Question: Tutorial Blend Map

"First of all, forgive me for my bad English.First of all, forgive me for my bad English.Today I want to make a small example mix 2 "Materials" on the same plane.for this we will use a few simple materials and a cubefirst we will create a new material and in the shader generation params sction we will abilitate the blendplayer option, 4 new slots will be added to add texture maps and a few varoiables in the shader paramsREMOVEDUPLOADREMOVEDUPLOADnoew we will add rhe diffuse and normal map brick texture, in the diffuse map and normal map respectively and the diffuse and normal texture of concrete in second diffuse map and second normal map respectively.in blend map we will add the following textureREMOVEDUPLOADand noew we can play with the values of shaders paramskeep ind mind that if we want tu put a texture of paint on the bricks is not advisable to use a second normal map sice the paint depends on the normal brick mapI hope you can understand and luck in your projectsFollow"

Answer: "0Fantastic work @REDACTEDUSERSharerePost-User-5738838answered 6 years ago0This is wonderful! Thank you for sharing!SharerePost-User-8353690answered 6 years ago0thanks to you for giving us this great gaming engine, I just want the community to growSharerePost-User-4573640answered 6 years ago0+1SharerePost-User-5738838answered 6 years ago"


Question: How to configure Beanstalk Nodejs Nginx server to serve a nodejs app and also other static apps built using Angular?

"Hi,I am using AWS Beanstalk to run a Nodejs 18 nginx server using a Procfile and it is working.I tried to configure it using Nginx config files to show other static files and also single-page apps built using Angular but the server can't return them.These are my nginx conf files.in nginx.conf#Elastic Beanstalk Nginx Configuration Fileuser                    nginx;error_log               /var/log/nginx/error.log warn;pid                     /var/run/nginx.pid;worker_processes        auto;worker_rlimit_nofile    31486;events {    worker_connections  1024;}http {    server_tokens off;    include       /etc/nginx/mime.types;    default_type  application/octet-stream;    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '                      '$status $body_bytes_sent "$http_referer" '                      '"$http_user_agent" "$http_x_forwarded_for"';    include       conf.d/*.conf;    map $http_upgrade $connection_upgrade {        default     "upgrade";    }    server {        listen        80 default_server;        access_log    /var/log/nginx/access.log main;        client_header_timeout 60;        client_body_timeout   60;        keepalive_timeout     60;        gzip                  off;        gzip_comp_level       4;        gzip_types text/plain text/css application/json application/javascript application/x-javascript text/xml application/xml application/xml+rss text/javascript;        # Include the Elastic Beanstalk generated locations        include conf.d/elasticbeanstalk/*.conf;    }}in conf.d/elasticbeanstalk/application.conflocation / {    try_files $uri $uri/ /index.html;}location /singlePageApp/ {  if (!-e $request_filename){    rewrite ^/singlePageApp/(.*)$ /singlePageApp/index.html break;  }}location /nodeApp/ {    # Proxy requests to Node.js app running on port 8080    proxy_pass          http://127.0.0.1:8080;    proxy_http_version  1.1;    proxy_set_header    Connection          $connection_upgrade;    proxy_set_header    Upgrade             $http_upgrade;    proxy_set_header    Host                $host;    proxy_set_header    X-Real-IP           $remote_addr;    proxy_set_header    X-Forwarded-For     $proxy_add_x_forwarded_for;}FollowComment"

Answer: "0Accepted AnswerHi from what you were writing I understand, that you want to bypass the nodejs server to serve your static files for the single page app.To do so you have to point nginx to the right folder in the file system where Elastic Beanstalk deployed your app to.You do so with the root element, e.g. root /var/www/main;.For more detailed information see  https://www.nginx.com/blog/creating-nginx-rewrite-rules/ and https://www.digitalocean.com/community/tutorials/understanding-nginx-server-and-location-block-selection-algorithms.If runtime/performance is not an issue it might be easier to configure your nodejs server to serve the static files for the single page app, too andproxy_pass the location /singlePageApp/ accordingly, too.CommentShareNormananswered a month agorePost-User-230101 25 days agoThank you, I figured it out after reading the digital ocean document.I wasn't trying to bypass the nodejs server to serve my static files for the single page appbut the nodejs server was built using Angular Universal which is a standalone nodejs app so it doesn't have access to the other files by default.Btw, the root for Elastic Beanstalk is root /var/app/current;Share"


Question: I am not able to connect to internet in my EC2 Linux instance

"I have an EC2 Amazon linux instance when I connect to it via browser or via putty, I am not able to connect to the internet. means i am not able to do tasks like:a. sudo apt updateb. install any python libraries via pipwhen I check for internet using ping 8.8.8.8, I only end up getting this -- "PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data."I couldn't find a solution for it.I followed the steps mentioned here but no use: https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Internet_Gateway.html#vpc-igw-internet-accessAny help would be greatly appreciated. thanksFollowComment"

Answer: 0How are you reaching your instance via putty?  VPN or Direct Connect for example?If you want the instance to be public then give it a public IP and ensure you have a default route in its subnet route table for 0.0.0.0/0 to the Internet Gateway (this makes it a public subnet).  Have your instance's security group allow all outbound traffic.  Have your subnet ACLs open as default.If you want only outbound internet access then out it in a "NAT" subnet with a default route to a NAT Gateway that's in a public subnet.CommentShareEXPERTskinsmananswered 2 months ago


Question: Problem while visualizing Robot in Gazebo: unable to prepare context: path "image/." not found

"I'm following the Running a sample application with ROS Melodic and Gazebo 9 tutorial and I have made three directories, the first one, called HelloWorldSampleAppROSMelodicGazebo9 that contains only the Dockerfile for the base image, the second one, called HelloWorldSampleAppROSMelodicGazebo9RobotApp, that contains the Dockerfile for the robotic application and the robot-entrypoint.sh and the last one, HelloWorldSampleAppROSMelodicGazebo9SimApp, with the Dockerfile for the simapp and the simulation-entrypoint.sh file.The point is that, when I run the following command:$ docker build -t helloworldsampleapprosmelodicgazebo9robotapp:latest image/.inside the folder for the robot image, I obtain the following error:unable to prepare context: path "image/." not foundThe same happens when I try to build the docker image for the simapp.What is the source of this error?FollowComment"


Question: 3D RAM as register

"I am creating a 3 D signal as shown below and I understand that this would be implemented as register."logic \[N-1:0]\[N-1:0]\[1:0] X;"But When I run synthesis with N=64   it works perfectly while for N=128, synthesis is stuck at warning as shown below. Is it too much large number of registers to run on vertex ultrascale plus FPGA ?"WARNING: \[Synth 8-5856] 3D RAM X_reg_reg  for this pattern/configuration is not supported. This will most likely be implemented in registers"How can I know numbers of block RAM instances and their characteristics (such as maximum width etc) is supported by particular F1 instance ?Edited by: aiquanta on Jul 18, 2021 4:49 AMEdited by: aiquanta on Jul 18, 2021 4:49 AMEdited by: aiquanta on Jul 18, 2021 4:50 AMEdited by: aiquanta on Jul 18, 2021 4:51 AMEdited by: aiquanta on Jul 18, 2021 4:51 AMFollowComment"

Answer: "0Hi aiquanta,Xilinx publish detailed information on primitives supported by a specific device architecture in its architecture libraries guide. Here is an example: https://www.xilinx.com/support/documentation/sw_manuals/xilinx2021_1/ug974-vivado-ultrascale-libraries.pdf. Most time, you should be able to find answers from this document. Xilinx forum will be another good source for finding this type of information. Regarding to the warning [Synth 8-5856], I think you're right. By switching to 128, it's very likely that it breaks some implicit rules set for the maximum BRAM cascading number or something similar.In addition, I would strongly recommend you to follow the Xilinx's guidance on the coding style for primitive inference (Here is a reference, https://www.xilinx.com/support/documentation/sw_manuals/xilinx2021_1/ug974-vivado-ultrascale-libraries.pdf). There is a small chance sometimes the synthesizer might not be able to interpret the code correctly. It would be good to avoid that as much as possible. Hope this helps you.Thanks,ChenCommentShareAWS-zhczanswered 2 years ago"


Question: Is IoT Core support Qos2?

"Somebody told that Iot Core supports QoS2, I am going to start a project and would like to confirm this.ThanksFollowComment"

Answer: "2Hi Ozi, while at the moment AWS IoT Core does not support QoS2, it would be interesting to understand why you need support for it. If you are designing a new system, you should make it idempotent instead of relying on exact once processing semantics. Idempotent systems scale better and are more resilient to failures. With an idempotent implementation, QoS1 (at least once) is sufficient.Cheers,MassiCommentShareEXPERTMassimilianoAWSanswered 9 months agoOzy smile 9 months agoAfter reading more about the QoS2 levels, seems like level 1 will be enough. Only need to handle duplicates.If I have 3 seccond so of frequency, will this duplication be problem? that was the reason I was  thinking about level2.Share1Accepted AnswerHi Ozy smile. AWS IoT Core does not support QoS2 at this time. https://docs.aws.amazon.com/iot/latest/developerguide/mqtt.html#mqtt-qosAWS IoT and the AWS IoT Device SDKs support the MQTT Quality of Service (QoS) levels 0 and 1. The MQTT protocol defines a third level of QoS, level 2, but AWS IoT does not support it. Only the MQTT protocol supports the QoS feature. HTTPS supports QoS by passing a query string parameter ?qos=qos where the value can be 0 or 1.CommentShareEXPERTGreg_Banswered 9 months ago0thank you for quick reply.CommentShareOzy smileanswered 9 months agoGreg_B EXPERT9 months agoNo worries. Please consider to accept my answer so I get the precious 10 points. :-)Share"


Question: Alternative solution for Amazon Keyspaces Logged batches

"Our team decided to move with Amazon Keyspaces from self-hosted Cassandra. After configuring with Amazon Keyspaces I found that logged batches are not supported. In our solution, there are multiple cases where it requires to use of logged batches.Ex: We have a few tables where we are propagating data, in order to have different primary keys for fast querying. Logged batches use here to maintain consistency in all tables.Is there any alternative solution to this type of scenario in Amazon Keyspace?FollowComment"


Question: How to connect to RDS My Sql Server instance which is in application VPC and Private subnets

How to connect to RDS My Sql Server instance which is in application VPC and within Private subnets from internet.FollowComment

Answer: "0Does your application live in the VPC private subnet as well and you want to access the application?If so, you can set up an Elastic Load Balancer that provides access to the application from the Internet.If you want to provide access to the database from the Internet (which I wouldn't recommend),  you could use a Network Load Balancer to do that.  Best practice, you can deploy an API via API Gateway that fetches the results when someone uses it.  This will allow you to provide access to the data without giving direct access to the database.CommentShareCarlos del Castilloanswered a month agorePost-User-6167021 a month agoHey, Thank you for your response.I do have this rds in pivate subnets with Public accessibility as No. And now my db team wants to access it with MySQL server studio or Myworkbench to connect to it.What will be the recommended way for this.Share"


Question: CodeBuild vs CodePipeline with Bitbucket Cloud Repo

"I created a CodeBuild project for a .Net Framework repo in BitBucket cloud.The project is using OAuth to connect to BB Cloud.The build runs successfully and creates artifacts in S3.Next, I created a CodePipeline using this CodeBuild project.The pipeline wizard forces me to select a Bitbucket app or create a new one to connect to the BB Cloud repo.  I've tried using the apps there as well as using the install new app method and have the same problem outlined below.  The apps that are already installed were created with my AWS account.Problem: I am getting a build error when trying to pull from the Bitbucket cloud repo.The build error is:authorization failed for primary source and source versionI have a user in my Bitbucket Cloud repo with admin privs for my AWS email...which is why my CodeBuild project works.So I'm not sure why I am still having this problem via the Pipeline using the same codebuild.Any thoughts?FollowComment"

Answer: "0You might want to try to ensure you followed the steps here to setup auth between CodePipeline and BB Cloud. (you might already done some of those)Then, ensure you choose "Full clone" in Output artifact format, and then follow the instructions here to update the CodeBuild project service role.CommentShareJason_Sanswered a year ago0Thank you for that suggestion.CommentShareClint Carteranswered a year ago"


Question: EC2 instance stuck at shutting down

"Hi,I have an EC2 instance, i-06a803bdd32511d74 that is stuck at 'shutting-down' been like this for 90 mins.Could this be terminated please ?CheersFollowComment"

Answer: 0Instance has now terminated.CommentSharedxh1973answered 3 years ago


Question: How to update Elastic Beanstalk instance to Graviton

"I logged into the AWS Console this week and saw the following message:AWS Graviton now supported AWS Graviton, an arm64-based processor, can offer up to 40% better price performance over the comparable x86 processor. To upgrade to an arm64 instance type, choose it in the 'Capacity' settings in 'Additional configuration.'I am having trouble finding the 'Capacity' settings in 'Additional configuration.'. Where is this located? Is there a guide available on how to do this?I've already reviewed the following resources:https://github.com/aws/aws-graviton-getting-startedhttps://aws.amazon.com/about-aws/whats-new/2021/11/elastic-beanstalk-aws-graviton-ec2/FollowComment"

Answer: "0Hello,I understand that you are trying to update Elastic Beanstalk instance to AWS Graviton.In the Elastic Beanstalk console, select your environment, and on the navigation pane a drop down will appear, click Configuration, in here different types of configurations will appear. Since you want to change the instance type, click Edit next to Capacity as your configuration option.Under Modify capacity you will see different configurations in which Instance types is included.By default, Elastic Beanstalk selects the x86 processor architecture when you create a new environment. You can choose the processor architecture (x86, arm64) for the instance types only when you’re creating a new environment. After you create an environment, you can only change the instance types to others within the same processor architecture of your running environment. You can't change the processor architecture.For a list of Graviton image IDs for each supported platform branch and Region, see Graviton image IDs for supporting platforms on this page.I hope this information is helpful.CommentShareLungaanswered a year agomalcolmmcfly a year ago@Lunga if I understand you correctly, you said:"After you create an environment, you can only change the instance types to others within the same processor architecture of your running environment."Currently my instance types are: t2.micro and t2.small, and my AMI ID is: ami-0329b80de801a0663Would this imply that I am sort of locked in and would need to create a new instance using arm64 from the start?I do see that the above AMI ID is editable. I suppose modifying that to:64bit Amazon Linux 2 v5.4.6 running Node.js 14ami-0b35d2f960c29d3d7Would do anything?Share"


Question: Elastic IP address not attached to a running instance per hour

"Hi,My Billing Details show that i am being charged for the Elastic IP address which is not associated to any instance. I checked multiple regions (the ones which i have used) but i am not able to see any elastic IP address anywhere.How do i stop this charge?FollowComment"

Answer: "0Hello,I have checked your account but I don't see any EIPs in it.However I can see that you released 1 EIP from ap-south-1 on 2019-01-16 and 4 EIPs from ap-southeast-1 (1 on 2019-01-15 and 3 on 2019-01-17). I assume that your issue has been resolved by now but please let us know if you need any further help.Regards,awstomasCommentShareAWS-User-3892169answered 4 years ago0Thanks for the response. I believe I am not charged on the EIP anymore now. However, I am not sure why my put requests are increasing when I am not even using any S3 bucket. Can you please help me with that as well? Is there any such service which I am using which uses S3 bucket in background?Thanks,GarimaCommentSharegarimaanswered 4 years ago"


Question: Custom Resources Lifecycle

"I am building some custom resources and had a question around the lifecycle of a stack.When I create a stack with my resource defined in my yaml file, my custom python script runs the create event and receives the data to create the resources. Now the resources return an ID that will be needed to remove the resource if it is updated or backed out.Where is this ID stored if I return it, I thought the physicalresourceid would be the place but it has been replaced with2021/02/09/[$LATEST]add1787e220941c189a343f683da7ea1.thanks in advanceFollowComment"

Answer: 0Ok i found the issue the helper i used had a bug in it. It was storing the wrong data in the fieldCommentSharem66rusanswered 2 years ago


Question: Hudi and S3 object versions

"We are currently using HUDI for upserts via AWS Glue.  We also have S3 bucket versioning applied on the bucket where HUDI is running on. My question is related to previous versions of objects, if we delete the previous version of an object will that impact the HUDI operation or is it the case that HUDI only works on the latest version of the object?FollowComment"

Answer: "0Per my understanding, HUDI works on the latest version of the S3 object. Hence deleting an older version of object shouldn't cause issues with HUDI upserts. You may want to look into S3 delete markers and deleting object version ID in that case - https://docs.aws.amazon.com/AmazonS3/latest/userguide/DeletingObjectVersions.htmlCommentShareMeghana_Sanswered a year ago"


Question: "whitelist international ip address, but unable to access rds MYSQL"

"i'm trying to add several IP addresses from other countries, to sercuity group in RDS MYSQL database. Why would these not work? Is there a setting that restricts to host country, as i'm able to access here.FollowCommentRodney Lester a year agoIt's possible that the port is blocked by some part of the connection between the other countries and the AWS region. Have you looked at where the RST is being sent from?Share"

Answer: "0Is you RDS instance in a public subnet and Public access option set to Yes? If you select No, Amazon RDS will not assign a public IP address to the DB instance, and no EC2 instance or devices outside of the VPC will be able to connect.Can you runnslookupto your RDS instance's domain name?CommentShareAWS-User-9004726answered a year ago"


Question: EMR: Terminated with errors Bootstrap failure

"I am just trying to build a cluster with hadoop, hive and spark preinstalled on emr-5.23.0. Till today morning it was working fine and suddenly it started failing with the below error and the cluster getting terminated: Terminated with errors Bootstrap failure.I tried to capture the errors before the cluster dies off:master.log[ec2-user@ip-00-000-000-00 ~]$ cat /mnt/var/log/bootstrap-actions/master.log2019-04-16 19:08:42,443 INFO i-078302fec7edd117b: new instance started2019-04-16 19:08:42,451 ERROR i-078302fec7edd117b: failed to start. bootstrap action 1 failed with non-zero exit code.2019-04-16 19:09:25,805 INFO i-02fc7b0d9e6815b8d: new instance started2019-04-16 19:09:27,826 INFO i-02fc7b0d9e6815b8d: all bootstrap actions complete and instance ready2019-04-16 19:10:00,812 INFO i-0261bda9ec7074d13: new instance started2019-04-16 19:10:03,482 INFO i-0261bda9ec7074d13: all bootstrap actions complete and instance readycloud-initApr 16 19:04:23 cloud-init[4713]: util.py[WARNING]: Running module yum-configure (<module 'cloudinit.config.cc_yum_configure' from '/usr/lib/python2.7/dist-packages/cloudinit/config/cc_yum_configure.pyc'>) failedApr 16 19:04:23 cloud-init[4713]: util.py[DEBUG]: Running module yum-configure (<module 'cloudinit.config.cc_yum_configure' from '/usr/lib/python2.7/dist-packages/cloudinit/config/cc_yum_configure.pyc'>) failedTraceback (most recent call last):File "/usr/lib/python2.7/dist-packages/cloudinit/stages.py", line 660, in _run_modulescc.run(run_name, mod.handle, func_args, freq=freq)File "/usr/lib/python2.7/dist-packages/cloudinit/cloud.py", line 63, in runreturn self._runners.run(name, functor, args, freq, clear_on_fail)File "/usr/lib/python2.7/dist-packages/cloudinit/helpers.py", line 197, in runresults = functor(args)File "/usr/lib/python2.7/dist-packages/cloudinit/config/cc_yum_configure.py", line 53, in handleraise errors[-1]KeyError: 'regional'Apr 16 19:04:23 cloud-init[4713]: stages.py[DEBUG]: Running module yum-add-repo (<module 'cloudinit.config.cc_yum_add_repo' from '/usr/lib/python2.7/dist-packages/cloudinit/config/cc_yum_add_repo.pyc'>) with frequency once-per-instanceApr 16 19:04:23 cloud-init[4713]: util.py[DEBUG]: Writing to /var/lib/cloud/instances/i-078302fec7edd117b/sem/config_yum_add_repo - wb: [644] 20 bytesApr 16 19:04:23 cloud-init[4713]: helpers.py[DEBUG]: Running config-yum-add-repo using lock (<FileLock using file '/var/lib/cloud/instances/i-078302fec7edd117b/sem/config_yum_add_repo'>)Apr 16 19:04:23 cloud-init[4713]: cc_yum_add_repo.py[INFO]: Skipping repo emr-platform, file /etc/yum.repos.d/emr-platform.repo already exists!Apr 16 19:04:23 cloud-init[4713]: cc_yum_add_repo.py[INFO]: Skipping repo emr-apps, file /etc/yum.repos.d/emr-apps.repo already exists!Apr 16 19:04:23 cloud-init[4713]: stages.py[DEBUG]: Running module package-update-upgrade-install (<module 'cloudinit.config.cc_package_update_upgrade_install' from '/usr/lib/python2.7/dist-packages/cloudinit/config/cc_package_update_upgrade_install.pyc'>) with frequency once-per-instanceApr 16 19:04:23 cloud-init[4713]: util.py[DEBUG]: Writing to /var/lib/cloud/instances/i-078302fec7edd117b/sem/config_package_update_upgrade_install - wb: [644] 20 bytesApr 16 19:04:23 cloud-init[4713]: helpers.py[DEBUG]: Running config-package-update-upgrade-install using lock (<FileLock using file '/var/lib/cloud/instances/i-078302fec7edd117b/sem/config_package_update_upgrade_install'>)Apr 16 19:04:23 cloud-init[4713]: amazon.py[DEBUG]: Upgrade level: securityApr 16 19:04:23 cloud-init[4713]: util.py[DEBUG]: Running command ['yum', '-t', '-y', '--exclude=kernel', '--exclude=nvidia', '--exclude=cudatoolkit', '--security', '--sec-severity=critical', '--sec-severity=important', 'upgrade'] with allowed return codes [0] (shell=False, capture=False)Apr 16 19:05:24 cloud-init[4713]: util.py[WARNING]: Package upgrade failedApr 16 19:05:24 cloud-init[4713]: util.py[DEBUG]: Package upgrade failedTraceback (most recent call last):File "/usr/lib/python2.7/dist-packages/cloudinit/config/cc_package_update_upgrade_install.py", line 81, in handlecloud.distro.upgrade_packages(upgrade_level, upgrade_exclude)File "/usr/lib/python2.7/dist-packages/cloudinit/distros/amazon.py", line 50, in upgrade_packagesreturn self.package_command('upgrade', args=args)File "/usr/lib/python2.7/dist-packages/cloudinit/distros/rhel.py", line 211, in package_commandutil.subp(cmd, capture=False, pipe_cat=True, close_stdin=True)File "/usr/lib/python2.7/dist-packages/cloudinit/util.py", line 1626, in subpcmd=args)ProcessExecutionError: Unexpected error while running command.Command: ['yum', '-t', '-y', '--exclude=kernel', '--exclude=nvidia*', '--exclude=cudatoolkit', '--security', '--sec-severity=critical', '--sec-severity=important', 'upgrade']Exit code: 1Reason: -Stdout: ''Stderr: ''Apr 16 19:05:24 cloud-init[4713]: cc_package_update_upgrade_install.py[WARNING]: 1 failed with exceptions, re-raising the last oneApr 16 19:05:24 cloud-init[4713]: util.py[WARNING]: Running module package-update-upgrade-install (<module 'cloudinit.config.cc_package_update_upgrade_install' from '/usr/lib/python2.7/dist-packages/cloudinit/config/cc_package_update_upgrade_install.pyc'>) failedApr 16 19:05:24 cloud-init[4713]: util.py[DEBUG]: Running module package-update-upgrade-install (<module 'cloudinit.config.cc_package_update_upgrade_install' from '/usr/lib/python2.7/dist-packages/cloudinit/config/cc_package_update_upgrade_install.pyc'>) failedTraceback (most recent call last):File "/usr/lib/python2.7/dist-packages/cloudinit/stages.py", line 660, in _run_modulescc.run(run_name, mod.handle, func_args, freq=freq)File "/usr/lib/python2.7/dist-packages/cloudinit/cloud.py", line 63, in runreturn self._runners.run(name, functor, args, freq, clear_on_fail)File "/usr/lib/python2.7/dist-packages/cloudinit/helpers.py", line 197, in runresults = functor(args)File "/usr/lib/python2.7/dist-packages/cloudinit/config/cc_package_update_upgrade_install.py", line 111, in handleraise errors[-1]ProcessExecutionError: Unexpected error while running command.Command: ['yum', '-t', '-y', '--exclude=kernel', '--exclude=nvidia', '--exclude=cudatoolkit', '--security', '--sec-severity=critical', '--sec-severity=important', 'upgrade']Exit code: 1Reason: -Stdout: ''Stderr: ''Apr 16 19:05:24 cloud-init[4713]: stages.py[DEBUG]: Running module timezone (<module 'cloudinit.config.cc_timezone' from '/usr/lib/python2.7/dist-packages/cloudinit/config/cc_timezone.pyc'>) with frequency once-per-instanceApr 16 19:05:24 cloud-init[4713]: util.py[DEBUG]: Writing to /var/lib/cloud/instances/i-078302fec7edd117b/sem/config_timezone - wb: [644] 20 bytesApr 16 19:05:24 cloud-init[4713]: helpers.py[DEBUG]: Running config-timezone using lock (<FileLock using file '/var/lib/cloud/instances/i-078302fec7edd117b/sem/config_timezone'>)Apr 16 19:05:24 cloud-init[4713]: cc_timezone.py[DEBUG]: Skipping module named timezone, no 'timezone' specifiedApr 16 19:05:24 cloud-init[4713]: stages.py[DEBUG]: Running module puppet (<module 'cloudinit.config.cc_puppet' from '/usr/lib/python2.7/dist-packages/cloudinit/config/cc_puppet.pyc'>) with frequency once-per-instanceApr 16 19:05:24 cloud-init[4713]: util.py[DEBUG]: Writing to /var/lib/cloud/instances/i-078302fec7edd117b/sem/config_puppet - wb: [644] 20 bytesApr 16 19:05:24 cloud-init[4713]: helpers.py[DEBUG]: Running config-puppet using lock (<FileLock using file '/var/lib/cloud/instances/i-078302fec7edd117b/sem/config_puppet'>)Apr 16 19:05:24 cloud-init[4713]: cc_puppet.py[DEBUG]: Skipping module named puppet, no 'puppet' configuration foundApr 16 19:05:24 cloud-init[4713]: stages.py[DEBUG]: Running module disable-ec2-metadata (<module 'cloudinit.config.cc_disable_ec2_metadata' from '/usr/lib/python2.7/dist-packages/cloudinit/config/cc_disable_ec2_metadata.pyc'>) with frequency alwaysApr 16 19:05:24 cloud-init[4713]: helpers.py[DEBUG]: Running config-disable-ec2-metadata using lock (<cloudinit.helpers.DummyLock object at 0x7fb9c0cad810>)Apr 16 19:05:24 cloud-init[4713]: cc_disable_ec2_metadata.py[DEBUG]: Skipping module named disable-ec2-metadata, disabling the ec2 route not enabledApr 16 19:05:24 cloud-init[4713]: stages.py[DEBUG]: Running module runcmd (<module 'cloudinit.config.cc_runcmd' from '/usr/lib/python2.7/dist-packages/cloudinit/config/cc_runcmd.pyc'>) with frequency once-per-instanceApr 16 19:05:24 cloud-init[4713]: util.py[DEBUG]: Writing to /var/lib/cloud/instances/i-078302fec7edd117b/sem/config_runcmd - wb: [644] 20 bytesApr 16 19:05:24 cloud-init[4713]: helpers.py[DEBUG]: Running config-runcmd using lock (<FileLock using file '/var/lib/cloud/instances/i-078302fec7edd117b/sem/config_runcmd'>)Apr 16 19:05:24 cloud-init[4713]: cc_runcmd.py[DEBUG]: Skipping module named runcmd, no 'runcmd' key in configurationApr 16 19:05:24 cloud-init[4713]: cloud-init[DEBUG]: Ran 10 modules with 2 failuresApr 16 19:05:24 cloud-init[4713]: util.py[DEBUG]: Reading from /proc/uptime (quiet=False)Apr 16 19:05:24 cloud-init[4713]: util.py[DEBUG]: Read 15 bytes from /proc/uptimeApr 16 19:05:24 cloud-init[4713]: util.py[DEBUG]: cloud-init mode 'modules' took 140.880 seconds (140.88)Apr 16 19:08:10 cloud-init[5562]: util.py[DEBUG]: Cloud-init v. 0.7.6 running 'modules:final' at Tue, 16 Apr 2019 19:08:10 +0000. Up 483.41 seconds.Apr 16 19:08:10 cloud-init[5562]: stages.py[DEBUG]: Using distro class <class 'cloudinit.distros.amazon.Distro'>Apr 16 19:08:10 cloud-init[5562]: stages.py[DEBUG]: Running module scripts-per-once (<module 'cloudinit.config.cc_scripts_per_once' from '/usr/lib/python2.7/dist-packages/cloudinit/config/cc_scripts_per_once.pyc'>) with frequency onceApr 16 19:08:10 cloud-init[5562]: util.py[DEBUG]: Writing to /var/lib/cloud/sem/config_scripts_per_once.once - wb: [644] 20 bytesApr 16 19:08:10 cloud-init[5562]: helpers.py[DEBUG]: Running config-scripts-per-once using lock (<FileLock using file '/var/lib/cloud/sem/config_scripts_per_once.once'>)Apr 16 19:08:10 cloud-init[5562]: stages.py[DEBUG]: Running module scripts-per-boot (<module 'cloudinit.config.cc_scripts_per_boot' from '/usr/lib/python2.7/dist-packages/cloudinit/config/cc_scripts_per_boot.pyc'>) with frequency alwaysApr 16 19:08:10 cloud-init[5562]: helpers.py[DEBUG]: Running config-scripts-per-boot using lock (<cloudinit.helpers.DummyLock object at 0x7f35a40e08d0>)Apr 16 19:08:10 cloud-init[5562]: stages.py[DEBUG]: Running module scripts-per-instance (<module 'cloudinit.config.cc_scripts_per_instance' from '/usr/lib/python2.7/dist-packages/cloudinit/config/cc_scripts_per_instance.pyc'>) with frequency once-per-instanceApr 16 19:08:10 cloud-init[5562]: util.py[DEBUG]: Writing to /var/lib/cloud/instances/i-078302fec7edd117b/sem/config_scripts_per_instance - wb: [644] 20 bytesApr 16 19:08:10 cloud-init[5562]: helpers.py[DEBUG]: Running config-scripts-per-instance using lock (<FileLock using file '/var/lib/cloud/instances/i-078302fec7edd117b/sem/config_scripts_per_instance'>)Apr 16 19:08:10 cloud-init[5562]: stages.py[DEBUG]: Running module scripts-user (<module 'cloudinit.config.cc_scripts_user' from '/usr/lib/python2.7/dist-packages/cloudinit/config/cc_scripts_user.pyc'>) with frequency once-per-instanceApr 16 19:08:10 cloud-init[5562]: util.py[DEBUG]: Writing to /var/lib/cloud/instances/i-078302fec7edd117b/sem/config_scripts_user - wb: [644] 20 bytesApr 16 19:08:10 cloud-init[5562]: helpers.py[DEBUG]: Running config-scripts-user using lock (<FileLock using file '/var/lib/cloud/instances/i-078302fec7edd117b/sem/config_scripts_user'>)Apr 16 19:08:10 cloud-init[5562]: stages.py[DEBUG]: Running module ssh-authkey-fingerprints (<module 'cloudinit.config.cc_ssh_authkey_fingerprints' from '/usr/lib/python2.7/dist-packages/cloudinit/config/cc_ssh_authkey_fingerprints.pyc'>) with frequency once-per-instanceApr 16 19:08:10 cloud-init[5562]: util.py[DEBUG]: Writing to /var/lib/cloud/instances/i-078302fec7edd117b/sem/config_ssh_authkey_fingerprints - wb: [644] 20 bytesApr 16 19:08:10 cloud-init[5562]: helpers.py[DEBUG]: Running config-ssh-authkey-fingerprints using lock (<FileLock using file '/var/lib/cloud/instances/i-078302fec7edd117b/sem/config_ssh_authkey_fingerprints'>)Apr 16 19:08:10 cloud-init[5562]: util.py[DEBUG]: Reading from /etc/ssh/sshd_config (quiet=False)Apr 16 19:08:10 cloud-init[5562]: util.py[DEBUG]: Read 3935 bytes from /etc/ssh/sshd_configApr 16 19:08:10 cloud-init[5562]: util.py[DEBUG]: Reading from /home/ec2-user/.ssh/authorized_keys (quiet=False)Apr 16 19:08:10 cloud-init[5562]: util.py[DEBUG]: Read 389 bytes from /home/ec2-user/.ssh/authorized_keysApr 16 19:08:10 cloud-init[5562]: stages.py[DEBUG]: Running module keys-to-console (<module 'cloudinit.config.cc_keys_to_console' from '/usr/lib/python2.7/dist-packages/cloudinit/config/cc_keys_to_console.pyc'>) with frequency once-per-instanceApr 16 19:08:10 cloud-init[5562]: util.py[DEBUG]: Writing to /var/lib/cloud/instances/i-078302fec7edd117b/sem/config_keys_to_console - wb: [644] 20 bytesApr 16 19:08:10 cloud-init[5562]: helpers.py[DEBUG]: Running config-keys-to-console using lock (<FileLock using file '/var/lib/cloud/instances/i-078302fec7edd117b/sem/config_keys_to_console'>)Apr 16 19:08:10 cloud-init[5562]: util.py[DEBUG]: Running command ['/usr/libexec/cloud-init/write-ssh-key-fingerprints', '', 'ssh-dss'] with allowed return codes [0] (shell=False, capture=True)Apr 16 19:08:10 cloud-init[5562]: stages.py[DEBUG]: Running module phone-home (<module 'cloudinit.config.cc_phone_home' from '/usr/lib/python2.7/dist-packages/cloudinit/config/cc_phone_home.pyc'>) with frequency once-per-instanceApr 16 19:08:10 cloud-init[5562]: util.py[DEBUG]: Writing to /var/lib/cloud/instances/i-078302fec7edd117b/sem/config_phone_home - wb: [644] 20 bytesApr 16 19:08:10 cloud-init[5562]: helpers.py[DEBUG]: Running config-phone-home using lock (<FileLock using file '/var/lib/cloud/instances/i-078302fec7edd117b/sem/config_phone_home'>)Apr 16 19:08:10 cloud-init[5562]: cc_phone_home.py[DEBUG]: Skipping module named phone-home, no 'phone_home' configuration foundApr 16 19:08:10 cloud-init[5562]: stages.py[DEBUG]: Running module final-message (<module 'cloudinit.config.cc_final_message' from '/usr/lib/python2.7/dist-packages/cloudinit/config/cc_final_message.pyc'>) with frequency alwaysApr 16 19:08:10 cloud-init[5562]: helpers.py[DEBUG]: Running config-final-message using lock (<cloudinit.helpers.DummyLock object at 0x7f35a3d848d0>)Apr 16 19:08:10 cloud-init[5562]: util.py[DEBUG]: Reading from /proc/uptime (quiet=False)Apr 16 19:08:10 cloud-init[5562]: util.py[DEBUG]: Read 15 bytes from /proc/uptimeApr 16 19:08:10 cloud-init[5562]: util.py[DEBUG]: Cloud-init v. 0.7.6 finished at Tue, 16 Apr 2019 19:08:10 +0000. Datasource DataSourceEc2.  Up 483.59 secondsApr 16 19:08:10 cloud-init[5562]: util.py[DEBUG]: Writing to /var/lib/cloud/instance/boot-finished - wb: [644] 52 bytesApr 16 19:08:10 cloud-init[5562]: stages.py[DEBUG]: Running module power-state-change (<module 'cloudinit.config.cc_power_state_change' from '/usr/lib/python2.7/dist-packages/cloudinit/config/cc_power_state_change.pyc'>) with frequency once-per-instanceApr 16 19:08:10 cloud-init[5562]: util.py[DEBUG]: Writing to /var/lib/cloud/instances/i-078302fec7edd117b/sem/config_power_state_change - wb: [644] 20 bytesApr 16 19:08:10 cloud-init[5562]: helpers.py[DEBUG]: Running config-power-state-change using lock (<FileLock using file '/var/lib/cloud/instances/i-078302fec7edd117b/sem/config_power_state_change'>)Apr 16 19:08:10 cloud-init[5562]: cc_power_state_change.py[DEBUG]: no power_state provided. doing nothingApr 16 19:08:10 cloud-init[5562]: cloud-init[DEBUG]: Ran 9 modules with 0 failuresApr 16 19:08:10 cloud-init[5562]: util.py[DEBUG]: Creating symbolic link from '/run/cloud-init/result.json' => '../../var/lib/cloud/data/result.json'Apr 16 19:08:10 cloud-init[5562]: util.py[DEBUG]: Reading from /proc/uptime (quiet=False)Apr 16 19:08:10 cloud-init[5562]: util.py[DEBUG]: Read 15 bytes from /proc/uptimeApr 16 19:08:10 cloud-init[5562]: util.py[DEBUG]: cloud-init mode 'modules' took 0.182 seconds (0.18)There is no additional bootstarp action added by me.Edited by: BurnswickNYC on Apr 16, 2019 1:53 PMFollowComment"

Answer: "0Hi BurnswickNYC,Wow it really sad that no one on the EMR support or service teams have responded to your question at all yet.What I find most helpful in such cluster spin-up situations is to specify path to an S3 bucket key prefix in the log-uri when you spin-up a cluster.  Then EMR will write all the logs to that location before it terminates.After the cluster fails to spin-up you can then look over all the logs at your leisure to find what went wrong.I hopes this help you find some details for your cluster spin-up problem.-KurtCommentShareklarsonanswered 4 years ago0Thanks for the reply, I shall try this out.CommentShareBurnswickNYCanswered 4 years ago0Hey BurnswickNYC,Looking at your failed cluster spin up again on EMR 5.23.0 it looks eerily similar to an EMR bug that I just work thru with EMR support in a support case.  You may be hitting the same thing.There a simple log search that can pattern match it.Once you have your logs being written to S3 by the EMR logpusher, that even happens on failed cluster spinup, here the log search search you can do to see if you hit the same problem.Either in the EMR console from the logs link or in S3 directly navigate to the log for the failed cluster that's in the path like:s3://<bucket>/<prefix>/<cluster_id>/node/<node_id>/provision-node/reports/0/<some_uuid>/<node_private_DNS_name>/<timestamp>.yaml.gzIn that log file search for the string "failed: true".  A pattern match to the problem I encountered will have 2 matches.  The first occurrence of that string is in Puppet step "Exec[add-to-cluster-node-labels]: !ruby/object:Puppet::Resource::Status".  You can see the Puppet step several log lines above the match.  The second occurrence is in the very next Puppet step ""Exec[yarn rmadmin -refreshQueues]": !ruby/object:Puppet::Resource::Status".  Again several log lines above the second match.If you find this pattern you have the same EMR bug.  There is no fix yet, not even in EMR 5.24.0, but there is a workaround.To work around the bug you need to run a configuration classification for YARN config file /etc/hadoop/conf/yarn-site.xml that temporarily moves the YARN node labels for clusters on this EMR version from HDFS to node local disk in your "aws emr create-cluster ..." CLI command.  You can pick anywhere on local disk, but here's what I did on recommendation of EMR support:{"Classification":"yarn-site","Properties":{"yarn.node-labels.fs-store.root-dir":"file:///tmp/hadoop-yarn/nodelabels"}}I hope this helps you (or others) out a bit,-KurtCommentShareklarsonanswered 4 years ago"


Question: Websocket on invoked lambda ignore message and send the last message received instead

"When I invoke a lambda that send data to client through the websocket API, it doesn't send the actual message/payload but the last received.Example:Lambda 1 invoke Lambda 2 with payload "test1" > Lambda 2 send nothing to clientLambda 1 invoke Lambda 2 with second payload "test2" > Lambda send 2 send "test1" to clientLambda 1 invoke Lambda 2 with third payload "test3" > Lambda send 2 send "test2" to clientMy environnement:Nodejs 16lib websocket: AWS.ApiGatewayManagementApi.postToConnectionThere is 0 cache on Websocket API.There is no Error, just weird behaviorFollowComment"

Answer: "0Accepted AnswerI found the answer, change forEach loop to a for loop.from:items?.forEach(async (item) => {  await apigwManagementApi.postToConnection(params).promise()});to:for (const item of items) {  await apigwManagementApi.postToConnection(params).promise()}I can't explain it, but it works, message are sent instantly to websocket.CommentSharerePost-User-4719546answered 7 months ago0The issue is the way Node.js works. You are calling postToConnection, but what actually happens is that an event is added to the Node.js event loop. It is not performed immediately. You get to the end of the function and the run-time is frozen. At the point we do not handle the rest of the events until you invoke the function again. We then unfreeze the run-time and handle the next event.To fix it, you should use await when calling postToConnection.CommentShareEXPERTUrianswered 7 months ago0Hello @Uri, thank you for answering.Unfortunately, this is already the case, I am already using async/await :const AWS = require("aws-sdk");const apigwManagementApi = new AWS.ApiGatewayManagementApi({  endpoint: process.env.WEBSOCKET_DOMAIN_NAME});const dynamo = new AWS.DynamoDB.DocumentClient({ region: process.env.AWS_REGION });/** * Send Websocket Message */const websocketSendMessage = async (connectionId, data) => {  const params = {    ConnectionId: connectionId,    Data: JSON.stringify(data)  };  await apigwManagementApi.postToConnection(params).promise();  return;};/** * Handler */const handler = async (event) => {  const { userId, data } = event;  // Retrieve all connectionId of user from DynamoDB  let items;  const dynamoItem = await dynamo.scan({    TableName: process.env.DYNAMO_TABLE_NAME,    FilterExpression: "userId = :userId",    ExpressionAttributeValues: { ":userId": userId }  }).promise();  items = dynamoItem.Items;  // Send websocket message for each websocket client of user  items?.forEach(async (item) => {    await websocketSendMessage(item.connectionId, data);  });  return { statusCode: 200 };};CommentSharerePost-User-4719546answered 7 months ago"


Question: Centralized lambda subscription

I need to configure lambda function subscription across multiple accounts. These lambda functions are used for log ingestion to a third party application. I need a solution that works across different accounts . Right now these lambda functions subscriptions are per account therefore not a centralized solution.FollowComment

Answer: 0Accepted AnswerLambda function cross-account subscription is not available right now. However You can use a Lambda function in one AWS account to subscribe to an Amazon SNS topic in a separate AWS account. details https://docs.aws.amazon.com/lambda/latest/dg/with-sns-example.html.Can you provide more details of what exactly you are looking to configure ?CommentSharemojtothanswered 3 months ago


Question: Step Function Retry Metrics

Does Step Functions have metrics for how many times it retried to execute a state?FollowComment

Answer: 0The following is the list of Step Functions metrics. Retries is not in there.CommentShareEXPERTUrianswered a year ago


Question: Calling Private API from Lambda in VPC

"Hi,A customer is trying to invoke a private API Gateway from a Lambda in a VPC, there is a VPC endpoint configured in the VPC pointing to the private API Gateway.  They are able to invoke the private API Gateway from an EC2 instance in the same VPC via the VPC endpoint, however if they try and do the same from the Lambda in the VPC they get no response.  The resource policy on the private API Gateway is configured to allow all traffic from the VPC.Does anyone know if this is a viable configuration and if so any references would be much appreciated.  If this is not a viable configuration is it because the Lambda is actually in an AWS managed VPC so can't use the VPC endpoint in the customer VPC?Even after a lot of searching I can't find any references to calling a private API Gateway from a Lambda so any help would be really appreciatedFollowComment"

Answer: 0Accepted AnswerThis blog post has an example of a VPC attached Lambda function invoking a private API Gateway.CommentShareEXPERTPawan-AWSanswered 3 years ago


Question: I accidentally deleted RBAC from EKS lost access to EKS Cluster

"I accidentally deleted RBAC because I was initially trying to solve a completely different issue related to kube-apiserver-kubelet-client below after upgrading EKS to version 1.25(user=kube-apiserver-kubelet-client, verb=get, resource=nodes, subresource=proxy)Now I completely lost access to EKS Cluster. I don't know how to get it back.For example running this command will give the error below.kubectl auth can-i list secrets --namespace bachelierdevno - RBAC: clusterrole.rbac.authorization.k8s.io "kube-developer-cr" not foundI'm not sure how to apply rbac (ClusterRole and ClusterRoleBinding) without access to EKSHere is a screenshot when I'm trying to apply RBAC FollowComment"

Answer: 0Ok I managed to resolved the issue using an Admin Account and then re-applying the RBACCommentSharerePost-User-2758848answered 3 months ago


Question: Appstram image builder creation failing

"While creating image builder i want to join AD to that and providing Directory OU as "OU=AppStream,DC=oddw,DC=appstream" and getting the error "Notification code->DOMAIN_JOIN_ERROR_FILE_NOT_FOUND", "message->The system cannot find the file specified"Can someone please help me out for resolving thisFollowComment"

Answer: "1Hello Team,Greetings!Thank you for contacting AWS Premium Support.I understand from the case description that you are are facing issue with domain join of AppStream image builder with below error."Notification code->DOMAIN_JOIN_ERROR_FILE_NOT_FOUND", "message->The system cannot find the file specified"I would like to inform you that this error message occurs when OU defined in directory config is not present inside the AD or OU distinguished name is entered in the incorrect format.errorCode :DOMAIN_JOIN_ERROR_FILE_NOT_FOUNDerrorMessage :The system cannot find the file specifiedTo resolve the issue, follow below steps:Navigate to "Active Directory Users and Computers" in you Microsoft Active Directory.Enable "Advance Features" under View.Select the OU you have created for AppStream. Right Click and Open Properties.Navigate to "Attribute Editor". Double click "distinguishedName" under it and copy the OU path under value. It will be similar to below example.Example: OU=AppStream,OU=Lab,DC=Lab,DC=comNow you can configure this OU in the AppStream directory config and this should help in resolving your issue,You can also refer to below public doc to understand the cause for different domain join error codes.https://docs.aws.amazon.com/appstream2/latest/developerguide/troubleshooting-notification-codes.htmlThank you and Have a great day ahead. Stay Safe !!CommentShareSUPPORT ENGINEERrePost-User-1133232answered 2 months ago"


Question: Push/publish events on Step Functions state transition

"I'd like to notify an external observer (a client web app in my current case, but interested in other use cases too) of status updates when a Step Functions-orchestrated workflow progresses - in an event-driven way rather than by polling the execution history API.FollowComment"

Answer: "0Accepted AnswerI tested out approach using CloudWatch and it works. I enabled CloudWatch logging, it logs event TaskStateEntered on start and TaskStateExited on exit. You can create filter on log like { $.type="TaskStateExited"}Sample CloudWatch log entry{    "id": "6",    "type": "TaskStateExited",    "details": {        "name": "State1",        "output": "{\"who\":\"amit\",\"taskresult\":{\"statusCode\":200,\"body\":\"\\\"hello from amit\\\"\"}}"    },    "previous_event_id": "5",    "event_timestamp": "1593780767604",    "execution_arn": "arn:aws:states:us-east-1:xxx:execution:MyStateMachine:fa8cfe8f-492d-7e27-7492-6aa20f12fe18"}CommentShareAmitBansalanswered 3 years ago"


Question: AWS Batch limit number of instances

"When using AWS Batch is there a way to limit the maximum number of EC2 instances that AWS Batch will have running at one time? Ideally, this would apply across all compute instances. Does AWS Batch enable this or are there other AWS services that can be combined with AWS Batch to allow us to achieve instance based limits?An example would be say I am running AWS Batch for some workload. But I want AWS Batch to at most have 10 EC2 instances running. Is there somewhere that I can configure AWS Batch such that it will respect that limit on EC2 instances?FollowComment"

Answer: "1Accepted AnswerThere is no direct configuration which can limit the number of instances. However you can configure Max vCPU in compute environment such that it can launch the instances upto required numbers only.For example : Suppose you create a compute environment with instance type as m4.large ( it comes with 2vCPU and 8 GiB memory). Now if you set the MAX vCPU as 20 for this compute environment, so this compute environment can scale max upto 20 vCPU means 10 instances of type m4.large.https://docs.aws.amazon.com/batch/latest/userguide/create-compute-environment.html#create-compute-environment-managed-ec2CommentShareSUPPORT ENGINEERAshish_Tanswered a year agoacrookes-fe a year agoThank you for responding and confirming that the direct configuration does not exist at the moment. I looked into the max vCPUs approach but it breaks down once we have instance types with differing amounts of vCPUs as that can no longer be a direct proxy to instance count.Share1If I understand your question, you should be able to limit the number nodes when you're setting up a multi-node parallel job. >See #8 in multi-node parallel job definition.< This is per job, not across all EC2 instances.I'm not aware of a convenient way to limit EC2 instances across an account without restrictions on users & services (e.g. simply disallowing creation as a policy).CommentShareDan_Hanswered a year agoacrookes-fe a year agoThank you for your response. I'm loooking more for limiting how many instances AWS Batch will create and run at a single time. Say I only want batch to have 10 instances maximum at a given time.I've added this example to the main questionShare"


Question: Private Subnet to kick-off Jenkins agent

"I have Jenkins on an AWS Instance and have a multibranch pipeline setup in Jenkins.  I would like the pipeline job to kick-off a build agent in another AWS agent via an AMI and the Jenkins EC2 plugin.  I am able to do this for the default subnet/VPC but this creates a public IP (172.XX.XX.XX) and I would like to do it via a private IP.  When I update the cloud/note configuration to include a subnet for a private VPC/IP, the agent will no longer kick-off like it would for the public.  Is this possible?  If so, how can this be configured?ThanksFollowComment"

Answer: "0Accepted AnswerI was able to get this working.  I specified the incorrect Security ID.  I had put the Security Rule ID rather then the Security Group ID (I didn't realize they were different).  Once I updated that, the agent kicked-off like I wanted it to.Thanks!CommentSharetaylor-steinbaugh-SNC-MACEanswered 8 months ago0It is possible to have the EC2 jenkins agents launched in the private subnet when using the EC2 plugin. One of the important thing is to ensure that the private subnet has a route to internet via NAT gateway. There could be some other issues like java missing, permissions issue for remote FS. You can go to Configure Clouds -> Provision via <cloud_you_defined> and check for the logs at runtime in the Jenkins console. As a quick fix measure also ensure that ALL Traffic from VPC is allowed in the security group. Once things are working you can narrow down on SG rules.--SydCommentShareSydanswered 8 months ago"


Question: Github author information

"I'm using Github as a source in code build and using webhook (PULL_REQUEST_CREATED, PULL_REQUEST_UPDATED, PULL_REQUEST_REOPENED), but when I generate a pull request or update a pull request I want to access the last commit author info ( author name and email )I'm using the command: git log -1 --format="%an <%ae>" But it will throw an error[Container] 2022/07/08 18:17:46 Phase context status code: COMMAND_EXECUTION_ERROR Message: Error while executing the command: git log -1 --format="%an <%ae>". Reason: exit status 128I'm not able to access author info based on the last commitFollowComment"

Answer: "0Accepted AnswerThe error you're getting sounds like it could have something to do the clone depth on CodeBuild, which by default is 1.In your build project, try Edit > Source, expanding the additional configuration, and try changing the Git clone depth to Full to begin with. If that works, you might be able to reduce the depth to speed up the build.CommentShareEdanswered a year ago0Exit status 128 can mean a number of things. Do you get any other messages above that line in the logs? There should be a more verbose error message that might help.It should look something like this:[Container] 2022/01/01 00:00:00 Running command git log -1 --format="%an <%ae>" --testfatal: unrecognized argument: --testCommentShareEdanswered a year agoAnkushktr a year ago[Container] 2022/07/08 18:17:46 Phase complete: PRE_BUILD State: SUCCEEDED[Container] 2022/07/08 18:17:46 Phase context status code:  Message:[Container] 2022/07/08 18:17:46 Entering phase BUILD[Container] 2022/07/08 18:17:46 Running command git log -1 --format="%an <%ae>"error: Could not read 426258ef330179881b171f345ec12f1fbd323251fatal: Failed to traverse parents of commit 6c63149a5858f3c6ad8f05f2db9be0869b879d8f[Container] 2022/07/08 18:17:46 Command did not exit successfully git log -1 --format="%an <%ae>" exit status 128[Container] 2022/07/08 18:17:46 Phase complete: BUILD State: FAILED[Container] 2022/07/08 18:17:46 Phase context status code: COMMAND_EXECUTION_ERROR Message: Error while executing command: git log -1 --format="%an <%ae>". Reason: exit status 128[Container] 2022/07/08 18:17:46 Entering phase POST_BUILD[Container] 2022/07/08 18:17:46 Phase complete: POST_BUILD State: SUCCEEDED[Container] 2022/07/08 18:17:46 Phase context status code:  Message:ShareAnkushktr a year agothis is my latest commit 6c63149a5858f3c6ad8f05f2db9be0869b879d8fAnd after commit, this code build will trigger, but I'm not able to access author name and email from latest commitShare"


Question: Permission error?

*********@outlook.comTo: Amazon Web Services no-reply-aws@amazon.comSubject: Re: RE:[CASE ***********] unable to verify domain  all values createdHi thank youThat workedHowever despite adding permission  I am unable to send emailsErrorTo: *******@GMAIL.COM; *******@OUTLOOK.COM;Sending Email failed.Could not send email.SubmitId:  **********************************Your administrator needs to give permissions to WorkMail to perform e-mail sending on your behalf.Request you to kindly advise asapAnd I appreciate you for helping me despite you being in another departmentFollowComment

Answer: "0If I change the setting to "Send On Behalf" or "Full Access" to "Full Access" as described in the following document, will I still be able to send?https://docs.aws.amazon.com/workmail/latest/adminguide/mail_perms_overview.htmlCommentShareEXPERTRiku_Kobayashianswered a month ago0Hi,I took a quick look at your account and spotted a the problem. The problem from your questions is that your domain that you added to WorkMail is missing a policy that will allow WorkMail to send mail via that domain.You can fix that by adding the domain again in WorkMail, no need to remove it first. By doing this it will trigger a workflow to repair any issues with the domain.Kind regards,RobinCommentShareMODERATORrobinkawsanswered a month ago"


Question: Amazon simple email service converts html tags

"I have a java application that uses Amazon SES for email. The email template is constructed within the Java application. I needed to add a image link to the email template and I added a standard email IMG tag like below<img src="<PATH TO THE IMAGE OMITED>" alt="alt text omitted" >But when the email comes through, rather than show the image, I see the HTML code on the email body.When I look at the email source I see the '<', '>' and and quote signs have been converted like below.
THIS IS AN AUTO-GENERATED EMAIL. DO NOT REPLY.
<img src="https://IMAGE_PATH OMMITTED.png" alt="" >It seems Amazon SES is converting some of the tags within the image bot not the ahref tag or even the P tag.This was tested on a local email server and a fake smtp server and there was no conversion happening.Amazon SES is setup on a client environment and I have no direct access to it.What could be causing this? Could you please point in the likely direction.FollowComment"

Answer: 1Accepted AnswerTurned out the HTML was being manipolated by the receiving domains security framework and not AWS related.CommentSharenavsanswered a year ago


Question: I can't access a private S3 bucket using aws-sdk-s3 gem in a ruby on rails app

We had a working set up with a public S3 buckets. I changed the permission to block all public access and added policies using this guide: https://repost.aws/knowledge-center/ec2-instance-access-s3-bucketUsing AWS-cli im able to post a file to the bucket from the server and the app container. But when using aws-sdk-s3 with Paperclip or ActiveStorage I get an access denied.Aws::S3::Errors::AccessDenied:  Access Denied/gems/aws-sdk-core-3.168.4/lib/seahorse/client/plugins/raise_response_errors.rb:17Is there a special configuration for a bucket with all public access bloc ?FollowComment

Answer: "0Hi,I'd say to review this from 2 different points of view:1- NetworkingIf you effectively blocked public access (from the internet), calls from the EC2 instance to the bucket should be using this particular option described in the guide: Private EC2 instance with connectivity to Amazon S3 using a gateway VPC endpoint (https://docs.aws.amazon.com/vpc/latest/userguide/vpce-gateway.html). Make sure it is that way and all traffic is flowing internally, without reaching the internet.2- PermissionsCheck you are using the same role for both CLI and SDK, or at least make sure both roles have enough permissions to perform the actions you need. For that, take a look at both IAM role/policies and S3 bucket policies. I think these 2 references can help:Making requests using IAM user temporary credentials https://docs.aws.amazon.com/AmazonS3/latest/userguide/AuthUsingTempSessionToken.htmlMaking requests using AWS account or IAM user credentials https://docs.aws.amazon.com/AmazonS3/latest/userguide/AuthUsingAcctOrUserCredentials.htmlI hope this helps...CommentShareSergioAanswered 17 days ago"


Question: How to refresh an SES domain that has failed verification

"For Amazon SES, If a domain in the Pending state is not verified within 72 hours it goes into the Unverified (Failed) state. If the DKIM records are configured it will not automatically be verified. There is a "Retry" option in the console that puts the domain back in the pending state so that it will be verified.  The question is how can the Retry be triggered via the API?The only option I can see is to delete and re-add it.  Is there are cleaner or proper way of doing it?FollowComment"

Answer: "1There is no API Call to 'retry' the Domain verification process through API Calls.In the case of domian re-verification via API call, you would first need to 'delete' the domain using 'DeleteIdentity' API call and then attempt to verify the domain again using the 'VerifyDomainIdentity' API callDeleteIdentity - https://docs.aws.amazon.com/ses/latest/APIReference/API_DeleteIdentity.htmlVerifyDomainIdentity - https://docs.aws.amazon.com/ses/latest/APIReference/API_VerifyDomainIdentity.htmlCommentShareGovind Kumaranswered a month ago"


Question: Rotativa not working on AWS Beanstalk

"Hello,I am using Rotativa library in my Asp.net project to convert view into PDF which is working just fine locally. As soon as I deploy the application to the AWS Beanstalk, the PDF generator stops working there and it just redirects to the error page when I want to generate the PDF. Does anybody know how I can get this working when deployed please? Or is there any alternative I can use?Thank youFollowCommentDaniel 10 months agoCan you provide sample code or a simplified version of your app that can be deployed to Beanstalk to reproduce the issue?ShareKirk_D 9 months agoHi Daniel - can you provide the error message that gets displayed when using Rotativa on Elastic Beanstalk? Also, are you using the .NET Framework version of the library (via NuGet, I assume) or the Rotativa.AspNetCore package?  One thing to check is that the library (the dll) is being packaged in the zip file that gets uploaded to Beanstalk.Share"

Answer: "0Hi Ondrej. If you are still experiencing this issue, please respond to the above comments asking for further details or feel free to resubmit the question. Thanks!CommentShareSierra Washingtonanswered 8 months ago"


Question: Site & Plesk unreachable after restarts - terminal working

"I was working on my site, which has been running normally for days now, and then nada. "This site can’t be reached". Tried rebooting. Stopping and restarting. I can get into the terminal okay but if I create a plesk URL and try to reach that it also fails. I thought this would be momentary, but it's been almost an hour now and it's still down.Any ideas?FollowComment"

Answer: "0Well I hadn't set a static IP so that would explain why I can't reach my site after the stop/restart (as the IP changes), but why doesn't the Plesk work? Is there a cron job later on that updates the IP for that function?I assume this will resolve at some point and work again. Annoying I forgot to setup a static IP for this domain right off the bat. :(CommentSharearmoramaanswered 3 years ago"


Question: VestBee Discount Codes not working

"Hello,My name is MJ and I am a founder of a business.I applied to the VestBee AWS B2B Accelerator. This application also came with discount codes to many third party providers.I tried using a discount code to the digital service , Make,  and it did not work.Please advise? VestBee have told me to raise it with AWS.Thanks,MJFollowComment"


Question: Redshift varchar(max) not enough to store json data type column from Postgres

"Redshift varchar(max) not enough to store json data type column from Postgres. Which data type should I use to store the column, I am using glue to perform the ETL and storing to Redshift, Postgres has Json data type but in Redshift the limit is exceeding even by varchar(max).Getting below error in STL_LOAD_ERRORS table-redshift ->String length exceeds DDL lengthIs there any workaround or direct solution, as super data type is not supported in Glue, so can't map that to the column.FollowCommentAWS-ADolganov a year agoHow big is your JSON data?ShareAWS-User-4151168 a year agotry using text data type, supported in postgres and redshift.Share"

Answer: "0Hi,In Redshift for storing JSON data we have introduced the SUPER data type.However, the SUPER data type only supports up to 1MB of data for an individual SUPER field or object. For more information, see Ingesting and querying semistructured data in Amazon Redshift.hope this helps,CommentShareEXPERTFabrizio@AWSanswered a year ago"


Question: How to authenticate with AWS IAM Roles Anywhere in code

"We can't run an external binary (i.e. aws_signing_helper) from within our code, but would like to be able to use AWS IAM Roles Anywhere.Are there any examples of code (Java and C#, preferably, and/or Python) that can be used to authenticate using the private key to assume the Role and obtain the AWS access key, secret access key, and session token?ThanksFollowComment"

Answer: "1Accepted AnswerHello,Greetings from AWS !I understand that you want to use IAM Roles Anywhere service to get temporary IAM credentials, but it is not possible to use aws_signing_helper from your code. You want to know if there is any example code which can be used to authenticate using the private key and get access key, secret key, and session token in return. Please feel free to correct me in case I have misunderstood your concern.The aws_signing_helper executable file is basically a way to call the CreateSession API of IAM Roles Anywhere service. The authentication sign process is explained here [1]. You can implement your own code following the process explained in this document [1] to call the CreateSession API of Roles Anywhere. Though there is no sample code from AWS side, I would like to share this third-party document [2] which contains sample code in Python making request to CreateSession API following the signing process explained in [1].Note: AWS would not be able to vouch for the integrity of the content being provided in third-party links. Kindly ensure to implement in your test environment first and then to use in your production environment.I believe the information is helpful to you. In case you have any further queries/concerns then please let us know. We will be more than happy to assist you further.Wish you an AWeSome day ahead and stay safe ! 🙂--References--[1] https://docs.aws.amazon.com/rolesanywhere/latest/userguide/authentication-sign-process.html[2] https://nerdydrunk.info/aws:roles_anywhereCommentShareSUPPORT ENGINEERTarit_Ganswered 9 months agorePost-User-4762228 9 months agoThat Python code is exactly what I was looking for.  (and it works perfectly).Thank you!SharerePost-User-4762228 9 months agoThat Python code is exactly what I was looking for.  (and it works perfectly).Thank you!Share"


Question: "Unable to connect to redis cluster with node client, what am I doing wrong?"

"I have spun up an AWS ElastiCache redis instance running in clustered mode, which currently has 1 shard and 2 nodesIn order to connect to it from my local machine I have opened up an SSH tunnel using my SSH config fileHost myRedisTunnel  HostName 1.2.3.4  ...  LocalForward 6378 5.6.7.8:6379the tunnel works, I can connect to my VPC successfully$ ssh myRedisTunnelWelcome to Ubuntu 18.04.6 LTS (GNU/Linux 5.4.0-1060-aws x86_64)...I can connect to the redis cluster locally via redis-cli after opening my tunnel and passing -c as an argument for clustered mode$ redis-cli -c -h localhost -p 6378localhost:6378> pingPONGbut when I try to use redis for nodejs it wont connect, it just times out, am i missing some configuration settings, or is it physically impossible to connect to my remote redis via tunnel?const { createCluster } = require('redis')const client = createCluster({  rootNodes: [    { url: 'redis://localhost:6378' }  ]})await client.connect()const res = await client.ping()console.log({ res })Error: Connection timeout      at Socket.<anonymous> (node_modules/@node-redis/client/dist/lib/client/socket.js:163:124)      at Object.onceWrapper (node:events:513:28)      at Socket.emit (node:events:394:28)      at Socket._onTimeout (node:net:486:8)      at listOnTimeout (node:internal/timers:557:17)      at processTimers (node:internal/timers:500:7)I have tried several nodejs clients for redis and all of them have timed out in the same way, so I know the issue has to either be that I have a config setting wrong in my nodejs redis client configuration - or it has something to do with only one of the redis ip addresses is accessible via tunnel, all the rest of the cluster would likely not be accessible unless i open tunnels for each one. Im just at a loss for how mock my production environment in development so i can write code.FollowComment"

Answer: "0When connecting to Redis with cluster mode enabled, many clients will try to connect to all cluster nodes on initialization. The replica node(s) will not be reachable given the network setup that you have described. If you disable this behaviour of pre-connecting to all nodes, you should be able to successfully connect to the individual node that you have opened a tunnel onto.Here is an example of how to connect without attempting to connect to all nodes, using the popular ioredis library:let Redis = require('ioredis');let cluster = new Redis.Cluster([{  host: 'localhost',  port: 6378}], {  lazyConnect: true});async function main() {  await cluster.set("foo", "bar");  console.log(await cluster.get("foo"));  cluster.disconnect();}main();NB: If more than one shard was setup in the cluster, this method would experience issues when hitting a shard on a different node to the node that you have tunnelled to.CommentShareforkforkanswered 7 months ago"


Question: IOT core pricing

I'm looking for information on pricing of attribute-search/update operations of an IOT thing when fleet-indexing is DISABLEDwhere can I find the price of attribute search operation (i.e. using client.describe_thing())?where can I find the price of attribute update operation (i.e. using client.update_thing())?FollowComment

Answer: "1Accepted AnswerHi,you can find registry related pricing information at AWS IoT Core additional metering details. The charge in particular is available at AWS IoT Core pricing.KR,PhilippCommentSharePhilipp Sanswered a year agorePost-User-2346466 a year agothanks, this indeed what I was looking for.Share"


Question: Direct Connect options in Adelaide

I'm looking to setup a Direct Connect in Equinix Adelaide (AE1) - any recommendations or traps to avoid?FollowComment

Answer: "1Accepted AnswerAE1 does not have Equinix Fabric so you will need to leverage another Direct Connect (DX) Partner.  This page details options including speeds and locations (scroll/search for 'AWS Direct Connect Partners by AWS Direct Connect Location').  Ideally the Partner has a presence in AE1 to simplify the cross-connect.You might want to consider terminating in Melbourne (NEXTDC M1) with a view to leveraging the new region when it comes online (ADL-MEL ~10ms, ADL-SYD ~20ms).  ADL-MEL DX then on to SYD via AWS backbone may have slightly higher latency which is something to consider, but it may be cheaper as it's a physically shorter path for the carrier.  Some Partners offer elastic bandwidth (manual or programatic) if you have variable throughput requirements which is another way to manage cost.CommentShareAndy_Panswered 8 months agoEXPERTBrettski-AWSreviewed 8 months ago"


Question: Getting error while importing librosa on Elasticbean stalk deployment

"Hi,I am facing deployment issues on Elasticbean stalk after adding librosa library. Below is the error on cloud watch, this seems to be originated from import librosa lineFile "/var/app/venv/staging-LQM1lest/lib/python3.7/site-packages/librosa/core/audio.py", line 8, inweb: OSError: cannot load library 'libsndfile.so': libsndfile.so: cannot open shared object file: No such file or directoryCan anyone help me on this?Regards,DeeptiFollowComment"


Question: Comaptibility between REST and HTTP API

"Hi,I have been using REST type endpoints with API gateway.APIs are defined in lot of smaller functions/lambda/microservicesi.e.user ServicebasePath : userPath : /v1/userscustom domain: mydomain.comSo my API gateway url become : https://mydomain.com/user/v1/usersand this works fine.and recently i tried function/Lamda URLs and via lambda url i can use only APi gwateway V2 request/response, and for that i changed my function/lambda code , But then REST API via API gateway stopped working as i was getting request in V2 format and i was using V1 format.So to make everything in sync i moved my existing API from REST to HTTP as well which use V2 requestNotwI can call lambda url  https://{lambdadomain}/user/v1/usersbut my original url via API gateway doesn't work  https://mydomain.com/user/v1/usersAfter digging bit more i found out that now my function code receive url as /v1/users and not /user/v1/users from API gatewayto make it work for now i have to add two mappings in my gin/go application and it works but doesn't look good as i have to add 2 entries for every urlr.GET("/user/v1/users", user.GetUserHandler) // Works with https://{lambdadomain}/user/v1/usersr.GET("/v1/users", user.GetUserHandler) // Works with https://mydomain.com/user/v1/usersis this expected behaviour switching from REST to HTTP ? or is it a bug?  i couldn't find any documentation for it?ThanksRaviFollowComment"


Question: IoT core greengrass fleet provision device side effectiveConfig.yaml does not have updated thingName

"Trying to use provision by claim and provisioning hook to admit the device. The provisioning hook output will return a formatted thingName rather than the name passed into the provisioning hook,const requestedThingName = input.parameters.ThingName;....const output = {    allowProvisioning: True,    parameterOverrides: {        ThingName: newThingName,    },this works, but on the device side, after iot mqtt session successfully established,  in /greengrass/v2/config/effectiveConfig.yaml, the file looks like this:system:certificateFilePath: ""privateKeyPath: ""rootCaPath: ""rootpath: "/greengrass/v2"thingName: ""services:aws.greengrass.FleetProvisioningByClaim:configuration:I would expect, updated thingName is there under thingName key.I can only see the newThingName in config.tlog:{"TS":1649181903995,"TP":["setenv","AWS_IOT_THING_NAME"],"W":"changed","V":"newThingName"}I think effectiveConfig.yaml should be updated.FollowComment"

Answer: "1Hello,The effective config file is only written on Greengrass startup and shutdown. If you were to shutdown Greengrass you should then see the most recent values of the configuration reflected in the effective config file. The effective config file is only ever written, it is not used by Greengrass for any purposes. If you want to see the true state of things, the config.tlog file is always the source of truth.CommentShareEXPERTMichaelDombrowski-AWSanswered a year ago"


Question: Get Python Plots to Show In Cloud9

"What is the workflow for seeing a plot when developing in cloud9?  for example, the following code will show me a plot in VSCode or as a Jupyter Notebook:import matplotlib.pyplot as pltimport numpy as npx = np.linspace(0, 2 * np.pi, 200)y = np.sin(x)fig, ax = plt.subplots()ax.plot(x, y)plt.show()FollowComment"

Answer: "0Accepted AnswerCloud9 does not have a rendering engine for Jupyter as VSCode and Jupyter Notebook. This is why that code would not show anything in Cloud9. You can use Sagemaker Studio or Sagemaker Labs to have hosted Jupyter notebook instances.CommentShareEXPERTMassimilianoAWSanswered a year agoAdamTTP a year agoSagemaker will be a new service to me, I will check it out.   Thanks so much for confirming my suspicion that this would not be possible.Share0do you mean for plain python code for VSCode it is possible to show plots for remote or online work on AWS?it is known using jupyter is not professional ....professional use IDEs like VScode or Charm , etc..CommentShareSandy1234answered a month ago"


Question: Braket Notebook finished before Quantum Computer tasks did

"I'm looking for help understanding why my AWS python notebook seemed to finish before it was supposed to.My Braket notebook sets up four rounds of measurement (task1, task2, task3 and task4) on the IonQ quantum computer. I included a cell which would start these tasks, quickly analyze the data and output it to a text file.I used %%capture to run it overnight (necessary? not sure) and closed the browser. It did produce a text file with the proper structure. When I checked the data it agreed with previous work. However, I then checked the TASKS page on the AWS Braket website and found out that while task2, task3 and task4 had finished task1 had not even started running on the quantum computer. Without task1 the data should've been extremely incorrect. What happened? My guesses are:It did run, something happened and task1 was scheduled to repeat later for some internal reason.It did not run and the tasks are not submitted in the order they appear in the notebook.The %%capture line somehow messed this up. I hadn't used it previously and don't really know what it does; this was a test to see if I could leave it up running overnight while closing the browser.If anyone could help, I'd be extremely grateful. We have limited runtime on IonQ and I'd really like to not have to redo the data.FollowCommentKshitij C a year agoCould you please provide the taskIds for the task which didn't run (task1) and those which did (task2/3/4) ?Share"


Question: Can a customer test the AWS Direct Connect (DX) connection prior to the DX being created?

"Customer wants to test that the connection is in place from the their network through the Colocation facility while waiting on the DX to be created, is it possible to give them an IP they can ping to see if all the connectivity is established?FollowComment"

Answer: "0Accepted AnswerWithout provisioning Direct Connect (DX) you cannot test end-to-end connectivity. You need some DX resource, DX Virtual Interface (Vif) (Private/Public/Transit) to test connectivity.They can work with the provider to see if they have any IP they they can try to reach in the co-location. Either way, there are too many variables and they'll have to work with the provider if they can/have DX Vif that customer can use to test end-to-end.CommentSharejkapsanswered 3 years ago"


Question: "For the MediaConverter service, is it possible to use a source other than s3?"

"I would like to convert a video in mp4 format to mp3, but this video is hosted on vimeo.FollowComment"

Answer: "0AWS MediaConvert currently supports only Amazon S3 as the input source for media files. However, you can work around this limitation by downloading the video from Vimeo to an S3 bucket and then using MediaConvert to convert the video to the desired formatCommentShareEXPERTsdtslmnanswered 2 months ago0In addition to Amazon S3 sources, you can specify a URL from a generic HTTP(S) location.Input requirements are as follows:All input files must be publicly readable.The HTTP(S) server must not require authentication.The HTTP(S) server must accept both HEAD and range GET requests.The URL that you specify can't include parameters.If your HTTP(S) input uses redirection, it must follow these restrictions:You can redirect only once from the URL that you provide as your input. You can't redirect to a URL that, in turn, contains a redirect.The HTTP(S) status response code from the initial server must be either 301 or 302.The HTTP(S) response from the initial server must use its Location headers to provide the URL that it's redirecting MediaConvert to.CommentSharechris_wanswered 2 months ago"


Question: CPUCreditBalance stucks on zero

"I created a db.t4g.micro RDS (postgreSQL 14.3), but its CPUCreditBalance is not increasing, it is always zero. I'm not using the RDS, so its CPU Utilization is around 7%.I rebooted, stopped and started and CPUCreditBalance is zero. What can I do ?FollowComment"

Answer: 0Does someone knows which is the CPU baseline for db.t4g.micro ?CommentShareGlauciaanswered 9 months ago


Question: Proxy on AWS App Runner for Vue.js / Express App

"Trying to run a Vue.js app with a Node.js Express backend on AWS App Runner.Is there a way to setup a proxy (like nginx) so that the HTTP /api path is routed to a separate container/host through the same domain?The problem I’m running into:  When the Vue.js client app and Express server api are deployed, they run on two separate publicly accessible hosts.  I need to setup App Runner to use a proxy so both hosts can be accessed through a single domain using HTTP paths.(Alternatively, I can enable CORS policy, but A JavaScript app running on port 8080 connecting to a Node.js Express app running on port 5000 is a fairly common pattern.  I feel like this is something that App Runner was built to handle, and I’m not sure what I’m missing.)FollowComment"


Question: Maximum number of Tenants Amazon RDS database can support

"As per our project demand we need to accommodate multiple Tenants for Amazon RDS database. I would like to understand the Limited number of Tenants AWS support.What is the maximum number of Tenants that AWS can support ?FollowCommentiwasa EXPERT10 months agoHi.How do you divide your tenants? Separate RDS instances? Separate databases? schema? table?First, we need to think about how to implement multi-tenancy in RDS.Once that is decided, check the limits for each DB engine in the AWS documentation.Share"

Answer: "0This answer will depend on how the tenant model is designed.Multi-tenant strategiesIn multi-tenant strategies the DB can logically support an unlimited number of tenants so the constraint will be driven by the load on the server or the storage capacity used.  You could use RDS Performance Insights to monitor your workload for a customer and use that data to extrapolate the max tenants on a given instance size.Examples of multi-tenant implementations:All customers could be in a single logical DB and their data could be partition by a customer_id field.Each customer could be in their own schema, e.g. customer1_users, customer2_users or customer1.users, customer2.users.Each customer could be have their own logical database on the same server.Single-tenantIn a single-tenant deployment each customer would have their own server.Each AWS account can create 40 RDS instances by default.  Additional instances can be requested.  More limits can be found in the FAQ.CommentShareHopperanswered 8 months ago"


Question: AWS certification

Hi AWS community!I am new for AWS.How can I learn and land  sucessful on AWS technology?FollowComment

Answer: "0Hi Gavin,Check out this article I wrote about certifications: https://alatech.medium.com/aws-certifications-part-ii-my-6-exams-journey-tips-4f62991f30e.Contains a series of hands on workshops and references for each of the 6 foundational, associate and professional certifications.Hope it helps ;)CommentShareEXPERTalatechanswered 8 days ago0I would recommend you start with the Cloud Essentials Learning Plan at Amazon's SkillBuilder - https://explore.skillbuilder.aws/learn/learning_plan/view/82/cloud-essentials-learning-plan-earn-a-learning-badge.Plan details indicate the following:"This Learning Plan is designed to help individuals who are new to AWS Cloud technology and seek an overall understanding of the AWS Cloud, independent of specific technical roles. The digital training included in this Learning Plan will expose you to foundational AWS Cloud concepts, AWS services, security, architecture, pricing, and support. This Learning Plan can also help prepare you for the AWS Certified Cloud Practitioner certification exam."So you'll learn all the basics and can then take it from there.Hope this helps.CommentShareDavid Canswered 8 days ago0You can start with AWS CCP certification. I am mentioning few resources below that might help you in starting your AWS journey successfully.AWS Skill BuilderCourses on Udemy - Stephane Marek's course (highly preferred)https://omshreepatel-999.medium.com/material-helpful-in-top-cloud-certifications-1d46ebab3d0eCommentShareOmshree Butanianswered 8 days ago0Hello, if you are new to the aws cloud, I recommend that you take the  aws skill builder learning paths.Additionally, it is important that you know the fundamentals concepts used in technology, for this point I recommend Adrian Castrill's course for free.Tech Fundamentalshttps://learn.cantrill.io/p/tech-fundamentalsOn the other hand, if your objective is to obtain any of the certifications, you should take the specific course aimed at becoming certified.Best regards.CommentSharemariagueanswered 8 days ago"


Question: Is SWF impacted by the us-east-1 2021-12-07 outage?

"I know there's a major outage going on in us-east-1 right now, per https://status.aws.amazon.com/. The notice at the top of the page says "Services impacted include: EC2, Connect, DynamoDB, Glue, Athena, Timestream, and Chime and other AWS Services in US-EAST-1."Per that page's status table (and this RSS feed: https://status.aws.amazon.com/rss/swf-us-east-1.rss ), SWF is currently working.However, we're seeing tons of 500s in our app logs, and none of our processes that use SWF seem to be making progress.Is SWF one of those "other impacted services"?I don't know of any successful requests going through, so I think it is, but an official confirmation would be nice.An edited example error from our PHP log follows:Error: start_workflow_execution: exception 'AwsSwfExceptionSwfException' with message 'Error executing "StartWorkflowExecution" on "https://swf.us-east-1.amazonaws.com";AWS HTTP error: Server error: `POST https://swf.us-east-1.amazonaws.com` resulted in a `500 Internal Server Error` response:{"__type":"com.amazon.coral.service#InternalFailure","message":"All attempts to invoke operation: StartWorkflowExecution (truncated...)FollowComment"

Answer: "3Accepted AnswerYes, SWF is one of the other impacted services. We are working to mitigate the issues as quickly as possible and will continue to update https://status.aws.amazon.com/ as we have more details.CommentShareMODERATORAdeebanswered a year agoneagleson-nxtbook a year agoThanks for the confirmation!Share"


Question: Load Balancer HTTP 413 Error

Solution suggested on Stackoverflow was to increase max http message size.by creating this file:  /.platform/nginx/conf.d/proxy.conf with the content:\nclient_max_body_size 100M;Where to create this file .. How to do this for an AWS Load Balancer (not Elastic Beanstalk) ?FollowComment

Answer: "0It would help a lot if you could describe more about what you're trying to do and what is in your environment. For example what targets are you using for the load balancer (EC2 or Lambda - I assume EC2) and what type of load balancer (I assume Application Load Balancer but that may not be the case). Also: Are you getting an error message? If so, what is it? Is it being generated by the load balancer or the target?CommentShareEXPERTBrettski-AWSanswered a year agoricheso a year agoThanks for your post. It was generated from the load balancer side and not the target.I finally figured out that the AWS load balancer was just routing traffic to an internal VM where nginx was installed.. so I logged into the VM and changed the nginx configuration in /etc/nginx/nginx.conf to add the line in the http section:client_max_body_size 200M;then reloaded the new nginx configuration using the command:  nginx -s reload ... and the http error 413 no longer appeared.Share"


Question: How to add headers and commonHeaders in SES?

I would to overrride the messageId and some more data in header to track the email sending status in SNS event notification. How can i add the headers in the sendEmail? I am using "@aws-sdk/client-sesv2" client sdk.FollowComment

Answer: "0Sending email directly from SNS doesn't apparently support header modification. I'd suggest that you send the notification to a Lambda function, which would then use the SES API to send the email as you wish it to be configured per the SES documentation: https://docs.aws.amazon.com/ses/latest/dg/event-publishing-send-email.htmlCommentShareRodney Lesteranswered a year ago"


Question: Receiving images or other types of attachments (MMS) amazon pinpoint SMS

"two way sms works great, however:when the client uploads a photo and sends it via text , i assume this type of message is considered to be of type: MMS.This MMS message never triggers my HTTP endpoint, I never get any information about this message. I want to save the attachment (example, an image) to my web database, however the MMS message never triggers my endpoint and no information triggers the endpoint, as if nothing was even sent. What's the point of having a SMS number without being able to receive attachments? Is there a way to configure this???FollowComment"

Answer: "0Currently Amazon Pinpoint and SNS does not support MMS messages.CommentShareAnaAtAWSanswered 4 months ago0At for the future, MMS service is no longer supported from several mobilephone providers, e.g. Vodafone and T-Systems in Germany. I think, the same all over the world. MMS is dead.CommentShareAWS-User-1151635answered 4 months ago"


Question: "We run custom Python built from source, with AWS API.  We upgraded it with an OpenSSL which has TLS-1.2,  and all works.  AWS API server-side supports TLS-1.3?  How to check which TLS aws-cli using?"

"We run custom Python built from source. Just upgraded to use TLS-1.2, due to AWS sending us email warning TLS-1.2 is minimum TLS for AWS API.  Our homebuilt Python was using TLS-1.0 or 1.1, and AWS Security sent us note saying we needed to upgrade to minimum TLS 1.2.  So we did, and it all seems to work ok.  But we are using an older OpenSSL, which supports TLS-1.2. (and we can confirmthis.)<pre>$python   import ssl, json, urllib2   print (json.loads(urllib2.urlopen('https://www.howsmyssl.com/a/check').read())['tls_version'])   TLS 1.2  </pre>If we link in a newer OpenSSL, eg, any of the more recent 1.1.1 series, we get TLS-1.3, when we test/check it. I am guessing that using a more recent OpenSSL is OK for AWS API.  But I wanted to check, just to be sure.  We are using: aws-cli version: 1.16.312.If we build our Python with OpenSSL 1.1.1 series, we get TLS-1.3 when we check it against the"www.howsmyssl.com" site.<pre>$python   >>> import ssl, json, urllib2   >>> print (json.loads(urllib2.urlopen('https://www.howsmyssl.com/a/check').read())['tls_version']) TLS 1.3  >>>Check your Python SSL version like this:  >>> import ssl  >>> ssl.OPENSSL_VERSION  (reports OpenSSL version built into Python, which aws-cli 1.16.312 will use) </pre>Will the newer TLS-1.3 (or other newer transport layer protocols) work ok with the serverside of "aws-cli"?    I am assuming probably yes, but experience has taught me to check.  Orwill OpenSSL/Python/AWS-CLI be able to fall-back to TLS-1.2 that it wants?   As ofnow, when aws-cli runs, I can't tell which TLS it is using.  If TLS-1.3 is ok, then we can go with amuch newer version of OpenSSL.TL;DR:Ok, in reviewing AWS Documentation, I found this:https://aws.amazon.com/blogs/security/tls-1-2-required-for-aws-endpoints/and it looks like aws-cli does support TLS-1.3, so we will go with the OpenSSL 1.1.1 stuffto compile into our custom Python.Question now is just:  How to we check which TLS-1.x our aws-cli client is using when itconnects?   Thanx for any info.FollowComment"


Question: How filebeat read AWSSQS or AWSSNS service messages?

I need help for read AWSSQS message through filebeat then pass through elastic search. Can you provide filebeat yml file config details related linksFollowComment

Answer: "0Instead of using Filebeats, you can look at using the Logstash input plugin for SQS if your goal is to pull messages from an SQS queue and send them to ElasticSearch - https://www.elastic.co/guide/en/logstash/current/plugins-inputs-sqs.htmlThis is the Github link - https://github.com/logstash-plugins/logstash-input-sqsI will however recommend to check in the ElasticSearch forum as well, since this question is more about ElasticSearch than AWS.CommentShareEXPERTIndranil Banerjee AWSanswered 10 months agoIndranil Banerjee AWS EXPERT10 months agoThere is no Logstash input plugin for SNS, so you will have to create an SQS queue subscriber to the SNS topic and then use the Logstash SQS input pluginShare0Thank for your quick reply. let me try with LogstashCommentSharerePost-User-6761812answered 9 months ago"


Question: Is it possible to craft an identity source that will read the JWT from a cookie?

"I have a customer looking at API Gateway but does not want to write a custom authorizer, but rather would like to use native JWT integration.The customer has researched into HTTP APIs and know that HTTP APIs can make use of JWT authorization by specifying an identity source of $request.header. Authorization (https://docs.aws.amazon.com/apigateway/latest/developerguide/http-api-jwt-authorizer.html).There's a description of identity sources but it's not clear how, or if it's possible, to reference a cookie: https://docs.aws.amazon.com/apigateway/latest/developerguide/http-api-lambda-authorizer.html#http-api-lambda-authorizer.identity-sourcesIs this possible, or do we have a workaround?FollowComment"

Answer: "0Accepted Answerfrom doc: "For JWT, a single entry that specifies where to extract the JSON Web Token (JWT) from inbound requests. Currently only header-based and query parameter-based selections are supported, for example $request.header.Authorization."As a workaround you can use a Lambda authorizer that will get the full request and validate the token.CommentShareEXPERTUrianswered 3 years ago"


Question: Amazon EKS node group Spot instance

I've updated a managed node group from on-demand to SPOT and since I'm getting some network issue :mountVolume. SetUp failed to volume "web-krups-config": failed to sync configmap cache : timed out waiting for the conditionMoutVolume.SetUp failed to volume "nri-integrations-cfg-volume" : object "newrelic"/"newrelic-bundle-nrk8s-integrations-cfg" not registerednetwork is not ready: container runtime network not ready : NetworkReady=false reason:docker : network plugin is not ready : cni config uninitializedAny idea or best practices to follow to understand the root cause & fix this issue ?Pods on this node group seems to be in running state ~15 minute and move to pending state.FollowCommentlp901 9 months agoAssuming you are using the VPC CNI looks like its failing to load correctly. Check the aws-node pod for the node in question for any logs https://github.com/aws/amazon-vpc-cni-k8s/blob/master/docs/troubleshooting.md#troubleshooting-cniipamd-at-node-level https://aws.amazon.com/premiumsupport/knowledge-center/eks-cni-plugin-troubleshooting/Share


Question: EC2 can't retrieve the name because the AMI was either deleted or made privateHow to resolve

EC2 can't retrieve the name because the AMI was either deleted or made privateHow to resolveHow to know owner of deleted AMIFollowComment

Answer: "0Once an EC2 instance is launched it has no dependency with the AMI from which it has been launched even if the AMI is de-registered. Even though the AMI gets registered there won't be any effect on the running instance. Below article confirms the same statement:https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/deregister-ami.htmlWhen an AMI gets deprecated it cannot be seen on AWS console. Although, we can view the those details from AWSCLI.More details about deprecated(deregistered) AMI:The deprecated AMI does not appear in DescribeImages API calls unless you specify its ID or specify that deprecated AMIs must appear. AMI owners continue to see deprecated AMIs in DescribeImages API calls.The deprecated AMI is not available to select via the EC2 console. For example, a deprecated AMI does not appear in the AMI catalog in the launch instance wizard. AMI owners continue to see deprecated AMIs in the EC2 console.In order to view the AMI details, describe-images command can be used. The following command will list the details such as name, image id, creation date, deprecation time, image owner alias.$ aws ec2 describe-images  --region <RegionID> --image-ids <AMIid>CommentShareShagun_ACanswered 7 months ago"


Question: Throttle API Stage

I am finding the documentation a little confusing. I am trying to throttle a method and do not know how to do this in cloud formation:ProviderAPIUsagePlan:Type: 'AWS::ApiGateway::UsagePlan'Properties:ApiStages:- ApiId: !Ref ProviderAPIGatewayIDStage: ProdThrottle:'/route/{routeId}/PATCH'BurstLimit: 30RateLimit: 30Description: Provider API usage planQuota:Limit: 100000Period: WEEKUsagePlanName: !Sub- 'bill-usage'On the Stage I need to specify the path and method but I also need to specify the BurstLimit and RateLimit.FollowComment

Answer: 0I did it like this:ProviderAPIUsagePlan:Type: 'AWS::ApiGateway::UsagePlan'Properties:ApiStages:ApiId: !Ref ProviderAPIGatewayIDStage: ProdThrottle:'/route/{routeId}/PATCH':BurstLimit: 30RateLimit: 30Description: Provider API usage planQuota:Limit: 100000Period: WEEKUsagePlanName: !Sub'bill-usage'CommentSharebillbeckettanswered 2 years ago


Question: Signing into AWS to a different account

"I currently have AWS configuration set up with my access key id and secret access key (i.e. I see this when going to 'aws configure' in the CLI). I then login through my company's OKTA to then access the AWS UI.I've just been given access to a new AWS account (lets call it X) that I've been given access to AWS Single Sign-on (SSO) in OKTA for this new account.What are the steps I need to take in order to access this new account (X)?Also, I was told that when using SSO  it'll give me the option to go to the Management Console or Programatic Access - the Programatic Access will show you iam access key and secret to use, but I still see the previously used account not account (X).FollowComment"

Answer: "1With the AWS SSO you have a page https://d-xxxxxxx.awsapps.com/start#/With this page you can configure the SSO login for the cli: https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.htmlAfter you have configured it, run: aws sso login --profile generated-profile-name to login. This will open a browser window and redirect you to okta to authenticate.CommentShareJacob Verhoeksanswered 5 months ago0You can have multiple profiles in the credentials/config files. If you want to store the additional keys do something like this:aws configure --profile accountxThen to use these credentials use the --profile in the command, like:aws ec2 describe-instances --profile accountxSee: Named profiles for the AWS CLI.CommentShareEXPERTkentradanswered 5 months agorePost-User-5057841 5 months agoThanks @kentrad, but they didn't give me any additional secret or key, so how would I get those? I was told to log in via okta but when I do that I just see my previous account not the new account (X)Share"


Question: Aurora Serverless v1 - Bahrain region: Launch date?

"Has anyone seen any announcements, or know of any plans, when Aurora Serverless v1 will be available in Bahrain?FollowComment"

Answer: "0Accepted AnswerHello  ejunkey,Thank you for posting your question on the AWS Forums, my name is Shane and it will be a pleasure assisting you with this today.From reviewing your question I understand you wish to know about Aurora availability in Bahrain.Please correct me if I'm wrong.Please allow me to assist you.Unfortunately Aurora server-less is not currently available in Bahrain.There is not a confirmed release date yet, you can check the link below regularly for updates regarding new features and regions. [1]I hope this information helps you. Please reach out if you have any further questions, I will be more than happy to help!Wishing you a great day ahead and stay safe!Best Regards,Shane Byrne.Amazon Web ServicesReferences:[1] Supported features in Amazon Aurora by AWS Region and Aurora DB enginehttps://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Concepts.AuroraFeaturesRegionsDBEngines.grids.htmlCommentShareShaneB-AWSanswered 2 years ago"