Question: Calling .Net code from Python Lambda - Is it possible

"Hello,I am desperately looking for help on this. Using PythonNet package I am trying to call .Net code from a Python Lambda function. But while trying to deploy that to .Net Lambda I get the following error saying that it is unable to load the runtime.Response{"errorMessage": "Failed to create a .NET runtime (coreclr) using the\n                parameters {}.","errorType": "RuntimeError","requestId": "","stackTrace": ["  File "/var/lang/lib/python3.9/importlib/init.py", line 127, in import_module\n    return _bootstrap._gcd_import(name[level:], package, level)\n","  File "<frozen importlib._bootstrap>", line 1030, in _gcd_import\n","  File "<frozen importlib._bootstrap>", line 1007, in _find_and_load\n","  File "<frozen importlib._bootstrap>", line 986, in _find_and_load_unlocked\n","  File "<frozen importlib._bootstrap>", line 680, in _load_unlocked\n","  File "<frozen importlib._bootstrap_external>", line 850, in exec_module\n","  File "<frozen importlib._bootstrap>", line 228, in _call_with_frames_removed\n",Thanks,HaripriyaFollowComment"

Answer: "0Hello,In short, yes you can run .NET code in lambda. It looks like you are trying to use the .NET core runtime which makes sense. What version of .NET are you using?Have you looked at the doc below yet as well?https://docs.aws.amazon.com/lambda/latest/dg/lambda-runtimes.htmlCommentShareCloud_Ganswered 5 months ago0Thank you Cloud_G for the prompt reply. I am using .Net core 3.1[assembly: TargetFramework(".NETCoreApp,Version=v3.1", FrameworkDisplayName = ".NET Core 3.1")]Could you please help me with a sample Lambda that calls .Net code in Python or containerizing to include both run times and successfully executing the lambda?Thanks,HaripriyaCommentSharerePost-User-5170019answered 5 months ago"


Question: ACM does not generate CNAME for validation

"Hi,I'm trying to request a new certificate, for wildcard domain *.example.com but immediately after requesting submission certificate is marked as Failed, and for the DNS validation option CNAME name and value are just empty (pressing copy button return undefined into the buffer)Is it a defect or I'm doing something wrong?FollowComment"

Answer: "0Accepted AnswerOK, it seems like I found the reason. When I try to generate a certificate for the .com domain - it can be generated with no issue, but in my case, I try to generate a certificate for the *.by domain. I assume it's failed because some sort of sanctions took into consideration here, there only problem is that it does not properly communicated back thru the interface.CommentSharerePost-User-1003669answered 2 months ago0You are getting this error because you are using example.com as the domain name. According to the documentation https://docs.aws.amazon.com/acm/latest/userguide/troubleshooting-failed.html#failed-additional-verification-requiredACM requires additional information to process this certificate request. This happens as a fraud-protection measure if your domain ranks within the Alexa top 1000 websites. To provide the required information, use the Support Center to contact AWS Support. If you don't have a support plan, post a new thread in the ACM Discussion Forum.So if you do in fact own example.com then you would need to contact AWS Support. Otherwise use a domain you own *.domainiown.com. You can then either buy the domain on AWS or through a third party and configure the DNS NS record to point to a route53 record and complete the CNAME verification.CommentSharePeter Graingeranswered 2 months agorePost-User-1003669 2 months agoI'm using my real domain name, *.example.com just an exampleShare"


Question: AWS device farm react native appium webdriverio test's not working

"Hi,I have created test for React Native application using Appium and WebdriverIO, it's working fine locally on android emulator and on real device, but it's not working on aws device farm.This tutorial https://medium.com/jetclosing-engineering/react-native-device-testing-w-appium-node-and-aws-device-farm-295081129790 I followed to create test.Issue is2020-05-06T14:01:27.388Z INFO webdriver: DATA { using: 'accessibility id', value: 'loginEmail' }2020-05-06T14:01:27.390Z INFO webdriver: COMMAND findElement("accessibility id", "app-root")2020-05-06T14:01:27.393Z INFO webdriver: [POST] http://127.0.0.1:4723/wd/hub/session/5a7350a3-e8c2-4c9e-b31a-347ea4defcdb/element2020-05-06T14:01:27.393Z INFO webdriver: DATA { using: 'accessibility id', value: 'app-root' }[0-0] TypeError in "Simple App testing Valid Login Test"$(...).setValue is not a functionthe same issue is for waitForDisplayed $(...).waitForDisplayed is not a functionDevice Farm Project Test URL: https://us-west-2.console.aws.amazon.com/devicefarm/home?region=us-west-2#/projects/df9dc8c9-3ddc-4822-85ef-1991208ae80e/runs/31e7f665-380e-4e21-bd17-8ff085474ecbBelow is my package.json file{"name": "tests","version": "1.0.0","description": "","main": "index.js","scripts": {"test": "npm install && npx wdio ./wdio.conf.local.js","package": "npm install && npm-pack-zip"},"keywords": [],"author": "","license": "ISC","dependencies": {"@wdio/cli": "^6.1.2","@wdio/local-runner": "^6.1.2","@wdio/mocha-framework": "^6.1.0","@wdio/spec-reporter": "^6.0.16","@wdio/sync": "^6.1.0","wdio-chromedriver-service": "^6.0.2","chromedriver": "^81.0.0","chai": "^4.2.0","webdriverio": "^6.1.2"},"devDependencies": {"npm-bundle": "^3.0.3","npm-pack-zip": "^1.2.7"},"bundledDependencies": ["@wdio/cli","@wdio/mocha-framework","@wdio/local-runner","@wdio/spec-reporter","@wdio/sync","webdriverio","chai","chromedriver","wdio-chromedriver-service"]}Below is my wdio.config.js fileexports.config = {runner: 'local',specs: ['./test/specs/**/.js'],exclude: [// 'path/to/excluded/files']maxInstances: 1,capabilities: [{maxInstances: 1,appWaitDuration: 100000,appWaitActivity: ''}],logLevel: 'info',bail: 0,baseUrl: 'http://localhost',path: '/wd/hub',waitforTimeout: 10000,connectionRetryTimeout: 120000,connectionRetryCount: 3,services: 'appium',port: 4723,framework: 'mocha',reporters: 'spec',  mochaOpts: {      ui: 'bdd',      timeout: 60000  },  }Below is my yml file install and test phasesphases:install:commands:- npm install -g appium- export APPIUM_VERSION=1.17.0- avm $APPIUM_VERSION- ln -s /usr/local/avm/versions/$APPIUM_VERSION/node_modules/.bin/appium  /usr/local/avm/versions/$APPIUM_VERSION/node_modules/appium/bin/appium.js  - cd $DEVICEFARM_TEST_PACKAGE_PATH    - echo $DEVICEFARM_TEST_PACKAGE_PATH    - npm install  test:commands:- echo "Navigate to test source code"- cd $DEVICEFARM_TEST_PACKAGE_PATH/node_modules/*  - echo "Start Appium Node test for Qbunk Android"    - ls    - echo $DEVICEFARM_TEST_PACKAGE_PATH    - npm install    - echo "Installing wdio"    - npm install --save webdriverio @wdio/cli    - echo "Installing chai"    - npm install --save chai    - npx wdio $DEVICEFARM_TEST_PACKAGE_PATH/wdio.conf.js --spec $DEVICEFARM_TEST_PACKAGE_PATH/test/specs/*.js            Interesting thing is that this https://aws.amazon.com/blogs/mobile/testing-mobile-apps-across-hundreds-of-real-devices-with-appium-node-js-and-aws-device-farm/ AWS tutorial I followed and write my test with wd working fine on AWS Device farm.Kindly let me know if you need more information.ThanksFollowComment"

Answer: "0I have solved the issue, you can get it's solution in stackoverflow https://stackoverflow.com/questions/61642870/aws-device-farm-react-native-appium-nodejs-webdriverio-tests-not-working/61727627#61727627CommentSharehassanahmedkhananswered 3 years ago"


Question: Availability of db.r6gd for RDS MariaDB reservations

"Will db.r6gd instances be available for reservations on RDS MariaDB soon?   The on-demand instances have been available for MariaDB since Jan 2023 per this post, but as of now they cannot be reserved via the RDS Console (N. Virginia).  They can be reserved for RDS MySQL but not RDS MariaDB.  We have an expired reservation and are looking to migrate to MariaDB so would like to know if this will be available for reserving soon.FollowComment"

Answer: 0You may want to consider using on-demand instances or reserved instances for other instance types that are currently available for RDS MariaDB. Or you can contact to AWS Support.CommentSharehashanswered a month ago


Question: How can EMR cluster with ubuntu custom image be created?

"Need to create an emr cluster with custom ubuntu image. While I tried to use market place ubuntu image to create the cluster, I got an error stating that EMR cluster can not be created with multiple EBS volumes. However the image has the single mount point with multiple partitions. After debugging I figured out that all the ubuntu base images come with multiple partitions in a single mounting point. So need to know how can I create an EMR cluster with ubuntu as a image.FollowComment"

Answer: 0Custom AMIs must be created using Amazon Linux or Amazon Linux 2 AMIs. Details of which EMR versions use AL2 can be found in the Using a custom AMI best practices page.CommentSharedacortanswered a month ago


Question: Please add support for the .ws top-level doman (TLD)

"Hi, we would like to consolidate our domain names to AWS but .ws is missing from your list.  Can you please add .ws to the list of supported TLD's?  .ws is a widely-supported generic TLD and has a domain registration count significantly higher than several of your existing country-code domains.  Thank you very much in advance for your assistance!FollowComment"

Answer: "0Hello, thank you for reaching out.I understand that you are requesting to support ".ws" TLD registration on Route 53.Route 53 Domains is currently directly accredited with .com, .net, and .org registries. All other TLDs are provided via third party registrar associates. To improve our level of service and support, we are actively working to become directly accredited with all other TLDs. In addition to improving our existing offering, we will become accredited with other registries to expand our TLD catalog. This work is currently in progress. We do not currently have dates to share for adding new TLDs.You can monitor the updates here at AWS Blogs - https://aws.amazon.com/blogs/aws/ and what's new on AWS - https://aws.amazon.com/new/CommentShareAustin_Lanswered 10 months ago"


Question: RDS Free Storage Space is going down

"Being someone requiring additional learning curve with AWS RDS and have been trying learning from available AWS RDS documentation, I would appreciate any technical direction to clear some of my queries in regard to understand dynamics with AWS RDS Storage.The project I am working with uses SQL Server and has quite a limited users with less amount of data at the moment, but I have been observing my RDS storage gradually being consumed over time span of two weeks and I am not able to figure out what actually is consuming this storage as the DB seems to have very less volume of data(92 MBs as attached in screenshot below).Database&Logs SizeCan anyone have a look at curve and guide which areas I might be missing looking into insights? Is it only DB or any other factor contributing reflecting the overall storage?Free Storage GraphThanks in advanceFollowComment"

Answer: 0Here is the blog which would help you with the troubleshooting - https://aws.amazon.com/premiumsupport/knowledge-center/rds-sql-server-storage-optimization/CommentShareD-Raoanswered a year agoD-Rao a year agoI hope this blog helped.Share


Question: Amplify GitHub integration failing in ca-central-1

"We have multiple Amplify applications running in multiple regions. Yesterday we tried to connect a new branch to an application in ca-central-1. We were sent to the "AWS Console Add Repository Branch" screen, like usual, but then redirected to GitHub where we were asked to install the aws-amplify application. On GitHub we were then asked to pick the specific repositories that AWS-Amplify could access.I had never seen this screen before and it is not the workflow shown in the Amplify documentation.I selected the repositories to which AWS-Amplify ALREADY has access. The workflow stopped at that point; it dit not ask me which branch to connect.I went back to AWS Amplify console and tried again. Same issue.I was not given a chance to choose a branch.I repeated this a few more times.Then I tried it in us-east-1. It worked as normal.Then I tried to create a new web application in ca-central-1. One of the first screens asks me to choose a repository. When I chose GitHub I was sent to GitHub, just like what had happened when I tried to connect a branch in ca-central-1 and the workflow stopped - I could not create the application.I tried to create a new web application using manual deploy. It worked.Now, when I try to connect a branch to the same application that I had problems with yesterday, it works.I found no questions about this when Googling nor any issues reported on the AWS status/health check pages. It started yesterday or on the weekend- we successfully attached new branches and deployed them for the same app/region on the weekend.I'm sorry that I don't have screen shots. This is my first re:Post question and I wanted to see how it works (i.e. are attachments even allowed) prior to gathering that information, and now, of course, things are working.Is anybody aware of any region specific hiccups with AWS-Amplify GitHub integration over the weekend.FollowComment"


Question: Secret Manager : Access Denied / no identity-based policy

"we are implementing Secret Manager in our application.Created below Policy and Role in AWS sidePolicy:AWS-SecretManager-ReadOnly-Policy{"Version": "2012-10-17","Statement": [{"Sid": "VisualEditor0","Effect": "Allow","Action": ["secretsmanager:GetResourcePolicy","secretsmanager:GetSecretValue","secretsmanager:DescribeSecret","secretsmanager:ListSecretVersionIds","secretsmanager:GetRandomPassword","secretsmanager:ListSecrets"],"Resource": "arn:aws:secretsmanager:us-east-1:<ServiceAccount>:secret:*"}]}Role:AWS-SecretManagerRole-lmw-access-secret-attach the policy ( AWS-SecretManager-ReadOnly-Policy )Log Details:But while accessing from appliation, getting below errorCaused by: org.springframework.beans.BeanInstantiationException: Failed to instantiate [void]: Factory method 'main1' threw exception; nested exception is com.amazonaws.services.secretsmanager.model.AWSSecretsManagerException:User: arn:aws:sts::<ServiceAccount>:assumed-role/custrole-NodeInstanceRole/i-06f00c2bb81db96ed is not authorized to perform:secretsmanager:GetSecretValue on resource: lmw/auth-secret because no identity-based policy allows the secretsmanager:GetSecretValue action(Service: AWSSecretsManager; Status Code: 400; Error Code: AccessDeniedException; Request ID: d4ebee58-201a-462b-bff8-f815bb0fb6bb)FollowComment"

Answer: "1I see the assumed role is "User: arn:aws:sts::<ServiceAccount>:assumed-role/custrole-NodeInstanceRole/i-06f00c2bb81db96ed" which doesnt has access to secrets, the assumed role should be the one that you created which is Role: AWS-SecretManagerRole-lmw-access-secret -attach the policy ( AWS-SecretManager-ReadOnly-Policy )Is the secret being accessed from another account? This document may help to troubleshoot.https://aws.amazon.com/premiumsupport/knowledge-center/secrets-manager-cross-account-key/CommentShareRishianswered 6 months ago0Hello There,I have gone through case notes and understand that you are getting an error named "secretsmanager:GetSecretValue on resource: lmw/auth-secret because no identity-based policy allows the secretsmanager:GetSecretValue action".From my analysis this access denied errors occurs if you have not setup up the required identity based policy correctly.From your case notes the example shows that this is a cross account setup where the secret manager (with secret ) is in one account(account a ) and the user/app is  assuming a specific role is another account (account B) to get these secrets.[1]your current setup :1)In your case you have Secrets Manager in Account-A2) your user/app assuming the role in  an IAM role  in Account-BSo possible steps to resolve this issue is that the secret in Account-A needs a "Secret Key Resource Policy" that permits access from Role-B . Also the Role in account B must be given permission to access the Secret in Account-A.[1]A sample role in your account B:{"Version": "2012-10-17","Statement": [{"Sid": "VisualEditor0","Effect": "Allow","Action": ["secretsmanager:GetResourcePolicy","secretsmanager:GetSecretValue","secretsmanager:DescribeSecret","secretsmanager:GetRandomPassword",],"Resource": "arn:${Partition}:secretsmanager:${Region}:${Account}:secret:${SecretId}"},{"Effect": "Allow","Action": [" secretsmanager:ListSecrets",“secretsmanager:ListSecretVersionIds”,],"Resource": "*"},{"Effect": "Allow","Action": "kms:Decrypt","Resource": "arn:aws:kms:Region:Account1:key/<your-encryption key-in-account-A>"}]}add a  sample statement in  the EncryptionKey's  policy for  account A :(this  allows the account B's  role to perform encrypt and decrypt operations using  kms key in account A.){"Effect": "Allow","Principal": {"AWS": "arn:aws:iam::Account-B:role/<Your-Role>"},"Action": ["kms:Decrypt","kms:DescribeKey"],"Resource": "*"}A sample policy for resource based policy for secrets manager (account-A):( In the principal section add the arn of the  role  from account b){"Version": "2012-10-17","Statement": [{"Effect": "Allow","Principal": {"AWS": "arn:aws:iam::Account-B:role/<your-role-for-account-b>"},"Action": ["secretsmanager:ListSecrets","secretsmanager:ListSecretVersionIds"],"Resource": "*"},{.    "Effect": "Allow","Principal": {"AWS": "arn:aws:iam::Account-B:role/<your-role-for-account-b>"},"Action":["secretsmanager:GetResourcePolicy","secretsmanager:DescribeSecret","secretsmanager:GetSecretValue"],"Resource": "arn:${Partition}:secretsmanager:${Region}:${Account}:secret:${SecretId}"}]}Note :  add the complete ARN of the respective secret present in account with Account-A including the dash and the six random alphanumeric characters then try accessing the secret using the ‘get-secret-value’[3] command and confirm if you are able to retrieve the secret successfully. You can find the ARN for a secret in the Secrets Manager console on the secret details page or by calling DescribeSecret.[4]You can References this documentation for references for cross account access for secret manager:[1]https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access_examples_cross.html[2] https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access_examples.html[3]get-secret-value - https://awscli.amazonaws.com/v2/documentation/api/latest/reference/secretsmanager/get-secret-value.html#examples[4]DescribeSecret - https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_DescribeSecret.htmlI would like to add that if  you are still unable to resolve the access denied errors ,To better your answer your query, we require details that are non-public information.Please open a support case with AWS using the following link:https://console.aws.amazon.com/support/home#/case/createCommentShareHemantanswered 6 months ago"


Question: What is the best way to plot array types in quicksight

"Is it possible to plot X-Axes values in SignalX_Sampled_messsignal and Y-Axes values in SignalX_Sampled_zeitvektor) in QSData example:SignalX_Sampled_messsignal,SignalX_Sampled_zeitvektor[47.5, 47.5, 47.5, 47.5, 47.5, 47.5, 47.5, 47.5, 47.5],[-1016, -816, -616, -416, -216, -16, 184, 384, 584][26.25, 26.25, 26.25, 26.25, 26.25, 26.25, 26.25, 26.25, 26.25],[-1015, -815, -615, -415, -215, -15, 185, 385, 585][18.25, 18.25, 18.25, 18.25, 18.25, 18.25, 18.25, 18.25, 18.25],[-1045, -845, -645, -445, -245, -45, 155, 355, 555][79.75, 79.75, 79.75, 79.75, 79.75, 79.75, 79.75, 79.75, 79.75],[-1045, -845, -645, -445, -245, -45, 155, 355, 555][7.75, 7.75, 7.75, 7.75, 7.75, 7.75, 7.75, 7.75, 7.75, 7.75],[-1076, -876, -676, -476, -276, -76, 124, 324, 524, 724][26.75, 26.75, 26.75, 26.75, 26.75, 26.75, 26.75, 26.75, 26.75],[-1006, -806, -606, -406, -206, -6, 194, 394, 594][13.75, 13.75, 13.75, 13.75, 13.75, 13.75, 13.75, 13.75, 13.75, 13.75],[-1144, -944, -744, -544, -344, -144, 56, 256, 456, 656][67.75, 67.75, 67.75, 67.75, 67.75, 67.75, 67.75, 67.75, 67.75],[-1046, -846, -646, -446, -246, -46, 154, 354, 554][43.25, 43.25, 43.25, 43.25, 43.25, 43.25, 43.25, 43.25, 43.25, 43.25],[-1127, -927, -727, -527, -327, -127, 73, 273, 473, 673][22.5, 22.5, 22.5, 22.5, 22.5, 22.5, 22.5, 22.5, 22.5],[-1046, -846, -646, -446, -246, -46, 154, 354, 554][25.75, 25.75, 25.75, 25.75, 25.75, 25.75, 25.75, 25.75, 25.75],[-1044, -844, -644, -444, -244, -44, 156, 356, 556][25.75, 25.75, 25.75, 25.75, 25.75, 25.75, 25.75, 25.75, 25.75, 25.75],[-1066, -866, -666, -466, -266, -66, 134, 334, 534, 734]FollowComment"


Question: Feature Enhancement: AWS Transfer Family Workflows

"AWS Transfer Family is pleased to announce the following enhancements to the managed workflows capability.You can now configure your workflow steps to process either the originally uploaded file or the output file from the previous workflow step. You can also make multiple copies of a file and archive the original source file for records retention.You can now utilize username as a variable in workflows copy steps, enabling you to dynamically route files to user-specific folders in Amazon S3.You can now use AWS CloudFormation to configure and deploy managed workflows in a standardized and repeatable way across multiple regions and accounts.Also, you now have access to AWS CloudWatch metrics such as total number of executions, successful executions and failed executions for your Workflows.To learn more, please visit our managed Workflows documentation [1] or the blog post [2] for additional details.[1] https://docs.aws.amazon.com/transfer/latest/userguide/transfer-workflows.html[2] https://aws.amazon.com/blogs/architecture/building-a-cloud-native-file-transfer-platform-using-aws-transfer-family-workflows/FollowComment"


Question: S3 Static website is automatically redirecting from apex domain to www but can't find where that is configured

"I have a static website running using S3, CloudFront, R53, and ACM.I would like any http to redirect to https and the root domain to redirect to www in the browser.One case does not work and I cannot figure out why.Also, I don't remember explicitly configuring anything to redirect root to www but it does this automatically but only when using http.https://www.example.com - Workshttp://www.example.com - Works (Redirects to https://www.example.com)http://example.com - Works (Redirects to https://www.example.com)https://example.com - Connection TimeoutR53:www.example.com CNAME -> CloudFront Distro UrlCloudFront:Alternate domain names:exmaple.comwww.example.comOrigins: Http Only, S3 bucketBehavior: Redirect HTTP to HTTPSS3:Bucket name: example.comHosting Type: Host a static websiteAWS Certificate Manager:Domains:*.example.comexample.comFollowCommentJeff F 7 days agoYou could look at a similar question I asked here https://repost.aws/questions/QUlgzwFY2HSoy3y0w26X2ruw/https-response-times-out-http-delivers-content-thoughShare"

Answer: "1Accepted AnswerMany browsers today will add www. to your domain when you enter just the domain.com.  That may be why the domain.com works when you do HTTP:// but not when you do https://.You can validate this by using curl command like so:curl HTTP://example.comIf it returns an error, then this is probably what is happening.You can follow this tutorial and you can then redirect all HTTP and https traffic for example.com and www.example.com to your S3 bucket as you like.https://aws.amazon.com/blogs/networking-and-content-delivery/hosting-internal-https-static-websites-with-alb-s3-and-privatelink/Hope this helps!CommentShareCarlos del Castilloanswered 7 days ago0Thanks for the help Carlos.Good call! Yes, it appears the browser was adding www.curl works for www but not the root domain, which makes sense now.I looked at that link and still being very new to AWS, is there another tutorial that instead uses CloudFront?I'm a bit concerned on the potential cost of all these services just to host a static website when my trail runs out.I've many many posts that suggest I can redirect root domain to www using an A record alias that points to the CF distro url using Route53 but I have not been able to get that to work.CommentSharerePost-User-7223964answered 7 days agoCarlos del Castillo 7 days agoUnfortunately Route 53 does not allow CNAMEs for the apex of the domain.  You would have to use a service like redirect.pizza which can do that for you for free.Share"


Question: Command not found when trying to attach static IP

"I am putting in the command to attach a static IP to my Prestashop and it keeps coming up command not found. I have tried multiple times with different generated static IP's and still getting the same error, this is the command I have been entering, obviously without the IP posted here but it is in the command without parenthesesudo /opt/bitnami/configure_app_domain --domain (my IP here)FollowComment"

Answer: "0If you can't find that command in the bitnami documentation, the following command was mentioned to use.https://docs.bitnami.com/virtual-machine/faq/configuration/use-bnconfig/sudo /opt/bitnami/apps/APPNAME/bnconfig --machine_hostname IP-ADDRESSCommentShareEXPERTRiku_Kobayashianswered a month ago"


Question: Why did you stop creating demos & interviews

"Hi LY Team,Why did you stop creating demos & interviews like as this video in 2017 & a example GDC 2020 has passed, I think you better start this process to migration people to lumberyard 😊https://www.youtube.com/watch?v=wHz90XRhg3MThank youFollow"

Answer: "0Accepted AnswerOther showcase and spotlight pieces are being planned for the community. We are going to time this to coincide with new features as they become available so expect to see them soon.SharerePost-User-8164888answered 3 years ago0Hi, we've found that doing tutorial videos is currently more helpful for the community.You can find them here: https://www.youtube.com/channel/UCIpwO-VpFfyZcA9h2UnIrUQSharerePost-User-8164888answered 3 years ago0OK , Thank you so much for your answer , I subscribed & followed this official YouTube channel ago 🙂 🙏 🌹SharerePost-User-8224505answered 3 years ago0[quote="lmbr_Saulty, post:2, topic:8647"]Hi, we’ve found that doing tutorial videos is currently more helpful for the community.[/quote]I would have thought that Amazon has the resources to do both. Other major engines certainly do.Not doing this type of promotional work anymore is contributing to the weak impression of Lumberyard.SharerePost-User-5431342answered 3 years ago"


Question: X-Ray not available in eu-west-3 (Paris)

"Hi,For the past week, I've been trying to access the X-Ray console for Paris (eu-west-3) region, but the service seems to be unavailable: the page keeps "Loading" indefinitely. It works just fine for other regions.Is there an ongoing issue with XRay in Paris ?ThanksFollowComment"

Answer: "0Thanks for reporting the issue. Our availability monitors aren’t showing any issues and we are able to access the console in the eu-west-3 region. Could you try refreshing your browser cache and reloading the page and check if that resolves the issue?If not, could you provide any additional details of any errors that you may be getting on the browser?Best,AbhishekSCommentShareAWS-User-3620298answered 4 years ago0Hi AbhishekS,I did try to clean my cache over the page few days, and it didn't work.But somehow, now it's working just fine. I should have insisted harder :)Anyway, thanks for your quick answer !CommentShareThanaanswered 4 years ago"


Question: Attempting to connect AWS Fargate to ECS returning an "Operation Timed Out" error

"I have a Node.js, typescript platform with Typeorm and Postgres DB. The dev and prod stacks are managed by Pulumi and we have them hosted on AWS ECS via AWS Fargate connection. The DB is AWS RDS.I updated our libraries on my local machine and can start the platform on my machine. To mirror the CI/CD process, we have a devDockerFile that I used to run docker locally, which works as expected. But on trying to push from local to dev, I'm encountering an "Operation Timed Out" error on AWS.The CICD pipeline is managed by Pulumi, integrated into GitHub Actions and the error from the process is as follows:Changes:Type                                 Name        Status               Infopulumi:pulumi:Stack                  *-dev                       ├─ awsx:x:ecs:FargateTaskDefinition  dev-api                          +-  │  └─ aws:ecs:TaskDefinition         dev-api     replaced             [diff: ~containerDefinitions]└─ awsx:x:ecs:FargateService         dev-api└─ aws:ecs:Service                dev-api     updating failed  [diff: ~taskDefinition]Diagnostics:pulumi:pulumi:Stack (//dev)error: update failedawsx:x:ecs:FargateService$aws:ecs/service:Service (dev-api)error: 1 error occurred:updating urn:pulumi:dev::swapfx::awsx:x:ecs:FargateService$aws:ecs/service:Service::dev-api: 1 error occurred:error waiting for ECS service (arn:aws:ecs:us-east-1:510179200366:service/dev-cluster-46448ca/dev-api-1fdce38) to become ready: ResourceNotReady: exceeded wait attemptsResources:+-replaced 163 unchangedDuration: 20m3sFollowComment"


Question: Lambda Error Mystery

"Firstly, the Lambda code itself has no issue, and executes fine. What I am seeing in the logs is an error that returns very little info on Google searches and is now a complete mystery to me. I have an Email alert scanning logs for "ERROR" and because this mysterious error has that in it, I keep getting emails for it.2022-02-21T10:11:46.665+00:00[ERROR] [1645438306665] LAMBDA_RUNTIME Failed to get next invocation. No Response from endpoint2022-02-21T10:11:46.666+00:00An error occurred while attempting to execute your code.: LambdaException2022-02-21T10:11:46.678+00:00terminate called after throwing an instance of 'std::logic_error'2022-02-21T10:11:46.678+00:00what(): basic_string::_M_construct null not validSome extra info, which may be red herrings, but including them anyway.Lambda is written in .NET CoreThis seemed to start after enabling X-Ray (Possible red herring)The error shows up around 5 minutes after Lambda inactivity (Possible red herring)Any help would be greatly appreciated.ThanksFollowCommentAWS-User-9869867 a year agoI disabled X-Ray - No effect, error continues to appear.Share"

Answer: "0I'm not 100% sure but that might be an error from the Lambda service itself. Best advice is to raise a support ticket so they can investigate further.CommentShareEXPERTBrettski-AWSanswered a year agoAWS-User-9869867 a year agoThanks, I'll do that.Share0I am also having the same issue, on .net core lambda invocations.2022-03-24T07:00:00.872+03:00[ERROR] [1648094400871] LAMBDA_RUNTIME Failed to get next invocation. No Response from endpoint2022-03-24T07:00:00.873+03:00An error occurred while attempting to execute your code.: LambdaException2022-03-24T07:00:00.873+03:00terminate called after throwing an instance of 'std::logic_error'2022-03-24T07:00:00.873+03:00what(): basic_string::_M_construct null not validCommentSharebbolekanswered a year ago"


Question: next.js on Amplify: how to connect to an RDS database?

"We're deploying a next app w/ api routes as backend and would like to use an RDS database as the datastore. I'd usually add a resource to a security group to share access, but I'm not seeing that sort of configuration available.Any suggestion for accomplishing this?FollowComment"

Answer: "1Hi Again,Greetings from AWS team.As checked with Amplify team,Amplify Next.js Classic SSR, the API routes are powered by L@E functions so there is no scope for configuring the same in VPC.Recently there is launch of Amplify Hosting Compute even that does not have VPC configuration.So what you are looking for is currently not supported, RDS needs to be open to public.However we do not recommend making the DB public as it does not seem secure.As a workaround, you may spin up an Amplify Backend to provision a Rest API + Lambda(VPC) that interacts with their RDS.You may raise ticket with AWS team for support.Thankyou!CommentShareVinitanswered 5 months agonil 5 months agoThanks for tracking down the answer, Vinit. This is disappointing since I'm not sure what do with a Nextjs API route that can't connect to a data store. If an IP range were available to add to an allow list it would be helpful.ShareVinit 5 months agoHi Nil,You may raise a ticket with AWS support with amplify team for guidance on provisioning a REST API + lambda function that interacts with RDS database.Let me know if there is any other query from your side. I deeply regret the inconvenience caused due to this issue.Regards,VinitShare0Hello from AWS,Thanks for posting this query, I can understand that you need support to connect to RDS instance from your next js application.You can have an external Restful API that interacts with RDS, and your Next JS application then interacts with the API.Connecting to RDS instance \ Aurora :Step 1 : Build RDS instance and gather connection string information.The connection information for a DB instance includes its endpoint, port, and a valid database user, such as the master user.Step 2 : Configuring VPC and security groupsUsing Amazon Virtual Private Cloud (Amazon VPC), you can launch AWS resources, such as Amazon RDS DB instances, into a virtual private cloud (VPC). When you use Amazon VPC, you have control over your virtual networking environment. You can choose your own IP address range, create subnets, and configure routing and access control lists.A VPC security group controls access to DB instances inside a VPC. Each VPC security group rule enables a specific source to access a DB instance in a VPC that is associated with that VPC security group. The source can be a range of addresses (for example,172.160.0.0/24), or another VPC security group. By specifying a VPC security group as the source, you allow incoming traffic from all instances (typically application servers) that use the source VPC security group.VPC security groups provide access to DB instances in a VPC. They act as a firewall for the associated DB instance, controlling both inbound and outbound traffic at the DB instance level. DB instances are created by default with a firewall and a default security group that protect the DB instance.Before you can connect to your DB instance, you must add rules to a security group that enable you to connect. Use your network and configuration information to create rules to allow access to your DB instance.For example, suppose that you have an application that accesses a database on your DB instance in a VPC. In this case, you must add a custom TCP rule that specifies the port range and IP addresses that your application uses to access the database.For more information regarding your environment, you may raise a ticket with AWS support team.For more information check below links,[1] https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/create-deploy-nodejs.rds.html#nodejs-rds-connect[2] https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_Troubleshooting.html[3] https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/CHAP_Troubleshooting.html[4] https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_CommonTasks.Connect.html[5] https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/CHAP_Troubleshooting.html#CHAP_Troubleshooting.ConnectingCommentShareVinitanswered 5 months agonil 5 months agoYes, I do have a good handle on security groups. I just don't see any way within Amplify to configure them. I also don't see where I'd get an IP range to add to the RDS security group.Share0Hi,Greetings from AWS support.You may define inbound rules that use the IP addresses of the client application as the source. You may get public IP by checking the third party site, "what is my IP address". This is not provided by AWS so AWS does not hold any rights.Once you get the IP range of all source host addresses, you may add the CIDR range in security group. The security group associated to RDS instance can be viewed on RDS console page,Select the RDS database instanceUnder connection and security > Security groups.select the associated security groups and add the required CIDR range.For eg If I have 3 computers accessing the RDS of IP 172.168.1.1, 172.168.1.2 and 172.168.1.3, then I will add CIDR range in inbound rule of RDS security group as 172.168.1.0/28. This way I can have around 16 usable IP's in the range.For creating CIDR you may use https://cidr.xyz/ for more information. However this is third party website.Also for checking if everything is fine, you may add source address as 0.0.0.0/0 in inbound rules. This will allow all traffic from all IP address range to connect to RDS database instance. This is NOT recommended by AWS however as its not security or risk compliant. This should be modified with your source application IP address only once its figured out.Regarding the Amplify, I will check with Amplify team for more details. Meanwhile you may raise a ticket with AWS anytime for the support.Thank youCommentShareVinitanswered 5 months ago"


Question: AWS ElasticBeanstalk Windows Instance Time Sync in a private VPC

"Hi we are deploying a Dotnet windows web application on the ElasticBeanstalk in a private VPC without internet. Recently we noticed that the time is not correct on the EBS windows instance and it caused our software bugs.We understand that we can "Keeping Time With Amazon Time Sync Service" without internet by run some windows powershell scripts.Reference is here: https://aws.amazon.com/blogs/aws/keeping-time-with-amazon-time-sync-serviceMy question is that how to run this script when we deploy the application to the ElasticBeanstalk? Could someone please provide a sample configuration file or steps to achieve this?By the way, I have raised the same AWS support ticket 5 days ago but nobody is assigned to the ticket so I have to ask here.Thank you.FollowComment"

Answer: "0Hello,Apologies for delay with response on the support ticketFrom August 2018 release, All Amazon Windows AMIs uses the Amazon Time Sync Service by default.This time service is accessible from any EC2 Region at the 169.254.169.123 endpoint.Your instance does not require access to the internet, and you do not have to configure your security group rules or your network ACL rules to allow access. Please refer to documentation[1] to know more.If your creating the Elastic Beanstalk environments with the latest AMIs please note that there is no need of adding  config file as listed in the document [2]because the latest AMIs use Amazon Time Sync Service by default.Resources:[1] https://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/windows-set-time.html#default-ntp-settings[2] https://aws.amazon.com/blogs/aws/keeping-time-with-amazon-time-sync-serviceCommentShareAditya_Tanswered 9 months ago"


Question: Nested Stack failed to rollback

"I have nested cloudfromation stack and its failing to update rollback, getting the status:  UPDATE_ROLLBACK_COMPLETE_CLEANUP_IN_PROGRESSFollowComment"

Answer: "0Hello,There are several reasons a nested stack could be stuck in an UPDATE_ROLLBACK_COMPLETE_CLEANUP_IN_PROGRESS state. These are;CloudFormation is still in the process of removing old resources, or can't remove those resources due to a dependency issue.Resource cleanup is paused because a sibling stack of a nested stack fails to update or roll back.For troubleshooting steps, see our detailed knowledge center article Why is my CloudFormation stack stuck in the UPDATE_ROLLBACK_COMPLETE_CLEANUP_IN_PROGRESS or UPDATE_COMPLETE_CLEANUP_IN_PROGRESS state?For further assistance and because it would require details that are non-public information, please open a support case with AWS using the following linkCommentShareUgochukwu_Ianswered a year ago"


Question: Import Images into Workspaces

My google foo is failing me. How can I import a custom linux distro into AWS workspaces?FollowComment

Answer: "0You cannot, only public linux bundles for Amazon Linux 2 and Ubuntu are available for WorkSpacesCommentShareEXPERTStevieStetsanswered 3 months agoEXPERTBrettski-AWSreviewed 3 months ago"


Question: Can we run a python script in Sagemaker using boto3 from a local machine?

"Here's what I am trying to do:In my application that resides outside aws, I take some user inputs, and trigger scripts that reside inside Sagemaker notebook instance. I am able to start or create a new instance using boto3, and also use lifecycle configuration to run some starter script while the instance turns on. But I want to run multiple scripts in short intervals based on user inputs, so I don't want to restart my instance each time with a new lifecycle configuration script.I am trying to find if there is a way to execute shell commands in sagemaker using boto3 (or any other way).FollowComment"

Answer: "1It should be possible, but it's probably not a great idea...This is not really an intended pattern for SageMaker notebooks today, and it's more likely that you should be using SageMaker Processing Jobs to schedule your regular tasks - taking input and output data direct from S3 rather than relying on local notebook storage.With that warning out of the way, a hacky solution:SageMaker notebooks (both Notebook Instances and Studio) are based on Jupyter and thus today more-or-less conform (with some customizations) to Jupyter's client/server API model, which has both REST and WebSocket/ZeroMQ aspects. This means as long as you're able to handle authentication, it's possible to interact with the notebooks from a script using the same interfaces your browser would.This automation-style solution would proceed as (assuming Python):Use boto3 and the SageMaker CreatePresignedNotebookInstanceUrl API to create a presigned notebook instance URL (Granting this IAM permission is what allows a User/Role/principal to open the notebook)Use a stateful HTTP library like requests to request this URL in a session and and save the cookie data set by the response. Fetching the URL logs your client in to Jupyter, and "your client" is the session - need to keep it persistent.Use the JupyterServer REST APIs for things like opening terminal or notebook sessions, listing available kernels, listing open sessions, etc.When you have a session open (terminal or notebook), use a WebSocket client library like websocket-client to interact with it (sending commands, receiving results, etc). Remember you'll need to use your same session for authentication.I think I only have end-to-end examples of this for SMStudio: The deprecated auto-installer of the official SageMaker Studio Auto-Shutdown Extension used to use this method before SMStudio Lifecycle Configuration Scripts became available, and some rough draft PoCs on GitHub explore the notebook side too but always with ref to Studio. However it should be possible for NBIs too with almost the same process: Just need to use the above mentioned API in place of CreatePresignedDomainUrl, and may need to check whether the REST api_base_url needs to be adjusted.It might even be possible to use a higher-level solution like the nbclient library if you can get the authentication to work with it - would be interested to hear if anyone does!CommentShareEXPERTAlex_Tanswered a year ago"


Question: GENERIC_INTERNAL_ERROR: org/objenesis/strategy/

Hello everybody.I'm having this error message GENERIC_INTERNAL_ERROR: org/objenesis/strategy/InstantiatorStrategy when I try to execute a single select query from a table in AWS Athena.Have you ever already got this error?Thanks in advance.FollowComment

Answer: "0Hi,Looking at the "GENERIC_INTERNAL_ERROR: org/objenesis/strategy/InstantiatorStrategy" it seems to be general issue when querying over an Apache Hudi dataset  of Merge on Read (MoR) table type.This error might occur in case when a delete action is performed, because then an AVRO file will be added automatically to Hudi dataset which might cause the above error when trying to query in Athena. In case, if there was an AVRO file added to your Hudi dataset/S3, remove the file and try to query again from Athena.Now the problem should be fixed and query should succeed, However you might see that the deleted records are re-appearing again in Athena query results. This might happen because Athena can not read the delta commits, delta commits will be stored in AVRO file which helps keep a track of the deleted records and prevents query those deleted values.DELTA_COMMIT - A delta commit refers to an atomic write of a batch of records into a MergeOnRead type table, where some/all of the data could be just written to delta logs.But, with AVRO file in Hudi dataset it seems it is not possible to query in Athena, because it seems Athena expects compacted data from source which seems it only support a table with single format(like the whole values in the file should be in parquet format only). With Merge on Read tables Data is stored using a combination of columnar (Parquet) and row-based (Avro) formats. All updates are logged to row-based delta files and are compacted as needed to create new versions of the columnar files[1].This is the reason the AVRO files gets added to your bucket after delete.With Merge on Read, you are only writing the updated rows and not whole files as with Copy on Write (CoW). This is why Merge on Read is helpful for use cases that require more writes, or update/delete heavy workload, with a fewer number of reads. Delta commits are written to disk as Avro records (row-based storage), and compacted data is written as Parquet files (columnar storage). To avoid creating too many delta files, Hudi will automatically compact your dataset so that your reads are as performant as possible[2].A MoR table type is typically suited for write-heavy or change-heavy workloads with fewer reads.Apache Hudi provides three logical views for accessing data:Read-optimized – Provides the latest committed dataset from CoW tables and the latest compacted dataset from MoR tables.Incremental – Provides a change stream between two actions out of a CoW dataset to feed downstream jobs and extract, transform, load (ETL) workflows.Real-time – Provides the latest committed data from a MoR table by merging the columnar and row-based files inlineAs of this writing, Athena supports read-optimized and real-time views but not the incremental. On MoR tables, all data exposed to read optimized queries are compacted. This provides good performance but does not include the latest delta commits. However, the snapshot queries contain the freshest data[2].So, it is recommended to compact the data at source to query with Athena.This should help understand why we might get the deleted records on running the query again as it is unable to read the delta commits. I would request you to refer these articles for more insights [1], [2].Reference:[1]https://aws.amazon.com/blogs/big-data/part-1-query-an-apache-hudi-dataset-in-an-amazon-s3-data-lake-with-amazon-athena-part-1-read-optimized-queries/[2]https://aws.amazon.com/blogs/aws/new-insert-update-delete-data-on-s3-with-amazon-emr-and-apache-hudi/CommentSharerePost-User-6395508answered 2 months ago"


Question: DMS task stalls at truncating tables in target S3 bucket

I have created a DMS task to migrate data from a view in a MSSQL database running on an EC2 instance to a folder in an S3 bucket. It is a full load and truncates existing tables in target bucket. There are currently no tables as the task has never successfully run. The task stalls once it gets to the truncate/delete tables step. There are no error messages. It just does not progress any further.FollowComment

Answer: 0CloudWatch metrics is a good place to start troubleshooting a stuck DMS task. Please see this post for details.CommentShareAhmet Akananswered a month ago0What is the type / size of your DMS replication instance? It may be the source of the trouble if the source from which you replicate is very active.Following page guides you on finding the right type to have smooth replication.https://docs.aws.amazon.com/dms/latest/userguide/CHAP_ReplicationInstance.Types.htmlCommentShareDidier_AWSanswered a month ago


Question: Export data from AWS ElasticSearch to AWS RDS instance using Logstash

"We have Amazon ElasticSearch Cluster of version 7.10.0. We would like to export some data from ElasticSearch to RDS Table. We are already using Logstash to import some data into ElasticSearch. There is amazon_es plugin which can only be used as output plugin in logstash pipeline but for export, we are not able to find anything.In our use case, there is some summarize data in Amazon ElasticSearch which we want to insert into RDS table. Let us know how can we do it?FollowCommenthanishbansal a year agoAny help/guidance on this?Share"

Answer: "0Hi there, currently logstash and AWS DMS only supports ES as the destination but not source. One closest option to achieve your use case is to use AWS Lambda to read data from Elasticsearch (1) and then insert data to Amazon RDS(2)(1) https://blogs.tensult.com/2020/01/01/aws-lambda-to-perform-various-tasks-in-elasticsearch/(2) https://docs.aws.amazon.com/lambda/latest/dg/services-rds-tutorial.htmlCommentShareSUPPORT ENGINEERHarshith_Manswered a year ago"


Question: How to get access to s3 for .NET SDK with the same credentials used for awscli?

"I am on a federated account that only allows for 60 minutes access tokens. This makes using AWS difficult since I have to constantly relog in with MFA, even for the AWS CLI on my machine. I'm fairly certain that any programmatic secret access key and token I generate would be useless after an hour.I am writing a .NET program (.NET framework 4.8) that will run on a EC2 instance to read and write from an S3 bucket. As per the documentation example, they give this example to initalize the AmazonS3Client:// Before running this app:            // - Credentials must be specified in an AWS profile. If you use a profile other than            //   the [default] profile, also set the AWS_PROFILE environment variable.            // - An AWS Region must be specified either in the [default] profile            //   or by setting the AWS_REGION environment variable.            var s3client = new AmazonS3Client();I've looked into SecretManager and ParameterStore, but that would matter if the programmatic access keys go inactive after an hour. Perhaps there is another way to give the program access to S3 and the SDK...If I cannot use access keys and tokens stored in a file, could I use the IAM access that awscli uses? For example, I can type into powershell aws s3 ls s3://mybucket to list and read files from s3 to the ec2 instance. Could the .NET SDK use the same credentials to access the S3 bucket?FollowComment"

Answer: "1Since you are running the application from an EC2 instance, the best practice is to use an IAM Role attached to the instance. The .NET SDK should be smart enough to "know" how to use the IAM role. There is a guide in the documentation here -> https://docs.aws.amazon.com/sdk-for-net/v3/developer-guide/net-dg-hosm.html#net-dg-hosm-sample-s3-appRemember to aways apply the Least Privilege Principle -> https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html#grant-least-privilegeCommentSharefercunhaanswered 6 months agorePost-User-2002390 6 months agoIs there a way to attach a IAM role to my own local machine for local development?Share"


Question: Push logs to S3

"How can I push Airflow task logs to S3?I tried adding the following configuration parameters to "Airflow configuration options",logging.base_log_folder:          /usr/local/airflow/logslogging.remote_base_log_folder:  s3://my-bucket/logs/logging.remote_log_conn_id:  aws_defaultlogging.remote_logging:          Truebut it seems to have no effect.Came across this https://blogs.halodoc.io/experience-with-evaluating-managed-workflow-for-apache-airflow-mwaa/ post saying it ain't possible to push logs into S3.FollowComment"

Answer: "0Hi,Logging configurations cannot be changed in MWAA.  All logs are sent exclusively to CloudWatch.Thanks.CommentShareJohn_Janswered 2 years ago0Hi John,Thanks for your response!Would you know if support for other logging destinations is on the roadmap as such?CommentSharebcoznotgcpanswered 2 years ago0Unfortunately Airflow currently does not support multiple logging destinations, and CloudWatch is required for service monitoring.You can however export from Cloudwatch to S3: https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/S3Export.htmlCommentShareJohn_Janswered 2 years ago"


Question: Watervolume reflections

"Hello,I'm trying to create a lake, but I can't add any kind of reflection to it leaving me with a almost black, moving blob. Under the "Texture maps" category for the watervolume shader there is no place for an environment map. Has this been removed? If yes how do I get reflections at all? It won't allow me to check "Realtime reflections" under "Shader generation parameters" either so I'm stuck.Any help?Thanks.Follow"

Answer: "0Accepted AnswerSoo I got a new connection today and figured reinstalling might solve the problem, but it didn't. I am still missing that "Environment" slot in the material. Any new on this? I'm using version 1.8.0.1Workaround thanks to EricRLAEricRLA *                        ·15 hours ago           *@IhatenamesI had this problem awhile ago. Try this and see if it helps. Change theshader to Glass and in the environement texture slot type in nearest_cubemap, then change the shader back to the watervolume.SharerePost-User-0887237answered 6 years ago0@REDACTEDUSERCan you please tell me what version of Lumberyard that you are using? Have you added any EnvironmentProbes?SharerePost-User-1190460answered 6 years ago0Thanks. I'm using version 1.8.0.0. I did add an EnvironmentProbe and when using a sphere with glossiness near 100% it does show the cubemap on it. Maybe I missed some changes to the watervolume shader? My brain says that there was an environment map slot in the shader and that you had to put a cubemap in there in order to be able to check "Realtime reflections" in the shader generation parameters.SharerePost-User-0887237answered 6 years ago0@REDACTEDUSERI just want to be certain that it is working for you. When using the Watervolume shader, there is a Texture Map parameter called Environment.  This should point to the EnvironmentProbe that you want the reflections from.Here is a screenshot of my setup:REMOVEDUPLOADI hope this helps clear up any confusion. Let me know!SharerePost-User-1190460answered 6 years ago0Exactly. Problem is I don't have that slot :)REMOVEDUPLOADDoes this require a certain gem? I'm on a custom project but I didn't modify source code other than adding a custom component, which is not even used yet. The problem also appears inside the SamplesProject. I'll try recompiling, maybe that helps.EDIT:Unfortunately rebuilding everything didn't help either.SharerePost-User-0887237answered 6 years ago0Thanks that worked.SharerePost-User-0887237answered 6 years ago0@REDACTEDUSERSharerePost-User-9601236answered 6 years ago0THANK YOU!!!!!!!!!!!!SharerePost-User-9359627answered 2 years ago"


Question: SageMaker Studio domain lifecycle configuration for hosting VSCode not working and no error logs

"Hi all,I've followed the guide provided in this medium blog by senior AWS ML SA: https://towardsdatascience.com/hosting-vs-code-in-sagemaker-studio-f211385e25f7I've created the lifecycle configuration (jupyterlab app) for the following bash script:#!/bin/bashmkdir -p vscodecd vscodesudo sucurl -fsSL https://code-server.dev/install.sh | shexitHowever, when I attach the configuration to the domain or a specific user's jupyter server in the SM Studio, the JupyterServer App fails to be created with the following message displayed on the loading page of SM Studio's jupyterlab:"The JupyterServer app default encountered a problem and was stopped.Details: ConfigurationError: LifecycleConfig execution failed with non zero exit code 1 for script arn:aws:sagemaker:eu-west-3:615740825886:studio-lifecycle-config/install-vscode-on-jupyterserver. Check https://docs.aws.amazon.com/sagemaker/latest/dg/studio-lcc-debug.html for debugging instructions."I checked the page for debugging instructions, specifically the part where I am instructed to check the cloudwatch logs for the log group: aws/sagemaker/studioThe problem is this log group does not exist in CloudWatch (I have admin permission).I would like to have this set up for the entire team,Any help would be greatly appreciated!Best,RuoyFollowCommentDurga_S a year agoHi Ruoy, can you run this as just a shell script from your system terminal and verify if it runs successfully? If your app isn't starting now, I'd suggest to remove this LCC from the app/user profile and then start it, to run the script.If you have at least one app running, you should have an /aws/sagemaker/studio log group (make sure you are on the right region), and then you can look for the <domain>/<user-profile>/default/JupyterServer/LifecycleConfigOnStart log stream to troubleshoot the error.Share"


Question: How do we export activity of multiple files in one go?

I have multiple folders with multiple files in it. I want to export data of file downloads for all the files at once. how can I do it?FollowComment


Question: Remote host terminated the handshake during nucleus setup

"I'm getting an error:Unable to execute HTTP request: Remote host terminated the handshakeThis occurs during the call to DeviceProvisioningHelper.createThing(DeviceProvisioningHelper.java:204) -> software.amazon.awssdk.services.iot.DefaultIotClient.getPolicy(DefaultIotClient.java:8787)I am running a custom greengrass-entrypoint.sh to install version 2.5.3 on a docker container with Ubuntu 18.04 base image using automatic provisioning on an armv7 device that worked before with version 2.4.0. Separately, I have successfully installed a 2.5.3 using automatic provisioning by command line on an Ubuntu VM just fine. My network admin opened up port 8883 which allowed gg to install/run.What could be causing the above HTTP request error?ThanksHere is a partial log. I cannot post a question with the full log it must be too long for posting here:root@80d214eacd4c:/greengrass/v2/logs# cat greengrass.log 2022-02-16T21:13:17.982Z [INFO] (main) com.aws.greengrass.util.platforms.Platform: Getting platform instance com.aws.greengrass.util.platforms.unix.linux.LinuxPlatform.. {}2022-02-16T21:13:21.005Z [INFO] (main) com.aws.greengrass.util.platforms.Platform: Getting platform instance com.aws.greengrass.util.platforms.unix.linux.LinuxPlatform.. {}2022-02-16T21:13:21.382Z [INFO] (main) com.aws.greengrass.lifecyclemanager.Kernel: No ongoing deployment detected. Proceed as default. {}2022-02-16T21:13:22.864Z [INFO] (main) com.aws.greengrass.lifecyclemanager.Kernel: effective-config-dump-complete. {file=/greengrass/v2/config/effectiveConfig.yaml}2022-02-16T21:13:23.713Z [INFO] (main) com.aws.greengrass.deployment.DeviceConfiguration: Successfully setup Nucleus launch parameters. {}2022-02-16T21:13:26.917Z [INFO] (main) com.aws.greengrass.deployment.DeviceConfiguration: Nucleus lifecycle has been initialized successfully. {}2022-02-16T21:13:27.917Z [INFO] (main) com.aws.greengrass.deployment.DeviceConfiguration: Copy Nucleus artifacts to component store. {destination=/greengrass/v2/packages/artifacts-unarchived/aws.greengrass.Nucleus/2.5.3/aws.greengrass.nucleus, source=/opt/greengrassv2}2022-02-16T21:15:21.010Z [ERROR] (main) com.aws.greengrass.easysetup.GreengrassSetup: Error while trying to setup Greengrass Nucleus. {}software.amazon.awssdk.core.exception.SdkClientException: Unable to execute HTTP request: Remote host terminated the handshake        at software.amazon.awssdk.core.exception.SdkClientException$BuilderImpl.build(SdkClientException.java:98)        at software.amazon.awssdk.core.exception.SdkClientException.create(SdkClientException.java:43)        at software.amazon.awssdk.core.internal.http.pipeline.stages.utils.RetryableStageHelper.setLastException(RetryableStageHelper.java:204)        at software.amazon.awssdk.core.internal.http.pipeline.stages.RetryableStage.execute(RetryableStage.java:82)        at software.amazon.awssdk.core.internal.http.pipeline.stages.RetryableStage.execute(RetryableStage.java:36)        at software.amazon.awssdk.core.internal.http.pipeline.RequestPipelineBuilder$ComposingRequestPipelineStage.execute(RequestPipelineBuilder.java:206)        at software.amazon.awssdk.core.internal.http.StreamManagingStage.execute(StreamManagingStage.java:56)        at software.amazon.awssdk.core.internal.http.StreamManagingStage.execute(StreamManagingStage.java:36)        at software.amazon.awssdk.core.internal.http.pipeline.stages.ApiCallTimeoutTrackingStage.executeWithTimer(ApiCallTimeoutTrackingStage.java:80)        at software.amazon.awssdk.core.internal.http.pipeline.stages.ApiCallTimeoutTrackingStage.execute(ApiCallTimeoutTrackingStage.java:60)        at software.amazon.awssdk.core.internal.http.pipeline.stages.ApiCallTimeoutTrackingStage.execute(ApiCallTimeoutTrackingStage.java:42)        at software.amazon.awssdk.core.internal.http.pipeline.stages.ApiCallMetricCollectionStage.execute(ApiCallMetricCollectionStage.java:48)        at software.amazon.awssdk.core.internal.http.pipeline.stages.ApiCallMetricCollectionStage.execute(ApiCallMetricCollectionStage.java:31)        at software.amazon.awssdk.core.internal.http.pipeline.RequestPipelineBuilder$ComposingRequestPipelineStage.execute(RequestPipelineBuilder.java:206)        at software.amazon.awssdk.core.internal.http.pipeline.RequestPipelineBuilder$ComposingRequestPipelineStage.execute(RequestPipelineBuilder.java:206)        at software.amazon.awssdk.core.internal.http.pipeline.stages.ExecutionFailureExceptionReportingStage.execute(ExecutionFailureExceptionReportingStage.java:37)        ...Caused by: java.io.EOFException: SSL peer shut down incorrectly        at sun.security.ssl.SSLSocketInputRecord.decode(SSLSocketInputRecord.java:167)        at sun.security.ssl.SSLTransport.decode(SSLTransport.java:109)        at sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1392)        ... 65 moreFollowCommentTiloChen-Aws a year agoHi Darren, did you retry? Does it consistently fail with that error?If you could install 2.4.0 with the same setup then it's quite strange because greengrass provision logic has not changed since then.ShareDarrenEB a year agoI have tried it many times. Also, it looks like my old image from 2.4.0 also suffers from the same or very similar issue, it was attempted on a home network, 2.5.3 was on a corporate network. It throws exception in the same method. I'm wondering if it has something to do with a docker network setting, because the direct install (2.5.3) to a VM by command line worked.ShareDarrenEB a year agoI have tested again my old docker image that installs 2.4.0 and I get the very same error. I've ran it successfully many times in the past.ShareAWS-User-2390175 a year agoHi DarrenYou were running on Armv7 device, right? I am very curious how did you build this alpine image, Could you share you Dockerfile?ShareDarrenEB a year agoMy Dockerfile has nothing special in it. It uses ubuntu:18.04 and I do a lot of front loading of python libraries, because they have to build from source which takes about 2.5 hours or more rather than letting a greengrass component handle it on initial startup. The trick is to use buildx feature of docker.https://docs.master.dockerproject.org/engine/reference/commandline/buildx_build/Here is my build command, you need a few commands run prior for buildx setup:sudo docker buildx build --platform linux/armhf -t darrenbraynard/ggv2-x-0_armv7:1.5 . --loadShareShow 2 more comments"


Question: Upgrade to serverless rds  major version 5.6 tp 5.7 breaking application

"The New database behaving slow and taking long time for application to come up running on container, and hence crashing the application.is there any way to speed up the database process to allow the application to cache all the data from the DB to memory and start the application ?FollowComment"

Answer: "0HiWe might need more context in such case as based on current information my understanding of the issue is that you upgraded Aurora Serverless 5.6 to Aurora Serverless 5.7 and application is taking longer to come up? (Correct me if this is wrong understanding)Does above indicate that application won't be able to connect to the Aurora Serverless 5.7 after the major version upgrade?Or it is able to connect but performs bad?Regarding to question "is there any way to speed up the database process to allow the application to cache all the data from the DB to memory and start the application"This makes me feel there is a performance issue not a connection issue?You want to know if there is a way to pre load the data into the memory (innodb_buffer_pool?) from the "volume"/"disk" (Aurora Serverless using different volume design). Since innodb cache warming does not apply to Aurora, are you referring to Survivable page cache? [+] https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Aurora.Overview.StorageReliability.html#Aurora.Overview.CacheWarmingHowever survivable page cache is designed to have faster bootup when in the unlikely event of a database failure.Suggestions:I would suggest to post more details regarding to the issue in the community.If you have support plan can also raise a support case with us.CommentShareSUPPORT ENGINEERKevin_Zanswered 3 months ago"


Question: "How to fix the issue "Neither spark.yarn.jars nor spark.yarn.archive is set, falling back to uploading libraries under SPARK_HOME?""

"I tried to create a cluster for running Spark, but after connecting pyspark, I have the following message:Python 3.7.9 (default, Feb 18 2021, 03:10:35)[GCC 7.3.1 20180712 (Red Hat 7.3.1-12)] on linuxType "help", "copyright", "credits" or "license" for more information.Setting default log level to "WARN".To adjust logging level use sc.setLogLevel(newLevel). For SparkR, use setLogLevel(newLevel).22/04/24 03:10:03 WARN Client: Neither spark.yarn.jars nor spark.yarn.archive is set, falling back to uploading libraries under SPARK_HOME.Welcome to____              __/ /  ___ / /\ / _ / _ `/ __/  '// / .__/_,// //_\   version 3.1.1-amzn-0/_/Using Python version 3.7.9 (default, Feb 18 2021 03:10:35)Spark context Web UI available at http://ip-172-31-8-242.us-east-2.compute.internal:4040Spark context available as 'sc' (master = yarn, app id = application_1650768456809_0004).SparkSession available as 'spark'.Because of the warning " Client: Neither spark.yarn.jars nor spark.yarn.archive is set, falling back to uploading libraries under SPARK_HOME", I can't load a local file by usingsc.textFile("file:///home/hadoop/filename")How to remove this warning message?FollowComment"

Answer: 0Two things you can set the spark log in session or log4j files which will take effect for all the invocations.for session level continue to use the sc.setLogLevel(newLevel) - newLevel like OFF and see it that helps.secondly if session setting is not working use log4j file to tuen off . go to file like $SPARK_HOME/conf/log4j.properties or $SPARK_HOME/conf/log4j.properties.template ( move it to $SPARK_HOME/conf/log4j.properties) and set log4j.rootCategory to OFF (default was DEBUG change to OFF).more details on this check the below link :-https://jaceklaskowski.gitbooks.io/mastering-spark-sql/content/spark-logging.htmlhttps://community.cloudera.com/t5/Support-Questions/Config-log4j-in-Spark/td-p/34968CommentShareNishAWSanswered a year agoAWS-User-0446934 a year agoThank you for your answers. How can we make these changes from the AWS EMR console?Share0For editing log4j either you log into EMR master by SSH to ec2 machine for existing running EMR cluster and use VI editor for editing the log4j.properties.if you are spinning up a new EMR and configure the log4j without logging into master node then use EMR configuration. Below link state how to use the EMR configuration https://docs.aws.amazon.com/emr/latest/ReleaseGuide/emr-configure-apps.html EMR property is "spark-log4j". Please refer the section "Configuration classifications" in below link https://docs.aws.amazon.com/emr/latest/ReleaseGuide/emr-650-release.html ( you can browse the configuration based on the EMR version you are using)CommentShareNishAWSanswered a year agoAWS-User-0446934 a year agoThank you for the useful information.Share


Question: Can we run VMware on EC2?

"Just simple question, can we run VMware on EC2 by installing VMware software into EC2 from VMware website like with usual local pc?I've found an article that says nested virtualization is not supported on EC2.https://dev.classmethod.jp/articles/how-to-use-wsl1-on-windows-server-2022/: japaneseAccutually I ran it on EC2 with Windows Server 2016, and the next caution was appeared: Compatible Setup, VMware Workstation 16 Player and Hyper-V are not compatible with this version of Windows.FollowComment"

Answer: "0I think you should explore VMware Cloud on AWS https://aws.amazon.com/vmware/ . You can also try VMware Cloud on AWS Free for 14 days with the Rapid Trial ProgramCommentShareEXPERTAWS-User-Nitinanswered 7 months ago0Simple answer, no, it's not possible to install VMware vSphere in an EC2 Instances, like nested virtualization.CommentShareEXPERTVitor Euphrasioanswered 7 months ago"


Question: Visual studio 2017 compile problems

"@REDACTEDUSERConsole compilelmbr_waf configure , not working , no idea why as I told setup to use my 2017 install , not able to find it :INFO] Using Visual Studio version 15 installed at: C:\Program Files (x86)\Microsoft Visual Studio\2017\Community[WARN] VSWhere could not find an installed version of Visual Studio matching the version requirements provided (-version [15.7.27703.2035,15.9.28307.665]). Attempting to fall back on any available installed version.[WARN] Lumberyard defaults the version range to the maximum version tested against before each release. You can modify the version range in the WAF user_settings' option win_vs2017_vswhere_args under [Windows Options].[WARN] Unable to initialize platform (Unable to find Visual Studio 2017 (-version [15.7.27703.2035,15.9.28307.665]) C++ compiler and/or Windows Kit : msvc: Could not find a valid Visual Studio installation for building.). Disabling platform.THis too:[WAF] 'Configure Projects' successful (28.866s)[WAF] 'configure' finished successfully (33.041s)[WAF] Executing 'msvs' in 'e:\Amazon\Lumberyard\1.19.0.0\dev\BinTemp'[INFO] Regenerating 3rd Party settings file...Unable to generate solution for 'Visual Studio 2017'. Make sure it is installed and enabled in Setup Assistant. Skipping visual studio solution generation[WAF] 'msvs' finished successfully (4.039s)[WAF] Executing 'generate_uber_files' in 'e:\Amazon\Lumberyard\1.19.0.0\dev\BinTemp'[WAF] 'generate_uber_files' finished successfully (57.474s) , indicating something was successful, but clearly couldn't find VS2017 so saying 'successful' is dubious ?HOw to fix ? ;)thxFollow"

Answer: "0Hi @REDACTEDUSERThe most likely reason is due to the Visual Studio version you have installed being newer than any version we tested with Lumberyard. Posted here as well for reference: https://forums.awsgametech.com/t/unable-to-generate-solution-for-visual-studio-2017/6840/1#answer-77022To resolve this issue we need to modify your build settings fileOpen a command prompt and navigate to your Lumberyard dev folderRun the command to generate a build settings file if you don't already have onelmbr_waf configureOpen dev/WAF/user_settings.options with your favorite text editorFind the following line which specifies the valid versions of visual studio 2017;win_vs2017_vswhere_args = -version [15.7.27703.2035,15.9.28307.665]Change it to this which allows all of 'em. NOTE: make sure to remove the semi colon at the beginning of the linewin_vs2017_vswhere_args = -version [15.7.27703.2035,16]Back in your command window runlmbr_waf configureAfter this, your version of Visual Studio should be properly detected.SharerePost-User-5841084answered 4 years ago0Hi and thx for assistance, = I altered file as asked,but still getting this:[WAF] Configure "win_x64_vs2017 - [profile,performance_dedicated,profile_test_dedicated,debug_dedicated,debug_test_dedicated,release,release_dedicated,debug_test,debug,performance,profile_dedicated,profile_test]"[INFO] Using Visual Studio version 15 installed at: C:\Program Files (x86)\Microsoft Visual Studio\2017\Community[WARN] Unable to initialize platform (Unable to find Visual Studio 2017 (-version [15.7.27703.2035,16]) C++ compiler and/or Windows Kit  : msvc: Could not find a valid Visual Studio installation for building.). Disabling platform.How do I resolve this ?ThxSharerePost-User-2755327answered 4 years ago0Your missing required VS Items (a SDK, and the compiler)The Visual Studio 2017 default installation may not include all of the required features to run Lumberyard. Ensure these features are selected during installation.To verify your current installation of Visual Studio 2017From Windows, click Control Panel, Programs and Features, Microsoft Visual Studio version_number.OR    Search *Visual Studio Installer*Select Modify.On the Workloads tab, do the following:    Select Universal Windows Platform Development and select the following:        C++ Universal Windows Platform tools        Graphics debugger and GPU profiler for DirectX    Select Desktop development with C++ and select the following:        Visual C++ ATL for x86 and x64*        Visual C++ MFC for x86 and x64*    Note    *You can run Lumberyard Editor without Visual C++ ATL and MFC libraries. However, to build Lumberyard Editor, you must install these libraries.    Select Game development with C++ and select the following:        Windows 8.1 SDK and UCRT SDKOn the Individual components tab, under Compilers, build tools, and runtime:    You must select at least one version of the VC++ 2017 toolset.Make sure all that is installedmake sure you have all that, as that is usually the number one causeand choose to use 2017 instead of 2015SharerePost-User-1354821answered 4 years ago0I'lll check, but I DO have 2017 already selected.I'll let you know, and TY so much, when fixed;)cheersSharerePost-User-2755327answered 4 years ago0[quote="Finchy, post:4, topic:6794"]Windows 8.1 SDK and UCRT SDK[/quote]H iAny reason I need  Windows 8.1 SDK and UCRT SDK ? I have win 10 pro, or is that simply one of the current LY requires,if so good.All else is fine, just verifing as I'm  trying to save hdd space.Id use my ssd but no room atm.TYSharerePost-User-2755327answered 4 years ago0an OS is not the same as a SDK.The info i put tells how to get an SDKSharerePost-User-1354821answered 4 years ago0Not what I meant, do I NEED the 8.1 sdk given I have windows 10 ?SharerePost-User-2755327answered 4 years ago0Hello, did someone forget me ? Does  this still matter in 1.22 ?Finchy MISundersood me, I know is post wasn't 'about' the 'OS',I asked WHY I need windows 8sdk, given I have windows10,,,simple issue, I was comoletely misunderstood.6 months and nothing...ThxSharerePost-User-2755327answered 3 years ago0SDK stands for software development kit. Microsoft operating systems inherit a lot of legacy, Win10 is just a minor evolution of what Win8 and Win7 is (under the shinny user interface, we are speaking about the OS internals). You can even install Win8 SDK on Win7.Install all the "required" SDKs and software that Lumberyard Setup Assistant in Advanced Mode lists, you can leave out optional stuff, depending what you checked on the "Get started" dialog of the Setup Assistant.SharerePost-User-3297722answered 3 years ago0I know what SDK is, and sure I don't mind knowing its needed,thats all I needed to know, hopefully this time compiing will work having sdk.Btw, I saw a post somewhere on forum that LY has 'open world map' that UE4 doesn't but epic does have ability to use large maps with world composition like 20xtiles X 20xtiles or larger.Any idea what they meant therefor by open world map in ly ?Somehow again I missed post, sorry about that. Using mail in windows 10 has no filters which doesn't help at all.ThxSharerePost-User-2755327answered 3 years ago"


Question: Can AWS WAF check the response message

"Hi guys!I have a question about AWS WAF.Normally, we know AWS WAF will check the incoming traffic from internet to websites. However, will WAF check the outgoing traffic that respond from our website to the users.If yes, how can we configure this feature.FollowComment"

Answer: "0Accepted AnswerNo, you cannot do that, you only have Allow, Block or Count as actions on the incoming requests. You can use Cloudfront with lambda@edge to process the answers as part of your architecture with WAF integrated (for the incoming).Best,CommentShareJuanEn_Ganswered 7 months agoSteven 7 months agoThanks for your information. If you have any document that proves this information, please share with me.Share"


Question: Elastic IP Address Missing ATTN AWS Personnel

"This is a question for AWS PersonnelI had an elastic IP address, 204.236.235.244, assigned to an instance, i-026b1b4d3ee5121f7, and the instance was reported down and when I went into our dashboard, the instance was stopped and the elastic IP associated with it has just disappeared.  It is no longer displaying the the Elastic IP section.  No one else has access to this so what happened?  Can I get the IP back?FollowComment"

Answer: "0To answer your question, we require details that are non-public information. Please open a support case with AWS using the following link - https://support.console.aws.amazon.com/support/home#/case/createCommentShareKumar_Sanswered 5 months ago"


Question: bash: rosrun: command not found RoboMaker

"I'm doing the Hello World tutorial in RoboMaker and I want to visualize my simulation application in Gazebo, and after having runned both the robot application and the simulation application I have typed the following commands:$ export DISPLAY=:0$ xhost +$ docker container ls$ docker exec -it elegant_ardinghelli bash$ rosrun gazebo_ros gzclientwhere "elegant_ardinghelli" is the container name that contains the docker image of the simulation application, but when I run the last command the following error pops up: "bash: rosrun: command not found".Do you know what could be the source of the error?FollowComment"

Answer: "1It could be you didn't source the setup.bash file.Double check that you have a simulation-entrypoint.sh or equivalent file that sources setup.bash and that the file is copied in the Dockerfile for the simulation application.For more information, see Creating an image for the simulation application in the documentation.CommentShareEXPERTgoldericanswered a year agoMatteo Sartoni a year agoThank you very much! I did as the guide says, make the folders with the Dockerfiles and the entrypoints, yet I obtain the same result. I have installed rosbash to have rosrun and rospack-tools to have rospack, but know the problem is "rospack Error: package 'gazebo_ros' not found". Can it due to some permission problems?Share"


Question: IoT Core message frequency

"Hi In my IoT project sometimes devices will send MQTT message every 3 seconds. Does IoT Core support this frequency, or do I need to expect some delays? I am trying to build real time device monitoring.ThanksFollowComment"

Answer: "0Accepted AnswerHi Ozy smile. AWS IoT Core supports up to 100 messages per second per MQTT client connection. Please see limits here: https://docs.aws.amazon.com/general/latest/gr/iot-core.html#message-broker-limits . In particular "Publish requests per second per connection".So one message every 3 seconds is not, in general, a problem. However, much depends on what exactly you mean by "real time device monitoring". There will be some time taken for messages to traverse the (vagaries of the) internet and reach IoT Core, plus some additional time for messages to propagate through IoT Core, rules engine and so forth before you act upon them.CommentShareEXPERTGreg_Banswered 9 months agoOzy smile 9 months agoThanks for the answer.When I say "real time":  Some of my devices changes their status with some other data very often and I would like to update the status data to broker so that I can see them on browser, screens etc.Share"


Question: Lambda filesystem 'failed to stat'

"While running in the provided.al2 runtime, my lambda, which is written in Rust, is giving the following error:failed to stat /tmp/myrepo/.gitI'm using the git2 crate to clone a git repository (which is empty) into the /tmp directory.  The clone process seems to be succeeding.  The files are created on the filesystem from what I can tell, but when trying to verify the clone, stat isn't able to see the files or get information about them.I suspect this is because /tmp may actually be a shared directory under the hood, which may be the source of the problem.While troubleshooting, I also tried attaching an EFS share, which produced the same results.  I was able to clone the repository, write the files to disk (in this case an empty repository with .git folder), but cannot call stat on them.I'm almost to the point of changing my approach, but wanted to see if my suspicions could be confirmed and/or if there's a way to resolve this without rewriting the application.UpdateTo deploy the lambda, I've zipped the bootstrap binary, uploaded to S3, and deployed via CloudFormation template.  Below is the CloudFormation template I've used:AWSTemplateFormatVersion: "2010-09-09"Parameters:  LambdaBuildZipFile:    Type: String  VpcSecurityGroupIds:    Type: String  VpcSubnetIds:    Type: String  LambdaSourceBucketName:    Type: String  PostgresLibpqLayerArn:    Type: StringResources:  LambdaFunctionRole:    Type: AWS::IAM::Role    Properties:      AssumeRolePolicyDocument:        Version: "2012-10-17"        Statement:          - Effect: Allow            Principal:              Service: lambda.amazonaws.com            Action: sts:AssumeRole      ManagedPolicyArns:        - arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole        - arn:aws:iam::aws:policy/service-role/AWSLambdaVPCAccessExecutionRole        - arn:aws:iam::aws:policy/AWSCodeCommitFullAccess        - arn:aws:iam::aws:policy/AmazonRoute53FullAccess        - arn:aws:iam::aws:policy/AmazonRDSFullAccess  Lambda:    Type: AWS::Lambda::Function    Properties:      Handler: main      Runtime: provided.al2      Role: !GetAtt LambdaFunctionRole.Arn      Timeout: 300      VpcConfig:        SecurityGroupIds: !Split          - ","          - !Ref VpcSecurityGroupIds        SubnetIds: !Split          - ","          - !Ref VpcSubnetIds      Layers:        - !Ref PostgresLibpqLayerArn      Code:        S3Bucket: !Ref LambdaSourceBucketName        S3Key: !Ref LambdaBuildZipFileFollowComment"

Answer: "0Can you provide more details on the exact steps you are following? Are you trying to deploy your code to lambda as a container or as a zip file?You may want to take at this repo for an example in Rust - https://github.com/awslabs/aws-lambda-rust-runtimeCommentShareEXPERTIndranil Banerjee AWSanswered 7 months agoicto-dev 7 months agoThe lambda is deployed and is running fine.  It's zipped, uploaded to S3, then deployed via CloudFormation.  I've included the CloudFormation as an update to the original question.The code in the lambda is fetching a git repository from CodeCommit, cloning it to the local filesystem.  This is where I'm having an issue - it seems that my application is able to write to the filesystem, but it doesn't seem that it is able to do other operations wiith the filesystem, like stat, which is trying to collect information about the files on the system.Is the /tmp directory a shared volume?ShareIndranil Banerjee AWS EXPERT7 months agoI will recommend reading this https://docs.aws.amazon.com/lambda/latest/dg/lambda-runtime-environment.html to understand more about how the lambda life-cycle works.Yes it is possible that the same lambda microVM is used for multiple invocations of the lambda function and the /tmp folder will be re-used across all those functions. Please look at the Temporary Storage with /tmp section in this blog - https://aws.amazon.com/blogs/compute/choosing-between-aws-lambda-data-storage-options-in-web-apps/Share"


Question: Client vpn federated connection

"Guys, good afternoon!Need help!I'm doing a SAML integration between aws and google, to connect the aws vpn client with federated authentication, but I'm getting a 403 error, I've reviewed all the settings, and it doesn't work, when I configure it to use the Identity Center it works normally authenticating through google and accessing the console, but using the vpn client connection, it returns a 403 error whenever it tries to open the login screen to connect to the vpn.Has anyone experienced this problem?403 That’s an error.Error: app_not_configured_for_userService is not configured for this user.Request DetailsFollowComment"

Answer: "0Hello,Above mentioned error is related to the incorrect configuration on IDP side.If google does not have SAML application for AWS client VPN  on your google.To create a SAML-based app using an IdP that's not listed in the preceding table, use the following information to configure the AWS Client VPN service provider information.**Assertion Consumer Service (ACS) URL: http://127.0.0.1:35001**Audience URI: urn:amazon:webservices:clientvpnThe following attribute is required.Attribute DescriptionmemberOf The group or groups that the user belongs to.Attributes are case-sensitive, and must be configured exactly as specified.CommentShareAnjali_Vanswered 2 months ago"


Question: EBS CSI Driver upgrade

"When I checked the cluster storage class to upgrade EBS CSI driver before cluster 1.23 upgrade, I observed two more storage classes like EFS and EBS(gb2), NSF. In addition, the PV and PVC only adhere to the efs storage class.Should we upgrade both the EFS and EBS CSI drivers in this scenario?  And will upgrading have any effect on the live environment?FollowCommentmyronix88 a month agoI think yes, I don't know about EFS. But updating EBS should be fast as it only updates/restarts EBS related pods.Share"

Answer: "1Accepted AnswerHello,Before upgrading to EKS 1.23, You observed the storage classes EBS and EFS in your cluster. So you want to confirm whether it is needed to update both EBS and EFS Drivers in this scenario.You mentioned that your pods are using EFS storage class for PV/PVC so considering that you are not using EBS volumes for your pods anywhere in your cluster, you can proceed with the EKS upgrade to 1.23. As mentioned in the release notes[1] also that it is required to upgrade EBS driver.It is not required to update EFS CSI Driver before EKS 1.23 upgrade whereas EBS CSI Driver should be updated/migrated from the Kubernetes in-tree to container storage interface (CSI) . Please see the FAQ section using [3].You can use the latest minus one version for EFS CSI Driver but it is recommended to use the latest version.Note: Please do the EKS upgrade process in similar non-production environments before replicating in the production environments.I hope this information is helpful.[1] https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html#kubernetes-1.23[2] https://docs.aws.amazon.com/eks/latest/userguide/efs-csi.html[3] https://docs.aws.amazon.com/eks/latest/userguide/ebs-csi-migration-faq.htmlCommentShareSUPPORT ENGINEERrePost-User-9634908answered a month ago"


Question: DynamoDB in SFN -> Why does it request an ITEM value when it clearly shouldn't

"I'm trying to push a DynamoDB record through SFN while setting up a conditional expression but for some reason it requests an "ITEM" field.I don't want to push an ITEM. I want to push a conditional expression.According to the API Docs, it should work.Here's my code:{  "StartAt": "MyStep",  "States": {    "MyStep": {      "Type": "Task",      "Resource": "arn:aws:states:::dynamodb:putItem",      "Parameters": {        "TableName.$": "$.table_name",        "Key": {          "test_id_path_method_executor_id": {"S.$": "$.update_key.test_id_path_method_executor_id"},          "result_timestamp": {"S.$": "$.update_key.result_timestamp"}        },        "ConditionExpression": "#max_db < :max_values",        "ExpressionAttributeValues": {          ":max_values": {"N.$": "$.result_value"}        },        "ExpressionAttributeNames": {          "#max_db": "max"        },        "UpdateExpression": "SET #max_db = :max_values"      },      "Next": "EndSuccess"    },    "EndSuccess": {      "Type":"Succeed"    }  }}The error I get is this:There are Amazon States Language errors in your state machine definition. Fix the errors to continue.The field 'Item' is required but was missing (at /States/MyStep/Parameters)Am I doing something wrong?Or is it an AWS problem and I should create a Support ticket instead?Thanks!FollowComment"

Answer: "0Accepted AnswerI used "putItem", instead of "updateItem"...CommentSharemariusmitrofananswered a year ago"


Question: Error on DeleteEndpoint operation: Cannot update in-progress endpoint

"Hi,I have created and endpoint in sagemaker using boto3 but never finishes creation, is stuck in Creating status for few days now. I have tried to delete it using the aws cli api but i get the message:An error occurred (ValidationException) when calling the DeleteEndpoint operation: Cannot update in-progress endpointUsually endpoint fails after some time and can deleted but this time doesn't fail. Is there any way to force deletion?FollowCommentMarc a year agoI would suggest creating a Support Case and providing the ARN of the Endpoint that is stuck in "Creating".https://docs.aws.amazon.com/awssupport/latest/user/case-management.htmlShare"


Question: SES - change address on outgoing message?

"Is there a way to change the email address of an outgoing message? We use SES for outbound email delivery, and use Google for receiving mail. Our website sends notification emails via SES.I would like to have SES route any emails that are addressed to a single particular address to a different address. The reason for this is, one of our applications requires an email address for administrative users. We would like notification emails that the app sends to this address (which are sent through SES) to actually be delivered to a different user.The app displays the administrative address on the site, which leads to lots of junk mail. But it requires an address be set for administrative users, we can't just delete the address. And we would like to still receive system notifications intended for that user.Since only the app is sending email via SES, and none of the users or other systems, if we can re-route that single address in SES and actually deliver it elsewhere, we could accomplish our goal.The address in question is a verified identity within SES (to prove we own the address), but we have disabled receiving since verifying it due to junk mail.FollowComment"


Question: GuardDuty finding segregation

"I have checked below link and I came to know that default behavior of GuardDuty findings is aggregation of new information.https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_findings.html#:~:text=GuardDuty%20finding%20aggregation,within%20your%20account.https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_findings.htmlwe do not want to aggregate the information.Could anyone confirm if we can do finding segregation to do not update new information.FollowComment"

Answer: "0Why do you not want to aggregate the information?If GD was to raise separate findings customers would quickly be overwhelmed with findings and would find it hard to address the issue. By having a single finding and then updating it continuously, it is easier for you to then see which findings to fix (you can see which findings have been open for the longest time for example), then when you fix the issue you can close that single finding down.It is not currently possible to have new findings raised for the same security issue on the same instance - that is by design.CommentShareAlex_AWSanswered a year ago"


Question: How to list only the specified GW and Device

"HI.I am using IoT Core's LoRaWAN.I want to limit the gateways and devices available to each user.When logging into the console with that user, I want the management list view to show only the gateways and devices available to each user.I have tried in the policy settings, but I can only set whether all gateways or devices are displayed or not.When I ask ChatGPT they say it is possible, but the example provided does not work correctly.:-)How can I make sure that only the gateways and devices that are visible for each user are listed?thank you.FollowComment"

Answer: "0Hello,When using the AWS Management Console to view devices and gateways in IoT Core for LoRaWAN, the AWS management Console would make the following API operations, to view the information:ListWirelessGateways[1] - to list all Wireless gateways via the Management ConsoleListWirelessDevices[2] - To list all Wireless devices via the Management Console.As such, the IAM user/role viewing the devices and gateways, would require the following permissions to be allowed within the attached IAM policy:iotwireless:ListWirelessGatewaysiotwireless:ListWirelessDevicesAs indicated in the Actions defined for IoT Core for LoRaWAN[3], the actions "ListWirelessGateways" and "ListWirelessDevices" does not have a value specified as the Resource element, as such, the resource element for the above-mentioned actions would need to be set as "*", meaning that it is possible for user, to only see either all the devices and gateways, or none of the devices and gateways via the AWS managament console.Having noted the above, the following 2 approaches can be considerd:You can restrict specific actions that are defined here[3], to be allowed on a specific AWS resource, either by specifying the ARN of the AWS resource as the "Resource" element of the policy, or by using policy condition keys, such as the Global Condition key "aws:ResourceTag"[4], as seen in the example policy here[5]. You would essentially still need to specify "*" as the resource element, for both the "iotwireless:ListWirelessGateways" and "iotwireless:ListWirelessDevices" action.Although this approach will allow the user to still see all devices/gateways via the Management Console, the user would be able to only obtain specific information regarding their own devices/gateways, as well as being able to manage only their own resources.You may also consider implementing a multi-account strategy for your environment[6]. Essentially, you would create an AWS Organization, where you would then create member AWS Accounts within the AWS Organization. Doing so will allow you to achieve the following, specifically for the use-case provided:a. Allows you to isolate visibility of AWS resources to specific users/teams to the account level, especially if users are viewing AWS resources via the AWS Managament console, without the need to using restrictive IAM policies for the IAM users/roles.References:[1] ListWirelessGateways - https://docs.aws.amazon.com/iot-wireless/2020-11-22/apireference/API_ListWirelessGateways.html[2] ListWirelessDevices - https://docs.aws.amazon.com/iot-wireless/2020-11-22/apireference/API_ListWirelessDevices.html[3] Actions, resources, and condition keys for AWS IoT Core for LoRaWAN - Actions defined by AWS IoT Core for LoRaWAN - https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiotcoreforlorawan.html#awsiotcoreforlorawan-actions-as-permissions[4] AWS global condition context keys - aws:ResourceTag/tag-key - https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-resourcetag[5] AWS IoT identity-based policy examples - Viewing AWS IoT resources based on tags - https://docs.aws.amazon.com/iot/latest/developerguide/security_iam_id-based-policy-examples.html#security_iam_id-based-policy-examples-view-thing-tags[6] https://aws.amazon.com/organizations/getting-started/best-practices/I sincerely hope the above helps address the query of concern.CommentShareSUPPORT ENGINEERBradley_Aanswered 3 months ago"


Question: How to remove or change a load balancer type with elastic beanstalk?

"Hello,I'm running into a bit of an issue with trying to change the load balancer with elastic beanstalk. We are trying to change from a classic load balancer to an application load balancer in order to utilize the built in http2 support. I was able to delete the old one from EC2 load balancer dashboard, setup the new application load balancer, add the new dns name in Route53 and everything from the user side is working fine. However now when we try to deploy an update we are getting an error thats causing a roll back from EBS saying "There is no ACTIVE Load Balancer named..." despite using the same name as the old one. I checked the cloud formation configuration for the environment and its pointing to the new one and the link works. Does anyone know how to fix this without having to delete the entire environment and remake it?Thanks,BlayzeFollowComment"

Answer: "0Hello,Currently, Beanstalk does not support changing of Load Balancer type. If you want to change the Load Balancer type, you need to create a new environment with the desired Load Balancer type.I see you have made changes to the environment resources out-of-band which is not recommended as it might break the environment like the issue that you are encountering. Therefore, to fix this issue, the only option we have is to create a new environment.CommentShareAWS-User-0016272answered 3 years ago"


Question: Trouble starting docker daemon in CodeBuild

"I'm seeing dockerd is missing a bunch of stuff related to storage drivers out of the box, whether I use my own image or an AWS-managed one. For some reason CodeBuild uses this ancient 4.x kernel which means hunting for linux image headers packages in modern Ubuntu versions is impossible. Typical dockerd output:ERRO[2023-03-07T14:20:19.611162560Z] failed to mount overlay: invalid argument     storage-driver=overlay2ERRO[2023-03-07T14:20:19.611239386Z] exec: "fuse-overlayfs": executable file not found in $PATH  storage-driver=fuse-overlayfsERRO[2023-03-07T14:20:19.611337258Z] AUFS was not found in /proc/filesystems       storage-driver=aufsERRO[2023-03-07T14:20:19.618839003Z] failed to mount overlay: invalid argument     storage-driver=overlayERRO[2023-03-07T14:20:19.694094614Z] Udev sync is not supported. This will lead to data loss and unexpected behavior. Install a more recent version of libdevmapper or select a different storage driver. For more information, see https://docs.docker.com/engine/reference/commandline/dockerd/#storage-driver-options  storage-driver=devicemapperI can build Dockerfiles (slowly) in this degraded state, but spinning up single-node k8s clusters or docker-compose environments is almost unusable.And kernel version for reference Linux 1ce6e6541803 4.14.281-212.502.amzn2.x86_64 #1 SMP Thu May 26 09:52:17 UTC 2022 x86_64 x86_64 x86_64 GNU/Linux.Is there something else I can configure? Why would docker support be so broken out of the box in CodeBuild, even with AWS-managed images?FollowComment"