Question: "Send IOT core device MQTT fields as IOT core / tracker, "user-defined key-values pairs with each position update.""

"I'm using a custom LORA device which publishes via MQTT to IOT core.  In IOT core I have a message routing rule (and SQL) that pushes the location info in the received device MQTT to an AWS tracker resource.  In the webApp frontend I use, GetDevicePositionHistoryCommand to extract the positions.  This is all working.  Now I'd like to pass the pass the RSSI of the LORA device along with each position update.  This data is already present in the MQTT from the device alongside the lat/lon being passed to the tracker.  According to this AWS Location ServicesAmazon Location Service adds metadata help customers reduce costs article from AWS, it should be possible to include "...three user-defined key-values pairs with each position update."  I have fairly exhaustively searched and have found ABSOLUTELY NO EXAMPLES of how to do this!Can anyone offer any guidance?Thanks in advance for any help!FollowComment"

Answer: "0Hi. Here's a JS example: https://github.com/aws-samples/amazon-location-samples/blob/7b3b923fef570d952de60c60945985fb4d6001bb/amplify-ui-geo-explore/src/components/trackers/TrackersLayer.jsx#L33-L47CommentShareEXPERTGreg_Banswered 2 months agowdawson61 2 months agoHi and thanks very much for your quick response!  Unfortunately, I don't think this answers my question.  Your example shows how to SET these metadata using BatchUpdateDevicePositionCommand(), but in my application, the position updates are done by a rule in IOT core.  I'm guessing I might be able to use a "lamda action" instead of the "location action" in my IOT core rule.  However, this only associates the metadata with the tracker.  I still don't see (and your example doesn't appear to show) how to actually access that metadata along with the position data; i.e., the list of positions retrieved by GetDevicePositionHistoryCommand() DO NOT contain any metadata, so how exactly does one access the metadata?Share0Hello there. At this time the IoT Core Rule for Amazon Location Service does not support passing Metadata to Amazon Location Service trackers. Currently, only the position data is passed through. If you need to pass these through, you will need to make use of a Lambda Rule: https://docs.aws.amazon.com/location/latest/developerguide/tracking-using-mqtt-with-lambda.html. Then, using the https://docs.aws.amazon.com/location/latest/APIReference/API_GetDevicePositionHistory.html API, you can access this position history along with your Position Properties.I hope this helps and I've passed on your feedback to our IoT Core teamCommentShareawszacanswered 2 months ago"


Question: Water gem and Video Playback gem errors and FBX failing to import

"Hey all,I posted a while ago about how the video playback gem would fail to load in the editor even though the build was successful. Well now when I try to import an fbx that contains just a mesh, I get this error in the asset processor:25/01/2018 21:52 - RC Builder - C: 1> 0:00 [Gem config file] = D:\Repos\UES-lumberyard\dev\Test1/config/editor.xml25/01/2018 21:52 - RC Builder - C: 1> 0:00 [Gem config file] = D:\Repos\UES-lumberyard\dev\Test1/config/editor.xml25/01/2018 21:52 - RC Builder - C: 1> 0:00 [Gem config file] = D:\Repos\UES-lumberyard\dev\Test1/config/editor.xml25/01/2018 21:52 - RC Builder - W: 1> 0:00 Defaulting engine root path to 'D:\Repos\UES-lumberyard\dev\'25/01/2018 21:52 - RC Builder - C: 1> 0:00 [Gem config file] = D:\Repos\UES-lumberyard\dev\Test1/config/editor.xml25/01/2018 21:52 - RC Builder - C: 1> 0:00 [Gem config file] = D:\Repos\UES-lumberyard\dev\Test1/config/editor.xml25/01/2018 21:52 - RC Builder - E: 1> 0:00 Failed to load dynamic library at path "D:\Repos\UES-lumberyard\dev\Bin64vc140\Gem.Water.Editor.c5083fcf89b24ab68fb0611c01a07b1d.v0.1.0.dll".25/01/2018 21:52 - RC Builder - C: 1> 0:00 [Gem config file] = D:\Repos\UES-lumberyard\dev\Test1/config/editor.xml25/01/2018 21:52 - RC Builder - E: 1> 0:00 Failed to load Gems for scene processing.25/01/2018 21:52 - RC Builder - E: 1> 0:00 Failed to convert file D:/Repos/UES-lumberyard/dev/Test1/Assets\untitled.fbxIt appears that the water gem is causing my fbx to fail to load. I'm using 1.12.0.0 (because from what I can see 1.12.0.1 only adds external projects support, which I do not need). For some reason, the water and video playback gems build successfully but do not work in the editor.I'm now worried that a lot of gems might also not work even though they build correctly. With the videoplayback gem, I just disabled it since it wasn't a requirement. For me, the water gem IS a requirement.I will test my FBX import without the water gem to see if that fixes it, but I would prefer a solution that fixes the water gemFollow"

Answer: "0Accepted AnswerHello @REDACTEDUSERHaving the water gem enabled seems to be a known issue for causing FBX import issues in 1.12. I would recommend disabling it and try again. One thing to note is the maximum vertices we support is 65k - if you have an FBX that has more than that many vertices then it is recommended to split the FBX into smaller chunks.Hope that helps!SharerePost-User-5162062answered 5 years ago0So, @REDACTEDUSERAny solution to this problem, is the team aware of it?EDIT: Turns out removing the water files is not fixed by a debug -p all build, getting error about the water gem not being built. Guess I'll try and update this forum post if I can get the fbx importer to work in my new project.SharerePost-User-8843326answered 5 years ago0@REDACTEDUSERAny Answers? I've looked at the gem itself, can't see anything that would cause a problem with fbx files...SharerePost-User-8843326answered 5 years ago0Hmm -- interesting. Weird that the Gem would block FBX importing. Let me check in with the team on answers. Stay tuned :)SharerePost-User-5738838answered 5 years ago0Hi, it's been a while. Has any fix been made yet? Accidentally enabled the water Gem again by accident, forgetting this error and am now unable to import fbx filesSharerePost-User-8843326answered 5 years ago"


Question: Issues in sending prometheus metrics to cloudwatch in eks fargate

"I am trying to send prometheus metrics to aws cloudwatch in eks fargate. I deployed kube-prometheus to eks fargate. I followed instruction in https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/ContainerInsights-Prometheus-Setup.htmlDeployment was successful. I saw logs in /aws/containerinsights/<cluster>/prometheus. But no embedded metrics. So I tried to add prometheus api server metrics (not sure if it will help) by following https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/ContainerInsights-Prometheus-Setup-configure.htmlAfter I added the following to ConfigMap of prometheus-config and deploy, I got "error: error parsing prometheus-eks-fargate.yaml: error converting YAML to JSON: yaml: line 160: did not find expected key":    # Scrape config for API servers    - job_name: 'kubernetes-apiservers'      kubernetes_sd_configs:        - role: endpoints          namespaces:            names:              - default      scheme: https      tls_config:        ca_file: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt        insecure_skip_verify: true      bearer_token_file: /var/run/secrets/kubernetes.io/serviceaccount/token      relabel_configs:      - source_labels: [__meta_kubernetes_service_name, __meta_kubernetes_endpoint_port_name]        action: keep        regex: kubernetes;https      - action: replace        source_labels:        - __meta_kubernetes_namespace        target_label: Namespace      - action: replace        source_labels:        - __meta_kubernetes_service_name        target_label: Servicethe configMap before is like:kind: ConfigMapmetadata:  name: prometheus-config  namespace: amazon-cloudwatchThanks in advance,JulieFollowCommentPraneel_M SUPPORT ENGINEER5 months agoI do understand that you had added the shared scrape config to configmap and running in to Parsing error. Since this error points to incorrect YAML formatting of the manifest, I believe the scrape config might have been added with wrong indentation or as the error message suggests there might be missing keys. Although it is hard for us to tell without having the complete YAML manifest that you are trying to apply.  Please refer to this manifest(that I grabbed from the same link you were referring to - https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/ContainerInsights-Prometheus-Setup-configure.html)  -- https://raw.githubusercontent.com/aws-samples/amazon-cloudwatch-container-insights/latest/k8s-deployment-manifest-templates/deployment-mode/service/cwagent-prometheus/prometheus-eks.yamlPlease ensure that your shared scrape config is placed under the below snippet as shown below:apiVersion: v1kind: ConfigMapmetadata:name: prometheus-confignamespace: amazon-cloudwatchdata:prometheus configprometheus.yaml: |global:scrape_interval: 1mscrape_timeout: 10sscrape_configs:====== Here comes the scrape Config===========================================Considering that we need additional information to be able to completely address the issue, I would suggest that you raise a support ticket with AWS Premium Support to get assistance with this issue.Share"

Answer: 0Accepted AnswerThank you so much. I fixed the error in the file:https://raw.githubusercontent.com/aws-samples/amazon-cloudwatch-container-insights/latest/k8s-deployment-manifest-templates/deployment-mode/service/cwagent-prometheus/prometheus-eks-fargate.yamlIt somehow misplaced these lines:kind: ConfigMapmetadata:name: prometheus-confignamespace: amazon-cloudwatchCommentShareJulieanswered 5 months ago


Question: Problem in SAP Launch Wizard - cannot create EgressCheckWaitCondition

I have been trying to create an SAP S4 Hana instance using the SAP Launch Wizard. It always fails when trying to create the resource EgressCheckWaitCondition before it starts trying to install the SAP software and after successfully creating the S4 Instance. I checked and the Internet egress is setup properly and working and all the parameters are compatible with the guide.I am tryign to do a single instance deployement on SAP Suse LInux.I would really appreciate it if someone has found a similar issue and has any ideas as to what the problem can be.Appreciate your helpSFollowComment

Answer: "0General prerequisites must be met to deploy an SAP application with Launch Wizard - you must create an Amazon VPC that consists of private subnet and it must have outbound internet access.For further details you may refer the AWS documentation https://docs.aws.amazon.com/launchwizard/latest/userguide/launch-wizard-sap-setting-up.htmlCommentShareDeep_Kanswered a year agorePost-User-6049826 a year agoI followed that guide when setting up the Launch Wizard. I have a VPC with private subnet and outbound internet access. I connected to the created EC2 instance after the deployment failed  by disabling rollback and I verified that from the instance I can go out to well know internet sites like google.com. I also included the NAT Gateway and attached an Internet Gateway as specified in the documentation. Looking at the event in the CloudFormation logs it seems to just stop trying to create that condition and does not proceed further until it times out.Thank you very much for your answer.ShareDeep_K a year agoThanks for your reply .Followup questions - are you using your own image or subscription from AWS marketplace ? if you are using marketplace image make sure to subscribe before starting the Launch wizard. you may also check cloud watch for more details about the error.check where the stack is failing under the CloudFormation -> Event Tab -> Failed events.Also check instance logs specifically /var/log/messageshttps://docs.aws.amazon.com/launchwizard/latest/userguide/launch-wizard-sap-troubleshooting.htmlSharerePost-User-6049826 a year agoI am using a SAP Suse Linux image, I did subscribe before starting the Launch wizard. I checked and it is failing in trying to create the resource EgressCheckWaitCondition. I restarted it and continues to fail there. I verified there is outbound connectivity from the instance. I will check those instance specific logs.Thank you for your helpSharerePost-User-6049826 a year agoI can't find any instance logs and when I try to look at them from ec2-user access is denied. I guess I will try a clean restart with a new deployment after I check all the pre-requisites againShareDeep_K a year agoHope the new deployment worked fine. do let me know if you are still having challenges.Share"


Question: API call after stack deploy updates

"Hi team,I have a CDK stack stackA, that creates a CloudFront distribution, already deployed in the stage and prod environments.I want to do an API call to secretsmanager.rotateSecret each time stackA is redeployed (updating the CF distribution).the purpose of this API call (secretsmanager.rotateSecret) is to update a  header value in CF distribution with a value of a secret stored in secretmanager.I saw that I can use AwsCustomResource to do API calls, but the onCreate, onUpdate and onDelete  properties represent the lifecycle events of the custom resource itself and are invoked when the custom resource itself  is created, updated or deleted respectively.The specific scenario that I would like to achieve iscdk deploy  stackA (for cloudFront distribution updates)once the cloudFront stack finish updating ==> then call secretsmanager.rotateSecret operation (to update a header in the CF by a value of a key stored in secret manager)is there a way to achieve this scenario?appreciate your help.FollowComment"

Answer: "0Accepted Answerused AwsCustomResource at the end of my CF stackexample code for secretManager Service    const apiKeysRotationTrigger = new AwsCustomResource(      this,      "ident",      {        policy: AwsCustomResourcePolicy.fromSdkCalls({          resources: AwsCustomResourcePolicy.ANY_RESOURCE,        }),        onCreate: {          service: "SecretsManager",          action: "rotateSecret",          parameters: {            SecretId: "SecretId",          },          physicalResourceId: PhysicalResourceId.of("PhysicalResourceId"),        },        onUpdate: {          service: "SecretsManager",          action: "rotateSecret",          parameters: {            SecretId: "SecretId",          },          physicalResourceId: PhysicalResourceId.of("PhysicalResourceId"),        },      }    );  }CommentShareJessanswered a year ago"


Question: Emails doesn't send whenever they get to be sent to multiple addresses.

"Hello good morning/evening,I have a co-worker who gets trouble whenever he wants to send emails to more than one person or to a Outlook group.He gets a mail back from mailer-daemon @ [tenant] saying either :orI checked every mail address in the group list and they all are activated, exists and are spelled rightlySo I don't really know where to searchIf you could help me with that I would be very grateful !Thanks in advance, have a good dayFollowCommentAnanth Tirumanur 7 months agoAre you using Amazon SES to send emails to multiple email addresses? if you are using SES and boto3 to send emails, ensure that the data type for Destination Object is of "Type: Array of strings". Read the SES API documentation for more information - https://docs.aws.amazon.com/ses/latest/APIReference/API_SendEmail.html .emails_list = ['xxx@gmail.com', 'yyy@company.com', 'zzz@domain.com']Provide the contents of the email.    response = client.send_email(        Destination={            'ToAddresses': [                emails_list,            ],        },        Message={            'Body': {                'Text': {                    'Charset': CHARSET,                    'Data': BODY_TEXT,                },            },            'Subject': {                'Charset': CHARSET,                'Data': SUBJECT,            },        },        Source=SENDER,        # If you are not using a configuration set, comment or delete the        # following line        #         ConfigurationSetName=CONFIGURATION_SET,    )Share"

Answer: "0Assuming that email was sent via outlook or any other client other than webmail this error is appearing, the resolution would be to remove the email address from the group and re-add it to the group.However, due to security reasons I can’t add certain details here, I would request you to please open a support case with AWS using the following link.https://support.console.aws.amazon.com/support/home?#/case/createCommentShareSUPPORT ENGINEERrePost-User-0432478answered 7 months ago0Hi there -- thank you for your interest in Amazon WorkMail!That 'invalid recipients' error can occur if you have a cached contact in your auto-complete addressbook that refers to an address which no longer exists. The addressbook or contact is stored by Outlook, and if this happens, you just need to clear it out and let it recreate automatically the next time you email that person. For example, if you are writing to a contact named alice@example.com, and the 'alice' email box was deleted, but later, a new 'alice' was created, the internal reference will have changed, and you may see that message; if you clear the old 'alice@example.com' out and then reply to Alice's email, it will add a new, valid 'alice@example.com.'If you are sending to an individual contact, in Outlook, please try typing the address and letting the autofill complete it, but don't click or hit return. When it shows the suggestions in the drop-down, hover your mouse over one and you should see a small 'x' on the right side. Clicking the 'x' will clear it. To email that person the next time, you will have to re-type the recipient's SMTP address or reply to an email from them, but it should deliver normally from that point. If you think this affects multiple contacts, you can also clear the entire list. (See  Outlook docs for more.)If you are sending to a contact list that you created manually in your Contacts, then you can navigate to open the list and look through the contacts in it, and find the one or ones that need clearing and recreating. Unfortunately, I believe contact lists do not refresh even if the underlying contact is fixed, so it might mean a little trial and error to figure out which individual contact is the issue, or deleting the list  and making a new one after you clear the old contacts, but the good news is that it should be fixable.Kind regards,SabrinaCommentSharesldanswered 6 months ago"


Question: Having hard time with Lightsail email concepts

"Hi, I am struggling with this guys and wonder if anyone can point me in the right direction please?  I am struggling with some of the concepts.https://lightsail.aws.amazon.com/ls/docs/en_us/articles/amazon-lightsail-enabling-email-on-wordpressI run three websites and want to enable email on them so I have found the guide above and I am setting up SES.Am I correct saying that SES does not act as an inbox?  It is just an email forwarder?  So I join my domain to SES via a plugin and set up the DNS records (Route53) with the correct authentications and then if an email is sent out from my Lightsail server - steve@example.com say - it connects to SES and then SES then forwards the email to the send-to address?  Is that how it works?  Assuming yes then this accounts for outbound email from my domain.  I can then use this for stuff like Woocommerce that sends emails in the outbound direction I assume?What I am more confused about is incoming email to my website.  What if someone wanted to email steve@example.com from the outside world?  Where is the inbox for that account?  Thinking this through....  The person's server who sent the email would look up example.com and would find it via the records I set up in DNS.  OK.  But where would that email be stored? What would initiate download of the email?  Would I have to set up my email client to point to something so as to retrieve email sent to sales@example.com?Thank-you in advance!SteveFollowComment"

Answer: "0Hi KaiserSnowball,You are correct that Amazon SES does not act as an inbox, and is an email routing service.Lightsail instances are not configured to send email by default. For example, if you create a WordPress instance, you might  want to configure it to send email notifications when website visitors comment on your blog posts. Another use-case is to configure it to send emails when one of your registered administrators requests a password reset (which requires an email to be sent). The tutorial you linked shows how to configure your isntance to send email using Amazon SES. The tutorial assumes that you're already using a managed email service, such as Amazon WorkMail, Gmail, Outlook, etc. The purpose of the tutorial is not to show how to configure an emai server, but instead how to configure your instance to send email notifications to your existing email address/service.If you want to use an email address with your custom domain, such as KaiserSnowball@example.com, in which example.com is your custom registered domain name, then I suggest using a service like Amazon WorkMail to use as your email inbox/outbox. For more information, see the Amazon Workmail Administrator Guide here: https://docs.aws.amazon.com/workmail/latest/adminguide/what_is.htmlThe following articles provide guidance to use your registered domain with Amazon WorkMail:https://aws.amazon.com/premiumsupport/knowledge-center/add-verify-domain-workmail/https://docs.aws.amazon.com/workmail/latest/adminguide/add_domain.htmlPlease let me know if you have further questions by posting a reply.CommentShareRobL-AWSanswered 2 years ago0Many thanks!I have now got it working outbound via SES and Route 53 and I am out of the Sandbox now too :)CommentShareKaiserSnowballanswered 2 years ago"


Question: Help with getting a database backup from Lightsail Database

HiI'm struggling with finding a way to get a dump of my database that is hosted in the Lightsail Database service. It's a task that is required from time to time to take a copy to use in development to fix a particular issue. I've tried using MYSQLDUMP from the server that is connecting to the database for the application but every attempt results in an error 'access denied for user 'username'@'IP Address'.I'm using the same connection details that my application is using but nothing appears to work.Any advice?ThanksPaul.FollowComment

Answer: 0If anyone else needs this I was able to get a backup using the syntax:mysqldump --single-transaction --column-statitstics=0 -h insert-your-endpoint -u username -P 3306 -p"your password" database-name > database-backup.sqlI can't confirm that it will definitely work for you but did for me.CommentShareoopadminanswered 4 years ago


Question: Amazon Lightsail each instance's traffic limit in a load balancer

"Hello, I have this urgent situation and kind of lost even on where should I post this.There's this project done in WordPress (using Crocoblock) that is already done in a Hostinger shared server (it's horrible, honestly, as every shared server is) and, if my customer explained me correctly, could have up to 20,000 simultaneous accesses at its peak (highly doubt it). The website's main objective is capturing leads (should be about 15,000) in a period of 6-8 days, and is not a very complex website - around 5 pages with a subscription form as one of them.Problem is, he set a deadline of 3 days to find the best option, migrate the website and test, and all of that having ZERO experience with AWS - actually, my only experience with web hosting are these terrible shared servers. So, no time and no experience at all, but I'm willing to do it whatever it takes - this project could be a life changer.I'm still in doubt about these 3 AWS options:WP on Lightsail because it seems simpler to configure and my website is in WP. But I'm unsure it could handle so many simultaneous accesses (looks like  this should be used: https://aws.amazon.com/pt/getting-started/hands-on/launch-load-balanced-wordpress-website/ , but not sure if it's enough).Elastic Beanstalk because it seems more scalable and simpler than EC2 (but unsure if configuration is easy).EC2 but it seems very difficult to configure compared to the others and there's also the fact that I may not have enough time to configure and learn about it.What would you recommend in this case?Other developers that I've talked recommended me EC2 or maybe taking a look at Lightsail, which seems easier to configure, and considering that I have virtually no time at all to do this, is my preferred choice.And directly related to thread's title, If I choose Lightsail and set up a Load Balancer with multiple instances (following this tutorial: https://aws.amazon.com/pt/getting-started/hands-on/launch-load-balanced-wordpress-website/), how can I measure:how much traffic a single user can generate just by navigating through 2 or 3 pages;how many users from item (1) could one single instance of Lightsail handle;knowing how many users from item (2) each instance could handle, how many instances of Load Balancer do I need;I highly doubt it will have this many simultaneous accesses. I believe he said this high number just to guarantee that server will be available doesn't matter how many accesses it has. Therefore, if there was any way that I could "auto scale", i.e., set up the server to handle like 2,000 concurrent accesses and enable something that would generate new instances in case this overloads, that seems a perfect fit.And after all these informations, if this would still be the correct choice or way to proceed... thank you very much for your attention.Edited by: victorpietro on Oct 14, 2021 10:57 AMEdited by: victorpietro on Oct 14, 2021 11:47 AMFollowComment"

Answer: "0Measuring exactly how much traffic an instance would be able to handle is unfortunately not a simple task, and we can't give great estimations of how much traffic an instance can handle because each application is different. One idea is to run a load test (ie, simulating customer traffic rapidly) on a single instance to see how it affects performance. You can always start with smaller instances and scale them up (by snapshotting the instance and creating a larger instance from the snapshot: https://lightsail.aws.amazon.com/ls/docs/en_us/articles/how-to-create-larger-instance-from-snapshot-using-console).In terms of how many load balancers would be needed, I don't see why you would need more than one load balancer, unless you need to spread across multiple regions.In the Metrics tab on the instance details page, you'll be able to see CPU utilization metrics. The graph has a "sustainable zone", and if the CPU frequently exceeds this limit, you may see performance degradations. You can set alarms on your instances so that you are notified if your instances are exceeding this sustainable zone. Then you can manually add more instances to the load balancer or scale up existing ones.Lightsail unfortunately does not offer an instance auto-scaling feature. EC2 does offer auto-scaling (https://aws.amazon.com/ec2/autoscaling/), but I agree that it's a bit more difficult to configure than Lightsail.I hope this helps. Thank you for considering Amazon Lightsail.-MaxwellCommentShareMaxwellanswered 2 years ago"


Question: AWS.Scheduler is not a constructor

My purpose is to create a specific schedule using lambda. But I can't create constructor for scheduler due to error "AWS.Scheduler is not a constructor".Declaration:const AWS = require('aws-sdk');var scheduler = new AWS.Scheduler({apiVersion: '2021-06-30'});Docs: https://docs.aws.amazon.com/AWSJavaScriptSDK/latest/AWS/Scheduler.htmlI dumped AWS but can not find out SchedulerCan anyone help me with this case? Thanks so much!FollowComment


Question: IPSEC Tunnel up but can't reach networks from either side

We can ping both ends of the tunnel. AWS shows tunnel up and configuration looks good but pings or traceroute from either side fails.This is from a mikrotik router to AWS. Not sure but I'm not certain the static routes in the VPC are setup correctly; this is one area where the documentation and interface are confusing. We have two route tables in the VPC (why two?). The main one has:Destination: 192.168.168.0/24Target: localStatus: activePropagated: noOn route propagation tab:vgw-098a9408c7a7644ef | test gatewaypropagation:Yes**Second route table has:Destination: 192.168.168.0/24Target: localStatus: activePropagated: noDestination: 0.0.0.0/0Target: igw-07f6a79ff6d669cafStatus: activePropagated: noOn propagation tab:vgw-098a9408c7a7644ef | test gatewaypropagate: YesCould I get someone at AWS to review the setup? VPC ID is vpc-0f67bbadf9545712cFollowComment

Answer: "0Problem solved. Problem was on other end.CommentSharebschoolyanswered 4 years ago0Care to share how you fixed it?  I'm in the same boat right now.  Tunnel is up for both, everything is set up correctly.  I have an instance fired up and the correct route on my end for that /24 to go through the tunnel.   I am unable to get a ping even though I allow it through the security group and acls etc.Been over all the instructions backward and forward.CommentShareSteveKenneyanswered 2 years ago"


Question: Lightsail - Getting WSOD (white screen of death) with a black bar across top using BuddyBoss theme.  Other Themes Work Fine

"I am using BuddyBoss theme with a LightSail instance.   If I try to open the website via LightSail, I get the white screen of death with a black bar header.  I have done some testing and believe it has to with the server-side.   I am not sure what to look for on the server end that would affect this Wordpress theme.I have tried the following:Created fresh install of WP on another instance with no static IPs, distributions , etcPHP memory max set to 512MI installed Wordpress locally using Xampp and the theme works fine.I have contacted theme builder and I am awaiting their testing results.Other themes work fine when I switch back.disabled all Wordpress PluginsHas anyone experienced any similar issues?  If so, please let me know.  I should note, the theme is a social community theme that operates a lot like facebook.  It has private chat, notifications menu bar, online indicator, a lot of dynamic content that runs in the background without clicking a link.  Thank you.FollowComment"


Question: Very Urgent-AWS Certification Account LastName update

"Hi,I raised multiple cases in AWS support(https://support.aws.amazon.com/#/contacts/aws-training) to update the Last Name in my Certification Account profile to comply with my Id proof. I don't have the last name in any ID proof and want to leave it blank. I didn't hear back from anyone.Please help me update my Last Name as I am planning to take the exam on 28th September 2022Email Id: *****AWS Candidate ID: *****Current Last Name: *****The last name to be changed to No last Name-Please update it as EmptyThanks in Advance!FollowCommentChris_G EXPERT8 months agoI've updated your post removing your sensitive informationShare"

Answer: "0Hello,Unfortunately we cannot provide support for certifications through re:Post.  The recommendation is to speak with support through https://support.aws.amazon.com/#/contacts/aws-training .CommentShareEXPERTChris_Ganswered 8 months agorePost-User-4781948 8 months agoThank you for the response.I have tried that multiple times since yesterday but unfortunately, there is no response. Could you please tell me if is there any other way to connect with the certification support team?ShareKazi muneeb 5 months agoI am facing a similar issue. How did you resolve your issue?Share"


Question: Why not multiple destinations on single pipeline

"HiI am using the Elemental Link to create live content (single pipeline). I would like to use this to feed our regular live ingest, which is using two redundant smooth streaming ingest servers. Why is there no way to send the same encoded output to multiple locations in single pipeline mode? I understand that the encoder will still be a single point of failure, but I would still like to use the redundancy we have for if one of our ingests go down. The only way I have found is to add a whole new smooth output group with identical settings, doubling the encode cost. Also, the same question can asked about setting up an archive output, I need to encode that one as well? Why not enable the re-use of one of the other encodes I already produce? This seems like an artificial way to force an extra encode and therefore extra cost.FollowComment"

Answer: "0Hello,If i am understanding your request correctly, you would like to publish identical output to two different destinations (Active Ingest and Backup Ingest) under single output group.AWS MediaLive shouldn’t need a second encode if two outputs have exact identical configurations, but that’s not a very common use case, as it doesn't provide end to end redundancy.I would encourage you to file a feature request through your account manager to get this to be implemented.Also with that said, MediaLive only charges for Input once and depending on your outputs you are charged per output destination.Thank you, Hope this answers your question.CommentShareawshussainanswered 3 years ago0Yes. As I said, I understand the encoder will still be a single point of failure. But the rest of our setup is still redundant in other parts. For example if one of my ingest servers go down. The single output forces me to use less redundancy than I have available.I will look into creating a feature request for this. I will reluctantly mark this as answered.CommentShareCarlLindqvistanswered 3 years ago"


Question: What are the ways to setup golden image pipeline using 3rd party tools ?

"Hi There,I want to setup a golden image pipeline in my project for distributing custom Amazon AMIs to other teams. The requirement is to use 3rd party tools (like terrfaorm, packer etc.) and not just depend on cloud native tools to setup the golden image pipeline. What are the ways to achieve that and are there any specific tailor made products available to this in cloud?NOTE: The pipeline has to be hosted in AWS (sorry for stating the obvious!)FollowCommentRodney Lester a year agoThe options are likely very large. Packer has an overview here: https://www.packer.io/guides/packer-on-cicdShare"

Answer: "0This is a broad question and would require a bit more specifics. You have called out one of the common options - using tools like Packer as part of a pipeline/automation or EC2 Image Builder. In most cases, you'd generate the AMI, share (or create it in multiple accounts) and manage an easy way for teams to find their latest AMI, for example using Parameter Store.CommentShareEXPERTRaphaelanswered a year ago"


Question: Using Selenium in AWS Cloud9 (Python 3.7)

"I am using AWS Cloud9 to build my Python Lambda (Python 3.7 runtime).I want to use Selenium in AWS Cloud9 to do headless browsing (i.e., without a GUI). AWS Cloud9 instances are Linux servers and thus require some additional setup.For Selenium, I believe I will need to install both a web browser and a driver. Because I am working on a headless environment, I probably need to use headless Chrome in combination with ChromeDriver.I am unsure of how to add selenium chromedriver for my Cloud9 instance and eventually my AWS Lambda. Any tips would be greatly appreciated.FollowCommentJerome VDL 6 days agoWhat are you using Selenium for and where do you want to use it? Is it in Cloud9 or within your Lambda function?Share"


Question: Using an ACM Certificate to Secure my Apps Running on EC2 Instances

"I have EC2 Servers running various applications. These servers are running LAMP using UBUNTU.  I understand that ACM certificates cannot be applied directly to the EC2 instance. However, it seems I could use CloudFront, an Application Load Balancer, or an Amazon API Gateway to provide an SSL secure interface to my applications. Which is the best solution? Do you have a procedure to accomplish this?I have tried both CloudFront and a Load Balancer, but I seem to get stuck at various points. My servers are in us-east-2 (ohio) but AWS insists that my certificate must be in us-east-1. My current attempt using CloudFront returns "Hmmm… can't reach this page" suggesting that the link between CloudFront and my EC2 instances isn't being made.I would appreciate any thoughts. While my specific configuration may be less common, it seems like the general issues should be farly common.FollowComment"

Answer: "1If your main requirement is to enable SSL, you can forgo the Cloudfront distribution entirely.Simple provision an application load balancer with an AWS-provided certificate within the same region as your EC2 instance then create a CNAME record point to the application load balancer's public domain.Creating an Application Load Balancer with a target group -> https://docs.aws.amazon.com/elasticloadbalancing/latest/application/create-application-load-balancer.htmlRequesting a certificate -> https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-request-public.htmlRouting Traffic to the load balancer -> https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/routing-to-elb-load-balancer.html  (This describes Route 53 but you can do a similar record in any domain provider)CommentShareBisinaanswered 6 days agoSSM 6 days agoThank you and very helpful. I had determined that it was likely that CloudFront was unnecessary, but I greatly appreciate your confirmation. I think I am getting hung up with specifying the target group and having the certificate in in us-east-1 when my EC2 instances are in us-east-2. I will take another crack at it.Unfortunately, my DNS is IONOS but I think I have this part figured out. However, will I need a certificate at the DNS for might sites to be deemed secure, or will the certificate on the load balancer suffice?ShareBisina 6 days agoYou do not need a certificate at the DNS provider. The certificate assigned to the load balancer will sure your connections to the EC2 instances.DNS only routes the traffic to the relevant endpoint and SSL termination happens at this endpoint in this instance it would be the application load balancer.ShareSSM 5 days agoThanks again. At this point I remain stuck on the requirement that my ACM Certificate must be in us-east-1 and my EC2 instances and load balancer are (or need to be) in us-east-2. If I create my load balancer in the us-east-2 (Ohio) I can't reach my certificate in us-east-1. If I create my load balancer in us-east-1 (Virginia), I can't reach the EC2 instances us-east-2. What am I missing?ShareBisina 5 days agoYou can simply request a new certificate in us-east-2 so all your resources would be in the same region. The us-east-1 requirement for an ACM certificate is only when you need to configure CloudFront.ShareSSM 4 days agoYes, thanks again for your response. I have successfully initiated a load balancer, attached my certificates, and attached my EC2 instances. My domain names now point to the AWS load balancer instance and this works properly in the sense that my web pages are served. However, my domains are still shown as not secure when I access them with http://example.com, example.com, or www.example .com (I am using example.com in place of my actual domain names). When I use https://example.com, I get a Web page with the message that "The connection for this site is not secure." My domain is being forwarded to the load balancer. In the https listener I am forwarding traffic to my EC2 instance. Do I need to set up authentication in the listner? If so how is the accomplished. There is a lot about OIDC but it is not clear what might be required. Is there another parameter that must be tweaked?ShareShow 2 more comments0A web application using CloudFront, ALB, and EC2 is a fairly common configuration.The ACM certificate to be set up for CloudFront must be issued in us-east-1 as described in this document.https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/cnames-and-https-requirements.html#https-requirements-aws-regionThe following documents may be helpful in troubleshooting CloudFront and ALB access.https://repost.aws/knowledge-center/custom-origin-cloudfront-failsCommentShareEXPERTRiku_Kobayashianswered 6 days ago"


Question: Credential must have exactly 5 slash-delimited elements

"I am getting this error randomly when using the sendEmail API call. It works most of the time, but there's 1 specific email type that goes out in the morning that gives this error every day. Then if I send the same email later in the day with no change to anything, it works fine. If my credentials were incorrectly set I would get this error every time, what would cause it only to happen some of the time and then work when I try it again? I'm using this API call exactly the same for every kind of email I send.FollowComment"


Question: Missing EC2 reboots from graphs

"When EC2 instances reboots I dont see gaps in graphs compared to Oracle I see these gaps, can you please help with answering this questionsFollowCommentAWS-SA a year agoCan you provide some more detail? What graphs are you referring to? (A screenshot might help too)My guess would be your aggregation is higher than the metric resolution, so the gap isn't evident.Share"


Question: Proper support for AWS::WAFRegional::RateBasedRule

"It seems impossible to attach AWS::WAFRegional::RateBasedRule to a AWS::WAFRegional::WebACL using Cloudformation. They may both be created using Cloudformation but then need to be attached to each other using the CLI or something similar (e.g. aws waf-regional update-web-acl ).Are there any plans to fix this situation anytime soon?(For details take a look at: https://stackoverflow.com/questions/56683755/sam-api-gateway-with-cloudformation-wafregional/)Edited by: mibollma on Jul 31, 2019 1:22 AMEdited by: mibollma on Jul 31, 2019 1:23 AMFollowComment"

Answer: 0WAFv2 seems to fix this issue: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-webacl.htmlCommentSharemibollmaanswered 3 years ago


Question: Will registering with SES break WorkMail?

"I have set up AWS WorkMail and am sending and receiving email, however I recently learnt about AWS SES and would like to set up that same domain with it.  In the SES wizard, there is the option to Create Identity using Identity Type Domain or Identity Type Email address.  If I use Identity Type Domain, will that conflict with my already existing WorkMail?FollowComment"

Answer: "1Hi,You can combine this with SES. You can set-up SES & use that without any worry of Work-mail. For your custom ticket system you can add a rule in the SES inbound rules section. This for the ticketing system email address to be a different action than WorkMail.For more information on the SES inbound rules: https://docs.aws.amazon.com/ses/latest/DeveloperGuide/receiving-email-receipt-rules.htmlPlease click accept answer if you feel the answer helped you.CommentShareSUPPORT ENGINEERAWS-User-Chiraganswered 9 months ago"


Question: AWS Media Convert removes silent audio which causes the output video to be severly out-of-sync with audio

"Hi re:Post community,We have been using AWS Elemental MediaConvert for about 3 years but we have encountered some very strange behaviour roughly from the 10th of December 22 onwards. MediaConvert started removing all of the silent audio from our audio inputs and it merges all the speech in the input together. This is causing major syncing issues between the video and the audio in the output file.The rough specification of our MediaConvert jobs is:video input: H.264 or VP8audio input: Matroska with OPUSoutput: MPEG-4 AVC (H.264)We started receiving customer reports on the 12th of December saying that their videos are out of sync. I found a job from 9 Dec that was OK and I cloned and reran the job today (19 Dec). The result from today was missing all the silent audio which was matching all the broken files reported by our customers. The two jobs are using exactly the same inputs and the same configuration.This makes me think something must've changed internally in MediaConvert that is causing these issues. Perhaps a new setting?Has anyone experienced the same?ThanksMichalFollowComment"


Question: Headless Chromium on aarch64 Amazon Linux 2

"Subject says it all: What are my options on getting headless Chromium installed onto Amazon Linux 2 aarch64?  If you can point me to directions, that'd be awesome.FollowComment"

Answer: "0Hi,Try this to install headless chrome on  Amazon Linux 2 for aarch64Installing the dependencies:sudo yum install -y glibc-devel fontconfig libX11 libXcomposite libXcursor libXdamage libXext libXi libXtst cups-libs libXScrnSaver libXrandr GConf2 alsa-lib atk gtk3 ipa-gothic-fonts liberation-fontsDownload the Chromium browser:wget https://commondatastorage.googleapis.com/chromium-browser-snapshots/Linux_Arm64/864410/chrome-linux.zipStart Chromium in headless mode:./chrome-linux/chrome --headless --disable-gpu --remote-debugging-port=9222 <<WebURL that you want to visit in headless mode>>This should allow to visit the URL in headless modeThanksArunCommentShareArunanswered 3 months agoKevin_F_La_Barre 3 months agoThank you, Arun.  Unfortunately the link you've provided does not work.Share"


Question: MWAA Installing python packages in wrong place

"I am running a MWAA 2.2.2 instance, and I have correctly put my requirements.txt file in the s3 bucket as instructed by the docs. When the instance spins up, the extra requirements are being installed in /usr/local/airflow/.local/bin instead of where they should be installed which is /usr/local/airflow/requirements/requirements.txt. (according to the docs here).2022-03-31T12:58:42.311-06:00Installing collected packages: fastavro2022-03-31T12:58:42.394-06:00   WARNING: The script fastavro is installed in '/usr/local/airflow/.local/bin' which is not on PATH.FollowComment"

Answer: "0Hello,Your packages are being installed in the right location. If you are referring to the line here:$ pip3 download -r "$AIRFLOW_HOME/dags/requirements.txt" -d "$AIRFLOW_HOME/plugins"From our documentation 1, this is where PIP will find your requirements.txt file. It then installs the packages you have listed in the requirements.txt file into the location you are seeing. This is the expected behavior.CommentShareAndrewanswered 2 months ago"


Question: Transcription not recognizing multiple speakers

"I am using AWS Transcribe to generate text transcriptions of audio files that usually have multiple speakers. I am using a python lambda with Boto3 Transcribe to start the transcription jobs.Two of the files that I have attempted to do this on in the past week have not had the multiple speakers recognized by AWS Transcribe. Both files had two speakers, but the text transcription coming out of AWS Transcribe only shows one speaker. When starting the transcription job, the MaxSpeakerLabels setting was set to 2.I can see how in one of the files, the voices might sound similar, but in the other file, the voices are very clearly different (female/male). Is there any other way to set the number of speakers on a transcription job to make sure that it is recognizing 2 speakers? Instead of just a max number?FollowComment"

Answer: "0Hi,In addition to MaxSpeakerLabels, have you also set the ShowSpeakerLabels parameter to true value?Please check the speaker diarization page and the complete set of StartTranscriptionJob parameters. To go faster with the troubleshooting you can also try to test your audio files from the Amazon Transcribe console. Hope this helps.CommentShareIoananswered a year agolfitzgibbons a year agoHi, yes the ShowSpeakerLabels parameter was set to true on these jobs. I have checked that the appropriate parameters are all set and this has worked on other files.Share"


Question: Hosted - Direct connect high Availability

"Hello,  below is our account setupHave two VPC in Mumbai region and have applied for two Direct - Hosted port connection.  I have **one ** direct connect gateway in my setup which will get associated with VGW of each VPC.How can I setup high availability of direct connect hosted port ?FollowComment"

Answer: "0Firstly, AWS DirectConnectGateway is inherently highly available construct, see below statement from the documentationA Direct Connect gateway is a globally available resource. You can create the Direct Connect gateway in any Region and access it from all other Regions. You can set up Direct Connect to bypass a parent Availability Zone and connect directly to the internet or through Direct Connect points-of-presenceAs for the DirectConnect, there are various types of Resiliency types; since you are using Hosted connection suggest getting in touch with the DX partner.If possible include box diagram of your connectivity in the post to better understand your topology.CommentShareEXPERTTushar_Janswered 7 months agorePost-User-0382502 7 months agoHi Tushar,Can we have two Private VIF each from "hosted direct connect" attached to DCGW  that can work in Active Passive?ShareTushar_J EXPERT7 months agoYes that should be possible, see these 2 links: https://docs.aws.amazon.com/whitepapers/latest/building-scalable-secure-multi-vpc-network-infrastructure/direct-connect.html and https://aws.amazon.com/premiumsupport/knowledge-center/direct-connect-private-transit-interface/Share"


Question: Is it possible to pass variables in a websocket $connect call?

"I have some existing code using Tomcat and Grizzly webservers, and they accept a path like the following:wss://<server>/forum/{subject}It doesn't seem possible to configure API Gateway v2 endpoints to have variables such as subject here.  Is that correct or am I missing something?I realize that I can work around this by sending messages, but it creates an inconsistency from the client perspective and there doesn't seem a good "reason" for it, except it hasn't been done yet.FollowComment"

Answer: "0Accepted AnswerCurrently WebSocket API does not support path variables on $connect. You can send query string or custom header (if the client is non-browser) though.CommentShareAWS-User-3921561answered 3 years ago0Thanks.I wasn't actually able to get the headers approach to work; I'm not sure why, but I only seem to see a subset of the actual headers in the WebSocket lambda.The query parameters approach worked fine, though.CommentShareGazzaanswered 3 years ago"


Question: Negsignal.SIGKILL in MWAA

I keep getting the error message Task exited with return code Negsignal.SIGKILL even on tasks not requiring much memory or compute on my airflow DAGs. I have already upgraded from small to medium. Want to know if there's some configuration I can change before upgrading to large or considering another option.FollowComment

Answer: "1This error typically occurs when the available resources are less than what is required by the task.  While you may not be explicitly using a lot of memory, it is possible that one of the Python libraries that you or your operator are using may be exceeding what is available in the AWS Fargate container used by MWAA.One option is to try refactoring your tasks to use different libraries or operators.  You may also want to test your DAGs using the MWAA local runner where you can more directly monitor what resources each task is requiring.Another option is to reduce the number of tasks per worker, as it is possible that the aggregation of tasks might be consuming excessive resources.  See celery.worker_autoscale setting in the MWAA DocumentationCommentShareJohn_Janswered 8 months ago"


Question: sts get-caller-identity doesn't work on Cloud9 instance deployed in Private Subnet

"Hi all, on a Cloud9 instance that is deployed in a Private subnet w/ a NAT gateway with SSM access, AWS CLI works except aws sts get-caller-identity . How is this even possible? I was checking AWS CLI connectivity using get-caller-identity but now it fails while other AWS CLI APIs work.admin:~/environment $ aws s3 ls s3://aws-cloudtrail-logs-*****                           PRE AWSLogs/admin:~/environment $ aws sts get-caller-identityAn error occurred (InvalidClientTokenId) when calling the GetCallerIdentity operation: The security token included in the request is invalidHow to reproduce:Create a private subnet in default VPCCreate a NAT gateway in a public subnet in default VPCCreate a route table allows engress connections to internetAssign the route table to the private subnet that just createdNavigate to Cloud9 console, create a Cloud9 instance on the Private subnet with SSM access (not direct access or SSH access)On the Cloud9 console, try aws cli with various commands.FollowComment"

Answer: "1Accepted AnswerHi! This is actually documented [1] expected behavior.**Important **Currently, if your environment’s EC2 instance is launched into a private subnet, you can't use AWS managed temporary credentials to allow the EC2 environment to access an AWS service on behalf of an AWS entity (an IAM user, for example).As Cloud9 uses EC2 under the hood you can disable temporary credentials and instead attach an instance profile / role [2].  This will allow you to perform the required actions.[1] https://docs.aws.amazon.com/cloud9/latest/user-guide/security-iam.html[2] https://docs.aws.amazon.com/cloud9/latest/user-guide/credentials.html#credentials-temporaryCommentShareJonathan_Ranswered a year agoEmir_A a year agoAre we sure that the documentation is up-to-date? Because when I navigate to see the deployed CFN template, here is the part of it:{  "Resources": {    "Instance": {      "Type": "AWS::EC2::Instance",      "Properties": {        "ImageId": "ami-09b4c0e8425734645",        "InstanceType": "t2.micro",        "IamInstanceProfile": "AWSCloud9SSMInstanceProfile",        "UserData": ".....So it attaches an instance profile.you can't use AWS managed temporary credentials to allow the EC2Then how can I run aws s3 ... APIs successfully? In this case, shouldn't I expect all AWS APIs not to work in a private subnet?ShareJonathan_R a year agoThis applies to certain calls such as STS, you are correct that the instance has a role already attached when you launch with the "Private subnet with SSM access (not direct access or SSH access)" option. However unless you disable temporary credentials in the IDE Cloud9 will still try to use them and not the role.Click on the 9 in the top left > Preferences > AWS Settings > Disable "AWS managed temporary credentials"That will force Cloud9 to use the role and the aws sts get-caller-identity will now work, however the default role won't have access to other AWS resources defined, so aws s3 ls for example will not work. You will either need to define your own role or attach an appropriate policy.Share0What region are you in? Could it be related to this: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_enable-regions.htmlCommentShareEXPERTkentradanswered a year agoEmir_A a year agoGood point, I'm in eu-west-1, so no issue with the activation.Share"


Question: AWS Route 53 - domain expiry - deletion

"Dear all,I have once registered under aws route 53 a domain ending with .de , but never needed it.aws has informed me - after one year - that the domain will expire and I have decided to do nothing and henceforth not prolong it and pay no further fees for it. So far so good.Now I have received a very detailed letter (including full name and address) form a German firm "DENIZ eG", who claims that, because the old hosting servicer no longer host the site  I must pay €58,-- to them for the next year for the domain, if I do not delete the domain until the next month.Questions:Has aws sold my domain and my contact details to this firm or is it a skimming firm?Can I simply ignore the payment request (I know that at some point in time then my unwanted domain gets free again for everyone) ?If not, how can I now still delete the domain?aws is telling me under Route 53: "Domain registration expired successful: Domain has been removed from your account upon expiration"Many thanks.FollowComment"

Answer: "0I have meanwhile solved the problem myself.At the first moment, when you receive a letter from DENIC eG, a company who you have never heard of before, it really seems like a spam/skimming letter.But indeed, if you do not terminate your .de domain, once it is still registered with aws route 53, the domain will go after expiry tohttps://www.denic.de/en/about-denic/the central register for .de domains and then things will get much more difficult and inside aws you cannot do anything any more.As a result it seems for me to be a much better procedure to terminate unneeded .de domains while still provide through the webhost.I think, it would be highly recommended if aws support would inform their clients about this procedure when a payment request for a .de domain expires and the user thinks, that the issue is then automatically resolved, when he does nothing, as it may be the case for other domains with different country codes!CommentSharehakimthedreamanswered 2 years ago"


Question: Being charged by elastic cloud computing (nat gateways and elastic IP)

"Hello, im a free tier user that was experimenting with ec2 instances 2 days ago, as expected i used some nat gateways and elastic IPs for my instances and was eventually charged for them (this was expected) i realized i was being charged the next morning and immediately released all my elastic ips, deleted the nat  gateways, ec2 instances, everything, i left the vpc and ec2 services 100% back on default.My problem is, during the day i kept getting charged by both nat  gateways and elastic ip services, even today (2 days later) the billing is increasing.Is this normal? will this stop after a few days because there's some kind of delay?By the way i experimented on 2 regions,  mainly because my closest region (sao paulo) doesnt support t2.micro instances so i had to move to us east, but regardless of this i still deleted everything from both regions, and both regions are charging me for their services.Last little detail, i know exactly what's being charged as a service, i checked all the billings and its 100% just  elastic IPs and NAT gateways from us east and sao paulo.FollowComment"

Answer: "0Accepted AnswerIf you're no longer being charged, however you were charged for hours after the termination of your AWS resources, then I suggest reaching out to billing to resolve this.Please note all AWS account owners have access to account and billing support free of charge.Monitoring your Free Tier usage https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/billing-get-answers.html#billing-support-FreeAWS Knowledge Center https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/billing-get-answers.html#billing-support-KCCommentShareMatt_Eanswered 25 days agoNicolas_ue 25 days agoI'll be contacting billing to resolve this case then, i see no other way since every service im being charged for has been deleted for around 2 days now, thanks for everyhing.Share0You shouldn't be charged since you have released the elastic IPs, removed your EC2, and your NAT gateway. Make sure the EBS attached to the EBS was terminated too.Refer to the following knowledge articles.https://repost.aws/knowledge-center/ec2-billing-terminatedhttps://repost.aws/knowledge-center/elastic-ip-chargesCommentShareMatt_Eanswered 25 days agoNicolas_ue 25 days agoI never used EBS for anything, i still checked just in case and there's nothing created in either of the 2 regions I'm being charged. Right now both the VPC and EC2 modules are on default settings (meaning the only things that are left there are the ones that are created by default)The billing hasn't increased since i posted this, but it did increase overnight, and since last night i didn't change anything, everything was already deleted since yesterday morning.Share"


Question: puppeteer on Lambda

"I want to use puppeteer on Lambda to convert HTML to PDF.With the chrome-aws-lambda module or the puppeteer module, I'm trying to run (sam local invoke) a function that calls puppeteer.launch(), but the function returns an error.If anyone is running puppeteer on Lambda, please let me know how you configured it!CDK Stackconst pdfExportFunction = new lambda.NodejsFunction(this, 'ExportPDF', {  runtime: Runtime.NODEJS_14_X,  entry: 'lambda/export-pdf/index.ts',  timeout: Duration.seconds(10),  memorySize: 1024,  // https://github.com/shelfio/chrome-aws-lambda-layer  layers: [    LayerVersion.fromLayerVersionArn(this, 'layer:chrome-aws-lambda', 'arn:aws:lambda:ap-northeast-1:764866452798:layer:chrome-aws-lambda:31')  ]})Lambda Function Code (lambda/export-pdf/index.ts)const chromium = require('@sparticuz/chrome-aws-lambda')export const handler = async () => {  try {    const browser = await chromium.puppeteer.launch()  } catch (error) {    // Error: Cannot find module '/var/task/puppeteer/lib/Browser'    console.log(error)  }}I've tried several different ways to write imports, but each one gives me different errors when call puppeteer.launch().// Error: Cannot find module '/var/task/puppeteer/lib/Browser'const chromium = require('chrome-aws-lambda')// Error: _projectRoot is undefined. Unable to create a BrowserFetcher.const puppeteer = require('puppeteer')// The argument 'filename' must be a file URL object, file URL string, or absolute path string. Received undefinedimport * as puppeteer from 'puppeteer'FollowCommentOmid Eidivandi 10 months agoThis is not actually  a problem with aws lambda but there are others having same problem with  chrome-aws-lambdaare you using the lambda layers for that ?https://github.com/shelfio/chrome-aws-lambda-layerShare"


Question: MediaTailor SEGMENT_DURATION_MISMATCH

"Hi,I receive alerts for SEGMENT_DURATION_MISMATCH when adding a single program (Hls-Source with ABR 1080/720/576) to my Test-Channel.How can it be that there are mismatch alerts, when only a single program is provided?An example alert is displayed in following:PROGRAM_ALERTThe program test contained in this channel has the following alert: SEGMENT_DURATION_MISMATCH: MediaTailor encountered mismatched segment duration values across manifests in Segment-Duration-Test schedule. The mismatch is in source-group-2 between test's manifest https://amogo-public.s3.sa-east-1.amazonaws.com/output/test/samsung_channel/Por_um_Caixao_Cheio_de_Dolares_1080p_cbr_audio/full_movie/hls/hlsvideo_1080.m3u8 and test's manifest https://amogo-public.s3.sa-east-1.amazonaws.com/output/test/samsung_channel/Por_um_Caixao_Cheio_de_Dolares_1080p_cbr_audio/full_movie/hls/hlsvideo_1080.m3u8FollowComment"

Answer: "1Can you please share the HLS main manifest for the asset? Does the HLS asset contain WebVTT captions.Ok I was able to find your main manifest and if you curl the audio rendition manifest the number of audio segments do not match video segment.For channel assembly # of segments of all individual variants must match and also their duration must be within 300ms of each other. This is required for Channel Assembly to be able to mark segment boundaries for ad insertion. In this asset, there are 51 video segments and only 50 audio segments due to longer audio segments.Was this HLS asset created using MediaConvert? If yes, can you check the following, in HLS group setting: Make sure the field Minimum final segment length (sec) is set to 1second and under advanced setting of your video outputs (at top), the audio duration is set to match video duration.CommentShareDev_Kanswered a year ago0Hi Dev_K,Was this HLS asset created using MediaConvert? If yes, can you check the following, in HLS group setting:Yes, we did use MediaConvert. I will check for your recommended settings and let you know about the results.One more question regarding MediaConvert. Our Stream is supposed to run on SamsungTV in Brazil. They noted the following issueVariant manifest has absolute URLs which we don’t support. Please have it changed to reflect relative URLs insteadIs it possible to allow relative URLs via MediaConvert?CommentShareAWS-User-2672844answered a year ago0Hi Dev_K,I created a Hls-Output (link to main manifest) with the mentioned settings:AudioDuration: "Match video duration"Minimum final segment length (sec) : "1"Unfortunately the Alert  SEGMENT_DURATION_MISMATCH still exists when adding this source as a program to my MediaTailor Channel. Any more ideas?Kind regards,RivaCommentShareAWS-User-2672844answered a year ago"


Question: AWS GLUE - JOB ERROR

"Hello,I'm stuck with this error and I can't find anything help full.I'm trying to migrate data between s3 to Redshift,Note: i crawled both and both tables are in my glue databasesbut when i'm running a job there is an errorAn error occurred while calling o131.pyWriteDynamicFrame. Exception thrown in awaitResult:FollowCommentGonzalo Herreros 3 months agoSounds the job gives up waiting for Redshift to load the temporary csv files from s3, please check the full stack trace and check in Redshift what happened with the "COPY" command, did it finish or error? how long it took?Share"

Answer: "0Adding to Gonzalo's comment. You need more information from the logs to identify the exact issue. This error is happening when the write happens - your statement probably uses this method- glueContext.write_dynamic_frame.from_optionsHow can I find the exact error message?Navigate to the AWS Glue Console and select the job that failed.Click on the "Runs" tab and click on error logs. This would take you into /aws-glue/jobs/error with a filter on job_idIf you see multiple logs, click on the shortest log - that corresponds to the driver, while others are logs from each executor (based on number of executors)Toward the bottom of this driver log, you will find the descriptive error along with line numbers etc. I typically find it using glueexceptionanalysis.GlueExceptionAnalysisListener or `glue.ProcessLauncher'Some possible reasons for this error include:Invalid output configuration: The output configuration provided to the glueContext.write_dynamic_frame.from_options method might be invalid.For example, the destination S3 bucket might not exist or the IAM role used for the job might not have the required permissions to write to the bucket.Malformed data: The data being written to the destination might be malformed or incompatible with the expected data format.For example, the table is defined as JSON with 10 fields, but you have field names that dont matchNetwork issues:For example, if the Glue job is running in a VPC, there might be issues with the VPC configuration or routing that prevent the data from being written.CommentShareAnanth Tirumanuranswered 3 months ago"


Question: "Video on Demand with MediaPackage, S3 and ffmpeg"

"I successfully converted a .mp4 video into streamable chunks of .ts files, with the master .m3u8 and index file using ffmpeg. Command is:ffmpeg -i foreword-video.mp4 -hls_list_size 0 -f hls -master_pl_name master.m3u8 video.m3u8The master.m3u8 file contains this:#EXTM3U#EXT-X-VERSION:3#EXT-X-STREAM-INF:BANDWIDTH=75900,RESOLUTION=1280x720,CODECS="avc1.64001f,mp4a.40.2"video.m3u8After uploading everything to S3 I went to MediaPackage and tried ingesting the master.m3u8 file as a new asset, using a packaging configuration that has stream selection enabled from 0 to 2147483647. All went well and I copied the new URL from MediaPackage.I assumed that once I paste the generated URL from MediaPackage in a HLS video player that the video quality will be possible to change. However, I can only watch the video in the same quality as is uploaded on S3. Is there an option that I'm missing in MediaPackage that will enable changing the video resolution in the player? (1080p, 720p, 360p etc...)Or will I have to use ffmpeg and create the video files with different resolutions, upload them all to S3, and ingest the asset on MediaPackage with packaging configurations that match the video resolutions?FollowComment"

Answer: "1Hi, Thanks for asking the question in the forum.  If you require multiple streams rates the source content must be  encoded via  Elemental Live, MediaLive or MediaConvert first.   Once you have a source with an ABR stack, that will then be ingested into MediaPackage, where it will be available to customers is various output formats - HLS, Dash, MSS Etc.  MediaPackage will not re-encode the content, and provide alternative bitrates etc.ThanksRichardCommentShareAWS-User-2823639answered 4 years ago1Hi Richard,thank you very much for this information. I assumed that might be the case, but wanted to make sure before starting any implementation.Regards,MarkoCommentSharecilimanswered 4 years ago"


Question: IAM role for S3 encrypted upload only

"Hi All,I have an SFTP server that receives data files on a daily basis.I would like to copy these files to S3 and encrypt them for perpetual storage.My preference is that the IAM role granted to the SFTP server only has permissions to encrypt, not decrypt the files.From the documentation, I should be able to achieve this by specifying a key on upload to S3 and ensuring the IAM role for the SFTP server has only the encrypt permission.My IAM policies below:Firstly, S3 allow all (Just for testing):{    "Version": "2012-10-17",    "Statement": [        {            "Effect": "Allow",            "Action": "s3:*",            "Resource": "*"        }    ]}KMS Policy:{    "Version": "2012-10-17",    "Statement": [        {            "Sid": "VisualEditor0",            "Effect": "Allow",            "Action": "kms:Encrypt",            "Resource": "arn:aws:kms:ap-southeast-2:<account-id>:key/<key-id> "        }    ]}When I try and copy a file to S3 usingaws s3 cp test.txt s3://<folderName>/test.txt --sse aws:kms --sse-kms-key-id <key-id>I get an error message:An error occurred (AccessDenied) when calling the PutObject operation: Access DeniedIf I manually go into the KMS policy and allow the IAM user permissions, then the IAM user can encrypt & decrypt the file which is not what I want.Has anyone managed to achieve this?FollowComment"

Answer: "0For anyone else who wants to achieve this.  I was missing a single permission "kms:GenerateDataKey".  Full policy below.{    "Version": "2012-10-17",    "Statement": [        {            "Sid": "VisualEditor0",            "Effect": "Allow",            "Action": [                "kms:Encrypt",                "kms:GenerateDataKey","s3:PutObject",                "s3:ListBucket",                "s3:PutObjectAcl"            ],            "Resource": [                "arn:aws:s3:::<BucketName>",                "arn:aws:s3:::<BucketName>/*",                "arn:aws:kms:<Region>:<AccountID>:key/<KeyID>"            ]        },        {            "Sid": "VisualEditor1",            "Effect": "Allow",            "Action": "s3:HeadBucket",            "Resource": "*"        }    ]}CommentShareWilliamGebersanswered 4 years ago"


Question: AWS Cloudwatch Canary Oauth API Monitoring.

"I am trying to setup a canary on our API.Our API requires a Oauth2 token.Keys and secrets to generate this token are kept in secrets manager.I used a Python script to run system tests, that uses the 'Oauth2lib' to generate this token, and this system works fine.I tried to use the same technique in a custom canary script, but it refuses to find the library, just get module not found, "ModuleNotFoundError: No module named 'oauthlib'"I've built this locally, all the packages are at root, the python file in in the 'python' direction (not consistent with other lambdas I might add).I built and uploaded to s3, created a canary and added the file via s3.After resolving the handler entry point, it finds the Python script fine, but refuses to find the library.I found some instructions here,  https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch_Synthetics_Canaries_WritingCanary_Python.html but don't feel they are complete, at least not for me.So can you tell me how I get this working please?ThanksLeona.FollowComment"

Answer: "0TL;DR put everything in /pythonIn case anyone comes across this post, the documentation is a little poor in that it says only the .py code needs to be in /python.  This is not true, as you need to put all the required libraries in that directory too, then they'll get picked up, else they will not be found.CommentShareLeonaanswered a year ago"


Question: Elastic Search Policy Update Fails

"We're getting the following error when trying to save an existing policy.  Only a minor change (date) was made in this policy (IDs/IPs removed) that is causing an error.  We were originally trying to update the IP set.Any thoughts? Any insight would be appreciated.UpdateElasticsearchDomainConfig: {"message":"Error setting policy: [{"Version":"2012-10-18","Statement":[{"Sid":"AllowKubernetes","Effect":"Allow","Principal":{"AWS":"arn:aws:iam::REMOVED:role/REMOVED"},"Action":"es:","Resource":"arn:aws:es:us-east-1:REMOVED:domain/REMOVED/"},{"Sid":"","Effect":"Allow","Principal":{"AWS":""},"Action":"es:","Resource":"arn:aws:es:us-east-1:REMOVED:domain/REMOVED/*","Condition":{"IpAddress":{"aws:SourceIp":[REMOVED]}}}]}]"}Edited by: bd3 on Jan 25, 2019 3:56 PMFollowComment"

Answer: 0Ended up rebuilding the policy and it worked. So...CommentSharebd3answered 4 years ago0What do you mean by rebuilding ? I have the same problem.Thank'sCommentShareqmauretanswered 2 years ago


Question: Greengrass v2 # ThingGroup # Flexibility for Tenant use case

Need help with following use case. I am working on use case where I need tenant bifurcation on device. For e.g  I have Tenant1 and Tenant 2. In Tenant 1 I have sell 3 devices and in Tenant 2 sold 5 devices.To manager tenant I need to create logical group which I can achive through Thing Group.**Tenant_Thing_Group1**- Thing_1- Thing_2- Thing_3**Tenant_Thing_Group2**- Thing_4- Thing_5- Thing_6- Thing_7- Thing_8Now I am going to use AWS greengrass v2 for components deployment and all. I have taken greengrass setup in my yocto OS setup recipe. But as per my experience whenever we trigger greengraa v2 command to create deployment. It would createindividual deployment for each device. Instead of that I want to use the single deployment per tenant so I can deploy changes in single go to all the devices.Could please guide me of provide some steps to address this requirement ??FollowComment

Answer: "0Hi,Greengrass supports deploying to both Things and Thing Groups  as targets.Given your setup, to deploy specific components to all the Tenant 1 devices you can create a deployment targeting Tenant_Thing_Group1. The same applies to devices for Tenant 2 using Tenant_Thing_Group2 as a target.If you need to deploy components which are common to all devices, you can create another Thing Groups, let's call it  for example AllDevices, and create a deployment with the common components targeting that thing group.Keep in mind that component configurations specified in a deployment applies to all targeted devices. If you need to deploy the same component but have device specific configurations you can use device shadows to hold the device specific configurations.Cheers,MassimilianoCommentShareEXPERTMassimilianoAWSanswered 6 months agorePost-User-7846458 6 months ago@Massimiliano,Thanks for the response. I got that there is provision to select thing group and choose target deployment. Now as per my understanding greengrass first required to be installed on device. And for installation we are following the steps mentioned on following page.https://docs.aws.amazon.com/greengrass/v2/developerguide/quick-installation.htmlNow as per the steps if we trigger the following command it would create deployment too on cloud. Which would individual deployment per device which actually we don't want.sudo -E java -Droot="/greengrass/v2" -Dlog.store=FILE -jar ./GreengrassInstaller/lib/Greengrass.jar --aws-region region --thing-name MyGreengrassCore --thing-group-name MyGreengrassCoreGroup --thing-policy-name GreengrassV2IoTThingPolicy --tes-role-name GreengrassV2TokenExchangeRole --tes-role-alias-name GreengrassCoreTokenExchangeRoleAlias --component-default-user ggc_user:ggc_group --provision true --setup-system-service trueIs there a way we can first create only things and map those things to thing group. Second, we would have one greengrass deployment for single device which would like our QA environment. Third, the moment we got green signal from QA team we would use this target deployment and push all those components deployed on QA device to entire thing group.Share"


Question: Is it possible to invoke a Lambda function in a different AWS account from Secrets Manager rotation?

"We are trying to make our Lambda function a centralize kind of thing which can be invoked by a secrets manager from different accounts. So Lambda app can be used across multiple accounts for the automatic rotation of secrets.Basically in this image, we want to select a lambda function that is deployed to a different account.We have tried the steps below to achieve our goal but none of these have worked so far:Grant access across different AWS accounts using IAM roles and assume role.Add a resource based policy into function appNote: Secrets manager and Lambda Function are in the same region.FollowComment"

Answer: "0Perhaps, but it would be difficult from the management console.I think we need to set up our own Lambda with IAM configured to rotate cross-accounts.It would be a good idea not to enable auto-rotation on that screen, but to let Lambda in a separate account do all the rotation.CommentShareEXPERTRiku_Kobayashianswered a month ago"


Question: Cost Anomaly Detection in Cloudformation

"I'm trying to set up a Cost Anomaly Detection monitor + subscription in Cloudformation.Creating this via the AWS Console is very easy and user friendly.I set up a monitor with Linked Account, with a subscription that has a threshold of $100 with daily alert frequency, sending alerts to an e-mail.Trying to do the above was not as clear when following the documentation and examples athttps://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ce-anomalymonitor.htmlThe documentation does not explain what "dimension" or "type" means in this context, and those terms are not used in the AWS Console.Resources:  AnomalyMonitor100Dollars:    Type: AWS::CE::AnomalyMonitor    Properties:      MonitorName: AnomalyDetected_is_greater_than_100_dollars      MonitorType: CUSTOM      MonitorSpecification: !Sub '        {          "Dimensions" : {            "Key" : "LINKED_ACCOUNT",            "Values" : [ "${AWS::AccountId}" ]          }        }'  AnomalySubscription:    Type: AWS::CE::AnomalySubscription    Properties:      SubscriptionName: AnomalyDetected_is_greater_than_100_dollars      Threshold: 100      Frequency: DAILY      MonitorArnList:        - !Ref AnomalyMonitor100Dollars      Subscribers:        [          {            "Type": "EMAIL",            "Address": "xx@example.com"          }        ]Using the above, Cloudformation reports the error"Linked accounts can only create AWS Services monitor (Service: CostExplorer, Status Code: 400..."Guessing wildly, adding 'MonitorDimension: SERVICE' to the monitor gives the error"MonitorDimension must be null for Custom monitor (Service: CostExplorer, Status Code: 400..."Guessing more wildly, trying to change to 'MonitorType: DIMENSIONAL' gives the error"Expression must be null for Dimensional monitor (Service: CostExplorer, Status Code: 400..."No idea what expression this refers to.I'm sure this is logical once you know the implementation, but I have no idea how to do this the correct way.What am I missing?FollowComment"

Answer: "1Accepted AnswerWhen you create a MonitorDimension of SERVICE, this is the "default" monitor that watches each service. You don't want to specify anything other than what is below.Resources:   AnomalyServiceMonitor:    Type: 'AWS::CE::AnomalyMonitor'    Properties:      MonitorName: 'MonitorName'      MonitorType: 'DIMENSIONAL'      MonitorDimension: 'SERVICE'In contrast, the other three types of monitors for Linked Accounts, Cost Categories, or Cost Allocation tags would be a CUSTOM type, not a DIMENSIONAL type. The MonitorDimension would not apply for these.Resources:   CustomAnomalyMonitorWithLinkedAccount:    Type: 'AWS::CE::AnomalyMonitor'    Properties:      MonitorName: "MonitorName"      MonitorType: "CUSTOM"      MonitorSpecification: '            {              "Dimensions" : {                "Key" : "LINKED_ACCOUNT",                "Values" : [ "123456789012", "123456789013" ]              }            }'These three require a MonitorSpecification to denote the tags, account numbers, Cost Categories, or whatever combination of dimensions you are trying to monitor. There are examples of each on the page you linked toward the bottom.CommentShareGeno_AWSanswered a year agoPhilip a year agoThanks for the quick reply, setting just MonitorType: DIMENSIONAL and MonitorDimension: SERVICE worked.But where in the documentation is the description what MonitorType: DIMENSIONAL means - how should I have known that was the right answer?Share"


Question: How to create and interaction between google drive and aws s3?

"I'm trying to set up a connection a Google Drive folder and S3 bucket, but I'm not sure where to start. I've already created a sort of "Frankenstein process", but it's easy to use only by me and sharing it to my co-workers it's a pain.I have a script that generates a plain text file and saves it into a drive folder. And to upload, I've installed Drive file stream to save it in my mac, then all I did was create a script using Python3, with the boto3 library, to upload the text file into different s3 buckets depending on the file name.I was thinking that I can create a lambda to process the file into the s3 buckets but I cannot resolve how to create the connection between drive and s3. I would appreciate if someone could give me a piece of advise on how to start with this.FollowComment"

Answer: 0Accepted Answerif you just simply want to connect google drive and aws s3 there is one service name zapier which provide different type of integration without line of codehttps://zapier.com/apps/amazon-s3/integrations/google-driveFor more details you can check this link outCommentShareharshmanvaranswered 4 years ago


Question: How do you analyze Autopilot results in Amazon SageMaker Studio?

"I launched an Autopilot job in SageMaker Studio, and now I'm trying to figure out how to compare autoML iterations. Is there a way to list them, see their metrics, and see the configuration of the best job?FollowComment"

Answer: "0Accepted AnswerWatch the Choose and deploy the best model video tutorial in the SageMaker developer guide. The video shows how to use SageMaker Autopilot to visualize and compare model metrics.For more SageMaker Autopilot tutorials, see Videos: Use Autopilot to automate and explore the machine learning process.CommentShareAWS-User-6182958answered 3 years ago"


Question: What is the number in log file names of elastic beanstalk on s3 means?

"I set to save log files of my elastic beanstalk on S3 through Cloudwatch. As I checked the saved log files, some numbers come after "access.log" but don't know what it means.Is there any way to set log file name as {saved-time}-access.log? Or can I know what this number means so that I can schedule a daily job parsing the day's log file?FollowComment"

Answer: "1It's  the epoch time which you can convert to human readable format and use in the parse scripts as required.eg 1668074461 converts to Thursday November 10, 2022 19:01:01 ( for UTC+09:00 )CommentShareSydanswered 7 months agohyunie 7 months agoClear! ThanksShare"


Question: Malformed XML when setting bucket lifecycle with Go SDK

"I have been trying to use the Go SDK to put a lifecycle configuration for a bucket but I keep getting Malformed XML errors.This is the relevant section of the code:rule := types.LifecycleRule{Status: types.ExpirationStatusDisabled,ID:     aws.String("testid2"),NoncurrentVersionExpiration: &types.NoncurrentVersionExpiration{NewerNoncurrentVersions: 4,NoncurrentDays:          1,},Filter: filter,}bucketConfig := types.BucketLifecycleConfiguration{Rules: []types.LifecycleRule{rule},}putBucketConfigInput := &s3.PutBucketLifecycleConfigurationInput{Bucket:                 aws.String("beer-sample-default-default-test5"),LifecycleConfiguration: &bucketConfig,}bucketLifecycleOutput, err := client.PutBucketLifecycleConfiguration(aws.BackgroundContext(),putBucketConfigInput, func(*s3.Options) {})Would love to get some idea on where I'm going wrong.Thanks!FollowCommentJack-Angel-369 a year agoHiDid you try this ?NoncurrentDays: aws.Int64(int64(1))Just to be sure .. and in 2 times : first step the NoncurrentDays then the NewerNoncurrentVersions++Share"

Answer: "0Hello,We need some more details on this use case. Therefore, could you please provide the following information:SDK Version being used.Complete Error messageIf there are any further code level debug logs, that would help us too.Further, you can also raise an issue directly at the Go SDK github community: https://github.com/aws/aws-sdk-go/issuesLooking forward for your response.Thank you.CommentShareSUPPORT ENGINEERAjinkya B-AWSanswered a year ago"


Question: What is the maximum email sending rate when using Amazon SES out of the sandbox?

"Hi,In the amazon documentation i read that the maximum sending rate is one Email per second when your amazon SES account is still in Sandbox mode. When moved out of the sandbox your daily quote increases. But the documentation says nothing about the sending rate. Does the sending rate remain one email per second when you're out of the sandbox? If not, what will the new sending rate be?Thank youFollowComment"

Answer: "0Accepted AnswerYou should be able to locate the sending rate on the SES console, on the dashboard. When I opted out of sandbox I received a quota of 14 emails per second, for my requested scenario, but yours might be different.In any case you can request a quota increase by using the "Service Quotas" feature to better adapt to your requirements, you will need to explain why you are requesting the increase and they will get back to you with the revised quota, if applicable.CommentSharenissyangelanswered a year ago"


Question: Setting up SSO Application and getting Entity ID too long

Working with a vendor to set up SSO and their technical team indicated the following:The entity ID is too long for our system to handle.Does AWS allow for virtual identity IDs to be created?  Some identity providers allow for one ID to be presented to SPs that maps to the original ID withing the IDP.Is there a way to support this?FollowComment

Answer: "3Accepted AnswerAWS Single Sign-On (SSO) does not natively support using a virtual or alternate Entity ID that maps to the original Entity ID within the Identity Provider (IdP).as an alternativeIf AWS SSO's Entity ID length is causing an issue, you can consider using an external IdP (like Okta, Microsoft Azure AD, or ADFS) that supports shorter Entity IDs or virtual/alternate Entity IDs. You can then integrate the external IdP with the vendor's service and have more control over the Entity ID value.CommentShareEXPERTsdtslmnanswered 2 months ago"


Question: Using SageMaker SDK to deploy a open source xgboost model locally

"I have a locally trained model that I am trying to debug locally on docker container before deploying / creating endpoint on SageMaker. I am following the documentation that AWS customer service provided, however, I am running into issue with Creating Endpoint Config.Here's the code snippet:from sagemaker.xgboost import XGBoost, XGBoostModelfrom sagemaker.session import Sessionsm_client = boto3.client(                         "sagemaker",                         aws_access_key_id='xxxxxx',                         aws_secret_access_key='xxxxxx'                        )sagemaker_session = Session(sagemaker_client = sm_client)xgb_inference_model = XGBoostModel(                                   model_data=model_url,                                   role=role,                                   entry_point="inference.py",                                   framework_version="0.90-2",                                   sagemaker_session = sagemaker_session     )print('Deploying endpoint in local mode')predictor = xgb_inference_model.deploy(                                       initial_instance_count = 1,                                       instance_type = "local")Traceback:20 print('Deploying endpoint in local mode')21 predictor = xgb_inference_model.deploy(22                                        initial_instance_count = 1,ClientError: An error occurred (ValidationException) when calling the CreateEndpointConfig operation: 1 validation error detected: Value 'local' at 'productionVariants.1.member.instanceType' failed to satisfy constraint: Member must satisfy enum value set: [ml.r5d.12xlarge, ml.r5.12xlarge, ml.p2.xlarge, ml.m5.4xlarge, ml.m4.16xlarge, ml.r5d.24xlarge,Here's the documentation link: https://github.com/aws-samples/amazon-sagemaker-local-mode/blob/main/xgboost_script_mode_local_training_and_serving/xgboost_script_mode_local_training_and_serving.pyFollowComment"

Answer: "4Can you try using from sagemaker.local import LocalSession instead of sagemaker.session import Session as specified in the documentation?https://sagemaker.readthedocs.io/en/stable/overview.html#local-modeCommentSharepkanswered a year agoaws-user-2268062 a year agoYeah, that was the issue. Actually, setting sagemaker_session = None worked. More on this issue here: https://github.com/aws/sagemaker-python-sdk/issues/929Share"


Question: Cannot create new "Graphics with Windows 10" WorkSpace

"I'm trying to create a new WorkSpace in the Frankfurt region with Graphics.When all is done, I receive an error message:An Error Has OccurredIf you continue to experience an issue contact the AWS Support Team on the community forums and via AWS Premium Support at: https://eu-central-1.console.aws.amazon.com/support/homeI'm confused since I'm doing the same thing with other bundles and it all works just fine. What are we doing wrong? Any help is appreciated how to bugfix this - if even possible for us.Edited by: wolke7 on May 9, 2019 5:02 AMFollowComment"

Answer: "0Accepted AnswerHi wolke7,You probably need a limit increase. Please create a support ticket and they will be able to help.Thanks,HassanCommentShareHassanTanswered 4 years ago0Hey,Are you still facing any issues launching graphics with Windows 10 WorkSpaces?If yes, could you please raise a support case and we would like to investigate it further. Generally, in majority of the cases. this is due to the limits which can be increased by submitting a limit increase request with us from your AWS support console.CommentShareAWS-User-9559230answered 4 years ago"


Question: Workmail can not recieve email from specific sender

"Hello,Workmail can not recieve emails from one specific domain, despite Workmail is able to send emails to that domain. It is not spam folder issue. Nothing appears even under the eventlog. It is like, the email has never sent to us.I tried to disable spam and virus filter under SES portal, and nothing changed.As we check sender's mail server, it says the email has accepted from Workmail. Also, sender is able to send emails to the O365 or Gmail, they have only this problem with this Workmail mailboxes.Do you have any suggestion to troubleshoot? I could not find any other interface to check whats going on.FollowComment"

Answer: "0Hi,I'm sorry to hear you're experiencing problems receiving mail from one domain. Disabling spam or virus scanning for WorkMail is not possible, but only if  a message contains a virus, message delivery is cancelled.If you cannot see the message in the WorkMail message logs it means the message was not delivered to WorkMail. You can check the inbound rules in the SES console to see if it has any rules for that domain.Kind regards,RobinCommentShareMODERATORrobinkawsanswered a year agoAWS-User-0061433 a year agoThank you for your kind response. I have already check SES console inbound rules. There is also a place there for disabling virus and spam scanning.We have found the problem is caused by Sender's misconfiguration on WHM Cpanel.Cpanel doesnt detect that we are using remote mail server in auto mode. So after configuring it manually, it resolved.Do you know, is there any place for taking packet captures for the traffic that coming through Workmail servers? This is out of problem. Problem is resolved. :)Share"


Question: DynamoDB Query Request Limit Not working?

"Hey guys working on a project. I'm able to query my dynamoDB index but it seems the limit parameters in my request isn't working. Any help?var request = new QueryRequest{TableName = "exampleTable",IndexName = "exampleIndex",Limit = 3,ExclusiveStartKey = lastKeyEvaluated,ExpressionAttributeValues = new Dictionary<string, AttributeValue> {{ ":val", new AttributeValue { S = "Yes" } },{ ":v_1", new AttributeValue { N = "0" }}},KeyConditionExpression = "Active= :val and Amount > :v_1",ProjectionExpression = "Active, Amount",ScanIndexForward = false};  I have 6 items on my table. (Prototyping bigger project) One of which has a negative "Amount". So that one is filtered out. However I'm still returned with 5 responses. It seems something is wrong with my limit parameters. Any help?  Thanks everyone.FollowComment"

Answer: "0Okay cool, so basically the issue was not with the structure of my request but the actual processing of my queryasync. Whereas I was printing the info before the final key was evaluated now I called my print method after the final key was evaluated.Client.QueryAsync(request, (result) => {        if (result.Exception == null)          {               //previous spot for the foreach loop and the print method.                            lastKeyEvaluated = result.Response.LastEvaluatedKey;              if (lastKeyEvaluated != null && lastKeyEvaluated.Count != 0)              {                  foreach (Dictionary<string, AttributeValue> item                  in result.Response.Items)                  {                      PrintItem(item);                  }                  Query(lastKeyEvaluated);              }              else              {                  Debug.Log("last one");              }          }          else          {              Debug.Log(result.Exception);          }      });CommentSharexxxdolorxxxanswered 2 years ago"


Question: Is MFA necessary

"Our Company use a MFA that name is WinAuth. And I find it is very troublesome when I login into the AWS. I thought is enough safe cause our company using a VPN to connect internet. In this case, is MFA necessary?FollowComment"

Answer: "0MFA is definitely a good idea.It sounds like the VPN you're using is between your client device (e.g., laptop) and your company's infrastructure, with traffic then routed out to the Internet. That's helpful to secure access to your corporate network but won't be doing a great deal to secure your AWS credentials.Whether MFA is necessary or not depends on how valuable what you're protecting is. If it's a root AWS account for example, compromise of your account could result in loss of any services provided through AWS, leakage of any data held and tampering with that data. Whoever has access could also run up a huge bill. If it's a user with very limited access then damage would be limited. If in any doubt, it's better to be safe than sorry.If MFA is troublesome, maybe consider a different provider? You might also want to consider federating access from your company's identity provider to enable single sign on. That would make log on easier and faster and come with governance benefits for your company too.CommentShareedeastwoodanswered a year agoAWS-User-8895916 a year agoThank you for your answer. I just wonder if your internet(VPN) is danger, will MFA be useful too.Shareedeastwood a year agoThe risk that MFA protects against is someone else finding your username and password and using them. Your credentials will be encrypted in transit, but there are other ways in which they could be compromised, for example you might be victim to a phishing attack or perhaps you re-use passwords and they're exposed from another site. A VPN does nothing to protect against those circumstances but MFA does.Share"


Question: Website hosting directory?

"We are trying to find a free website hosting service for a non-commercial use with an existing domain name.Does 'AWS' provide such a service, and is it possible to use such as FileZilla to upload index files ?We have not had luck getting an answer from AWS chats, so wondering here if anyone has an answer.Please advise.Thank you.FollowComment"

Answer: "0AWS provides free tier for 1 year which allows you to host a decent website for free for 1 year. Even after that cost for static website is so minimal that is almost none.I would recommend not to worry about filezilla and instead go for S3 + Cloudfront based website.You can check below tutorial which also shows possible cost: https://aws.amazon.com/getting-started/hands-on/host-static-website/CommentSharehameedullahanswered a year agoAKM a year agoThank you for the info!  Any idea what the approximate AWS cost would be after 1yr, and when we look up 'Cloudfront vs Filezilla' it appears Cloudfront is also not free ?Sharekentrad EXPERTa year agoYou should be able to the AWS Pricing Calculator to estimate this: https://calculator.aws/#/estimateAlso, the free tier has been updated: https://aws.amazon.com/blogs/aws/aws-free-tier-data-transfer-expansion-100-gb-from-regions-and-1-tb-from-amazon-cloudfront-per-month/Share"