Question: How to include existing AWS::EC2::Route and AWS::EC2::VPCGatewayAttachment resources in CloudFormation template?

"I am building CloudFormation templates to support the ability for others to recreate an existing VPC, along with its VPC peering connection, a virtual private gateway, route tables, and public subnets, and the supporting routes. I built a template that reflects all this, but when I tried to import it, I discovered that some resources were unable to be imported. Specifically, the AWS::EC2::Route and AWS::EC2::VPCGatewayAttachment types. So I created a base template without those resources for now, which works in the near term since those routes and gateway attachments exist as deployed.My concern is if we have to shut down, modify, or recreate this environment again down the road. I want to ensure that my new stack reflects these missing resources. However, I'm not entirely sure the best way to approach it without deleting the routes and disassociating the gateways and recreating them as a change set.It occurs to me that perhaps I could include the missing resources and submit the complete template as a new change set, but my assumption is that it will either fail and roll back, or succeed and create duplicates somehow. I am also worried that it could get confused, taking down those gateways and introduce connectivity issues for others on the team.I assume there is a best practice that I should follow here, but I haven't come across this issue before. I welcome suggestions.Thanks!FollowComment"

Answer: "0AWS::EC2::Route" and "AWS::EC2::VPCGatewayAttachment" are not listed in the following documentation, so you are correct that resource import is not supported.https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/resource-import-supported-resources.htmlIf you don't want to affect the existing stack, how about creating "AWS::EC2::Route" and "AWS::EC2::VPCGatewayAttachment" on separate stacks?After creation, if there are no problems, it would be better to edit the existing stack by importing it into the existing stack.It would be difficult to delete the routes and unassociate the gateways without recreating them as a change set.If you do not delete it, you will probably get an "already exists" error and the stack update will fail.CommentShareEXPERTRiku_Kobayashianswered a month ago"


Question: FBX import error

"Hi,I'm trying to import a 3D Model, and the Asset Processor has no problem with the textures, but when it gets to the actual .fbx file, it waits, and then says it Failed, but I have no idea why, there isn't any obvious reason, I'm asking how I can find out what's causing the problem. But the .fbx imports into 3DS max, Maya and even opens in Windows 10 Mixed Reality Viewer, so there can't be anything wrong with the model, and since I'm using 2018 of both 3DS max and Maya, it's not like I can use the plugins to export as a .cgf.Can anyone help me? I really need to solve this problem, as I said, I just want to know how to find out what's causing the problem, and I'm not going to post the model for obvious reasons.Thanks,DanFollow"

Answer: "0Accepted AnswerHi dannymozzer. Try this solution. "On this moment i found only one solution for this problem."SharerePost-User-0150549answered 5 years ago0No, sorry, that didn't work. Still failed. I followed the steps exactly.SharerePost-User-9232254answered 5 years ago0For Game And Editor dev/Cache/"YourGameName"/pc/user/log/For AssetProcessor dev/AssetProcessorTemp/"JobName"/ and AssetProcessor have detail log in UI, Just double click on error job or look at tabs.SharerePost-User-0150549answered 5 years ago0Can you show error log ?SharerePost-User-0150549answered 5 years ago0That was kind of my question, how do I find one?SharerePost-User-9232254answered 5 years ago0OK, I swear I've double clicked the failed object and nothing shows up, but for some reason, when I do it, it shows me all the errors! (That's so annoying) but anyway, I hope you can make sense of this! (I've crossed the names and locations off on purpose, but all the main errors are there)I mean it seems the error is Verticies 0 and 1 have the same coordinates, do you know if there's a way to find out what Verticies 0 and 1 are?REMOVEDUPLOADSharerePost-User-9232254answered 5 years ago0Hi dannymozzer. You need fix topology your object, in DCC tool. About Vertices any polygonal object created from faces, and any faces have edges for games need not more 3, but for easy work you must work with quadrangular faces and only when you want export model first triangulate and then export. And any adges have only two vertices. 0 and 1 it index number of vertex in array, and you can find it in DCC tool as array or by coordinates.p.s.If you has no who create 3d models, you need studying base of modeling 3d objects for games.SharerePost-User-0150549answered 5 years ago"


Question: I cant ssh into my ec2 instance all of a sudden

"Yesterday, my ec2 instance was working perfectly but today I can not ssh into it. I have rebooted, stopped and started my instance, then made sure I have the correct public dns when trying to ssh. I have also ensured that my security groups allow port 22 on my ip address. For debugging purposes, I allowed all IPs for my SSH and it still did not work.error: 22: Operation timed outI tested SSH into my other instance and that seemed to work perfectly. I have not changed my VPC settings or my Subnet settings at all since creation so I am not sure how they would be causing this issue. Please help!FollowComment"

Answer: "0Hello,Timeout errors can be attributed to network issues and it’s great that you have tried to troubleshoot them by checking the security groups and rebooting/stopping/starting your instance.To add on, you can try the following methods:Check the route table and Network Access control List (NACL) for the subnet. Link:https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/TroubleshootingInstancesConnecting.html#TroubleshootingInstancesConnectionTimeoutPing the IP address of the instance to verify if the instance is accessible over the networkTry VPC Reachability Analyzer to check for any network misconfiguration. Link:https://docs.aws.amazon.com/vpc/latest/reachability/what-is-reachability-analyzer.htmlHope it helps!CommentSharepehjxanswered 3 months ago0Several reasons why you are unable to SSH into your EC2 instance. Here are a few things you can try:Check the status of your instance: Make sure that your instance is in the "running" state. You can check this by going to the EC2 dashboard and looking at the "Instance State" column. If your instance is not in the "running" state, you may need to start it.Check the security group settings: Make sure that your security group allows incoming traffic on port 22. If you have changed the security group settings recently, it may take some time for the changes to take effect.Check your VPC settings: Make sure that your VPC settings are correct. If you are using a custom VPC, make sure that it is properly configured.Check the network ACL settings: Network ACLs are another layer of security in your VPC. Make sure that your network ACLs allow incoming traffic on port 22.Check your internet connection: Make sure that you have a stable internet connection. You may also want to try using a different device or network to see if the issue persists.Check the SSH configuration: Make sure that your SSH configuration is correct. You may want to try using a different SSH client or checking the SSH logs for more information.Note: If none of these solutions work, you may want to consider creating a new EC2 instance and transferring your data over to it.CommentShareKanavpreet Singhanswered 3 months ago"


Question: Padding with black video frames does not work in MediaConvert

"I have the same scenario explained in the first section of https://docs.amazonaws.cn/en_us/mediaconvert/latest/ug/video-padding.html( the first picture), the video track starts a bit after the audio track, and I am getting a video that is clipped to the duration of the video track. The beginning of the video where there are no frames is cut off. I tried the same transcoding by creating a job in Elastic Transcoder and i am getting the desired output. In the elastic transcoder it seems that the first frame of the video is copied at the beginning where there is only an audio track and after that the video starts. That job that i am creating in MediaConvert outputs a video and a thumbnail. When i select Pad:Black in video correction it says that there are no audio descriptions in the frame capture section in the output, and then i have to delete the output for the thumbnail so I can make a test with black frame padding. Even after that I am still getting a video with a clipped beginning. Any additional information will be much appreciated.FollowComment"


Question: ACM certificate DNS validation does not validate my certificate

"Hello,I have an issue with ACM certificate validation (DNS based) in the eu-north-1 region (Stockholm). Yesterday I have created two regional certificates, both in the same eu-north-1 region. They both are using the same CDK script to create them. One of them is validated, while the second one is not. It's already 12 hours since I created the certificate and valid CNAME records, but the certificate still remains in the "Pending validation" state.I tried to follow this guides:https://docs.aws.amazon.com/acm/latest/userguide/dns-validation.htmlhttps://aws.amazon.com/premiumsupport/knowledge-center/acm-certificate-pending-validation/but unfortunately all of these guidelines do not apply in my case. I confirmed the following:CNAME record and its value existCNAME record value is exactly the one pointed in ACM (no additional chars, no whitespaces etc.)no TXT record of the same name as the CNAMEAt the same time, I don't see any issues with ACM/Route53 in the eu-north-1 region in my Health Dashboard. What else can I do to make my certificate validated?I'm not able to create a support case, as my organization has a basic plan only, that's why I'm looking for help here.FollowCommentlandonbabay a year agoHello, where are you hosting your domain? I had an issue like this previously for a domain that was not in AWS, I had to first created a hosted zone, then point my domain in godaddy to the name servers for that hosted zone. after that, all DNS record validations were successfulShare"

Answer: "0Hello Michal,If you added the CNAME record correctly and still not verified then I would suggest to check if the record is able to resolve or not. To check run a dig and see the response. If there is no response then it might be the case where you have added to the wrong hosted zone (meaning you might have multiple hosted zones).Check your hosted zone NS server records where you have added the CNAME record are matching to the below set or not.%dig NS domainname.comRegards,CKCommentShareChethan SEanswered a year agorePost-User-5260061 9 months agothis isn't an answer at all, is there anything usefull you may suggest to debug failing acm validation over route53 in aws?Share0I experience similar issue, request ACM certificates via Console, added Route53 CNAME record, Status:  Pending validation until timeout.CommentSharerePost-User-5260061answered 9 months ago"


Question: Outgoing connection timeouts - eu-west-1 instances

"HiOver the past week we seem to be getting a lot of timeouts when our instance is connecting to external sources. We see this with sending emails to an external email server and when ftping files to an external ftp server.It would appear connections are established, but part way through the transfer the connection freezes and eventually timesout.I have rebooted the instance to see it that would help, and id doesn't appear to.Are there problems with EC2 in the eu-west-1 region?Many thanksEdited by: JamesReader on Jun 4, 2021 4:50 AMFollowComment"

Answer: 0This no longer appears to be an issueCommentShareJamesReaderanswered 2 years ago


Question: IAM Policy to enforce KMS encryption when

I'm trying to create a guardrail IAM policy that prohibits admins from creating CloudWatch Log groups without applying AWS:KMS encryption. I haven't yet found any conditions to enforce that yet.FollowComment

Answer: "0It looks like this is not possible via an IAM policy condition. You can create a detective control via AWS Config using the CLOUDWATCH_LOG_GROUP_ENCRYPTED AWS managed rule.CommentShareEXPERTkentradanswered a year ago0IAM policy conditions for CloudWatch log groups are conspicuously limited, indeed, but if your immediate issue is that your admins are creating log groups manually and neglecting to enable encryption, you might be able to work around that by forcing them to use CloudFormation to create the log groups. You could point them to a CloudFormation template that requires specifying a KMS key ARN for the log group (https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-logs-loggroup.html). With the AllowedPattern property for the KMS key ARN parameter in the CloudFormation template, you could even limit them to specific KMS keys or keys in a specific AWS account, by filtering by the account ID included in the key ARN.In the IAM policy (or permissions boundary or SCP) for CloudWatch Logs, you could deny the CreateLogGroup action if the global condition key aws:CalledViaLast did not equal cloudformation.amazonaws.com. That would ensure your admins could only create log groups via CloudFormation and not directly from the console or CLI. In your IAM policy for CloudFormation, you would deny the CreateStack, UpdateStack, and CreateChangeSet actions when the cloudformation:ResourceTypes condition key matched AWS::Logs::LogGroup but the cloudformation:TemplateUrl condition key would not match (StringNotLike) the URL of your CloudFormation template. You would store your template in an S3 bucket where you have write access but your admins only have read access.This should ensure your admins could only create new log groups with the CloudFormation template that you control, and that template would require specifying a KMS key ARN. The admins would still be able to use their own CloudFormation templates to manage all other types of resources.CommentShareleokanswered a year ago"


Question: Pipeline trigger on pull request

"Hello,Any one know how to trigger automatically pipeline on pull request so that it analyses the source branch before merging?Such as merge request pipeline on Gitlab.Repo is in codeCommit.ThanksFollowComment"

Answer: "0Triggers for codecommit are created/controlled through cloudwatch events. The source for the event can be specific target branch on a Pull Request.Example - sorry about identing{   "source": [   "aws.codecommit"   ],  "detail-type": [  "CodeCommit Pull Request State Change"  ],  "resources": [  "arn:aws:codecommit:us-west-2:80398EXAMPLE:MyTestRepo" ], "detail": {   "event": [      "pullRequestCreated",     "pullRequestStatusChanged"   ],   "destinationReference": [      "refs/heads/main"   ],   "pullRequestStatus": [        "Open"   ]}}You can natively trigger codepipeline but if you wanted to trigger gitlab you would need to set the cloudwatch event to target a lambda which made the appropriate api call (and credentials) to trigger your gitlab pipelineCommentShareEXPERTPeter_Ganswered a year agoZale a year agoHi Peter , thanks for your answer!I tried but it’s still running pipeline from the destination branch. Maybe my question was unclear. Let me explain :My branch is develop. I make some changes in another branch ( feature) and want to merge feature and develop.What I want is the pipeline to run feature and not develop. So when I open a pull request in codecommit it will run automatically the source branch feature.I tried the code you gave me but it’s running the code from develop branch.Share0Hi Zale,Please check in cloudwatch events-> rules  or eventbridge rules ( both point to the same info ) . Here should be a rule that looks similar like this .{  "source": [    "aws.codecommit"  ],  "detail-type": [    "CodeCommit Repository State Change"  ],  "resources": [    "arn:aws:codecommit:us-west-2:123456789012:CodeCommit"  ],  "detail": {    "event": [      "referenceCreated",      "referenceUpdated"    ],    "referenceType": [      "branch"    ],    "referenceName": [      "main"    ]  }}change the referenceName to the branch you want to use to trigger the codepipeline. If you want to filter not by "feature" , more on a feature pattern like "feature-123" , "feature-124" then try to use filtering on event patterns. Please check this link : https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-event-patterns-content-based-filtering.htmlPlease write back if you need more info or if this was helpful.CommentSharedan_manswered a year ago"


Question: AWS Backup Audit Manager - S3 Permissions

"IssueWhen attempting to create an on-demand backup using AWS Backup Audit Manager Reports, I receive the following error, regardless of how permissive I make the permissions on the bucket and the bucket policy.Can't access the S3 bucket backup-report-temporary for job 984C78DC-E74E-AFF9-77AA-4AD9CDF933CB. Make sure bucket exists and bucket policy is valid and try again.Steps taken to troubleshootCopied and pasted the recommended configuration from the 'Create report plan' workflow in AWS Backup to the target S3 bucketCreated multiple buckets in multiple regionsCreated multiple report plans in multiple regionsModified the recommended configuration from the 'Create report plan' workflow to be more permissive. (Resource wildcards, action wildcards, removing StringEquals condition check)Enabled CloudTrail object level logging and did not see PutObject attempts to the bucket under observationI had this working previously, but it appears that the behavior of the user interface changed in the past few days as well. Previously, when I would enter a bucket prefix, the suggested bucket policy would change to account for the prefix. It is no longer doing that. There may have been a deployment that broke this feature.FollowComment"

Answer: 0A new feature was added to the front end of the AWS Backup 'Create/Edit Report' workflow that prompts the user with the correct security principal to allow via the S3 Bucket Policy. I expect that the security principal used was updated but the prompt was not when the new security principal was originally implemented. The backups are now working correctly.CommentShareleveleranswered 2 years ago0I'm having the same error with a brand new report using the copy/pasted policy for the bucket.CommentShareMikeJansenanswered 2 years ago


Question: How long is the stop of EC2?

"We are stopping the EC2 instance to reduce costs.For RDS, I know the stop limit is 7 days, but what about EC2?FollowComment"

Answer: "1Accepted AnswerThere is no limit to the amount of time an EC2 instance can be stopped for.The reason for the RDS stop limit is so that patches can be applied to the database engine and operating system. RDS is a managed service - AWS manage the server and so it's important to have it powered on in order to install patches.CommentShareEXPERTBrettski-AWSanswered a year ago1Hi,I understand that you want to stop your EC2 to reduce costs. However, when you stop your EC2, you will not incur charges only for the EC2 instance but you will still be charged for the EBS storage associated with that instance. You can reduce your EBS charges while retaining the information stored in it for later use by creating a snapshot of it. Also refer to this document for other ways you can use to further reduce your cost for your unused EC2 instance.CommentShareCebianswered a year ago"


Question: IFI with SQL Server FCI on FSX

"Hi , Have a multi-subnet SQL Server FCI with Data \ Log files on FSx for Windows File Server. How do I enable Instant File Initialization ( Perform Volume task Maintenance ) in this ?FollowComment"

Answer: "0Hello AWS Customer.I would like to kindly point out that at the moment, this feature is not supported, however, there is already a feature request to have this option available in the future on AWS FSx for Windows.Since there is an existing feature request to allow instant file initialization when using FSx for Windows file systems, kindly note that product roadmaps are not shared with us as this is something that our service team is going to implement or when they would implement it. New features are typically announced on our following blogs:[+] What’s New - https://aws.amazon.com/new/ [+] Blog - https://aws.amazon.com/blogs/aws/ [+] AWS Forums: https://forums.aws.amazon.com/forum.jspa?forumID=60CommentShareSUPPORT ENGINEERrePost-User-6967896answered 2 months ago0This feature is supported on FSXN - NetApp OntapCommentShareRafetanswered 2 months ago"


Question: why is SDK Validator saying AudioTypeControl must be an associative array?

"I'm attempting to submit a job to MediaConvert, but the validator seems to think both AudioTypeControl and LanguageCodeControl for the outputs needs to be an associative arrayHere's the specific errorFound 4 errors while validating the input provided for the CreateJob operation:\[Settings]\[OutputGroups]\[0]\[Outputs]\[0]\[AudioDescriptions]\[AudioTypeControl] must be an associative array. Found string(12) "FOLLOW_INPUT"\[Settings]\[OutputGroups]\[0]\[Outputs]\[0]\[AudioDescriptions]\[LanguageCodeControl] must be an associative array. Found string(12) "FOLLOW_INPUT"\[Settings]\[OutputGroups]\[0]\[Outputs]\[1]\[AudioDescriptions]\[AudioTypeControl] must be an associative array. Found string(12) "FOLLOW_INPUT"\[Settings]\[OutputGroups]\[0]\[Outputs]\[1]\[AudioDescriptions]\[LanguageCodeControl] must be an associative array. Found string(12) "FOLLOW_INPUT"Not sure what's going on here, I've checked my job settings against the documentation and from everything I can find, these should actually be a string, and "FOLLOW_OUTPUT" should be one of the enumerated values. Does anyone know why this error would trigger?This is the config I'm using to create the client. (identifying values removed)\[version] => 2017-08-29\[endpoint] => {endpoint}\[credentials] => Aws\Credentials\Credentials Object(\[key:Aws\Credentials\Credentials:private] => {key}\[secret:Aws\Credentials\Credentials:private] => {secret}\[token:Aws\Credentials\Credentials:private] =>\[expires:Aws\Credentials\Credentials:private] =>)\[region] => us-west-2And the Job description (Identifying values removed)\[Inputs] => Array(\[0] => Array(\[FilterEnable] => AUTO\[PsiControl] => USE_PSI\[FilterStrength] => 0\[DeblockFilter] => DISABLED\[DenoiseFilter] => DISABLED\[TimecodeSource] => EMBEDDED\[VideoSelector] => Array(\[ColorSpace] => FOLLOW\[Rotate] => DEGREE_0\[AlphaBehavior] => DISCARD)                \\[AudioSelectors] => Array                      (                          \\[Audio Selector 1] => Array                              (                                  \\[Offset] => 0                                  \\[DefaultSelection] => DEFAULT                                  \\[ProgramSelection] => 1                              )                      )                  \\[FileInput] => s3://{bucket}/{path/to/input/video.mp4}              )      )  \\[OutputGroups] => Array      (          \\[0] => Array              (                  \\[Name] => FileGroupSettings Group                  \\[OutputGroupSettings] => Array                      (                          \\[Type] => FILE_GROUP_SETTINGS                          \\[FileGroupSettings] => Array                              (                                  \\[Destination] => s3://{bucket}/{path/to/destination/}                              )                      )                  \\[Outputs] => Array                      (                          \\[0] => Array                              (                                  \\[ContainerSettings] => Array                                      (                                          \\[Mp4Settings] => Array                                              (                                                  \\[CslgAtom] => INCLUDE                                                  \\[CttsVersion] => 0                                                  \\[FreeSpaceBox] => EXCLUDE                                                  \\[MoovPlacement] => PROGRESSIVE_DOWNLOAD                                                  \\[Container] => MP4                                              )                                      )                                  \\[VideoDescriptions] => Array                                      (                                          \\[ScalingBehavior] => DEFAULT                                          \\[TimecodeInsertion] => DISABLED                                          \\[AntiAlias] => ENABLED                                          \\[Sharpness] => 50                                          \\[AfdSignaling] => NONE                                          \\[DropFrameTimecode] => ENABLED                                          \\[RespondToAfd] => NONE                                          \\[ColorMetadata] => INSERT                                          \\[CodecSettings] => Array                                              (                                                  \\[H264Settings] => Array                                                      (                                                          \\[InterlaceMode] => PROGRESSIVE                                                          \\[NumberReferenceFrames] => 3                                                          \\[Syntax] => DEFAULT                                                          \\[Softness] => 0                                                          \\[GopClosedCadence] => 1                                                          \\[GopSize] => 90                                                          \\[Slices] => 1                                                          \\[GopBReference] => DISABLED                                                          \\[SlowPal] => DISABLED                                                          \\[SpatialAdaptiveQuantization] => ENABLED                                                          \\[TemporalAdaptiveQuantization] => ENABLED                                                          \\[FlickerAdaptiveQuantization] => DISABLED                                                          \\[EntropyEncoding] => CABAC                                                          \\[FramerateControl] => INITIALIZE_FROM_SOURCE                                                          \\[RateControlMode] => QVBR                                                          \\[CodecProfile] => MAIN                                                          \\[Telecine] => NONE                                                          \\[MinIInterval] => 0                                                          \\[AdaptiveQuantization] => HIGH                                                          \\[CodecLevel] => AUTO                                                          \\[FieldEncoding] => PAFF                                                          \\[SceneChangeDetect] => ENABLED                                                          \\[QualityTuningLevel] => SINGLE_PASS                                                          \\[FramerateConversionAlgorithm] => DUPLICATE_DROP                                                          \\[UnregisteredSeiTimecode] => DISABLED                                                          \\[GopSizeUnits] => FRAMES                                                          \\[ParControl] => INITIALIZE_FROM_SOURCE                                                          \\[NumberBFramesBetweenReferenceFrames] => 2                                                          \\[RepeatPps] => DISABLED                                                          \\[DynamicSubGop] => STATIC                                                          \\[QvbrSettings] => Array                                                              (                                                                  \\[QvbrQualityLevel] => 7                                                                  \\[QvbrQualityLevelFineTune] => 0                                                              )                                                          \\[MaxBitrate] => 0                                                          \\[Codec] => H_264                                                          \\[Bitrate] => 8000000                                                      )                                              )                                          \\[Width] => 1920                                          \\[Height] => 1080                                      )                                  \\[AudioDescriptions] => Array                                      (                                          \\[AudioTypeControl] => FOLLOW_INPUT                                          \\[LanguageCodeControl] => FOLLOW_INPUT                                          \\[CodecSettings] => Array                                              (                                                  \\[AacSettings] => Array                                                      (                                                          \\[AudioDescriptionBroadcasterMix] => NORMAL                                                          \\[Bitrate] => 384000                                                          \\[RateControlMode] => CBR                                                          \\[CodecProfile] => LC                                                          \\[CodingMode] => CODING_MODE_2_0                                                          \\[RawFormat] => NONE                                                          \\[SampleRate] => 48000                                                          \\[Specification] => MPEG4                                                          \\[Codec] => AAC                                                      )                                              )                                      )                                  \\[CaptionDescriptions] => Array                                      (                                      )                                  \\[NameModifier] => _FHD                              )                          \\[1] => Array                              (                                  \\[ContainerSettings] => Array                                      (                                          \\[Mp4Settings] => Array                                              (                                                  \\[CslgAtom] => INCLUDE                                                  \\[CttsVersion] => 0                                                  \\[FreeSpaceBox] => EXCLUDE                                                  \\[MoovPlacement] => PROGRESSIVE_DOWNLOAD                                                  \\[Container] => MP4                                              )                                      )                                  \\[VideoDescriptions] => Array                                      (                                          \\[ScalingBehavior] => DEFAULT                                          \\[TimecodeInsertion] => DISABLED                                          \\[AntiAlias] => ENABLED                                          \\[Sharpness] => 50                                          \\[AfdSignaling] => NONE                                          \\[DropFrameTimecode] => ENABLED                                          \\[RespondToAfd] => NONE                                          \\[ColorMetadata] => INSERT                                          \\[CodecSettings] => Array                                              (                                                  \\[H264Settings] => Array                                                      (                                                          \\[InterlaceMode] => PROGRESSIVE                                                          \\[NumberReferenceFrames] => 3                                                          \\[Syntax] => DEFAULT                                                          \\[Softness] => 0                                                          \\[GopClosedCadence] => 1                                                          \\[GopSize] => 90                                                          \\[Slices] => 1                                                          \\[GopBReference] => DISABLED                                                          \\[SlowPal] => DISABLED                                                          \\[SpatialAdaptiveQuantization] => ENABLED                                                          \\[TemporalAdaptiveQuantization] => ENABLED                                                          \\[FlickerAdaptiveQuantization] => DISABLED                                                          \\[EntropyEncoding] => CABAC                                                          \\[FramerateControl] => INITIALIZE_FROM_SOURCE                                                          \\[RateControlMode] => QVBR                                                          \\[CodecProfile] => MAIN                                                          \\[Telecine] => NONE                                                          \\[MinIInterval] => 0                                                          \\[AdaptiveQuantization] => HIGH                                                          \\[CodecLevel] => AUTO                                                          \\[FieldEncoding] => PAFF                                                          \\[SceneChangeDetect] => ENABLED                                                          \\[QualityTuningLevel] => SINGLE_PASS                                                          \\[FramerateConversionAlgorithm] => DUPLICATE_DROP                                                          \\[UnregisteredSeiTimecode] => DISABLED                                                          \\[GopSizeUnits] => FRAMES                                                          \\[ParControl] => INITIALIZE_FROM_SOURCE                                                          \\[NumberBFramesBetweenReferenceFrames] => 2                                                          \\[RepeatPps] => DISABLED                                                          \\[DynamicSubGop] => STATIC                                                          \\[QvbrSettings] => Array                                                              (                                                                  \\[QvbrQualityLevel] => 7                                                                  \\[QvbrQualityLevelFineTune] => 0                                                              )                                                          \\[MaxBitrate] => 0                                                          \\[Codec] => H_264                                                          \\[Bitrate] => 2500000                                                      )                                              )                                          \\[Width] => 720                                          \\[Height] => 480                                      )                                  \\[AudioDescriptions] => Array                                      (                                          \\[AudioTypeControl] => FOLLOW_INPUT                                          \\[LanguageCodeControl] => FOLLOW_INPUT                                          \\[CodecSettings] => Array                                              (                                                  \\[AacSettings] => Array                                                      (                                                          \\[AudioDescriptionBroadcasterMix] => NORMAL                                                          \\[Bitrate] => 384000                                                          \\[RateControlMode] => CBR                                                          \\[CodecProfile] => LC                                                          \\[CodingMode] => CODING_MODE_2_0                                                          \\[RawFormat] => NONE                                                          \\[SampleRate] => 48000                                                          \\[Specification] => MPEG4                                                          \\[Codec] => AAC                                                      )                                              )                                      )                                  \\[CaptionDescriptions] => Array                                      (                                      )                                  \\[NameModifier] => _SD                              )                      )              )      )  Edited by: SydneyMax on Feb 9, 2021 4:18 PMEdited by: SydneyMax on Feb 9, 2021 4:18 PMFollowComment"

Answer: "1So the issue was the AudioDescriptions array item was malformed and, unlike VideoDescriptions, AudioDescriptions needs to be inside an array AudioDescriptions => \[0 => \[AudioTypeControl] => ... ]], I had it as AudioDescriptions => \[AudioTypeControl] => ...leaving this here in case anyone trips on thisCommentShareSydneyMaxanswered 2 years ago"


Question: AWS Lightsail and Wordpress Admin Login Error

I am trying to log in to my WP-Admin page and I think I tried to log in with the wrong user name too many times.  Now I am getting a message to contact the administrator which is me.  I need to know how to reset this so I can get back to the login page.Below is a screenshot of the error page. Does anyone know how to reset this page so I can access it?https://share.getcloudapp.com/WnuZXzrQThe access to that page has been restricted by the administrator of this websiteYou don’t have access to this page. Please contact the administrator of this website for further assistance.FollowComment

Answer: "0You need to SSH into the instanceRun the following command to see the list of login users in the database. You must enter the MySQL root password. This password is located in the /home/bitnami/bitnami_application_password file:mysql -u root -p bitnami_wordpress -e "SELECT * FROM wp_users;"Note the ID of the user that you want to reset the password for. Then, run the following command. Be sure to replace NEWPASSWORD with your desired password and ADMIN-ID with the user ID obtained in step 2:mysql -u root -p bitnami_wordpress -e "UPDATE wp_users SET user_pass=MD5('NEWPASSWORD') WHERE ID='ADMIN-ID';"CommentShareOleksii Bebychanswered 4 months ago0Hi,Thanks for using Lightsail. This guide may help you set up your WordPress instance correctly:https://lightsail.aws.amazon.com/ls/docs/en_us/articles/amazon-lightsail-quick-start-guide-wordpressCommentShareAWS-Leslieanswered 4 months ago"


Question: "All permissions API gateway integrate SQS, POST returns queue AccessDenied"

"My role has AmazonSQSFullAccess, etc. My queue has Allow permission to everybody all SQS actions.Using API gateway Service Proxy to integrate SQS queue with path override, POST method always returnsEndpoint response body before transformations: {"Error":{"Code":"AccessDenied","Message":"Access to the resource https://sqs.ap-southeast-2.amazonaws.com/xxxxxxxx/myQueue is denied.","Type":"Sender"}FollowComment"

Answer: "0Hello,We might need more data regarding the behavior to correctly gauge what is wrong.But it might be that API Gateway does not have the appropriate permissions set in its execution role. You might need to provide SQS SendMessage permissions to the role that the API in API Gateway uses.You might find this third party article useful:https://dzone.com/articles/creating-aws-service-proxy-for-amazon-sqsLet us know if this helps!CommentShareAWS-User-2067776answered 5 years ago"


Question: t2.medium Instance stopping every 1 hour after Amazon AWS Hardware maintance

"t2.medium Instance stopping (it freezes, we can´t access, the only way is to stop and start the instance again) every 1 hour after Amazon AWS Hardware maintance upgrade."Amazon EC2 has detected degradation of the underlying hardware hosting your EC2 instance (instance-ID: i-05a3208a9d92050fd) associated with your AWS account (AWS Account ID: 924987726575) in the sa-east-1 region. This instance is scheduled for maintenance and will be rebooted any time between 2023-03-09 18:00:00 UTC and 2023-03-09 20:00:00 UTC.The affected instance(s)   are listed below:i-05a3208a9d92050fd"Amazon EC2 support is the worst I ever worked with. Any solution for this situation?FollowComment"


Question: Restrict IOT publish topic policy

"I'm using flutter/dart (mqtt_client / https://pub.dev/packages/mqtt_client) to send an AWS IOT MQTT messages over websockets and I'd like to restrict an IAM user to only specific topics that a user is allowed to Publish messages only to their specific topic.  I've attempted to add some restricted policies, but the application will fail with little information on the client side.  Also, in Cloud Watch, I don't see any specific errors.Here's some example topics:arn:aws:iot:us-east-2:1234567890:topic/action_request/ASDF1234arn:aws:iot:us-east-2:1234567890:topic/action_request/ASDF5678So, I want to add the proper JSON policy attached to the IAM user and they only have access to ASDF1234All of my publish topics are patterned like the above. For now, I'm focusing on restricting the Publish endpoints and then working others like Subscribe.I've tried numerous different policies like below. Also with adding some wildcards to no success on the client side.  They look right, but I'm not sure if there's indirectly other publish topics that are used internally within MQTT that's causing the failures or maybe just my syntax.Another thought is if I add a condition that would allow only the above endpoint and no others.https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html{    "Version": "2012-10-17",    "Statement": [        {            "Sid": "VisualEditor0",            "Effect": "Allow",            "Action": [                "iot:Receive",                "iot:ListNamedShadowsForThing",                "iot:Subscribe",                "iot:Connect",                "iot:GetThingShadow",                "iot:DeleteThingShadow",                "iot:UpdateThingShadow"            ],            "Resource": "*"        },        {            "Sid": "VisualEditor1",            "Effect": "Allow",            "Action": "iot:Publish",            "Resource": "arn:aws:iot:us-east-2:1234567890:topic/*/ASDF1234*"        }    ]}FollowComment"

Answer: "0Lets try to take it step by step.First, the policy you required to use for your Thing is IoT Policy, and not IAM policy, which is for IAM identities (users, user groups, and roles).The policy should be attached to a certificate. Cartificate should be attached to a Thing.I'd suggest to start by enabling logging in the 'Settings' page of the AWS IoT Console, and using overly permissive IoT Policy(1) until you make it work. Once you succeed to connect and subscribe/publish, modify the IoT policy to include what you need.(1) Not for production{  "Version": "2012-10-17",  "Statement": [    {      "Effect": "Allow",      "Action": [        "iot:*"      ],      "Resource": "*"    }  ]}CommentShareDoron-AWSanswered a year agonickernet a year agothanks for the reply. We originally were using associated certificates for policy association. However, to get past security requirements for Android app store, we had to use MQTT over websockets and Signature Version 4 authentication. It then just uses https/wss protocol instead. That eliminates the certificate need at the mobile app, thus eliminating some security requirements. We also did enable the logging on the AWS IoT console. We have seen some really generic failures coming in but nothing to help build out a proper Resource arn to lock things down. Thanks for the advice.Share"


Question: Can I host multiple models using Nvidia Triton Business Logic Scripting behind a Multi-Model Endpoint?

"I'd like to host models which need to use BLS on GPU-backed realtime inference with MME. I'd like to be able to scale to hundreds or thousands of such models behind one endpoint. Will this work out of the box? I know there is support for this for models which don't use BLS, but the documentation is not clear on whether an entire BLS pipeline can be treated as an individual model by the auto-scaler.Better description of my use case:The model consists of:Model slice A: weights selected from a set of ~5 options, called once per invocation, nothing ever gets added or removedModel slice B: weights selected from a set of 100s+ options, called in a loop n times per invocation, variants constantly addedSo if you take this model alone, it seems to be a good candidate for Triton BLS, where each of the slices is a model instance and slice B instance is called n times in a loop in the pipeline file.My first thought was to add all the model variants to a single BLS model repo, but I am not sure if this would work with auto-scaling and frequently added new models.The other possibility is to split it into m BLS pipelines, where m is the number of variants I have for model slice B. This should work with auto-scaling, since the model target should match up with the request destination model, but I am not sure if this is supported (an entire BLS model hierarchy being loaded and unloaded in Sagemaker).The next best option I guess is to not use MME? And maybe switch to MCE? But this seems like a big loss in performance.What is the best way to deploy this model using Sagemaker tools?FollowComment"


Question: EMR autoscaling: 'org.apache.hadoop.util.DiskChecker$DiskErrorException(No space available in any of the local directories.)'

"I get following error when running tez query.This is in EMR cluster with auto scaling enabled.Root device EBS volume size: 100 GiBAdditional EBS volume: 200 GiBbash-4.2$ls -lh /tmplrwxrwxrwx 1 root root 8 Jun  2 13:20 /tmp -> /mnt/tmp/mnt has enough space:/dev/dev1 195G 3.7G 192G 2% /mntINFO  : Cleaning up the staging area file:/tmp/hadoop/mapred/staging/hdfs1254373830/.staging/job_local1254373830_0002ERROR : Job Submission failed with exception 'org.apache.hadoop.util.DiskChecker$DiskErrorException(No space available in any of the local directories.)'org.apache.hadoop.util.DiskChecker$DiskErrorException: No space available in any of the local directories.    at org.apache.hadoop.fs.LocalDirAllocator$AllocatorPerContext.getLocalPathForWrite(LocalDirAllocator.java:416)    at org.apache.hadoop.fs.LocalDirAllocator.getLocalPathForWrite(LocalDirAllocator.java:165)    at org.apache.hadoop.fs.LocalDirAllocator.getLocalPathForWrite(LocalDirAllocator.java:146)    at org.apache.hadoop.fs.LocalDirAllocator.getLocalPathForWrite(LocalDirAllocator.java:130)    at org.apache.hadoop.mapred.LocalDistributedCacheManager.setup(LocalDistributedCacheManager.java:123)    at org.apache.hadoop.mapred.LocalJobRunner$Job.<init>(LocalJobRunner.java:172)    at org.apache.hadoop.mapred.LocalJobRunner.submitJob(LocalJobRunner.java:794)    at org.apache.hadoop.mapreduce.JobSubmitter.submitJobInternal(JobSubmitter.java:251)    at org.apache.hadoop.mapreduce.Job$11.run(Job.java:1570)    at org.apache.hadoop.mapreduce.Job$11.run(Job.java:1567)    at java.security.AccessController.doPrivileged(Native Method)    at javax.security.auth.Subject.doAs(Subject.java:422)    at org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1730)    at org.apache.hadoop.mapreduce.Job.submit(Job.java:1567)    at org.apache.hadoop.mapred.JobClient$1.run(JobClient.java:576)    at org.apache.hadoop.mapred.JobClient$1.run(JobClient.java:571)    at java.security.AccessController.doPrivileged(Native Method)    at javax.security.auth.Subject.doAs(Subject.java:422)    at org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1730)    at org.apache.hadoop.mapred.JobClient.submitJobInternal(JobClient.java:571)    at org.apache.hadoop.mapred.JobClient.submitJob(JobClient.java:562)    at org.apache.hadoop.hive.ql.exec.mr.ExecDriver.execute(ExecDriver.java:423)    at org.apache.hadoop.hive.ql.exec.mr.MapRedTask.execute(MapRedTask.java:149)    at org.apache.hadoop.hive.ql.exec.Task.executeTask(Task.java:205)    at org.apache.hadoop.hive.ql.exec.TaskRunner.runSequential(TaskRunner.java:97)    at org.apache.hadoop.hive.ql.Driver.launchTask(Driver.java:2664)    at org.apache.hadoop.hive.ql.Driver.execute(Driver.java:2335)    at org.apache.hadoop.hive.ql.Driver.runInternal(Driver.java:2011)    at org.apache.hadoop.hive.ql.Driver.run(Driver.java:1709)    at org.apache.hadoop.hive.ql.Driver.run(Driver.java:1703)    at org.apache.hadoop.hive.ql.reexec.ReExecDriver.run(ReExecDriver.java:157)    at org.apache.hive.service.cli.operation.SQLOperation.runQuery(SQLOperation.java:224)    at org.apache.hive.service.cli.operation.SQLOperation.access$700(SQLOperation.java:87)    at org.apache.hive.service.cli.operation.SQLOperation$BackgroundWork$1.run(SQLOperation.java:316)    at java.security.AccessController.doPrivileged(Native Method)    at javax.security.auth.Subject.doAs(Subject.java:422)    at org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1730)    at org.apache.hive.service.cli.operation.SQLOperation$BackgroundWork.run(SQLOperation.java:330)    at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)    at java.util.concurrent.FutureTask.run(FutureTask.java:266)    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)    at java.lang.Thread.run(Thread.java:750)ERROR : FAILED: Execution Error, return code 1 from org.apache.hadoop.hive.ql.exec.mr.MapRedTask. No space available in any of the local directories.FollowComment"

Answer: "0Hi,Generally in hive "No space available in any of the local directories" refers to a permissions issue rather than a disk space issue.you check the hive server 2 logs to confirm this, you should ideally see something like "org.apache.hadoop.util.DiskChecker$DiskErrorException: Directory is not writable: /mnt/mapred" exceptionthis is because of the default permissions given to /mnt/mappredChanging the permissions on the Primary Node's local /mnt/mapred/ should allow queries to run[hadoop@ip- ~]$ sudo chmod 777 /mnt/mapred/Hope this helps, please feel free to share the errors in hive server logs if this does not helpCommentShareSujay_Manswered a year ago"


Question: Autovacuum does not clear the database.

"Autovacuum does not clear the database.Databases middle-dbPostgres 10.18, AWS RDS(vCPU 2, RAM 8Gb, SSD(gp2) 1100Gib)Table "spree_datafeed_products"relid               | 16556schemaname          | publicrelname             | spree_datafeed_productsseq_scan            | 20seq_tup_read        | 365522436idx_scan            | 962072108idx_tup_fetch       | 9929276855n_tup_ins           | 2846455n_tup_upd           | 35778058n_tup_del           | 284291955n_tup_hot_upd       | 0n_live_tup          | 3546840n_dead_tup          | 338790851n_mod_since_analyze | 307930753last_vacuum         | last_autovacuum     | last_analyze        | last_autoanalyze    | 2022-04-29 13:01:43.985749+00vacuum_count        | 0autovacuum_count    | 0analyze_count       | 0autoanalyze_count   | 1Table and indexes sizes:indexname                           | size  index_spree_datafeed_products_on_updated_at                  | 48 GBindex_spree_datafeed_products_on_state                       | 35 GBindex_spree_datafeed_products_on_size_variant_field          | 40 GBindex_spree_datafeed_products_on_product_id                  | 32 GBindex_spree_datafeed_products_on_original_id                 | 31 GBindex_spree_datafeed_products_on_datafeed_id                 | 42 GBindex_spree_datafeed_products_on_datafeed_id_and_original_id | 31 GBindex_spree_datafeed_products_on_data_hash                   | 39 GBspree_datafeed_products_pkey                                 | 18 GB pg_size_pretty  - 419 GBWorker:datid            | 16404datname          | milanstyle_productionpid              | 2274backend_start    | 2022-05-01 19:52:00.066097+00xact_start       | 2022-05-01 19:52:00.23692+00query_start      | 2022-05-01 19:52:00.23692+00state_change     | 2022-05-01 19:52:00.236921+00wait_event_type  | wait_event       | state            | activebackend_xid      | backend_xmin     | 1301636863query            | autovacuum: VACUUM ANALYZE public.spree_datafeed_productsbackend_type     | autovacuum workerSettings:autovacuum onautovacuum_analyze_scale_factor 0.05autovacuum_analyze_threshold 50autovacuum_freeze_max_age 200000000autovacuum_max_workers 3autovacuum_multixact_freeze_max_age 400000000autovacuum_naptime 30autovacuum_vacuum_cost_delay 20autovacuum_vacuum_cost_limit -1autovacuum_vacuum_scale_factor 0.1autovacuum_vacuum_threshold 50The garbage cleaning script has accumulated a lot of deleted entries. We have been waiting for more than a week (autoclearance). What is the problem? Why is the database failing?FollowCommentJD-PostgresExpert a year agoWhat is your maintenance_work_mem? It could be that you are hitting cost and memory limits for that size of a table and it is just taking a really long time.Share"

Answer: "0Hi Ahmad,My name is Brandon and I'm a Database Support Engineer. If I understand your question correctly you're wondering why AutoVacuum is not providing more storage space after it runs.Simply put, Auto Vacuum generally does not provide more storage space once it is run as this runs standard vacuum not full vacuum on the database. Run Full Vacuum to reclaim this space, just be aware it will lock the tables it is vacuuming and consume significantly more resources than standard vacuum. You can read more about this here - https://www.postgresql.org/docs/current/routine-vacuuming.htmlFor more information on Vacuuming on RDS see these guides:https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Appendix.PostgreSQL.CommonDBATasks.Autovacuum.html#Appendix.PostgreSQL.CommonDBATasks.Autovacuum.OtherParmshttps://aws.amazon.com/blogs/database/understanding-autovacuum-in-amazon-rds-for-postgresql-environments/CommentShareSUPPORT ENGINEERBrandonanswered a month ago"


Question: Copying cluster snapshots to another region shows an error message

"Hi, I'm trying to create a copy of an Aurora PostgreSQL cluster snapshot in a different region using the aws cli, I was able to do it five times, but now I'm getting the error message  Cannot copy more than 5 snapshots concurrently to the same region.I suspect that the problem was that I deleted those snapshots while they were being copied and for some reason the status was never updated.Question:do I have to contact the technical support so that they can update the status of the snapshots in the region or is there a way to clean up the snapshots that were deleted before copy them?FollowComment"


Question: Redshift order by DESC is not working

"hello,i've a very simple query of the pattern SELECT timestamp_column FROM a_table WHERE columnID = 'column_value' ORDER BY timestamp_column DESCthe result set does not come back in descending orderi've rewritten this in many ways.any ideas?thanks!FollowComment"

Answer: "1I tested below and I see that ordering is properly applied highest to lowest.  Can you check if timestamp_column is defined as timestamp not string?create table test_ts_order(timestamp_column  timestamp);insert into test_ts_order select getdate()--wait few secondsinsert into test_ts_order select getdate()--wait few secondsinsert into test_ts_order select getdate()select * from test_ts_order order by timestamp_column desc;2022-11-11 21:47:092022-11-11 21:46:472022-11-11 21:46:22select version()PostgreSQL 8.0.2 on i686-pc-linux-gnu, compiled by GCC gcc (GCC) 3.4.2 20041017 (Red Hat 3.4.2-6.fc3), Redshift 1.0.43331CommentShareBhanu_Panswered 7 months ago"


Question: TLS handshake failure on Gen5 HughesNet transport

"Hello,My company has built an IoT water treatment product that is currently in soft release.  (https://dropconnect.com)  Our WiFi-enabled hub device runs the AWS C IoT SDK and uses the ARM Mbed TLS library for TLS encryption.  We have many systems deployed that are working beautifully, but our system is unable to connect to AWS if it is using HughesNet Gen5 satellite internet service.  Essentially, the TLS handshake proceeds to the point where the client (our device) sends the client cipher spec message and is expecting the server cipher spec message, but that message never arrives.  The implication is that something about the HughesNet satellite link is causing a handshake message to get dropped, or that there's something about the client cipher spec message that is invalid and AWS is silently terminating the connection.I have ruled out network latency as a contributing factor, both by simulating a network connection with latencies much higher than what is present on a satellite network connection, and also testing on a HughesNet Gen4 system -- which, oddly, works just fine.  While using the HughesNet Gen5 link, the first 11 steps of the TLS handshake exactly match the progression seen during a successful connection over a different internet link. (obviously, the randomized data is different)  I believe this rules out DNS lookups and basic network transport as being the problem.  I have also disabled any caching or web acceleration features on the satellite modem without any change.Is there any way I can learn why a TLS handshake has failed from the perspective of the server at AWS?  Any suggestions on how I might diagnose this problem would be appreciated.Thanks,PatrickFollowComment"

Answer: "0Hi Patrick,During that phase of the handshake, the client will send the following messages sequentially (from the RFC https://tools.ietf.org/html/rfc5246#page-33):Certificate*ClientKeyExchangeCertificateVerify*[ChangeCipherSpec]FinishedThe server will read those messages in order and could be cancelling the handshake while processing messages before ChangeCipherSpec. Is your client using X.509 certificates? If so, the Certificate and CertificateVerify messages will also be sent and are frequently the cause of handshake failures.Another way to get more information about the handshake failure would be to make sure you have debug logs turned on for MbedTLS and see if any TLS alerts are sent. You could also use the same AWS IoT endpoint and the same client certificates with another simple client program like openssl s_client and use the -debug or -msg flag to get more information about any TLS-layer errors. This would also rule out any issues with certificates.-AlexCommentShareAWS-User-9229789answered 4 years ago0Alex,Thanks for your reply; I have been working on pursuing your suggestions.We are using X.509 certificates, but the failure does not produce any alert messages.  I've turned on detailed logging in Mbed TLS and don't see anything useful in the output.  Using the HughesNet Gen5 link, the TLS handshake goes into a read and retry loop after sending the client change cipher spec message.  I've logged the network traffic with WireShark and have confirmed that the client change cipher spec message is transmitted, but no response is ever sent by AWS.The latest thing I've been working on is modifying a sample Visual Studio project included with Mbed TLS to connect to our AWS endpoint and use the same X.509 certificates that are assigned to one of our test devices.  Running on my Windows workstation, that project is able to complete the TLS handshake both via our landline ISP as well as the HughesNet Gen5 link.  The implication is that the problem is timing-related, there is a subtle difference in the order of operations between the two projects, or something is wrong with Microchip's TCP/IP stack library.  I'll continue digging and will add to this thread if I have additional questions or find the underlying cause.Thanks,PatrickCommentSharepfrazeranswered 4 years ago0I believe my problem has been resolved.  I don't yet fully understand the root cause, but I found an anomaly in the way that the first TLS handshake response from the AWS server and traced it to the size of a TCP socket read buffer.  By increasing the buffer size from the default value of 1024 to >1400, the connection problems using a HughesNet satellite link disappeared.  (I used a value of 1460, which is the typical max TCP MTU of 1500 less two 20 byte headers; seems to be fairly common practice)The HughesNet transport must be doing something atypical with the packet framing that our project wasn't handling well.  Increasing this internal buffer size solved the problem.PatrickCommentSharepfrazeranswered 4 years ago"


Question: ECS EC2 launch type and event was unable to place a task because no container instance met all of its requirements

"I'm trying to learn more about ECS with EC2 launch type.Sometimes, when updating the Task Definition or Service I see the following error in the Service eventsservice ecs-service was unable to place a task because no container instance met all of its requirements. The closest matching container-instance XXX has insufficient CPU units available. For more information, see the Troubleshooting section.I checked the suggested docs: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/troubleshooting.htmlI also checked: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/service-event-messages.htmlIn my Task Definition I have:For the Task Definition CPU 2048 and Memory 1024For the container CPU 1024 and Memory 1024 (I tried also setting the CPU value to 2048).Why this happens randomly?What can I do to fix it? When this happens the service seems to get stuck and even after long waits, nothing happens.FollowComment"


Question: Whats the relation between Cvars and cheats?

"It is not clear if there is a distinction and how to do it.What will work about cvars in release mode and what not, can one enable the console with a restricted set of vars available?Documentation seems to not answer to these questions.Follow"

Answer: "0Accepted AnswerHi @REDACTEDUSERThe cvars obey the rules specified for them in IConsole.h using the flags they are created with. For example the e_TimeOfDaySpeed cvar is registered with VF_CHEAT and VF_CHEAT_NOCHECKREGISTER_CVAR_CB(e_TimeOfDaySpeed, 0.0f, VF_CHEAT | VF_CHEAT_NOCHECK, "Time of Day change speed", OnTimeOfDaySpeedVarChange);These are the flags that explain how they behave in various modes (release, profile, etc)    // Flags used by ICVarenum EVarFlags{VF_NULL = 0x00000000, // just to have one recognizable spot where the flags are located in the Register callVF_CHEAT = 0x00000002, // stays in the default state when cheats are disabledVF_DEV_ONLY = 0x00000004, // cvar is only registered with the console in non release buildsVF_DEDI_ONLY = 0x00000008, // cvar is only registered with the console in non release or dedicated server buildsVF_NET_SYNCED = 0x00000080, // synchronised between server and client(s); server authorativeVF_DUMPTODISK = 0x00000100,VF_READONLY = 0x00000800, // can not be changed by the userVF_REQUIRE_LEVEL_RELOAD = 0x00001000,VF_REQUIRE_APP_RESTART = 0x00002000,VF_WARNING_NOTUSED = 0x00004000, // shows warning that this var was not used in config fileVF_COPYNAME = 0x00008000, // otherwise the const char * to the name will be stored without copying the memoryVF_MODIFIED = 0x00010000, // Set when variable value modified.VF_WASINCONFIG = 0x00020000, // Set when variable was present in config file.VF_BITFIELD = 0x00040000, // Allow bitfield setting syntax.VF_RESTRICTEDMODE = 0x00080000, // is visible and usable in restricted (normal user) console modeVF_INVISIBLE = 0x00100000, // Invisible to the user in consoleVF_ALWAYSONCHANGE = 0x00200000, // Always accept variable value and call on change callback even if variable value didnt changeVF_BLOCKFRAME = 0x00400000, // Blocks the execution of console commands for one frameVF_CONST_CVAR = 0x00800000, // Set if it is a const cvar not to be set inside cfg-filesVF_CHEAT_ALWAYS_CHECK = 0x01000000, // This variable is critical to check in every hash, since it's extremely vulnerableVF_CHEAT_NOCHECK = 0x02000000, // This variable is set as VF_CHEAT but doesn't have to be checked/hashed since it's harmless to hackVF_SYSSPEC_OVERWRITE = 0x04000000, // This variable is specified by system.cfg with the intention to overwrite all subsequent settingsVF_CVARGRP_IGNOREINREALVAL = 0x08000000, // This variable will be ignored when cvar group's real val is checked (Needed for cvars which are in a group but change in various situations)VF_RENDERER_CVAR = 0x20000000, // The update of this variable will be done in render threadVF_DEPRECATED = 0x40000000, // Deprecated cvars use default values which cannot be modified outside the codeVF_EXPERIMENTAL = 0x80000000, // This variable is used by WIP or experimental feature}I hope this answers your question, but let me know if I can provide more information or examples.SharerePost-User-5841084answered 6 years ago0I'll try to find out for you.SharerePost-User-8353690answered 6 years ago0REMOVEDUPLOADhigh five!SharerePost-User-5841084answered 6 years ago0Thanks it was exactly the informations I was looking for.SharerePost-User-7621041answered 6 years ago"


Question: Workmail no longer working

"I can no longer login to my Workmail account from my desktop (I tried both Edge or in Chrome).  The system keeps telling me my name and password are not correct, which is not the case.   My Workmail credentials work just fine accessing my email from my iPhone.  And I checked the AWS Console settings - everything is fine and I didn't change anything.  Everything was working fine until yesterday.FollowComment"

Answer: "0Hi,I'm sorry to hear you're experiencing problems with logging on to WorkMail. Often this issue occurs when the mailbox is locked. Some process try to log on to the mailbox with a incorrect password which results in to many failed login attempts and the mailbox is temporarily locked.You can check all you apps to ensure they use the correct password but if that is not the case you can restrict access to your WorkMail organization via access control rules.Kind regards,RobinCommentShareMODERATORrobinkawsanswered 10 months agorePost-User-2260351 10 months agoThanks for your reply.  I was able to get into my workmail using the Chrome browser before reading this post.  But I still cannot access webmail via Edge.  I just checked (and tested) my access control rules but no change - I still cannot access Workmail from Microsoft Edge.Share"


Question: Deeplens v1 registration failed

"Hello,So I registered my Deeplens v1 camera 6 times already and I still get the same result when in the aws console: registration status failedI have no idea why this is happening since I am following the  exact steps in the official documentation or any other registration tutorial video.No answers about such issues were provided here, this is why I am posting this question.What might be the reasons behind the registration failing?I did upload the certificates, provided the roles needed, connected the camera to the internet...The documentation only request me to repeat the registration again, but I've been doing this many times already and nothing was solvedFollowComment"

Answer: "1There are two common troubleshooting steps around DeepLens devices failing to register.The GreenGrass software version of your device may be out-of-date. This can be fixed by updating the software on your device. https://docs.aws.amazon.com/deeplens/latest/dg/deeplens-manual-updates.htmlYou may have an older Python 2.x version of the service-created Lambda functions for device processing. These lambdas are named 'deeplens_admin_model_downloader' and 'deeplens_admin_version_poller'. If you find the DeepLens lambdas in your account are for an older Python version we recommend deleting them and letting AWS DeepLens service re-create them on a new device registration workflow.If you are still experiencing difficulties registering your device after these troubleshooting steps, reaching out to customer service will allow the service team to debug further based on the specifics for your account.CommentShareNate-AWSanswered a year ago0Hello thank you for your answer.The registration worked actually but the main problem now is running the sample project called head pose detection. It's a sample project that should run directly when inferred. However, the output stream and project stream are both white screens with no detection displayed. It seems like the neural network isn't running properly on the Deeplens even though this should be a plug and play technology.CommentShareAWS-User-8180404answered a year ago"


Question: change in brazilian portuguese synthesizes erroneously

"Hello,We use polly for IVR and in our brazilian calls since 3/19  number 1 is being synthesized as OM and it should be UM. Data, 4, and valor  are also being synthesized wrongI also notice that for some regions it gets it well.I test with ricardo pt-br the following text "digite 1 4 valor data"good (oregon) https://s3.us-east-2.amazonaws.com/ipcom-1234/speech_20190321221526364.mp3bad (ohio) https://s3.us-east-2.amazonaws.com/ipcom-1234/speech_20190321221901729.mp3sometimes ohio and n virginia produces good results sometimes bad.Please advise.Edited by: panitaxx on Mar 21, 2019 3:26 PMEdited by: panitaxx on Mar 21, 2019 3:33 PMFollowComment"

Answer: "0Accepted AnswerHello,Thank you for the report! The fix should have propagated to all regions yesterday night (GMT). Please, let us know if you still have any problem. Apologies for the inconvenience.CommentShareaws-lucaanswered 4 years ago"


Question: Cannot upgrade replication engine 2.4.4 to anything higher

"Is this a known issue?  I'm getting this error trying to upgrade my replication instance.  I was able to go to 2.4.4 from 2.4.3, but now I can't go to any higher versions.  This is the error I see:AWSDatabaseMigrationService: Cannot upgrade replication engine from 2.4.4 to 3.1.3It's the same for any version 2.4.5 and higher.  This is a t2.large instance running a task migrating data from oracle to postgres.Thanks.FollowComment"

Answer: "0Got a response from AWS Support.  The upgrade paths aren't available yet.They have commented to advise that there is a table in which this upgrade path gets inserted say upgrade from 2.4.4 to 2.4.5 but the path has yet to be inserted. These are the current paths:attunity:2.4.2attunity:2.4.3ACTIVEIF_AUTO_PATCH_LEVELattunity:2.4.2attunity:2.4.4ACTIVEIF_AUTO_PATCH_LEVELattunity:2.4.3attunity:2.4.4ACTIVEIF_AUTO_PATCH_LEVELWe haven't created additional upgrade paths yet, the console will throw out that error but as soon as we do that then they can upgrade.We had to delay creating them to get another patch out, but it is in the pipeline for the release and further details will be publicly communicated with the AWS community.CommentSharedougwaltonanswered 4 years ago"


Question: Geospatial queries

"Does the AWS Neptune team plan to implement a Geospatial API for Neptune that would allow "nearby" queries using geolocation coordinates latitude and longitude?If not, can you give guidance or an example query? It doesn't need to be perfectly spherical, but at least something that shows two users are next to each other given their latitude and longitude coords, and sorted by ascending distance.Edited by: JasonD1 on Jan 4, 2021 9:41 PMFollowComment"

Answer: "0Kelvin Lawrence (author of Practical Gremlin) has a Haversine Great Circle query in his GitHub repo.  Will this suffice?   https://github.com/krlawrence/graph/blob/master/sample-code/great-circle.groovyEdited by: TaylorR-AWS on Jan 6, 2021 11:24 AMCommentShareTaylor-AWSanswered 2 years ago0yes, I modeled mine similar to a slightly older version of that. I'll just continue with what I have for now if Neptune doesn't plan on adding something natively in the near future.CommentShareJasonD1answered 2 years ago"


Question: "CDK CodePipeline fails to output logs when deployed to a custom VPC, how to fix?"

"Hi everyone,Help is very appreciated!I'm managing a code pipeline with CDK and when I deploy it to a custom VPC with an internet gateway (public subnet) I fail to see any logs in CodeBuild. Here is my CDK Code:const pipeline = new CodePipeline(this, id, {      pipelineName: `Hubs-CDK-Pipeline-${id}`,      selfMutation: false,      synth: new ShellStep('Synth', {        input: CodePipelineSource.gitHub(          'stafflink-pty-ltd/sauron',          id === Environment.STAGING ? 'aws' : 'main',          {            authentication: SecretValue.secretsManager('manavs-github-token', {              jsonField: 'token'            })          }        ),        primaryOutputDirectory: 'cdk/cdk.out',        commands: [          `node -v`,          `sudo npm i -g n --force`,          `n lts`,          `n prune`,          `node -v`,          `npm i -g yarn`,          `yarn`,          `yarn rw setup deploy serverless`,          `rm -f .env`,          `sudo wget -qO /usr/local/bin/yq https://github.com/mikefarah/yq/releases/latest/download/yq_linux_amd64`,          `sudo chmod a+x /usr/local/bin/yq`,          `yq eval-all -i '.provider.vpc.securityGroupIds |= ["${lambdaSG.securityGroupId}"]' api/replace.yml`,          `yq eval-all -i '.provider.vpc.subnetIds |= ["${vpc.isolatedSubnets[0].subnetId}", "${vpc.isolatedSubnets[1].subnetId}","${vpc.isolatedSubnets[2].subnetId}"]' api/replace.yml`,          `yq eval-all -i '.provider.iam.role.statements |= [{"Effect": "Allow", "Action": ["s3:GetObject", "s3:PutObject"], "Resource": ["${bucket.bucketArn}"]}]' api/replace.yml`,          `yq eval-all -i '. as $item ireduce ({}; . * $item)' api/serverless.yml api/replace.yml`,          `yq eval-all -i '. as $item ireduce ({}; . * $item)' web/serverless.yml web/replace.yml`,          `cat api/serverless.yml`,          `npm run ci:build`,          `npm run ci:migrate`,          `yarn rw deploy aws`,          `cd cdk`,          `npm i`,          `npm i -g aws-cdk`,          `cdk synth`,          `cd ..`        ]      }),codeBuildDefaults: {        vpc,        subnetSelection: { subnetType: SubnetType.PUBLIC },        securityGroups: [codePipeSG],        rolePolicy: [          new iam.PolicyStatement({            effect: Effect.ALLOW || undefined,            actions: [              'logs:CreateLogGroup',              'logs:CreateLogStream',              'logs:PutLogEvents'            ],            resources: ['*']          }),          new iam.PolicyStatement({            effect: Effect.ALLOW || undefined,            actions: [              's3:Abort*',              's3:DeleteObject*',              's3:GetBucket*',              's3:GetObject*',              's3:List*',              's3:PutObject',              's3:PutObjectLegalHold',              's3:PutObjectRetention',              's3:PutObjectTagging',              's3:PutObjectVersionTagging'            ],            resources: ['*']          })        ],        buildEnvironment: {          computeType: ComputeType.LARGE,          buildImage: LinuxBuildImage.STANDARD_5_0,Here is my security group:const codePipeSG = new SecurityGroup(this, 'code-pipeline-security-group', {      vpc,      allowAllOutbound: true,      securityGroupName: `hubs-codepipe-${id}`    })Here is my VPC:const vpc = new Vpc(this, 'VPC', {      cidr: id === Environment.PROD ? '10.1.0.0/16' : '10.0.0.0/16',      natGateways: 0,      maxAzs: 3,      subnetConfiguration: [        {          name: `public-${id}-1`,          subnetType: SubnetType.PUBLIC,          cidrMask: 24        },        {          name: `isolated-${id}-1`,          subnetType: SubnetType.PRIVATE_ISOLATED,          cidrMask: 28        }      ],      vpcName: `hubs${id}`    })FollowCommentJaccoPK a year agoDon't you need a routetable for your public subnets to route any traffic to the IGW?Share"

Answer: "1Accepted AnswerHello,Thanks for sharing the relevant code-snippets for your CDK Application. From this, I can see that you've configured the following:VPC with a subnet configuration to include PUBLIC (access to internet via an internet-gateway) and PRIVATE_ISOLATED (no access to the internet) subnets.Additionally, the CodeBuild project is configured to make use of the PUBLIC subnet during builds.I'm suspecting that the build-container is unable to stream logs to CloudWatch as it was not able to connect to the CloudWatch Logs service endpoint. In order to establish internet-connectivity you would need to configure your CodeBuild project to make use of subnets of the type PRIVATE_WITH_NAT (access to the internet via NAT).This can be done by making the following modifications to your CDK application:VPC Subnet Configuration:subnetConfiguration: [    {        name: `public-${id}-1`,        subnetType: SubnetType.PUBLIC,        cidrMask: 24    },    {        name: `private-nat-${id}-1`,        subnetType: SubnetType.PRIVATE_WITH_NAT,        cidrMask: 24    },    {        name: `isolated-${id}-1`,        subnetType: SubnetType.PRIVATE_ISOLATED,        cidrMask: 28    }]CodeBuild configuration would need to select the subnets of type PRIVATE_WITH_NAT:   subnetSelection: { subnetType: SubnetType.PRIVATE_WITH_NAT },Please refer to the following excerpt from the documentation Use AWS CodeBuild with Amazon Virtual Private Cloud for more details:You need a NAT gateway or NAT instance to use CodeBuild with your VPC so that CodeBuild can reach public endpoints (for example, to run CLI commands when running builds). You cannot use the internet gateway instead of a NAT gateway or a NAT instance because CodeBuild does not support assigning Elastic IP addresses to the network interfaces that it creates, and auto-assigning a public IP address is not supported by Amazon EC2 for any network interfaces created outside of Amazon EC2 instance launches.CommentShareDeepakanswered a year ago"


Question: "AL2023 - Does it support 32-bit? If yes, how to add 32-bit repository to repolist on AL2023?"

Does AL 2023 support 32-bit packages.How to add 32-bit repository to repolist?FollowComment

Answer: "0Hello there,Warm greetings of the day!Thank you for posting your query to AWS re:Post. From your question I understand that you want to know if AL2023 supports 32-bit architecture or not.Please allow me to convey that as of now AL2023 only supports two architecture and that is -1. 64-bit (x86), and2. 64-bit (Arm)32-bit architecture is not supported as of now.If you have any more queries or concerns, please fel free to open a support case -[+] https://console.aws.amazon.com/support/home#/case/createWishing you a good day ahead.CommentShareKumar_Sanswered 14 days ago"


Question: PeriodOverPeriodDifference - Returning SQL Exception

"I have the following Calculated FieldperiodOverPeriodDifference(sum(test), createdAt)where the current output in a pivot table looks  standard with createdAt as Rows and other CalculatedFields calculating the YOY Growth and Total Growth. However every time I add the above CalculatedField in I am met with a SQL Exception but I cannot see the error.FollowCommentiwasa EXPERTa year agoHi.Where did you see the SQL exception?Please tell me the information of your dataset. Can you provide SPICE or Direct, reproducible sample data if possible? We can investigate the cause together.ShareAWS-User-0067083 a year agoHi,The error appears as I pull the Calculated Field into the Pivot Table.  At that point the chart gives the following error"Your database generated a SQL Exception, this can be caused by timeouts, resource constraints"The query is a direct query as I am not using SPICE at the moment. The data looks similar to thisShareAWS-User-0067083 a year agocreatedAtYoYGrowth Sum(Test)1/1/205 51/4/20 76 711/7/20105 291/10/20280 1751/1/21 113 1131/4/21 215 1021/7/21 308 931/10/21446 1381/1/22 138 1381/4/22 174 36Please note the orginal dates had 00:00 appendedShareiwasa EXPERTa year agoI will give it a try. I will reply again.Share"


Question: Volume Deletion

Working on Cost Optimization-Is it safe to delete the Volume State - Available State - Production Environment?please suggest.FollowComment

Answer: "2Depending on the data stored and your retention policy, What I usually do is take a snapshot, make sure I include my notes on the snapshot and then delete the volume in available state, once its out of my retention band I remove the snapshot.  If you are not sure on the data you could mount it on a worker Ec2 to review the contents too. That way it doesn't hinder production.CommentShareDjangoStyleanswered 6 months ago0Hi.YES, Given that the volume does not contain any sensitive/important data. You can perhaps create a snapshot of the volume to serve as a backup and further archive the snapshot should you not require the data immediately.Amazon EBS Snapshots Archive offers up to 75 percent lower snapshot storage costs for snapshots that you plan to store for 90 days or longer and that you rarely need to access.But in general when a volume is in an available state it simply means that it is not attached to an instance and therefore can be deleted.CommentShareSUPPORT ENGINEERLundianswered 6 months ago"


Question: Yolo5 model deployment into SageMaker endpoint

I have a trained yolo5 model which I deployed into Real-time end-point in SageMaker. I tried almost all gpus computes available but I could not get better than 2.6 sec for inference time. This is a light model and my target is to have < 1sec inference time. Could you please help me with any hints?I transformed the model from pytorch to TF format.Thank you!FollowCommentAlex_T EXPERT9 months agoProbably over-simple but worth checking: What's your input request format? Are you sending in compressed images (e.g. 'image/jpeg') and extracting them in the endpoint? Or sending in raw pixel tensors (which could add significant communication overhead)Share

Answer: "0Have you read the following two blog posts?Maximize TensorFlow performance on Amazon SageMaker endpoints for real-time inferenceReduce computer vision inference latency using gRPC with TensorFlow serving on Amazon SageMaker?The first explores a few parameters that you can use to maximize the performance of a TensorFlow-based SageMaker real-time endpoint. These parameters are in essence overprovisioning serving processes and adjusting their parallel processing capabilities. As we saw in the tables, this overprovisioning and adjustment leads to better utilization of resources and higher throughput, sometimes an increase as much as 1,000%.The second demonstrates how to reduce model serving latency for TensorFlow computer vision models on SageMaker via in-server gRPC communication, leading to gains of 75% in latency improvement in the example shown.CommentShareMarkRoyanswered 9 months agorePost-User-4987782 9 months agoThanks @MarkRoy for the help!I tried the suggestions but nothing worked and I am not able to get the inference in less than 2.6 sec. Any other suggestions?Thank you!Share"