Question: "[problem at MMS predict] At MMS(sagemaker), error code(500), type(InternalServerException)"

"I make pytorch model with sagemaker, MMS.This is my mms code.%%timeinstance_type = 'c5.large'# accelerator_type = 'eia2.medium'predictor = mme.deploy(    initial_instance_count=1,    instance_type=f"ml.{instance_type}")mme.add_model(model_data_source=model_path, model_data_path="model.tar.gz")list(mme.list_models())#> [ 'model.tar.gz']I try to predict with this code.start_time = time.time()predicted_value = predictor.predict(requests, target_model="LV1")duration = time.time() - start_timeprint("${:,.2f}, took {:,d} ms\n".format(predicted_value[0], int(duration * 1000)))And, return error message.ModelError: An error occurred (ModelError) when calling the InvokeEndpoint operation: Received server error (500) from model with message "{  "code": 500,  "type": "InternalServerException",  "message": "Failed to start workers"}MMS with pytorch is 'little' difficult. X)help me, please.FollowComment"

Answer: "1Accepted AnswerHi ,I think your target model on the prediction needs to have the name of the model you have deployed -for example , when you are adding the model withmme.add_model(model_data_source=model_path, model_data_path="model.tar.gz")the model_data_path contains the name of the model . From the sagemaker-examples:(https://github.com/aws/amazon-sagemaker-examples/blob/main/advanced_functionality/multi_model_xgboost_home_value/xgboost_multi_model_endpoint_home_value.ipynb)**model_data_path is the relative path to the S3 prefix we specified above (i.e. model_data_prefix) where our endpoint will source models for inference requests.Since this is a relative path, we can simply pass the name of what we wish to call the model artifact at inference time (i.e. Chicago_IL.tar.gz). In your case "model.tar.gz".However, when predicting you call the model ,target_model="LV1"?CommentShareEXPERTLorea-AWSanswered 10 months agorePost-User-8794903 10 months agoAccoding to your comment, I modify code and excution like that.Share0Accoding to your comment, I modify code and excution.I try 2 solution.#1 predictor.predictpredicted_value = predictor.predict(data=requests, target_model="modal.tar.gz")returnValidationError: An error occurred (ValidationError) when calling the InvokeEndpoint operation: Failed to download model data(bucket: sagemaker-ap-northeast-2-344487737937, key: LouisVuiotton-cpu-2022-08-16-02-02-04-408-c6i-large/model/modal.tar.gz). Please ensure that there is an object located at the URL and that the role passed to CreateModel has permissions to download the model.#2 With boto3, invoke_endpoint()import boto3client = boto3.client('sagemaker-runtime')endpoint_name = predictor.endpoint_nameresponse = client.invoke_endpoint(    EndpointName=endpoint_name,    Body=requests,    ContentType='application/x-image',#     Accept='string',#     CustomAttributes='string',    TargetModel='model.tar.gz',#     TargetVariant='string',#     TargetContainerHostname='string',#     InferenceId='string')returnModelError: An error occurred (ModelError) when calling the InvokeEndpoint operation: Received server error (500) from model with message "{  "code": 500,  "type": "InternalServerException",  "message": "Failed to start workers"}". See https://ap-northeast-2.console.aws.amazon.com/cloudwatch/home?region=ap-northeast-2#logEventViewer:group=/aws/sagemaker/Endpoints/LV-multi-2022-08-16-02-11-15 in account 344487737937 for more information.I assume sol 2, boto3.invoke_endpoint's result [  "message": "Failed to start workers" ] come from sol 1, [that the role passed to CreateModel has permissions to download the model.].I already use excution role [''arn:aws:iam::344487737937:role/service-role/AmazonSageMaker-ExecutionRole-20220713T151818"].How to I get additional role (that the role passed to CreateModel has permissions to download the model.)?CommentSharerePost-User-8794903answered 10 months agorePost-User-8794903 10 months agoIt's my IAM at my company. IAMReadOnlyAccess CloudWatchLogsReadOnlyAccess AmazonSageMakerFullAccess AmazonS3FullAccess ServiceQuotasFullAccess AWSBillingReadOnlyAccessShould I get more IAM?SharerePost-User-8794903 9 months agoI solve this! I try to download image at endpoint.but endpoint can not connect outside network except Lambda.I make request with s3urlDownload image from s3 to lambdaTransmit image from lambda to endpointShare"


Question: "Not able to connect to EC2 instance using windows remote desktop, when I'm whitelisting only a single ip"

"I have hosted an EC2 instance on AWS, the instance is protected using 2 security groups, network ACL, and a route table.network acl inbound rules:Rule NumberTypeProtocolPort rangeSourceAllow/Deny10RDP(3389)TCP(6)338949.37.0.0/16Allownetwork acl outbound rules:Rule NumberTypeProtocolPort rangeSourceAllow/Deny10RDP(3389)TCP(6)338949.37.0.0/16AllowSecurity Group 1 inbound rules:IP versionTypeProtocolPort rangeSourceIPV4RDPTCP338949.37.0.0/16As security group, allow reverse traffic, I did not add any outbound rule.Route table routes:DestinationTargetStatusPropagated::/0Internet gatewayActiveNo0.0.0.0/0Internet gatewayActiveNo1.0.0.0/16localActiveNoI tried to connect to the EC2 instance using:Windows Remote Desktop from 49.37.10.140/32and telnet at port 3389but getting an error that the Ec2 instance can't be reached.Can anyone please let me know, if is there any misconfiguration in the settings that I have done?FollowComment"

Answer: "2Accepted AnswerThere appears to be a problem with the outbound rules of the network ACL.Network ACLs are stateless security layers.So we need to add a rule to evaluate the return packet.Please allow 1024-65535 as ephemeral ports with outbound rule 49.37.10.140/32network acl outbound rules:Rule NumberTypeProtocolPort rangedestinationAllow/Deny10Custom TCPTCP (6)1024 - 6553549.37.10.140/32Allowhttps://docs.aws.amazon.com/vpc/latest/userguide/vpc-network-acls.htmlCommentShareEXPERTRiku_Kobayashianswered 2 months agorePost-User-4072452 2 months agoIf I'm doing telnet at port 3389, and the request is going to EC2, then why EC2 is not responding back on port 3389?Or, if it's responding back on port 3389, and nacl already has outbound rule to allow traffic on port 3389, then why is the request failing?ShareRiku_Kobayashi EXPERT2 months agoWhen communicating from the client to the destination, the client is assigned one of the ephemeral ports (1024-65535) as the source port.So after communicating to the destination port (3389 in this case), the return destination port will be one of 1024-65535 and must be allowed in the network ACL.Even though port 3389 is allowed in the outbound rules, the destination port of return does not match, so it is deniedShareRiku_Kobayashi EXPERT2 months agoAdditional information.https://repost.aws/knowledge-center/resolve-connection-sg-acl-inboundShare"


Question: Amazon S3 static website hosting redirect typo error

"Amazon S3 Bucket website endpoint redirecting to a URL that shows "http://" to "https//" Without the ":" resulting in a typo in https error.When looking at the properties, the bucket website endpoint shows "http://www.bizbreakthroughquiz.com.s3-website-us-west-1.amazonaws.com" when I click on it or copy it into the search bar, it is redirected to "http://https//quiz.tryinteract.com/#/64503f5b311d0b00149fa215/" When you type a ":" after "https" in the redirected URL, the correct page will then show up.Why is the redirected website endpoint redirecting to a URL that is not what is showing it will be redirected to?This is for a redirect requests for an object, if that helps.Thank you in advance for your help solving this!FollowCommentalatech EXPERT23 days agoI assume this is now working as intended?Sharealatech EXPERT23 days agoI assume this is now working as intended?Share"

Answer: "0quiz.tryinteract.com is a CloudFront distribution.As well as checking the bucket website endpoint in S3 (which you've already done, and it looks okay) also check the CloudFront distribution for any typos (such as the absence of the colon charater in an address somewhere).$ nslookup quiz.tryinteract.comServer:8.8.8.8Address:8.8.8.8#53Non-authoritative answer:quiz.tryinteract.comcanonical name = d2wj10s4yn8oah.cloudfront.net.Name:d2wj10s4yn8oah.cloudfront.netAddress: 18.67.111.54Name:d2wj10s4yn8oah.cloudfront.netAddress: 18.67.111.44Name:d2wj10s4yn8oah.cloudfront.netAddress: 18.67.111.82Name:d2wj10s4yn8oah.cloudfront.netCommentShareRWCanswered 24 days ago"


Question: Ec2 Instance won't terminate - stuck in "shutting-down" state

"Hi,one of our instances failed and when we replaced it, tried to stop old box one: i-5f77c2efFor week now it is haning there and denies all attempts to terminate it.(Note: EC2 instance was provisioned from OpsWorks Layer)I know there should be possibility to force-terminate EBS-based instances, however this one is not the case.Thank you for help!M.S.FollowComment"

Answer: 0Hello thereInstance was running on degraded hardware and thats why API calls were not passing through. I have gone ahead and expedited the process. I see that instance is terminated now.We apologize for any inconvenience caused.CommentShareAWS-User-7041766answered 3 years ago


Question: How to update cluster config when the original ebs snapshot is gone

"Hi,I have a cluster configured with ParallelCluster 2.10 that has been for over half a year now. It has two ebs resources mounted /shared and /install. It seems that both the ebs snapshots associated with the mounting points have been deleted. This should not be an issue, since the snapshots are used only for the initialization of the cluster, however, when I am trying to update the configuration of the cluster now - simply adding some compute nodes(bumping the max_queue_size), I am facing the following error message:<code>(venv_aws) > pcluster update flacscloudHPC-2-10-0  -c ./config_flacscloudHPCRetrieving configuration from CloudFormation for cluster flacscloudHPC-2-10-0...Validating configuration file ./config_flacscloudHPC...WARNING: The configuration parameter 'scheduler' generated the following warnings:The job scheduler you are using (torque) is scheduled to be deprecated in future releases of ParallelCluster. More information is available here: https://github.com/aws/aws-parallelcluster/wiki/Deprecation-of-SGE-and-Torque-in-ParallelClusterERROR: The section [ebs custom2] is wrongly configuredThe snapshot snap-0870f8601759ca239 does not appear to exist: The snapshot 'snap-0870f8601759ca239' does not exist.</code>How can I update the max_queue_size without having the original snapshod 'snap-0870f8601759ca239'? Is it safe to forcefully reconfigure the cluster with some updated, existing snapshots?FollowComment"

Answer: "0Accepted AnswerHello mfolusiak1,to be able to perform the update, please be sure the following bullets are verified in the cluster configuration:keep the ebs_snapshot_id set with the value of the deleted snapshotmake sure that volume_size is also set. If it was not, please add it and make sure it reflects the size of the existing volumedisable the sanity check, setting sanity_check to falseAfter that, you can perform the update with the pcluster update commandEdited by: luca-aws on Sep 7, 2021 5:40 AMCommentSharelukeseawalkeranswered 2 years ago0Thank you for your help, this worked!CommentSharemfolusiak1answered 2 years ago"


Question: Template format error: Unrecognized resource types: [AWS::SES::Template] bug or expected behaviour?

"Hi everyone,I'm trying to deploy multi-region StackSets but get the following error:Template format error: Unrecognized resource types: [AWS::SES::Template]The resource type definition is correct according to the CloudFormation documentation and previous tests I executed with standard CloudFormation stacks. Using simple stacks within the region of choice the template the resources get provisioned successfully. But why is CloudFormation StackSet unable to deploy the AWS::SES::Template resource?The region of choice is eu-west-1 if this makes any difference.Would be great to get some help and if it is a bug to address this to the AWS support team.Best regards and thanks in advance!FollowComment"

Answer: "1Accepted AnswerWhich regions are you deploying the Stack Set to? If you try to deploy to a region which doesn't has SES or support that resource, you'll get that error. You should limit your Stack Set deployment to just supported regions. You could also (if there are other resources in the template you still want to deploy) use a Condition to only deploy the Template in a suitable region(s).For reference, I quickly put together a minimal template with the AWS::SES::Template resource in, and checked the region support with the cfn-lint tool:% cat ses.yamlAWSTemplateFormatVersion: 2010-09-09Resources:  Template:    Type: AWS::SES::Template    Properties:      Template:        HtmlPart: Testing        SubjectPart: Testing        TemplateName: Testing        TextPart: Testing% cfn-lint -r ALL_REGIONS -- ses.yamlE3001 Invalid or unsupported Type AWS::SES::Template for resource Template in af-south-1ses.yaml:5:5E3001 Invalid or unsupported Type AWS::SES::Template for resource Template in ap-east-1ses.yaml:5:5E3001 Invalid or unsupported Type AWS::SES::Template for resource Template in ap-northeast-2ses.yaml:5:5E3001 Invalid or unsupported Type AWS::SES::Template for resource Template in ap-northeast-3ses.yaml:5:5E3001 Invalid or unsupported Type AWS::SES::Template for resource Template in ap-south-1ses.yaml:5:5E3001 Invalid or unsupported Type AWS::SES::Template for resource Template in ap-southeast-2ses.yaml:5:5E3001 Invalid or unsupported Type AWS::SES::Template for resource Template in ap-southeast-3ses.yaml:5:5E3001 Invalid or unsupported Type AWS::SES::Template for resource Template in ca-central-1ses.yaml:5:5E3001 Invalid or unsupported Type AWS::SES::Template for resource Template in cn-north-1ses.yaml:5:5E3001 Invalid or unsupported Type AWS::SES::Template for resource Template in cn-northwest-1ses.yaml:5:5E3001 Invalid or unsupported Type AWS::SES::Template for resource Template in eu-central-1ses.yaml:5:5E3001 Invalid or unsupported Type AWS::SES::Template for resource Template in eu-west-2ses.yaml:5:5E3001 Invalid or unsupported Type AWS::SES::Template for resource Template in sa-east-1ses.yaml:5:5E3001 Invalid or unsupported Type AWS::SES::Template for resource Template in us-gov-east-1ses.yaml:5:5E3001 Invalid or unsupported Type AWS::SES::Template for resource Template in us-gov-west-1ses.yaml:5:5CommentShareEXPERTJames_Sanswered a year agoAWS-User-0932961 a year agoThat was the exact issue I had. Deploying the stack manually in eu-central-1 out of curiousity and then in eu-west-1 showed this problem. The confusing thing was, that the template used for a stack set is relative to the stack sets region and not the stack instance regions.Thank you and this is the correct answer to everyone facing the same issue.Shareiann0036 EXPERTa year agoTo clarify, although the feature is available within most of these regions, the CloudFormation resource is not. Refer to this issue for tracking: https://github.com/aws-cloudformation/cloudformation-coverage-roadmap/issues/326Share0As per the documentation, the resource type is correct, and also the region you selected is supported. Please refer to link {1}But Before you perform "Multi-region Deployment With AWS Cloudformation Stacksets", you need to set up permissions for cloud formation stacksets.AWS CloudFormation StackSets requires specific permissions to be able to deploy stacks in multiple AWS accounts across multiple AWS Regions. It needs an administrator role that is used to perform StackSets operations, and an execution role to deploy the actual stacks in target accounts.These roles require specific naming conventions:***AWSCloudFormationStackSetAdministrationRole ***for the administrator role, and **AWSCloudFormationStackSetExecutionRole for the execution role.Note: StackSets execution will fail if either of these roles are missing.The ***AWSCloudFormationStackSetAdministrationRole ***should be created in the account where you are creating the StackSet.The ***AWSCloudFormationStackSetExecutionRole ***should be created in each target account where you wish to deploy the stack.{1} https://docs.aws.amazon.com/general/latest/gr/cfn.html#regional-support-stacksetsI hope this helps.CommentShareSwwapnilanswered a year ago0Thank you for your support. The error is not permission related though. For verification: I already deployed SSM parameters using the same setup, even the same template file. The only new thing to the CloudFormation template file are the AWS::SES::Template resources, which CloudFormation StackSet doesn't seem to like or recognize.I already get the error message when I upload the CloudFormation template via AWS Management Console > CloudFormation > StackSets. Same happens programmatically.CommentShareAWS-User-0932961answered a year ago0If cloudformation stackset isn't recognizing the "AWS::SES::Template" resources, in that case, can you please validate template syntax?Please refer to the knowledge-center article below:https://aws.amazon.com/premiumsupport/knowledge-center/cloudformation-template-validation/CommentShareSwwapnilanswered a year ago"


Question: Best practice for storing personal information on AWS that we shouldn't be able to see

"We store customer information that we shouldn't have access to, and don't want to inconvenience users by making them lose information if they forget their passwords, is there a good way to solve this problem, so that the devs who have access to our AWS can't read customer data, and so the customers can reset their passwords, without losing access to their data?FollowComment"

Answer: "0Accepted AnswerHi there! It seems like this is a perfect use case for Secrets manager and Key management store (KMS)! If I am understanding correctly, this should help you. If you find this useful, please accept my answer as this will help me answer more questions about aws!AWS Secrets Manager is a service that makes it easy to store and retrieve your secrets via API or the AWS CLI and rotate your credentials with built-in or custom AWS Lambda functions. You can use Secrets Manager to store customer information that you shouldn’t have access to, such as passwords, API keys, or personal data. Secrets Manager encrypts your secrets with the AWS KMS key of your choice, and you can control who has access to your secrets with granular IAM policies. You can also enable automatic rotation of your secrets with built-in or custom Lambda functions that can call external APIs or services. For more info, checkout this blog! https://aws.amazon.com/blogs/aws/aws-secrets-manager-store-distribute-and-rotate-credentials-securely/I tried to create a step by step for you, give it a go and please feel free to reply with any questions!1.Create a KMS key that you want to use to encrypt your secrets. You can use the AWS KMS console or the AWS CLI to create a customer managed key (CMK) and configure its key policy and key rotation settings.2.Create a secret in Secrets Manager and choose the KMS key that you created in step 1. You can use the Secrets Manager console or the AWS CLI to store a new secret and provide a name, description, and value for your secret. You can also choose whether to enable automatic rotation of your secret and select a built-in or custom Lambda function for rotation.3.Configure access to your secret with IAM policies. You can use the IAM console or the AWS CLI to create IAM roles or users and attach policies that allow or deny access to your secret based on conditions such as source IP address, time of day, or MFA authentication. You can also use resource-based policies on your secret to grant cross-account access or delegate permissions to other AWS services.4.Retrieve your secret with the Secrets Manager API or the AWS CLI. You can use the GetSecretValue API or the get-secret-value command to retrieve the plaintext value of your secret or its metadata. You can also use the Secrets Manager SDKs or libraries to integrate Secrets Manager with your applications.Good luck! Again if you found this useful, it would be much appreciated if you could accept my answer :)For more info about secrets manager: https://docs.aws.amazon.com/secretsmanager/latest/userguide/intro.htmlCommentSharerePost-User-1144959answered 16 days agorePost-User-5416808 16 days agoHello, thank you for your input, that is super helpful! I am wondering though, technically a high enough privelege user with access to AWS can change the policies as they like, or access the keys they like, right? I assume there's no way around that?SharerePost-User-1144959 16 days agoHi! No problem - you are right with that, technically someone with enough privileges (e.g. root or admin) will be able to change policies as they like. However, applying the principle of least privilege should help avoid this. Best practice is to lock the root account down and not use it for anything after creation of IAM roles/users to make changes. If you use AWS Organizations, service control policies (SCPs) allows you to allow/block actions that users can perform (e.g. block users accessing secrets manager) - this lets you apply the rule across all accounts in your organisation.SharerePost-User-1144959 16 days agoyou can and should lock down the root account with MFA auth to prevent anyone unauthorised from accessing your secrets - finally, services like cloudtrail and cloudwatch will allow you to track all user API calls and actions and alert you in the case that someone has managed to edit something they shouldn't be able to. This combined with the use of IAM users/ roles with limited permissions (to get their job done, i.e. dev view items in s3 bucket only) will help you use AWS best practices when it comes to permissions. Let me know if you have any further comments!SharerePost-User-5416808 15 days agoI see, I take it I would have to check with legal advice to see if this implementation would satisfy GDPR?SharerePost-User-1144959 14 days agohi there! Yeah I would probably double check if you are unsure :)Share"


Question: shared code between many lambdas

"Hi team,in my serverless application, I have many lambda functions that need to access to Redis cache,I would like to know what is the best practice for this scenario, is:to have one lambda that creates the connection to the Redis cluster and then returns the RedisClient, this lambda will be called by all other lambdasor make the common code (that connects to Redis and return the Redis client) a layer that is used by all other lambdas?Thank you!FollowComment"

Answer: "1I would not use a separate Lambda function just to create the connection. I am not even sure if it is possible. The other function runs in its own isolated execution environment so you can't share the connection.You should create the connection in each Lambda function that needs it. You can use a Layer, but I prefer to just include the code in the function and call it where you need it.CommentShareEXPERTUrianswered 7 months agoEXPERTIndranil Banerjee AWSreviewed 7 months ago0The first option is an absolute no-no.Take a look at this tutorial for an example - https://docs.aws.amazon.com/lambda/latest/dg/services-elasticache-tutorial.htmlMake sure that the connection opening code is outside the event handler code in the lambda, otherwise a new connection will be opened with every event.If you are concerned about high concurrency of lambda causing a high number of connections to Redis, you can set reserved concurrency on the lambda so the number of connections does not go beyond what your Redis cluster can accept. The clients will then have to implement retry in their code to handle throttles due to reserved concurrency on the lambdas.CommentShareEXPERTIndranil Banerjee AWSanswered 7 months agoJess 7 months agoThank you! so it's better to use the code directly on each lambda function rather than using a layer code, to avoid latency in lambda init ?Share"


Question: How do Route 53 resource record set IAM policies work?

"AWS added granular Route 53 resource record set IAM conditions. There's documentation, but if you copy and paste one of the example policies into IAM, it shows an error that the condition doesn't exist, and a security warning that Forallvalues should not be used.How would one actually write an IAM policy to, for example:CREATE or DELETE record setsof type TXTwith names matching _acme-challenge.*?FollowComment"

Answer: "1[+] This can be updated using the Policy feature of IAM [+] Please find the JSON file for the LAB setup that I have performed.{    "Version": "2012-10-17",    "Statement": [        {            "Sid": "VisualEditor0",            "Effect": "Allow",            "Action": "route53:ChangeResourceRecordSets",            "Resource": "*",            "Condition": {                "StringEquals": {                    "route53:ChangeResourceRecordSetsNormalizedRecordNames": "_acme-challenge.*"                },                "StringEqualsIfExists": {                    "route53:ChangeResourceRecordSetsRecordTypes": "TXT",                    "route53:ChangeResourceRecordSetsActions": [                        "CREATE",                        "DELETE"                    ]                }            }        }    ]}[+] How to go about this.[-] Create New Policy by selecting service : Route53[-] Navigate to Action --> Access level[=] Collapse Write [access level][=] Select - ChangeResourceRecordSets[-] Now navigate to Resources[=] This would depend on use-case[-] Navigate to Request Conditions[=] Add Condition[=] Under Condition Key you get to see all the options under [Service level condition keys]ChangeResourceRecordSetsNormalizedRecordNamesChangeResourceRecordSetsActionsChangeResourceRecordSetsRecordTypesPlease refer the Json [from LAB setup]  which would provide you with first-hand information as per the question.CommentShareRiKaanswered 8 months agomnordhoff 8 months agoHmm. Using the visual editor is a good idea. But clicking on the JSON tab still shows the "Invalid Service Condition Key" errors! :-/Share1This may be a display error since this is a new feature update and the console at IAM may be updating it soon. We have brought it to the attention.  Can you please try to see if this is preventing you with creation of the policy. If you are able to proceed with the creation and test the permissions?CommentShareEXPERTAWS-User-Nitinanswered 8 months ago"


Question: Is AWS documentation feedback broken?

"I've tried to send feedback on AWS documents (e.g. https://docs.aws.amazon.com/cloud9/latest/user-guide/setup.html) where the information in the documentation is incorrect, but when submitting feedback and after entering the security catchpa, I end up with a HTTP Status 400 - Bad Request.The feedback button seems to work ok in an incognito page, but not in my normal browser profile - any pointers as to which cookie is causing things to break?FollowComment"


Question: EC2 instances unhealthy when created via ASG using cdk.

"I am creating an ASG which will have a classical load balancer . The desired number of instances is 5 , I am starting the asg creation using a userdata but even after experimenting multiple times the load balancer shows unhealthy hosts,i changed the subnet type of the vpc as public but the number of healthy host for the elb remains 0 . Below is the code segment Vpc vpc=new Vpc(this,"MyVPC");        AutoScalingGroup asg = AutoScalingGroup.Builder.create(this,"AutoScalingGroup").vpcSubnets(SubnetSelection.builder()                        .subnetType(SubnetType.PUBLIC)                        .build()).vpc(vpc).instanceType(InstanceType.of(InstanceClass.BURSTABLE2, InstanceSize.MICRO))                .machineImage(new AmazonLinuxImage()).minCapacity(1).desiredCapacity(5).maxCapacity(10).build();        asg.addUserData("#!/bin/bash\n" +                "# Use this for your user data (script from top to bottom)\n" +                "# install httpd (Linux 2 version)\n" +                "yum update -y\n" +                "yum install -y httpd\n" +                "systemctl start httpd\n" +                "systemctl enable httpd\n" +                "echo \"
Hello World from $(hostname -f)
\" > /var/www/html/index.html");        LoadBalancer loadbalancer=LoadBalancer.Builder.create(this,"ElasticLoadBalancer").vpc(vpc).internetFacing(Boolean.TRUE).healthCheck(software.amazon.awscdk.services.elasticloadbalancing.HealthCheck.builder().port(80).build())                .build();        loadbalancer.addTarget(asg);        ListenerPort listenerPort = loadbalancer.addListener(LoadBalancerListener.builder().externalPort(80).build());Also the instances those are created by default via ASG cannot be accessed on the web(by hitting their public IP) even after changing the security groups or making them all in a public subnet they are not accessible from instance connect,neither the load balancer shows these hosts healthyFollowComment"

Answer: "0It sounds like you probably have some sort of connectivity issue.  Make sure all of these are correctSecurity group on ELB is allowing inbound traffic from your clients and oubound traffic to the ASG instancesSecurity Group on the ASG instances is allowing inbound traffic on port 80 from the ELBNACLs (Network ACLs) for the ELB subnets are allowing traffic to flow both to/from clients as well as to/from the ASG instancesThe ELB is set to public if your clients are coming in over the Internet; private if they're in the VPC or over Peering/VPN/etcThe ELB subnets have a route table allowing the clients to connect to themSome tests you can do to narrow down the issueFrom an instance in the same subnet with the same security group as the ELB, try to curl one of the non-working instances directly.  If this can connect then you know the security groups on both are working correctly.  If it times out there may be a security group or firewall issue.  If it gets 'connection refused' then the webserver isn't running/listening correctlyTry the same thing from an instance in the ELB's subnet.  This will test if the NACLs are working correctlyCommentShareShahad_Canswered a year ago"


Question: How to restart the DKIM configuration process via the Amazon SES console

"I am trying to verifying my DKIM domain identity via Easy DKIM. The first time that failed (CNAME error:  our provider appended the domain name). I have corrected that error in our DNS records. However: in the SES console the DKIM configuration status still is "Not configured". How can I restart verification process, so again get a status  "Pending" ?FollowComment"

Answer: "0Accepted AnswerHi TherePlease take a look at this support article.  You can delete and re-add the identity to retry verification.  See  https://aws.amazon.com/premiumsupport/knowledge-center/ses-domain-stuck-pending-verification/Retry the domain verification on Amazon SESAfter you correct any issues on your records, retry the domain verification on Amazon SES.Follow these steps to retry domain verification when the status is "verification pending":1. Open the Amazon SES console.2. From the AWS Region selector in the navigation bar, select the Region that your domain is in.3. In the left navigation pane, choose Verified identities. Then, select the domain that's stuck in "verification pending."4. Choose Delete, and confirm the delete.5. Choose Create identity. Then, re-enter the domain that's stuck in "verification pending," making sure to choose the same settings as you did originally.6. Choose Create identity.7. Wait for the domain's Verification Status to change to "verified."CommentShareEXPERTMatt-Banswered 7 months agoLexLen 7 months agoThanks for this very quick help - I would not have found that unexpected solution :-)Share"


Question: Attach role to file share

"In relation to this question, a role needs to be attached to a file share.  How is that done?Disregard...   Deleting and recreating file share.TIA,TimFollowComment"


Question: Run Command Missing from EC2 Console

"Hi, I'm very new to AWS and am in the process of running through a course on Pluralsight.  There are many references to running the 'run command' for EC2 instances however I don't see the run command or the 'systems manager services' in the left hand pane when logging in with my admin user account.  I have tried logging in with an IAM admin user account and the available options are the same.  Should I be able to see the 'systems manager services' and associated commands or is there an action required to enable this view?Thanks in advance!Edited by: Sunking2498 on Jan 5, 2020 7:22 PMFollowComment"

Answer: "0Accepted AnswerI too am going through some Pluralsight tutorials and ran into the same issue.  It appears the entire Systems Manager contents from the left pane of the EC2 dashboard has been moved to it's own dashboard.  You can click Services in the upper left and navigate to AWS Systems Manager.  Run Command is under the Instance & Nodes section on the left pane there.CommentShareAnithemaanswered 3 years ago0Perfect, thanks for your help!CommentShareSunking2498answered 3 years ago"


Question: ETL Replication from Oracle to Postgres

"I need to replicate data from Oracle database(views)  to Postgres . please let me know the best to do it.I believe AWS Glue can help in replicating ETL data, If you have any documents(step by step instructions) please share with me. If you have any other tool Please share the details.FollowComment"

Answer: "1Hello,Adding to the above point, SCT can help to move from Oracle to Glue - [] Converting extract, transform, and load (ETL) processes with AWS Schema Conversion Tool - https://docs.aws.amazon.com/SchemaConversionTool/latest/userguide/CHAP-converting-etl.htmlAdding that to the "data" movement via SCT + DMS (as mentioned in prev response)& connecting to RDS can help - [] AWS Glue connection properties - AWS Glue JDBC connection properties - https://docs.aws.amazon.com/glue/latest/dg/connection-defining.html#connection-properties-jdbcMore details should-be discussed with your Solutions Architect Team - Hope the links above help in the general idea of the architectureCommentShareEXPERTNIRUPAM_danswered a year ago0Hello,Thanks for posting on AWS re:Post.I think the doc below will give a high level overview of the process of migration-> https://aws.amazon.com/blogs/database/how-to-migrate-your-oracle-database-to-postgresql/Ideally - AWS SCT-> [] What is the AWS Schema Conversion Tool? - https://docs.aws.amazon.com/SchemaConversionTool/latest/userguide/CHAP_Welcome.htmlCouple with DMS will help->Oracle as source[] Using an Oracle database as a source for AWS DMS - https://docs.aws.amazon.com/dms/latest/userguide/CHAP_Source.Oracle.htmlPostgres as target[] Using a PostgreSQL database as a target for AWS Database Migration Service - https://docs.aws.amazon.com/dms/latest/userguide/CHAP_Target.PostgreSQL.htmlI sincerely hope I was able to shed some light on the matter for you - Have a great rest of the day!CommentShareEXPERTNIRUPAM_danswered a year ago"


Question: Node.js API in beanstalk returns 502 for large amount of data

"I have a next.js/nodejs API deployed to Beanstalk. The API is on a EC2 server and there's a ALB in between.When the data to return is large, the API returns a 502 error, indicating that something went wrong between ALB and EC2. I tried to increasee the idle timeout on the ALB from 60s to 120s but it didn't solve the issue, and anyway the 502 occurs approximately after 45s.If the data to return is not so large, the API works as expected, suggesting it is not an application problem.Is there anything else I can check to try to solve this issue?thanksMFollowComment"


Question: Can I take my AWS exam using co-operate email and then link to my personal?

"If I take the AWS exam using co-operate email, Can I link that to my personal email later?FollowComment"

Answer: "0Please submit a ticket to the AWS Training & Certification customer support team, and they will provide assistance. If you already submitted a case, please allow at least 48 hrs to get a response.CommentShareNelliT-AWSanswered 2 months ago"


Question: How can I resolve Route 53 dns after ICANN suspended the domain name?

"Hello. I forgot to acknowledge my contact details before 15 days and my dns from route 53 was suspended.The email read:"Dear AWS customer,Your domain has been suspended because you didn't verify the email address for the registrant contact before April 28, 2022."I followed the directions, resent a confirmation email, and clicked the confirmation link sent.I recreated the hosted zone by deleting the previous zone, clicking "new zone", and added my A record pointed to my static site on S3, but I still cannot reach my domain. I am still receiving this message when I type my domain in the browser:"DNS address could not be found. Diagnosing the problem."What can I do to troubleshoot this issue? Is there something that needs to be done on my side with the domain zone settings or is this something on AWS/ICANN's side?FollowComment"

Answer: "1Hi there,I understand your domain name is suspended because you forgot to acknowledge your details in an email sent to you. Please correct me if I misunderstood.When you register a domain with AWS for the first time, ICANN requires that you get confirmation that the email address for the registrant contact is valid.If you don't click the link in the email in the allocated amount of time, ICANN requires that AWS suspends the domain.Please verify on the following link [1] to check if you followed the correct steps to resend the confirmation email for your domain registration.Your domain is suspended so therefore it becomes unavailable on the internet.You can use either of the following methods to determine whether your domain has been suspended:On the Registered domains page of the Route 53 console, find the domain name in the Alerts table at the bottom of the page. If the value of the Status column is clientHold, the domain has been suspended.Send a WHOIS query for the domain. If the value of Domain Status is clientHold, the domain has been suspended. The WHOIS command is available in many operating systems, or you can use the Whois third party site [2].To make a domain available on the internet again, you must get it unsuspended and cannot be done on the domain zone setting.For further assistance on getting your domain unsuspended, you can contact AWS Support [3]I hope this was helpful.Reference[1]https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/domain-click-email-link.html#domain-click-email-link-register-procedure[2]whois.com/whois[3]https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/domain-contact-support.htmlCommentShareKaraboanswered a year agoGreenOrca 4 months agoI was about to open a similar question, but got redirected to this original. The answer above solved my issues. I had to open a support ticket, but it was included in the Basic plan, which is great. My domain suspension caused my WorkMail account to go offline for 72 hours and I hadn't received the original email from AWS regarding the technical contact verification due to the ICANN legislation.I hope this works for others too.Share"


Question: Sagemaker Autopilot Endpoint OutOfMemory

"Good morning, I am encountering an unusual issue with Sagemaker Autopilot. After launching the training on my dataset and completing the entire process without any problems, the best model is deployed, and the endpoint appears to be functioning correctly. However, the issue arises when I attempt to call the endpoint repeatedly. I observe that the memory usage rapidly increases until it reaches 97%. At that point, it either crashes with the error message "worker died," and the CloudWatch logs indicate an "OutOfMemory" error in Java, or it remains operational but becomes congested. Upon reviewing CloudWatch, there doesn't appear to be anything abnormal except for the recurring message:"The column 'column_name' does not exist in your dataset. Please specify a different column name for the 'Input column' that actually exists in your dataset and try again."This message repeats even before I start invoking the endpoint. I'm uncertain if this is indeed the cause of the problem.FollowComment"


Question: What is best database or search service to store and search for millions of ip addresses?

"A customer has millions of potential IP addresses in IP ranges they set up. They are looking for ways to easily search to see if a certain range or specific IP address belongs to their strings. The way they do it now is they have a script they run and it takes a while to return the info.They are looking for a way to easily search a specific IP address or range and see if it belongs to them. I am leaning along the lines of elastic search, DocumentDB or DynamoDB but am unsure which option would be best for them.If anyone has any insights, please advise.If anyone also has seen blog posts or sample databases for such a use case, please also share.Much thanks!FollowComment"

Answer: "0Accepted AnswerThe answer depends on a number of factors, including whether you are using IPv4 or IPv6 addresses (or both), whether you are tracking individual addresses, subnets, or both, and whether you need to store additional attributes other than just the address range.One approach for IPv4 lookup is to convert the ip address to an integer, store the integer in a DocumentDB document with associated metadata, and use simple $eq queries to match relevant documents. https://stackoverflow.com/questions/18281696/mongodb-network-subnet-lookup has an example of a similar approach.CommentShareJeff_Danswered 4 years ago"


Question: Upgrading my Cisco Firewall

"I have been asked for the correct method to 1 ) patch and 2)full upgrade of a Cisco firewall AMI when we put one into service.I assume patching is the same as normal, just apply the patch to the deviceIf you're doing a full upgrade do you need to build a brand new AMI and migrate your configuration, or do you upgrade as you would normal device?New to AWS, Thanks or your help.MikeFollowComment"

Answer: "0Hi Mike,AMIs from Marketplace are owned and supported by respective product owners, it is best to contact the vendor for specific patch/upgrade instructions; generally speaking regular (for example) Cisco vASA upgrade procedure would be similar to what is mentioned in the links below:https://www.cisco.com/c/en/us/td/docs/security/asa/upgrade/asa-upgrade/asa-appliance-asav.htmlhttps://www.cisco.com/c/en/us/td/docs/security/asa/asa98/asav/quick-start-book/asav-98-qsg/asav-aws.htmlGeneral points to consider before upgrading any 3rd party virtual appliances:Write configuration to the device memory and take configuration file backupRecommend to take a snapshot before proceeding with the upgrade, also in general periodic recurring snapshots should be taken, in case something goes wrong with the virtual appliance you can restore last known good state from the snapshotsIf possible try the upgrade in a Test environment firstPay attention to the licensing pre and post upgrade, AWS does not provide any third party product license and it needs to be directly purchased from the third party vendorsIf you have implemented HA pair you may want to look at AWS GWLB service (Gateway LoadBalancer) - with this you can take 1 FW instance OOLB, upgrade it, verify, put it back in the Pool then upgrade the other instance, this way the upgrade would be least impactingHope this helps.CommentShareEXPERTTushar_Janswered a year agorePost-User-3172596 a year agoThanks for your detailed help."HA pair you may want to look at AWS GWLB service" yes thats exactly what we're doing. My first venture into AWS so huge learning curve.Share"


Question: "Aws::MakeShared<Aws::FStream>" API of C++ SDK  is failed when called mulitple times.

"bool AwsDoc::S3::PutObjectAsync(const Aws::S3::S3Client &s3Client,                                const Aws::String &bucketName,                                const Aws::String &fileName) {// ...    const std::shared_ptr<Aws::IOStream> input_data =            Aws::MakeShared<Aws::FStream>("SampleAllocationTag",                                          fileName.c_str(),                                          std::ios_base::in | std::ios_base::binary);    if (!*input_data) {        std::cerr << "Error: unable to open file " << fileName << std::endl;        return false;    }// ...}ref: https://github.com/awsdocs/aws-doc-sdk-examples/blob/main/cpp/example_code/s3/put_object_async.cppI want to upload about 1000 files (14GB) on S3 using PutObjectAsync of aws-sdk-cpp(https://github.com/aws/aws-sdk-cpp).Creating std::shared_ptr<Aws::IOStream> instance is failed when I call PutObjectAsync multiple times without waiting PutObjectAsyncFinished callback.200 ~ 300 files is OK, but more than that is not working. Memory usage is OK.Why is Aws::MakeShared<Aws::FStream> not working?FollowComment"


Question: EMR Serverless Application Disk Space?

"When configuring an EMR Serverless application, you can choose the disk size for your preinitialized capacity and a maximum disk limit for the application:However, at least for Hive jobs, EMR Serverless stores both the scratch and warehouse directories on S3. So what is this configured disk space used for? I've searched the documentation and there's no mention of how this space is used, or why it's needed.FollowComment"

Answer: "1Accepted AnswerEMR Serverless uses disk size for the following purposes.Storing the log files ( Hive, Tez AM logs, Tez Task logs etc)Shuffle data is stored on the local disk.Resources such as aux libraries, user jar etc.Hope it answers your question.CommentShareShaileshanswered 4 months agoPatrick 4 months agoThis does answer the question, thanks. But we needed this answer 3 months ago. We've since moved our company's infrastructure to a new cloud provider.Share"


Question: AWS Cloud practitioner practice test question. on Udemy

I was taking an AWS cloud practitioner practice test and one of the questions was:One of the most important AWS best-practices to follow is the cloud architecture principle of elasticity. How does this principle improve your architecture’s design?I chose: "By automatically scaling your AWS resources using an elastic load balancer"The correct answer was "By automatically provisioning the required AWS resources based on changes in demand".What's the difference between automatically scaling your AWS resources using an elastic load balancer and provisioning the required AWS resources based on changes in demand?FollowComment

Answer: "1When thinking about the elasticity of cloud architecture, it's useful to think more broadly than a single service or solution. Also remember, a key component of elasticity is the ability to automate scaling, which can be done in many different ways! The Elasticity concept of the AWS Well-Architected Framework discusses this more in depth.CommentShareBriNasAWSanswered 20 days agoBriNasAWS 20 days agoTo directly answer your question, your chosen answer is resource specific, while the correct answer relates directly to the broad principle of cloud elasticity.SharerePost-User-3156988 20 days agoDoes only of those answers fit the question though?ShareBriNasAWS 19 days agoYes, the correct answer, which is related to the concept of elasticity, is right. Sometimes when you see answers, they really look right, because if the question were worded slightly differently, it WOULD be right.Share1Hi,above point is correct. Cloud Practitioner Certifications questions are typically broad, and so are the answers, which in this case entail more on the general elasticity concept rather than a specific use case of it.Hope it helps ;)CommentShareEXPERTalatechanswered 20 days ago1AWS Certification questions often have, in addition to the correct answer, another answer that's not actually wrong but is clearly not as good.  In this case as others pointed out the ELB answer is too specific.  I also think it wrongly implies the ELB is somehow directly involved in scaling other resources, not just scaling itself to support the scaling of other resources.CommentShareEXPERTskinsmananswered 20 days ago"


Question: Will Polly support more ssml tags such as <emotion> in the future.

"If so, is there a roadmap?I see that Alexa supports <emotion> and was curious if Polly would implement that in the future.FollowComment"

Answer: 0Hi! I suggest to reach out to your AWS representative to discuss roadmap (As roadmap is generally confidential)! Also let them know about your needs such as this feature to pass on the message to the service team :) Hope this helps!CommentShareDani Manswered a year ago


Question: Monitor RAM and CPU usage of each Game Sessions

"Hello,How can I monitor the RAM usage and CPU usage of my server processes?I've tried with htop, top, and vmstat by ssh (instance access) on one of my instances, but it crashed.Thank youFollowComment"

Answer: 0I am assuming you are using Amazon Linux 2 instances.I've not seen top crash before and I can use htop etc without issue on a standard Amazon Linux 2 machineYou can easily install htop via sudo yum install htopYou may want to ask about the issues you are having with tooling on EC2 via the AWS Amazon Linux fourm: https://forums.aws.amazon.com/forum.jspa?forumID=228&start=0Some other things you could try:You can use atop and sar to get very detailed metrics: https://aws.amazon.com/premiumsupport/knowledge-center/ec2-linux-configure-monitoring-tools/You can configure CloudWatch agent to automatically monitor some of these metrics: https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/Install-CloudWatch-Agent.htmlYou could use use procstat to monitor individual processes https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Agent-procstat-process-metrics.html although I've never used in conjunction with a process launcher I don't own (ie GameLift) as its going to be hard to get the PIDs wired up.Your processes could though sample and report the metrics and report back via Cloudwatch agent or via some other pipe such as Kinesis. For example: https://gist.github.com/gbmhunter/00c57b55e2616cd8e1f21f77b79e59fc orCommentSharerePost-User-5332620answered 2 years ago


Question: ENA Express between EC2 instance and RDS Oracle instance

Is it possible to set Elastic Network Adapter Express feature to allow a fast connection between EC2 instance and RDS?  Looks like yes!https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ena-express.htmlVery cool stuffFollowComment

Answer: "0Currently this feature is supported for only 1 instance type, see below link:https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ena-express.html#ena-express-supported-instance-typesSupported instance types for ENA ExpressENA Express is supported by the c6gn.16xl instance type.CommentShareEXPERTTushar_Janswered 6 months ago"


Question: FBX Settings Motion Range Problems

"When trying to specify the motion range of an animation in FBX Settings, the importer thinks there are only 81 frames of animation when in reality there are over 2000 frames. When applying this motion to the actor, I can see that the 81 frames that the importer has chosen to use are the last 80 frames in the animation. This same FBX has been used without issue in other engines.These are the steps I followed:-Right click the FBX in the Asset Browser -> Edit Settings-In the Motions tab, Add Modifier -> Motion Range-The range is entered, then Update is clicked, which brings up the error: pcE: 1> 0:02 Start frame 300 is greater or equal than the actual number of frames 81 in animationAny help would be appreciated, thanks!Follow"

Answer: "0Accepted AnswerHi @REDACTEDUSERSharerePost-User-0479726answered 5 years ago0Hi @REDACTEDUSERIf you have multiple characters in a single animation file, you will need to define different Actors in the Actors tab, and then make sure you have the correct root joint selected in the "Select root bone" field of the Motions for that character.Please note also that any FBX file processed by the engine will have a .ASSETINFO file saved alongside it (same name as the FBX file but with the .ASSETINFO suffix) so that any information like the creation of multiple separate animations from a single FBX will be saved with the FBX - something to note if you are using any form of source control on your project.I am not sure how you would expect FBX to "know" about your separate animations from your source file - is there a method in particular that you are using in your source file that you would expect to be translated into the FBX format and read by the game engine? Thank you for any more information you can give us - we are always trying to understand the needs of our customers and how to make Lumberyard better!SharerePost-User-0479726answered 5 years ago0Hi @REDACTEDUSERWhich version of the engine are you using?What software was used to generate the FBX files?Which version of FBX was used, and whether the FBX is ASCII or binaryDid you bake animation onto your Actor skeleton, or is your animation still on the rig?Thanks!SharerePost-User-0479726answered 5 years ago0I'm using version 1.12.0.1 Build 532502.I've tried now with several different FBX files exported from both Blender and Max, and various versions of FBX. 7.4 binary and 6.1 ASCII are two versions I can verify, there may be others mixed in. All FBX files I've tried to import have the same issues:If the FBX file contains multiple separate animations only a single animation is picked up by Lumberyard.If the FBX file contains a single track with the animations placed in at specific frame ranges, only a subset of the total frames is pulled out.Are multiple animations in an FBX just not supported?SharerePost-User-4094891answered 5 years ago0Thanks for the reply. I don't expect the importer to know anything about the animations, like I described in the original post I've already done exactly as you said. And like I said, the FBX Settings throws an error saying there are only 81 frames available in the FBX, when there are actually a few thousand frames. I've tried with about a dozen different FBX files and it's always the same.I can import these same FBX files into Unity, and set up all of the animations based on frame ranges without issue.SharerePost-User-4094891answered 5 years ago0Sorry I'm not sure if the original file I've tried has it baked. When I exported a couple FBX files from Blender I had the baked animation box checked tho, and these behaved the same way as my original file with the FBX Settings. Not sure if it's any help but I uploaded one of the FBX files I was testing with, which has 15 animations.6351-spider.zip|attachment (831 KB)spider.zipSharerePost-User-4094891answered 5 years ago0Thanks @REDACTEDUSERSharerePost-User-0479726answered 5 years ago0Hi @REDACTEDUSERSharerePost-User-0479726answered 5 years ago0Hi @REDACTEDUSERREMOVEDUPLOADREMOVEDUPLOADREMOVEDUPLOADFor example, the FBX used in the images above. There are 39 seconds of animation in that file. Both Unity and Open 3D Model Viewer have no issues loading and splitting the animations, but the FBX Importer in Lumberyard thinks there are only 34 frames.REMOVEDUPLOADThe spider FBX I attached has the animations already split up in the FBX instead of using a single track for all the anims, and the result is still the same. In Lumberyard It's not possible to load an FBX that contains multiple animations and use the Motion Range or anything else with the FBX Settings to split them up.We'll just work around this and export one FBX per animation.SharerePost-User-4094891answered 5 years ago0Hi @REDACTEDUSERREMOVEDUPLOADI can see some animation, but it would be difficult to debug the animation before you determine what the issue is with the initial character setup.Our documentation on basic character setup is still in transition from the legacy system, and will updated soon.SharerePost-User-0479726answered 5 years ago0Also - side note - it looks like your original animation file was created at 24 FPS, while the Lumberyard game engine runs at 30 FPS. You may want to adjust your source files to be 30 FPS and recreate your FBX files from those so that you have WYSIWYG between source and game files.File Version: 7.4.0File Creator: Blender (stable FBX IO) - 2.76 (sub 0) - 3.6.2File Custom writer: NoFile Creation Time: 2016/1/11 23:51:17File Axis Direction: Y-up (RH)File Units: CentimetersSystem Axis Direction: Y-upSystem Units: CentimetersSystem frame rate: 30 ***Warning: Frame rates do not match***File frame rate: 24File content: 51 Elements, 5 Materials, 6 TexturesSharerePost-User-0479726answered 5 years ago0Hey @REDACTEDUSERCheers :)SharerePost-User-5738838answered 5 years ago0@REDACTEDUSERSharerePost-User-4094891answered 5 years ago0No problem @REDACTEDUSERSharerePost-User-0479726answered 5 years ago0Does anyone know if amazon haves plans to add "takes" to the FBX importer? took me forever to figure out this is why my other animations were not loading in lol.SharerePost-User-6701439answered 3 years ago"


Question: Difference between a test call and a regular call

"Hi,When I call my GET URL by using the "Method Test" tool in API Gateway, I can see the correct parameters are being passed to my lambda function.But if I call it in any other way (curl, postman, browser, ...) then my lambda function fails because the parameters are not transfered from the request to the lambda.Is there some special HTTP Header I need to set, I already tried sending withContent-Type:application/jsonAccept:application/jsonwith no success.In case it is needed here is my mapping template:{    "pid" : "$input.params('pid')",    "uid" : "$input.params('uid')",    "category" : "$input.params('cat')",    "limit" : "$input.params('l')",    "filter" : "$input.params('f')",    "slug" : "$input.params('slug')"}FollowComment"

Answer: "0Accepted AnswerHi,What errors do you get when you try to invoke from browser/postman. I attempted to replicate your problem but, your mapping template worked fine in my environment. I tried using the GET-Method Execution TEST, a chrome browser, and through Postman. It worked successfully.  My invocation looks like the following:https://xxxxxxxx.execute-api.us-east-1.amazonaws.com/prod?pid=mypid&uid=myuid&cat=dog&l=med&f=dud&slug=yellowDid you remember to include the "stage" name with your URL?Did you remember to "Deploy" your latest version of API?-randyCommentShareRandyTakeshitaanswered 4 years ago0Ok, thank you very much. It was a stupid problem.I had no idea of the existence of the "Deploy API" action, that's why the changes I did where not being used. It is fixed now, all I had to do was deploy my new version of the APICommentSharevincentploquienanswered 4 years ago"


Question: IoT Events - Calculating Moving Averages from Inputs

"Hi, I have a built a detector model in IoT Events that takes input data from environmental sensors, and if the sensor values breach a threshold, an email alert is sent through Lambda.   A timer is then set, and if the sensor values continue to breach the threshold 24 hours later, the email alert is resent.   This solution is simple and works well.  However, the problem is that the sensor input values can spike wildly.   This can lead to a false alarm as after the first email is sent, the sensor input values can rapidly fall back down under the threshold.I would like to create a moving average calculation that looks back over a predefined period of time and calculates the average for the environmental sensor inputs.  For example, calculate the average of the sensor values over the last 12 hours.  If the moving average value is above the threshold, send the initial email alert.   Is it possible to calculate a moving average like this within IoT Events?As I mentioned, the email alert is generated by a Lambda function, and the IoT Events model is triggered by an IoT Core Rule.Thanks!FollowComment"

Answer: "1Accepted AnswerHi. It's possible, but probably not the best solution. IoT Events doesn't really have a good mechanism to store a buffer of N samples to calculate an N-period moving average. You could achieve it with the setVariable action and a very complex detection model. I would instead recommend you involve other AWS services to pre-process the raw inputs or recommend you use an alternate low-pass filtering technique such as exponential smoothing.Exponential smoothing only needs the current input and the last smoothed value and is thus quite easy to implement in IoT Events. You might also consider debouncing, some kind of outlier rejection or all manner of variations or combinations.The HVAC example seems like a good fit for your use case, and it makes use of exponential smoothing (combined with anomaly/outlier rejection):{  "eventName": "calculateAverage",  "condition": "$input.temperatureInput.sensorData.temperature < $variable.anomalousHigh && $input.temperatureInput.sensorData.temperature > $variable.anomalousLow",  "actions": [{  "setVariable": {"variableName": "averageTemperature","value": "((($variable.averageTemperature * ($variable.sensorCount - 1)) + $input.temperatureInput.sensorData.temperature) / $variable.sensorCount)"  }}  ]}In this case the smoothing constant is 1 / $variable.sensorCount. You can of course use a different smoothing constant to tune for your filtering needs.CommentShareEXPERTGreg_Banswered 10 months ago1960pghpirates 10 months agoHi Greg,Thanks for the thoughtful response.  I loaded the HVAC detector model into IoT Events, and it looks pretty similar to what I am trying to achieve.   From what I read about exponential smoothing constants, the value needs to be between 0 and 1.  The higher the value, the more spikes will be present in the data.   In my case, I am only testing with one set of sensors on a Raspberry Pi (3 sensors total per device).    So I am not sure if the sensor count concept would apply here.  In the HVAC example, it presumes a total of 12 sensors.   Do you have any ideas for what an appropriate smoothing constant would be for this scenario?  In the future, there will be N number of Raspberry Pis, but for now its only one with three sensors attached.  Thanks!ShareGreg_B EXPERT10 months agoThe best value depends very much on your particular time series data. You said previously that the data "spikes wildly". If you used only an exponential smoother to solve it, you would probably need a lowish smoothing constant to smooth out these spikes. However, "spikes wildly" suggests to me that you should have some other kind of filtering, such as outlier rejection. Possibly that is all you need; maybe no exponential smoothing (nor moving average) is needed.Share"


Question: Terraform using private server

"I have a terraform setup on a private local server with no internet access , I have an organization AWS account, I want to provision resources on that AWS account and its child account using that terraform server, what should i do? Can AWS Direct connect help with that?FollowCommentawstyler 2 months agoHello @Divyanshu. Can you provide some clarity on the use-case?Are you using Terraform open source or Terraform Enterprise?The private local server with Terraform, if this server in your own datacenter/co-location facility, or is this an EC2 instance in AWS and in a private subnet?Share"

Answer: 0Tough one as there are many requirements for that..You would need DNS resolution for starters for all the AWS domains and access to all VPC Endpoints to make APi calls too.Never tried it myself and if it would work or not.Any chance you can use terraform cloud?CommentShareGary Mcleananswered 2 months agoDivyanshu 2 months agoDoes terraform cloud helps in this caseShare


Question: s3 amazon url setup

"Hi Guys,first time here, can u please guide me on how to create a URL like this:https://s3.amazonaws.com/I have been trying to setup but it shows with the region in front.Looking forward to hearing from you!FollowComment"

Answer: 1Accepted AnswerIs this what you want?https://docs.aws.amazon.com/AmazonS3/latest/userguide/VirtualHosting.html#VirtualHostingBackwardsCompatibilityIn particular see the Legacy Global Endpoint section.CommentShareRWCanswered a month agoEXPERTskinsmanreviewed a month ago


Question: What API function to call to get subscription notification messages?

"I'm using SP-API to create notification messages whenever a product's offer changes (notification type: ANY_OFFER_CHANGED).It is working because I can see messages when I go to Amazon SQS --> Queues and I can see a bunch of messages available.My question: What function in the API do we call in our application in order to actually get and enumerate through the messages?Calling getDestination() or getSubscription() only seem to return ID's in the payload, but I don't know what function to call in order to enumerate through all these messages sitting in the Queue.Our goal is to call our application every few minutes to process messages and update the prices of our products based on these notification messages in the queue.   I just need someone to point me on what API function is used to retrieve these messages.FollowComment"

Answer: "0To receive subscription notification messages in Amazon Simple Queue Service (SQS), you need to create an SQS queue and then subscribe it to the SNS topic. Once you have done that, you can use the ReceiveMessage API function to retrieve the subscription notification messages from the SQS queue. For enumerate through the message in an SQS queue then you use a loop to repeately call the 'ReceiveMessage' API function until there are no more messages in the queue.Here's an example of how to use the ReceiveMessage function in the AWS SDK for Python (Boto3):import boto3# Create an SQS clientsqs = boto3.client('sqs')# Specify the URL of the SQS queuequeue_url = 'https://sqs.region.amazonaws.com/account-id/queue-name'# Receive messages from the SQS queue in a loopwhile True:    response = sqs.receive_message(        QueueUrl=queue_url,        MaxNumberOfMessages=10,        VisibilityTimeout=0,        WaitTimeSeconds=0    )    # Process the messages    if 'Messages' in response:        for message in response['Messages']:            print(message['Body'])            sqs.delete_message(                QueueUrl=queue_url,                ReceiptHandle=message['ReceiptHandle']            )    else:        print('No more messages in the queue')        breakThe messages from the queue in the same format in which we are sending them to the queue. If we are sending encrypted messages then we would receive encrypted messages only. if the messages are base64 encoded then you can write a code at your end to receive the messages using the ReceiveMessage API call[1]. Once you have the messages, you can then decode the received message using base64 library in your code. You can refer the links[2][3] for Encoding and Decoding Base64 Strings.[1]. https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_ReceiveMessage.html[2]. https://www.geeksforgeeks.org/encoding-and-decoding-base64-strings-in-python/[3]. https://stackoverflow.com/questions/3470546/python-base64-data-decodeCommentShareRam_AWSanswered 2 months ago"


Question: Sagemaker Studio - create domain error

"A customer is trying to setup Sagemaker studio. He is following our published instructions to set up using IAM: https://docs.aws.amazon.com/sagemaker/latest/dg/onboard-iam.htmlBut is getting an error: User:  arn:aws:iam:xxxx:user/user1 is not authorized to perform: sagemaker:CreateDomain on resource: arn:aws:sagemaker: us-east-2:xxxx:domain/yyyyHe has admin priviledges on the account and AmazonSageMakerFullAccess. We noticed that the AmazonSageMakerFullAccess policy actually has a limitation. You can perform all sagemaker actions, but not on a resource with arn “arn:aws:sagemaker:::domain/*”.We confirmed there are no other domains in that region with the CLI as you are only allowed one – so that isn’t blocking.And aws sagemaker list-user-profiles returns no user profiles.Has anyone seen that error before or know the workaround? Should he create a custom policy to enable creating domains or would there be any implications of that? Are there specific permissions he should have so as to onboard using IAM?FollowComment"

Answer: "1Accepted AnswerA user with admin privileges would have access to "iam:CreateServiceLinkedRole" and "sagemaker:CreateDomain" actions, unless SCPs or permissions boundaries are involved. However, for the purpose of onboarding Amazon SageMaker Studio with limited permissions, I would grant the user least privilege by reviewing Control Access to the Amazon SageMaker API by Using Identity-based Policies and Actions, Resources, and Condition Keys for Amazon SageMaker documentation:{    "Effect": "Allow",    "Action": "sagemaker:CreateDomain",    "Resource": "arn:aws:sagemaker:<REGION>:<ACCOUNT-ID>:domain/*"}NOTE: An AWS account is limited to one Domain, per region, see CreateDomain.{    "Effect": "Allow",    "Action": "iam:CreateServiceLinkedRole",    "Resource": "*",    "Condition": {        "StringEquals": {            "iam:AWSServiceName": "sagemaker.amazonaws.com"        }    }}Cheers!CommentShareAWS-User-2530299answered 3 years ago"


Question: CloudFront metrics stopped yesterday about 2315 UTC

I'm not seeing any metrics from my CloudFront distributions in CloudWatch as of 0000 UTC today.  It looks like the metrics choked-up about 2315 UTC and came to a complete halt around midnight.  I presume it has something to do with the us-east-1 outage yesterday although the status page is showing that everything is resolved.  Is anyone else seeing problems with their metrics?FollowCommenttwarlick-mxm9171 a year agoData is starting to flow in now.Share

Answer: "2Accepted AnswerA friend has pointed out that EventBridge was switched off during the us-east-1 outage yesterday.  AWS could have buffered the events and presumably will start processing the data once everything has come back online.In fact, I'm starting to see data appearing in the distribution metrics past 00:00 so hopefully we just have to wait for the buffers to clear out.CommentShareDaniel Craigieanswered a year ago1Hello, I currently work in the us-west-2 region, and I see the same problem through my console. I don't see any action to solve this problem just wait.I hope I've helpedCommentShareMaxCloudanswered a year agoDaniel Craigie a year agoI have the same issue in eu-west-2 & ap-southeast-2.  Metrics stopped getting recorded just before 00:00 (GMT) in both distributions.Share"


Question: RDS Proxy request more secret manager associations

Amazon RDS Proxy have a limit of 200 secret manager associations. Is posible request more storage with AWS Support?FollowComment

Answer: "0Yes, you can contact AWS Support for a limit increase for associated Secrets Manager secrets. The 200 value is not the hard limit. For more information you can refer to the following document : https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/rds-proxy.html#rds-proxy.limitsCommentSharestevenanswered a year ago"


Question: "An error occurred (FleetCapacityExceededException) when calling the CreateGameSession operation: Unable to reserve a process on fleet

"So I uploaded a build which I have tested on the lcoal gamelift sdk and was able to create sessions using the terminal command. However, When I uploaded the build and created a fleet, i am unable to start a session. In describe sessions, i am returned empty array. however, when I try to create a session, "An error occurred (FleetCapacityExceededException) when calling the CreateGameSession operation: Unable to reserve a process on fleet is being received. how can I solve this issue?FollowComment"

Answer: "0Hey Arjun,FleetCapacityExceededException indicates that  there are no healthy server processes available on your fleet to host a new game session. In the screenshot posted, Active servers is 0 which corresponds to the same.Have you verified that the server starts up correctly? You could potentially test your game server integration with GameLift locally using GameLift local.Have you verified your fleet events to check for events that could indicate issues with the server process crashing or terminating in an unexpected manner?  You can look for this via the AWS Console or alternatively using the describe-fleet-events command.Thanks!CommentShareShashankJ_AWSanswered 8 months agoArjun Chandra 8 months agoHi Shashank, Locally I am able to start the server. I am able to integrate with gamelift local and is getting the healthy status in logs. I am able to connect players also locally to the server.ShareShashankJ_AWS 8 months agoThanks for getting back. I suspect there's something different happening up when actually starting up the server on the EC2 instance. Have you checked your fleet events to check for server process events that indicate server termination or reporting unhealthy?ShareArjun Chandra 8 months agoHey, Finally I managed to resolve the issue. I reuploaded the build and created a new fleet. Now the issue is resolvfed. But I am uable to connect to the server now on my UE5 client. I receive the Ip address and I try to travel my client to the IP address using OpenLEvel. Buiy I am getting some logs mentioning connection timeout/packet loss. Any idea why? I am putting my logs here after I use OpenLEvel.LogAudioMixer: Display: Starting AudioMixerPlatformInterface::RunInternal(), InstanceID=10LogNet: UNetDriver::TickDispatch: Very long time between ticks. DeltaTime: 0.01, Realtime: 7.11. IpNetDriver_0LogNet: UNetDriver::TickDispatch: Very long time between ticks. DeltaTime: 0.01, Realtime: 9.31. IpNetDriver_0LogAnalytics: Warning: EventCache either took too long to flush (1.045 ms) or had a very large payload (0.436 KB, 1 events). Listing events in the payload for investigation:LogAnalytics: Warning: Editor.Usage.Heartbeat,433LogNet: UNetDriver::TickDispatch: Very long time between ticks. DeltaTime: 0.01, Realtime: 8.39. IpNetDriver_0LogNet: UNetDriver::TickDispatch: Very long time between ticks. DeltaTime: 0.01, Realtime: 15.43. IpNetDriver_0Share"


Question: Amazon Rekognition Labels for PPE

What types of PPE detection does Amazon Rekognition support?FollowComment

Answer: 0Accepted AnswerThe types of PPE detected are covered here:https://docs.aws.amazon.com/rekognition/latest/dg/ppe-detection.htmlCommentShareS_Mooseanswered 3 years ago


Question: How to support multiple production ALB listeners with CodeDeploy Blue/Green deployments

"Hi there,I have a service (a simple NextJS website) deployed in ECS behind an ALB. The ALB routes both HTTP (port 80) and HTTPS (port 443) traffic to the tasks. This model works well when a single production listener is defined in the CodeDeploy Application Deployment Group definition, but I was wondering if there was a way of supporting more than one listener in the Application Deployment Group definition.For now, I've set the second listener (Port 80) as the test listener port, and this works, but it does seem like a bit of a hack.Appreciate any answers.Kind regardsErichFollowComment"

Answer: "0I managed to resolve this by adding a default redirect rule on the ALB to redirect HTTP traffic to HTTPS. This brings me back to a single production listener from the deployment perspective. That said, I'd still be interested in alternative solutions for my own knowledge development.CommentShareErichanswered 3 months ago"


Question: Search issue in the Route53 hosted zone

"Unable to perform search in the one of our Route53 hosted zone.The Hosted Zone have total 2219 records. I checked it using different browsers, but it is not working, in other hosted zone where the total records are less, the search facility is working.Need help or suggestions to resolve this issue.FollowComment"

Answer: "0Accepted AnswerCould you define which is "not working" the step to reproduce? Which information are you looking for?If it's just the search you can tune it a bit with the search settings:If it does not resolve your issue on Route53 console web interface, here are some alternatives to search that may help:AWS CLI for Route53: https://awscli.amazonaws.com/v2/documentation/api/latest/reference/route53/index.html"dig" tool to retrieve specific fields, https://linux.die.net/man/1/dig and a simple UI https://www.digwebinterface.com/CommentShareabanswered a month agorePost-User-2439088 a month agoHi, Thanks for the reply.Your answer helped me to search the records, I changed the Search Mode from Automatic to Full and now it started working.Share"


Question: No RDS Create Free Tier Template Option After Deleting First DB

"Hi,I created an RDS, Free-Tier Template MySQL database and subsequently deleted it not long after creation. It has been deleted and no longer appears on the instances list.I wish to create another one, almost identical but with some different configuration settings but now under "Standard create" there is no longer the third Template option "Free Tier" but only the paid "Production" and "Dev/Test" options.Is there a cooldown period for creating another database after creating/deleting one on the free tier? And if so how long will this be. I'd like to use AWS but may use another cloud DB provider if I can no longer have a free-tier RDS DB.Thanks kindly.FollowComment"

Answer: "0The Free-Tier option appeared before my very eyes, maybe there was a cool down period. I had selected MySQL previously and still the free-tier wasn't available.CommentSharedavidfitzgeraldanswered 3 years ago0Hello,Based on the RDS free-tier documentation and test I did from my end, there is no cool down for creating another free-tier instance. There is a possibility that your 12 months period of running free-tier services has been reached.Please check out this link for further information about AWS free-tier :[1] https://aws.amazon.com/rds/faqs/#free-tier[2] https://aws.amazon.com/rds/free/Let us know if you need anything.CommentShareJabulileanswered 3 years ago"


Question: FInal Cut Pro_MAC OS Instance

Is it possible to run final cut pro on a mac os instance?FollowComment


Question: Unable to transfer IDN ".online" domain to AWS Route 53

"Dear Forum,I have some ".online" domains with German umlauts that I would like to transfer to AWS Route 53. According to the TLD list IDNs are supported for ".online":  https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/registrar-tld-list.html#onlineHowever, neither the regular process nor the bulk order process let me order those domains. In the regular process .online is removed from the choices as soon as a domain name with umlauts is entered. And the bulk process runs into some "unspecified error" with the domain names in IDN notation.I have successfully transferred non-IDN ".online" domains, though.How do I transfer a domain like "exämple.online" to AWS Route 53?Any help is appreciated.DirkFollowComment"

Answer: "0Accepted AnswerHi Dirk,We tested and successfully registered a test domain that includes umlauted a's. Note that you need to convert the domain name to Punycode:https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/DomainNameFormat.html#domain-name-format-idnsScottCommentShareEXPERTAWS-User-6179575answered 3 years ago0Hi Dirk,Thanks for the heads up. We're researching.ScottCommentShareEXPERTAWS-User-6179575answered 3 years ago0Hi Scott,do you already have some news on this issue? Can you recommend a work-around, e.g. using some API?Thank you!DirkCommentSharedevops-dudeanswered 3 years ago0Thank you very much, Scott!I was able to start the transfer now by entering the Punycode version of the domain name.CommentSharedevops-dudeanswered 3 years ago"


Question: Direct Connect Gateway with 2 TGW from Same Region

"Can I configure two TGW from Same Region (from different Accounts) with a single Direct Connect Gateway?FollowCommentTushar_J EXPERTa year agoHi, Could you please elaborate your use-case a little more, what is the reason to have 2 TGWs in the same region?SharePartha a year agoHi Tushar,Customer has two separate teams and they want to keep their TGW separte.Share"

Answer: "2Accepted AnswerYes, it is possible. DirectConnect Gateway is a global construct, you can connect TGWs from same as well as different regions. The limit is you can conect upto 3 TGWs to 1 DXGW.See the example from AWS Hybrid Connectivity WhitepaperCheck the quotas hereCommentShareEXPERTTushar_Janswered a year ago"


Question: OTP SMS not going through to 30% of Danish numbers

"Facing an issue that our users who sign in with OTP via Cognito are not receiving SMS codes. This affects about 30% of Danish users, while other countries are fine. Any thoughts on how to fix this? ThxsmsType": "Transactional","mcc": 238,"providerResponse": "Phone is currently unreachable/unavailable","dwellTimeMs": 373,"dwellTimeMsUntilDeviceAck": 8129},"status": "FAILURE"FollowComment"

Answer: "0Hi,May I confirm if this is this the only error message that you are seeing or if there are other errors as well? As the error message says, it seems that the phone was unreachable during this time. Have you reached out to the owner of these numbers and confirmed that they are indeed reachable?If you see no obvious issues in reaching out to these numbers, then we would need the help of the SNS team in order to be able to investigate this further. We would require details that are non-public information. Therefore, please open a support case with the SNS team by using the following linkPlease provide 3-5 fresh Cloudwatch log entries in your support case. The Cloudwatch logs must be within 48 hours so that the SNS team can investigate. If you have a list of the Danish numbers that are unreachable, provide this as well as it may help the SNS team in their investigation.Please make sure that you post these information in the support case and not here at repost. Thank you!CommentShareSUPPORT ENGINEERRyan_Aanswered a year ago"


Question: Is it a best practice to archive all active findings for Access Analyzer on a new Control Tower setup?

"I am working through the Cloud Environment Guide Workshop in preparation for an upcoming customer Immersion Day.  The Control Tower has been deployed with the various best practices recommended by the Workshop.  I have reached the step where I run the Access Analyzer, and it has about 20 Active Findings such as delegated permissions and similar.  Since this is a new setup, and all of the changes have been recommended as best practices by AWS, should I tell my customer to Archive all of the Active Findings so they can start off with a clean slate?FollowComment"

Answer: 0The part of the workshop demonstrate how customer can use other AWS services that help them monitor and secure  AWS Control Tower resources. The IAM Access Analyser lab is to demonstrate how customer can get ready the environment for external audit. Customer can run this portion of the workshop in a test environment.CommentShareronald_lanswered 8 months ago


Question: Network interfaces cannot be deleted

"Hi AWS team,I need your support to delete network interfaces eni-0ad86ecbe18891fd8, eni-0fa585706b891f5b6, and eni-0a03caf9f66c12be2. They are reporting "In Use" and seem to be assosciated with elastic IPs which are no longer available (as I deleted them via terraform destroy).Can you have a look and help me out to remove those network interfaces?Thanks,MoritzFollowComment"

Answer: 1Was able to remove them now.CommentSharemoosoftanswered 2 years ago


Question: XCTest UI can not run by only-testing

HII'm run XCTest UI by custom environment use only-testing but log show Executed 0 testsHere is the test run specific only-testing :https://us-west-2.console.aws.amazon.com/devicefarm/home?region=us-west-2#/projects/7e8faa0c-cc1e-4723-88f1-79fd3b728986/runs/e2f8acba-24a8-41b9-9acd-d41bdf1b1630/jobs/00000Here is the test run not specific only-testing :https://us-west-2.console.aws.amazon.com/devicefarm/home?region=us-west-2#/projects/7e8faa0c-cc1e-4723-88f1-79fd3b728986/runs/ac9c983f-db2b-4754-b85f-4b792bcb31aa/jobs/00000/suites/00001FollowComment

Answer: "0Hi jirath,I was able to get the only-testing option working with your app. In your custom environment test spec file, you included the option with the following naming structure"ProjectName/ClassName/TestName"When looking at your logs from the run where you did not use only-testing, I could see that xcode was calling "ProjectName/(ProjectName but with '_' instead of '-').ClassName/TestName"So the only thing you have to do is replace ClassName in your test spec file with (ProjectName but with '_' instead of '-').ClassName, such as:-only-testing:ProjectName/(ProjectName but with '_' instead of '-').ClassName/TestNameLet me know if this naming structure makes sense to you, and if not, I send you a private message with the exact wording you should use in your test spec file.Scott.CommentShareAWS-User-1182145answered 4 years ago0Hi Scott.It can run only-testing with "ProjectName/(ProjectName but with '_' instead of '-').ClassName/TestName" success thank you :)CommentSharejirathanswered 4 years ago"


Question: Tests Suite Failing on Simple XCUITest

"I'm trying to get a simple test case working with  XCTest UI on AWS Device Farm.  I followed the steps to create the two .ipa files and uploaded them into a device farm project without any issues.  I tried using both standard and custom environments and used the defaults for the remaining run options with similar results: the setup and tear down suites pass but the tests suite fails.  The test suite is as simple as possible as they are the stubs created when an XCTest UI target is added to the Xcode project.  The test ("testExample") runs fine in Xcode as do the other stubbed tests (testLaunch and testLaunchPerformance).  I'm assuming that Device Farm will pick up all the available tests (those test functions starting with "test") in a similar fashion that Xcode identifies testable functions so I don't do anything special to identify those to Device Farm.As I stated, I don't embellish the stubbed out tests so testExample() simply launches the app and that's it.  Still, I would expect the test to pass as it does in Xcode.  Are there some basic gotchas in configuring test runs or Xcode projects that would prevent a test function from succeeding?FollowComment"


Question: Elastic beanstalk cannot extend nginx config without zip archive

"Hi,I've noticed that if you deploy your Elastic Beanstalk application with a Dockerrun.aws.json file only e.g.aws elasticbeanstalk create-application-version --application-name "<name>" --version-label "<tag>" --source-bundle S3Bucket="<bucket>",S3Key="Dockerrun.aws.json"it doesn't pick up the nginx config if you add the .platform folder in the container.The only way I managed to make this work was to instead zip the .platform folder, source code and Dockerrun.aws.json opposed to just have the aws.json file.Does anyone know whether it's possible to override the nginx config with just a Docker.aws.json fileFollowComment"


Question: Ingesting data with future timestamps to AWS TimeStream

"Hi,I am working with time series data that has values from day before yesterday to day after tomorrow.In order to store the data with future timestamps i want to edit the "Future ingestion period in minutes" of table properties.I could not find a way to edit this parameter in table-->edit page.How can i do this?FollowComment"

Answer: "0Amazon Timestream does not currently have a feature that allows you to set a "future ingestion period" for data with future timestamps. Timestream is designed to store and query time series data, with the assumption that the data being ingested represents events that have already occurred in the past.If you have time series data that includes future timestamps, you will need to handle this data in a way that is appropriate for your use case. For example, you could store the data in a separate database or data store, or you could filter out the data with future timestamps before inserting it into Timestream.CommentShareMounickanswered 5 months ago"


Question: a4-25.smtp-out.eu-west-1.amazonses.com / Client host blocked using cbl.abuseat.org

"Some of my customers on either EC2 or Lightsail with their own (validated and secure) email servers are experiencing this problem, which started yesterday:-An error occurred while trying to deliver the mail to the following recipients:xxxxxx.xxxxxx@qrcsl.co.ukReporting-MTA: dns; a4-25.smtp-out.eu-west-1.amazonses.comAction: failedFinal-Recipient: rfc822; xxxx.xxxxxxx@qrcsl.co.ukDiagnostic-Code: smtp; 554 5.7.1 Service unavailable; Client host [54.240.4.25] blocked using cbl.abuseat.orgStatus: 5.7.1The email servers have SPF, DKIM, DMARC and MTA-STS set up and have been fine for many years.The IP address 54.240.4.25 is ofcourse one of AWS' SES servers.I have sent a tweet to AWS and they redirected me here.Can anyone help?Regards,Paul LittlefieldFollowCommentRodney Lester 7 months agoThis is a problem that only cbl.abuseat.org can solve. Have you contacted them? You can file a support ticket to ask if AWS is working with them on a systemic problem (like blocking all Amazon IP ranges).Share"


Question: AWS Athena generic internal error when querying a table created using a Glue Crawler which says 'columns has 110 elements while columns. Types has 106 elements!'

"First of all, I have already asked about this problem here in re:Post and on Database Administrators Stack Exchange here on Monday, but I received no follow up when the first "Answer" here provided no solution for me in terms of what to do and my question on DASE has no answer attempts yet and the only comment has since been removed and I really need a solution ASAP. My masters degree depends on it to be candid!This error happens to me anytime I try to query the 'airports' table in my database which was created by a glue crawler I created for this purpose along with 3 other datasets. They were all csv files beforehand, and I have performed each and every step of this process already in MySQL Workbench locally before trying it out on the cloud in AWS right now and I never got any errors like this when querying my airports dataset there. All I did was run this query:SELECT "loc id" FROM "runway_db_athena"."airports" limit 10;And this is the error message I got back:GENERIC_INTERNAL_ERROR: SerDeException thrown initializing deserializer org.apache.hadoop.hive.serde2.lazy.LazySimpleSerDe. Cause: org.apache.hadoop.hive.serde2.lazy.LazySimpleSerDe: columns has 110 elements while columns.types has 106 elements!This query ran against the "runway_db_athena" database, unless qualified by the query. Please post the error message on our forum  or contact customer support  with Query Id: d9e95a16-9399-434b-8c19-88591927fc6bWhat does this mean and how exactly do I fix it? I want step by step instructions please.p.s.As a sanity check before re-posting here after the "Answer" on my previous question here indicated that this error typically means you have a csv with more fields than the ones identified by the crawler, so, I opened up the file, hit Ctrl+-> and saw that there are 106 columns, then I opened up MySQL Workbench, created a new database, and imported this csv file using its Data Table Import Wizard, then ran a DESC and a SELECT on it and both worked just fine. Plus, Workbench triple confirmed that the 110 was the off number:3   21  04:08:29    desc `airportandrunwaydata`.airports    106 row(s) returned 0.000 sec / 0.000 secFor the record, the other 3 csv files which were gone over by the same Glue Crawler all had tables created for them which work completely without issue.FollowComment"


Question: MQTT Publish and Respond with PHP?

I want to send an API call via HTTP request to send a message via MQTT and returned the results when the task is done.I have a Node JS MQTT AWS IOT Client that receives a response to "client/UUID_3124324" and does a task that might take 1-5 seconds on average and sends the response to  "response/UUID_3124324" . I have a rule that records the response to DynamoDB. So the problem is that I need to get the response back to the user but this is not asynchronous call. My thought is that I can call the HTTP Request and somehow listen to the DynamoDB stream for changes. This is getting complicated for me because I am using PHP as the backend and there is no native AWS IOT SDK to quickly subscribe  to "response/UUID_3124324" and do something about it.Any guidance would be appreciated. AWS MQTT seems something I want to use but I think I am missing something or there are other solutions that are easier to implement.Thanks.FollowComment

Answer: "0Hi Ikkysleepy,If one of the actors in your system is constrained to PHP only, I recommend checking out the device shadow service of AWS IoT. Your other actors can publish messages to a shadow topic which gets persisted by AWS IoT. It may not be ideal, though your PHP actor can poll the shadow value over HTTP to check for changes.http://docs.aws.amazon.com/iot/latest/developerguide/iot-thing-shadows.htmlRyanCommentShareRyan_Banswered 6 years ago0Thanks for the response. This solution might work if the Shadow can contain custom fields and values and not just the current state. Do you know if this is possible? It looks like you can do long polling using php:https://github.com/panique/php-long-pollingCommentShareIkkysleepyanswered 6 years ago0You can store any arbitrary key:value pairs in the shadow document, just not at the root level where the "state" key is defined. You can store new values in either the "state.desired" or "state.reported" object space.{  "state": {    "desired": {      "myKey": "myValue"    }  }}CommentShareRyan_Banswered 6 years ago"


Question: Can Instances Be Used As a Service Which Operates Directly From The Target Country?

"When I am using an instance for a region like Canada, when I try to use a specific application like Kijiji they easily detect my network and end their service. It is the same for Paypal for example also.When I am not in a specific country is there a way that I can use instances so my source of the network is not flagged and I can access some apps like PayPal or other payment providers for operating my business?Thanks.Onder A.FollowComment"

Answer: 0You can spin up OpenVPN server  in the AWS Canada region and then connect to it (like a VPN tunnel) to access PayPal and other payment providers.CommentShareEXPERTgauravanswered 8 months ago


Question: Location of Huggingface SageMaker Dockerfile.

"Where is the github repository of the Dockerfile for Huggingface training with SageMaker? I see this repository for inference, but do not see one for training.FollowComment"

Answer: 2There are a bunch of Dockerfiles in the DLC repo. Here's the HuggingFace training Dockerfile for PyTorch 1.9.CommentShareaaronmarkham-AWSanswered a year agoEXPERTAlex_Treviewed a year ago0HuggingFace Dockerfiles are locatedCommentShareEXPERTJoshua_Banswered 2 years agoJoshua_B EXPERT2 years agohttps://github.com/aws/deep-learning-containers/blob/diy_sm-pt-1.9/available_images.mdShare


Question: Configuring containerd on EKS

"Hi all. We've been trying to enter this user data in our template for our managed node groups on eks but the containerd-config.toml file is always the default setup by eks, does eks overwrite what we do or does the file not get edited? We have set a txt to display any error but that file isn't saved on the node either. Any idea what's happening?#!/bin/bashecho '[plugins."io.containerd.grpc.v1.cri".registry.configs."PRIVATE-REGISTRY".tls]insecure_skip_verify = true[plugins."io.containerd.grpc.v1.cri".registry.mirrors."PRIVATE-REGISTRY"]endpoint = ["PRIVATE-REGISTRY"]' | sudo tee -a /etc/containerd/config.toml 2>&1 | tee containerd.txtsudo systemctl restart containerdsudo containerd config dump | tee containerd.txtFollowComment"

Answer: "0Seems like EKS is overwriting the file. This might happen because EKS uses - EKS optimized Amazon Linux AMI.  This AMI uses Amazon Linux 2 as its base image and has additional components. One such component is containerd. As this AMI is regularly updated, there is a chance that your changes will be lost.Linkshttps://aws.amazon.com/eks/faqs/#:~:text=Q%3A%20How%20do%20I%20update%20my%20worker%20nodes%3Fhttps://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.htmlTo avoid this issue, you can create Custom AMI and use it for your cluster. This can solve your problemCommentSharevishnukumaranswered 5 months agorePost-User-8428534 5 months agoHi thank you for your response. Are you aware of any guide we can follow to create this or which base AMI we can use? because the base AMI's we have been using still  give us the same results.Sharevishnukumar 5 months agoYou can use any base AMI (ex: Amazon Linux2). You launch instance using base image, configure the server and create the image. Then use the AMI in your eks cluster. This should work. If it doesnt, create an instance from your AMI and check the configuration. Also, you check the system log.Share"


Question: Establishing custom MAIL FROM Subdomain TXT and MX records in go DoDaddy

"I am pretty new to SES, and DNS management as well I suppose so bear with me. I connected my main domain "example.com" to SES and verified it. Now I would like to create a custom MAIL FROM domain for it "mail.example.com". I created a CNAME record in godaddy to create the subdomain."cnamemailexample.com.1/2 Hour"Now I need to add an MX record and TXT record for the subdomain, and here is where the problem is:(This is in the DNS manager for "example.com")mxmail.example.comfeedback-smtp.us-west-2.amazonses.com. (Priority: 10)1 Hour"txtmail.example.com"v=spf1 include:amazonses.com ~all"1 Hour"Above are the records I have in GoDaddy, but SES is stuck on pending... I've waited out the 72 hours 3 times now, I am not sure how much more time I can waste on this, has anyone else been in the same situation? Did you find a way out?FollowComment"

Answer: "0Afraid DNS Does not work like this.To have a subdomain, you require NS records for a SubDomain not a CNAME. Then you need a DNS Server thats authoritive for the subdomain. It could be the same name server that is auth for your top domain depending on its configuration.Once DNS is setup for your Subdomain, then you can create a MX record in your sub domain...You could try creating NS records for your Subdomain to point back to the same name servers you have for the top level domain and then create your MX record in the same name server ensuring your MX record is for mail.example.comEGNS Records for example.com would point to dnsserver1.godaddycomNS Records for mail.example.com would point to dnsserver1.godaddycomCommentShareGary Mcleananswered a month ago"