Question: Ec2 instance goes unresponsive - instance unreachablity error - status check failed

"Hi, my Ec2 instance goes unresponsive - instance unreachablity error - status check failed as a result my EC2 free tier instance has turned unresponsive twice in last 48 hours. I don't see any obvious error in System logs. My instance is running Hestia CP with mail server from same instance as web. Have noticed CPU usage beyond 90+% immediately after rebooting instance. Could this be a reason for unreachablity of Instance? How to fix it?FollowComment"

Answer: "0The instance status check fails when the instance load is high, such as memory depletion, as described in this document.https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/monitoring-system-instance-status-check.html#types-of-instance-status-checksSo the reason why we can no longer connect to your instance is because of the heavy load.Possible countermeasures include using a larger instance size than now or selecting an instance type that is appropriate for the application workload.https://aws.amazon.com/ec2/instance-types/?nc1=h_lsAlso, if you are able to deploy load balancing workloads, consider deploying an ELB in front of the instances to distribute the load among multiple instances.CommentShareEXPERTRiku_Kobayashianswered a month ago02/2 checks for system and hardware faults.  In either in systems faults stop and reboot the instance.  This should replace the faulty EBS image with a new image of an instance.    For hardware fault perform a termination of the EC2 and then launch a new EC2 instance.CommentShareWyCliffeanswered a month ago0Use CloudWatch the monitor the CPU and Memory Disk and Network Metrics Data points in the Log stream Group.  Stop the instance and change the instance type accordingly.CommentShareWyCliffeanswered a month ago"


Question: How to retrieve an EC2 Instance with a lost pem file that also have a Self-Managed MongoDB

"I have an ec2 instance where I installed a managed mongodb instance with millions of records. Overtime, I misplaced the pem file. I am looking for a way to retrieve the pem file or how to migrate the mongodb database on the instance to another self managed mongodb instance on ec2.FollowComment"

Answer: "1Steps for connecting to an EBS-backed instance with a different key pairStep 1: Create a new key pairStep 2: Get information about the original instance and its root volumeStep 3: Stop the original instanceStep 4: Launch a temporary instanceStep 5: Detach the root volume from the original instance and attach it to the temporary instanceStep 6: Add the new public key to authorized_keys on the original volume mounted to the temporary instanceStep 7: Unmount and detach the original volume from the temporary instance, and reattach it to the original instanceStep 8: Connect to the original instance using the new key pairStep 9: Clean uphttps://docs.aws.amazon.com/AWSEC2/latest/UserGuide/TroubleshootingInstancesConnecting.html#replacing-lost-key-pairCommentSharerePost-User-1505400answered 5 months ago0Other solution could be to start using the Systems Manager Session Manager to connect to your instance:https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/session-manager.htmlCommentSharesazecisanswered 5 months ago"


Question: HIVE_UNKNOWN_ERROR: Error creating an instance of com.facebook.presto.hive.lakeformation.CachingLakeFormationCredentialsProvider

"After running a simple select query in Athena, I get an error - HIVE_UNKNOWN_ERROR: Error creating an instance of com.facebook.presto.hive.lakeformation.CachingLakeFormationCredentialsProvider. Athena query is supposed to run agains a LF database within the same S3 bucket (data source and query destination are split into two folders inside the bucket). Any idea what could be the issue?FollowComment"

Answer: "1Hi,could you confirm that your database , table or columns names respect the limitations indicated in the documentation?The only acceptable characters for database names, table names, and column names are lowercase letters, numbers, and the underscore character.I have seen the error you mention in case this is not followed. as also mentioned in this stackoverflow question.If you do not have this situation, could you, please, share some additional details on your table?hope this helps,FabrizioCommentShareEXPERTFabrizio@AWSanswered a year ago"


Question: .NET Core IoT and IotData in the same app - how do I configure this?

"I'm trying to write a simple .NET core web app that makes some calls to interact with AWS IoT. I wanted to be able to search or list things and get their current shadow. I believe I need to use the IoT service to search and list, and IotData to get thing shadows. I'm running into a problem however where I can't seem to find a configuration that works for both.If I don't have ServiceURL specified in the Appconfig.Development.json, IotData throwsAmazonClientException: No RegionEndpoint or ServiceURL configuredIf I provide ServiceURL with the endpoint listed in our AWS IoT dashboard "ENDPOINT.iot.REGION.amazonaws.com", IotData calls begin to work but the IoT service calls fail with the exceptionResourceNotFoundException: Not FoundIf I remove all of the IotData code and add the "Region" field to Appconfig.Development.json with our region, the IoT calls begin to work.If I uncomment the IotData calls with the "Region" field, I getAmazonClientException: The RegionEndpoint property is not applicable for AmazonIotDataClient and should not be set.In the past I've used Boto3 in Python and didn't have to configure any of this this way; the region was specified in ~/.aws/config and never had to provide a Service URL, and I've written scripts that used both services, so I'm very confused as to what the issue is.I'm also certain I have the correct permissions with the keys I'm using as I'm able to perform all of these operations from the AWS CLI. Does anyone have any recommendations on how to configure this so that both services work?For reference, this is a simple example of what I'm trying to do: https://gist.github.com/nathan-miller-actigraph/6cd18c99ee2ee4ca05fb5f74598287ae (the actual application is a .NET Core 2.1 SPA).FollowComment"

Answer: "0I figured it out. For anyone who runs into this same problem, you can create a second section in your appsettings.json:    "AwsIotDataConfig": {        "Profile": "default",        "ServiceURL": "https://data.iot.us-east-1.amazonaws.com/"    },    "AwsConfig": {        "Profile": "default",        "Region": "us-east-1"    }then in your Startup.cs, when you call GetAWSOptions, you can pass in the name of the config section:            var awsGenericOptions = Configuration.GetAWSOptions("AwsConfig");            services.AddDefaultAWSOptions(awsGenericOptions);            var awsIotDataOptions = Configuration.GetAWSOptions("AwsIotDataConfig");and when you add the IotData service, specify that it should use the IotData specific options:            services.AddAWSService<IAmazonIoT>();            services.AddAWSService<IAmazonIotData>(awsIotDataOptions);CommentSharenmiller-actigraphanswered 4 years ago"


Question: Copying earlier version of object in S3 bucket to Redshift with COPY command

"I am able to use the COPY command in Redshift to copy over the most recent version of the object in my S3 bucket, but I am wondering if it's possible to do this but specify a version ID with it. This way a specific version of the object in the bucket can be copied over instead of the default. If anyone knows how to do this or can let me know if it is even possible it would be greatly appreciated.FollowComment"

Answer: "0Hello,I see you are trying to COPY a specific version of an object in an S3 bucket using Redshift. While you are not able to specify a certain version of an object to copy, you can work-around this by restoring the object to the version you want to copy, and then copy that object. The only option with Redshift is to copy the most up-to-date version, but users can restore versions using the AWS Management console, and then copy that version. More information can be found here:https://docs.aws.amazon.com/redshift/latest/dg/r_COPY.htmlhttps://docs.aws.amazon.com/redshift/latest/dg/copy-parameters-data-source-s3.htmlCommentShareIsaac_Panswered 9 months ago"


Question: Cognito verification code emails no longer being sent

"Has anybody had an issue with forgotten passwords and Conito not sending the verification code via email to users?As far as I am aware there has been no code changes or AWS service changes in this area for quite some time but emails are no longer sent.We are using amplify in the client front end to trigger this and I can see it hitting the AWS services and returning a 200.Code being called:await Auth.forgotPassword(        email,      );Usually this would send an email with a code in there which the user could then use to change their password.Account recovery it set to email only, so it isn't going anywhere else. SMS is also disabled.General emails from AWS are being sent from our account with no problems. Also, cognito is sending other emails out correctly, such as temporary passwords.FollowCommentledge 9 months agohmm, using the default cognito auth and forgotten password something weird is happening. When clicking forgot password I'm getting a message saying an email has been sent to m***@h*** when my email is m***@c*** same is happening for other users with the masked email address being obviously wrong. I think something might be badly broken.Share"

Answer: 0It looks like it is working again now. I didn't change anything so it must have been fixed by AWS.CommentSharerePost-User-2670271answered 9 months ago


Question: Elastic IP in Middle East (UAE) Region Generating Bahrain IP

I allocated an Elastic IP address in Middle East (UAE) Region(3.28.231.227) but IP generated is belongs to Bahrain regionsFollowComment

Answer: "1Hey,as you can validate on our ip-ranges.json  file, this address is indeed allocated to UAE (me-central-1).    {      "ip_prefix": "3.28.0.0/15",      "region": "me-central-1",      "service": "EC2",      "network_border_group": "me-central-1"    },I suspect the website you are using to check doesn't have an up to date geolocation database. I have spot checked two major geolocation provider and they are reporting your IP correctly in UAE.CommentShareGiorgio@AWSanswered 2 months agoEXPERTTushar_Jreviewed 2 months ago"


Question: Lumberyard install error 0x80070666

"This may not be the correct thread, but it's the closest one I could find. On initial install I get this error. I have attached a screenshot of the error and the associated logs from the install. This was my first attempt at installing Lumberyard on this system. I am unable to determine the actual cause as there is not a previous install for me to remove.REMOVEDUPLOADlumberyard-v11000-20170929231759.txtREMOVEDUPLOADlumberyard-install-error.pngFollow"

Answer: "0The error refers to Visual Studio 2015 redist (x64). For some reason the Lumberyard setup tries to install it again and errors out. I uninstalled it and the setup works fine now.SharerePost-User-7051380answered 6 years ago0Yikes — apologies for the troubles @REDACTEDUSERSharerePost-User-5738838answered 6 years ago0eu siquer tenho o visual studio instalado, e mesmo asim estou tendo este problemaSharerePost-User-6885294answered 3 years ago"


Question: AWS BATCH GPU Startup latency

"HiSo I've been struggling to reduce my AWS batch startup time, it takes 6-7min to start the job and the job itself takes a few seconds, is this normal/expected? (and I don't think it's a provisioning problem because after job is posted when I go to ec2 the instance is initialising)Resources I'm using:Image-Type: "ECS_AL2_NVIDIA"ECR: Docker image is 4GBEFS: ML Model is saved here and mounted on the instanceInstance: G4dnEnvironment: SpotThings I've tried:Building my own ami, reducing the volume size, but the time stays the sameSaving the model on the ami, still no improvementsWhen checking the ec2 instance it seems to be initialised and ready to go within 3 min, so I don't understand what takes so long, is it the download of the docker image? *edit: I've made my d0cker image to be 10 GB and this doesn't affect startup time at all...How long does it usually take for a GPU batch job to start?Any suggestions would be appreciated.FollowComment"


Question: SES is not sending Email to outlook and Ymail

"Hi,Recently I am facing issue with SES, Which is not sending Emails to Outlook, Hotmail, Yahoo Mail, but issue not exists in other Email providers. Any one facing the issue or cause. Kindly share your suggestionsFollowComment"

Answer: "0Please check and confirm your SPF and DKIM settings. I faced similar issue with AWS SES with office365, once I fixed the DKIM it started working properly.For more information on AWS SES DKIM and SPF:Authenticating Email with SPF in Amazon SESAuthenticating Email with DKIM in Amazon SESSetting Up Easy DKIM for a DomainAlso please check following:DNS Blackhole List (DNSBL) FAQsTroubleshooting DKIM problems in Amazon SESCommentSharehameedullahanswered a year ago0I am passing a similar issue, I will share here in case it can help.I found that my emails sent from SES to outlook/hotmail were always sent to spam/junk folder, the main reason was that I am using configure set tracking open and clicks, where the email body has the awstrack.me link.I did a test removing the configure set tracking open and clicks, then, when the email doesn't have the awstrack.me, the emails were sent to the other tab in hotmail, not send to spam/junk folder.So, it is not a conclusion yet, but seems that emails that are sent with the track (awstrack.me), they are tagged as spam from outlook/hotmail.In my case, I disabled the track open/click config set when the destination is outlook/hotmail.CommentShareRobanswered a year ago"


Question: Virtual hosting an S3 bucket using Cloudfront + SSL

"I would like to virtual host an S3 bucket so that users can interact withhttps://mybucket.mydomain.com instead of mybucket.s3.amazonaws.com. Users would be interacting with the bucket using their own credentials via code or the s3 cli.To do this, I created a CloudFront distribution with:an origin of mybucket.s3.amazonaws.commybucket.mydomain.com and mydomain.com as CNAMEsan SSL certificate for mybucket.mydomain.com and *.mydomain.com and mydomain.com (created in ACM)However, when I try to interact with the bucket with the s3 cli, like soaws s3api list-objects --endpoint-url https://mydomain.com --bucket mybucketI get the following error:SSL validation failed for https://mybucket.mydomain.com/?encoding-type=url [SSL: SSLV3_ALERT_HANDSHAKE_FAILURE] sslv3 alert handshake failure (_ssl.c:600)Similarly when I try to put an object:aws s3api put-object --endpoint-url https://mydomain.com --bucket mybucket --key myfile.txtSSL validation failed for https://mybucket.mydomain.com/myfile.txt [SSL: SSLV3_ALERT_HANDSHAKE_FAILURE] sslv3 alert handshake failure (_ssl.c:600)However, when I visit https://mybucket.mydomain.com in a web browser, I do not get an SSL error. Why do I get this SSL error when I use the S3 cli, but not a web browser?Note, I have the following in my ~/.aws/config to tell S3 to use the virtual addressing styles3 =  addressing_style = virtualEdited by: autumnbugs on Mar 21, 2019 1:51 PMFollowComment"

Answer: "0Still having this issue, though when I try my request from a different box (the first was on a mac) I get a different failure:aws s3api put-object --endpoint-url https://mydomain.com --bucket mybucket --key myfile.txtAn error occurred (SignatureDoesNotMatch) when calling the PutObject operation: The request signature we calculated does not match the signature you provided. Check your key and signing method.The same request works from both boxes when I use the standard s3 endpoint, so I still think this must be an issue with my cloudfront configuration.aws s3api put-object --endpoint-url https://s3.amazonaws.com --bucket mybucket --key myfile.txtCommentShareautumnbugsanswered 4 years ago0The issue was: The client signs the request using the custom domain; but then when S3 gets the request from CloudFront it expects the request to be signed for s3.amazonaws.com, not the custom domain.Resolution: Depending on the client you use, you might be able to set the custom endpoint after the request (and signature) is created. See https://github.com/aws/aws-sdk-go/issues/826#issuecomment-247651352 for an example.Unfortunately, this is not possible with the Java SDK. Our solution will be to either write a wrapper around S3's Java Rest SDK, or:Skip CloudFront altogether and use an nginx proxy instead with a configuration that includes something like:proxy_set_header    Host mybucket.s3.amazonaws.comCommentShareautumnbugsanswered 4 years ago"


Question: SageMaker PyTorch Hosting 1.6 works only with artifacts named model.pth ?

"Hi, does SageMaker PyTorch Hosting 1.6 works only with artifacts named model.pth ?I'm trying this sample with 1.6 and the deployment fails with errorFileNotFoundError: [Errno 2] No such file or directory: '/opt/ml/model/model.pth'the documentation doesn't mention such a constraintFollowComment"

Answer: "1Accepted AnswerYes - from the thread on this open issue: https://github.com/aws/sagemaker-pytorch-inference-toolkit/issues/86In the issue thread they note that the new Pytorch 1.6 image requires that the model filename is model.pth, linking to the relevant code where this default is set: https://github.com/aws/sagemaker-pytorch-inference-toolkit/blob/9a6869e/src/sagemaker_pytorch_serving_container/torchserve.py#L121Also noted in the thread is that users have successfully adapted their code to use torchserve in Pytorch 1.6 by changing it to save their model in a file named model.pth. Once renamed, they were still able to use custom inference scripts to load their model by defining a custom model_fn: https://github.com/data-science-on-aws/workshop/blob/374329adf15bf1810bfc4a9e73501ee5d3b4e0f5/09_deploy/wip/pytorch/code/inference.pyCommentShareAWS-User-4621140answered 2 years agorePost-User-3588575 4 months agoBut here, they are assuming it is model.pt. Can you please recheck it...Share"


Question: I want to use the model monitor in the sagemaker pipeline to get the results of statistics.json and constraints.json

"Summary.I would like to know what the CSV format is for getting aws sagemaker model quality metrics (regression metrics).ContentsThe model monitor in sagemaker is used to evaluate models (own models, batch processing).At this time, I believe that using the AWS mechanism, I can get statistics.json and constraints.json as a result.In the model monitor mechanism, there are three parameters for "problem_type" in the following script.I think there are three parameters for "regression", "BinaryClassification" and "MulticlassClassification", but I don't know what CSV format to send the content in for "regression", and I'm not sure if AWS will handle it appropriately. Question.Incidentally, in the case of classification, 'BinaryClassification' and 'MulticlassClassification' results from the creation of appropriate CSVs.The CSV in the case of classification is created below.probability,prediction,label[0.99,0.88], 0, 0[0.34,0.77], 1, 0・・・I don't know what kind of CSV content I should send to get the 'Regression' results.Here are some excerpts from pipeline.py and the CSV content we are currently testing.Here are some excerpts from 'pipeline.py    model_quality_check_config = ModelQualityCheckConfig(        baseline_dataset=step_transform.properties.TransformOutput.S3OutputPath,        dataset_format=DatasetFormat.csv(header=False),        output_s3_uri= f"sagemaker/monitor/",        problem_type='Regression',        inference_attribute= "_c1",        ground_truth_attribute= "_c0"    )    model_quality_check_step = QualityCheckStep(        name="ModelQualityCheckStep",        depends_on = ["lambdacsvtransform"],        skip_check=skip_check_model_quality,        register_new_baseline=register_new_baseline_model_quality,        quality_check_config=model_quality_check_config,        check_job_config=check_job_config,        supplied_baseline_statistics=supplied_baseline_statistics_model_quality,        supplied_baseline_constraints=supplied_baseline_constraints_model_quality,        model_package_group_name="group"    )CSV（Regression）"_c0", "_c0"0.88, 0.990.66, 0.87・・・FollowComment"

Answer: "0Hello,When you say "you do not know what CSV content I should send to get the 'Regression' results", are you referring to the ContentType for your dataset?Firstly, the line below means that the features/column names in the training dataset are not provided as the first row:dataset_format=DatasetFormat.csv(header=False)Please see the link [1] for more information on the above parameter. Basically, your dataset content is a comma-separated value file but for this particular scenario header = False as there is no column names provided for the training dataset.I believe your overall question has to do with MetricsSource [2] object that would be defined as part of the ModelMetrics module, as in what will be the ContentType value used for your use case.When it comes to MetricsSource object, if you consider the example  "SageMaker Pipelines integration with Model Monitor and Clarify" from https://github.com/aws/amazon-sagemaker-examples/blob/main/sagemaker-pipelines/tabular/model-monitor-clarify-pipelines/sagemaker-pipeline-model-monitor-clarify-steps.ipynb, you will see that there is code that looks like the following:    model_statistics=MetricsSource(        s3_uri=model_quality_check_step.properties.CalculatedBaselineStatistics,        content_type="application/json",    ),    model_constraints=MetricsSource(        s3_uri=model_quality_check_step.properties.CalculatedBaselineConstraints,        content_type="application/json",    ),As you can see from the above that content_type is "application/json"The data you shared below suggest that the Pipeline has been deployed as an endpoint [3], as there is a deploy module that is supported.But from running the example  "SageMaker Pipelines integration with Model Monitor and Clarify", I was able to get the filess3://S3-BUCKET-NAME-HERE/some-prefix/modelqualitycheckstep/statistics.json s3://S3-BUCKET-NAME-HERE/some-prefix/modelqualitycheckstep/constraints.jsonwhere statistics.json contains the following:{  "version": 0,  "dataset": {    "item_count": 627,    "evaluation_time": "2022-10-23T10:49:40.638Z"  },  "regression_metrics": {    "mae": {      "value": 1.4107242246563925,      "standard_deviation": 0.025615074935394368    },    "mse": {      "value": 3.9022604063585753,      "standard_deviation": 0.23140761659194883    },    "rmse": {      "value": 1.9754139835382798,      "standard_deviation": 0.05901487899216817    },    "r2": {      "value": 0.40614751710172436,      "standard_deviation": 0.03121704707239033    }  }}From the above, one can see that if the MetricsSource Object is declared then the metrics published for a regression problem type.Hope I answered the question properly, if not please reach out to AWS Support[4] (SageMaker), explain your issue/use case in detail and share relevant AWS resource names (plus CloudWatch logs).References:[1] https://sagemaker.readthedocs.io/en/stable/api/inference/model_monitor.html#sagemaker.model_monitor.dataset_format.DatasetFormat[2] https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_MetricsSource.html[3] https://sagemaker.readthedocs.io/en/stable/api/inference/pipeline.html[4] https://docs.aws.amazon.com/awssupport/latest/user/case-management.html#creating-a-support-caseCommentShareSUPPORT ENGINEERSibonelo_Nanswered 7 months ago"


Question: RDS postgres hot_standby_feedback not preventing recovery conflict

"I have an RDS (non-Aurora) postgres primary (multi-AZ) with associated readonly replica. We were seeing queries canceled on the readonly due to recovery conflicts, so I changed hot_standby_feedback=1 in the parameter group for the readonly replica. This resolved some conflicts, meaning we are seeing fewer of them, but it hasn't resolved them all. Today I saw this in the readonly replica's log:ERROR:  canceling statement due to conflict with recoveryDETAIL:  User query might have needed to see row versions that must be removed.According to this document I found in the knowledge center (https://aws.amazon.com/premiumsupport/knowledge-center/rds-postgresql-error-conflict-recovery/), the solution for this is to set hot_standby_feedback=1 (true). This is also backed by postgres documentation, which states this:"Remedial possibilities exist if the number of standby-query cancellations is found to be unacceptable. The first option is to set the parameter hot_standby_feedback, which prevents VACUUM from removing recently-dead rows and so cleanup conflicts do not occur. If you do this, you should note that this will delay cleanup of dead rows on the primary, which may result in undesirable table bloat. However, the cleanup situation will be no worse than if the standby queries were running directly on the primary server, and you are still getting the benefit of off-loading execution onto the standby. If standby servers connect and disconnect frequently, you might want to make adjustments to handle the period when hot_standby_feedback feedback is not being provided. For example, consider increasing max_standby_archive_delay so that queries are not rapidly canceled by conflicts in WAL archive files during disconnected periods. You should also consider increasing max_standby_streaming_delay to avoid rapid cancellations by newly-arrived streaming WAL entries after reconnection." (see https://www.postgresql.org/docs/12/hot-standby.html#HOT-STANDBY-CONFLICT)I thought that by setting hot_standby_feedback=1 that we should not encounter anymore conflicts due to "User query might have needed to see row versions that must be removed". Why are we still seeing them?Has anyone else encountered this problem? Any thoughts on how to correct it?FollowComment"

Answer: "0You contacted us because you observed the following error in the replica of your database even after hot_standby_feedback set to1 and you wanted to know how to fix this.ERROR: canceling statement due to conflict with recovery DETAIL: User query might have needed to see row versions that must be removed.Cause of the IssueUsually the cause of this error comes when some queries running in Read replica trying to fetch the rows, and these rows are already updated/deleted in primary database OR Vacuuming in the primary already cleaned up the old version of these rows. In this scenario since the old version of rows was already cleaned up then the same goes to Read replica through WAL replication, So finally replica faces the conflict with recovery.Below two settings control the behavior of a standby server that is to receive replication data.A) max_standby_archive_delay (integer): Sets the maximum delay before canceling queries when a hot standby server is processing archived WAL data. max_standby_archive_delay applies when WAL data is being read from WAL archiveWhen Hot Standby is active, this parameter determines how long the standby server should wait before canceling standby queries that conflict with about-to-be-applied WAL entries. max_standby_archive_delay applies when WAL data is being read from WAL archive (and is therefore not current). The default is 30 seconds.https://postgresqlco.nf/doc/en/param/max_standby_archive_delay/B) max_standby_streaming_delay (integer): Sets the maximum delay before canceling queries when a hot standby server is processing streamed WAL data. max_standby_streaming_delay applies when WAL data is being received via streaming replication.When Hot Standby is active, this parameter determines how long the standby server should wait before canceling standby queries that conflict with about-to-be-applied WAL entries. max_standby_streaming_delay applies when WAL data is being received via streaming replication. In case of Postgres 11 version it is 14 seconds and its modifiable to a maximum value of 30 sec only.https://postgresqlco.nf/doc/en/param/max_standby_streaming_delay/SuggestionsUnfortunately, as we don't have access to your data or databases due to AWS security and privacy policies, I would like to provide you with the following recommendations to resolve this issue and you may also consider to engage a DBA/Application team to investigate further.If there are continuous long running queries present in reader instance, this workload pattern eventually causes the reader transactions to terminate due to conflict with recovery. Please make sure that the activities that require a highly restricted level of locking run when there is less activity on the reader instance. An example for this would be DROP and ALTER statements executing on the writer instance. To maintain data consistency, Postgres could cancel the transactions running against these relations on your reader instance. Please do not DROP tables or tablespaces on your writer while there are long running queries or open cursors running against those tables on your reader.If you have long running queries on your reader instance, add an application side delay on queries running on the writer so they don't coincide with your reader queries. For example, if a long running transaction T1 is already running on your reader, running a transaction T2 on the writer at the same time, will lead to the transactions on the reader getting cancelled since they would result in dirty or phantom reads based on your isolation level. In such a case, your transaction T2 on the writer should be delayed until the transaction T1 on the reader completes. This will ensure consistent reads and that there are no lock conflicts.Set the following parameters to add the delays or test different values to get the optimal setting for your environment. As always, it is important to try these settings in a test environment before promoting it to production.-max_standby_archive_delay=-1 <----(A value of -1 allows the standby to wait forever for conflicting queries to complete.This can introduce application performance issues. Try different values, max value is 2147483647milliseconds)-max_standby_streaming_delay=-1 <----((A value of -1 allows the standby to wait forever for conflicting queries to complete.This can introduce application performance issues. Try different values, max value is 2147483647milliseconds)On a database that has many active transactions, the likelihood of hitting the error increases. Tune your application to operate in batches if possible. If you tune your application workload to operate in batches, tables/resources in your writer are not held with locks for a long time while there are queries running on the same tables/resources on your replica.I would like to suggest you to refer below AWS documents for reference.[+] https://aws.amazon.com/blogs/database/best-practices-for-amazon-rds-for-postgresql-cross-region-read-replicas/CommentSharePravin Desaianswered 4 months ago0If we implement the max_* parameters as described above, should we leave hot_standby_feedback=1 or set that back to hot_standby_feedback=0? I'm clear not on what hot_standby_feedback is accomplishing.CommentShareKrisOanswered 4 months ago"


Question: What is the best way to install/uninstall an exe on Greengrass Windows Core Devices

"I have an use case to install an application(.exe) on a group of green grass core devices which are typically windows boxes. This application has to be upgraded on all core devices whenever a new release happens. We might uninstall or reinstall this application multiple times for whatsoever reasons.I am exploring these two ways to perform this task.Greengrass Deployments - Create a component with .exe file as artifact.  recipe.json is given below. And deploy this component targeting a thing group.{"RecipeFormatVersion": "2020-01-25","ComponentName": "COMPONENT_NAME","ComponentVersion": "COMPONENT_VERSION","ComponentDescription": "This device health component collects device health and send it to IoT Core","ComponentPublisher": "COMPONENT_AUTHOR","Manifests": [{"Platform": {"os": "windows"},"Lifecycle": {"Run": "start /wait {artifacts:decompressedPath}/com.mx.emarOffline/eMAROfflineInstall.exe /VERYSILENT"},"Artifacts": [{"URI": "s3://BUCKET_NAME/COMPONENT_NAME/COMPONENT_VERSION/com.mx.emarOffline.zip","Unarchive": "ZIP"}]}]}AWS Systems Manager - Install Systems Manager component on windows core device and manages this application installation/uninstallation.Please suggest which approach is best for my use case. Is there any other way other than above two approaches?FollowComment"

Answer: "0Hello,From the description of the component, it seems that the executable is used to collect health data to be sent to AWS via IoT Core. If you run this inside Greengrass, you can take advantage of the Greengrass IPC to send the messages to IOT Core via the Greengrass MQTT connection, or use the credential provider (TES) to send the data via the REST API.SSM only provides you with the possibility to run scripts remotely, but you are still responsible of transferring the executable to the instance coping with possible interruptions, etc, execute it and also provide the credentials so that it can connect to the AWS IoT Core backend.ThanksCommentSharerePost-User-7792115answered 2 months ago"


Question: DMS events not triggering Event Bridge Rule

"I created an event bridge rule which should trigger on any DMS event.  Currently the event bridge rule sends the message to SNS which sends an email to my personal email address.  within DMS I reboot a DMS instance which produces two events:*dms-instancereplication-instanceJanuary 24, 2022, 11:45:33 (UTC-05:00)Replication application restarteddms-instancereplication-instanceJanuary 24, 2022, 11:45:20 (UTC-05:00)Replication application shutdown*however, I don't see these two events triggering my Event Bridge Rule.  Not sure if i am doing something wrong.In Event Bridge rule, the event pattern is:{"source": ["aws.dms"]}and the single target is:Name:  Default_CloudWatch_Alarms_TopicType: SNS topic (sends email)FollowComment"

Answer: "1Check if you have Events permission (events.amazonaws.com) in the Access Policy of your SNS topic. Also, enable CloudTrail logging in your account (create a CloudTrail trail for management events).CommentSharejoahnaanswered a year agoJeff Palmiero a year agoThanks Joahna. Enabling cloud trail logging allowed the events to come through.ShareRHESUSethDAPPRADARweb 7 months agoIAM.AWS - 2T DB2 OHIO EASTShare"


Question: How to fix a terminated RDS Postgres replicas

"We came across a weird scenario in which the replication for one of our RDS Postgres replicas is terminated per below screenshot. We could not find any root cause for this issue and we were not able to fix the issue yet either.Here is only log that might be related which we could find within our RDS read replica logs:000000010002F94800000019 archive /rdsdbdata/log/restore/pg-wal-archive.12472857.* is not yet downloaded, exiting restore script for now2022-12-11 09:59:59 UTC::@:[29307]:LOG: started streaming WAL from primary at 2F948/64000000 on timeline 12022-12-11 09:59:59 UTC::@:[29307]:FATAL: could not receive data from WAL stream: ERROR: requested WAL segment 000000010002F94800000019 has already been removedrecovering 00000002.historyI was wondering if anyone came across this issue and know how to fix the replication?Thanks in advance!MehdiFollowComment"

Answer: "0Hi, If you are using postgres 9+, it is possible bugs on the wal in replication processes. Try to use updated version one: https://www.postgresql.org/about/news/postgresql-123-118-1013-9618-and-9522-released-2038/I saw that there are one success read-replica, so for the terminated one please re-instantiated again new read replica. Also for best practices, you can do:Setup read-replica multi-az for more high availabilitySetup operational excellence, by subscribe into rds envets (such as db instance event for read - replica), so if read-replica crash you can trigger a workflow to initiate new one. https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Events.Messages.html#USER_Events.Messages.clusterThanks.CommentSharerePost-User-7694765answered 5 months ago"


Question: Adding a static IP to ELB

"Hello all,Currently I am using application ELB. I want to add a static IP to my ELB as I wish to point a top level domain of a website (example.com), whoes domain registrar is not Route53 (& cannot be) to my ELB. As far as I know, this won't work without a static IP as top level domain can't be pointed to by a CNAME. From documentation, I understand that adding a static IP is only possible on Network ELB. I have a few queries regarding this.Recently SSL termination has been enabled on Network ELB and it does not support Http to Https redirects so is there a workarount to enable Http to Https redirection using a Network ELB?If I enable Http to Https redirection on webserver (apache), it doesn't work as SSL certificate terminates at the Network ELB?Is it possible to disable SSL termination on Network ELB so that I can use a Network ELB in front of a Application ELB?Does Network ELB also handle sticky sessions?Does anyone know if there are there any near future plans to handle these issues?FollowComment"

Answer: "0Hi,Based on your requirements I believe you will benefit from this solution of placing an NLB in front of an ALB - https://aws.amazon.com/blogs/networking-and-content-delivery/using-static-ip-addresses-for-application-load-balancers/It wouldn't be possible to offload SSL on the NLB and also have HTTP to HTTPS redirection on the webserver as the webserver would see HTTP traffic in this case and cause an infinite loop. Normally we handle this by redirecting based on the X-Forwarded-Proto header but that is unavailable on NLB.The other option is to have an NLB with TCP:80 and TLS:443 listeners forwarding to TCP:80 and TLS:443 target groups respectively and handle SSL and redirection on the instance. You can use a self-signed certificate on the instance and and ACM certificate (which the client sees) on the NLB.NLB works at layer 4 (TCP/TLS) and does not see Layer 7 (HTTP) data so sticky sessions would not work. New TCP connections from the client will be load balanced based on the NLBs routing algorithm.CommentShareAWS-User-7252247answered 4 years ago0Hi,I was using the solution suggested below but with a tweaks like adding X-Forwarded-Proto header and handling redirects on webserver.https://aws.amazon.com/blogs/networking-and-content-delivery/using-static-ip-addresses-for-application-load-balancers/However, now I tried the second option of having an NLB with TCP:80 and TLS:443 listeners forwarding to TCP:80 and TLS:443 target groups pointing to a internal ALB's ip and using the lambda function to update the NLB -> ALB bindings. This works like a charm and now SSL offloading is taken care at the ALB.CommentShareatewatiaanswered 4 years ago"


Question: How do I change my Elastic Beanstalk instance type?

"I created an Elastic Beanstalk environment using EB CLI. It made a "t2.micro" instance.My app is getting a lot of traffic, we are using Auto scaling and it is working somewhat for us but my server gets down on high memory usage because of CRON jobs.Now I am thinking to switch to a large instance type with at least 4GB memory. I can't seem to find any option on the configuration to modify the instance type.Can you please guide me on how to change that without any downtime? Thank youFollowComment"

Answer: "0HiYou can configure how Auto Scaling works including Instance Type by editing Capacity on the environment's Configuration page in the Elastic Beanstalk console.See https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/using-features.managing.as.html#environments-cfg-autoscaling-consoleConfiguration changes that modify the launch configuration or VPC settings require terminating all instances in your environment and replacing them. For example, when you change the instance type or SSH key setting for your environment, the EC2 instances must be terminated and replaced. Elastic Beanstalk provides several policies that determine how this replacement is done.See https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/environments-updating.htmlCommentShareEXPERTMatt-Banswered 9 months ago"


Question: Failed to connect to   instance

"Failed to connect to your instanceEC2 Instance Connect is unable to connect to your instance. Ensure your instance network settings are configured correctly for EC2 Instance Connect. For more information, see Set up EC2 Instance Connect at https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-connect-set-up.html.FollowComment"

Answer: "0Hello,do you still have the problem or could you fix it by following the linked guide in the error message you posted?https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-connect-set-up.html#ec2-instance-connect-setup-security-groupIf you still have the problem, could you post a few details?Is your instance launched in a private or public subnet?How do you try to connect to the instance (cli or console)?Does your securitygroup allow ingress AWS-Instance-Connect Cidrs (if accessing by console)? (see f.e. https://github.com/joetek/aws-ip-ranges-json/blob/master/ip-ranges-ec2-instance-connect.json)Otherwise does your securitygroup allow ingress from your ip?CommentShareHeikoMRanswered 6 months ago"


Question: DMS service for aurora postgres doesnt accept a view as source for full load process

"HiWe are creating a DMS task that we were expecting to use a view in a Aurora Postgres service as data source, for a single use table migration. But it seems that views arent actually supported in this specific source case  ....  any reason for this?  Theres a column which serves as primary key for that viewBelow is the message when creating the DMS taskError in mapping rules. Rule with ruleId = 042389161 failed validation. view selection is not available for aurora-postgresql source typeIn the meantime, im looking towards AWS Glue to do the procedure, and in the "worst" case, create a procedure to do the task / load processAny tips would be great for the ones that may fall for the same casebest regardsFollowComment"

Answer: "0Is this for a one-shot migration or you intend to do this often (or continuously?)If this is a one-shot, as a work around you can create a table from this view and move that new table with DMS.CommentShareAWS-ADolganovanswered a year agoAWS-User-8279819 a year agocurrently, one shot, but unless mysql and postgres became better than aurora, i cant stop thinking that this is a truly useful feature. The cost to materialize a view is too highSharerePost-User-7017882 9 months agoI have the same problem when replicating data from Aurora postgres to Aurora Postgres using DMS with views. The workaround of creating first the tables seems ok but has performance impact. Documentation indicates that the views are supported but no successShare"


Question: github copilot extension

i am using cloud9 to develop serverless app. can i use github copilot on cloud9?FollowComment

Answer: "0No, I don't think you can.CommentShareWebforkanswered 2 months ago0Cloud9 is integrated with CodeWhisperer which is a machine learning powered service that helps improve developer productivity by generating code recommendations based on developers’ comments in natural language and their code in the IDE. Currently CodeWhisperer is available for the Java, JavaScript, Python, C# and TypeScript programming languageshttps://docs.aws.amazon.com/cloud9/latest/user-guide/codewhisperer.htmlCommentShareanester-awsanswered 2 months ago"


Question: Facial Landmarks for partially covered face in Rekognition

"Hi,we're working out how to distinguish faces that are just a little bit covered to faces that are mostly covered. The "face occluded" prop does not say anything about how much covered the face actually is.We thought of using the facial landmarks for doing this, checking if one of the eyes/nose etc is covered. But when I tested with a face where more than half of the face is covered, then we still got coordinates for the facial landmarks that you cannot see in the picture.Why is this? How does rekognition find these landmarks? And if anyone has any suggestions on how to solve this issue, that would be appreciated.FollowComment"

Answer: "0Hello,That is correct, by using facial landmarks you can identify specific points on the face such as the corners of the eyes, the tip of the nose, and the corners of the mouth. However, Rekognitions ability to detect facial landmarks may be limited when the face is partially or fully covered. This is due to the algorithm not have enough visual data to accurately identify the landmarks.Using Rekognitions detect faces for facial landmarks to distinguish between faces that are partially covered and faces that are mostly covered will not be sufficient alone.As far as the next steps, I would try using Rekognitions custom labels. This will allow you to make a custom model to your specific use case while still using Rekognitions existing capabilities. By uploading a few images for training, you will be able to create your custom image analysis model for detecting partially covered faces.What are custom labels?https://aws.amazon.com/rekognition/custom-labels-features/How to get started?https://docs.aws.amazon.com/rekognition/latest/customlabels-dg/getting-started.htmlCommentShareZseemoreanswered 21 days ago"


Question: Storage Gateway (FileGateway) Security & Direct Connect

A customer is looking to implement Storage Gateway (File Gateway) but has some concerns around security and keeping all traffic away from the internet and going via their DX connection. As per this document  https://docs.aws.amazon.com/storagegateway/latest/userguide/using-dx.html it looks supportable but wondered if we have any best practice guidance or if there are any known pit falls (ie does any traffic still go via the internet etc)?thanksFollowComment

Answer: 0Accepted AnswerPlease refer to thishttps://aws.amazon.com/about-aws/whats-new/2019/06/aws-storage-gateway-now-supports-amazon-vpc-endpoints-aws-privatelink/AMI is the key piece to be watchedCommentShareArun Kumaranswered 3 years ago


Question: my domain on aws api gateway is not available in my region (ap-south-1) ==> India but available in other regions(which i check through vpn) ? how to resolve this?

"I have created an api gateway and associated a custom domain with that api. My api is in ap-south-1 region. I have attached my route53 domain with my custom domain.When trying to run my domain in my region (India), i am getting an error saying "This site can’t be reached", but running the same domain in other region through vpn is successful.Please let me know how to resolve this error.FollowComment"


Question: Environment missing

"My problem looks exactly like https://forums.aws.amazon.com/thread.jspa?threadID=95832, but I have just a single app. I had an Environment, last time I set it up around month and a half ago, and it still works fine - responds on my requests. But in the console for my only app it shows that "No environments currently exist for this application.".FollowComment"

Answer: "0in case someone else is looking for it, for some reason the region selection was reset, so when I switched back to my region the env was thereCommentSharePhilipDukhovanswered 2 years ago"


Question: AWS Iot Device Tester SSH Connection failing with EOF

"IDT Connectivity issue as reported in forums.Hi All, I am trying to run AWS IDT for Greengrass on my ARM devices.But SSH connection is failed by EOF when I used the IoT Device Tester v4.4.0/4.4.1 with public key authentication.(Of cource, I added "publicKeyPath" to device.json and prepared it)On the other hand, it is passed when I used the IoT Device Tester v4.2.0 with public key authentication on the same device/rootfs.So, the difference is only IDT's version.Unfortunately, I cannot find any solution about EOF of SSH connection.Could you tell me how to resolve this ?========== Test Summary ==========Execution Time: 3sTests Completed: 1Tests Passed: 0Tests Failed: 1Tests Skipped: 0Test Groups:pretestvalidation: FAILEDFailed Tests:Group Name: pretestvalidationTest Name: pretestvalidationReason: failed to setup before running test: failed to connect to devices: failed to create connection to device with id ${device id}: establishing connection with id pretestvalidation_pretestvalidation failed: failed to setup ssh connection: EOFFollowComment"

Answer: "0HelloWith 4.4.x IDT, we have introduced a dependency on sftp as part of ssh connectivity to device.If the sftp is enabled on the device, the IDT connectivity will not face the ‘EOF’ issue. If you are able to manually sftp to the device, and still IDT is blocked by the ‘EOF’ connectivity issue, please report the issue.Thank you.CommentSharesatvemulAWSanswered a year ago0In 4.5.1/xxx release, we have taken the sftp dependency out, on Linux based device connectivity. Please use 4.5.1 version(or above in future) if you're seeing the same issue.CommentShareAWS-User-8006754answered a year ago"


Question: Cannot delete bucket and recreate it

"Hi,I deleted S3 buckets this morning and some hours later the bucket still there. I need to recreate into a new region, but the bucket seems to be an inconsistent state (no region, Delete button not work and when I go inside the bucket through console we have an error message : Error Data not found).Link: https://www.dropbox.com/s/xi8qrutyxf4lv1v/s3bucket.png?dl=0Regards,FollowComment"

Answer: "0The problem seems to be solved alone...CommentShareJPHalleanswered 4 years ago0Bucket configurations have an eventual consistency model. i.e., If you delete a bucket and immediately list all buckets, the deleted bucket might still appear in the list.[+] https://docs.aws.amazon.com/AmazonS3/latest/userguide/Welcome.html#ConsistencyModelCommentShareSUPPORT ENGINEERUjjawal_Sanswered 5 months ago"


Question: How should I customize a Docker container Image to run it on Lambda function

"I have a docker image that is stored in ECR and works perfectly when it's deployed on ECS. Now, I deployed this same image on lambda but gives me the following on test result:{"errorMessage": "2022-12-27T15:04:49.710Z ce12da2d-a733-4779-b8df-aa30f0b84ac9 Task timed out after 180.10 seconds"}Here is the log output on testingINFO  Accepting connections at http://0.0.0.0:8080Here is what I have on my dockerfile:FROM node:carbon as builderENV NODE_ENV=PRODUCTIONWORKDIR /appCOPY package.json ./RUN npm install --productionCOPY . .RUN npm run buildFROM node:14-alpineRUN npm -g install serveWORKDIR /appCOPY --from=builder /app/build .CMD ["serve", "-p", "8080"]FollowComment"

Answer: "0It looks like your default runtime for your lambda function needs to be increased. Have you tried this yet? By default lambda has a timeout of 3 seconds. You may need to increase that to account for the build process. you can also check to see if the resource limits (cpu/memory) are getting maxed out in lambda. if so, you can increase those as well. Also have you considered launching in fargate rather than ECS if you are looking for a serverless approach?CommentShareCloud_Ganswered 5 months ago0You can't use the same container image for ECS and Lambda.Container images for Lambda have to implement Lambda Runtime API. There are many open source implementations for various programming languages.Please refer document https://docs.aws.amazon.com/lambda/latest/dg/images-create.html for more information.CommentShareJunseong_Janswered 5 months ago"


Question: PowerShell script to Start and Stop of SAP Services and Ec2 instance running on  windows  platform using SSM

"To start and stop the SAP services (App , SCS, HANA DB  etc. ) on widows platform do have any   PowerShell Script to automate the Start and Stop operation of SAP services and ec2 Instance  using SSM.FollowComment"

Answer: 0Select **Documents **from the SSM Nav bar. Search for AWS-RunPowerShellScript. Follow the hyperlink that is its name. Click the Run Command button. This brings you to a dialog where you can input PowerShell. Something like "Stop-Service -Name "SAP_ServiceName" on a separate line for each on you want to stop (Start-Service -Name "SAP_ServiceName" to start). In targets section **choose instances manually **brings up a data table to select from your EC2 instances to run it on. You can disable s3 output or select a bucket to drop stderr and stdout to. Then click Run.CommentSharethomas_aWs_marshallanswered a year ago


Question: AWS Lightsail Firewall doesn't open a port or something else is blocking it

"Hello,The Lightsail Firewall is unable to open a specific port, I searched for this issue in the forums and there are several issues like this one but none of them has a valid solution for me.I'm setting up my first Lightsail instance with Ubuntu 20.04 LTS and already installed Odoo and Postgresql. In the Lightsail firewall I opened 2 additional ports for any IP address: 8069 for the Odoo application and 5432 for PostgreSQL. I can access the Odoo application but I am unable to access the PostgreSQL service. I'm trying to open the PostgreSQL port (5432) on Networking > Firewall section (I did the same for the 8069) but seems it doesn't take any effect. I tried https://www.yougetsignal.com/tools/open-ports/ to test if the port is OPEN or CLOSED. Both public and private IP Port 22, 80 and 8069 are open. I’m pretty sure that there is a local firewall blocking incoming connections, in which case opening the port through the Lightsail firewall isn't sufficient. I tried connecting to the port locally from the server with “telnet 127.0.0.1 5432” and worked, but the same command using the external IP address didn’t.I listed the active services running and ufw is active but “sudo ufw status” says inactive, so ufw is running but not blocking anything (I hope). I don’t identify any other service as a firewall (my only suspect is apparmor but I don't know how it works)service --status-allacpid : Advanced Configuration and Power Interface (ACPI) event daemonapparmor : Linux kernel security moduleapport : Apport intercepts Program crashes,atd : runs jobs queuedconsole-setup.shcron : schedulercryptdiskscryptdisks-earlydbus : message bus daemongrub-common : Bootloaderhibagenthwclock.shirqbalanceiscsidkeyboard-setup.shkmod : control kernellvm2lvm2-lvmpolldmultipath-tools : configure multiple I/O paths between server nodes and storage arraysodoo : Applicationopen-iscsiopen-vm-toolsplymouthplymouth-logpostgresql : Databaseprocps : utilites for pseudo-filesystemrsyncrsyslog : for loggingscreen-cleanupsshsysstat : system statsudev : device managementufw : <<<Firewallunattended-upgradesuuiddx11-commonFollowComment"

Answer: "0I just found out the problem. To make PostgreSQL available to an external IP there are two items to configure: postgresql.conf and pg_hba.conf. Some sort of script or whatever is commenting out the line with the Public IP address in the postgresql.conf. When I restart the PostgreSQL service, I can connect from my local PGAdmin4, but if I reboot the instance, "something" is commenting the line with the Public IP address. Now I have to find the guilty "something", I think I can figure it out.CommentSharePlacidovanswered 2 years ago0In addition to the two files you already mentioned, have you also taken a look at whether your settings are being overridden by config in postgresql.auto.conf? Settings in postgresql.auto.conf will override those in postgresql.conf (more docs about that config file here: https://www.postgresql.org/docs/13/config-setting.html#CONFIG-SETTING-CONFIGURATION-FILE).A cursory Google search also turns this up, if this helps: https://dba.stackexchange.com/questions/180177/postgres-seems-to-ignore-listen-addresses-settingCommentSharetanbriananswered 2 years ago"


Question: API Gateway with swagger documentation export error

"I added one piece of documentation on our api gateway using the web UI and when I try to export it as swagger, I get the following error:Cannot deserialize value of type java.lang.String from Object value (token JsonToken.START_OBJECT) at [Source: UNKNOWN; line: -1, column: -1] (through reference chain: io.swagger.models.ModelImpl["default"])Here is what the documentation part looks like:What am I doing wrong?FollowCommentMichael A a month agoThis a default example when you click on the documentation button.Share"

Answer: "0The documentation is expecting a 'String' type value and you're offering an 'Object' type value.Change either like this:"{'Documentation': 'Global Authentication'}"or"Documentation: Global Authentication"CommentSharevtjeananswered a month ago0The way I resolved the error was to delete the stage and then add it back, then the error went away.CommentShareMichael Aanswered a month ago"


Question: Cognito / Pinpoint integration

"Hi there,I am not able to add the usage report from pinpoint to cognito. I have set up everything like in this article:https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-pinpoint-integration.htmlIn my client I am just using the aws-amplify sdk with following config:authenticationFlowType: 'USER_PASSWORD_AUTH',region: 'eu-central-1'userPoolId: 'xxx'userPoolWebClientId: 'yyy'And then Auth.signIn(username, password).Did I miss something? I thought cognito / pinpoint analytics should work out of box.Thank you very much!FollowCommentdrumnist_nakano a year agoIf you run your Amplify application locally, does it add the usage reports?Also, do you use the Amplify Console to host your application?ShareGregO a year agoHello,Cognito and Pinpoint integration must use the AnalyticsEndpointID during signUp(Cognito must send it to Pinpoint).https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ConfirmSignUp.htmlShare"

Answer: "0I don't think you're stuck with Cognito. The SDK communicates with PinPoint.You can use PinPoint easily by using Amplify framework, but have you followed https://docs.amplify.aws/lib/analytics/getting-started/q/platform/js/#set-up-existing-analytics-backend to update App.js?CommentShareKBanswered a year ago"


Question: greengrass v2 intercomponent file size

"Hello,We have a GG component that  needs to send a file to another component, via memory sharing. Due to privacy issues, we cannot write the file on disk.There seems to be a 2mb limitation for this. Any idea about increasing this issue?Many thanksFollowComment"

Answer: "1IPC size cannot be changed. You can use Greengrass IPC to communicate between your components in order to setup your own communication channel or some other solution, but Greengrass IPC is not made for bulk transfers.CommentShareEXPERTMichaelDombrowski-AWSanswered 3 months agoEXPERTGreg_Breviewed 3 months ago"


Question: Amazon Workspaces without AD connector

"A customer wants to use Amazon workspaces, but claims to not be able to use it without the AD connector (the cost of said would make the customer not choose AWS, since the AD connector is considerably more expensive than what he would be paying for his workspaces).Is he forced to use the AD connector or is there a possibility to use workspaces without it?Thanks very much for your help!FollowComment"

Answer: "0Accepted AnswerAmazon WorkSpaces pricing includes the use of AWS Directory Services for Simple AD and AD Connector (where available).So your customer won't be paying extra for using AD Connector. For your other question, the customer has to use AD Connector, Simple AD or Microsoft AD.https://aws.amazon.com/workspaces/pricing/As side note: Simple AD and AD Connector are made available to you free of cost to use with WorkSpaces,WorkMail, or WorkDocs. If there are no WorkSpaces being used with your Simple AD or AD Connector for 30 consecutive days, you may be charged for this directory as per the AWS Directory Service pricing terms.Hope this helps.CommentShareEXPERTSerhatanswered 4 years ago"


Question: Waiter TrainingJobCompletedOrStopped failed: Waiter encountered a terminal

"I am trying to launch a job using the low level api in boto3 sagemaker client. After callingsagemaker.create_training_job(**params)I try to get a waiter. This code is directly from the documentation for creating a training job (https://docs.aws.amazon.com/sagemaker/latest/dg/ex1-train-model-create-training-job.html)I get this error:Traceback (most recent call last):  File "traindeploy.py", line 97, in create_training_job    sagemaker.get_waiter('training_job_completed_or_stopped').wait(TrainingJobName=job_name)  File "/path/to/lib/Python/3.6/lib/python/site-packages/botocore/waiter.py", line 53, in wait    Waiter.wait(self, **kwargs)  File "/path/to/lib/Python/3.6/lib/python/site-packages/botocore/waiter.py", line 323, in wait    last_response=response,botocore.exceptions.WaiterError: Waiter TrainingJobCompletedOrStopped failed: Waiter encountered a terminal failure stateThese are my job params:{  "AlgorithmSpecification": {    "TrainingImage": "<image-url-from-ecr>",    "TrainingInputMode": "File"  },  "RoleArn": "<role-arn>",  "OutputDataConfig": {    "S3OutputPath": "s3://path-to-bucket/some-folder-output/"  },  "ResourceConfig": {    "InstanceCount": 2,    "InstanceType": "ml.c4.8xlarge",    "VolumeSizeInGB": 50  },  "TrainingJobName": "some-jobname",  "HyperParameters": {},  "StoppingCondition": {    "MaxRuntimeInSeconds": 3600  },  "InputDataConfig": [    {      "ChannelName": "train",      "DataSource": {        "S3DataSource": {          "S3DataType": "S3Prefix",          "S3Uri": "s3://path-to-bucket/some-folder-input/",          "S3DataDistributionType": "FullyReplicated"        }      },      "CompressionType": "None",      "RecordWrapperType": "None"    }  ]}Can someone please advise what is causing this and how will I get a waiter on a training job?FollowComment"

Answer: "0Hello rks,You received that error message because the waiter you created was expecting the training job to finish in either a Completed or Stopped state, but it reached the Failed state instead. This means there was an issue with your job and it could not be completed correctly.To understand what caused your training job to fail, you can follow these steps:Go to the Amazon SageMaker console in your accountClick on "Jobs" in the navigation bar to the leftSearch for your training job in the list. You can use the "Search jobs" text form to quickly find the job by its name, or filter them by status.The training job details should explain why it failed.If you need more help with this issue, please don't hesitate to contact us.Best regards,Amazon SageMaker teamCommentShareAWS-User-6089238answered 5 years ago0Hi Rodrigo,Thanks for looking into this. Actually the training job does eventually succeed. I tried putting time.wait(seconds=N) before I get call get_waiter, but no matter what wait time I chose the waiter still failed giving the same exception. I waited 5 seconds, I waited 2 minutes, I even waited 3 minutes which was more than the time my training job took to complete successfully, but I always got the same exception.So, I want to emphasize that there is nothing wrong with the training jobs I create. They succeed. But the get_waiter method always fails for me. What am I doing wrong here?Edited by: rks on May 17, 2018 4:34 PMCommentSharerksanswered 5 years ago0Hi rks,I'm sorry for the confusion, I misunderstood your issue. I attempted to reproduce it by running the example code myself in a SageMaker notebook, but I was able to run the job and the waiter worked correctly. For the record, I used the low-level KMeans MNIST sample notebook that comes bundled with all SageMaker notebooks. You can find it in "/sample-notebooks/sagemaker-python-sdk/1P_kmeans_lowlevel/kmeans_mnist_lowlevel.ipynb". That notebook should be very similar to the code you tried to run.Could you tell us more about how the environment you're running the job in? In particular, we'd like to know the version of Python and BOTO you're using. You can run the following commands to get them:import sys, boto3print("boto version = " + boto3.__version__)print("python version = " + sys.version)Thank you for your patience.RodrigoCommentShareAWS-User-6089238answered 5 years ago0Hi Roberto,Thank you for helping me out. This is the version of boto and python I am running:16:30 $ python3.6Python 3.6.4 (v3.6.4:d48ecebad5, Dec 18 2017, 21:07:28) [GCC 4.2.1 (Apple Inc. build 5666) (dot 3)] on darwinType "help", "copyright", "credits" or "license" for more information.import sys, boto3print("boto version = " + boto3.__version__)    boto version = 1.5.18print("python version = " + sys.version)    python version = 3.6.4 (v3.6.4:d48ecebad5, Dec 18 2017, 21:07:28)     [GCC 4.2.1 (Apple Inc. build 5666) (dot 3)]I'll review my code based on the notebook you've pointed out.Edited by: rks on May 18, 2018 4:35 PMEdited by: rks on May 18, 2018 4:35 PMEdited by: rks on May 18, 2018 4:36 PMCommentSharerksanswered 5 years ago0Hi rks,We have tried to troubleshoot this issue but it doesn't seem like it's reproducible. It's likely that the training-job name was invalid. Is this issue still occurring?Thanks,IngridCommentShareingridAwsanswered 5 years ago"


Question: Workmail hosting of one region to another region

"We want to use Amazon Work email as the complete Exchange As A Service in SouthEast Asia(Mumbai) region. But as Workmail is not available in this region, please suggest any implications of using other available region like Europe to host the mail solution with AWS Workmail.FollowComment"

Answer: "0Accepted AnswerHi,There should be no problem using one of the available regions. Mail client sync the mail so slightly higher latency will not impact the user experience.Kind regards,RobinCommentShareMODERATORrobinkawsanswered 3 months ago"


Question: Authorization for API

"I have generated client id and client secret, and with the help of this bearer token is also generated but after hitting API, it is showing Error 401 Unauthorized.How this problem can be resolved?Procedure I usedFirst I had account id through my management account. Then I created user with administrator permissions and generated its access key and secret access key, through which on terminal with the help of curl command I generated the session token(bearer token), but postman is showing unauthorized.FollowComment"

Answer: "1**Verify the token scope: **Ensure that the bearer token you generated has the necessary permissions to access the API resource you're trying to access. Some APIs require specific scopes or permissions for certain endpoints, so review the API documentation to ensure that your token has the appropriate permissions.**Check the token expiration: **Bearer tokens typically have a limited lifespan. If your token has expired, you will need to generate a new one.CommentShareEXPERTsdtslmnanswered 2 months ago1Authorization to AWS APIs uses Sigv4. Here is a description on how request signing work.If you use any AWS SDK (eg boto3) this process is done for you. If you want to test the access via command line (eg via cURL) you can use awscurl.CommentShareEXPERTMassimilianoAWSanswered 2 months ago"


Question: How to specify the location of nadgrids in postgres with postgis extension?

"There is a postgis function called ST_Transform to transform the coordinates to a different spatial reference system. This function receives the original geometry (from a table), a set of proj parameters and a srid value. Among the proj parameters, there is a parameter which is a file which is used by proj.For instance:SELECTid, ST_Transform(geom, '+proj=tmerc +lat_0=0 +lon_0=15 +k=0.9996 +x_0=2520000 +y_0=0 +ellps=intl +nadgrids="/tmp/example.gsb" +units=m +no_defs', 6708) as geom FROM test.TestThe file is /tmp/example.gsb, and the file can be anywhere in the system but it should be accessible by the program. Is there a way to download a file from a S3 bucket locally, even to a temp folder or a specific folder.I saw that is possible for SQLServer:The following example shows the stored procedure to download files from S3.exec msdb.dbo.rds_download_from_s3     @s3_arn_of_file='arn:aws:s3:::bucket_name/bulk_data.csv',     @rds_file_path='D:\S3\seed_data\data.csv',     @overwrite_file=1; FollowComment"


Question: How do I rename a Lightsail instance

An instance was incorrectly named.  How can I have an instance name changed?FollowComment

Answer: "1Thanks for providing helpful steps @Nurudeen KamiluBelow are edited steps with a few corrections.Go to Instances and click your instance nameClick Stop button and confirm that you want to stop your instanceGo to Snapshots tab and Create a snapshot.Go back to home and to the Snapshots tabClick snapshot instance, select action and select ** Create new instance**Provide a new name for your instance before clicking the create button.No other selection is necessary as the source snapshot configuration will be used.Go back to Instances tab again and wait until your instance is up and runningGo to Networking tab and reattach the existing IP address to your newly created instance.Once you have confirmed your instance is working as expected feel free to delete the original instance with the undesired name.CommentShareAWS-User-7183595answered a year ago1I can't agree with Nurudeen Kamilu's answer.I think this process will work but actually, it will launch a new instance from the snapshot with the new name.I need to rename the existing instance directly.ThanksCommentShareiamsajidjavedanswered a year ago0To rename existing Amazon Lightsail instance follow these steps:Go to Instances and click your instance nameClick Stop button and confirm that you want to stop your instanceGo to Snapshots tab and Create a snapshot.Go back to home and to the Snapshots tabClick snapshot instance, select action and select Create image from the snapshotNow go to AMI tab under imagesSelect the newly created AMI and launch a new instance from the AMIReview region and instance plan just as you would do when creating a new instance.Scroll down to Identify your instance sectionGive your new instance a correct name (i.e. the one you want to rename your existing instance to)Go back to Instances tab again and wait until your instance is up and runningGo to Networking tab and reattach the existing IP address to your newly created instanceOpen the main screen of your instance again (Connect tab) and click StartCommentShareNurudeen Kamiluanswered a year ago0After completing the renaming process, you might also need to update the /.ssh/known_hosts file on your client machine (if you connect to the Lightsail instance through a local SSH client).CommentShareGregWanswered 2 months ago"


Question: Custom CL Build Strategy

"Hello,The build strategy used in the flow should be mentioned in the manifest sent to AFI generation. currently there are 5 strategies (DEFAULT/BASIC/EXPLORE/TIMING/CONGESTION).Is the developer allowed to use a custom strategy (or – a custom set of steps and options/primitives per each vivado step), or is it a must to use explicitly one of the AWS-provided strategies that have been described above?Thanks,FollowComment"

Answer: "0Hi,The AWS Manifest file does not contain any build strategy information. For AFI generation, you will only need to upload a tarball that contains the final DCP and a manifest file.The build strategies (DEFAULT/BASIC/EXPLORE/TIMING/CONGESTION) provided in AWS build scripts are for convenience only. Customer may choose to build CL designs using different strategies, or modify the AWS build scripts with directives supported by Vivado. As long as your CL design adheres to Shell Interface Specification, (https://github.com/aws/aws-fpga/blob/master/hdk/docs/AWS_Shell_Interface_Specification.md#aws-shell-interface-specification) the AFI generation should be successful.Please feel free to contact us if you run into any issues.Thanks!ChakraCommentShareawschakraanswered 3 years ago0Thanks!CommentShareynacsonanswered 3 years ago"


Question: Static Web Hosting with Continuous Deployment

"Hello,I am working on Build a serverless web application using Amplify, Cognito, API Gateway, Lambda & DynamoDB use casehttps://aws.amazon.com/getting-started/hands-on/build-serverless-web-app-lambda-apigateway-s3-dynamodb-cognito/module-1/My question is have created a Repository name "wildrydes-site". Now i am trying to perform Populate git repository i have created the bucket and object . As per the use case which html file i have upload to get the same website which is shown in the use case. Can somebody help me from where i get same website file to upload also after uploading the file do i have to run these commands:a. Change directory into your repository and copy the static files from S3:cd wildrydes-siteaws s3 cp s3://wildrydes-us-east-1/WebApplication/1_StaticWebHosting/website ./ --recursiveb. Commit the files to your Git service$ git add .$ git commit -m 'new'$ git pushPlease suggest.Thanks,FollowComment"

Answer: "0Accepted AnswerHi Monica,after reading the steps make sure you do the following:Create a repo (which you did) and from your local prompt, run  git clone https: //git-codecommit.<REGION>.amazonaws.com/v1/repos/wildrydes-site. Make sure you specify the correct region if you created a CodeCommit repo. The result of that command will be an empty repository.Do cd wildrydes-site from your local prompt.From within your local folder, execute this command aws s3 cp s3://wildrydes-<REGION>/WebApplication/1_StaticWebHosting/website ./ --recursive. This command is saying "copy  recursively all files and folders contained in the public S3 bucket named wildrydes-<REGION> into my local folder". Choose you region, run it and the result will be that now you should have those files locally to your wildrydes-site folder (but not committed yet).To commit and push those files remotely, from local prompt, run git add . , git commit -m 'new' and git push. This will push the result to your remote repository (CodeCommit or Github).Hope it helps, and if it does, I 'd appreciate if answer can be accepted ;)CommentShareEXPERTalatechanswered 3 months agoMonica 3 months ago@alatech: Thanks for response. I did till  cd wildrydes-site but when i give aws s3 cp s3://wildrydes-<REGION>/WebApplication/1_StaticWebHosting/website ./ --recursive.Its giving me error:monic@DESKTOP-8FGFDOS MINGW64 ~/wildrydes-site (master)$ aws s3 cp s3://wildrydes-us-west-2/WebApplication/1_StaticWebHosting/websiteNote: AWS CLI version 2, the latest major version of the AWS CLI, is now stable and recommended for general use. For more information, see the AWS CLI version 2 installation instructions at: https://docs.aws.amazon.com/cli/latest/userguide/install-cliv2.htmlusage: aws [options] <command> <subcommand> [<subcommand> ...] [parameters]To see help text, you can run:aws helpaws <command> helpaws <command> <subcommand> helpaws: error: the following arguments are required: pathsAlso,what content should i keep in index.html file that i have to upload in S3?Sharealatech EXPERT3 months agoHi would first suggest to update your AWS CLI. You can follow this guide: https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-quickstart.html#cli-configure-quickstart-config and/or https://docs.aws.amazon.com/cli/latest/userguide/install-cliv2.html. Assuming you have correctly installed CLI, make sure you copy the whole command: aws s3 cp s3://wildrydes-us-west-2/WebApplication/1_StaticWebHosting/website ./ --recursive , as it seems your command stops at "/website" wording.  Let me know.ShareMonica 3 months ago@alatech :git add . , git commit -m 'new' and git push worked... Now what content i can put in index.html file?Sharealatech EXPERT2 months agoWell, assuming you ran “ aws s3 cp s3://wildrydes-us-west-2/WebApplication/1_StaticWebHosting/website ./ --recursive” and then the 3 commands you said above, then you code commit or GitHub repository should have a bunch of html/JS/css files. Can you verify that they have been pushed to the repository remotely (either going to GitHub page or code commit in the console)?ShareMonica 2 months agoIt worked. Thanks.Share"


Question: Websocket API Gateway error "No match for output mapping"

"Hi,I am having error in $connect route of my Websocket API Gateway. The setup is very simple with no Authorization and Api key requirement. The integration type is a Lambda Function without using Lambda Proxy Integration. The following is the Lambda function:public class LambdaBasicStreamFunction implements RequestStreamHandler {@Overridepublic void handleRequest(InputStream inputStream, OutputStream outputStream, Context context) throws IOException {int letter;String eventObject = "";    while ((letter = inputStream.read()) > -1) {          char inputChar= (char) letter;          eventObject += inputChar;      }      //Passing a custom response as the output string      String response = "{\n" +              "    \"statusCode\": 200,\n" +              "    \"headers\": {\"Content-Type\": \"application/json\"},\n" +              "    \"body\": \"plain text response\"\n" +              "}";      outputStream.write(response.getBytes());      System.out.println("Input-Event: " + eventObject);  }  }When I used wscat to test the connection, I got "error: Unexpected server response: 500". The api execution log says: "Execution failed due to configuration error: No match for output mapping and no default output mapping configured. Endpoint Response Status Code: 200".Can anyone help me figure out the problem? Thanks in advance.FollowComment"

Answer: "0Never mind. I found once I enable Lambda Proxy Integration, the error goes away.CommentShareioscoderanswered 4 years ago"


Question: Adding S3 Bucket Policy Cause S3 Replication Failed

"Hello,Can anyone help me below case?I wanted my bucket to access from specific IPs only, otherwise deny. I set up S3 bucket policy  as follow:{   "Version": "2012-10-17",   "Id": "S3PolicyId1",    "Statement": [        {            "Sid": "IPAllow",            "Effect": "Deny",            "Principal": "*",            "Action": "s3:*",            "Resource": [                "arn:aws:s3:::DOC-EXAMPLE-BUCKET",                "arn:aws:s3:::DOC-EXAMPLE-BUCKET/*"            ],            "Condition": {                "NotIpAddress": {                    "aws:SourceIp": "x.x.x.x"                },              "Bool":{                  "aws:ViaAWSService":"false"                }            }        }    ]}For S3 replication, I configured S3 Replication Rule as per AWS Docs by setting policies and attaching to IAM role as follow:{   "Version":"2012-10-17", "Statement":[      {         "Effect":"Allow",         "Principal":{            "Service":"s3.amazonaws.com"         },         "Action":"sts:AssumeRole"      }   ]}{   "Version":"2012-10-17",   "Statement":[      {         "Effect":"Allow",         "Action":[            "s3:GetReplicationConfiguration",            "s3:ListBucket"         ],         "Resource":[            "arn:aws:s3:::SourceBucket"         ]      },      {         "Effect":"Allow",         "Action":[            "s3:GetObjectVersionForReplication",            "s3:GetObjectVersionAcl",            "s3:GetObjectVersionTagging"         ],         "Resource":[            "arn:aws:s3:::SourceBucket/*"         ]      },      {         "Effect":"Allow",         "Action":[            "s3:ReplicateObject",            "s3:ReplicateDelete",            "s3:ReplicateTags"         ],         "Resource":"arn:aws:s3:::DestinationBucket/*"      }   ]}Without bucket policy, objects are replicated smoothly. Once I add the bucket policy, replication is failed every time. I have no idea.Regards,OhnmarFollowComment"

Answer: "0Accepted AnswerHave you tried specifically allowing the role being used for replication in the bucket policy? Like this:"Condition": {    "NotIpAddress": {        "aws:SourceIp": "x.x.x.x"    },    "Bool": {        "aws:ViaAWSService":"false"    },    "ArnNotEquals": {        "aws:PrincipalArn": "arn:aws:iam::<account id>:role/service-role/<role name>"    }}CommentShareEdanswered a year agoOhnmar a year agoThanks Ed, it did worked.Share"


Question: Application xxx could not be launched successfully

"For the first time in about 6 months, we're updating our AWS application (with no environmental type changes at all). But in the 'configure' phase of running the Appstream 2.0 Image Assistant, when we try to start the app, we immediately get a dialog box that says "Application xxx could not be launched successfully. Check that the application was installed properly , does not require elevated privileges to launch, or is not part of a user folder hierarchy."We can execute the app successfully out of its 'C:' drive home just fine, up to the point where it needs the environment as set up by Appstream, so we don't think it's anything to do with the application itself.And in any case, we haven't changed anything outside the standard functionality of our application. We haven't been able to find any useful references to the message via a web search.  We're wondering if there's been an Appstream change in the last 6 months or so (and what to do about it if so), or if anyone has any ideas about what might now be wrong.Thanks!FollowComment"


Question: Creating an S3 Glacier Deep Archive vault with the CLI

"I would like to create a Glacier Deep Archive to store a good chunk of files that I will rarely, if ever, access, and in such circumstance, I can wait a couple of days until the files are retrieved. So I would like to use Glacier Deep Archive.Checking the documentation, the only way to create vaults with the CLI that I've found is:aws glacier create-vault --vault-name my_vault_name --account-id 123456789012Then in the Glacier management console, I can't find what type of storage my vault is (Instant Retrieval, Flexible Retrieval, Deep Archive).Two questions: where can I find the information about the type of storage for existing vaults, and how can I make sure my vault is a Deep Archive one?Many thanks  in advance.FollowComment"

Answer: "0Please see the documentation here on how to set the S3 storage class - https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage-class-intro.htmlPlease use the S3 console to check the current storage class of your objectsCommentShareMike-AWSanswered 9 months ago0You can utilize Glacier either through the Glacier API which you are using in your example, or through the S3 Storage Classes for Glacier Flexible Retrieval and Glacier Deep Archive (GDA). Glacier Deep Archive is only available as an S3 Storage Class. To use GDA can either specify the Glacier Deep Archive storage class when you upload the data or you can configure lifecycle rules to move data from other storage classes to GDA.CommentSharesigtrap5answered 8 months ago"


Question: AWS Certificate issuing

I was trying to issue a certificate arn:aws:acm:us-east-1:***:certificate/f763ffb5-f342-4502-9a36-cf6445096da5. The error message indicated that ACM requires additional information to process this certificate request. Can you please help me on this topic?The link on screenshot redirects hereThanksFollowCommentmn87 8 months ago・What is the error message?・What screen in ACM causes an error when I do what?Share

Answer: "1Please edit your post to hide your AWS account number, and as mn87 wrote please share the error messageCommentShareBent_Tanswered 8 months agorePost-User-8527700 8 months agoUpdated the questionShare0Thanks for the update on your question.I have researched the error and found the following article that describes the cause and solution. [1] [2][1] AWS Cert Manager: Additional Verification Required | AWS re:Posthttps://repost.aws/questions/QUB0S_OoWfTM6OyVimuAXxXw/aws-cert-manager-additional-verification-required----- Excerpt -----You can simply raise a support case and provide the ARN of the affected certificate.----- Excerpt -----[2] True Cause behind Additional Verification in ACM - The First Cry of Atomhttps://www.lewuathe.com/true-cause-behind-additional-verification-in-acm.html----- Excerpt -----Usually, this error appears when an ACM certificate request contains a domain listed under the Alexa Top 1000 domains. This process is in place to prevent abuse.The only way to resolve the issue is to file a support ticket to ask AWS to put our domain in the whitelist. That seems to work as the additional verification in this case. AWS support team will promptly respond to your problem, and your certificate will be issued once the ticket is closed.----- Excerpt -----From the above, it appears that you will need to raise a technical support case to resolve this issue.You can temporarily subscribe to a Developer plan with a support plan, and then cancel the plan once the support case has been issued and your problem has been resolved.For more information on support plans, please visit the following AWS official website. [3][3] AWS Support Plan Comparison | Developer, Business, Enterprise, Enterprise On-Ramp | AWS Supporthttps://aws.amazon.com/premiumsupport/plans/?nc1=h_lsCommentSharemn87answered 8 months agorePost-User-8527700 8 months agoThanks for the answer, butThere is no way that website with 2k mounty users is in the Alexa Top 1000The Developer support plan has one month of engagement which I don't want to take. The article states that I can open a thread here to have my problem resolved (what I did)Sharemn87 8 months agoI see your point.Indeed, I too read the documentation and thought it was something that could be solved with re:Post.However, when I look into similar questions, I find that in some cases, AWS support engineers guide me to contact AWS support. [1][1] Error message: additional confirmation required | AWS re:Posthttps://repost.aws/questions/QUctAY11fZTM-Tfv9IzSqGbA/error-message-additional-verification-requiredIf your environment is a production environment and you always need to issue ACM certificates, we recommend that you contact AWS Support.It is difficult for me to provide further assistance, but I hope the above is helpful.Share"


Question: Gamelift Managed Linux Servers Lock Up (Question includes a workaround)

There appears to be a bug in GameLift Managed Linux hosting where standard output is redirected by the process that starts the server executable and is not being read from which causes the server to hang once the buffer fills up.  This is happening with a normal UE4 server.A workaround is to not use standard output or redirect standard output to /dev/null in the game server executable.  I don't know if this is just an issue with my server or if other people are having the same issue which is why I am asking this question and providing a workaround.If anyone from AWS can take a look at the server wrapper and see if this is an issue with all managed servers it would be helpful.  It should be a fairly easy fix to implement in the wrapper code.  Hopefully this helps anyone having the same issue.FollowComment

Answer: "0Hello,Thank you for reaching out to us regarding the above query. As mentioned by you, For a long term solution, the recommendation is to redirect stdout to a file, and provide the log path to GameLift via LogParameters. This way you can access the log files via the API GetGameSessionLogUrl without having to ssh onto the host. You can periodically clear the buffer using fflush which moves the stream to the desired destination (console in case of stdout / file in case stdout has been redirected to a file).Having said that, In order to troubleshoot the behaviour being observed, please feel free to open a support case with AWS using the following link as we would require specification of your setup.Thank youCommentShareSUPPORT ENGINEERMukul_Vanswered 19 days ago"


Question: Stop or force stop instance does not works

"Hi,My instance i-0ed9b79ca00cfe193 doesn't get out of stopping state, force stop don't work too.Can you please stop and start it to get the system back online?ThanksFollowComment"

Answer: 0my instance is back after 15minCommentSharesdavidfranswered 2 years ago


Question: `alter table if exists` raises an error on Amazon RDS Postgresql 15.2

"On most instances of Postgres I've tried, this query works just fine if my_table does not exist:alter table if exists public.my_table add column foo boolean;NOTICE:  relation "my_table" does not exist, skippingALTER TABLEI've tried on multiple Postgres versions, including 15.2.However, on AWS RDS specifically, their 15.2 version will raise an error if the table does not exist:=> alter table if exists public.my_table add column foo boolean;ERROR:  relation "public.my_table" does not existThis does not appear to be an issue with other versions of RDS Postgres.Any idea why this might be happening? Is there a parameter that's flipped on in 15.2 by default that causes this to happen?FollowComment"

Answer: "0It is possible that the behavior you are observing with the alter table if exists statement on AWS RDS 15.2 is due to differences in configuration settings compared to other Postgres installations you have used.One configuration setting that may be relevant is search_path (SHOW search_path;), which determines the order in which schemas are searched when looking for database objects. By default, the search_path on AWS RDS may include the "$user", public schema, while on other installations it may only include public. If the table my_table does not exist in any of the schemas listed in the search_path, the if exists clause may not be able to correctly skip the alter table statement.To verify if this is the case, you can try modifying the search_path to only include public before running the alter table if exists statement, like so:set search_path = public;alter table if exists public.my_table add column foo boolean;If this works without raising an error, then it suggests that the issue may indeed be related to the search_path configuration.You can also try using the fully qualified name of the table, including the schema, to see if this avoids the error on AWS RDS 15.2:alter table if exists "public"."my_table" add column foo boolean;If neither of these options work, it may be worth checking the AWS RDS documentation or contacting AWS support to see if there are any other configuration differences that could be causing this behavior.CommentSharemishdaneanswered 2 months agoacco 2 months agoHey there – this was a good idea, but I already checked if search_path settings made an impact and they didn't.Share"


Question: Jupyter Lab showing dead kernal on EMR notebook

Jupyter Lab showing dead kernel on EMR notebook though I had initialized the notebook only using a cluster. Its showing that the workspace is not attached to a cluster. I have followed the steps as given in the documentation. Any help would be highly appreciatedFollowComment


Question: Multi-AZ DB Cluster Parameter Group Updating Not Working

"Note: Aurora Clusters are not the same as Multi-AZ DB Clusters. In my situation I am not using Aurora.I have been having no success trying the change my Multi-AZ DB Cluster parameter group in the region N. Virginia, so I decided to give it a try in the Ohio region. What I noticed is a difference in the UI for inspecting a writer/reader node in the cluster.Virginia Region:Ohio Region:This difference in UI between the regions is strange and I feel it may be some sort of bug. With Multi-AZ DB Clusters the writer/reader nodes are supposed to get their parameter group configuration from the "cluster" and so not showing it in the Ohio version makes sense because it's based on the cluster.The Virginia version is showing the writer/reader parameter group as if it IS the cluster node (by displaying way more information than the Ohio region version). This doesn't make sense and even when I do change the cluster's parameter group when modifying the cluster itself, the writer/reader nodes DO NOT change their parameter group. They stay the same using the default: default:mysql-8-0.Even creating the cluster with a custom parameter group from the very beginning, the writer/reader nodes do no accept it, they keep: default:mysql-8-0.This is very confusing and not in-line with what the documentation describes when dealing with this functionality.FollowComment"

Answer: "0I was able to get the parameter group changed and verified using the AWS RDS CLI tool. Once the change was made via the CLI, the UI still DID NOT reflect the changes.I am going to sum this up to a UI/Javascript bug in the AWS console.How to do it via CLI:aws rds modify-db-cluster --db-cluster-identifier {your-cluster-id} --db-cluster-parameter-group-name {your-cluster-parameter-group-id} --apply-immediatelyThen restart cluster (also something I cannot do in the UI)aws rds reboot-db-cluster --db-cluster-identifier {your-cluster-id}Guides:CLI tool install:https://docs.aws.amazon.com/cli/latest/userguide/getting-started-install.html#getting-started-install-instructionsCLI tool configuration:https://docs.aws.amazon.com/cli/latest/userguide/getting-started-quickstart.htmlCommentSharerePost-User-4225246answered 7 months ago"


Question: Workmail user and email address doesn't show up in the Workmail console but can't be recreated

A certain user doesn't show up in the Workmail AWS console but can't be created because an error message says the user already exists. This means the user's password can't be reset which means the mailbox can't be accessed as the password for the account is unknown. The user's email address isn't being used as a group address either.Anybody seen this happen and been able to resolve it?FollowComment

Answer: "0Hi,Is the specific user different from other users? Resetting the password in the directory should be possible as well but the user likely does not have a mailbox in WorkMail if its not shown in the WorkMail console.Kind regards,RobinCommentShareMODERATORrobinkawsanswered 3 months agorePost-User-8414110 3 months agoUnfortunately I was incorrect, the user doesn't show up in the global address list in the workmail web app.Share"


Question: Clarification on matchmaking rule set relax expansions

"I was going through the first example rule set in the GameLift documentation, which can be found here. Then I came across these bullet points:If the match is not filled quickly, relax the player skill requirement to complete a match in reasonable time.After 5 seconds, expand the search to allow teams with average player skills within 50 points.After 15 seconds, expand the search to allow teams with average player skills within 100 points.And here is the expansion portion of the rule set,"expansions": [{    "target": "rules[FairTeamSkill].maxDistance",    "steps": [{        "waitTimeSeconds": 5,        "value": 50    }, {        "waitTimeSeconds": 15,        "value": 100    }]}]My question is, what does it mean when it says "if the match is not filled quickly"? Does this mean after 5 seconds from when a matchmaking ticket is created, relax the match requirements by 50 points for that ticket? Or does it mean something else? Just trying to better quantify the statements above. For example, when it says "after 5 seconds", 5 seconds after what exactly? And for how many tickets, if not all? And will these relax wait times be reset once a match does get found? Thank you to anyone who replies!FollowComment"

Answer: "0Accepted AnswerApologies for the vague statements here. I would urge you to use the "Provide Feedback" link on any pages like this to ask for clarification.At the heart of FlexMatch is the notion of grouping players into into a session and the rule expansion times are relative to that creation time of a potential match. FlexMatch is evaluating in coming tickets and trying to place them in existing matches, or making new potential matches.This is the best public statement I could find on what FlexMatch is doing (ticket pool is all the open requests for a matchmaker)"To find player matches for a regular (non-large) match, the matchmaker makes continual passes through the ticket pool. On each pass, the matchmaker starts with the oldest ticket in the pool and evaluates the other tickets against it to find the best possible matches. A matchmaker's rule set determines (1) how many teams to create for a match, (2) the number of players to assign to each team, and (3) how to evaluate each prospective player. Rules might set requirements for individual players, teams, or matches. For example, a rule might require all matched players to have a certain talent, or it might require at least one player on a team to play a certain character. A commonly used rule requires that all players in a match have similar skill ratings. "https://docs.aws.amazon.com/gamelift/latest/developerguide/gamelift-match.html#gamelift-match-howitworksThe relaxation rules apply to the potential matches being evaluated ie how long they have been open for evaluation. In each pass over the ticket pool we could create 10s of matches, or non could be created.So:How many tickets? Could be all the tickets in your open ticket pool and any created for x seconds afterwards. Could be just x based on your team sizes and matching criteria.Expansion times are on a per match basis. They are related to the creation time of a potential match.CommentSharerePost-User-5332620answered 3 years ago"


Question: How to set route table as non-main?

I don't see edit option of it.  I am using VPC console route table option.ThxFollowComment

Answer: "3Accepted AnswerSee the instructions here: https://docs.aws.amazon.com/vpc/latest/userguide/WorkWithRouteTables.html#Route_Replacing_Main_TableCommentShareEXPERTTushar_Janswered 19 days agoEXPERTiBehrreviewed 18 days ago2The main route table is the default route table that every VPC has, and it's automatically associated with every subnet that you create, which doesn't have an explicit association with any other route table.You cannot change a main route table to a custom one directly, or vice versa. However, what you can do is create a new custom route table, configure it as desired, and then change the association of your subnets from the main route table to the new custom route table.CommentShareEXPERTsdtslmnanswered 17 days ago"