Question: How to register a multi container model to a model registry?

"I have created a multi-container model in SageMaker notebook  and deployed it through an endpoint. But while attempting to do the same through a SageMaker Studio Project (build, train and deploy model template), I need to register the multi-container model through a 'sagemaker.workflow.step_collections.RegisterModel' step, which I am unable to do.What I understand till now is multi-container model is created through boto3 api call. I haven't found a way to create it using 'sagemaker.model.Model' and hence not being able to register it. Please help.FollowComment"

Answer: "0Hi,in order to register a multi-container model you need to use the PipelineModel class instead of the Model one you are trying to do currently.An example of this can be found in this notebook: https://github.com/aws/amazon-sagemaker-examples/blob/main/sagemaker-pipelines/tabular/train-register-deploy-pipeline-model/train%20register%20and%20deploy%20a%20pipeline%20model.ipynbIn this example a pipeline model is created with 2 containers, first one is an sklearn one doing some preprocessing and the second an XGBoost one for ML inference. However, in your case, the number or containers, type, invocation order and more, may differ, but you should be able to draw parallels based on this example.Hope this helps,CommentSharegeorgios_sanswered a year agorePost-User-0352853 a year agoThank you for the answer. Please correct me if I'm wrong but in case of an inference pipeline using a PipelineModel class, the models are run serially and the output of the first model goes in as input of second model. What I'm trying to achieve is through invoking the same endpoint, I want to retrieve output from a sentiment prediction model and an intent recognition model.Share"


Question: "Create domain association failed One or more domains requested are already associated with another Amplify app: bakeone.in, www.bakeone.in"

"Hi,I have successfully deployed a react app on amplify.When I add a custom domain i get this error.Create domain association failedOne or more domains requested are already associated with another Amplify app: bakeone.in, www.bakeone.inBut i haven't used this domain on amplify.May be the previous domain owner have linked this to an amplify app.I request aws to unlink the domain because i am the domain owner and i want to link it to my app.FollowComment"


Question: RI for RDSoralce(BYOL)

could i apply the same RI at r5.xlarge.tpc2.mem2x and r5.xlarge?In case of  RDSoralce(BYOL-SE2)FollowComment

Answer: "0Yes. For RDS Oracle (BYOL) platform, if you purcahse db.R5 reserved instance, it will be applicable to any active running db.R5 instance. For size-flexible platforms any RI of the same instance type, family & generation will be applicable to any running DB instance as long as DB platform is matching and they are in the same AWS region. So, you can apply db.r5.xlarge RI to db.r5.xlarge.tpc2.mem2x running RDS instance.Non-size flexible instance types WILL NOT have normalization factor as a parameter. And size-flexible WILL. For example, in the case with latest generation mem-optimized instance classes, the normalization factor (NF) will be the same that corresponds to the size part:large = NF 4large.tpc1.mem2x = 4xlarge = 8xlarge.tpc2.mem4x = 8xlarge.tpc2.mem2x = 82xlarge = 162xlarge.tpc1.mem2x = 162xlarge.tpc2.mem4x = 162xlarge.tpc2.mem8x = 16and so on...To confirm this, you can always check bulk API (pricing offer file): https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/using-ppslong.htmlIt contains info about pricing for all AWS services, all the combinations of possible features, usage types, API operations and regions. For example, for RDS, you can download pricing file in JSON format following this link: https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AmazonRDS/current/index.jsonI hope this helps :)CommentShareEXPERTNataliya_Ganswered a year ago"


Question: Polly TTS for Windows needs updating!

"The Polly TTS for Windows (GitHub: https://github.com/awslabs/amazon-polly-tts-for-windows) hasn't been updated for two years, and as a result is a little broken.  It needs all the newer voices added, like Olivia and Lupe.  If you scan the file PollyManager.h you can quickly tell it's missing voices.  I'm not sure if this is the only place the code needs to be modified. And I don't know enough to compile the code on my own after correcting that one file.  Details in my original post may help:  https://repost.aws/questions/QUjW3WP45KRya6PAb17Nue6g/polly-for-windows-plugin-fails-on-some-voicesFollowComment"


Question: MalformedPolicyDocument error on PutUserPolicy while running ansible script to generate IAM user along with policy

"I am trying to run an ansible script to generate an IAM user along with an attached policy allowing access to an S3 bucket.I am able to create a policy on the console using the same policy document, and have confirmed that the document is valid json. However I still see the error below.The document itself looks like this.{    "Version": "2012-10-17",    "Statement": [        {            "Sid": "SAImgBucket",            "Effect": "Allow",            "Action": [                 "s3:*"            ],            "Resource": [                 "arn:aws:s3:::<s3-bucket-name>"            ]        }    ]}The ansible task is as below.- name: create sa IAM user permissions      community.aws.iam_policy:       iam_type: user       iam_name: "{{ sa_app_username }}"       policy_name: "{{ sa_app_username }}-policy"       state: present       policy_json: " {{ lookup( 'template', 'template/sa_iam_policy.json.j2') | to_json }} "Any suggestions on how to further debug or address this are greatly appreciated.botocore.errorfactory.MalformedPolicyDocumentException: An error occurred (MalformedPolicyDocument) when calling the PutUserPolicy operation: Syntax errors in policy.[DEPRECATION WARNING]: The skip_duplicates behaviour has caused confusion and will be disabled by default in Ansible 2.14. This feature will be removed from community.aws in a release after 2022-06-01. Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg.fatal: [localhost]: FAILED! => changed=false   boto3_version: 1.18.18  botocore_version: 1.21.18  error:    code: MalformedPolicyDocument    message: Syntax errors in policy.    type: Sender  invocation:    module_args:      aws_access_key: null      aws_ca_bundle: null      aws_config: null      aws_secret_key: null      debug_botocore_endpoint_logs: false      ec2_url: null      iam_name: sa-103      iam_type: user      policy_document: null      policy_json: '"{\n    \"Version\": \"2012-10-17\",\n    \"Statement\": [\n        {\n            \"Sid\": \"SAImgBucket\",\n            \"Effect\": \"Allow\",\n            \"Action\": [\n                 \"s3:*\"\n            ],\n            \"Resource\": [\n                 \"arn:aws:s3:::<bucket-name>\"\n            ]\n        }\n    ]\n}\n"'      policy_name: sa-103-policy      profile: null      region: null      security_token: null      skip_duplicates: null      state: present      validate_certs: true  msg: 'An error occurred (MalformedPolicyDocument) when calling the PutUserPolicy operation: Syntax errors in policy.'  response_metadata:    http_headers:      connection: close      content-length: '279'      content-type: text/xml      date: Tue, 15 Feb 2022 17:45:05 GMT      x-amzn-requestid: fce8efa1-7a86-468f-9481-264db52db33d    http_status_code: 400    request_id: fce8efa1-7a86-468f-9481-264db52db33d    retry_attempts: 0FollowComment"

Answer: "1Accepted AnswerHi,Thanks for reaching out to us! I see that you're concerned about receiving a MalformedPolicyDocument error while trying to call the PutUserPolicy API using an Ansible script.While the content of the policy looks fine, from the error logs you have shared, it looks like you might be passing an additional set of quotes before and after the JSON script (as shown below).'"{\n    "Version": "2012-10-17",\n    "Statement": [\n        {\n            "Sid": "yourSid",\n            "Effect": "Allow",\n            "Action": [\n                 "s3:*"\n            ],\n            "Resource": [\n                 "arn:aws:s3:::<s3-bucket-name>"\n            ]\n        }\n    ]\n}\n"'The reason I say this is because, when I pass the JSON script as expected, CloudTrail records the JSON script without the additional quotation mark ' before and after the JSON script as shown below:"{\n    "Version": "2012-10-17",\n    "Statement": [\n        {\n            "Sid": "yourSid",\n            "Effect": "Allow",\n            "Action": [\n                 "s3:*"\n            ],\n            "Resource": [\n                 "arn:aws:s3:::<s3-bucket-name>"\n            ]\n        }\n    ]\n} "Could you please check for any additional quotes in your policy syntax when you pass the policy as a document sa_iam_policy.json.j2?Please let us know if you continue to run into any such issues.Note: As a reminder, I wanted to request that you not share any specific details on your resources over this platform. All questions and answers posted to re:Post are public. You should open a support case if your question involves sensitive information.References:Grammar of the IAM JSON policy language  - https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_grammar.htmlhttps://repost.aws/faqCommentShareSUPPORT ENGINEERSumukhi_Panswered a year ago"


Question: Difference in eksctl between privateNetworking: true and privateCluster: enabled: true

I understand that addingprivateCluster:  enabled: trueWhen creating the cluster makes it a fully private cluster.  But then how does that differ from adding: clusterEndpoints:    privateAccess: true    publicAccess: falseTo the VPC section and:    privateNetworking: trueto the managedNodeGroups section instead of the privateCluster option?  Because I found you cannot have all 3 in the same yaml file.To me it sounds like privateNetworking means the networking will be private and not allow access to the internet unless via a NAT.  And clusterEndpoints: privateAccess:true to me means you can access the AWS Endpoints via a private VPCE.FollowComment

Answer: "0Accepted AnswerThe only required field to create a fully-private cluster is privateCluster.enabled:privateCluster:  enabled: trueIt is an error to leave privateNetworking unset in a fully-private cluster. privateNetworking must be explicitly set for a fully-private clusterprivateNetworking: trueA fully-private cluster does not support modifying clusterEndpointAccess during cluster creation. It is an error to set either clusterEndpoints.publicAccess or clusterEndpoints.privateAccess, as a fully-private cluster can have private access only, and allowing modification of these fields can break the cluster.Reference: https://eksctl.io/usage/eks-private-cluster/CommentSharerePost-User-3109351answered 23 days ago"


Question: Configuring "Deploy to Elastic Beanstalk" plugin in Visual Studio

"I am playing with new "Deploy to Elastic Beanstalk" in Visual Studio. I was successful in deploying my ASP.Net 7 application to Linux. So, I got through basics. But now I have a number of questionsIs it possible to save the deployment the way I can save "Folder" deployment? It saves it somewhere - when deployment page opens, it offers me to use the deployment that already exists. But I run it on a non-default profile; so first I need to manually switch profile. And second - I would prefer to run it from command line as in dotnet publish.How do I install HTTPS? I have a single instance; it looks like I can't use ACM. Which is fine - I am typically use certbot anyway. But I can't figure out how to enable epel / install certbot and run it.Typically, I build a custom API and deploy to it. Is it possible?I would like to have an Angular application running on the same box as well. Is it possible?These are just a few. The bigger question is, is it possible to look and tweak what is going under the hood? I tried to run dotnet aws deployment-project generate, but I got an error The project you are trying to deploy is currently not supported.I guess I would love to have some kind of tutorial that goes beyond the basicsFollowComment"

Answer: "1Hi Virshu,To address the below questions:Is it possible to save the deployment the way I can save "Folder" deployment? It saves it somewhere - when deployment page opens, it offers me to use the deployment that already exists. But I run it on a non-default profile; so first I need to manually switch profile. And second - I would prefer to run it from command line as in dotnet publish.You can save the current running deployment from Elastic Beanstalk. Go to Applications->Choose the application-> Application versions->Under the source tab you can select the source and it will download as a .ziphttps://github.com/aws/aws-toolkit-visual-studio/issues/247 How do I install HTTPS? I have a single instance; it looks like I can't use ACM. Which is fine - I am typically use certbot anyway. But I can't figure out how to enable epel / install certbot and run it.To install certbot on an Amazon Linux 2 instance, please create an .ebextensions folder in the root of your project and create a file called "00_install_certbot.config" in it [1][2][3]container_commands:    10_install_and_enable_epel_release:        command: "sudo amazon-linux-extras install epel -y"        ignoreErrors: true        test: test ! -d "/etc/letsencrypt/"    30_install_certbot:        command: "sudo yum install -y certbot python2-certbot-apache"        ignoreErrors: true        test: test ! -d "/etc/letsencrypt/"Typically, I build a custom API and deploy to it. Is it possible?Yes, it is possible to deploy a custom API. I would like to have an Angular application running on the same box as well. Is it possible?The platform is a single tenant, therefore only 1 application is supported.Tutorial that goes beyond the basics: Deployment Projects with the new AWS .NET Deployment Experiencehttps://aws.amazon.com/blogs/developer/dotnet-deployment-projects/References:[1] https://certbot.eff.org/instructions[2] https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/ebextensions.html[3] https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/platforms-linux-extend.html[4] https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/applications-versions.html[5] https://docs.aws.amazon.com/elasticbeanstalk/latest/api/API_Deployment.html[6] https://docs.aws.amazon.com/toolkit-for-visual-studio/latest/user-guide/welcome.html[7] https://github.com/aws/aws-toolkit-visual-studio/issuesCommentSharerePost-User-1984708answered 6 months agovirshu 6 months agoThank you very much! Very helpfulA few comments -I am familiar with .ebextensions; but somehow having trouble here. For some reasons commands are not executing. I remember that it had to have more sophisticated structure. I will research further.I made a typo that totally changed the question. I was asking about custom AMIs - can I choose AMI ID during deployment?Tutorial. I saw that page; in fact, one of my questions is specifically about this:I tried to run dotnet aws deployment-project generate but I got an error The project you are trying to deploy is currently not supportedShare"


Question: MQTT-based file delivery from the thing to AWS Core IOT

"I'm developing a system based on AWS Core IOT FreeRTOS that is using MQTT and Shadow library to communicate both ways.Is there a way to send a file in the upstream direction, that is from the thing to AWS Core IOT?I see that there is an option to MQTT-based file delivery but I need the other way around.FollowComment"

Answer: "1Accepted AnswerHi EyalG. There's no equivalent or similar upstream mechanism for MQTT. To do it over MQTT, you would have to break your file into parts of not more than 128KB (current MQTT payload limit) for transport and re-constitute it in the cloud.One alternative you may consider is to upload to S3 using HTTP: https://aws.amazon.com/blogs/iot/securely-ingesting-large-sized-payloads-from-iot-devices-to-the-aws-cloud/. You can find a similar demo implementation here: https://github.com/aws/aws-iot-device-sdk-embedded-C/blob/main/demos/http/http_demo_s3_upload/http_demo_s3_upload.cCommentShareEXPERTGreg_Banswered 6 months ago0Thank you for the answer.In my case the requested file length is much less then 128K but the only way I know to communicate with the Core is by updating the shadow topic with publish call (MQTTAgent_Publish).How can I send a file with that MQTT interface if its size is less then 128K?ThanksCommentShareEyalGanswered 6 months agoGreg_B EXPERT6 months agoAssuming your device has enough memory, a single MQTT message can have a payload of up 128KB: https://docs.aws.amazon.com/general/latest/gr/iot-core.html#message-broker-limits. That is for publishing to a custom topic, not the reserved shadow topics. So you need to define your own topic. This example publishes to /some/topic/name: https://aws.github.io/amazon-freertos/202107.00/embedded-csdk/libraries/standard/coreMQTT-Agent/docs/doxygen/output/html/mqtt_agent_publish_function.html. Shadows are appropriate for status information that changes infrequently, but probably not for this use case.Share"


Question: CUDOS - I want to see historical data

"We deployed "Cloud Intelligence Dashboard" a few days ago. However, when we checked the "CUDOS" dashboard, we saw that there are only metrics for April. Is it possible to see more retrospective data? Example: Can we collect all metrics for 2023?FollowComment"

Answer: "1Yes, you can request to have your CUR data backfilled by opening a support case.Open a support case to request a backfill of your cost data. In your support case, make sure to provide the report name and the billing period that you want backfilled.https://docs.aws.amazon.com/cur/latest/userguide/troubleshooting.html#backfill-dataCommentShareEvan Lecklideranswered 2 months agorePost-User-1436915 2 months agoThank you so much! Will do it.Share"


Question: Can Cloud Intelligence Dashboards be implemented with Terraform?

Can Cloud Intelligence Dashboards be implemented with Terraform? Is there is any templates that customers can use to deploy the dashboards using Terraform instead of CloudFormation?FollowComment

Answer: 1Accepted AnswerHi ThereLooks like someone is working on this.  Check out  Terraform dashboard deployment #492  in the AWS Samples github repoCommentShareEXPERTMatt-Banswered 2 months ago


Question: Error when using StartExportTask to export RDS snapshots to S3

"When calling StartExportTask API from an AWS account A for a snapshot belonging to AWS account B, I receive the following error: "An error occurred (InvalidParameterValue) when calling the StartExportTask operation: The resource xxxx is owned by a different AWS account. To export resources shared with you, first copy them to your AWS account and then export the copy.". Before calling the API, I have assumed a role with AmazonRDSFullAccess policy to allow accessing the snapshot. This error refers to the "sourceArn" parameter. However, in the AWS documentation https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_StartExportTask.html it does not mention that you can't use the API for snapshots from different AWS accounts. So, the question is, is it possible to call StartExportTask for a snapshot belonging to a different AWS account?FollowComment"


Question: Add sharedIdentifier to Event Bridge trigger for Batch

"I'm trying to setup an aws batch job to run daily. Through the AWS batch GUI I've created the job definition, job queue & compute environment. The job can successfully run when, via batch, a new job is manually configured & submitted. I'm now trying to use an Event Bridge rule to automate the daily job execution but running into an issue. The trigger runs but returns the following error (from CloudTrail):"responseElements": {        "message": "shareIdentifier must be specified.",        "__type": "ClientException"    },When manually executing the batch job there's an option to enter a share identifier but when configuring the Event Bridge rule this option doesn't exist.When defining the Event Bridge rule, the following configuration has been used:Rule Type: ScheduleTarget:Target Type: AWS ServiceSelect a target: Batch Job queueThe job queue, definition & name are enteredFurther to this, I've tried to configure target inputs (Constant (JSON text) ) & tried the following approaches:First Attempt{  "ContainerOverrides": {    "shareIdentifier": "*"  }}Second Attempt{  "schedulingPriorityOverride": 1,  "shareIdentifier": "*"}But none of these have worked. In fact, when examining Cloud Trail neither attempt appears in requestParameters.Any suggestions or working examples for how to solve it?FollowComment"


Question: Private IP requirements in VPC for Application Load Balancer

"How many private IP's does internal ALB need per subnet for creation?Is it possible to figure out which IP's are allocated and can they be static, so that the AWS customer can create firewall rules from on-prem to this VPC? For example, via their Direct Connect to private VPC subnets.FollowComment"

Answer: "0Accepted AnswerAs called out in the docs:To ensure that your load balancer can scale properly, verify that each Availability Zone subnet for your load balancer has a CIDR block with at least a /27 bitmask (for example, 10.0.0.0/27) and at least 8 free IP addresses. Your load balancer uses these IP addresses to establish connections with the targets.For the 2nd part of the question you can use the approach listed in this blog post Using static IP addresses for Application Load BalancersCommentShareEXPERTagardezianswered 3 years ago"


Question: how can i quickly troubleshoot IAM permission for a service

"hi.. i'm currently developing a beanstalk service that calls an automation  document that creates cloudformation stacks.the role for such a service requires many MANY iterations, of modify Role, upload, restart, try again.as a developer we only have SSO roles, is there a way i can develop under the context of the service role without modifying the original role to allow my sso user to assume it?i'd like to be able to perform operations as though i am the service to figure out faster what kind of permissions i require (for example execute cloudformation stack as though i am that roleFollowComment"

Answer: "2One way of generating policies is to use AWS's policy generator based off activity: https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_generate-policy.html.  With this,  IAM Access Analyzer reviews AWS CloudTrail for API calls and generates a policy template that contains the permissions that the entity used over a specified data range.There are other 3rd party tools that do something like this as well.I also recommend using AWS Policy Sim: https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_testing-policies.htmlCommentSharejsoncanswered a year agoElhananAWS a year agothanks, i've been reading about the policy generation, and i'm not sure about a few things, i'm assuming i need to use my current developer role, but OTOH , i don't want to give my actuall role, as i maybe doing other aws stuff while the activity is running, not mention my IDE will as well, so i would need to create an additional role similar to my own, by my current role is actually SAML based, so how do i create a "developer like" role i can configure in aws CLI to assume that role?Share1You can search for the service role in IAM Roles and see which policies are applied to it. Then create another role that you can assume or create an IAM user with the same policies that are applied to the server role. After you are done you can remove the role/user that you created.CommentShareMichael_Kanswered a year agoElhananAWS a year agothat's what i thought i would do, but i can't even create roles for that too.Share"


Question: Step Function to Send Email on Error/Success

"Dear Sir/Madam,We have a couple of Step Functions running on a weekly basis, and we would like to know right after a Step Function encounter an error. Hence  we place a "Send Email" Task (Amazon Pin Point Email Service) before the fail State.All the main task's  error handling will Catch any error and continue the the "Send Email" State before failing the Step Function.in side the "Send Email" configuration,  there is one API Parameters field, and i filled it in with :{  "Content": {    "Body": {      "Text": {        "Data": "ERROR"      }    },    "Subject": {      "Data": "ERROR"    }  },  "Source": "source@me.com",  "Destination": {    "ToAddresses": [      "notify@me.com"    ]  }}However, when i try to save the state machine, i got an error saying:The field "Body" is not supported by Step FunctionsIt seems like i dont know what need to be fill inside the API Parameters for Send Email task, unfortunately i cant find any reference for it.May i ask where to read up or refer for Step Function Send Email?FollowComment"

Answer: "1If you want to get a notification on the Step Function execution failure (or even successful runs), you can setup a CloudWatch rule to monitor the execution status and then set the target as SNS topic to send an email when the rule is triggered.More information can be found here: https://aws.amazon.com/blogs/developer/handling-errors-retries-and-adding-alerting-to-step-function-state-machine-executions/CommentSharejoahnaanswered a year agoAWS-User-0753337 a year agoThis solution is workable, since no code required.However, i wonder if anybody know how to use the Step Function Sent Email Task at all (it is more powerful since it is part of the step function)?Share0Hi, Good QuestionYou could probably refer to https://github.com/aws-samples/aws-step-functions-notification-workflow for Step Function to Send Email on Error/Success using Lambda (https://github.com/aws-samples/aws-step-functions-notification-workflow/blob/master/src/lambda/SendEmailNotification.zip)CommentShareSrianswered a year agoAWS-User-0753337 a year agoThe above is using Lambda. What about directly from Step Function "Send Email" task?Share0You need to follow the structure of SES API V2 https://docs.aws.amazon.com/ses/latest/APIReference-V2/API_SendEmail.htmlIn your case you are sending a Simple email:{    "Content": {        "Simple": {            "Body": {                "Text": {                    "Data": "ERROR"                }            },            "Subject": {                "Data": "ERROR"            }        }    },    "Source": "source@me.com",    "Destination": {        "ToAddresses": [            "notify@me.com"        ]    }}CommentShareAWS-User-0837078answered 6 months ago"


Question: AWS Cloud9 environment

I am trying to follow this tutorial to set up a cloud9 development environment but the option to create an environment is greyed out as shown in the attached image. I have tried all the regions too but it does not change anything.FollowComment

Answer: "0On June 27, 2022, AWS made changes to AWS RoboMaker development environment. You can no longer create new development environments in AWS RoboMaker. Development environment capabilities has been migrated to AWS Cloud9. More information here: https://docs.aws.amazon.com/robomaker/latest/dg/chapter-support-policy.html.To create AWS Cloud9 development environment for RoboMaker, you can follow this blog: https://aws.amazon.com/blogs/robotics/robotics-development-in-aws-cloud9/CommentSharejoahnaanswered 10 months ago"


Question: EC2 Linux Instance is up but not reachable

EC2 Linux Instance is up but not reachable. This happens after 3 to 4 days. I have to shutdown and start the instance to get it back on the network. Reboot is not helping in this case.Please help me trouble shoot.FollowComment

Answer: "0Take a look at the Cloudwatch metrics for the instance to see if CPU usage is high, thereby making the machine unresponsive - https://aws.amazon.com/premiumsupport/knowledge-center/ec2-linux-resource-over-utilization/. You will need to monitor the processes to see which process may be driving up resources usage to the point where the machine eventually becomes unresponsive.You can also install the Cloudwatch agent on the machine to send logs to Cloudwatch logs - https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/Install-CloudWatch-Agent.htmlCommentShareEXPERTIndranil Banerjee AWSanswered 10 months ago"


Question: Forward AWS Connect CCP Streams Logs to Cloudwatch

"Hello,Is there any way to forward AWS CCP Streams logs to cloudwatch. Currently we can only get logs from client's machine. They have to download and send them to us. We want to forward logs from client side to cloudwatch so we dont need client downloaded logs.Thank you.FollowComment"

Answer: "1More specifically, you could use the connect.getLog().download() function, then pipe the download to a function that uploads the logs to cloudwatch line by line.You'd either need agents to click a button, or you could run the command on a timer and track time stamps to to avoid re-uploading log entries.CommentShareledgeanswered a year agoEXPERTAWS-samfredreviewed 2 months ago0Accepted AnswerYou'll have to build a custom CCP in order to accomplish this.CommentSharedmaciasanswered a year ago"


Question: Control Tower creation issue

"Hi, I created a new account and then immediately went to creating control tower. Everything seemed to work except I have this error:Error"AWS Control Tower failed to set up your landing zone completely: AWS Control Tower cannot deploy the required stack set because the bucket policy for the logging bucket, aws-controltower-logs-642978469219-us-east-1, is incorrect."I'm not seeing this bucket anywhere, what should I do? And whatever it is do I do it in control tower?Thanks.FollowComment"

Answer: "0Hi User,very strange behaviour. Normally there should not be a problem when setting up control tower.The logging bucket should be located in the "log archive" account wich was created with control tower.Check out the Cloudformation-Stack-Events for more details.Also check out the documentation, it explains that there could be problems if you immediatly create a landing zone with control tower in a freshly created account:https://docs.aws.amazon.com/controltower/latest/userguide/troubleshooting.htmlLanding Zone Launch FailedCommon causes of landing zone launch failure:    Lack of response to a confirmation email message.    AWS CloudFormation StackSet failure.Confirmation email messages: If your management account is less than an hour old, you may encounter issues when the additional accounts are created.Action to takeIf you encounter this issue, check your email. You might have been sent confirmation email that is awaiting response. Alternatively, we recommend that you wait an hour, and then try again. If the issue persists, contact AWS Support.Failed StackSets: Another possible cause of landing zone launch failure is AWS CloudFormation StackSet failure. AWS Security Token Service (STS) regions must be enabled in the management account for all AWS Regions that AWS Control Tower is governing, so that the provisioning can be successful; otherwise, stack sets will fail to launch.Action to takeBe sure to enable all of your required AWS Security Token Service (STS) endpoint regionsbefore you launch AWS Control Tower.Currently, AWS Control Tower is supported in the following AWS Regions:    US East (N. Virginia)    US East (Ohio)    US West (Oregon)    Canada (Central) Region    Asia Pacific (Sydney)    Asia Pacific (Singapore) Region    Europe (Frankfurt) Region    Europe (Ireland)    Europe (London) Region    Europe (Stockholm) Region    Asia Pacific (Mumbai) Region    Asia Pacific (Seoul) Region    Asia Pacific (Tokyo) Region    Europe (Paris) Region    South America (São Paulo) RegionAWS Support is probably your best bet in the end.SincerelyHeikoCommentShareHeikoMRanswered 3 months ago"


Question: HttpApi timeout setting missing from SAM cloudformation template

"My company is deploying lambda based serverless applications using the SAM cloudformation template format (which frustratingly has different syntax from the standard template).  Using this format, I cannot find a way to set the "timeout in milliseconds" for an AWS::Serverless::HttpApi type gateway placed in front of the lambda.  As it is, they default to 5 seconds which doesn't allow for cold start times or for requests that are longer than normal.These services need to be controlled through the template as the development team doesn't have access to the console to adjust it through the web interface (company security policy).How can we set this value during the cloudformation deploy or get it added as a property in the templates?FollowComment"

Answer: "0Accepted AnswerHi gozargozarian,This was added as part of the latest SAM launch: https://github.com/awslabs/serverless-application-model/releases/tag/v1.22.0Thanks,AlanCommentShareAWS-User-9438795answered 3 years ago0Thanks!  This worked perfectlyCommentSharegozargozariananswered 3 years ago"


Question: Browser-based ssh not working after Debian9 upgrade to Debian10

"Instance OS : Debian9.5Problems:Cannot using lightsail Browser-based ssh , whereas remote ssh fine.When I click connect using SSH button in my instance web-page, itshow message as follow:Log in failed. If this instance has just started up, try again in a minute or two.CLIENT_UNAUTHORIZED 769What I did before this problem :using remote ssh to connect instance,using 'apt' tools to upgrade system from Debian9.5 to Debian10(upgrade according to https://www.debian.org/releases/buster/amd64/release-notes/ch-upgrading.en.html)What should I do to let Browser-based ssh recover.thanksEdited by: chenlola on Jul 24, 2019 12:28 PMFollowComment"

Answer: "0Did you snapshot the instance before the upgrade?  If so, I would suggest you revert to your snapshot and try the upgrade again.It sounds like the SSH service isn't active. That may be due to the upgrade or some problem during the upgrade.CommentShareDavid Ganswered 4 years ago0Browser-based SSH won't work if your instance's system clock drifted too much from correct time.Please check if that's indeed the case.Did Debian upgrade modify your /etc/ssh/sshd_config file? Because that may be another reason why browser-based SSH  stopped working.Does your /etc/ssh/sshd_config file still contain the following line?TrustedUserCAKeys /etc/ssh/lightsail_instance_ca.pubDoes /etc/ssh/lightsail_instance_ca.pub still exist?When your Lightsail instance was launched for the first time it ran the setup script that prepared it for browser-based SSH and more. You can see the contents of that script by using your favorite SSH client and doing this:curl -s http://169.254.169.254/latest/user-dataIf the setup related to /etc/ssh/lightsail_instance_ca.pub file was lost during upgrade, you may be able to recover browser-based SSH by repeating the steps in that script that pertain to /etc/ssh/lightsail_instance_ca.pub.Thank you for using Lightsail.Edited by: Pavel@AWS on Jul 30, 2019 12:36 PMCommentSharePavel - AWSanswered 4 years ago0Thanks for  Pavel@AWS and  David G  reply.Finally ,add this line in /etc/ssh/sshd_config file , completely fixed my instance problem.(Do not forget restart ssh service.)TrustedUserCAKeys /etc/ssh/lightsail_instance_ca.pubEdited by: chenlola on Sep 7, 2019 9:42 AMCommentSharechenlolaanswered 4 years ago0I am having this issue when when I copy a snapshot from a US region to Australia region and start a new instance with this snapshot./etc/ssh/sshd_config still has the same line "TrustedUserCAKeys /etc/ssh/lightsail_instance_ca.pub" as the snapshot in US region.And the content of /etc/ssh/lightsail_instance_ca.pub is the same, but the web ssh client does not work. I guess the Australia region uses a different private to connect. What is the solution if it is? ThanksCommentSharePXanswered 3 years ago0It's possible that this is due to the timezone difference. This thread may provide some insight: https://forums.aws.amazon.com/thread.jspa?messageID=812946CommentShareAlexanswered 3 years ago0Besides adding the public key in /etc/ssh/sshd_config file as mentioned above, try also adding the second line "CASignatureAlgorithms +ssh-rsa". It worked for me.TrustedUserCAKeys /etc/ssh/lightsail_instance_ca.pubCASignatureAlgorithms +ssh-rsaCommentShareMrCTanswered 2 years ago"


Question: Blocked elastic IP

"Hello,I currently have an elastic IP (34.243.61.80) that I cannot release because it is linked to a reverse DNS entry I can't access (the DNS entry is not accessible in my route 53).Does someone knows how to release this IP ? Any help would be appreciated.Thank you,Samuel FringeliFollowComment"

Answer: "0Hi Samuel,Please open the Request to Remove Email Sending Limitations form [1] (sign in with your AWS account root user credentials) and describe your request to remove rDNS record from the EIP in the field named 'Use Case Description'. After you submit the form the appropriate team will contact you once the request is processed.Link:[1] https://aws-portal.amazon.com/gp/aws/html-forms-controller/contactus/ec2-email-limit-rdns-requestRegards,awstomasCommentShareAWS-User-3892169answered 4 years ago0Thank you for your help ! I'll use this formCommentSharesamuelfringelianswered 4 years ago"


Question: End-to-end encryption (to be or not to be)

"Hi community,What is your position on end-to-end encryption (regardless of regulations), but from a practical security point of view.Scenario: classic scenario of a web service being front-ended by an application load balancer. No questions ask we do encryption in transit for the front end part. BUT for the communication between the load balancer and the server the security position of AWS seems to be "encrypt everything" but when i read AWS documentation from sysops perspective i get the following  "Terminating secure connections at the load balancer and using HTTP on the backend might be sufficient for your application. Network traffic between AWS resources can't be listened to by instances that are not part of the connection"As a security Practioner, i will push for end to end encryption but i willl like to understand this other point of view from AWS that, when reading it might suggest that the encryption between the load balancer and the EC2 is optional.   I am in security now but my background is sysadmin and when i talk to operations people i dont like to just "impose" security regulations/standards/policies etc ... I like to explain why its required from a technical security point of view.When it comes to our on-prem applications ... its easy to explain the risks. But in AWS its  a little bit confusing for me to justify my point when they show me AWS documentation stating that it might be enough just by encrypting the front end part of the communications.FollowComment"

Answer: 3Similar question was answered in this re:Post threadCommentShareEXPERTTushar_Janswered 10 months ago


Question: How to find out where the S3 ListObjects requests came from

"In the last two days, my billing increased a lot due to lots of S3 ListObjects api requests. I'm sure it wasn't originated by my services.I'd like to know how can I figure out where are these requests coming from, and which buckets were accessed?I had no clue on this issue.Then I enabled CloudTrail service, but still didn't find out where S3 ListObjects came from.FollowComment"

Answer: "5Accepted Answeryou can enable S3 Server Access Logging and analyze the generated logs. S3 Server Access Logging provides detailed records for the requests made to your S3 bucketsbucket > properties > Server access loggingDownload the log files from the destination bucket.Look for entries with the "REST.GET.BUCKET" operation, which corresponds to the ListObjects API request.CommentShareEXPERTsedat_salmananswered 2 months agoEXPERTTushar_Jreviewed 2 months agoEXPERTalatechreviewed 2 months ago"


Question: Mediaconvert auto color grading

"I am studying color shifting in aws mediaconvert.Is there a way to automatically change the color of the video when setting up a job group?For example, like the automatic color adjustment function in iPhone video editing.I hope anyone can help. thank youFollowComment"

Answer: "0AWS Elemental MediaConvert does offer the ability to convert between color spaces, which are defined by HDR professional standards. These conversions would need to be part of the transcode job or job template. You may want to review the following links to determine if they provide the color filtering needed.https://docs.aws.amazon.com/mediaconvert/latest/ug/hdr.htmlhttps://docs.aws.amazon.com/mediaconvert/latest/ug/converting-the-color-space.htmlhttps://aws.amazon.com/about-aws/whats-new/2023/03/aws-elemental-mediaconvert-enhanced-color-processing/CommentShareMike-MEanswered 2 months ago"


Question: Issues with ec2 describe-images when using filters with marketplace AMIs

"I seem to be unable to search for marketplace AMIs when using a filter; this is frustrating because we use the product code to find the most up to date AMI.Searching for a standard AMI that you'd find if trying to launch an instance from the console:➜  aws ec2 describe-images --filters Name="image-id",Values="ami-09e2d756e7d78558d" --debug | cat2022-09-21 14:38:36,360 - MainThread - awscli.formatter - DEBUG - RequestId: f3bf3f72-eabe-46a2-bdad-151712069a87{    "Images": [        {            "Architecture": "x86_64",            "CreationDate": "2022-08-17T23:46:17.000Z",            "ImageId": "ami-09e2d756e7d78558d",            "ImageLocation": "amazon/amzn2-ami-kernel-5.10-hvm-2.0.20220805.0-x86_64-gp2",            "ImageType": "machine",            "Public": true,            "OwnerId": "137112412989",            "PlatformDetails": "Linux/UNIX",            "UsageOperation": "RunInstances",            "State": "available",            "BlockDeviceMappings": [                {                    "DeviceName": "/dev/xvda",                    "Ebs": {                        "DeleteOnTermination": true,                        "SnapshotId": "snap-0b1e0b58f54fc89ef",                        "VolumeSize": 8,                        "VolumeType": "gp2",                        "Encrypted": false                    }                }            ],            "Description": "Amazon Linux 2 Kernel 5.10 AMI 2.0.20220805.0 x86_64 HVM gp2",            "EnaSupport": true,            "Hypervisor": "xen",            "ImageOwnerAlias": "amazon",            "Name": "amzn2-ami-kernel-5.10-hvm-2.0.20220805.0-x86_64-gp2",            "RootDeviceName": "/dev/xvda",            "RootDeviceType": "ebs",            "SriovNetSupport": "simple",            "VirtualizationType": "hvm",            "DeprecationTime": "2024-08-17T23:46:17.000Z"        }    ]}Searching for a marketplace AMI using the --image-id param:➜   aws ec2 describe-images --image-ids ami-0e1415fedc1664f51 --debug| cat2022-09-21 14:39:14,069 - MainThread - awscli.formatter - DEBUG - RequestId: 3d52e935-1d74-48aa-b205-6dad06d23eb6{    "Images": [        {            "Architecture": "x86_64",            "CreationDate": "2020-07-31T17:51:20.000Z",            "ImageId": "ami-0e1415fedc1664f51",            "ImageLocation": "aws-marketplace/OpenVPN Access Server Community Image-fe8020db-5343-4c43-9e65-5ed4a825c931-ami-06585f7cf2fb8855c.4",            "ImageType": "machine",            "Public": true,            "OwnerId": "679593333241",            "PlatformDetails": "Linux/UNIX",            "UsageOperation": "RunInstances",            "ProductCodes": [                {                    "ProductCodeId": "f2ew2wrz425a1jagnifd02u5t",                    "ProductCodeType": "marketplace"                }            ],            "State": "available",            "BlockDeviceMappings": [                {                    "DeviceName": "/dev/sda1",                    "Ebs": {                        "DeleteOnTermination": true,                        "SnapshotId": "snap-0bb5570e9d1eb75ea",                        "VolumeSize": 8,                        "VolumeType": "gp2",                        "Encrypted": false                    }                },                {                    "DeviceName": "/dev/sdb",                    "VirtualName": "ephemeral0"                },                {                    "DeviceName": "/dev/sdc",                    "VirtualName": "ephemeral1"                }            ],            "Description": "OpenVPN Access Server 2.8.3 publisher image from https://www.openvpn.net/.",            "EnaSupport": true,            "Hypervisor": "xen",            "ImageOwnerAlias": "aws-marketplace",            "Name": "OpenVPN Access Server Community Image-fe8020db-5343-4c43-9e65-5ed4a825c931-ami-06585f7cf2fb8855c.4",            "RootDeviceName": "/dev/sda1",            "RootDeviceType": "ebs",            "SriovNetSupport": "simple",            "VirtualizationType": "hvm",            "DeprecationTime": "2022-07-31T17:51:20.000Z"        }    ]}Searching for the same AMI; using the image-id filter (that worked for the first request):➜ aws ec2 describe-images --filters Name="image-id",Values="ami-0e1415fedc1664f51" --debug | cat2022-09-21 14:39:41,422 - MainThread - awscli.formatter - DEBUG - RequestId: 1de1f1a6-76cf-4664-bde5-1f8a3f061815{    "Images": []}This was working the other day; or so I believe... am I doing something daft or has this behavior changed?FollowComment"

Answer: "0Accepted AnswerI can't read good, the AMI is deprecated:"DeprecationTime": "2022-07-31T17:51:20.000Z"I don't think the vendor is even aware of this given that this apparently happens automatically (and they haven't published another AMI): https://aws.amazon.com/about-aws/whats-new/2022/03/amazon-machine-images-public-visibility-two-years/CommentSharerePost-User-0892834answered 8 months ago"


Question: export glue settings to another account

"Hi Team,I configured an AWS glue job with (csv crawler, rds crawler, connection...) in DEV accountis it possible to export those settings from the DEV account and create the same settings for crawlers on the stage account?Thanks!!FollowComment"

Answer: "0Hi ,you can create Crawlers and Connections using AWS Cloud Formation or with AWS CDK.To extract the current configuration you could use the AWS Glue API or CLI Commands.hope this helps,CommentShareEXPERTFabrizio@AWSanswered a year ago"


Question: DNS resolution failure from App Runner

"Any time my application tries to resolve a domain from within App Runner, it fails. For example, the Auth0 client fails with the following error:requests.exceptions.ConnectionError: HTTPSConnectionPool(host=’<MY_AUTH0_ID_HERE>.us.auth0.com’, port=443): Max retries exceeded with url: /.well-known/jwks.json (Caused by NewConnectionError(’<urllib3.connection.HTTPSConnection object at 0x7fcfbf9b7eb0>: Failed to establish a new connection: [Errno -3] Temporary failure in name resolution’)) 12-27-2021 03:35:30 PM         raise ConnectionError(e, request=request)I was experiencing the same issue calling another service running in App Runner. I don't see any VPC settings to configure. It sounds similar to the issue here: https://repost.aws/questions/QUnm9sWqVHTyKYX_UOKnpmHg/app-runner-and-rds.Thanks!FollowComment"

Answer: "1We have a similar issue with a dockerized app on AppRunner - related to DNS resolution (Temporary failure in name resolution => EAI_AGAIN error):FetchError: request to https://via.placeholder.com/1000x640 failed, reason: getaddrinfo EAI_AGAIN via.placeholder.comIt only happens after a new deployment (new docker image to fetch) to AppRunner. After a pause/resume of the app the issue is gone. No issues when resolving AWS internal services though.Luckily we won't use placeholder images in prod (and have no other calls to the outside).Update:In my case it seems related to alpine as base image (more details -> https://github.com/nodejs/docker-node/issues/1030). After switching from node:16-alpine to node:16-slim, the issue has gone.CommentShareAWS-User-3070013answered a year agoAWS-User-1716746 a year agoI'll give this a shot if it starts to happen to me again and report back.Share1We experienced the same issue, intermittent DNS lookup failures of an RDS hostname from an App Runner python microservice. For us, switching the resolver implementation to ares (GEVENT_RESOLVER="ares" environment variable) fixed these issues.CommentShareCUBE Projectanswered a year ago1That issue is more about connecting to a private entity in a VPC (which is not possible - today- given that an App Runner service does not connect to a VPC). You should be able to resolve any public DNS name however. I am wondering if the FQDN you are using is malformed in some way? Can you test something really simple like curling/getting www.google.com or anything as basic in order to validate that public name resolution inside the service works?[UPDATE]: I built this super simple/stupid application to prove an app deployed to App Runner can resolve and connect to the Internet. You can deploy it to App Runner and see how it can connect to a public website.CommentShareEXPERTmreferreanswered a year ago0I've tried hardcoding google.com and got the same error. This isn't intermittent for me - I'm getting 100% failure. I'll see if changing the resolver works, thanks!CommentShareAWS-User-1716746answered a year agomreferre EXPERTa year agoSee my updated answer aboveShareAWS-User-1716746 a year agoI'm getting a 404 on that path - is it public? I'll definitely give it a shot.Sharemreferre EXPERTa year agoDamn it, it was not. Now it is.ShareAWS-User-1716746 a year agoI recreated your API method in my app (also Flask) and.... it worked. Not only did the call to Google work, but the Auth0 call that was previously throwing the error I posted also worked with no other changes to the code. So now my app is working again!I want to know what fixed it I will keep poking at this and post if I find anything out. Thanks for your help!!Sharemreferre EXPERTa year agoCool. Glad it worked.Share"


Question: No module named 'tensorflow.neuron'

"Dear developers,I am relatively new to AWS and EC2 instances. I have an EC2 Inf1 instance and I am trying to set up tensorflow neuron for deep learning applications.When I running the 'Resnet50 Compilation'example provided by AWS :https://docs.aws.amazon.com/dlami/latest/devguide/tutorial-inferentia-tf-neuron.htmlUppon importing tensorflow neuron as follows : 'import tensorflow.neuron as tfn ' Ireceive the following error message:'No module named 'tensorflow.neuron''I check if the package is installed by running the pip list command in the virtual environment. This returns a list that includes the tensorflow-neuron package.I also tried to import tensorflow neuron as 'import tensorflow-neuron as tfn'. When I tried this I encountered a different error messageI hope that some of you might have an idea how to solve this.FollowComment"

Answer: "0Hi there,There are a couple of things you can try to mitigate this issue.Re-installing TensorflowUninstall tensorflow :  $ pip uninstall tensorflowThen reinstall it :   $ pip install tensorflowUpgrading the pippip install --upgrade pippip uninstall tensorflowpip install tensorflowCheck the version of the TensorFlow which is installed.Also check out these links for more references and troubleshooting :https://stackoverflow.com/questions/44976199/installing-tensorflow-examples-in-ec2-instancehttps://stackoverflow.com/questions/41415629/importerror-no-module-named-tensorflow-pythonhttps://stackoverflow.com/questions/42244198/importerror-no-module-named-tensorflowThank you!CommentShareSUPPORT ENGINEERSagar_Tanswered 2 months ago0you can see more detailed docs here:https://awsdocs-neuron.readthedocs-hosted.com/en/latest/specifically: https://awsdocs-neuron.readthedocs-hosted.com/en/latest/src/examples/tensorflow/keras_resnet50/keras_resnet50.html?highlight=resnetCommentSharerePost-User-4306474answered 2 months ago"


Question: Exact format of ECDSA_SHA_256 public keys

"When I do a GetPublicKey of an asymmetric CMK key, I get back 91 bytes.  It looks like the last 65 bytes is the actual public key I need (starting at "04").  Can someone describe the format of this key in any detail?  Thank you.MauriceFollowComment"

Answer: "1Accepted AnswerHi Maurice:KMS returns the public key as a Subject Public Key Info (SPKI) structure, as defined by RFC 5280 and its various references. We specifically return the key in the binary Distinguished Encoding Rules (DER) ASN.1 format.This format should be supported by most, if not all, common cryptographic libraries.Thanks for your feedback on how this wasn't as clear as it should have been - I'm going to work to get the KMS documentation updated to clarify.Please let me know if I can be of further assistance.BenjaminAWS KMS TeamCommentShareAWS-User-2395763answered 3 years ago0Thank you.  Works for me.CommentSharemauricebizzarrianswered 3 years ago"


Question: Anybody on the Lumberyard team working on evolving the engine on the technical side?

"Hi everyone,I just checked Amazon's schedule for GDC 2019, and I couldn't overlook the fact that everything goes about cloud computing, alexa, twitch, and online features, and the fact that there was nothing to present on the technical side of the game engine itself raised a profound concern within me. I understand that the online side of the product is the only reason why Amazon is maintaining Lumberyard, but is anybody on the Lumberyard team actually working on keeping the engine up to date? By that I mean the local side of the engine, graphics, effects, tools that actually help building games rather than online experiences only. I'm about to invest on learning an engine to stick with for the next few years and I don't want to think that the engine is going to go un-maintained on the technical side immediately and we will have the same technical capabilities in 3 years from now but amazing online... Most of the other engines are putting big efforts on keeping their engines technically fresh, current and relevant (Vulkan, Visual effects and algorithms, Audio improvements, local AI tools, modelling tools, massive performance improvements, etc) and if that's not the case for Lumberyard I'd be thankful if you could let us know now for the people like me who are about to make a decision between Lumberyard or the other engines. Thank you in advance.Kind regardsFollow"

Answer: "0Accepted AnswerA lot of feedback... thanks, @REDACTEDUSERRe: graphics. Much like networking, graphics is a massive beast to tame. We've got some improvements in the pipeline. We are also focusing on making sure our customers have the latest and greatest rendering and tooling. Definitely a lot more to come in that department.Re: PhysX. Hang tight (you won't have to for much longer!). ;)SharerePost-User-5304020answered 4 years ago0Yeah guys you are right, I Am afraid for the future of LY too, bcoz amazon dev team only maintain the clouds features, but not the engine as it-self. I'm interested in clouds tech in last, but first graphics features and overall user-frendly usage of engine, nice engine c++ apiThis sad situation pushing me to starting thinking to return back to use custom 3d enginesThat's why I'm also curious can we hope to future impovements of engine?(not clouds extensions for engine)Is there any plans for such kind of work in dev team ?SharerePost-User-2514050answered 4 years ago0I am in exactly the same situation. Please let us know if there is no future plan for improving engine itself (i do not mean cloud features).SharerePost-User-3337236answered 4 years ago0Hi @REDACTEDUSERDon't get me wrong, networking is a massive beast to tame in video games, and all improvements dedicated to easing it out are definitely a godsend. I presume though that most users (I'm new to Lumberyard but that's the feeling I'm getting from this forums) would like to know a bit more on the graphics department, and it only makes sense since it's the first impression that consumers will get from your product, from youtube videos or steam captures, so it's the first selling point (if you also have good assets that is). I understand that the Lumberyard team is not ready yet to provide users with a roadmap (quite a popular request according to the forums), but any kind of reassuring sentence on that regard would be definitely welcome, something like "we have a team working on the latest Siggraph findings but it's hard to tell when will they be released since we want to make sure that the implementation is rock-solid" would do the trick (hopefully that being true :), just to make sure that there will be something coming on that department.Kind regardsSharerePost-User-6799335answered 4 years ago0Hey all--Mark here. I'm a product manager on Lumberyard.Thanks for checking out our GDC schedule and posting! Amazon has a lot of things we think can help game developers, so there is going to be a lot of different product in our booth. Lumberyard is going to have several stations set up, covering things like animation, visual scripting, creating environments at scale, and more.In the past couple of Lumberyard releases, we've released new features and improvements hardened by teams shipping games, like some pretty big architectural changes in Lumberyard 1.16 and workflow improvements in Lumberyard 1.17. And there is definitely more on the horizon! :)I'll be milling around our booth at GDC, so come find me if you'll be there. It'd be great to talk some more!SharerePost-User-5304020answered 4 years ago0Hi Mark, thanks for reply.As DiegoBM mentioned, not all indie devs (I think most of them) ably to visit to GDC event.It's quate far and it's costly.But I'm just curious, what type of questions are asked from users/indie devs that uses the LY and that beeing on this event ?(I'm don't mean SG related questions, but rather related with engine systems and c++ api from mature indie devs)Because my's questions if very close to the engine's core functionality usage:Do you plaing to made futher impovements for PhysX, with adding such things like: cloath for character, ragdoll with physX, base vehicles, flying actors... ? because right now the PhysX is very raw, even with compare with legacy cry's physics.Also just curious, maybe you have plans (unofficial internal plans xD) to replace the old CryRenderer with something new and more lightweight ? I mean more modern renderer for instance - Unigine-like renderer, or even update cry-render with something like - DeligentCore? Or maybe LY's dev team just have plans to modernize current renderer to bring into LY's engine render-tech like: node-based materials, scriptable renderpath, non-planar real-time reflections, NPR and more other... ?Can we hoping to that GI(Total illumination v2) will be fixed in future releases? Bacause in last version (1.17) of engine it's have some bugs, and few parameteres was deleted from optionsMaybe you guys also take a look closer on blender->fbx->engine asset pipeline more closer. Because (I think) most of true-indie devs use Blender, since Maya's and 3dmax's licenses not frendly for tiny teams or solo devs.Because for instance alembic have some problems with normals, folks also talk about UVs distortion problems.Also for instance: just each newly imported model(jsut simple static box with 1 mat) has annoying bug with material's transparency. Can we hoping that in future releaces we got options for that to importing material with ignoring transparency from fbx (or some workaround for this) ?Does devs planning add something for AI related? Not just pathfinder that is already on a board, but maybe something like behaviour tree full functional node editor ? Or maybe something like stearing behaviors for flying actors ?I have a ton of similar questions, but for start I think is enough )ps. almost forgot to ask one another thing) Can you guys made something with current forum, it's very incomfortable to send post and do conversation, post pictures and share code. I think forum should be comfortable to game developer in first(PC, wiedscreen), but not for the random guy with smartphone.SharerePost-User-2514050answered 4 years ago0I do not know you have seen this article, but there is a good analysis of some errors in code.Here: Amazon Lumberyard: A Scream of AnguishSharerePost-User-4777356answered 4 years ago0Thank you @REDACTEDUSERSharerePost-User-6799335answered 4 years ago0Hi @REDACTEDUSERCheers!SharerePost-User-5841084answered 4 years ago0Hi @REDACTEDUSERThe GI bug was described by @REDACTEDUSERherehttps://forums.awsgametech.com/t/is-the-total-illumination-v2-in-version-1-16-weakened/6058/1and herehttps://forums.awsgametech.com/t/how-can-we-get-the-same-effects-in-1-16-with-1-14-by-setting-svogi-parameters/6067/1I just add my's two cents to prev. feedbackGI killing LensFlare effect to 0for instance here I'm just switch GI (on/off) (more black picture it's when GI is on) as you may see the Drones have LensFlare effect only without GI (the stripes of the red light)https://gyazo.com/4728c5cddf68cafeca5e703cc4b8c5b6 The GI have a very lazy light's bounces updateexample 1: https://gyazo.com/73bfaa53a2e4b69060528b2ddb796b9a example 2: https://gyazo.com/238ccb4db75cdf28f906fbed55213976 I think GI also dramaticly reduce all reflectance light (specular) on objectssome time objects looks very flat, it's looks like they have only albedo textures, without any reflectance (specular) colorAbout Importing transparency bug :this is my just imported modelhttps://gyazo.com/1985fb6a5aa50414518eeb7d4d33dcfc material by default have almost tranparent settings https://gyazo.com/189bf8a186e7357de634da434d78336e if you want to play with it I share with this file, this is simple rocks model.https://yadi.sk/d/LaboO5izu2kDIgSharerePost-User-2514050answered 4 years ago"


Question: Custom controller to monitor the node state and make AWS API calls to reboot EKS node

"Hi!I want some help to start creating a custom controller that can monitor the status of EKS worker node and reboot the node in case when it went to "NotReady" or "Unknown" state. I allready have an alarm in CloudWatch that triggers when a node fails. There is no any native AWS solution to do a reset in the node that fails. So, I'm thinking that an alarm when goes on (let's say it "EKSfailNodeCount"), it will trigger a lambda function, which will get the node status from the cluster and the instance id of the notReady/unknown nodes and call and EC2 reboot instance api call.So the custom solution will look like this:When a node goes into "NotReady/Unknown" state === > Alarm gets triggered for "EKSfailNodeCount" metric === > Based on the alarm event bridge can trigger a lambda function === > Lambda function will have a script that will execute kubectl commands to get not ready nodes and execute an aws api to reboot instance.The above structure can be implemented in our case to trigger the "Reboot" ec2 instance whenever the instance gets into "NotReady" state.So, has anyone some Ideas on how to achieve this?ThanksFollowComment"

Answer: "1Hello ChrisAth,I believe you are on the right path in achieving your desired use-case. Since you already have a cloudwatch alarm that detects when your nodes are in Not Ready or Unknown state, you will need to setup an Eventbridge rule.During the Eventbridge rule creation, select the target type as AWS Service and the target as Lambda function. This will make sure that whenever your alarm state change occurs, the Eventbridge rule invokes the Lambda function specified.Within the Lambda function, you can retrieve the node name from the event received, and perform an API call to EKS API Server to check the node's status.If node status is Not Ready or Unknown, retrieve its node labels and get its instance ID (Make sure that your kubernetes nodes are tagged with their corresponding instance IDs).Finally, perform a RebootInstances API call to reboot the instance. I'd advise that you setup an SES email notification to notify you whenever the lambda succeeds or fails.Note: Please be advised that Not Ready node status can happen for a variety of reasons and some failures might even persist even after reboots. If that happens, your controller workflow might go into an infinite loop trying to reboot a faulty node over and over without success.To mitigate this, I suggest that you store the Instance IDs that you rebooted into a database (e.g. dynamodb) so that you can check if the node has already been rebooted recently and set a max-tries condition. After max-tries on a particular node, stop rebooting and send an SES email notification so that you can investigate further.If your nodes have access through SSM, you can run AWSSupport-CollectEKSInstanceLogs automation runbook on the failed node so that it collects the logs needed for further troubleshooting.I hope this is helpful. Please leave a comment if you have any questions.Thank you!CommentShareSUPPORT ENGINEERVenkat Penmetsaanswered 6 months ago"


Question: Pricing question

"In provisioned capacity mode, does writing a single row per second with less than 1KB of data use an entire WCU?More concretely, if I write 10 rows, each with 50 bytes, per second have I used an entire WCU even though only 500 bytes have been written?  Or am I actually using 10 WCUs since I wrote 10 rows in a single second?Similarly with RCUs, if I issue a query once per second that returns multiple rows, but with an aggregate size of less than 4KB is the entire RCU used?Concretely, I issue a SELECT and get back 10 rows, each with 100 bytes of data I'm below the 4KB limit per RCU.  If I then issue another SELECT within the same second, and get back another 1000 bytes of data have I used 2 RCUs, or 1 RCU since I've only read 2000 bytes in this second?FollowComment"

Answer: 0If you write 10 rows each with 50 bytes you will consume 10 WCU though you wrote only 500 bytes which is less the 1 KB WCU size. Even if you write these 10 rows in a batch you will consume 10 WCU.On read side if aggregate size of your single query is less than 4 KB you will consume 1 RCU.But your next query also will cost 1 RCU (your 2 queries cost 2 RCU) though aggregate size of two query result is still below 4 KB. Each transaction is charged individually.CommentSharegaborkocsisanswered 3 years ago


Question: DynamoDB Pricing Provisioned vs On-Demand

"I feel like I am calculating cost incorrectly for DynamoDBWhen looking at the Provisioned Pricing, a WCU, (one write request under 1KB) is $.00065Then, 1,000,000 write requests in a month to a table under the provisioned pricing model would be $650.Whereas with the On-Demand Pricing 1,000,000 writes is a flat $1.50 per every million.That would be a drastic savings in using the On-Demand Pricing instead of the Provisioned, but the documentation seems to say that the Provisioned is cheaper if you properly plan the usage of your back-end.FollowComment"

Answer: "0Hi,First, I would not use pricing as the starting point to choose between provisioned versus on-demand capacity mode. The workload and business requirements will drive the decision. When your traffic patterns are unknown, when you are creating new tables, or if you have an unpredictable traffic pattern, on-demand will work best for your use case.https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/HowItWorks.ReadWriteCapacityMode.htmlSecond, let's take a closer look at the pricing. Provisioned capacity bills you every hour for the provisioned capacity. Whereas on-demand bills you per request. The differences are clear when you break it down to the per second write request rates. Let's assume your application expects 10M writes per month and writes are spread evenly over time. You are driving approximately 10M/31/24/60/60 = ~4 writes per second. You will provision 4 WCUs on your table. 4 WCUs translate to roughly $0.00065 ** 4 WCU ** 24 hours * 31 days =  $1.9344 per month. Checkout the FreeTier - You get 25 WCUs and 25 RCUs of provisioned capacity for free each month. Your calculations for on-demand are correct. Checkout the pricing examples at the bottom of this page for additional info: https://aws.amazon.com/dynamodb/pricing/provisioned/CommentSharePadma_awsanswered 4 years ago0Thank you so much, I understand now :)CommentSharechrisdotanswered 4 years ago0Happy to help. Have a good day.CommentSharePadma_awsanswered 4 years ago"


Question: Account Hacked and now I can't get AWS Billing to remove the costs from account so I can close it for good.

"I opened a free tier account with Amazon to learn about AWS for a job I was working for, I never used it at all after it was opened and never touched again since when I left my job I no longer need to learn AWS.Fast forward to March of 2022 which I got and email from AWS that my personal account might have been compromised and to please contact support through the control panel. I went through all the directions of the support personnel ONLINE thru WEBCHAT ONLY, they directed me to enter my credit card just so the account was fully active and they would only charge $1 to make sure the card works. I entered the card and proceeded to follow directions how to remove all of the information that the HACKERS had left behind and what was causing all of the billing for my account that was compromised of $18,XXX.XX. Then in April my AMEX card was automatically billed $2,4XX.XX and the support person said of sorry it was automatically billed (I argued that you lied and told me there would only be $1 charged but they had no answer for me now I called AMEX and placed a dispute on that bill!). So finally I clean up all of the hackers remains and they stated that sales/security has to review the request that these were fraudulent charges, I stated of course they were, you alerted me that someone compromised my account!Now they want me to send them $18,XXX.XX and they stated it will be credited back to me either if I used my credit card or WIRE TRANSFER. They would credit my account and send the money back??????I said no I don't have those funds and I didn't create those bills, now they come back and state they made a decision and it stands I owe the money!Do I need a lawyer for this?I also believe this 1st email may not be real from AWS since they don't provide phone numbers ever!Dear Amazon Web Services, Inc. Customer,Despite several attempts to charge the default payment method on your AWS account, you still have past due balances that requires your immediate attention to prevent account suspension. See below for details:Amazon Web Services Account Number: 4440XXXXXXXXOpen Invoices:Total Due ( USD )15,XXX.XXTotal Past Due ( USD )15,XXX.XXInvoice NumberCurrencyOpen AmountInvoice AmountInvoice DateDue DateAgeStatus1010XXXXXX USD 15,XXX.XX 15,XXX.XX 03-Apr-2022 03-Apr-2022 46We are here to help you address these past balances via any of the options below. If we are unable to resolve these balances within the next 3 business days your account may be suspended and you will no longer be able to access your AWS Management Console, manage existing resources, or buy any new resources. If you do not pay all past due charges and reactivate your account within 90 days of suspension, your account will be terminated and all resources on the account will be lost.Options to resolve your past due balance:Reply to this email. Our Accounts Receivable analysts are here to help resolve any billing or payment issues.Login to your Billing and Cost Management Console. Under Billing, click on Orders and Invoices, then select the Verify and Pay option. This option enables you to manually pay via a registered bank account or credit card.Pay via ACH/Wire and include the invoice numbers with your payment. This will ensure that we allocate your payment to the right invoice..Include the invoice number as part of the wire instructions,a.Include the invoice number on your check, orb.Email us and let us know to which invoices we should apply payment.Use the following payment instructions:To send an Electronic Funds Transfer for USD payments:To send a check for USD payments:Amazon Web Services, Inc.Bank: Wells FargoBank Address: 420 Montgomery Street, San Francisco, CA, 94163, USAAccount #: 41213XXXXXABA Routing Number: 1210XXXXXWire Routing Number: 1210XXXXXSwift Code: WFBIUS6SXXXAmazon Web Services, Inc.PO BOX 84023Seattle, WA 98124-8423Please also note that you can find a complete breakdown of these charges and view the printable PDF copies of your invoices by logging into the AWS Billing and Cost Management Console.Kind Regards,Patrick CapillasAmazon Web Services, Inc.Accounts ReceivableToll Free Number - 1877-252-0770aws-receivables-support@email.amazon.comaws.amazon.com*Edit: Removed banking information. — Kita B.FollowCommentlGN-User-2626 a year agoHello there,Thank you very much for your reply.We tried to contact you at the phone number registered on the account. (PHONE RANG ONCE AND THEY HUNG UP!)Please note that we’ve reviewed your request to reassess your billing adjustment request. On 6/6/2022, we informed you that we can’t adjust the complete amount of your bill for the charges accrued during March, April, and May. Our billing adjustment team decided to stay with their original decision. This decision is final.We won't be able to take further action on this matter or offer additional insight. This will be our final correspondence and we'll consider this case closed.All of the details in your use case have been considered carefully and in line with our Service Agreement:https://aws.amazon.com/agreementWe regret that we've not addressed your concerns to your satisfaction.Best regards,Rouse CAmazon Web ServicesShare"

Answer: "1Please do take it seriously adding MFA to your root account.And just to ensure this is clear to everyone, in the Service Agreement:" 4. Your Responsibilities.4.1 Your Accounts. Except to the extent caused by our breach of this Agreement, (a) you are responsible for all activities that occur under your account, regardless of whether the activities are authorized by you or undertaken by you, your employees or a third party (including your contractors, agents or End Users), and (b) we and our affiliates are not responsible for unauthorized access to your account."CommentShareJason_Sanswered a year agolGN-User-2626 a year agoI added MFA too but that email seems odd to me too since AWS never gives out phone numbers and the number is not even listed on Amazon's site!They agreed to give me a one-time exception BUT I would need to send them 18K first (then they would credit me back, which I can't even afford to do!), I don't have 18K in bank OR use of credit so I will need to get lawyer I am guess to settle this somehow. It is truly unfair for the smaller guy who this is happening to, there are 100's of these same stories out there and I mean 100s. Why is it that a credit card or bank will waive the fraudulent charges but AWS will not???Share"


Question: Can't find an instance I'm being billed for

"Cost Explorer says I'm being billed in the US-West-2 region for a t3.medium at a rate of $1 per day.  However, looking at the US-West-2 EC2 dashboard, I have no running instances, no reserved instances or capacity reservations.  The usage type displayed in Cost Explorer is "USW2-BoxUsage:t3.medium" and started in March.  How can I find and kill this phantom box that I'm not using?I have 2 cloudformation stacks, but between them they contain only a AWS::Config::ConfigurationAggregator, a AWS::CloudTrail::Trail and a AWS::Logs::LogGroup... also these were created in January, while the phantom box started showing up in March.FollowComment"

Answer: "0Don't you use somewhere a managed service (RDS, Elasticache, etc.) relying under the cover on Ec2 instances?CommentShareDidier_AWSanswered a month ago0Are you looking at your Cost Explorer daily view or monthly view? And this "USW2-BoxUsage:t3.medium" usage is continuing throughout May right now? Or for example, you see this usage under the month of March and maybe April, but it's no longer running in May?"BoxUsage" should be a running on-demand EC2 instance. Make sure when you go to the EC2 console to view your EC2 instances in us-west-2 region, that you remove any filters (i.e. not only view running instances, but also view stopped and terminated instances). What if this instance is on schedule, and is being turned on during certain times, and you have a filter to view only running instances in your EC2 console. If you still can't find the resource, but you are still being charged for it every day, please open a billing support case from your account, and our support team should be able to take a look at your account and advise what could be the case.CommentShareEXPERTNataliya_Ganswered a month ago"


Question: AWS Amplify "Connection to website not secure"

I have my frontend website hosted on AWS Amplify. The framework is NextJS.Occasionally our users are encountering a weird error - "The Connection to www.<domain>.com is not secure. You are seeing this warning because site does not support HTTPS".I can confirm that I do have the SSL certificate registered in AWS Certificate Manager for both <domain>.com as well as www.<domain>.com URLs. I can see thier CNAME entries in Route53.Any help would be highly appreciated.FollowComment


Question: How to setup interface VPC endpoints in a multi tier architecture?

"Customer want to use an interface VPC endpoint (for Cloudwatch logs specifically). Their main driver is that they want to reduce NAT gateway usage charges. Now they have a VPC with 4-tiers of subnets (Public, Web, App, database). Each tier can access/route to the lower tier only. What is the best practice to set this up from a cost/security perspective?. They currently don't use Transit Gateway or a multi-VPC/account architecture4 interface endpoints per network tier?Create a new tier (lets say vpc endpoint tier) and centralize the VPC endpoint there?Something else?FollowComment"

Answer: "1Accepted AnswerIn this scenario, #2 option would be better, where you create a new "tier" similar to a network services VPC design. No need to add multiple sets of interface endpoints.In regards to the potential future state, you may want to consider an actual network services VPC depending on the number of VPCs and VPC endpoints you need. It is simple enough to change down the road if you end up needing a network services VPC to host the VPC endpoints though, so I would not start out with that design.Refer to Centralized access to VPC private endpoints  in the Whitepaper.CommentShareEXPERTThaddeus_Wanswered 3 years ago"


Question: Can we publish SNS PushNotification to crossaccount endpoints?

"We have Mobile PlatformApplication arns in AWS account-1, and we can publish PNs to endpoint arns with our java-service in the same account.But when trying to publish PNs with our java-service in different AWS accounts, we get com.amazonaws.services.sns.model.AuthorizationErrorException.For Example:My PlatformApplication arn => arn:aws:sns:<region>:<account-id>:app/GCM/my-mobile-app-nameOnce user register his device against this PlatfromApplication arn, a device endpoint will be created as => arn:aws:sns:<region>:<account-id>:endpoint/GCM/my-mobile-app-name/<uuid>So, while publishing message to above endpoint arn from different AWS account resulting in AuthorizationErrorExceptionThere seems no option to provide a resource-based policy for these SNS PlatformApplications (SNS PlatformApplications are not regular SNS topics). How can we solve this?Thanks in Advance!FollowComment"

Answer: "0Hello,You need to create an IAM role in the source account to allow publish message to the SNS topic in the target account. In the target account, create a SNS resource based policy to allow access to the IAM role which was created in the source account. Please refer the below doc if it helps.https://aws.amazon.com/premiumsupport/knowledge-center/sns-cross-account-ec2-instance-iam-role/CommentShareGautam Kumaranswered 7 months agoAWS-User-5922847 7 months agoThese are SNS Mobile PlatformApplication arn, and these doesn't has a resource-based policy as far as I can see in AWS Console!I updated my question with more details.Share"


Question: AWS Lookout Metrics Showing NULLS for 0 values in data

We are using AWS Lookout Metrics for anomalies detection from sometime now. While analysing we identified that it shows broken graph for some dates and while hovering the graph says value as NULL whereas the value is available in the table for that specific date.We suspect there's some gap while learning the available data or something is not correct.We are using Athena tables as data source and offset is set to 1 day.ThanksFollowComment


Question: Getting error while deploying stack through CF- "the target must have at least one listener that matches the target group port"

"Hello Team,I am facing below error while creating the stack through cloudforamtion. I have already verified the CF template and not able to find root cause of this error."If the target type is AB, the target must have at least one listener that matches the target group port for any specific port override"Request you to please assist to fix this error. Below is my CF template:-AWSTemplateFormatVersion: "2010-09-09"Description: "Create ALB, ALB security group, target groups, listeners and listener rules"Parameters:VPC:Type: StringDescription: The vpc to launch the serviceDefault: vpc-53b04a34PrivateSubnet1:    Type: String    Description: The subnet where to launch the service    Default: subnet-814e77f7PrivateSubnet2:    Type: String    Description: The subnet where to launch the service    Default: subnet-759a7d12Resources:ALBSecurityGroup1:Type: "AWS::EC2::SecurityGroup"Properties:GroupDescription: "security group for ALB"GroupName: "Gatling-ALB-SG-1"Tags:-Key: "Project"Value: "Gatling-ALB"-Key: "createdBy"Value: "Userhub"-Key: "Environment"Value: "stage"-Key: "Name"Value: "Gatling-ALB-SG"VpcId: !Ref VPCSecurityGroupIngress:-CidrIp: "0.0.0.0/0"FromPort: 80IpProtocol: "tcp"ToPort: 80-CidrIp: "0.0.0.0/0"FromPort: 80IpProtocol: "tcp"ToPort: 80ApplicationLoadBalancer:    Type: "AWS::ElasticLoadBalancingV2::LoadBalancer"    Properties:        Name: "gatling-lb"        Scheme: "internal"        Type: "application"        Subnets:           - !Ref PrivateSubnet1          - !Ref PrivateSubnet2        SecurityGroups:           - !Ref ALBSecurityGroup1        IpAddressType: "ipv4"        LoadBalancerAttributes:           -             Key: "access_logs.s3.enabled"            Value: "false"          -             Key: "idle_timeout.timeout_seconds"            Value: "60"          -             Key: "deletion_protection.enabled"            Value: "false"          -             Key: "routing.http2.enabled"            Value: "true"          -             Key: "routing.http.drop_invalid_header_fields.enabled"            Value: "false"Test1TargetGroup:    Type: "AWS::ElasticLoadBalancingV2::TargetGroup"    Properties:        HealthCheckIntervalSeconds: 30        HealthCheckPath: "/"        Port: 80        Protocol: "TCP"        HealthCheckPort: "traffic-port"        HealthCheckProtocol: "HTTP"        HealthCheckTimeoutSeconds: 5        UnhealthyThresholdCount: 2        TargetType: "alb"        Matcher:             HttpCode: "200"        HealthyThresholdCount: 5        VpcId: !Ref VPC        Name: "target-group-gatling"        HealthCheckEnabled: true        Targets:          - Id: !Ref ApplicationLoadBalancer            Port: 80HTTPListener:    Type: "AWS::ElasticLoadBalancingV2::Listener"    Properties:        LoadBalancerArn: !Ref ApplicationLoadBalancer        Port: 80        Protocol: "HTTP"        DefaultActions:           -             Type: "forward"            ForwardConfig:              TargetGroups:                - TargetGroupArn: !Ref Test1TargetGroupNetworkLoadBalancer:  Type: AWS::ElasticLoadBalancingV2::LoadBalancer  Properties:    Name: "gatling-network-lb"    Scheme: internal    Subnets:      - !Ref PrivateSubnet1    Type: networkNetworkLoadBalancerListener:  Type: AWS::ElasticLoadBalancingV2::Listener  Properties:    DefaultActions:      - Type: forward        TargetGroupArn: !Ref Test1TargetGroup    LoadBalancerArn: !Ref NetworkLoadBalancer    Port: 80    Protocol: TCPOutputs:ALB:Description: The created loadbalancerValue: !Ref ApplicationLoadBalancerTargetGroup1:    Description: The created TargetGroup 1    Value: !Ref Test1TargetGroupLoadBalancerSecurityGroup:    Description: the securty group for the ALB    Value: !Ref ALBSecurityGroup1FollowComment"

Answer: "0There seems to be a problem with the ALB target group "Test1TargetGroup".ALB target groups cannot specify alb in the target type.Also, I think we need to create separate target groups for ALB and NLB since the same target group is used in NLB.Change the target type of the ALB target group to "instance" or "ip" depending on your environment.ApplicationLoadBalancer:    Type: "AWS::ElasticLoadBalancingV2::LoadBalancer"    Properties:        Name: "gatling-lb"        Scheme: "internal"        Type: "application"        Subnets:           - !Ref PrivateSubnet1          - !Ref PrivateSubnet2        SecurityGroups:           - !Ref ALBSecurityGroup1        IpAddressType: "ipv4"        LoadBalancerAttributes:           -             Key: "access_logs.s3.enabled"            Value: "false"          -             Key: "idle_timeout.timeout_seconds"            Value: "60"          -             Key: "deletion_protection.enabled"            Value: "false"          -             Key: "routing.http2.enabled"            Value: "true"          -             Key: "routing.http.drop_invalid_header_fields.enabled"            Value: "false"Test1TargetGroup:    Type: "AWS::ElasticLoadBalancingV2::TargetGroup"    Properties:        HealthCheckIntervalSeconds: 30        HealthCheckPath: "/"        Port: 80        Protocol: "HTTP"        HealthCheckPort: "traffic-port"        HealthCheckProtocol: "HTTP"        HealthCheckTimeoutSeconds: 5        UnhealthyThresholdCount: 2        TargetType: "instance"        Matcher:             HttpCode: "200"        HealthyThresholdCount: 5        VpcId: !Ref VPC        Name: "target-group-gatling"        HealthCheckEnabled: true        Targets:          - Id: !Ref Ec2            Port: 80HTTPListener:    Type: "AWS::ElasticLoadBalancingV2::Listener"    Properties:        LoadBalancerArn: !Ref ApplicationLoadBalancer        Port: 80        Protocol: "HTTP"        DefaultActions:           -             Type: "forward"            ForwardConfig:              TargetGroups:                - TargetGroupArn: !Ref Test1TargetGroupNetworkLoadBalancer:  Type: AWS::ElasticLoadBalancingV2::LoadBalancer  Properties:    Name: "gatling-network-lb"    Scheme: internal    Subnets:      - !Ref PrivateSubnet1    Type: networkNLBTargetGroup:  Type: AWS::ElasticLoadBalancingV2::TargetGroup  Properties:    HealthCheckEnabled: true    HealthCheckIntervalSeconds: 30    HealthCheckPath: "/"    HealthCheckPort: traffic-port    HealthCheckProtocol: HTTP    HealthyThresholdCount: 5    IpAddressType: ipv4    Name: "nlb-tg"    Port: 80    Protocol: TCP    Targets:      - Id: !Ref ApplicationLoadBalancer        Port: 80    TargetType: alb    UnhealthyThresholdCount: 2    VpcId: !Ref VPCNetworkLoadBalancerListener:  Type: AWS::ElasticLoadBalancingV2::Listener  Properties:    DefaultActions:      - Type: forward        TargetGroupArn: !Ref Test1TargetGroup    LoadBalancerArn: !Ref NetworkLoadBalancer    Port: 80    Protocol: TCPCommentShareEXPERTRiku_Kobayashianswered 20 days agorePost-User-3388864 19 days agoThanks for your reply. I have tried with different target groups for ALB and NLB as you suggested but still facing the same error while creation of NLB target group.ShareRiku_Kobayashi EXPERT19 days agoSorry, there was an error in the CloudFormation template I presented.Change "TargetGroupArn" in the NLB listener from "!Ref Test1TargetGroup" to "!Ref NLBTargetGroup".NetworkLoadBalancerListener:  Type: AWS::ElasticLoadBalancingV2::Listener  Properties:    DefaultActions:      - Type: forward        TargetGroupArn: !Ref NLBTargetGroup    LoadBalancerArn: !Ref NetworkLoadBalancer    Port: 80    Protocol: TCPShare"


Question: Flexmatch - Filling a session to full in backfill whilst in Standalone mode

"Hi,The documentation for backfill implies that it is useful for starting sessions with less than idea number of players and then ramping up to more players as the session goes on. It's unclear how this is accomplished when using Flexmatch in Standalone mode at the moment.Suppose a situation where I have three tickets in the pool. The ruleset specifies that a match's team (for the sake of argument we'll say there is only one team here) can have between five and ten players.Ticket A has 3 players.Tickets B and C have 2 players.The expected outcome is that A, B and C can all fit into a match. Given the ruleset, it's not unexpected that only A and B make it in on the regular matchmaking process, leaving C out.If I submit this match back into the pool as a backfill, my expectation is that C then makes it in, as that would put the match count to 7, which is within the range.However, what I've observed in test is that C never gets in. It seems like, because the session is valid (5-10 players, five are in), Flexmatch never considers adding C to it.I'm wondering if this is a limitation of Flexmatch in Standalone mode?Thanks,HannahFollowComment"

Answer: "0Accepted AnswerIssue resolved offline :)For future reference to others: if you are running into similar issue, please check to make sure that you are using a new ticket ID for backfill, rather than re-using the old ID that formed the partial match.CommentSharerePost-User-7108006answered a year ago0Yup, marked as the solution - the standalone backfill process works basically like you're making new tickets, and every single ticket ID in the entire process must be novel.CommentSharerePost-User-7765631answered a year ago"


Question: Does DeviceFarm has local files that have data to be used for webtesting ?

"I want to know if there is data on DeviceFarm local files that could be used for web testing. If so, how can I access this data or log the path of the local files into the terminal. If not, is there's a way that I can use to upload files into the website during testing other than using S3 Bucket?Thank you in advance.FollowComment"

Answer: "0Hi,You can download the files you need for your testing under "C:\Users\testnode" then re-use them in your tests. A discussion can be seen here previously in the AWS forums -> https://forums.aws.amazon.com/thread.jspa?threadID=335509&tstart=0If the forums are no longer accessible here is the answer of my colleague on that post:Currently, you can save files to the folder "C:\Users\testnode"Example in Chrome:String remoteDownloadDirectory = "C:\Users\testnode"; Map<String, Object> preferences = new HashMap<String, Object>();preferences.put("download.default_directory", remoteDownloadDirectory);preferences.put("profile.default_content_settings.popups", 0); ChromeOptions option = new ChromeOptions();option.setExperimentalOption("prefs", preferences);Example in FirefoxString remoteDownloadDirectory = "C:\Users\testnode"; FirefoxOptions options = new FirefoxOptions();options.addPreference("browser.download.dir", remoteDownloadDirectory);options.addPreference("browser.download.folderList", 2); // To make sure you aren't prompted to save the file, tell firefox which mime-types to automatically downloadoptions.addPreference("browser.helperApps.neverAsk.saveToDisk", "text/plain");Please do let us know if this does not answer your query and I will check with the team.CommentShareSUPPORT ENGINEERRyan_Aanswered a year agoRag Aym a year agoHello Ryan, Thank you so much. I would like to know if there is an equivalent function in JS instead of setExperimentalOption as I'm using it along with Nightwatch for testing.ShareRag Aym a year agoI have some files on S3 Bucket and I want to download these files in the directory you mentioned above, can you give a clue on how to do soShare"


Question: how can we assign vpcid while creating a ecs service under ecs cluster through .net aws sdk?

"Hi Team,I have created a ECS TaskDefinition then I am creating a ecs cluster.Inside cluster I want to create a service through .net awssdk 2.3.55.2 classes.But I am not able to set vpcid under NetworkConfiguration or AwsVpcConfiguration class.Our code is automatically assigning very first vpcid while creating ecs service.Can you please suggest how can I assign/set vpcid which we require instead of selecting first entry from vpc list?Due to this issue my websites are not launching on containers as containers/service doesn't have correct vpcid assigned.ThanksFollowComment"

Answer: 1Accepted AnswerYou can specify a list of subnet IDs from your VPC in the  Amazon.ECS.Model.AwsVpcConfiguration object as shown in the AWS SDK doc.CommentShareSUPPORT ENGINEERVenkat Penmetsaanswered 9 months ago


Question: Workspace Cost Optimizer hourly/full month conversion

"I am considering installing the AWS Workspace optimizer stack to auto move users between full month and hourly based on their  monthly usage count.https://aws.amazon.com/solutions/implementations/cost-optimizer-for-amazon-workspaces/2 QuestionsIf a user is moved from full month back to hourly, what hourly/disconnected stop time does it use?  Does it use the original hourly setting the machine was built with or some other number of hours?  Our users often run projects overnight while disconnected from their machines.  We might set them at 6 to 12 hours for auto-disconnect but never 1 hour.I saw that the optimizer can be installed in dry run mode.  What do you have to do to move it from dry run to active mode?  Uninstall and reinstall the stack?ThanksFollowComment"

Answer:
"0Accepted AnswerBy default, auto stop time for workspaces is set to 1 hour and when the user is moved from monthly to hourly, the default auto stop time will be applied i.e. 1 hour.But it can be changed as per requirements. To set the automatic stop time, select the WorkSpace in the Amazon WorkSpaces console, choose Actions, Modify Running Mode Properties, and then set AutoStop Time (hours). [+]
Manage running Mode: https://docs.aws.amazon.com/workspaces/latest/adminguide/running-mode.htmlDry Run Mode parameter for the WCO(Workspace Cost Optimizer) CloudFormation template is by default set to 'Yes'. As outlined in the document provided below, "When you are comfortable with the recommendations provided by the solution and would like these recommendations to be automatically implemented, change the template parameter Dry Run Mode to No".[+]

Dry run mode: https://docs.aws.amazon.com/solutions/latest/cost-optimizer-for-workspaces/considerations.html#dry-run-modeYou can update the WorkSpacesCostOptimizer by:a. Open the Cloudformation console https://console.aws.amazon.com/cloudformation/b. Select the stack name allocated for your WorkSpaces Cost Optimizer > Then click 'Update'.c. Select 'Use current template' and click 'Next'.d. On the 'Specify stack details' page at 'Parameters', scroll down to 'Launch in Dry Run Mode' and change it to 'No' and Click 'Next'.e. On the 'Configure stack options' click 'Next'.f. On 'Review' page, Kindly read the 'Capabilities' section and tick the 'acknowledge'. Then click 'Update stack'.CommentShareParul_ganswered 2 months ago0Thank you, this answers both my questions.   For the default stop time, is there anything that can be edited manually in the stack  config to manually set a different than 1 hour stop time when users are moved from monthly to hourly?CommentSharerePost-User-1579460answered 2 months ago"