Question: MemoryError when creating lambda layer on cloud9

"Debug log below:ec2-user:~/environment/packaging $ aws lambda publish-layer-version --layer-name scraper  --zip-file fileb://lambda_layer.zip --compatible-runtimes python3.9 --debug2023-02-05 14:20:32,951 - MainThread - awscli.clidriver - DEBUG - CLI version: aws-cli/1.19.112 Python/2.7.18 Linux/4.14.301-224.520.amzn2.x86_64 botocore/1.20.1122023-02-05 14:20:32,952 - MainThread - awscli.clidriver - DEBUG - Arguments entered to CLI: ['lambda', 'publish-layer-version', '--layer-name', 'scraper', '--zip-file', 'fileb://lambda_layer.zip', '--compatible-runtimes', 'python3.9', '--debug']2023-02-05 14:20:32,953 - MainThread - botocore.hooks - DEBUG - Event session-initialized: calling handler <function add_scalar_parsers at 0x7fc97a14a1d0>2023-02-05 14:20:32,953 - MainThread - botocore.hooks - DEBUG - Event session-initialized: calling handler <function register_uri_param_handler at 0x7fc97b0356d0>2023-02-05 14:20:32,954 - MainThread - botocore.hooks - DEBUG - Event session-initialized: calling handler <function inject_assume_role_provider_cache at 0x7fc97b01ba50>2023-02-05 14:20:32,955 - MainThread - botocore.utils - DEBUG - IMDS ENDPOINT: http://169.254.169.254/2023-02-05 14:20:32,957 - MainThread - botocore.hooks - DEBUG - Event session-initialized: calling handler <function attach_history_handler at 0x7fc97f17e0d0>2023-02-05 14:20:32,963 - MainThread - botocore.loaders - DEBUG - Loading JSON file: /usr/lib/python2.7/site-packages/botocore/data/lambda/2015-03-31/service-2.json2023-02-05 14:20:32,989 - MainThread - botocore.hooks - DEBUG - Event building-command-table.lambda: calling handler <function add_waiters at 0x7fc97a1570d0>2023-02-05 14:20:32,997 - MainThread - botocore.loaders - DEBUG - Loading JSON file: /usr/lib/python2.7/site-packages/botocore/data/lambda/2015-03-31/waiters-2.json2023-02-05 14:20:33,000 - MainThread - awscli.clidriver - DEBUG - OrderedDict([(u'layer-name', <awscli.arguments.CLIArgument object at 0x7fc979dab8d0>), (u'description', <awscli.arguments.CLIArgument object at 0x7fc979dab850>), (u'content', <awscli.arguments.CLIArgument object at 0x7fc979dab810>), (u'compatible-runtimes', <awscli.arguments.ListArgument object at 0x7fc979dab7d0>), (u'license-info', <awscli.arguments.CLIArgument object at 0x7fc979dab9d0>)])2023-02-05 14:20:33,001 - MainThread - botocore.hooks - DEBUG - Event building-argument-table.lambda.publish-layer-version: calling handler <function add_streaming_output_arg at 0x7fc97a14e9d0>2023-02-05 14:20:33,001 - MainThread - botocore.hooks - DEBUG - Event building-argument-table.lambda.publish-layer-version: calling handler <bound method ZipFileArgumentHoister.hoist of <awscli.customizations.awslambda.ZipFileArgumentHoister object at 0x7fc97a1224d0>>2023-02-05 14:20:33,076 - MainThread - botocore.hooks - DEBUG - Event building-argument-table.lambda.publish-layer-version: calling handler <function add_cli_input_json at 0x7fc97b021f50>2023-02-05 14:20:33,077 - MainThread - botocore.hooks - DEBUG - Event building-argument-table.lambda.publish-layer-version: calling handler <function unify_paging_params at 0x7fc97a1c7e50>2023-02-05 14:20:33,088 - MainThread - botocore.loaders - DEBUG - Loading JSON file: /usr/lib/python2.7/site-packages/botocore/data/lambda/2015-03-31/paginators-1.json2023-02-05 14:20:33,089 - MainThread - botocore.hooks - DEBUG - Event building-argument-table.lambda.publish-layer-version: calling handler <function add_generate_skeleton at 0x7fc97f125150>2023-02-05 14:20:33,090 - MainThread - botocore.hooks - DEBUG - Event before-building-argument-table-parser.lambda.publish-layer-version: calling handler <bound method CliInputJSONArgument.override_required_args of <awscli.customizations.cliinputjson.CliInputJSONArgument object at 0x7fc979dab810>>2023-02-05 14:20:33,090 - MainThread - botocore.hooks - DEBUG - Event before-building-argument-table-parser.lambda.publish-layer-version: calling handler <bound method GenerateCliSkeletonArgument.override_required_args of <awscli.customizations.generatecliskeleton.GenerateCliSkeletonArgument object at 0x7fc97a077d90>>2023-02-05 14:20:33,093 - MainThread - botocore.hooks - DEBUG - Event load-cli-arg.lambda.publish-layer-version.layer-name: calling handler <awscli.paramfile.URIArgumentHandler object at 0x7fc97a007c90>2023-02-05 14:20:33,094 - MainThread - botocore.hooks - DEBUG - Event process-cli-arg.lambda.publish-layer-version: calling handler <awscli.argprocess.ParamShorthandParser object at 0x7fc97aff2bd0>2023-02-05 14:20:33,094 - MainThread - awscli.arguments - DEBUG - Unpacked value of u'scraper' for parameter "layer_name": u'scraper'2023-02-05 14:20:33,095 - MainThread - botocore.hooks - DEBUG - Event load-cli-arg.lambda.publish-layer-version.description: calling handler <awscli.paramfile.URIArgumentHandler object at 0x7fc97a007c90>2023-02-05 14:20:33,096 - MainThread - botocore.hooks - DEBUG - Event load-cli-arg.lambda.publish-layer-version.content: calling handler <awscli.paramfile.URIArgumentHandler object at 0x7fc97a007c90>2023-02-05 14:20:33,097 - MainThread - botocore.hooks - DEBUG - Event load-cli-arg.lambda.publish-layer-version.compatible-runtimes: calling handler <awscli.paramfile.URIArgumentHandler object at 0x7fc97a007c90>2023-02-05 14:20:33,098 - MainThread - botocore.hooks - DEBUG - Event process-cli-arg.lambda.publish-layer-version: calling handler <awscli.argprocess.ParamShorthandParser object at 0x7fc97aff2bd0>2023-02-05 14:20:33,098 - MainThread - awscli.arguments - DEBUG - Unpacked value of [u'python3.9'] for parameter "compatible_runtimes": [u'python3.9']2023-02-05 14:20:33,099 - MainThread - botocore.hooks - DEBUG - Event load-cli-arg.lambda.publish-layer-version.license-info: calling handler <awscli.paramfile.URIArgumentHandler object at 0x7fc97a007c90>2023-02-05 14:20:33,100 - MainThread - botocore.hooks - DEBUG - Event load-cli-arg.lambda.publish-layer-version.zip-file: calling handler <awscli.paramfile.URIArgumentHandler object at 0x7fc97a007c90>2023-02-05 14:20:33,705 - MainThread - botocore.hooks - DEBUG - Event load-cli-arg.lambda.publish-layer-version.cli-input-json: calling handler <awscli.paramfile.URIArgumentHandler object at 0x7fc97a007c90>2023-02-05 14:20:33,706 - MainThread - botocore.hooks - DEBUG - Event load-cli-arg.lambda.publish-layer-version.generate-cli-skeleton: calling handler <awscli.paramfile.URIArgumentHandler object at 0x7fc97a007c90>2023-02-05 14:20:33,707 - MainThread - botocore.hooks - DEBUG - Event calling-command.lambda.publish-layer-version: calling handler <bound method CliInputJSONArgument.add_to_call_parameters of <awscli.customizations.cliinputjson.CliInputJSONArgument object at 0x7fc979dab810>>2023-02-05 14:20:33,708 - MainThread - botocore.hooks - DEBUG - Event calling-command.lambda.publish-layer-version: calling handler <bound method GenerateCliSkeletonArgument.generate_json_skeleton of <awscli.customizations.generatecliskeleton.GenerateCliSkeletonArgument object at 0x7fc97a077d90>>2023-02-05 14:20:33,709 - MainThread - botocore.credentials - DEBUG - Looking for credentials via: env2023-02-05 14:20:33,710 - MainThread - botocore.credentials - DEBUG - Looking for credentials via: assume-role2023-02-05 14:20:33,710 - MainThread - botocore.credentials - DEBUG - Looking for credentials via: assume-role-with-web-identity2023-02-05 14:20:33,711 - MainThread - botocore.credentials - DEBUG - Looking for credentials via: sso2023-02-05 14:20:33,711 - MainThread - botocore.credentials - DEBUG - Looking for credentials via: shared-credentials-file2023-02-05 14:20:33,712 - MainThread - botocore.credentials - INFO - Found credentials in shared credentials file: ~/.aws/credentials2023-02-05 14:20:33,717 - MainThread - botocore.loaders - DEBUG - Loading JSON file: /usr/lib/python2.7/site-packages/botocore/data/endpoints.json2023-02-05 14:20:33,779 - MainThread - botocore.hooks - DEBUG - Event choose-service-name: calling handler <function handle_service_name_alias at 0x7fc97c4535d0>2023-02-05 14:20:33,784 - MainThread - botocore.hooks - DEBUG - Event creating-client-class.lambda: calling handler <function add_generate_presigned_url at 0x7fc97c9607d0>2023-02-05 14:20:33,788 - MainThread - botocore.endpoint - DEBUG - Setting lambda timeout as (60, 60)2023-02-05 14:20:33,790 - MainThread - botocore.loaders - DEBUG - Loading JSON file: /usr/lib/python2.7/site-packages/botocore/data/_retry.json2023-02-05 14:20:33,793 - MainThread - botocore.client - DEBUG - Registering retry handlers for service: lambda2023-02-05 14:20:33,795 - MainThread - botocore.hooks - DEBUG - Event before-parameter-build.lambda.PublishLayerVersion: calling handler <function generate_idempotent_uuid at 0x7fc97c455550>2023-02-05 14:20:35,042 - MainThread - awscli.clidriver - DEBUG - Exception caught in main()Traceback (most recent call last):  File "/usr/lib/python2.7/site-packages/awscli/clidriver.py", line 218, in main    return command_table[parsed_args.command](remaining, parsed_args)  File "/usr/lib/python2.7/site-packages/awscli/clidriver.py", line 362, in __call__    return command_table[parsed_args.operation](remaining, parsed_globals)  File "/usr/lib/python2.7/site-packages/awscli/clidriver.py", line 534, in __call__    call_parameters, parsed_globals)  File "/usr/lib/python2.7/site-packages/awscli/clidriver.py", line 654, in invoke    client, operation_name, parameters, parsed_globals)  File "/usr/lib/python2.7/site-packages/awscli/clidriver.py", line 666, in _make_client_call    **parameters)  File "/usr/lib/python2.7/site-packages/botocore/client.py", line 386, in _api_call    return self._make_api_call(operation_name, kwargs)  File "/usr/lib/python2.7/site-packages/botocore/client.py", line 678, in _make_api_call    api_params, operation_model, context=request_context)  File "/usr/lib/python2.7/site-packages/botocore/client.py", line 726, in _convert_to_request_dict    api_params, operation_model)  File "/usr/lib/python2.7/site-packages/botocore/validate.py", line 321, in serialize_to_request    operation_model)  File "/usr/lib/python2.7/site-packages/botocore/serialize.py", line 471, in serialize_to_request    serialized, shape, shape_members)  File "/usr/lib/python2.7/site-packages/botocore/serialize.py", line 523, in _serialize_payload    partitioned['body_kwargs'], shape)  File "/usr/lib/python2.7/site-packages/botocore/serialize.py", line 602, in _serialize_body_params    return json.dumps(serialized_body).encode(self.DEFAULT_ENCODING)MemoryError2023-02-05 14:20:35,067 - MainThread - awscli.clidriver - DEBUG - Exiting with rc 255The zip file size is ~74MB, would this be an issue?FollowComment"


Question: Re-sharing shared VPC after adding new account

"I have a multi-account setup, with one account owning a shared VPC. This is shared to other accounts in a specific OU using RAM, a share policy etc. At the time that I created the shared VPC, the OU had some accounts already. They were able to successfully see the shared VPC.Since then, I added a new account to the OU. This account could not access the shared VPC, until I manually unshared and reshared the subnets. Is this intentional?FollowComment"


Question: Tab completion is not working for pyspark kernels in EMR studio

"When selecting a pyspark kernel for a notebook in EMR studio, tab completion and tooltips (with shift-Tab) are not working as expected. This is especially true for for attribute listing after a dot (.), for example typing in a shellimport osos.and pressing tab does not offer any suggestion. Same goes of course for spark session object, both the automatically created one and a manually created one with a SparkSession.builder.appName() call.Things are working fine with a Python3 kernel. I have tried with EMR cluster versions emr-6.6.0 and emr-6.8.0.FollowComment"


Question: Editor Module for Game Gem?

Trying to see if there's a way to make a game gem also an editor gem.Tried adding "EditorModule": true to my gem.json and adding an editor waf_file and modifying the wscript but it doesnt seem to add a <GameName>.Editor solution to the VS Solution.Follow

Answer: "0Accepted AnswerTry sticking to V3 of the Gem and remove the Modules property until the docs go live for Gem V4 :)SharerePost-User-5162062answered 6 years ago0Hello @REDACTEDUSERHave you tried running lmbr_waf configure after making the changes? Also make sure to have your code stored under an Editor folder similar to how Editor Gems do this :)SharerePost-User-5162062answered 6 years ago0Yep, multiple times. Nothing really shows up under the <GameName> folder in the solution.so none of this:<GameName>/├── <GameName>└── <GameName>.EditorSharerePost-User-8564951answered 6 years ago0I tested it out and it worked for me so it's weird that it doesn't for you.The file that I have is: myeditorgem_editor.waf_files and the file looks like this:    {"auto": {"Editor": ["Editor/Source/MyEditorGemModule.cpp","Editor/Source/alternativeaudiohelper.cpp","Editor/Source/alternativeaudiohelper.ui","Editor/Source/alternativeaudiohelper.h"]}}and my editor code is under the Editor/Source folder in my gem.SharerePost-User-5162062answered 6 years ago0Huh... i didnt have the Editor/Source setup, i have it as the Source/Editor setup... wierd.Tried your setup, didnt work...gem.json:  {"Dependencies": [<snip>],"GemFormatVersion": 4,"Uuid": "95e41eeb9802469b8f7dd874f19720d9","Name": "OpenDiva","DisplayName": "OpenDiva","LumberyardVersion": [ "==1.11.1.0" ],"Version": "0.1.0","Summary": "Open Source Hatsune Miku Project Diva","Tags": [ "Game" ],"IconPath": "preview.png","IsGameGem": true,"Modules": [{"Type": "GameModule"}],"EditorModule": true}editor.waf_files:  {"none": {"Source": []},"auto": {"Editor/Include": [],"Editor/Source": [],"Editor/Source/Components": ["Editor/Source/OpenDivaEditorSystemComponent.cpp","Editor/Source/OpenDivaEditorSystemComponent.h"]}}wscript:    def build(bld):bld.DefineGem(# General#file_list = [#'opendiva.waf_files',#steamworks build files.#this is ONLY used for the public steam builds.#OpenDiva does not depend on steamworks to function and this can be safely commented out.#'opendiva.steamworks.waf_files',#],platforms = ['win_x64', 'win_x64_vs2015', 'win_x64_vs2013','linux','darwin_x64'], #set to only compile on windows, linux, and macconfigurations = ['debug', 'profile', 'performance', 'release'], #no server compiling.use = ['AzCore', 'AzGameFramework'],includes = [ '.',bld.Path('Code/CryEngine/CryCommon'),bld.Path('Code/CryEngine/CryAction'),bld.Path('Gems/Maestro/Code/Source') #required for CryMovie interfaces/classes.#this is ONLY used for the public steam builds.#OpenDiva does not depend on steamworks to function and this can be safely commented out.#bld.Path('OpenDiva/Gem/Code/Source/Core/Steamworks/steam')],#this is ONLY used for the public steam builds.#OpenDiva does not depend on steamworks to function and this can be safely commented out.defines = [#'STEAMWORKS',],#==============================# Windows#==============================win_defines = ['WX_DISABLE', #custom define, used to bypass /WX warnings as errors.'NOMINMAX' #disable windows.h min/max definitions.],debug_win_linkflags = [ '/VERBOSE:LIB' ],#usage of openmp is to parallel process precalculations.#NOTE! NEVER EVER USE OPENMP IN A RENDER THREAD! Spikes cpu usage like crazy!win_cflags = [ '/openmp' ],win_cxxflags = [ '/openmp' ],win_lib = ['gdi32',#this is ONLY used for the public steam builds.#OpenDiva does not depend on steamworks to function and this can be safely commented out.#'steam_api64'],win_libpath = [#this is ONLY used for the public steam builds.#OpenDiva does not depend on steamworks to function and this can be safely commented out.#bld.Path('Code/OpenDiva/Game/Core/Steamworks/redistributable_bin/win64')],win_features = ['crcfix'],#==============================# Linux#==============================#usage of openmp is to parallel process precalculations.#NOTE! NEVER EVER USE OPENMP IN A RENDER THREAD! Spikes cpu usage like crazy!linux_cflags = [ '-fopenmp' ],linux_cxxflags = [ '-fopenmp' ],linux_lib = [#this is ONLY used for the public steam builds.#OpenDiva does not depend on steamworks to function and this can be safely commented out.#'steam_api',],linux_libpath = [#bld.Path('Code/OpenDiva/Game/Core/Steamworks/redistributable_bin'),],#==============================# Darwin#==============================darwin_file_list = ['opendiva_mac.waf_files'],#usage of openmp is to parallel process precalculations.#NOTE! NEVER EVER USE OPENMP IN A RENDER THREAD! Spikes cpu usage like crazy!darwin_cflags = [ '-fopenmp' ],darwin_cxxflags = [ '-fopenmp' ],darwin_lib = [#this is ONLY used for the public steam builds.#OpenDiva does not depend on steamworks to function and this can be safely commented out.#'steam_api',],darwin_libpath = [#bld.Path('Code/OpenDiva/Game/Core/Steamworks/redistributable_bin'),],# Platform Specific#android_use = ['AndroidLauncher'],# ==============================# iOS# 'ios_output_file_name' must match both# 'executable_name' in 'project.json' and# 'Executable file' in '../Resources/IOSLauncher/Info.plist'# ==============================#ios_file_list = ['opendiva_ios.waf_files'],# ==============================# AppleTV# 'appletv_output_file_name' must match both# 'executable_name' in 'project.json' and# 'Executable file' in '../Resources/AppleTVLauncher/Info.plist'# ==============================#appletv_file_list = ['opendiva_appletv.waf_files'],# Testingtest_all_file_list = ['opendiva_tests.waf_files'],# Add additional custom build options here# editoreditor = dict(features = ['qt5'],use = ['AzToolsFramework','AzQtComponents','EditorCore','EditorUI_QT','EditorCommon'],includes = [bld.Path('Code/CryEngine/CryCommon'),bld.Path('Code/Sandbox'),bld.Path('Code/Sandbox/Editor'),bld.Path('Code/Sandbox/Editor/Include'),bld.Path('Code/Sandbox/Plugins/EditorCommon')],uselib =['QT5CORE','QT5GUI','QT5WIDGETS'],defines = ['OPENDIVA_EDITOR']),)SharerePost-User-8564951answered 6 years ago0oh! i think i found the v4 definition!    {"GemFormatVersion": 4,"Uuid": "f910686b6725452fbfc4671f95f733c6","Name": "Camera","Version": "0.1.0","DisplayName": "Camera","Tags": ["Camera"],"Summary": "The Camera Gem includes a basic camera component that defines a frustum for runtime rendering.","IconPath": "preview.png","Modules": [{"Type": "GameModule"},{"Name": "Editor","Type": "EditorModule","Extends": "GameModule"}]}That might be it!SharerePost-User-8564951answered 6 years ago0That worked!SharerePost-User-8564951answered 6 years ago"


Question: AWS Transcribe Streaming Dutch Support

As noted on https://docs.aws.amazon.com/transcribe/latest/dg/supported-languages.html there is currently no support in AWS Transcribe for Dutch for streaming. Is there a potential timeline that we can take into account for our project?FollowComment

Answer: "0Thank you for providing your valuable feedback on the service. I have raised a feature request with the service team on your behalf.Unfortunately, I am not able to provide a timeline on if/when this feature may get released as this will depend on the service team. I request you to keep an eye on our What's New and Blog pages for any new feature announcements.CommentShareSUPPORT ENGINEERRyan_Aanswered a year ago"


Question: "Protect AWS Appsync APIs end point from public internet, restrict it to be accessible from Service deployed inside vpc"

"I have AWS Appsync graph QL end point, which is intended to be a backend service only. It is not meant to be exposed to the public internet. How to protect the end point to be used by another back end service deployed in vpc and external facing AWs Appsync instance ? Any reference articles or leads will be super helpful. Thanks in advance.FollowComment"

Answer: "1Accepted AnswerFor your particular use case, the most straightforward option would be to use AWS_IAM authorization:create a role, allowing appsync:GraphQL action on the GraphQL API resource (or subset of operations)associate backend service with that role, so that it can sign all GraphQL requests with SigV4configure GraphQL API to use AWS_IAM securityThis will require all clients to attach a valid SigV4 signature to all client requests.If you want to lockdown API endpoint access even further and reject connection requests from unauthorized ip ranges, you might want to consider adding WAF integration and building WAF rules to allow connections from a predefined ip address range only.CommentShareDmitry_Ganswered a year ago1Great question!Check out https://docs.aws.amazon.com/appsync/latest/devguide/security-authz.html on how to secure AWS AppSync.Specifically, you can configure 5 different types of authorization (API Key, AWS Lambda, AWS IAM, OpenID Connect, or Amazon Cognito User Pools).You could also use WAF to protect your AppSync API: https://docs.aws.amazon.com/appsync/latest/devguide/WAF-Integration.htmlMore information about AppSync Security here: https://docs.aws.amazon.com/appsync/latest/devguide/security.htmlCommentSharejsoncanswered a year ago"


Question: AWS Site-to-site VPN Static routing and Virtual Private Gateway failover

"Hi,I'm new in the VPN subject and In our company we provisioned a site to site VPN using static routing and VIrtual Private Gateway with a remote network, we followed the documentation and configured everything, the vpn connection's tunnels went up on both ends, AWS randomly choose one tunnel (let's say tunnel1) to send traffic as it says in the doc, in short  everything was working. But after some time, the tunnel1 went down, and we verified that failover for tunnel2 didn't worked, traffic to the remote network wasn't directed to the tunnel2, even in CloudWatch metrics we verified that DataIn and DataOut stopped registering. In the docs AWS says: "Each Site-to-Site VPN connection has two tunnels, with each tunnel using a unique public IP address. It is important to configure both tunnels for redundancy. When one tunnel becomes unavailable (for example, down for maintenance), network traffic is automatically routed to the available tunnel for that specific Site-to-Site VPN connection."But in some articles in the internet it says that we need to use BGP for automatic failover, do failover works for VPN using static routing or we need to configure some tool\feature to help AWS to identify that it needs to failover to the second tunnel, or it just works with BGP?Thanks,Regards.FollowComment"

Answer: "2Accepted AnswerSee this statement from the VPN documentation If you are looking for seamless failover/failback suggest looking at BGP based VPN tunnels.We recommend that you use BGP-capable devices, when available, because the BGP protocol offers robust liveness detection checks that can assist failover to the second VPN tunnel if the first tunnel goes down. Devices that don't support BGP may also perform health checks to assist failover to the second tunnel when needed.CommentShareEXPERTTushar_Janswered 4 months agoEXPERTBrettski-AWSreviewed 4 months agoJonathan 4 months agoI will look into that, thanks!Share"


Question: Cannot delete AD connector

"We have an AD connector that cannot be deleted.We deleted the test AD instance run on EC2 which we have and then when we tried to delete the connector its failedIt says the console is still attached as an authorized application.When I try to disable the console, it says "You cannot disable the AWS Management Console because delegated users are still assigned to it. Remove all users and groups from the IAM roles below and try again."FollowComment"

Answer: "0Hello Team,We block the deletion of the AD Connector when there are still applications linked to it as a safety precaution to prevent customers from unintentionally breaking an AWS application that is still using the directory. However, that can sometimes be more frustrating than helpful. Refer to [1]If still, you are unable to delete after deleting the directory service, please reach out to AWS Support by opening a Support case.Also,Link -- https://aws.amazon.com/premiumsupport/knowledge-center/directory-troubleshoot-deleting/ -- [1]CommentShareSUPPORT ENGINEERAWS-User-Chiraganswered 8 months agorePost-User-8041129 8 months agoHi I dont have any workspaces assigned to it. Only thing is the management console enable to it and I am unable to delete it due to below error:You cannot disable the AWS Management Console because delegated users are still assigned to it. Remove all users and groups from the IAM roles below and try again.Please note that I dont have any active directory system available now and its terminated.Share"


Question: Root Access Needed.

"I Have cPanel license & my WHM not working i have contacted cpanel support they told me.If the server is licensed, run the /usr/local/cpanel/cpkeyclt command as the root user.I am unable to login as root kindly help me.FollowComment"

Answer: "0Hello,If this cPanel/WHM is hosted on an EC2 instance on your account, you can simply SSH to the instance and execute the command needed.There are a few ways to SSH into the instance, instructions on how to use each way are detailed here: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/AccessingInstances.htmlCommentShareEXPERTChris_Ganswered 10 months agoNujan 10 months agoNo! It says permission denied and when I try to use sudo it says bash- sudo command not found. All these issues started yesterday evening out of the blue. Can you please assist me with this? If I check my /bin folder there's no packages like sudo, yum and other.ShareChris_G EXPERT10 months ago@Nujan, which Linux operating system are you using?ShareNujan 10 months agoAt first it was centos and then after installing WHM I've upgraded to cloudlinux OS.Share"


Question: Need to to replace "Thank you for calling. Your call in very important..."

"I have what I think/hope is a simple approach to creating voicemail(vm) functionality in Connect.My main contact flow is simply:Entry pointSet call recording behavior (Enable: Customer)Play prompt ("Please leave your voicemail.")Set working queue (Voicemail Queue)Transfer to queueDisconnect / hang-upThe queue has a one single agent set to Available. That agent is set-up with a desk phone and it's number is the 1-800 number of my contact center.  After call work(ACW) timeout is 1.The good news is that the customer's vm is recorded and saved in the expected S3 bucket.The issue is that I'd like to insert a silent wav file instead of the default "Thank you for calling. Your call in very important to us.  It will be answered in the order it was received." audio recording.At a high level, I just want to play an audio prompt to leave vm and transfer a call to the only available agent and have no other sounds emitted to the caller.  By recording the customer only part of the conversation I would capture the customer's vm.Thank you for any guidance.PS: My "Please leave your voicemail" is also heard a second time.PS2: I've seen the suggestions to use a third party vm service. This is a last resort at this stage of our evaluation.Edited by: JayDee on Apr 4, 2019 10:20 AMEdited by: JayDee on Apr 4, 2019 10:24 AMFollowComment"

Answer: 0This helped: https://kzn.io/blog/2018/06/21/serverless-voicemail-with-amazon-connect-1/CommentShareJayDeeanswered 4 years ago0VoiceFoundry offer a voicemail service:https://voicefoundry.com/voicemail-for-amazon-connect/CommentShareDanBloyanswered 4 years ago0There are many ways this problem can be solved.  I'm concerned with the "virtual agent" approach because it could err and leave a potential valuable customer interaction underserved.My team has developed a solution that does not require any custom development on your end.  It provides a full featured voicemail tool that can be customized to your needs.Have a look at https://amazonconnectvoicemail.com for more information and please do reach out with ANY questions you might have!CommentSharejbyarsanswered 3 years ago


Question: .NET 5 Server App on GameLift?

"Hey dear community,I'm new to GameLift, and I tested Unity server build both on Windows and Linux, they were all properly activated on GameLift.But can I write my own server code by using C#(.NET) (along with GameLift SDK but without Unity, ), and upload the executable console app to GameLift? If yes, is .NET 5 supported? Or do I have to use specific .NET Framwork / Core version?I read this .NET Core&GameLift topic , it seems currently it's not possible to write GameLift c# code and run it without unity.I tried my .NET 5 server app on GameLift and the result :SERVER_PROCESS_CRASHEDWin : Server process exited without calling ProcessEnding(), exitCode(134),Linux : Server process exited without calling ProcessEnding(), exitCode(-532462766)Anyone can help? If it won't work, I hope I can get the answer and just stop trying. Thanks.FollowComment"

Answer: "0Accepted AnswerThe GameLift C# Server SDK does not officially support creating C# server builds outside of Unity. However, the SDK is essentially a utility for sending websocket messages to the websocket server on the EC2 instance, so if push comes to shove you could write your own C# .Net5 server SDK. Folks have done it in the past for other languages, see:Rust: https://github.com/ZaMaZaN4iK/aws-gamelift-server-sdk-rs/tree/main/srcGo: https://github.com/neguse/gomeliftOther community projects: https://github.com/favoyang/awesome-gameliftHowever, before diving into that, it might prudent to find out why your server process crashed. First, it's best to test out your server process with GameLift Local first. Testing locally will save you the trouble of having to wait for fleet creation. See: https://docs.aws.amazon.com/gamelift/latest/developerguide/integration-testing-local.htmlNext, it might be worth remoting to the fleet instance and run the server process directly on the instance to see if you see any helpful error message. Make sure you create your fleet with RDP port (3389) opened. See: https://docs.aws.amazon.com/gamelift/latest/developerguide/fleets-remote-access.htmlCommentSharerePost-User-7108006answered 2 years ago0Thanks for your answer! I will try to dig further with the info you provide!CommentSharerePost-User-1953217answered 2 years ago"


Question: Sagemaker Hyperparameter Tuning

"Hi Everyone,Context on the problem:I am training an SK Learn pipeline model with custom pre-processing and an XGBRegressor model under an SKLearn Estimator image in a custom bring my own training script framework.I have a training and validation split of my data that I am able to load in my training script, train the pipeline model, make predictions on training and validation sets, and also able to log the evaluation metrics like train:mae, val:mae etc...I am also able to launch a hyper-parameter tuning job with my custom metric-definitions and the job finishes successfully. The objective I choose to minimize is validaiton:mae with "Bayesian" optimization strategy.Questions:Why does each training job associated with the tuning job have a 'minimum', 'maximum', 'average', 'std-dev' of the metrics? I do not perform any cross-validation in my custom training script, so where does sagemaker get these numbers?Why does the validation error that the metrics table log the minimum value? and not the average value? How does this not lead to overfitting if we drive the tuning objective to minimum while selecting the minimum error split from internal cross-validation.Please help me understand what's going on in sagemaker hyper-parameter tuning metric logs and objective tuning. I understand bayesian optimization and sagemaker seems to be doing the optimization correctly, but it seems that sagemaker is not using the correct numbers to optimize.![![FollowComment"

Answer: "0SageMaker training job metrics are time series: Your job can log multiple values of e.g. train:mae over time as it trains, which is useful for long-running training jobs to continuously report metrics for monitoring (and maybe trigger early stopping).This is why metrics are generally described by summary statistics. You can usually see these time series charts in Run > Charts within Studio, or from the training job details page in the AWS Console... But if your training job is very short, the graphs might not be that interesting: I believe they aggregate data points to a 1min or 5min granularity by default.So which is the important statistic to look at? Usually 'Final value', but it depends what your script is doing.For example if you're training a model with checkpointing and automatic stopping, it could be that accuracy gets worse for a few iterations before the script detects the issue, stops training, and re-loads the best-performing model from checkpoint? In that case, either you could make sure your script re-logs the final accuracy score so that "Final" is consistent with the final model... Or could just refer to "Max".Alternatively if you have a script that does cross-validation and you wanted the summary statistics to accurately reflect this (e.g. standard deviation is the deviation of accuracy between different folds, average is the average over folds, etc) - then you would want to make sure your script logged the metrics exactly once for each validation fold, without any repetitions during the training process. Nice for cross-validation statistics, but those metrics then wouldn't give you continuous insight into the model as it trained (if that's something you want).I couldn't find either 135.2... or 186.2... in your Runs table's OptimizationMetric column, so I think your second screenshot may be omitting the record for the run shown in the first screenshot? But the Final value 135.2... is the one I'd usually expect to see listed in the summary value.CommentShareEXPERTAlex_Tanswered 13 days ago"


Question: Unable to terminate my VPC and my Network Firewall and Endpoints

"Greetings Seniors!I am a student and I opened a free tier account for school projects. I have tried  everything possible to close my VPC but I always receive error "network interfaces are in use" I am unable to delete the network interfaces as well. I've deleted it's dependencies (Ec2, subnets, elastic IP, internet gateway, DHCP sets,...)Kindly assist me because I keep on receiving huge bills for a service I never used.FollowComment"

Answer: "1Accepted AnswerHi, I reproduced your problem as follows.I created a Network Firewall instance in a single AZ.  I then went to VPC / Endpoints, and noted there was a new endpoint there of type GatewayLoadBalancer.  Looking at its Tags, it has AWSNetworkFirewallManaged=true.I deleted the above Tag, then tried to delete the Network Firewall - it failed with "Cannot DeleteFirewall because at least one of the firewall endpoints are missing the AWSNetworkFirewallManaged:true tag:".I then re-created the AWSNetworkFirewallManaged=true Tag and was able to delete the Network Firewall.So I'd suggest this Tag was removed from your Endpoint at some point, and putting it back will solve the problem.CommentShareEXPERTskinsmananswered 4 months agorePost-User-4193731 4 months agoYou're the best !Problem solved with this answer.By adding a tag to the endpoint : AWSNetworkFirewallManaged=true,kindly note "true" not "True or TRUE",Much thanksShare0Hi, VPC doesn't actually cost anything, so you must be getting charged for something else, maybe like a NAT Gateway for example which does use network interfaces.  Have a look in Cost Explorer to see what's accruing charges.As for network interfaces, the EC2 console's left-hand menu has a "network interfaces" link which takes you to a page that will show all network interfaces in use in your VPC.CommentShareEXPERTskinsmananswered 4 months agorePost-User-4193731 4 months agoThank you very much for your time. Highly appreciated. This is the service that is billed "Aws network firewall operation" the issue is that I am unable to delete it since it's default NACL and I am unable to detach the subnets as well. It says "cannot delete Firewall because at least o'e of the firewall endpoints are missing the AwsnetworkFirewallManaged:truetag:vpc...."Shareskinsman EXPERT4 months agoSo it looks like you have an AWS Network Firewall instance active, and that's what you're being charged for.  You say you're unable to delte it "since it's default NACL".  Not sure what you mean there; VPC NACLs aren't related to Network Firewall.  There's no need for you to delete NACLs or subnets as they don't cost anything.  You just need to delete your Network Firewall instance.  If deleting that is causing an error, please describe how you're going about deleting it and cut-and-paste the exact error message here (don't type it in, as any mistakes make it hard to offer advice).Share0Reasons why the VPC deletion fails include network interfaces being detached. Could you check, detach and then try deleting? Also, check for peering connections and security groups.CommentShareGAanswered 4 months ago0Hello! @skinsman,Thanks for your feedback.This is how I try to delete the firewall1- Under Network Firewall - click Firewalls - select PublicAccessFirewall - select delete - in the dialog box that appears type "delete" in the field to confirm. and this is the  error box that is being displayed :I 've attached a screenshot of the error displayed when deleting ()"network firewall"The second image is the error when I try to delete the endpointsThanksCommentSharerePost-User-4193731answered 4 months ago"


Question: Send a trigger to Lambda function when I upload to an S3 Bucket folder

"how do I send a trigger to the Lambda function when uploading to an S3 Bucket folder, since I already went to Properties and made a s3 notification to activate the lambda when uploading but it still doesn't work.My code isimport jsonfrom urllib.parse import unquote_plusimport boto3import uuidtranscribe = boto3.client("transcribe")def lambda_handler(event, context):file_obj = event["Records"][0]domenicoteste1 = str(file_obj["s3"]["bucket"]["name"])for upload in domenicoteste1:    # TODO: write code... event:        file_obj = event["Records"][0]    domenicoteste1 = str(file_obj["s3"]["bucket"]["name"])    teste = unquote_plus(str(file_obj["s3"]["object"]["key"]))    s3_uri = create_uri(domenicoteste1, teste)    job_name = context.aws_request_id    transcribe.start_transcription_job(        TranscriptionJobName= job_name,        Media={"MediaFileUri": "s3://domenicoteste1/teste.mp4"},        MediaFormat="mp4" or "mp3",        LanguageCode="pt-BR",        OutputBucketName="outputeteste1",        Settings={            # 'VocabularyName': 'string',           "ShowSpeakerLabels": True,            "MaxSpeakerLabels": 2,            "ChannelIdentification": False,        },    )return {"statusCode": 200, "body": json.dumps("Transcription job is created!")}def create_uri(domenicoteste1, teste):return "s3://domenicoteste1/teste.mp4"FollowComment"

Answer: "0Have you made sure that the lambda resource policy allows the S3 to invoke the lambda. Please take a look at this document - https://docs.aws.amazon.com/lambda/latest/dg/with-s3.htmlCommentShareEXPERTIndranil Banerjee AWSanswered 8 months agoDomenico 8 months agoGood morning, Indranil Banerjee , thank you very much for answering, but I took a look at the documentation and saw the Event Bridge still doesn't work I put it there in the console as s3 Creat trigger, so that every time I create the event it works, but when i upload it does not go. Is there a s3-specific custom Json function that I can put so that every s3 upload runs Lambda?ShareIndranil Banerjee AWS EXPERT8 months agoHi Domenico - My link does not talk about Eventbridge at all. It is a simple S3 event source for lambda. There is a tutorial as well that shows you how to configure this - https://docs.aws.amazon.com/lambda/latest/dg/with-s3-example.htmlShare0Hi,Have a look at the following blog post https://aws.amazon.com/blogs/compute/using-dynamic-amazon-s3-event-handling-with-amazon-eventbridge/ that describes how to trigger a lambda function when a object is uploaded to a S3 bucket.The following github repository https://github.com/geoffstratton/aws-lambda-transcribe-audio has a lambda function for audio transcription.CommentShareNuno_Qanswered 8 months agoDomenico 8 months agoGood morning, Nuno_Q, thank you very much for answering, but I took a look at the documentation and saw the Event Bridge still doesn't work I put it there in the console as s3 Creat trigger, so that every time I create the event it works, but when I upload it, it won't, in respect to the code, when I run it, it's giving an empty s3 bucket, and I have objects there, look at the new code:import jsonfrom urllib.parse import unquote_plusimport boto3import uuidimport osdef lambda_handler(event, context):record = event['Records'][0]domenicoteste1 = record['s3']['bucket']['name']s3object = record['s3']['object']['key']file_obj = event["Records"][0]object = unquote_plus(str(file_obj["s3"]["object"]["key"]))s3Path = "s3://" + domenicoteste1 + "/" + s3objectjobName = domenicoteste1 + '-' + str(uuid.uuid4())client = boto3.client('transcribe')response = client.start_transcription_job(    TranscriptionJobName=jobName,    LanguageCode='pt-BR',    MediaFormat='mp3',    Media={        'MediaFileUri': s3Path    },    OutputBucketName= "outputeteste1")return {    'TranscriptionJobName': response['TranscriptionJob']['TranscriptionJobName']}o ERRO é: "errorMessage": "An error occurred (BadRequestException) when calling the StartTranscriptionJob operation: The URI that you provided doesn't point to an S3 object. Make sure that the object exists and try your reShare0Hi,Did you try adding a trigger from Lambda function configuration console?CommentShareAWS-User-8445200answered 8 months ago0Hi, yes i did itCommentShareDomenicoanswered 8 months ago"


Question: DOMAIN NOT WORKING AFTER TRANSFER TO AWS ;))

Hi there! Can anyone tell me why the browser still wants to get files of my website from my previous service provider and not from the AWS bucket? where can I configure that? BIG THANKS!!!FollowComment

Answer: "1Can you provide more details on what is required? e.g. Where is the new website located. Do you just require your users to download files from S3 etc.CommentShareronald_lanswered 4 months agoHH 4 months agoHi! My websites index file and other files are  in S3 but when I open the browser it takes the index file from my previous webhosting company. I know it because it worked well before I deleted the files from my previous webhosting company.  Then website stopped working.Shareronald_l 4 months agoI assume you are trying to change your website hosting to use Amazon S3, and you will want to transfer the domain registration to Amazon Route 53. You may want to refers to the documentation at:https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/domain-transfer-to-route-53.htmlhttps://docs.aws.amazon.com/AmazonS3/latest/userguide/website-hosting-custom-domain-walkthrough.html#root-domain-walkthrough-add-record-to-hostedzoneShare"


Question: IoT security: Using single certification across all devices?

"In IoT Core, it is strongly suggested to use a uniq certificate per device. Is using same cert across many devices less secure? Or simply loosing functionalities like Shadow, etc?FollowComment"

Answer: "0Hi,there are several reasons why to use a unique certificate per device. When you deploy for example 1 million devices and your certificate is being compromised you must exchange the certificate on all devices. When you deactivate the certificate all devices which share a certificate are affected.If you use one unique device per certificate you only need to exchange the certificate on one device. You can also deactivate such a certificate without impacting other devices.When you attach IoT policies to a certificate, all devices will share the same permissions when they share a certificate. This can prevent you from using IoT policies that conform to the least privilege principle.The shadow service is unrelated to the certificate you use. Your device logic defines which shadow name in classic or named shadow you are going to use.KR,PhilippCommentSharePhilipp Sanswered a year ago"


Question: Unable to update Amazon Linux instance via yum

"I have an instance running Amazon Linux v2 (2017.12).If I try to update via yum, I get the following-Could not retrieve mirrorlist http://amazonlinux.us-east-2.amazonaws.com/2017.12/core/$pointrelease/x86_64/mirror.list error was14: HTTP Error 403 - ForbiddenThe instance can access other hosts via http.If I try something as simple ascurl -I 'http://amazonlinux.us-east-2.amazonaws.com/'I still get a 403 Forbidden response.I tried running yum clean all and deleted everything in /var/cache/yum, but that had no effect.Edited by: brunnock2 on Apr 12, 2019 7:49 AMEdited by: brunnock2 on Apr 12, 2019 7:51 AMFollowComment"

Answer: "0Fixed it.Edit /etc/yum.repos.d/amzn2-core.repo .Replacemirrorlist=http://amazonlinux.$awsregion.$awsdomain/$releasever/$product/$pointrelease/$basearch/mirror.listwithmirrorlist=http://amazonlinux.$awsregion.$awsdomain/$releasever/$product/latest/$basearch/mirror.listEdited by: brunnock2 on Apr 13, 2019 4:21 AMCommentSharebrunnock2answered 4 years ago"


Question: AWS Free Tier Alerts Couldn't Load.

"Hello.I created a free tier profile to practice from some courses.Even if more than 24 hours have passed since the account was created, on the Billing Preferences i still get: "Your AWS Free Tier usage alerts couldn't load at this time.Retry".I would need these alerts to assure that I'm not gonna be charged.What could be done in this situation?Thank you.BR.FollowComment"

Answer: 0Update: Now it's activated. I'm not sure if needed to pass ~ 48h or to send an email to the support dept.CommentSharemarius_awsssanswered a month ago


Question: Is Cloudfront works only in  Virginia region (us-east-1)

"Hi,When I am creating cloudfront distribution it ask for AWS Certificate , but only in region Virginia, why only in this region?from what I understand cloudfront is global and doesn't have specific region.Thank youFollowComment"

Answer: "1Cloud front is a global CDN but it is managed from the global region of us-east-1.In order to have a certificate assigned to cloudfront, then you will need to create one in acm also in the same region us-east-1The same applies to managing waf for cf. it’s in the global region.It’s similar for IAM. Its global region is the same.If this helps please be sure to accept the answer to help others and me.CommentShareGary Mcleananswered 2 months ago0Yes CloudFront is global but it considers us-east-1 as global region. The ACM certificates must be imported from here and the same is distributed across all geographic regions.https://docs.aws.amazon.com/acm/latest/userguide/acm-regions.htmlCommentShareAritro Senanswered 2 months ago"


Question: unable to SSH into any instance in the region eu-central-1

"Hi,I have created a new vpc from the wizard, in the eu-central-1 region, public with private subnets, then created a new amazon linux ec2 instance in the public subnet with a security group allowing ssh port 22 from my IP.I am unable to ssh into the instance, the error is always "connection timed out".I have verified and tried all possible solutions with no success.The instance has a public IP, it is in the public subnet, the security group allows port 22 from my IP, the subnet has a routing table to allow traffic from the internet gateway, the igw is attached to the vpc, the ACL is associated with the subnet and allows all traffic in and out.the same also for the default vpc.Every time I repeat the steps it reproduces the issue again.Doing the same steps in another region or in another account, works successfully!followed documentation that didn't help fix it:https://aws.amazon.com/premiumsupport/knowledge-center/ec2-linux-ssh-troubleshooting/https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/TroubleshootingInstancesConnecting.htmltried to telnet to the public IP with port 22, the result is also a time out.also tried from another local network, another local internet connection same thing.note that I am an advanced AWS user.Thank you for your help!Edited by: kitcontra on Feb 23, 2019 11:50 AMEdited by: kitcontra on Feb 23, 2019 11:53 AMFollowComment"

Answer: "0Accepted AnswerHello,I would like to inform you that the issue with your account has now been resolved. Please let us know if you experience any further issues.Regards,awstomasCommentShareAWS-User-3892169answered 4 years ago0Hello,I am sorry to hear about the issues that you have been experiencing.Please note that the reason why you are unable to connect to your instance is caused by an administrative issue with your account. I have created an internal ticket for our customer service team to remedy this situation. I will inform you as soon as I receive an update.Regards,awstomasCommentShareAWS-User-3892169answered 4 years ago"


Question: Set up IOT with MQTT?

"Hi,I've read that the recommended way to use IOT services is via MQTT topics, and I'd like to do that, but I'm unsure how. Is there some MQTT topic already created that is associated with my IOT instance? Or, do I need to create the topic myself and link it to my IOT instance? If the latter, how is this done?Thanks.FollowComment"

Answer: "1So if I decide I want to have a topic called "temperature", I just post to that topic? I don't have to pre-configure it anywhere?CommentShareFrankanswered a year agoPronoy_C a year agoCorrect. You can create a topic like so /myThing/Temperature and then you can publish to it. Or have a thing subscribe to it.ShareFrank a year agoThanks. Can there be a topic like /Temperature that multiple things can post to? Also, is there a way I can see a list of topics that have messages?SharePronoy_C a year agoPosting to a topic is dictated by the IoT Policy attached to the certificate for the device. If the policy allows publishing to a single topic, then yes - you should be able to publish from multiple places to the same topic.I am not aware of a way to see all topics that have messages. I will look into that.Share1Topics are ephemeral resources in your IoT Core account. Your devices publish and subscribe to topics at runtime, so long as they have the permission to do so through their policy. If you are brand new to AWS IoT Core, you may find useful the first few lessons in this Skill Builder series:  https://explore.skillbuilder.aws/learn/public/learning_plan/view/86/iot-learning-planCommentShareRyan_Banswered a year ago0There are some reserved topics that you can access depending on the services you're using. A common one is the Shadow service where the updates to a device shadow are published.Other than that, you can follow this guide on how to design your topics and can subscribe or publish to them.As an example, when you create a Thing in the device registry, you can download a starter kit. It shows you a python example on how a client can subscribe to a topic. Here's a relevant example from the SDK repositoryCommentSharePronoy_Canswered a year ago"


Question: "Redshift cluster stuck on "resuming" for several hours, what options are available?"

"Our Redshift cluster has a daIly pause/resume schedule which has worked fine until today. It has been stuck on "resuming" for the past three hours, and I am unable to do anything with it. Other questions I reviewed were related to an outage, and the suggestion was to delete and recreate from snapshot, which I would rather save as a last resort. Are there any other options available in this situation?FollowComment"

Answer: "0Double check this is not a browser issue by Control+F5 or even closing your browser completely (not just that tab, not just that window, but all windows). If the issue persists then kindly raise a Support Ticket.CommentShareMilindOkeanswered a year ago"


Question: Third Party App not able to call SQS

"Hello,I'm using Prisma Cloud App service intergratino feature to send messages to an SQS I created in AWS. However, the app is not able to call the SQS que. I would like to confirm everything is right on AWS Side.I have created a rule with the necessary permissions and actions to perform on the SQS que for the account to assume using the root principal. I'm wondering if there's some sort of access I must explicitly also allow on the SQS que?Note this is cross account access. The third party app is in another account.The permissions on the SQS is default. The permissions for the assume role is listed below.{     "Version": "2012-10-17",     "Statement": [         {             "Action": [                 "sqs:GetQueueAttributes",                 "sqs:ListQueues",                 "sqs:SendMessage",                 "tag:GetResources",                 "iam:GetRole",                 "kms:GenerateDataKey"             ],             "Resource": "arn:aws:sqs:us-east-1:<account_of_sqs(current_account)>:prisma-que",             "Effect": "Allow"         }     ] }And the trust policy{     "Version": "2012-10-17",     "Statement": [         {             "Effect": "Allow",             "Principal": {                 "AWS": "arn:aws:iam::<account_id>:root"             },             "Action": "sts:AssumeRole",             "Condition": {                 "StringEquals": {                     "sts:ExternalId": "<external_id>"                 }             }         }     ] }Is there anything I'm missing?FollowCommentrePost-User-8924411 3 months agoAlso is there a way to query and test a connection to an SQS que from my local environment? To confirm I can at least call it from there?Share"

Answer: "0You could change the trust policy to allow you to assume the role. Then use the --dry-run option of the AWS CLI to test if your permissions are correct.CommentShareEXPERTkentradanswered 3 months agoAWS-User-6158549 SUPPORT ENGINEER3 months agoHello,To answer your question, we require details that are non-public information. Please open a support case with AWS using the following link:https://support.console.aws.amazon.com/support/home#/case/createShare0This is well documented in below link. it have Step by Step details how to configure in palo as well in AWS.you can follow ithttps://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/configure-external-integrations-on-prisma-cloud/integrate-prisma-cloud-with-amazon-sqsCommentShareSachinanswered 3 months ago"


Question: is It possible to expose abstract classes and interfaces to lua and call virtual functions with the actual reflection system?

"was trying to export to lua get and set material from static mesh and then to expose the IMaterial interface to lua for realtime material property changes.I used AZ_RTTI(IMaterial, "{42AB3609-EEA6-4464-B566-0B619EA03792}"); in IMaterial StructAZ_RTTI(CMatInfo, "{43A301D9-E3CA-4A89-A008-8C52A3C333ED}",IMaterial);in cMathInfo the class that implements IMaterial interface.and then in StaticMeshComponent added it's class to behaviour context but it compiles but doesn't show up in the editor.if (AZ::BehaviorContext* behaviorContext = azrtti_cast<AZ::BehaviorContext*>(context)){behaviorContext->Class<IMaterial>("Material")->Method("SetGetMaterialParamFloat", &IMaterial::SetGetMaterialParamFloat)->Method("GetSubMtlCount", &IMaterial::GetSubMtlCount)->Method("GetName", &IMaterial::GetName)->Method("GetSubMtl", &IMaterial::GetSubMtl)//->Method("SetGetMaterialParamVec3", &IMaterial::SetGetMaterialParamVec3);behaviorContext->EBus<MeshComponentRequestBus>("MeshComponentRequestBus")->Event("GetWorldBounds", &MeshComponentRequestBus::Events::GetWorldBounds)->Event("GetLocalBounds", &MeshComponentRequestBus::Events::GetLocalBounds)->Event("SetVisibility", &MeshComponentRequestBus::Events::SetVisibility)->Event("GetVisibility", &MeshComponentRequestBus::Events::GetVisibility)->VirtualProperty("Visibility", "GetVisibility", "SetVisibility");behaviorContext->EBus<MaterialRequestBus>("MaterialRequestBus")->Event("SetMaterial", &MaterialRequestBus::Events::SetMaterial)->Event("GetMaterial", &MaterialRequestBus::Events::GetMaterial);//->VirtualProperty("Material", "GetMaterial", "SetMaterial");auto statMeshCtx =behaviorContext->Class<StaticMeshComponent>();statMeshCtx->RequestBus("MeshComponentRequestBus");statMeshCtx->RequestBus("MaterialRequestBus");//also tryed concatenated.}Can someone point out what is wrong whit this implementation based solely on guessing as documentation about reflection is very lacking on this subject and I haven't found any comparable example in the source.Updated tried to move reflection of IMaterial in IMaterial.hstatic void Reflect(AZ::ReflectContext* context){if (AZ::BehaviorContext* behaviorContext = azrtti_cast<AZ::BehaviorContext*>(context)){behaviorContext->Class<IMaterial>("Material")->Method("SetGetMaterialParamFloat", &IMaterial::SetGetMaterialParamFloat)->Method("GetSubMtlCount", &IMaterial::GetSubMtlCount)->Method("GetName", &IMaterial::GetName)->Method("GetSubMtl", &IMaterial::GetSubMtl)//->Method("SetGetMaterialParamVec3", &IMaterial::SetGetMaterialParamVec3);}}then call it from static mesh with the context with no luck maybe it is not how these things work.as a sidenote I had to disable SetGetMaterialParamVec3 as Vec3 is just another kind of vector3 that isn't mapped to lua, I guessed that actually you need a wrapper to do these kind of things.My last chance is to wrap every function in a system component using ebus and also wrap the pointer to IMaterial but I just want to learn the best pratice and apply just that.Follow"

Answer: 0Hey @REDACTEDUSERSharerePost-User-8353690answered 6 years ago0I did a simple test and it worked withAZ_TYPE_INFOit required a recompile.I'll try to understand whay it didn't worked the first time.SharerePost-User-7621041answered 6 years ago0Awesome work. Keep me informed as to what you find and I'll update the ticket.SharerePost-User-8353690answered 6 years ago


Question: not able detach or delete volumes "An error occurred (IncorrectState)"

"we have some volumes that neither can be detached nor deleted. Even AWS console force or command-line aws cli comamnd helped if you try to detach (as it shows in-use but no instance iD) you getaws --profile XXXXXXX --region us-east-1 ec2 detach-volume --volume-id vol-XXXXXXXX --forceAn error occurred (IncorrectState) when calling the DetachVolume operation: Volume 'vol-XXXXXXXX' is in the 'available' state.and if you try to delete you get the in-use error messageaws --profile XXXXXXXX --region us-east-1 ec2 delete-volume  --volume-id vol-XXXXXXXXAn error occurred (IncorrectState) when calling the DeleteVolume operation: The volume 'vol-XXXXXXXX' is 'in-use'We have 3 volumes that we like to put in the correct state and delete if needed. Any idea?volumes are in us-east-1 vol-da73b5b3, vol-2eee2e47 and vol-54ace93d. I am not able to create the support caseregards,-InderFollowCommentMaulik_Makadiya a year agoWorth to check https://repost.aws/questions/QUE_vyhnlySMaS_ZQyrue2Ww/cant-delete-ebs-volume-not-even-with-the-force-optionYou may want to check with AWS support team to change the state manually.Share"

Answer: "0Hello,Please take a look at this similar question, it might help you https://repost.aws/questions/QUGwkiBP0XQXGya8gHNsNB7Q/cannot-detach-volumes#ANEYuVFpmlRyKYW0OgQ3DzOgSometimes a volume shows being "in-use" even if you don't have any instances. If this your case (and you don't have a snapshot or AMI associated with that volume), I recommend creating a support case, and they should be able to modify the state to "available" so that you can delete it. If you are unable to create a support case, please mention which region this volume is on.CommentSharePhindianswered a year ago"


Question: How to keep the source file name in the target output file with a AWS Glue job

"A customer is running Glue jobs to convert some source data files in S3 (which contain date stamps) into a different format (CSV to Parquet). The target files will be placed in a different S3 bucket. When they ran a test, Glue did not retain the source file name. They wants to retain the date stamp on the target file. How can they do this?FollowComment"

Answer: "0Accepted AnswerGlue is a data catalog and it organizes data in databases and tables. Although the underlying data storage layer can be S3, Glue does not care about object names on S3. As such, Glue is a higher level of abstraction on top of files or S3 objects. In this sense, the customer was using the wrong tool for what they were trying to achieve.If the objective is to work with individual files or S3 objects, they might want to write a simple Python script to achieve what they want. This can be easily done with a combination of boto3 and pandas. In short, first use boto3 to ListObjects and then perform the conversion for each object.Below is the sample code that performs the conversion from CSV to Parquet while retaining the filename. To run this code, they need to have boto3, pandas, fsspec, pyarrow, and s3fs:import pandas as pddef convert(src_bucket, src_key, dest_bucket, dest_prefix=None):src= 's3://' + src_bucket + '/' + src_key# extract the source filenamefilename = src_key[src_key.rfind("/")+1:]# form the output destinationif dest_prefix is None:dest= 's3://' + dest_bucket + '/' + filename[:filename.rfind(".")] + ".parquet"else:dest= 's3://' + dest_bucket + '/' + dest_prefix + '/' + filename[:filename.rfind(".")] + ".parquet"# Perform conversiondf = pd.read_csv(src)df.to_parquet(dest)convert('bucket-in', 'prefix-in/test12345.csv', 'bucket-out', 'prefix-out')With this convert() method, they just need to perform a ListObjects with boto3, then call the convert() method for each object.CommentSharejohnjiananswered 3 years ago"


Question: Lightsail WordPress sites very very slow and freezing

"I am creating two WordPress websites using Lightsail but am having a nightmare.Both sites are running very very slowly and both keep 'crashing' as in jamming and I can't do anything.rustyirony.com and thestripeyhorse.comBoth sites are still being put together and are only a few pages with only accidental visitors. I have no idea what is going wrong but I am getting so fed up I am seriously considering giving up and moving the sites to somewhere else as they are not workable. I've wasted weeks on this :-(I have only basic knowledge so need a dummy's guide of what I could do to work out what is going wrong. I have done various searched and found others with similar issues but no actual answers as to what is happening, why and how to correct it. I'm hoping my post will help others - not just me.ThanksFollowComment"

Answer: "0One place to start is health metrics, which you can read about here: https://lightsail.aws.amazon.com/ls/docs/en_us/articles/amazon-lightsail-viewing-instance-burst-capacity#identifying-instance-burstAnother thing to consider is whether you're exhausting your instance's burst capacity: https://lightsail.aws.amazon.com/ls/docs/en_us/articles/amazon-lightsail-viewing-instance-health-metrics. If so, you may want to upgrade to a more powerful instance type to ensure adequate performance for your workload.CommentShareAlexanswered a year ago"


Question: How to use the super type as a JSON-containing argument to a procedure and use the JSON elements in a FROM clause of a SELECT

"Hello,I need to pass a JSON argument in a procedure to use it in a FROM clause of a SELECT.So far I try :CREATE OR REPLACE PROCEDURE public.test_json(Tparam VARCHAR(256)) LANGUAGE plpgsqlAS $$DECLAREelem VARCHAR(256);BEGINDROP TABLE IF EXISTS temp ;CREATE TABLE temp (jsonfield super);INSERT INTO temp VALUES (JSON_PARSE(Tparam));SELECT jsonfield."accountIds"[0] INTO elem FROM temp ;SELECT myfield FROM mytable WHERE myfield=elem ;END;$$But I would prefer to do it directly :« SELECT jsonfield."accountIds"[0] INTO elem FROM Tparam ; »If you a any idea I will be very happy.Pascal JFollowComment"

Answer: 0Without solution we give up stored procedures and choose to use embedded sql in our code.CommentShareAWS-User-1364062answered a year ago


Question: "If I have enabled sensitive redaction data on Contact Lens, am I still able to listen to the unredacted audio through the console?"

"I have enabled Contact Lens and along with it the sensitive date redaction function. The specifications I have selected are to enabled redact sensitive data and generate redacted transcript only, and both redacted and original audio. Is there a way to give permission to some security profiles to listen to the original audio on the console itself or is it such that once redaction is enable we can no longer access the original audio through the console.FollowComment"

Answer: "0Hello,Once sensitive data redaction is enabled in Contact Lens, only redacted recordings are available through the Amazon Connect console.CommentSharegthomasanswered a year ago"


Question: Amazon MQ: Using rabbitmq shovels to private brockers

"We have setup 2 private rabbitmq broker clusters(rabbitmq-prod & rabbitmq-test) in our VPC on the same subnets.Created security groups that allow traffic from 0.0.0.0/0 to port 5671 and allow all outgoing traffic.Created shovel on rabbitmq-prod that sends traffic to rabbitmq-test.But the shovel stays in "starting" state, and the logs says that the connection times out.Is there any more configuration that has to be done. Or doesn't the implementation support shovels to private brokers?FollowComment"

Answer: "0Hi RickarK,Your observation is correct. Currently, our Amazon MQ for RabbitMQ brokers can only connect to public endpoints for Shovel or for Federation. Although you provision brokers in the same subnets, it is only the VPC endpoints for the brokers which are located in your subnets. The physical broker instances are in a separate managed VPC which are not connected to each other. They can only connect using a public endpoint like a NLB.Thanks,MithunCommentSharemithunm-awsanswered a year ago"


Question: Are you able to hide tables in a database using Lake Formation Tagging

"Hi,I have a database with around 40 tables. However, some end users don't need to see all tables in the database. I'm using Lake Formation Tagging and know that if a tag is added to the database that the tag is then inherited by all the tables. I also found by going into the table that the inherited tags can't be removed.I tried adding a tag to just the table level and granting permissions but the database won't appear as the tag is only at the table level.Is there a way to hide certain tables in a database by using Lake Formation Tagging?FollowComment"

Answer: "0You can't hide the table, however you can restrict access to table within database using lake formation tag based access control. In simplest terms follow below steps -Define Tag at Database levelDefine Tag at Table LevelGrant LF-tag permisions to specific IAM role/principal by using tags defined at database level and table level.More details - https://docs.aws.amazon.com/lake-formation/latest/dg/granting-cat-perms-TBAC-console.htmlCommentShareAWS-User-6929375answered a year ago"


Question: Light Sail Static IP address termination

"getting an erorr messaging saying "The specified static IP address cannot be deleted, a reverse DNS record maybe associated with the static ip address. To unlock the address contact AWS support."FollowComment"

Answer: "0Please contact AWS Support under the free support plan to get the reverse DNS record reset if you wish to no longer use that DNS name with that Static IP, stating this intention. We can then reset the record and that will allow you to delete the Static IP.CommentShareAWS-SUManswered 4 months ago"


Question: EC2 IMAGE BUILDER DELETING IMAGE BUILD VERSION

"I am trying to delete image build, but its not deleting. I have deleted all the resources attached to it accidently. Now, the image build is still in Building state, and neither I can stop, nor delete the image build. I am getting following error:Image build version ARN: arn:aws:imagebuilder:ap-south-xyz:image/mydemorecipe/1.0.0/2Error message: Resource dependency error: The resource ARN 'arn:aws:imagebuilder:ap-south-xyz:image/mydemorecipe/1.0.0/2' has a running workflow.FollowComment"

Answer: "0Resource dependency error[1] indicates that you have attempted to delete a resource with a dependency that prohibits this action.As per the documentation[2], you can delete the stack by skipping the resource that is in delete failed state.Here are the steps to delete the stack:From AWS CloudFormation Console,1.Open  the AWS CloudFormation console.2.Choose the stack that's stuck in DELETE_FAILED status.3.Choose Delete.4.Note: A window opens and lists the resources that failed to delete.5.In  the window, select all the resources that you want to retain, and then choose Delete stack.From AWS Command Line Interface,Please run the following delete-stack command:$ aws cloudformation delete-stack --stack-name test-components-ami-linux --retain-resources GeneralComponentLinuxAmiReferences:[1] DeleteComponenthttps://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_DeleteComponent.html[2] Delete stack failshttps://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/troubleshooting.html#troubleshooting-errors-delete-stack-failsCommentShareRam_AWSanswered 2 months ago0Hello,Since the image creation is in progress. Please use aws cli command to cancel it manuallySample Commandaws imagebuilder cancel-image-creation --image-build-version-arn arn:aws:imagebuilder:ap-south-xyz:image/mydemorecipe/1.0.0/2After this please try to delete the image build.Hope this helps.CommentShareSUPPORT ENGINEERVinay_Sanswered 2 months ago"


Question: Does DynamoDB `UpdateItem` operation read data with strong consistency while `UpdateExpression` is specified?

"So I have such use case for this operation. I am appending an item to a list attribute with UpdateExpression, and what I also have is that if this attribute does not exist, just create new one.So expression looks like thisSET history = list_append(if_not_exists(history, :historyEmpty), :historyRecord)However I am doing this call twice in a very short time span and I we have observed that second call might overwrite the first one. For example, if first call was done with :historyRecord = [{ data: 'data' }], and second one was done with :historyRecord = [{ data: 'data2'}] I will only have the second one in the database. This does not happen all the time tho, only if those two calls happened closely in time and that is why I suspect it might be related to read consistency. (first operation happens during an API call, and second one is during a state machine that gets started from that API call). The expected behavior is to have historyRecord = [{ data: 'data' }, { data: 'data2' }] in the database.FollowComment"

Answer: "1DynamoDB does not do any reads when executing a write operation. Furthermore, it provides serializable isolation, so when you execute 2 requests concurrently, one of those items will get executed before the other and the second request will always see the most up to date data (the results of the first request).I suspect that perhaps there is an issue in your logic when executing the requests, as both values should exist when all processes are complete. Ensure you are not overwriting data by calling PutItem etc...CommentShareEXPERTLeeroy Hannigananswered 6 months agorePost-User-0451477 6 months agoI think you misunderstood. I am not doing two operations. I do only a single operation, which is UpdateItem. Which, I was thinking does reading by itself since it needs to resolve if_not_exists in updateExpression.ShareLeeroy Hannigan EXPERT6 months agoUnderstood, but my answer remains relevant. DynamoDB does not read, there's no consistency at play. All write operations go to the leader node of a partition, meaning it will only see the most up-to-date values for that item. if_not_exists is resolved at the underlying storage level, on the SSD disk, in a serializable way. All single operation writes (PutItem, UpdateItem, DeleteItem) provide full ACID guarantees.Share"


Question: S3 job bookmarks implementation

"Does AWS provide implementation details for the S3 bookmarking logic in Glue?I have a bucket with tens of thousands of partitions (year, month, day, device_id) and each file inside the partition holds a number of eventsWhen I run a job, how does the bookmarking logic call into the S3 APIs to determine which files need to be processed? I understand that it uses ListObjects or ListObjectsV2 and checks the modified time of each file, but my concern is when there are millions of files, how does Glue optimize this listing behaviour?I would have thought that perhaps it uses the objectCount or recordCount properties of each partition to check first if there are new objects to be processed, before calling ListObjects, but I just ran some testing and confirmed that this does not occur. ie. if I upload a file to S3 and re-run the job, without running the crawler, it still picks up the new files (which have not yet been picked up by the crawler, nor added as aggregate metadata to the partition properties)FollowComment"

Answer: "1Accepted AnswerAWS does not provide implementation details for S3 Bookmarks. Given that, AWS documentation does provide some information that can be helpful to keep when implementing bookmarks.For Amazon S3 input sources, AWS Glue job bookmarks check the last modified time of the objects to verify which objects need to be reprocessed. If your input source data has been modified since your last job run, the files are reprocessed when you run the job again.These are some best practices to keep in mind for Bookmarks with S3 as a source:Ensure that the job bookmark options are enabled in job properties and max concurrency is 1Job must have job.init() and job.commit() and jobname in the arguments (job.init(args['JOB_NAME'], args))Use glueContext and transformation_ctx to enable bookmarks especially in the source. using sparkContext would not help with bookmarksFrom the documentation about best practices, please note AWS suggests to read from catalog after crawler rather than using the from_options() method to read S3 files directly.Use a catalog table with bookmarks for better partition management. Bookmarks works both for data sources from the Data Catalog or from options. However, it's difficult to remove/add new partitions with the from options approach. Using a catalog table with crawlers can provide better automation to track the newly added partitions and give you the flexibility to select particular partitions with a pushdown predicate.Also from best practices documentation, it suggests using the S3 files lister or useS3ListImplementation. i.e.from_catalog(database = "database", table_name = "table", additional_options = {'useS3ListImplementation': True}, transformation_ctx = "datasource0") ORfrom_options(connection_type="s3", connection_options = {"paths": ["s3://input_path"], "useS3ListImplementation":True,"recurse":True}, format="json")Use the AWS Glue Amazon S3 file lister for large datasets. A bookmark will list all files under each input partition and do the filering, so if there are too many files under a single partition the bookmark can run into driver OOM. Use the AWS Glue Amazon S3 file lister to avoid listing all files in memory at once.CommentShareAnanth Tirumanuranswered 8 months agomattyf 8 months agoThanks for the answer ananthtm. I had been hoping that there were options available for optimizing the bookmarking but I may have to continue using Databrick's AutoLoader instead until AWS evolves their solution to be a little more efficient. Thanks again for the detailed info!Share"


Question: Moving to ECS-Fargate from EC2

"Hi All,We are trying to migrate from EC2 to AWS ECS Fargate and this is a PCI complaint environment. We would like to get inputs on how we could be complaint for PCI with Fargate implementation. Particularly it would be helpful if I get some inputs on how everyone is dealing with the run-time security of Fargate containers. It would be nice to know as to how requirements like anti-virus, FIM which were in EC2 are covered with AWS Fargate.Regards,KarthikFollowComment"

Answer: 1We published a whitepaper for Architecting on Amazon ECS for PCI DSS Compliance in July 2020. This could serve as a good guide for some of the PCI DSS requirements.We also have the ECS Security Best Practices guidance that informs the users on Fargate runtime security features.You should work with your PCI-DSS assessor to ensure these controls are appropriate and acceptable for the scope of compliance.https://d1.awsstatic.com/whitepapers/compliance/architecting-on-amazon-ecs-for-pci-dss-compliance.pdfhttps://docs.aws.amazon.com/AmazonECS/latest/bestpracticesguide/security-fargate.htmlCommentShareAWS-User-1143558answered a year ago


Question: Redshift Unload to S3 End of Line Encoding Type

"HiWe currently have data produced in redshift which we are unloading as CSVs to s3 for it to be transferred via sFTP to an external client for processing.In these CSV's, the line end is UNIX format, just LF, which doesn't work with the clients program. We instead want our CSVs to be produced in S3 having the DOS format, a CRLF line end instead.Is this possible in the unload function? If not, is there a point in the pipeline where the conversion can happen easily? Maybe in the meta data of the s3 file, or with a conversion on a lambda function?Thank youFollowComment"

Answer: 0The Redshift UNLOAD currently does not provide options for choosing LF or CRLF. But with S3 trigger you can invoke Lambda function to execute script for Unix to Dos conversion.CommentShareMilindOkeanswered a year ago


Question: Logout from an ALB session that is authenticated by Cognito

"Hello!I'm failing with logging out from a Cognito authenticated ALB session. The authentication itself works perfectly.I want to logout the user from the session and understand I have to delete/expire the cookie (AWSELBAuthSessionCookie-0,...) and redirect to the /logout endpoint. I also understand that the auth session cookie is HttpOnly and must be deleted server-side.The authenticated application is hosted on a subdomain "a.example.com". My various server-side cookie deletion attempts failed. I had for example the following response header set:"set-cookie: AWSELBAuthSessionCookie-0=;Domain=a.example.com;Path=/;Max-Age=0;Secure"But none of my set-cookie headers did actually delete the auth session cookie.Any ideas how the cookie can be deleted/expired?Cheers FabianFollowComment"

Answer: "0What did the trick is omitting the domain (although in my case the authentication was setup for a hostname with a subdomain).This worked for me:Set-Cookie "AWSELBAuthSessionCookie-0=deleted;path=/;expires=Thu, 01 Jan 1970 00:00:00 GMT;"CommentSharefabian-hhanswered 4 years ago"


Question: AWS Backup - is hourly backups an effective approach

"hello, I was reading through https://www.wellarchitectedlabs.com/reliability/200_labs/200_testing_backup_and_restore_of_data/2_configure_backup_plan/ and point 7 essentially says that hourly backups have negative performance impact on systems.My question is to get clarification on hourly backups, are they good or bad? Has someone applied hourly backups in large scale and seen poor performance of underlying systems.FollowComment"

Answer: "1There is no performance impact to the resource being backed up using AWS Backup. Resource performance during backup window depends on the underlying storage and its utilization during that time. AWS Backup supports continuous backups and point-in-time recovery (PITR) in addition to snapshot backups. With continuous backups, you can restore your AWS Backup-supported resource by rewinding it back to a specific time that you choose, within 1 second of precision (going back a maximum of 35 days). Compare that with snapshot backups, which you can only take as frequently as every hour. Continuous backup works by first creating a full backup of your resource, and then constantly backing up your resource’s transaction logs. There has been no performance impact reported when using continuous backup for RDS. For more details on continuous backup refer to below article,https://docs.aws.amazon.com/aws-backup/latest/devguide/point-in-time-recovery.htmlIn general it is advised to schedule backup during off peak hours depending on the application/database usage of the underlying resource. With respect to hourly snapshot backup of RDS or EC2 performance impact are a rare occurrence. Performance impact can be caused when a high performing application/database is run on a ec2 or RDS resource where the underlying resource configuration does not meet the application/database performance requirement.CommentShareSUPPORT ENGINEERSathyaanswered a year ago0AWS backup (EBS) is about creating temporary snapshot and backup the data from it. There is performance penalty during snapshot creation but it can be negligible or not noticeable to your application, provided how busy or IO intensive is your application. For hourly backup, you need to weigh what is important, RPO or performance. For same reason, point 7 says that It is best to create backups during scheduled downtimes/maintenance windows when user impact is minimal.CommentShareAWS-User-1545586answered a year ago"


Question: How to know if my Lambda Authorizer for API Gateway is caching results?

"I have a Lambda Authorizer for an API Gateway API with one resource and three methods - PUT / GET / DELETE.Each method uses the same Lambda Authorizer, the TOKEN kind, to verify a JWT from Cognito. An IAM policy is returned by the Lambda which allows PUT / GET / DELETE actions on the resource.The authorization and policy work fine -- I just don't know if the result is being cached by API Gateway.When I look at the API Gateway execution logs, every request seems to be calling the Lambda Authorizer. Every API Gateway execution log has a line like this:Sending request to https://lambda.us-east-1.amazonaws.com/2015-03-31/functions/arn:aws:lambda:us-east-1:123456789012:function:MY_LAMBDA_FUNCTION:prod/invocationsDoes this invocation of the Lambda function mean that the Lambda Authorizer is not caching properly?After the "Sending request" log line, there's a line like "Authorizer result body before parsing" and then this line:Using valid authorizer policy for principal: *****userDoes this statement indicate that the Lambda Authorizer using a cached policy?The strange thing is...when I check the Lambda logs, the execution times vary wildly, almost as if the Lambda itself is caching the result...but I think the caching happens on the API Gateway side? What's going on here?Sample of Lambda duration times: 529ms, 10ms, 217ms, 213ms, 8ms, 2msFollowComment"

Answer: "0Assuming that this is a REST API and a REQUEST type Lambda, the default cache key used for Lambda authorizers is the resource path.On REQUEST type Lambda authorizers, you have the ability to define “identity sources” which are used to create the cache key.When multiple identity sources are defined they are used in combination to create the cache key.You can define the identity sources in the Lambda Event Payload (you can find this in the Edit Authorizer settings) in order to create a cache key based on the resource path as well as the value of the x-api-key header.CommentShareEXPERTDaniel ABIBanswered 5 months ago"


Question: List true tables only in Athena

I'd like to have a single query which lists all tables in a athena database excluding views.There isSHOW TABLESwhich returns tables as well as views. I don't want to call the latter followed by a SHOW VIEWS and then separate those in my code but have that same behavior in one single call.How can i achieve this?FollowComment

Answer: "0Hello,Instead of SHOW TABLES, how about using the information_schema table?SELECT * FROM information_schema.tablesWHERE table_schema = 'database' If you want to pull views separately, query the information_schema.views table.CommentShareEXPERTChris_Ganswered a year agorePost-User-1893981 a year agoHi, thanks for your response. That doesn't work.The view in my database is listed in information_schema.tables while information_schema.views is empty. How is that possible at all?Share"


Question: Does Amazon Fargate have a CPU-only-during-requests allocation like Google Cloud Run?

How i think it works is 1. request comes 2. Request is handled for about 15 seconds 3. response sent back 4. some time passes without requests (maybe 15 minutes?) 5. scale to 0 stops the container.Am i billed for step 4. ? Is this the way Fargate works?Here is the link describing CPU-only-during-requests allocation: https://cloud.google.com/run/pricing#billable-time.FollowComment

Answer: 1Accepted AnswerFargate currently doesn't have a feature like that; but I'd suggest that if you need it then Lambda would be a better way as it already does that without step (4) - once the request is processed the function is suspended and there is no further cost because it is no longer running.CommentShareEXPERTBrettski-AWSanswered 22 days agoLyubomir 22 days agoThanks very much for the answer!One more thing - I didn't know Lambda could deploy containers - i thought it was just an exact equivalent to Google Cloud Functions! Now i understand that Fargate is like Cloud Run with CPU-always allocated and with minimum instances. And Lambda is really both the Cloud Functions and the Cloud Run CPU-only-during-requests allocation equivalent.Share


Question: Get AWS Keys at billing portal

"Hi,in this api page https://portal.aws.amazon.com/billing/rest/v1.0/accountthere is some information like{"registrationDate":XXXXXXXX,"customerId":"XXXXX","accountStatus":"Active","accountRole":"Payer","accountId":"XXXXX","userId":"","userName":"","fullName":"XXX","awsAccessKey":"","awsSecretKey":"","awsSecurityToken":"","iamuser":true}I need value params awsAccessKey":"","awsSecretKey":"","awsSecurityTokenbut it's empty how can I get it in this ApiFollowComment"

Answer: "0You need to create new awsAccessKey and awsSecretKey manually using the console (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html).for CLI (https://docs.aws.amazon.com/cli/latest/reference/iam/create-access-key.html).Getting security and secrete keys using the given is not a very secure way to access aws.And even if there is a way then the link will not work bcz both keys can be generated or found in the IAM console, not in billing (As per URL looks like it's directing in billing, not IAM). I hope it makes sense.CommentShareVISIanswered 10 months ago"


Question: Outlook 2016 login issue

"I have created a WorkSpace ( Performance with Windows 10 and Office 2016 (PCoIP)). I logged in MS Office and it works. but When I tried to login into outlook 2016, it asks for username and password again and again instead of giving correct credentials. I have tried many solution on internet but none of them work. I tried removing credentials for windows credentials manager but it didn't work.I am really trying to learn.please help !Edited by: PrateekTyagi on Apr 8, 2021 9:40 PMEdited by: PrateekTyagi on Apr 8, 2021 9:41 PMFollowComment"

Answer: "0we need to make two new registries using REGEDIT.HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlookadd the following DWORD(32 bit)  keys:ExcludeHttpsRootDomainExcludeExplicitO365Endpointset value to 1 (Decimal), reboot Amazon Workspace, launch Outlook and add account.CommentSharePrateekTyagianswered 2 years ago"


Question: AWS lambda function issue

"Hi, I don't know what happened with the account setting. I can't see my old lambda functions or can't create new ones. please help.FollowComment"

Answer: "0Check to see that your computer time is set correctly - it's extremely odd that the console says "Last fetched 53 years ago" which happens to be the beginning of the Unix time epoch (1970). My guess is that your computer time is slightly in the future.CommentShareEXPERTBrettski-AWSanswered 3 months agovivek kumar 3 months agoThanks for reply,I have tried with diffrent computers and in diffrent brower also. but same result.Share0I have the same exact issue and Im not able to continue with my project. Did you encounter the root cause of the problem? We are trying with different IAM users from different computers/OSs without luck. Please help.CommentShareMartin Pi Puiganswered 3 months ago"


Question: How to download S3 file through Multi-Region Access Point (MRAP) using the AWS CLI?

"Hi,I'd like to access a specific file which I know the key of through the AWS Cli.Before using MRAP, I simply had to do aws s3 cp s3://my-bucket/my-path/file.png ./file.png to download a specific file from within my private subnet (through a VPC Endpoint for S3).Now that I've setup MRAP, I'd like to know if there is an easy way to achieve the same goal using AWS CLI or if I need to implement my own CLI for this specific purpose.Thanks in advance!(I couldn't tag this question properly, there are no tag for awscli or mrap)FollowComment"

Answer: "0According to the documentation, the S3Uri does not support access point object ARNs.The higher level s3 commands do not support access point object ARNs. For example, if the following was specified: s3://arn:aws:s3:us-west-2:123456789012:accesspoint/myaccesspoint/object/mykey the S3URI will resolve to the object key object/mykeyYou can, however, use the s3api get-object using access points. See: Using access points with compatible Amazon S3 operations for examples.See Configuring a Multi-Region Access Point for use with AWS PrivateLink also for endpoint support.CommentShareEXPERTkentradanswered a year ago"


Question: How do I know when a new Metric value is available for a SiteWise Asset?

"I have a SiteWise Asset with 12 Measurements and 36 Metrics. The Metrics are things like min, max, and average for each Measurement. So a Measurement might be Temperature and the corresponding Metrics would be Temperature_min, Temperature_max, and Temperature_avg.I have notifications enabled for all Measurements and Metrics. I am simulating IoT data being sent to SiteWise by passing a set of property updates for the Measurements via the CLI's batch-put-asset-property-value command. This works well; I can see the data appearing in SiteWise for both Measurements and Metrics. Again, I'm sending data in for the Measurements only whereas the Metrics are calculated by SiteWise from these Measurement values.I want to store all of this data by timestamp somewhere so I setup a IoT Rule that passes PropertyValueUpdate messages to a Lambda that updates a DynamoDB Item per timestamp. This partly works; I see messages going through the IoT Rule and appearing in DynamoDB for the Measurements but not the Metrics. It appears that updating a given property (Measurements or Metrics) triggers a notification but a Metric being calculated by SiteWise does not.Is there a way to trigger a message when a given Metric is calculated in SiteWise or can I be assured that a Metric value is available when the Measurement's PropertyValueUpdate message fires, or is there a better way of doing what I'm attempting?Thanks.FollowComment"

Answer: "0Hi! Thanks for the information. I'm sorry you are experiencing an issue with the notification on a property of type metric.We do support sending a notification when a metric property is updated (even if it is updated internally by SiteWise). I did a quick sanity check and was able to receive a notification for a computed metric property.Can you confirm the following:You are seeing the metric property update in real-time (computed internally by SiteWise) via a GetAssetPropertyValue but are not receiving a notification for it?You are subscribed to the correct topic as returned from a call to DescribeAsset?The property notification is indeed enabledYou can't assume a metric value is available when the measurement's BatchPutAssetPropertyValue is sent - as it could take some time until the metric is computed.Additionally:Have you had a chance to check out our blog post? https://aws.amazon.com/blogs/iot/collecting-organizing-monitoring-and-analyzing-industrial-data-at-scale-using-aws-iot-sitewise-part-1/We are curious to know about your use case with DynamoDB as well. Have you considered accessing the information directly from the API via a GetAssetPropertyValueHistory request?Thanks for your timeEdited by: awsseanb on Feb 26, 2020 2:49 PMCommentShareAWS-User-7704427answered 3 years ago0Thanks for your response.I'm happy to hear that a notification should be sent for Metrics that are updated internally by SiteWise. Likely I have something mis-configured somewhere. I will confirm the three points you've listed sometime today and report back.As for my DynamoDB use case - I am experimenting at this point but we have an existing app that allows the user to see and step through an amount of IoT data for specific machines (For example, a selected 24-hour duration with data every 15 minutes for 40+ sensors). The user can step, or click along a timeline, to see how a machine is performing at any given time. I was interested in getting the SiteWise data in a similar form so this app could consume it.I have accessed data via the GetAssetPropertyValueHistory request before but since that call only returns 1 property's data and I'm looking at showing 40+ properties (at a minimum) per timestamp in the app described above, that seemed like a lot of calls, manual aggregation, etc. Just thought that, assuming it wasn't too difficult, it might be more streamlined for now to get the data in a form that app was already consuming. I am fine learning that I am incorrect.I have skimmed that blog post before but will take another look. Thanks!CommentShareapennanswered 3 years ago0Hello again.I was able to spend a little time looking at this and found that the issue was that I had the Metric notifications set to fire once an hour instead of once every 5 minutes or so. Changing that caused things to perform as expected. Thanks for your assistance.CommentShareapennanswered 3 years ago"


Question: Error cluster launch: Security Daemon Registration

"I have created a workspace in AWS Databricks with private link. When we launch a cluster we get the following error: "Security Daemon Registration Exception: Failed to set up the spark container due to an error when registering the container to security daemon"The log (in the EC2 instance) stays in a loop at:[ 348.935443] audit: kauditd hold queue overflow[ 348.940183] audit: kauditd hold queue overflow[ 348.946439] audit: kauditd hold queue overflow[ 354.013288] audit: kauditd hold queue overflow[ 354.019590] audit: kauditd hold queue overflow[ 354.025712] audit: kauditd hold queue overflow[ 475.998259] audit: kauditd hold queue overflow[ 476.004062] audit: kauditd hold queue overflow[ 476.009494] audit: kauditd hold queue overflow[ 638.997129] audit: kauditd hold queue overflow[ 639.005763] audit: kauditd hold queue overflow[ 639.012236] audit: kauditd hold queue overflowThanks,FollowComment"

Answer: 0Solved in https://community.databricks.com/s/question/0D58Y00009J6n1uSAB/error-cluster-launch-security-daemon-registrationCommentSharejonroanswered 8 months ago


Question: [amazon-pa-api50] Using in Google App Script

"Hello,I'm trying to use the AmazonPaapi5 API in Google App Script.But in GAS we are unable to maintain the crypto-js in GAS.is there any documentation or example of running AmazonPaAPI in GoogleAppScript?Link1Link2FollowComment"


Question: How do I resolve unexpected CodeBuild AccountLimitExceededException error?

"I have a CodeBuild project that was created by AWS Control Tower Account Factory for Terraform.Every time I tried to "Start build" in the console, it spits out following error:Build failed to Start. The following error occurred: Cannot have more than 0 builds in queue for the accountLog events from CloudWatch:[ERROR]2022-02-27T01:01:56.498Z5aaae098-f77f-457d-8ff8-ee202b27c308{'FILE': 'codebuild_invoker.py', 'METHOD': 'lambda_handler', 'EXCEPTION': 'An error occurred (AccountLimitExceededException) when calling the StartBuild operation: Cannot have more than 0 builds in queue for the account'}Traceback (most recent call last):File "/var/task/codebuild_invoker.py", line 30, in lambda_handlerjob_id = client.start_build(projectName=codebuild_project_name)["build"]["id"]File "/var/runtime/botocore/client.py", line 386, in _api_callreturn self._make_api_call(operation_name, kwargs)File "/var/runtime/botocore/client.py", line 705, in _make_api_callraise error_class(parsed_response, operation_name)botocore.errorfactory.AccountLimitExceededException: An error occurred (AccountLimitExceededException) when calling the StartBuild operation: Cannot have more than 0 builds in queue for the account[ERROR]2022-02-27T01:01:56.498Z5aaae098-f77f-457d-8ff8-ee202b27c308{'FILE': 'codebuild_invoker.py', 'METHOD': 'lambda_handler', 'EXCEPTION': 'An error occurred (AccountLimitExceededException) when calling the StartBuild operation: Cannot have more than 0 builds in queue for the account'}Traceback (most recent call last):File "/var/task/codebuild_invoker.py", line 30, in lambda_handlerjob_id = client.start_build(projectName=codebuild_project_name)["build"]["id"]File "/var/runtime/botocore/client.py", line 386, in _api_callreturn self._make_api_call(operation_name, kwargs)File "/var/runtime/botocore/client.py", line 705, in _make_api_callraise error_class(parsed_response, operation_name)botocore.errorfactory.AccountLimitExceededException: An error occurred (AccountLimitExceededException) when calling the StartBuild operation: Cannot have more than 0 builds in queue for the accountAny pointer to solve the error?FollowComment"

Answer: "1Update:I tried CodeBuild StartBuild from an account that was not managed by Control Tower and it works as expected.So I'm assuming that this is caused by some configuration in the Control Tower managed account. Checked the SCP and GuardRails but does not look like there is any related restriction to CodeBuild nor the services that it uses (IAM, CloudWatch).CommentShareidnmediaanswered a year ago1There are various account level quotas that AWS sets for new and existing accounts. Some of the quotas protect you from unpredicted cost skyrocketing when you just start the cloud journey, the other ones might be applied if AWS detects something unusual in your accounts (e.g. an open vulnerability, an expired credit card, ...)The best way to resolve this issue is contacting AWS Support and requesting the quota increase for the number of concurrent builds in AWS CodeBuild in that account. If there are some things than need to be fixed in your account first, you will be informed about that. Otherwise, the quota will be increased, so you can run your builds in AWS CodeBuild.CommentShareDmitry Balabanovanswered a year ago0Submitting an AWS Support ticket for Service Limit Increase of CodeBuild Maximum Number of Concurrent Builds fixed this for me. It is odd though that the default AWS value in ServiceQuota for "Concurrently running builds" is 60, but we still need to ask AWS support for service increase.CommentShareNealanswered 5 months ago"