgresql-12.service$ sudo systemctl status postgresql-12.service● postgresql-12.service - PostgreSQL 12 database serverLoaded: loaded (/usr/lib/systemd/system/postgresql-12.service; enabled; vendor preset: disabled)Active: active (running) since Tue 2020-12-01 15:53:22 UTC; 1s agoDocs: https://www.postgresql.org/docs/12/static/Process: 4519 ExecStartPre=/usr/pgsql-12/bin/postgresql-12-check-db-dir ${PGDATA} (code=exited, status=0/SUCCESS)Main PID: 4525 (postmaster)CGroup: /system.slice/postgresql-12.service├─4525 /usr/pgsql-12/bin/postmaster -D /var/lib/pgsql/12/data/├─4527 postgres: logger├─4529 postgres: checkpointer├─4530 postgres: background writer├─4531 postgres: walwriter├─4532 postgres: autovacuum launcher├─4533 postgres: stats collector└─4534 postgres: logical replication launcherDec 01 15:53:22 ip-10-0-1-48.ec2.internal systemd[1]: Starting PostgreSQL 12 database server...Dec 01 15:53:22 ip-10-0-1-48.ec2.internal postmaster[4525]: 2020-12-01 15:53:22.393 UTC [4525] LOG:  starting PostgreS...-bitDec 01 15:53:22 ip-10-0-1-48.ec2.internal postmaster[4525]: 2020-12-01 15:53:22.394 UTC [4525] LOG:  listening on IPv4...5432Dec 01 15:53:22 ip-10-0-1-48.ec2.internal postmaster[4525]: 2020-12-01 15:53:22.395 UTC [4525] LOG:  listening on Unix...432"Dec 01 15:53:22 ip-10-0-1-48.ec2.internal postmaster[4525]: 2020-12-01 15:53:22.397 UTC [4525] LOG:  listening on Unix...432"Dec 01 15:53:22 ip-10-0-1-48.ec2.internal postmaster[4525]: 2020-12-01 15:53:22.407 UTC [4525] LOG:  redirecting log o...cessDec 01 15:53:22 ip-10-0-1-48.ec2.internal postmaster[4525]: 2020-12-01 15:53:22.407 UTC [4525] HINT:  Future log outpu...og".Dec 01 15:53:22 ip-10-0-1-48.ec2.internal systemd[1]: Started PostgreSQL 12 database server.Hint: Some lines were ellipsized, use -l to show in full.Have a good day!Edited by: RamonResendiz-AWS on Dec 1, 2020 7:56 AMEdited by: RamonResendiz-AWS on Dec 1, 2020 7:57 AMRamonResendiz-AWS wrote:Hi Fernando,Next are the step to install PostgreSQL 12.X on your environment:1.- Create an EBS snapshot of your system (highly recommended)2.- Create a new repo for "PostgreSQL 12 for RHEL/CentOS 7 - x86_64" with the following command:$ sudo tee /etc/yum.repos.d/pgdg.repo<<EOF[pgdg12]name=PostgreSQL 12 for RHEL/CentOS 7 - x86_64baseurl=https://download.postgresql.org/pub/repos/yum/12/redhat/rhel-7-x86_64enabled=1gpgcheck=0EOF3.- Generate the metadata cache (this can take a while)$ sudo yum makecache4.- Install PostgreSQL 12.x$ sudo yum install postgresql12.x86_64 postgresql12-libs.x86_64 postgresql12-server.x86_645.- Initialize the database for  PostgreSQL 12.x$ sudo  /usr/pgsql-12/bin/postgresql-12-setup initdbInitializing database ... OK6.- Start the PostgreSQL 12 engine$ sudo systemctl start postgresql-12.service$ sudo systemctl status postgresql-12.service● postgresql-12.service - PostgreSQL 12 database serverLoaded: loaded (/usr/lib/systemd/system/postgresql-12.service; enabled; vendor preset: disabled)Active: active (running) since Tue 2020-12-01 15:53:22 UTC; 1s agoDocs: https://www.postgresql.org/docs/12/static/Process: 4519 ExecStartPre=/usr/pgsql-12/bin/postgresql-12-check-db-dir ${PGDATA} (code=exited, status=0/SUCCESS)Main PID: 4525 (postmaster)CGroup: /system.slice/postgresql-12.service├─4525 /usr/pgsql-12/bin/postmaster -D /var/lib/pgsql/12/data/├─4527 postgres: logger├─4529 postgres: checkpointer├─4530 postgres: background writer├─4531 postgres: walwriter├─4532 postgres: autovacuum launcher├─4533 postgres: stats collector└─4534 postgres: logical replication launcherDec 01 15:53:22 ip-10-0-1-48.ec2.internal systemd[1]: Starting PostgreSQL 12 database server...Dec 01 15:53:22 ip-10-0-1-48.ec2.internal postmaster[4525]: 2020-12-01 15:53:22.393 UTC [4525] LOG:  starting PostgreS...-bitDec 01 15:53:22 ip-10-0-1-48.ec2.internal postmaster[4525]: 2020-12-01 15:53:22.394 UTC [4525] LOG:  listening on IPv4...5432Dec 01 15:53:22 ip-10-0-1-48.ec2.internal postmaster[4525]: 2020-12-01 15:53:22.395 UTC [4525] LOG:  listening on Unix...432"Dec 01 15:53:22 ip-10-0-1-48.ec2.internal postmaster[4525]: 2020-12-01 15:53:22.397 UTC [4525] LOG:  listening on Unix...432"Dec 01 15:53:22 ip-10-0-1-48.ec2.internal postmaster[4525]: 2020-12-01 15:53:22.407 UTC [4525] LOG:  redirecting log o...cessDec 01 15:53:22 ip-10-0-1-48.ec2.internal postmaster[4525]: 2020-12-01 15:53:22.407 UTC [4525] HINT:  Future log outpu...og".Dec 01 15:53:22 ip-10-0-1-48.ec2.internal systemd[1]: Started PostgreSQL 12 database server.Hint: Some lines were ellipsized, use -l to show in full.Have a good day!Edited by: RamonResendiz-AWS on Dec 1, 2020 7:56 AMEdited by: RamonResendiz-AWS on Dec 1, 2020 7:57 AMActually @RamonResendiz-AWSYou have a typo in Step 2 -- you have the AWS Forum URL.It should be not be:[pdg12] that is the URL for the forumsIt should be (had to escape the brackets to break URL):sudo tee /etc/yum.repos.d/pgdg.repo<<EOF\[pgdg12]name=PostgreSQL 12 for RHEL/CentOS 7 - x86_64baseurl=https://download.postgresql.org/pub/repos/yum/12/redhat/rhel-7-x86_64enabled=1gpgcheck=0EOFOtherwise all was good - thank you!    John    Edited by: jwalsh2me on Jan 16, 2021 9:56 AMCommentSharejwalsh2meanswered 2 years ago0Hello,I have followed these instructions exactly, but I get the following result when I try to initialize the database:-bash-4.2# sudo /usr/pgsql-12/bin/postgresql-12-setup initdbFailed to get D-Bus connection: No such file or directoryfailed to find PGDATA setting in postgresql-12.serviceI am running Amazon Linux 2 under Windows Subsystem for Linux on a Windows 10 laptop.I am not using docker.Regards,IverCommentShareIverBandanswered 2 years ago0Coming up on a year since this was asked for... rds now supports postgres 13, ec2 still only has postgres 11CommentSharebryanamanswered 2 years ago0Dupe post sorryCommentSharebryanamanswered 2 years ago"


Question: Elastic Beanstalk environment stopped working - loadbalancer not found

"At 2020-03-17 12:52:40 UTC-0700, a warning occurred:Environment health has transitioned from Ok to Degraded. 1 instance online is below Auto Scaling group desired capacity 2. Auto Scaling activity failed 42 seconds ago with error: There is no ACTIVE Load Balancer named 'awseb-e-2-AWSEBLoa-Q8OUAZWKIJD8'. Validating load balancer configuration failed. At 2020-03-17T19:51:23Z a monitor alarm awseb-e-2hskntpzpt-stack-AWSEBCloudwatchAlarmHigh-9D8FOVHO5L31 in state ALARM triggered policy awseb-e-2hskntpzpt-stack-AWSEBAutoScalingScaleUpPolicy-9SAFEXSFPA9C changing the desired capacity from 1 to 2. At 2020-03-17T19:51:48Z an instance was started in response to a difference between desired and actual capacity, increasing the capacity from 1 to 2.Since then it has been trying to do environment updates, with the warning, e.g.:2020-03-17 17:28:36 UTC-0700LoadBalancer awseb-e-2-AWSEBLoa-Q8OUAZWKIJD8 could not be found.As far as I'm aware, nothing has been touched with the setup for this website in Elastic Beanstalk, but all of a sudden there's a missing loadbalancer.Any tips on how I can investigate and rectify this?FollowComment"

Answer: "0The issue was resolved with support center and was an issue at the account level, not the technology.CommentShareElleTrudgettanswered 3 years ago"


Question: Is it possible to completely hide the broadcaster's viewpoint and only show a guest's stream using the IVS stage feature?

"I'm currently reading through the official documentation on the "multiple hosts" feature of Amazon IVS and one thing I don't fully understand is: Can I completely hide the broadcaster's stream to only show the viewpoint of a guest? E.g. in the example of the guide, can Alice be completely invisible to the audience and only Bob's video be shown in fullscreen?FollowComment"

Answer: "1Accepted AnswerYes, this is possible. If you don't add the slot for the local stream (either audio or video), then it will not be visible in the broadcast.See the docs for more info.CommentSharerecursivecodesanswered 2 months agoNils a month agoThanks, I'll try that and report back.Update: Tested this and can confirm that it works!Share"


Question: Blue/Green deployment - IAM roles

Are IAM roles (associated with the Blue cluster) replicated to the Green one during the Blue/Green environment creation?FollowComment

Answer: "0If this refers to the PI/ enhanced monitoring IAM role, we reuse the IAM roles from blue on green.CommentShareAWS-RDS-Product Manageranswered 4 months ago0We used IAM Role to access S3 in an RDS Cluster, and the new green environment did not inherit this IAM role. We configured it manually after its creation.CommentShareeubideanswered 4 months ago"


Question: Run a Lambda function for RDS using the DBInstanceIdentifier

"Hello,I have been trying to automate stopping RDS instance using a Lambda Function when the number of connections made to the instances are low than 1. I have used an EventBridge that triggers the Lambda function when the Alarm created goes into In Alarm.From this, it stops all the RDS instances even those with connections. I understand that the issue is in the Lambda function since it loops through all instances and turns them off.I was inquiring if there is a way to pass the DBInstanceIdentifier of the instance in alarm state only to the lambda function for it to only shut down the instance in which the alarm is on.Below is the lambda code used.import boto3import ostarget_db = Noneregion = os.environ['AWS_REGION']rds = boto3.client('rds', region_name=region)def get_tags_for_db(db):instance_arn = db['DBInstanceArn']instance_tags = rds.list_tags_for_resource(ResourceName=instance_arn)return instance_tags['TagList']def get_tags_for_db_cluster(db):instance_arn = db['DBClusterArn']instance_tags = rds.list_tags_for_resource(ResourceName=instance_arn)return instance_tags['TagList']def lambda_handler(event, context):dbs = rds.describe_db_instances()readReplica = []for db in dbs['DBInstances']:    readReplicaDB = db['ReadReplicaDBInstanceIdentifiers']    readReplica.extend(readReplicaDB)print("readReplica : " + str(readReplica))for db in dbs['DBInstances']:    db_id = db['DBInstanceIdentifier']    db_engine = db['Engine']    print('DB ID : ' + str(db_id))    db_tags = get_tags_for_db(db)    print("All Tags : " + str(db_tags))    tag = next(iter(filter(lambda tag: tag['Key'] == 'AutoStop' and tag['Value'].lower() == 'true', db_tags)), None)    print("AutoStop Tag : " + str(tag))    if db_engine not in ['aurora-mysql','aurora-postgresql']:        if db_id not in readReplica and len(readReplica) == 0:            if tag:                target_db = db                print("DB Details : " + str(target_db))                db_id = target_db['DBInstanceIdentifier']                db_status = target_db['DBInstanceStatus']                print("DB ID : " + str(db_id))                print("DB Status : " + str(db_status))                if db_status == "available":                    AutoStopping = rds.stop_db_instance(DBInstanceIdentifier=db_id)                    print("Stopping DB : " + str(db_id))                else:                    print("Database already stopped : " + str(db_id))            else:                print("AutoStop Tag Key not set for Database to Stop...")        else:            print("Cannot stop or start a Read-Replica Database...")dbs = rds.describe_db_clusters()readReplica = []for db in dbs['DBClusters']:    readReplicaDB = db['ReadReplicaIdentifiers']    readReplica.extend(readReplicaDB)print("readReplica : " + str(readReplica))for db in dbs['DBClusters']:    db_id = db['DBClusterIdentifier']    db_engine = db['Engine']    print('DB ID : ' + str(db_id))    db_tags = get_tags_for_db_cluster(db)    print("All Tags : " + str(db_tags))    tag = next(iter(filter(lambda tag: tag['Key'] == 'AutoStop' and tag['Value'].lower() == 'true', db_tags)), None)    print("AutoStop Tag : " + str(tag))    if db_engine in ['aurora-mysql','aurora-postgresql']:        if db_id not in readReplica and len(readReplica) == 0:            if tag:                target_db = db                db_id = target_db['DBClusterIdentifier']                db_status = target_db['Status']                print("Cluster DB ID : " + str(db_id))                print("Cluster DB Status : " + str(db_status))                if db_status == "available":                    AutoStopping = rds.stop_db_cluster(DBClusterIdentifier=db_id)                    print("Stopping Cluster DB : " + str(db_id))                else:                    print("Cluster Database already stopped : " + str(db_id))            else:                print("AutoStop Tag Key not set for Cluster Database to Stop...")        else:            print("Cannot stop or start a Read-Replica Cluster Database...")FollowComment"

Answer: "0Note that lambda_handler() accepts an "event" argument which, as described at https://docs.aws.amazon.com/lambda/latest/dg/services-cloudwatchevents.html is a document that wraps the source event.  You can dig a bit deeper into the docs to find the event format that applies for your alarm, or trigger the alarm, capture the event and view it.  I'd expect the DB identifier would be in there.CommentShareEXPERTskinsmananswered a year ago0Hello guys,I did some research and was able to get a break through. Using SNS as a trigger to the lambda function after the Cloud Watch alarm changes to IN ALARM. CloudWatch provides a message that is sent to a SNS Topic. When the SNS triggers the Lambda Function, the message event can be obtained by a Lambda code. From that you can tap into the message dictionary and get the value of the DBIdentifier.The below link shows how you can get the message from the SNS topichttps://docs.aws.amazon.com/lambda/latest/dg/with-sns-create-package.html#with-sns-example-deployment-pkg-pythonCommentShareLamech Kibetanswered a year ago"


Question: "Quicksight suddenly stop working, table partitions are now split base on job run"

"Hi,I'm using Glue with DataBrew for Quicksight and I got this message on quicksight.Partition value count does not match the partition column count. (from athena)So my table is using a column named "name" as a partition key.For some reason, it seems my partitions have split using my data brew job name as a subdivision.For exemple, I still have my old partitions name=[name] but now I got new paritions every job run that look like thismy-data-brew-job-02Oct2022_1664669141680/name=[name]I do not understand what caused this error and how to fix it, reruning glue crawler does not do the trick.Thank youFollowComment"


Question: AWS create-policy MalformedPolicyDocument

"Hello,I did not find the solution here so I need to ask you for some help. I am trying to create a new simple aws policy (cli) with powershell and I have the error:An error occurred (MalformedPolicyDocument) when calling the CreatePolicy operation: Syntax errors in policy.This is the command I use:aws iam create-policy --policy-name TEST-POLICY --policy-document file://policy.jsonAnd this is the policy.json file:{"Version": "2012-10-17","Statement": [{"Sid": "VisualEditor0","Effect": "Allow","Action": ["iam:GetUser","iam:GetGroup"],"Resource": ["arn:aws:iam::(arn id):user/(arn id)","arn:aws:iam::(arn id):group/(arn id)"]}]}It is strange because when I use the AWS website JSON editor it works fine. But when I try it on my windows pc does not.Maybe there is something missing on the cmdlet?PS: I wrote (arn id) but there is an ID in the real fileFollowComment"

Answer: 1Solved. It was because the encoding UTF-8-BOM. It must be UTF-8CommentShareSimpleaccanswered 2 years ago0In general use CloudTrail to troubleshoot the error. Refer to this guide : https://aws.amazon.com/premiumsupport/knowledge-center/cloudformation-malformed-policy-errors/CommentSharegromitanswered a year ago


Question: Is there a way to install R libraries in SageMaker that receive a non-zero exit status?

"Hi all, I'm having an issue with an R kernel/Jupyter notebook. I've come across two different libraries that result in the following error:Warning message in install.packages("XML", repos = "https://cran.r-project.org"):“installation of package ‘XML’ had non-zero exit status”Updating HTML index of packages in '.Library'Making 'packages.html' ... doneXML is the second package that I have run into this issue with. The other is rJava.I found a workaround that could work if I had root access, which is installing via the command line in a terminal. Which involves commands such as:yum install r-cran-rjavaHowever, I don't have root access and cannot install as I get the message "You need to be root to perform this command." So this workaround hasn't been possible.After checking the documentation for rJava and XML, I am running the requirements for JDK and other system requirements in SageMaker. This issue wasn't reproducible on a local RStudio environment. XML is a dependency for multiple R libraries (as is rJava). Is there a way that I can still install these packages?FollowComment"

Answer: "0Accepted AnswerFor Amazon SageMaker notebook Instances, you have the ability to assume root privileges, so instead of:$ yum install r-cran-rjavayou can try:$ sudo yum install r-cran-rjavawhich will allow you to impersonate the superuser (ie. root) for that command 1But I don't believe that package exists in the available repos (ie. may be valid for another distro of Linux, but does not appear to be available in the yum repos -- running yum search 'r-cran-rjava' returned no results 2)Instead, from a prompt, install R + the necessary development files for later installation of R packages:$ sudo yum install -y R-java-devel.x86_64And finally, install the necessary XML libraries to support the XML package in R:$ sudo yum install -y libxml2-devel 3After which you can then open R (either as root user...)$ sudo Ror personal/local user$ Rand execute the package installation:> install.packages("XML", repos = "https://cran.r-project.org")EDITED TO FIX RJAVA PACKAGE INSTALLATIONIt looks like the installation is requiring libgomp.spec/libgomp.a files, so you can first find that file:$ sudo find / -iname libgomp.specwhich should be located at /usr/lib/gcc/x86_64-amazon-linux/4.8.5/libgomp.spec -- if so, you can manually create symlinks to fix this:$ sudo ln -s /usr/lib/gcc/x86_64-amazon-linux/4.8.5/libgomp.spec /usr/lib64/$ sudo ln -s /usr/lib/gcc/x86_64-amazon-linux/4.8.5/libgomp.a /usr/lib64/If that ran correctly, you should now see both files in /usr/lib64 path:$ ls /usr/lib64/libgomp*Once confirmed, you can run the install.package('rJava') command.CommentShareAWS-User-6659073answered 5 years ago"


Question: AWS Organizations for Hosting Providers

"We have between 15-20 smaller clients for whom we provide hosting services... typically static or ColdFusion/Lucee sites with backend SQL Server or MariaDB databases. We are considering migrating these clients to AWS, each with their own dedicated root account with appropriate user accounts. Instead, would it make more sense to use ControlTower and set up an organization where our company is "root" and then create an OU for clients, with each client being a sub-OU under that? The consolidated billing alone would be the first obvious benefit, but the centralized logging and security guardrails would seems to be beneficial as well. Is there a best practice or fairly standard recipe of sorts, for this type of use case?  TIA for any info the community can provide!FollowComment"

Answer: "0If you provide your clients access to servers and databases, there isn't really a need to for setting up an org for each client but create an OU or just an account per client/project like you said. This also works even if you are giving your clients access to their own AWS account as long as they are not looking for to build thing across multiple accounts and utilise org. features. Simple website hosting doesn't sound like would be interested in those, so keep it simple and follow the plan as you described it.PS. If this is your core business, you might be interested in AWS becoming an AWS partner. https://aws.amazon.com/partners/CommentShareKalluanswered a year agoatcs a year agoIf you re-read my question, the proposal was not that each client get set up as a full separate organization, but rather each client become an OU under OUR single company organization. Again, for consolidated billing at the very least, but also for the other benefits that AWS Orgs provides.Share"


Question: AWS Patch/Scan failure with message: No IMDS credentials found on instance.

"Error output:/usr/lib/python3.6/site-packages/OpenSSL/crypto.py:12: CryptographyDeprecationWarning: Python 3.6 is no longer supported by the Python core team. Therefore, support for it is deprecated in cryptography. The next release of cryptography (40.0) will be the last to support Python 3.6.from cryptography import x509No IMDS credentials found on instance.failed to run commands: exit status 156Any idea on how to fix this?FollowComment"

Answer: "0From the error, it appears to be due to an older version of Python.Try upgrading your Python version.CommentShareEXPERTRiku_Kobayashianswered 25 days ago"


Question: EC2 Image Builder: Role does not exist or does not have sufficient permissions

"I'm trying to make a custom Ubuntu 20.04 image from a .iso file that I have uploaded to Amazon S3. I've went through all the steps to create an image pipeline, but when I get to the end and hit create pipeline it just says Error message: InvalidParameter: The service role role-name provided does not exist or does not have sufficient permissions. I've made a role specifically for this pipeline, and even when I attach a policy that has all permissions to all resources I still get this error that says it doesn't have permission.Any help here?FollowComment"

Answer: "0The IAM role specified in the recipe will be passed as RoleName input parameter for ImportImage API. This role will be used by VMIE to perform certain operations on your behalf and should be assumable by vmie.amazonaws.com.  Verify the trust policy of your role and make sure that vmie.amazonaws.com is in the principal list.VM Import/Export Requirements - Required service role - https://docs.aws.amazon.com/vm-import/latest/userguide/vmie_prereqs.html#vmimport-roleExample trust policy for VMIE role:{   "Version": "2012-10-17",   "Statement": [      {         "Effect": "Allow",         "Principal": { "Service": "vmie.amazonaws.com" },         "Action": "sts:AssumeRole",         "Condition": {            "StringEquals":{               "sts:Externalid": "vmimport"            }         }      }   ]}CommentShareRenjith_Ranswered a year ago"


Question: DMS Postgres Source Error: No tables were found at task initialization

"I am trying to setup AWS DMS using an RDS Postgres instance as a source. However, I keep getting the following error when starting the replication task:Last Error No tables were found at task initialization. Either the selected table(s) or schemas(s) no longer exist or no match was found for the table selection pattern(s). If you would like to start a Task that does not initially capture any tables, set Task Setting FailOnNoTablesCaptured to false and restart task. Stop Reason FATAL_ERROR Error Level FATALI followed the DMS guide and my source connection test is successful. I am using the master account and have verified the pglogical plugin is installed.For my Task selection rules, I have tried using the wildcard ("schema-name": "%", "table-name": "%") and targeting specific schema and tables with no success. I have also tried all 3 migration types: full-load, cdc, and full-load-and-cdc. Here is my complete task configuration:{    "Logging": {        "EnableLogging": false,        "LogComponents": [            {                "Severity": "LOGGER_SEVERITY_DEFAULT",                "Id": "TRANSFORMATION"            },            {                "Severity": "LOGGER_SEVERITY_DEFAULT",                "Id": "SOURCE_UNLOAD"            },            {                "Severity": "LOGGER_SEVERITY_DEFAULT",                "Id": "IO"            },            {                "Severity": "LOGGER_SEVERITY_DEFAULT",                "Id": "TARGET_LOAD"            },            {                "Severity": "LOGGER_SEVERITY_DEFAULT",                "Id": "PERFORMANCE"            },            {                "Severity": "LOGGER_SEVERITY_DEFAULT",                "Id": "SOURCE_CAPTURE"            },            {                "Severity": "LOGGER_SEVERITY_DEFAULT",                "Id": "SORTER"            },            {                "Severity": "LOGGER_SEVERITY_DEFAULT",                "Id": "REST_SERVER"            },            {                "Severity": "LOGGER_SEVERITY_DEFAULT",                "Id": "VALIDATOR_EXT"            },            {                "Severity": "LOGGER_SEVERITY_DEFAULT",                "Id": "TARGET_APPLY"            },            {                "Severity": "LOGGER_SEVERITY_DEFAULT",                "Id": "TASK_MANAGER"            },            {                "Severity": "LOGGER_SEVERITY_DEFAULT",                "Id": "TABLES_MANAGER"            },            {                "Severity": "LOGGER_SEVERITY_DEFAULT",                "Id": "METADATA_MANAGER"            },            {                "Severity": "LOGGER_SEVERITY_DEFAULT",                "Id": "FILE_FACTORY"            },            {                "Severity": "LOGGER_SEVERITY_DEFAULT",                "Id": "COMMON"            },            {                "Severity": "LOGGER_SEVERITY_DEFAULT",                "Id": "ADDONS"            },            {                "Severity": "LOGGER_SEVERITY_DEFAULT",                "Id": "DATA_STRUCTURE"            },            {                "Severity": "LOGGER_SEVERITY_DEFAULT",                "Id": "COMMUNICATION"            },            {                "Severity": "LOGGER_SEVERITY_DEFAULT",                "Id": "FILE_TRANSFER"            }        ],        "CloudWatchLogGroup": null,        "CloudWatchLogStream": null    },    "StreamBufferSettings": {        "StreamBufferCount": 3,        "CtrlStreamBufferSizeInMB": 5,        "StreamBufferSizeInMB": 8    },    "ErrorBehavior": {        "FailOnNoTablesCaptured": true,        "ApplyErrorUpdatePolicy": "LOG_ERROR",        "FailOnTransactionConsistencyBreached": false,        "RecoverableErrorThrottlingMax": 1800,        "DataErrorEscalationPolicy": "SUSPEND_TABLE",        "ApplyErrorEscalationCount": 0,        "RecoverableErrorStopRetryAfterThrottlingMax": true,        "RecoverableErrorThrottling": true,        "ApplyErrorFailOnTruncationDdl": false,        "DataTruncationErrorPolicy": "LOG_ERROR",        "ApplyErrorInsertPolicy": "LOG_ERROR",        "EventErrorPolicy": "IGNORE",        "ApplyErrorEscalationPolicy": "LOG_ERROR",        "RecoverableErrorCount": -1,        "DataErrorEscalationCount": 0,        "TableErrorEscalationPolicy": "STOP_TASK",        "RecoverableErrorInterval": 5,        "ApplyErrorDeletePolicy": "IGNORE_RECORD",        "TableErrorEscalationCount": 0,        "FullLoadIgnoreConflicts": true,        "DataErrorPolicy": "LOG_ERROR",        "TableErrorPolicy": "SUSPEND_TABLE"    },    "TTSettings": {        "TTS3Settings": null,        "TTRecordSettings": null,        "EnableTT": false    },    "FullLoadSettings": {        "CommitRate": 10000,        "StopTaskCachedChangesApplied": false,        "StopTaskCachedChangesNotApplied": false,        "MaxFullLoadSubTasks": 8,        "TransactionConsistencyTimeout": 600,        "CreatePkAfterFullLoad": false,        "TargetTablePrepMode": "DROP_AND_CREATE"    },    "TargetMetadata": {        "ParallelApplyBufferSize": 0,        "ParallelApplyQueuesPerThread": 0,        "ParallelApplyThreads": 0,        "TargetSchema": "",        "InlineLobMaxSize": 0,        "ParallelLoadQueuesPerThread": 0,        "SupportLobs": false,        "LobChunkSize": 0,        "TaskRecoveryTableEnabled": false,        "ParallelLoadThreads": 0,        "LobMaxSize": 0,        "BatchApplyEnabled": false,        "FullLobMode": false,        "LimitedSizeLobMode": false,        "LoadMaxFileSize": 0,        "ParallelLoadBufferSize": 0    },    "BeforeImageSettings": null,    "ControlTablesSettings": {        "historyTimeslotInMinutes": 5,        "HistoryTimeslotInMinutes": 5,        "StatusTableEnabled": false,        "SuspendedTablesTableEnabled": false,        "HistoryTableEnabled": false,        "ControlSchema": "",        "FullLoadExceptionTableEnabled": false    },    "LoopbackPreventionSettings": null,    "CharacterSetSettings": null,    "FailTaskWhenCleanTaskResourceFailed": false,    "ChangeProcessingTuning": {        "StatementCacheSize": 50,        "CommitTimeout": 1,        "BatchApplyPreserveTransaction": true,        "BatchApplyTimeoutMin": 1,        "BatchSplitSize": 0,        "BatchApplyTimeoutMax": 30,        "MinTransactionSize": 1000,        "MemoryKeepTime": 60,        "BatchApplyMemoryLimit": 500,        "MemoryLimitTotal": 1024    },    "ChangeProcessingDdlHandlingPolicy": {        "HandleSourceTableDropped": true,        "HandleSourceTableTruncated": true,        "HandleSourceTableAltered": true    },    "PostProcessingRules": null}FollowComment"

Answer: 1Accepted Answerthe only thing which i could think is whether you have selected the right database name while creating the endpoint.the table mapping would have further selection option of schema/table names it could be %/% allowing selection of all schemas and tables from the source databaseCommentShareAWS-User-8174525-subhashanswered 8 months agorePost-User-9358114 8 months agoTurns out this was indeed my problem. I was attempting to use the default postgres database instead of the one I needed. Thanks for the help and sanity check 👍Share


Question: How can I limit user to specific queries and prevent export in Athena?

"I want to use Athena to allow users to troubleshoot and find specific data. I'm storing sensitive information, so I'd like to limit the user's queries against the tables. For example, the user can search for a specific field value, but they can only return 100 records at a time. I also would like to prevent exporting the data, but I don't see an appropriate policy to prevent this.Saved parameterized queries and prepared queries seem to offer a way to do this, but I don't see a way to only limit the user to these saved queries. I also don't want them to be able to write ad-hoc queries that can get at more data than the saved or prepared queries allow.I see the "per query data usage control" setting in the Workgroup to limit the data per query, but the minimum I can set this to is 10 MB, which is larger than I'd like to set it.In short, without creating a middle-layer API, is there a way to lock down the Athena console to prevent users from bulk-querying all the data and limit the user to pre-saved queries?FollowComment"

Answer: 0In short to my knowledge you cannot lockdown the console for returning only 100 recordsYou can definitely though use LakeFormation to do granular permissions on your data for certain users to access certain fieldsA simple approach instead of a middle api could be to front athena with step function console and remove users access to athena console but step functions console isn't exactly for non technical usersCommentShareEXPERTPeter_Ganswered 4 months ago


Question: Redshift serverless: error while trying to create an external table

"The error:> SQL Error [500310] [XX000]: [Amazon](500310) Invalid operation: Unknown std exception when calling external catalog API:   -----------------------------------------------  error:  The requested role arn:aws:iam::*******:role/service-role/AWSGlueServiceRole-analytics is not associated to cluster  code:      30000  context:     query:     0  location:  xen_aws_credentials_mgr.cpp:403  process:   padbmaster [pid=16004]  -----------------------------------------------;I was able to create a schema prior to creating external table, with no errors:create external schema rsqafrom data catalogdatabase 'actions'region 'us-west-2' iam_role 'arn:aws:iam::**********:role/service-role/AWSGlueServiceRole-analytics';But after that, this is the sql that produces the error above:create external table dev.rsqa.user_actions(  event_id varchar(256),  api_key varchar(32),  event_type varchar(32),  action_id INT8,  action_name varchar(128),  action_data_id INT8,  action_time INT4,  create_time INT4,  metadata varchar(256),  user_id INT8,  username varchar(256),  user_first_name varchar(128),  user_last_name varchar(128),  value FLOAT4,  passive BOOL)PARTITIONED BY (ics varchar(32),site_id varchar(32),year varchar(32),month varchar(32),week varchar(32),dt varchar(32))stored as parquet location 's3://my-datalake-qa/actions/user_actions/';does redshift serverless support external tables?or could this be due to another setting I am missing?FollowComment"

Answer: "0Update:I tried this external table setup in a regular redshift cluster (not a serverless one), and it works, after I do associate the role used to the cluster.For redshift serverless though, I do not see any clusters to attach the role to.So even if the error says: "The requested role ... is not associated to cluster", there is no "cluster" to associate the role to, when running a serverless instance.To corroborate that, I run:aws redshift describe-clustersAnd I got an empty response:{"Clusters": []}So I guess the questions is: is it possible (given the error), to associate a role to a clusterless redshift, as in when it runs serverless?or:Has anybody been able to create an external table in a redshift serverless instance? is that not supported?CommentShareramiroanswered a year ago0Hi Ramiro,Have you already added the IAM role to the Redshift Serverless namespace? If not, add it and then try to re-execute your command.Go to the Redshift Serverless console => Namespace configuration => Click on the appropriate namespace => Security and Encryption tab => Manage IAM Roles => Associate the IAM Role => Save changes.Thanks.CommentShareZiadanswered 8 months ago"


Question: HIVE_BAD_DATA with Parquet BINARY

"Hi,I saved some Parquet files (with Spark), and some of the fields were converted to Timestamp types. That appears to be saved as INT96, or BINARY, inside Parquet.When I declare the columns as TIMESTAMP in Amazon Athena, and then try to invoke them, I receive this error message:HIVE_BAD_DATA: Field scheduled_content_start_time's type BINARY in parquet is incompatible with type bigint defined in table schemaHowever, if I try to declare the column as type BINARY, it tells be that BINARY is not supported for Parquet file format.How can I resolve this?Thanks,MichaelFollowComment"

Answer: "0you could use stringCommentSharecamilo255423answered 6 years ago0Hi,Good day.But can you query a string as you would a timestamp tough?RegardsJJCommentSharejarrettjanswered 5 years ago"


Question: How to login to NICE DCV session?

Hello.Noob here.I have 2 Windows Computers in the same network.Both have the NICE DCV Server and NICE DCV Client installed.I can access https:/hostname_computer_1:8443/ and https:/hostname_computer_2:8443/ with ease.But what are the credentials to access e. g. computer_1 from computer_2?How can I get them / access them?Cheers.FollowComment

Answer: "1Accepted AnswerNICE DCV uses the system authentication method by default. Have you tried using a user account from those Widows machines to login? If you are trying to login from a Windows instance A to Windows instance B within a NICE DCV session, you can use a web browser or NICE DCV client on the client machine (Windows instance A). Alternatively, you can try to RDP to the Windows instance B as long as the RDP port is allowed.system — This is the default authentication method. Client authentication is delegated to the underlying operating system. For Windows NICE DCV servers, authentication is delegated to WinLogon. For Linux NICE DCV servers, authentication is delegated to PAM. Clients provide their system credentials when connecting to a NICE DCV session. Ensure that your clients have the credentials for the appropriate user accounts on the NICE DCV server.Configuring NICE DCV authenticationCommentShareTaka_Manswered 7 months agopiknockyou 7 months agoIt does not work.If the Registry Key for "authentication" is set to "none", I am able to access the Remote Machine (NICE DCV Server) via a Notebook (NICE DCV Client). The Windows Login screen of the Remote Machine will appear and I can login by entering my username & password (the same as I would do when physically sitting in front of the Remote Machine).BUT … If the Registry Key for "authentication" is set to "system", I will be requested to enter the login credentials directly into the NICE DCV client. However, it will not accept the same username & password, which works for Registry Key "authentication" = "none" at the Windows Login Screen.What is the problem?Do I need to enter something else before/after the username? (like hostname etc.)FYI: I am in the same network and use the same Windows account for both, Remote Machine & Notebook.EDIT: It works now, after I added the Domain before the Username like "Domain\Username".Share"


Question: convert Dynamic IP address to Static IP

"Hi all,Here is my problem. I have 3 instances already attached the dynamic IP address. If there is any changes to the IP address (due to restart/shutdown etc.), it will affect my business operation.Without any changes to my dynamic IP address, my question is whether it is possible to convert the dynamic IP address for the instances to static IP address?I know it seems impossible as there isn't any options to convert the same dynamic IP address to static IP address for the instances, but would the AWS premium support be able to assist in helping to resolve this issue as this seems to be a special request?FollowComment"

Answer: "0I'm pretty sure if you create a static IP, it will be different from your current dynamic IP.My suggestion would be to just bite the bullet, convert to a static IP, and stick with that for the future.CommentShareDavid Ganswered 3 years ago0Thanks for using Lightsail. Unfortunately, we currently do not support to convert dynamic ip to static ip. Another option is that you can create the DNS to map with the ip address. You can then create a static ip and re-map the dynamic ip with the static ip.https://lightsail.aws.amazon.com/ls/docs/en_us/articles/understanding-dns-in-amazon-lightsailhttps://lightsail.aws.amazon.com/ls/docs/en_us/articles/lightsail-create-static-ipCommentShareAWS-User-2776000answered 3 years ago"


Question: elasticbeantalk for Ruby platform does not respect .ruby-version

"I deployed my app to elasticbeantalk onarn:aws:elasticbeanstalk:ap-northeast-1::platform/Ruby 2.7 runnin on 64bit Amazon Linux 2/3.4.4.It prepares Ruby 2.7.5 via rbenv, so I set .ruby-version to 2.7.5 in my repository.Then I deployed same app to another env with platform version 3.4.8.New env prepares Ruby 2.7.6. However, deployed app is working fine.Is this expected behavior? Why .ruby-version in the repository is not respected?FollowComment"


Question: Is it possible to have Ignition Edge (via MQTT Transmission Plug-in) as a Greengrass V2 client device?

"Hello, I am trying to connect Ignition Edge to my Greengrass V2 Core device (running in a VM) via MQTT.I did the steps explained on the Cloud discovery configuration, but I just cannot seem to get it to work properly.Is it possible to connect client devices to Greengrass Core without the use of the AWS SDK?FollowCommentvidishataws a year agoYes, it is possible to connect client devices without using the AWS SDK.Can you list the steps you performed for the cloud discovery?Share"

Answer: "1Accepted AnswerYes, you can connect to Greengrass as a client device as long as it meets the criteria of:Having the Thing, X.509 certificate, and policy registered in AWS IoTUsing cloud discovery to get the signing CA for the local server certificate, endpoint (name or IP address), and port number for the Core deviceConfiguring Ignition's MQTT module with the returned details of cloud discovery and the client certificate/private key to complete the local mTLS operation.One way to validate that everything is operational would be to use the AWS IoT Device SDK to verify the configuration of Greengrass Core and send messages to AWS IoT Core. Then you will know that's working correctly and can move on to the Ignition setup and testing.With a lot of moving parts, if you have questions, please respond and I'll help clarify.CommentShareGavin_Aanswered a year agoHopTech_vdr a year agoHi Gavin,Thank you, this clarifies it a bit for me.Currently, I am having a hard time with policy configuration. I'm at a loss which policies I need to set up, and how.I followed the “greengrass/v2/developerguide/client-devices-tutorial” guide, but I cannot enable the “greengrass:Discovery” permission via the IoT Core policies, as it isn't available as an option.There is an option to manually insert it via the JSON, but then I don't know if it is properly enabled.Is there a guide I can use to help with the policy setup and such?Share0An update on my question:After much researching, I think I finally got it to work. Turns out, it wasn't really about the policies. While I cannot select them on the IoT Greengrass Policy Console screen, I could still put them inside the JSON, which works correctly.After making sure every policy was correct, I tried to connect to my Greengrass Moquette Broker. This didn't work, I got an error which stated: “Unable to verify the first certificate”. After some digging, I found out that I didn't fulfil the second criteria. I overlooked getting the signed local server certificate from the Greengrass Core. I solved this by requesting the Certificate using the Discovery API with curl.After this, it worked correctly, and I could connect Ignition Edge to my Greengrass Core.Once again, thank you very much for your assistance, Gavin!CommentShareHopTech_vdranswered a year agouse1998 a month agoHi :) I'm trying to do the same right now. But I can't deploy the Greengrass Group subscriptions to my core device. It is stuck in "In Progress" status. Did you have the same issue?Share"


Question: EBs - nginx config in laravel app cannot login.

"I just deploy a laravel app with auth for login. Everything work ok, however I could not login and show 504 error.My nginx conf:user                    nginx;error_log               /var/log/nginx/error.log warn;pid                     /var/run/nginx.pid;worker_processes        auto;worker_rlimit_nofile    32153;events {    worker_connections  1024;}http {    include       /etc/nginx/mime.types;    default_type  application/octet-stream;    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '                      '$status $body_bytes_sent "$http_referer" '                      '"$http_user_agent" "$http_x_forwarded_for"';    include       conf.d/*.conf;    map $http_upgrade $connection_upgrade {        default     "upgrade";    }    server {        listen        80 default_server;        access_log    /var/log/nginx/access.log main;        client_header_timeout 600s;        client_body_timeout   600s;        keepalive_timeout     600s;        proxy_connect_timeout 600s;        proxy_send_timeout    600s;        proxy_read_timeout    600s;        fastcgi_send_timeout  600s;        fastcgi_read_timeout  600s;        gzip                  off;        gzip_comp_level       4;        gzip_types text/plain text/css application/json application/javascript application/x-javascript text/xml application/xml application/xml+rss text/javascript;        # Do not include the Elastic Beanstalk generated locations        include conf.d/elasticbeanstalk/laravel.conf;        # Move Elastic Beanstalk healthd.conf content here        if ($time_iso8601 ~ "^(\d{4})-(\d{2})-(\d{2})T(\d{2})") {            set $year $1;            set $month $2;            set $day $3;            set $hour $4;        }        access_log /var/log/nginx/healthd/application.log.$year-$month-$day-$hour healthd;        # Move Elastic Beanstalk php.conf content here        root /var/www/html/public;        index index.php index.html index.htm;        # This is an additional configuration        location / {            try_files $uri $uri/ /index.php?$query_string;            gzip_static on;        }        location ~ \.(php|phar)(/.*)?$ {            fastcgi_split_path_info ^(.+\.(?:php|phar))(/.*)$;            fastcgi_intercept_errors on;            fastcgi_index  index.php;            fastcgi_param  QUERY_STRING       $query_string;            fastcgi_param  REQUEST_METHOD     $request_method;            fastcgi_param  CONTENT_TYPE       $content_type;            fastcgi_param  CONTENT_LENGTH     $content_length;            fastcgi_param  SCRIPT_NAME        $fastcgi_script_name;            fastcgi_param  REQUEST_URI        $request_uri;            fastcgi_param  DOCUMENT_URI       $document_uri;            fastcgi_param  DOCUMENT_ROOT      $document_root;            fastcgi_param  SERVER_PROTOCOL    $server_protocol;            fastcgi_param  REQUEST_SCHEME     $scheme;            fastcgi_param  HTTPS              $https if_not_empty;            fastcgi_param  GATEWAY_INTERFACE  CGI/1.1;            fastcgi_param  SERVER_SOFTWARE    nginx/$nginx_version;            fastcgi_param  REMOTE_ADDR        $remote_addr;            fastcgi_param  REMOTE_PORT        $remote_port;            fastcgi_param  SERVER_ADDR        $server_addr;            fastcgi_param  SERVER_PORT        $server_port;            fastcgi_param  SERVER_NAME        $server_name;            # PHP only, required if PHP was built with --enable-force-cgi-redirect            fastcgi_param  REDIRECT_STATUS    200;            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;            fastcgi_param  PATH_INFO $fastcgi_path_info;            fastcgi_pass   php-fpm;        }    }}FollowCommentChris_G EXPERTa year agoHello,  can you share the logs from your laravel.log detailing the 504 error?Sharenghiata_aws 10 months agoHello,my log said:2022/07/20 02:24:47 [error] 3726#3726: *510 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: x.x.x.x, server: , request: "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/www.sock:", host: "x.x.x.x", referrer: "http://x.x.x.x/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"I could not submit everything in my app.ShareChris_G EXPERT10 months agoWhy are you bundling PHPUnit to your server? PHPUnit should only be used locally in your development environment and not on your server.  Try removing phpunit.Share"


Question: Redirect external HTTP requests into VPN-network

"Hello guys!I have an algo VPN-server hosted in the AWS cloud, and I would like redirect external HTTP-request (from global internet), that comes, for example, to Load Balancer to be redirected to the PC inside my VPN-network.HTTP-request chain: client -> aws load balancer -> VPN-cloud -> My PC running serverAny ideas how to do it?I was thinking on launching an extra EC2-instance with VPN-client and proxy-server on board, so the sequence would be following: HTTP-request -> Load Balancer -> EC2-Instance -> PC in VPN. But I'm not sure that this solution is the simplest one.FollowComment"

Answer: "0When your client is on a Virtual Private Network, their access to the internet is across the VPN already. It will access the HTTP service you mention through the VPN, and out through that network's egress point(s).I presume the site on EC2 behind load balancers is a public site, so the main concern is about search engine indexing. Without knowing what use case you have for this, the simplest is a HTTP 302 redirect in your web application on that path to the DNS name that would resolve over the VPN from the client, but not for anyone else. The HTTP 302status , temporarily moved, will to tell crawlers to not index as it is "temporary," but it may still be indexed as a location eventually. It is unclear according to the documentation I have read.CommentShareRodney Lesteranswered 9 months agoStan Lewis 9 months agoHi Rodney! Thank you for the reply.Probably I wasn't clear enough, but the problem not in the computer that cannot access public web-site from the VPN-network. The problem is that I would like to host a http-server inside the VPN-network and make http-queries to this server outside of the VPN-network.The flow is following:Rrandom HTTP-client -> AWS -> VPN-Network -> My HTTP-ServerWhy am I doing it: I have my own servers, where I host my applications, and I use AWS for hosting VPN-server. And I want clients from the public internet to make calls to my servers inside the VPN-network.ShareRodney Lester 9 months agoThe HTTP/S clients would need to be on the VPN as well to make calls inside your VPN network.Assuming that those clients are not, then you need a public endpoint on your private network to allow traffic to be routed to that server, like our load balancers and internet gateways. It would be implementation dependent on the VPN and it's resident service.Share"


Question: Connection error when registering a Monitron gateway

"Hi,I am registering a gateway with Monitron App on Pixel 4 (USA) running the latest OS.I am able to (1) Push the button on the case to enter the commissioning mode and (2) Find and click the gateway on the screen to allow pairing with the gateway.However an error message “Couldn’t connect to the Monitron service. Please check your phone’s internet connection and try again." is shown every time I try to register it.I am sure my phone is connected and I can pair sensors. So I believe my account and project are okay.Please share any ideas that may solve this. Thank you!Best,Edited by: Dickson on May 19, 2021 10:48 PMFollowComment"

Answer: "0Solved. This error was caused because the gateway had been associated with a different project, though the error message was a bit confusing (it said it's a network connection error). Thanks.CommentShareDicksonanswered 2 years ago"


Question: DMS Sync Issues with nullable column and new columns

"IHAC who is facing a couple of sync issues:Say we have a table T on mysql src db with a column C that is nullable. The table is fully loaded on the target and the DMS task is operating in CDC mode. If this table T gets altered so column C is made not nullable with a default, this change does not propagate , nor does the DMS task indicate an error.In addition, any new columns added to table T on the source, also do not propagate. When the DMS task is operating in CDC mode, new tables that are created without a Primary Key do not propagate to the target. It can break DMS replication (error shows in logs).Thank youFollowComment"

Answer: "0Hello,this is a documented limitation of CDC for MySQL as a source:https://docs.aws.amazon.com/dms/latest/userguide/CHAP_Source.MySQL.html#CHAP_Source.MySQL.LimitationsCommentShareA-Shevchenkoanswered a year agoNadeem_B a year agoWould this also apply to Aurora MySQL as a source? Customer has Aurora MySQLShare0Hello,--> In general, DMS supports below DDL:[+] https://docs.aws.amazon.com/dms/latest/userguide/CHAP_Introduction.SupportedDDL.html--> Using MySQL(on-prem/Aurora MySQL/RDS MySQL) as source having limitation:"However, DROP TABLE, RENAME TABLE, and updates made to other attributes, such as column default value, column nullability, character set and so on, are not supported." [+] https://docs.aws.amazon.com/dms/latest/userguide/CHAP_Source.MySQL.html#CHAP_Source.MySQL.Limitations--> If create table or add column not working properly, will need to dive deep into the issue using DMS log with detailed debug on SOURCE_CAPTURE, TASK_MANAGER, TARGET_APPLY to check further.Note: "Using an ALTER TABLE table_name ADD COLUMN column_name statement to add columns to the beginning (FIRST) or the middle of a table (AFTER) isn't supported. Columns are always added to the end of the table."--> What are the target/source endpoints:Engine version (source and target)DMS version -- Check release note see if any known issues--> Go through the current limitations and documentations to verify further. [+] https://docs.aws.amazon.com/dms/latest/userguide/CHAP_Source.MySQL.htmlCommentShareSUPPORT ENGINEERKevin_Zanswered a year ago"


Question: redshift query editor v2 will not run any saved queries or notebooks - run button is deactivated after saving

"Hello,Redshift query editor v2 has suddenly started not to run saved queries. When I select from a table and click run, the query runs. But as soon as the query is saved, the run button is deactivated. It will not run any saved queries or notebooks. What has happened to cause this? Before it was fine.The only thing I have done which could have triggered this behaviour is to copy some data from s3 into redshift tables using the copy command and the IAM role 'arn:aws:iam::123456789:role/service-role/AmazonRedshift-CommandsAccessRole-20230310T192112 which was required for the copy command to work.In my namespace settings (I'm using redshift serverless) this role is now shown as the default role under the security and encryption tab. I don't know if this was the case before as I never looked. Could it be this? I have full AdmistratorAccess on the account.Any pointers greatly appreciated. Obviously redshift is unworkable for me until I can solve this.Many thanks in advanceFollowComment"