Question: What could I do when the amazon opensearch instance is stuck in update for more than a week?

"Service Name: Amazon OpenSearch ServiceVersion Name: Elasticsearch 6.3Service software version: updating to R20211203-P2 (latest)Start time: 16/12/2021, 17:11:14 (UTC), checked from the Notifications tabCluster Status: 16-17/12 are green, then red from 18-29/12, I have then restored it from the healthy automated snapshot, becomes green again until nowInstance Status: processingData node: 2 (desired to be 1)What could I do when I have such situation? The status is stuck in processing.Any method to handle it as I would like to perform version update from 6.3 to 6.8 and to opensearch?Remarks:I have another production instance that finished the service software update within 1 hour.FollowCommentCharlie Cheng a year agoFollow up on my question: I finially solved it by creating a new instance of same elastic search version.Then recover the snapshot from the old one to the new one and remove the old one (which was stuck in processing)It is fine to remove a processing elastic search instance at last.The only change is the name of the instance ( you might need to recreate it again to use back the old one's name)Share"

Answer: "1Good question.  Sorry to hear about your issues!AWS recommends resolving the red cluster status first before reconfiguring your OpenSearch Service domain.  Typically a red cluster status means 1 primary shard and the replicas are not allocated.  OpenSearch will take snapshots but these fail when the red cluster status persists.2 of the most common causes are failed cluster nodes and the process crashing from a heavy load.  The following can help identify the issue:GET /_cluster/allocation/explainGET /_cat/indices?vFrom that info, you can try the following:Delete the problematic indexRestore a snapshotDelete documents from the indexChange the index settingsReduce the number of replicasDelete other indices to free up disk space.For failed cluster nodes or more complex issues that aren't solvable by the above, you can reach out to AWS Support for more help as detailed here: https://docs.aws.amazon.com/opensearch-service/latest/developerguide/handling-errors.htmlCommentSharejsoncanswered a year agoCharlie Cheng a year agocurl -XGET 'https://xx/_cat/indices?v'health status index   uuid                   pri rep docs.count docs.deleted store.size pri.store.sizegreen  open   .kibana xx 1   1          2            0     18.7kb          9.3kbgreen  open   book    xx 5   0      52598          150     24.1mb         24.1mbcurl -XGET 'https://xx/_cluster/allocation/explain?pretty'"reason" : "unable to find any unassigned shards to explain [ClusterAllocationExplainRequest[useAnyUnassignedShard=true,includeYesDecisions?=false]"For both suggested methods, they both seem normal at this moment, dunno why it's still stuck in processingShare"


Question: Enhanced fan-out and data analytics

"Hi all,from what I understand there is currently no option to use data analytics to process stream via an enhanced fan-out. Any plans on introducing it?Thanks,AleksanderEdited by: aleksandersss on Sep 21, 2020 3:45 PMFollowComment"

Answer: 0my other account  I guess I've noticed the issue. Flink itself doesn't support consuming enhanced fan-out:https://issues.apache.org/jira/browse/FLINK-17688I guess we need to wait tillFlink 1.12 gets releasedit gets supported by Data AnalyticsCommentSharealeksandersu83answered 3 years ago0In case anyone comes across this post: it's now possible to use enhanced fan-out in Kinesis Data Analyticshttps://aws.amazon.com/about-aws/whats-new/2020/10/apache-flink-kinesis-consumer-supports-efo-http-2-data-retrieval/CommentSharealeksandersssanswered 2 years ago


Question: for free use EC t2 or t3

"hi, i have a question. limit for EC t2(t3) of 750 hours is for each individual server, or 750 hours is the total hours for using all EC t2(t3). Are there any limits on the number of EC t2(t3) solutions I can create?FollowComment"

Answer: "1Hi,I can answer your question about how many free hours you get.You get 750 hours free for Linux, RHEL, or SLES and another 750 hours free for Windows.For example, if you launch one Linux EC2 instance, you can use it for free for 750 hours per month. If you launch 10 Linux EC2 instances, you can use each instance for free for 75 hours per month, or any combination of hours for free as long as you don't exceed a total of 750 hours for all 10 of those instances. In addition, you can launch one Windows EC2 instance and use it for free for 750 hours per month, or several Windows instances as long as you don't exceed a total of 750 hours for all your Windows instances. If you use them for longer than 750 hours in a month, you'll pay the On-Demand rate for the extra time used.You only pay for an instance that is in the running state. To avoid extra charges, make sure to terminate or stop your instances if you don't need them.You can find more information about the AWS Free Tier for EC2 at this link: https://aws.amazon.com/free/compute/?p=ft&z=subnav&loc=3Kind regards,Marilyn AWSCommentShareMarilynAWSanswered 2 months agoEXPERTkentradreviewed 2 months ago"


Question: Internal failure occurred while resolving this field

I'm getting this error from a graphql query that I'm polling from a website.  The query succeeds an arbitrary number of times and then returns this error.  The resolver is a simple SELECT from an RDS database.  There are no other details in the error response.  Is there some way I can get further insight into this?FollowComment

Answer: "0I've run into a similar problem.I have found no way to see the actual error in Log Insights either.The error in the graph response looks something like this"errors":[{"path":["myFunction"],"data":null,"errorType":"InternalFailure","errorInfo":null,"locations":[{"line":8,"column":5,"sourceName":null}],"message":"An internal failure occurred while resolving this field."}]This does not trigger fieldInError = 1 in any log nor does it log the message or errorType.CommentSharecheneveldanswered 3 years ago"


Question: Receiving limits on AWS WorkMail

"Hi,We have specific need where we receive a large number of emails regulary. We receive up to 500 emails per minute from a single email adress. I read in the faq https://aws.amazon.com/workmail/faqs/ that there are no receiving limits with Aws WorkMail, however your messages can be queued or even rejected if large volume of emails are received in a short period of time.Is there anyway to find out how many emails (per minute/per hour) actualy constitutes a large volume of incoming email in a short period of time?Is there a way to insure that receiving emails are not rejected in any way at least from a single sender?Thank youFollowComment"

Answer: "0Hi,AWS WorkMail is a business mail and calendaring solution. You use case sounds one that does not really fit WorkMail as a normal mail user would not process 500 mails per minute. You can use SES Inbound rules to save incoming mail to a S3 bucket would that fit your use case?Kind regards,RobinCommentShareMODERATORrobinkawsanswered 9 months ago"


Question: vpc flow log no data incloudwatch

"we set up a ec2 instance and run python3 http server on port 63320,then we create a vpc flow log and destination is cloudwatchthen we visit the ec2 using http and it shows the current file under EC2 home directory, we download one file from the chrome browser. but there is no log stream generated after 2 hour. why there is no log streamFollowComment"

Answer: "1Hi there,It looks like VPC Flow Log is unable to assume the role. Could you check the IAM role associated with the VPC Flow log and make sure it has required Trust Relationship that is allowing VPC Flow Log to assume that role. The trust relationship should look like below:{  "Version": "2012-10-17",  "Statement": [    {      "Effect": "Allow",      "Principal": {        "Service": "vpc-flow-logs.amazonaws.com"      },      "Action": "sts:AssumeRole"    }  ]} This can also be seen from Step 9 of this document which is creating a Role for VPC Flow Log and changing the Trust Relationship policy from Allowing EC2 to Allowing VPC Flow Log. Once VPC Flow Log is able to assume the associated role the Flow Logs should start appearing on your CloudWatch Log Group, considering you have confirmed that adequate permissions are in place on the role.Additionally, it seems like you are using existing role possibly used by other services such as EC2 - if this is the case we recommend you to create a separate new role just for VPC Flow Logs purpose to avoid any unintentional issues caused by permission issues. You can follow the document provided above to create the required role.Hope this helps!CommentShareSUPPORT ENGINEERMunkhbat_Tanswered a year ago0Do you have an IAM role associated with the VPC Flow Log with enough permissions to publish into CloudWatch logs? If not, check this link - https://docs.aws.amazon.com/vpc/latest/userguide/flow-logs-cwl.html -. It explains the permissions needed.CommentSharePablo_Sanswered a year agoAWS-User-6667474 a year agoyes, my iam role is AdminAccess for VPC flow log, there is error message "log destination is not accessable", but my log destination is /aws/vpc/flowlog1, if I double click this destination, it will go to the log group, but no logstream. not sure whyShare"


Question: "Route 53, problems with the DNS propagation to South America Region"

"Hello, I have configured a Route 53 DNS Manager for a custom Chilean domain (autoinfo.cl) and waited until the propagation across the internet. The propagation has been successful for most of the world regions, but for the South America region it does not propagate correctly, showing that they did not resolve to three servers in the country of Brazil. Reviewing further, I detected that when solving the Query a "SERVFAIL" rcode is obtained on the servers with problems.At the moment I don't know what the problem is and how I should proceed to solve this situation, any help you can provide me would help me a lot.Thanks.FollowComment"


Question: SSL dont work on my domain

hi. i have a Certificate Manager in my domain and its valid but the website works only with http it doesn't work with https . what's the problemeFollowComment

Answer: "1Hey there,There's not a whole lot of information in your request, so responses are going to be vague.It sounds like you requested and were successfully issued with a TLS certificate through AWS ACM, but haven't attached it to anything along the serving path of your website. Simply having the certificate issued to you does not protect your website.If I run with the assumption that you're hosting a website from an EC2 instance, you're going to either:Put a Load Balancer in front of the instance (and route traffic to it instead of your instance) and then create a HTTPS Listener on the LB, and place the certificate on that Listener.Or you're going to create a CloudFront Distribution and set the instance as the Origin. This means that in order to associate your ACM-issued certificate, you will have to have it issued in us-west-1 so that it can be used with the CF Distro.I hope that information puts you on the right track and helps you to understand what you need to do to get you site up and running with HTTPS. If you need more help, please give information on your setup. E.g. Domain name, where the website is hosted (S3, EC2, ElasticBeanstalk, etc).CommentShareCiaran Carragheranswered a year ago0Hi,Please see the following AWS blog and video that provides guidance on how to set this up.Thanks.CommentShareRajarshi_Danswered a year ago"


Question: Is openssl11 on Amazon Linux 2 up-to-date with security patches?

"In this post https://forums.aws.amazon.com/ann.jspa?annID=7562 it was announced that openssl 1.1.1 was available as a separate package and could be used for building ones own code against on the platform. Is that release still up-to-date with security patches? If I install openssl11 and run "openssl11 version" I get "OpenSSL 1.1.1c FIPS  28 May 2019". The current version is 1.1.1h. I know that sometimes the RHEL/CentOS-type distributions backport security patches without updating internal version numbers, but I'm a bit skeptical because the date listed is 2019 and there was a high severity bug that had a patch announced in April 2020 https://www.openssl.org/news/vulnerabilities-1.1.1.html and I don't see any indication that it's been fixed in the package.FollowComment"

Answer: "0The only entry listed on the Amazon Linux 2 Security Patches page https://alas.aws.amazon.com/alas2.html for openssl11 is ALAS2-2020-1456 https://alas.aws.amazon.com/AL2/ALAS-2020-1456.html. It says it was released July 2020, which makes me think that it'd be up-to-date, but the CVEs mentioned there don't line up with the April 2020 CVE listed on the OpenSSL page https://www.openssl.org/news/vulnerabilities-1.1.1.html. So I'm just pretty confused as to what's exactly up-to-date where.CommentSharepetercooperjranswered 2 years ago0Ah, I think I see what's happening now. CVE-2020-1967 didn't affect 1.1.1c, so in fact all security patches have been applied to the openssl11 packages. (Well, maybe not CVE-2020-1971 that just was announced today, but hopefully we'll see them patching that soon too.)Hopefully reading through this confusion of mine helped someone else, though. :)CommentSharepetercooperjranswered 2 years ago0And indeed, they just patched CVE-2020-1971 for both openssl and openssl11.https://alas.aws.amazon.com/AL2/ALAS-2020-1573.htmlAll my fears that they weren't paying attention to updates are assuaged. Thanks!CommentSharepetercooperjranswered 2 years ago0openssl11, while still at version 1.1.1c is receiving full support.  As others have noted in this thread, we have been backporting patches for vulnerabilities that we have found to be applicable to 1.1.1c and we intend to keep updating the openssl11 package in the future.CommentShareAWS-User-0475464answered 2 years ago"


Question: DNSSEC keys deletion for domain failed

"Hello togetherwhen i try to delete the dnssec keys on my Domain tometzki.de i got the following error via mail:Removing DNSSEC associated with the domain tometzki.deWe're sorry to report that the operation failed after we forwarded your request to our registrar associate. This is because:2400 : Command failed (549 Command failed; 53300102912 Nameserver error [ERROR: 901 Unexpected RCODE (target, entity, RCODE) (ns-1933.awsdns-49.co.uk./205.251.199.141:53, tometzki.de, REFUSED)])Contact Amazon Web Services Customer Support, and we'll figure out what happened.Could you help me ?best regardsDamianFollowCommentDtometzki a year agoProblem is solved.Share"


Question: AppConfig and Multiple Accounts

"Our application is deployed across multiple AWS accounts, and completely using Cloudformation. So, we update our code, push to Git, this triggers a build, and then a package and deploy using the AWS CLI to one of 3 accounts depending on the environment.It's unclear how this workflow will work with AppConfig, which doesn't seem to be able to support multiple account access. I've considered a couple of different approaches:Have a separate account with the configuration information for ALL accounts. Unfortunately, unless we have a separate role in the configuration account for AppConfig access, there does not appear to be a way for an application to get configuration data from a different account, so this approach doesn't seem feasible.Have a separate AppConfig::Application for each account, and each will just have a single environment. This is created via our Cloudformation deploy process, and we'll just manage and deploy configurations on an account by account basis (possibly using a separate Git repo to house the configuration data and push to each account in an automated way on commit).Are there any other options? This seems more difficult than it should be, as AWS often suggests using separate accounts for different stages of deploy for security reasons.FollowComment"

Answer: "1In my opinion you should deploy AppConfig on each account the same as you are deploying every other resource because of exactly the same reasons :)Basically, if you are separating the accounts to safely deploy applications in isolation, then the same should be done with config. You should not be able to break production editing config for dev what can happen if you are managing it in one AppConfig.CommentShareMGanswered a year ago0We just implemented this and this blog post will get you there: https://aws.amazon.com/blogs/mt/cross-account-configuration-with-aws-appconfig/CommentSharealexanswered a year ago"


Question: Panorama Test Utility environment setup from github aws-samples: CloudFormation template provided fails after modifying

"I have started my Panorama journey with a Lenova ThinkEdge SE70; my region: ca-central-1I want to launch the EC2 env using the: 'Test Utility environment setup' in aws-samples, in my region: ca-central-1:Test UtilityI have copied the CloudFormation (CF) template from the us-east-1 launch stack to my local workstation, honored the listed pre-requisites from that github page, and modified template to include my subscription entry for ARM machine image; validate via aws cli, and create , etc ...aws cloudformation validate-template --template-body file://./panorama-starter-kit-mod-cac1.yamlaws cloudformation create-stack --region ca-central-1 --template-body file://.//panorama-starter-kit-mod-cac1.yaml --stack-name mxr-panorama-arm-ec2-instance-cac1 --capabilities CAPABILITY_NAMED_IAMswitch to aws console to monitor events in the launch, 2 failures follow:occurs 1st Did not have IAM permissions to process tags on AWS::EC2::Instance resourceoccurs 2nd API: ec2:RunInstances You are not authorized to perform this operation. Encoded authorization failure message:I am running as admin, and my tag & resource run policy/permissions, as suggested by other posts, are wildcarded;there are re:Post links with similar tag permission failures:Did not have IAM permissions to process tags on AWS::EC2::Instance resourceHow do I resolve the "Did not have IAM permissions to process tags on AWS::EC2::Instance resource" error when I create an AWS::EC2::Instance resource in CloudFormation?these solutions did not help, and the nuanced suggestions do not explain underlying causeAny Panorama environment guidance would be appreciated. I am a noob, but am confused as to why a CF template which is part of AWS Panorama support utility would fail in this tag workaround fashion. As a noob, I do not have CF expertise either. I have looked for a more prescriptive AWS Panorama workshop (similar to the IoT Core workshops with CF templates), but have not found any. I would like to use the 'Test Utility' to remote into my Panorama SE70 appliance, etc.Maybe the sentiment for going forward is: " ... yah, the Panorama Test Utility CF template needs a workaround - therefore, build out your ARM EC2 instance manually, etc"I added the LaunchTemplete entries as suggested in the rePost above to my current template, but do not quite understand the rationale. This is my template:AWSTemplateFormatVersion: '2010-09-09'Description: EC2 instanceParameters:  KeyName:    Description: Name of an existing EC2 KeyPair to enable SSH access to the instance    Type: AWS::EC2::KeyPair::KeyName    ConstraintDescription: must be the name of an existing EC2 KeyPair.    Default: mxr-panorama-stack-ec2  InstanceType:    Description: WebServer EC2 instance type    Type: String    Default: t4g.2xlarge    AllowedValues:    - t4g.2xlarge    - t4g.micro    - t4g.xlarge  SSHLocation:    Description: The IP address range that can be used to SSH to the EC2 instances    Type: String    MinLength: 9    MaxLength: 18    Default: 0.0.0.0/0    AllowedPattern: (\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})/(\d{1,2})    ConstraintDescription: must be a valid IP CIDR range of the form x.x.x.x/x.Mappings:   RegionMap:     ca-central-1:      id: ami-00364bfa0dbeb5e09    us-east-1:      id: ami-01747bf371bd30817          us-east-2:      id: ami-01747bf371bd30817    us-west-2:      id: ami-0a8e148ec03558c68    eu-central-1:      id: ami-01747bf371bd30817    eu-west-1:      id: ami-01747bf371bd30817    ap-northeast-1:      id: ami-01747bf371bd30817Resources:  ec2Instance:    Type: AWS::EC2::Instance    Properties:      LaunchTemplate:          LaunchTemplateId: !Ref RequiredTagsLaunchTemplate          Version: 1            InstanceType: !Ref InstanceType      SecurityGroups: [!Ref 'ec2SecurityGroup']      KeyName: !Ref KeyName      ImageId: !FindInMap        - RegionMap        - !Ref AWS::Region        - id      IamInstanceProfile: !Ref ec2InstanceProfile      BlockDeviceMappings:        - DeviceName: /dev/sda1          Ebs:            VolumeSize: 500      UserData:        Fn::Base64: !Sub |                #!/bin/bash -xe                HOME=/home/ubuntu                echo $HOME > $HOME/user_data.txt                apt -y update && apt -y upgrade                apt-get -y install wget build-essential checkinstall                apt-get install -y libreadline-gplv2-dev libncursesw5-dev libssl-dev \                    libsqlite3-dev tk-dev libgdbm-dev libc6-dev libbz2-dev libffi-dev zlib1g-dev                apt-get install python3-dev python3-pip python3-numpy -y                ... etc ...                jupyter notebook --generate-config               ... etc ...                apt  install docker.io -y                aws ecr get-login-password --region us-west-2 | docker login --username AWS --password-stdin 500245141608.dkr.ecr.us-west-2.amazonaws.com                echo "INSTALLATION COMPLETE" > $HOME/INSTALLATION_COMPLETE.txt  RequiredTagsLaunchTemplate:      Type: 'AWS::EC2::LaunchTemplate'      Properties:        LaunchTemplateData:          TagSpecifications:            - ResourceType: volume              Tags:                - Key: Env                  Value: Dev    ec2SecurityGroup:    Type: AWS::EC2::SecurityGroup    Properties:      GroupDescription: Enable SSH access via port 22      SecurityGroupIngress:      - IpProtocol: "tcp"        CidrIp: "0.0.0.0/0"        FromPort: "22"        ToPort: "22"      - IpProtocol: "tcp"        CidrIp: "0.0.0.0/0"        FromPort: "8888"        ToPort: "8888"  ec2Role:    Type: AWS::IAM::Role    Properties:      ManagedPolicyArns:      - arn:aws:iam::aws:policy/AmazonS3FullAccess      - arn:aws:iam::aws:policy/CloudWatchAgentAdminPolicy      - arn:aws:iam::aws:policy/AWSCloudFormationReadOnlyAccess      - arn:aws:iam::aws:policy/AmazonSageMakerFullAccess      - arn:aws:iam::aws:policy/AmazonRekognitionFullAccess      - arn:aws:iam::aws:policy/IAMFullAccess      - arn:aws:iam::aws:policy/AWSPanoramaFullAccess      AssumeRolePolicyDocument: |        {          "Version": "2012-10-17",          "Statement": [            {              "Action": [                "sts:AssumeRole"              ],              "Effect": "Allow",              "Principal": {                "Service": [                  "ec2.amazonaws.com",                  "s3.amazonaws.com",                  "cloudwatch-crossaccount.amazonaws.com",                  "cloudformation.amazonaws.com",                  "member.org.stacksets.cloudformation.amazonaws.com",                  "sagemaker.amazonaws.com",                  "rekognition.amazonaws.com",                  "iam.amazonaws.com",                  "panorama.amazonaws.com"                ]              }            }          ]        }  ec2InstanceProfile:    Type: AWS::IAM::InstanceProfile    Properties:      Path: /      Roles:        - !Ref ec2RoleOutputs:  publicName:    Description: Public DNSName of the EC2 instance    Value: !GetAtt [ec2Instance, PublicDnsName]  publicIp:    Description: Public IP address of the EC2 instance    Value: !GetAtt [ec2Instance, PublicIp]FollowComment"

Answer: "0Hello,From your query, I understand that you are trying to launch EC2 environment using the 'Test Utility Environment Setup' from aws-samples GitHub repo in your region ‘ca-central-1’. You have modified the template and deployed the stack but you got the following errors during the stack deployment:Did not have IAM permissions to process tags on AWS::EC2::Instance resource.API: ec2:RunInstances You are not authorized to perform this operation. Encoded authorization failure message:You have already followed the AWS link [1], to remediate the error but the solutions didn’t helped. You are having admin permissions but still you are getting error. There could be any explicit deny for the IAM role/user you are using to perform operation and this needs to be checked.Regarding the error, “API: ec2:RunInstances You are not authorized to perform this operation. Encoded authorization failure message:”.This error indicates that AWS Identity and Access Management (IAM) role or user trying to perform the operation does not have the required permissions. The error involves an encoded message, which needs to be decoded to check the missing permissions.Please use the AWS CLI [2] to decode the message. Due to security reasons we are unable to decode these messages. Run the following command to decode the error message:————————aws sts decode-authorization-message --encoded-message ENCODED_MESSAGE_HERE————————Please refer to AWS link [3] for more information.Once you have fixed the permissions after decoding the message, try to perform the deployment again and if you are still facing any issue, then To answer your question, we require details that are non-public information. Please open a support case with AWS using the following link: https://support.console.aws.amazon.com/support/home#/case/createReferences:[1] https://repost.aws/knowledge-center/cloudformation-ec2-iam-runinstances[2] https://docs.aws.amazon.com/cli/latest/reference/sts/decode-authorization-message.html[3] https://repost.aws/knowledge-center/ec2-not-auth-launchCommentShareSUPPORT ENGINEERJhanvi Kashyapanswered a month agorePost-User-0974678 a month agoThanks for your suggestions. I decoded the message, but it does not tell me anything new: "admin-user" does not have permission to perform the ec2:RunInstances action on the arn:aws:ec2:ca-central-1:208598130076:volume/*. This admin-user has been set up with wild-card role/policy during debug, on the services used (ec2, cloudformation, admin permissions, etc.).I am able to launch the ARM AMI subscription ec2 in my region using the console wizard.Are others aware of a low friction path to setting up a Panorama virtual environment? The purpose of the template above is to set up a Jupyter notebook environment on an ARM ec2. Any suggestions from Jupyter experts?Share"


Question: Create operation failed

"I want to create a new container. but it can't and a notification like this appears.Create operation failedThe service can’t create the container because of previous subscriber activity for this account. For assistance, contact your admin.what is the solution?FollowComment"

Answer: "0Hi, this is Abhi from AWS. Is this a new account? If it is, I would recommend creating a case with AWS Support, and they should be able to resolve this for you.CommentShareEXPERTprabhishanswered 5 hours ago"


Question: Error deleting network interface - no permission

"Hi,we're using terraform to spin up some ec2 instances and then we start a k8s cluster using rke. This works fine. We want to use ELB storage for a mysql database. This volume is created by k8s (via default storageclass pointing to kubernetes.io/aws-ebs as provisoner) when the mysql pod is started.This works fine, but when the whole system is destroyed via terraform destroy, it will time out because the internet gateway/subnet can't be deleted (aws_subnet.subnet: Error deleting subnet: timeout while waiting for state to become 'destroyed').The funny thing is, that I can't delete these resources manually as admin! I always get the info that I have not the permission to access that resource. These are the network interface ids I can't delete: eni-04fc3289ea225f06, eni-04fc3289ea225f06, eni-04fc3289ea225f06 and eni-04fc3289ea225f06.Also interesting is, that these network interfaces are referencing a public ip that doesn't exist anymore. When I select such a network interface and then click on the link of the public ipv4 address, I see an empty list.Any help is much appreciatedFollowComment"

Answer: "0Hello,I am sorry to hear about your issues. I have checked and I can see that the Elastic Network Interface (ENI) eni-04fc3289ea225f065 is associated with an Elastic Load Balancer (ELB) [1] in eu-central-1 region. If you wish to be able to remove this ENI, you would need to delete the related ELB first [2].[1] https://aws.amazon.com/elasticloadbalancing/[2] https://docs.aws.amazon.com/elasticloadbalancing/latest/classic/elb-getting-started.html#delete-load-balancerI hope that you find this information helpful. Please let us know if you need any further help.Regards,awstomasCommentShareAWS-User-3892169answered 4 years ago"


Question: Failing to make a new project at the Visual studio solution stage. HELP

"Hi,So I decided to reinstall Lumberyard after seeing the 1.10.0 version being released, everything installed fine, got the starter game working, everything was good. Then I tried to make a new project in the project configurator.It failed at the "Generating a Visual Studio Solution" stage. Here is the log file:[WAF] Executing 'msvs' in 'l:\Amazon\Lumberyard\1.10.0.0\dev\BinTemp'[INFO] Generating Visual Studio 2015 solution.(msvs): source not found: '..\\..\\..\\..\\BinTemp\\uber_files\\AzCore\\AzCore_uber_android.cpp' in 'AzCore' ('l:\\Amazon\\Lumberyard\\1.10.0.0\\dev\\Code\\Framework\\AzCore\\AzCore\\wscript')(msvs): source not found: '..\\..\\..\\..\\BinTemp\\uber_files\\AzCore\\AzCore_uber_win.cpp' in 'AzCore' ('l:\\Amazon\\Lumberyard\\1.10.0.0\\dev\\Code\\Framework\\AzCore\\AzCore\\wscript')One or more source files missingProcess failed with return code: 1By the looks of things, it wants something to do with Android or AzCore, but the configuring a project stage worked, indicating i have everything installed. Help would be appreciated!Thanks in advance.EDIT: In the setup assistant I have everything ticked except the Android compiler because I do not plan to develop for Android.EDIT: After a fresh install, it is still happening.EDIT:REMOVEDUPLOADWhile this is open the project folder exists, once I click continue it gets deleted.EDIT: I have tried to create the new project from the command line using this http://docs.aws.amazon.com/lumberyard/latest/userguide/configurator-projects.htmlbut I get an error when it says generating visual studio solution just like the project configurator and points me to the same log file. It does say failure executing WAF and then links me to the error log.Follow"

Answer: "0Accepted AnswerHey everyone, this might be a little late but if you still have this problem then:uninstall VS2017 (if it is installed) and VS2015. Also, uninstall the installer that came with VS2017 from add or remove programs.some things will be left in the VS2017 folder, delete the VS2017 folder where you had it installed.Use  https://github.com/Microsoft/VisualStudioUninstaller/releases and run it a few times to delete some background VS2015 stuff, then delete the VS2015 folder where you had it installed.Restart your computer then install VS2015 with updates (3) and tick the first two options in the visual c++ section under programming languages of the installer.restart again and now attempt to make a new project.SharerePost-User-8843326answered 5 years ago0It does exist.SharerePost-User-8843326answered 6 years ago0If i correctly understand youIn Project Configurator select "Create New"Paste New Project NameAnd on press "Create Project" button see that error ?p.s.My Setting from Setup AssistentREMOVEDUPLOADSharerePost-User-0150549answered 6 years ago0Try after error, command "lmbr_waf.bat msvs"SharerePost-User-0150549answered 6 years ago0It does the folder when command line fails, I ran the project configurator in admin mode and the same with cmd. Same issue. I am missing the AzCore_uber_win.cpp file. as shown in the image below.REMOVEDUPLOADThat's quite weird, since I've reinstalled it twice and tried this on a second computer and still don't have that file. Where can I get those files?SharerePost-User-8843326answered 6 years ago0Hi Techtime. "wscript" this is not folder this is file. And after create new project you must run "lmbr_waf.bat configure" command. Some time to help try command "lmbr_waf.bat msvs" hope this help :)SharerePost-User-0150549answered 6 years ago0Ok, i trying create that error on my PC if found, i will write here answer :)SharerePost-User-0150549answered 6 years ago0I can't create the new project in the first place because of this error, and the configure worked, it fails at the visual studio solution generation stage (using the automated system in the project configurator)SharerePost-User-8843326answered 6 years ago0When clicking create new after giving the name it shows the stage of the automatic configurator and when it reaches the visual studio solution generation stage it goes red and says read the log file, which it links to and that is the error I receive. My setup assistant is the same except I also have the Linux server thing ticked and all the extra sdks installedSharerePost-User-8843326answered 6 years ago0So yes, that's basically what happens.SharerePost-User-8843326answered 6 years ago0When you create the project with command line, does it delete the project folder after it fails?Also, maybe it's a weird permission issue? Have you tried to do it with admin priviledges?SharerePost-User-9817984answered 6 years ago0Also, what does the contents of your BinTemp/user_files/AzCore look like?Here is mine:REMOVEDUPLOADSharerePost-User-9817984answered 6 years ago0Can you go to that directory and see if that file exists:l:/Amazon/Lumberyard/1.10.0.0/dev/Code/Framework/AzCore/AzCore/wscriptSharerePost-User-5460328answered 6 years ago0When their github comes back up, maybe there. But for now, you can try using mine:Amazon share driveWho knows what else is missing though.SharerePost-User-9817984answered 6 years ago0Also random side note, check to make sure that you don't have an antivirus that is blocking files during the install.SharerePost-User-9817984answered 6 years ago0Still doesn't work. For some reason, it is not detecting my visual studio 2015 c++ compiler even though everything is clearly set up properly. Back to CryEngine for me, maybe in the next update I'll switch.SharerePost-User-8843326answered 6 years ago0For some reason, it is not detecting my visual studio 2015 c++ compiler even though everything is clearly set up properly. Back to CryEngine for me, maybe in the next update I'll switch.SharerePost-User-8843326answered 6 years ago0Hey @REDACTEDUSERAlso, I'd like to give a mighty thanks to the community for trying to solve this as well!Will update this thread as soon as I can :)SharerePost-User-5738838answered 6 years ago0Hi @REDACTEDUSERThere is another possibility here specifically involving VS2015. You may be aware of this, but VS2015 does not automatically install all of the C++ libs you need to compile, and actually requires an extra step for any C++ project that uses it. This is specific to VS2015. 2013 previously included these by default!If you haven't tried this yet, go to Add/Remove programs, and select Visual Studio 2015 and choose Modify. When you update, there should be a tab for programming languages->Visual C++. Just check all the boxes related to C/C++ (there are three) and have Visual Studio install those (sometimes it takes more than one attempt, fyi).These missing libraries will cause all sorts of errors. Let me know if this helps!SharerePost-User-3342048answered 6 years ago0Has this been resolved? I'm also getting this same problem. This is the error that I get.[WAF] Executing 'msvs' in 'c:\Amazon\Lumberyard\1.10.0.0\dev\BinTemp'[INFO] Generating Visual Studio 2015 solution.(msvs): source not found: '..\..\..\..\BinTemp\uber_files\AzCore\AzCore_uber_android.cpp' in 'AzCore' ('c:\Amazon\Lumberyard\1.10.0.0\dev\Code\Framework\AzCore\AzCore\wscript')(msvs): source not found: '..\..\..\..\BinTemp\uber_files\AzCore\AzCore_uber_win.cpp' in 'AzCore' ('c:\Amazon\Lumberyard\1.10.0.0\dev\Code\Framework\AzCore\AzCore\wscript')One or more source files missingProcess failed with return code: 1REMOVEDUPLOADSharerePost-User-9059460answered 6 years ago0I have definitely set up my visual studio versions correctly. For some reason it isn't detecting my c++ compiler for vs2015 even though it's installed. I'm going to wait for the next version for vs2017 supportSharerePost-User-8843326answered 6 years ago0Nope, I realised that it's 1) not detecting the c++ compiler for vs2015 and 2) missing some files, in my installation at least. I'd suggest waiting for the next update, which will probably have vs2017 support. Or, you could try resetting Windows, which I've done but haven't dared to touch Lumberyard since I'd rather wait for the next updateSharerePost-User-8843326answered 6 years ago0Hi @REDACTEDUSERCould you attach any debug logs the lumberyard generates for you? Uber files are generated for many related files - I presume you are able to launch the sample project without issue as well? Sorry that you are having this issue as well!SharerePost-User-3342048answered 6 years ago0Any solution? I have the same problemSharerePost-User-9597235answered 6 years ago0@REDACTEDUSERSharerePost-User-9597235answered 6 years ago0Hey @REDACTEDUSERSharerePost-User-5738838answered 6 years ago0Thanks @REDACTEDUSERSharerePost-User-5738838answered 6 years ago0[WARN] Removing the following Android target platforms due to "Compile For Android" not checked in Setup Assistant.-> android_armv7_gcc, android_armv7_clang[INFO] Configure "win_x64_vs2015 - [debug, profile, performance, release, debug_dedicated, profile_dedicated, performance_dedicated, release_dedicated, debug_test, profile_test, debug_test_dedicated, profile_test_dedicated]"Unable to detect find the C++ compiler for Visual Studio 2015, removing build target[INFO] Configure "win_x64_vs2013 - [debug, profile, performance, release, debug_dedicated, profile_dedicated, performance_dedicated, release_dedicated, debug_test, profile_test, debug_test_dedicated, profile_test_dedicated]"Unable to detect find the C++ compiler for Visual Studio 2013, removing build target[WAF] 'configure' finished successfully (1m0.701s)[WAF] Executing 'generate_uber_files' in 'c:\Amazon\Lumberyard\1.10.0.0\dev\BinTemp'[352/468] gen_uber_file (project_generator|project_generator): Tests\Gem\Code\Source\Core\EditorGame.cpp Tests\Gem\Code\Source\Core\TestsGame.cpp Tests\Gem\Code\Source\Core\TestsGameRules.cpp Tests\Gem\Code\Source\System\GameStartup.cpp Tests\Gem\Code\Source\Game\Actor.cpp Tests\Gem\Code\Source\TestsModule.cpp Tests\Gem\Code\Source\TestsSystemComponent.cpp -> BinTemp\uber_files\Tests\Tests_auto_0.cpp[353/468] gen_uber_file (project_generator|project_generator): Tests\Gem\Code\Tests\TestsTest.cpp -> BinTemp\uber_files\Tests\Tests_auto__0.cpp[WAF] 'generate_uber_files' finished successfully (1m35.630s)[WAF] Executing 'generate_module_def_files' in 'c:\Amazon\Lumberyard\1.10.0.0\dev\BinTemp'[100/234] gen_module_def_file (project_generator|project_generator): Code\Launcher\DedicatedLauncher\wscript -> BinTemp\module_def\TestsDedicatedLauncher_module_def.json[101/234] gen_module_def_file (project_generator|project_generator): Code\Launcher\LinuxLauncher\wscript -> BinTemp\module_def\TestsLinuxLauncher_module_def.json[102/234] gen_module_def_file (project_generator|project_generator): Code\Launcher\MacLauncher\wscript -> BinTemp\module_def\TestsMacLauncher_module_def.json[103/234] gen_module_def_file (project_generator|project_generator): Code\Launcher\WindowsLauncher\wscript -> BinTemp\module_def\TestsWindowsLauncher_module_def.json[104/234] gen_module_def_file (project_generator|project_generator): Code\Launcher\AndroidLauncher\wscript -> BinTemp\module_def\TestsAndroidLauncher_module_def.json[105/234] gen_module_def_file (project_generator|project_generator): Code\Launcher\IOSLauncher\wscript -> BinTemp\module_def\TestsIOSLauncher_module_def.json[106/234] gen_module_def_file (project_generator|project_generator): Code\Launcher\AppleTVLauncher\wscript -> BinTemp\module_def\TestsAppleTVLauncher_module_def.json[115/234] gen_module_def_file (project_generator|project_generator): Tests\Gem\Code\wscript -> BinTemp\module_def\Tests_module_def.json[WAF] 'generate_module_def_files' finished successfully (8.958s)And the common[WAF] Executing 'msvs' in 'c:\Amazon\Lumberyard\1.10.0.0\dev\BinTemp'[INFO] Generating Visual Studio 2015 solution.(msvs): source not found: '..\\..\\..\\..\\BinTemp\\uber_files\\AzCore\\AzCore_uber_android.cpp' in 'AzCore' ('c:\\Amazon\\Lumberyard\\1.10.0.0\\dev\\Code\\Framework\\AzCore\\AzCore\\wscript')(msvs): source not found: '..\\..\\..\\..\\BinTemp\\uber_files\\AzCore\\AzCore_uber_win.cpp' in 'AzCore' ('c:\\Amazon\\Lumberyard\\1.10.0.0\\dev\\Code\\Framework\\AzCore\\AzCore\\wscript')One or more source files missingProcess failed with return code: 1SharerePost-User-9597235answered 6 years ago0@REDACTEDUSERI tried to execute lmbr_waf generate_uber_files and nothing happend the proccess never ended. So I tried to restart my pc and execute the same command and woala the program run and generated the missing files AzCore_uber_android.cpp' and AzCore_uber_win.cpp' in 'AzCore'.Now I tried to create a new proyect :c the step of VS solution is passed but the next one Build Proyect fails with this log:  [WAF] Executing 'build_win_x64_vs2015_profile' in 'c:\Amazon\Lumberyard\1.10.0.0\dev\BinTemp\win_x64_vs2015_profile'[WARN] Game project 'FeatureTests' configured in bootstrap.cfg is the enabled game for this build. In order to run or debug for the game 'Test', they need to be set in bootstrap.cfg under the 'sys_game_folder' entry accordingly[WARNING] Incredibuild disabled by build option[WARNING] 'libpath' value 'c:\Amazon\Lumberyard\1.10.0.0\dev\Code\SDKs\LibTomCrypt\lib\ios' defined in TaskGenerator "TestIOSLauncher" does not exist[WARNING] 'libpath' value 'c:\Amazon\Lumberyard\1.10.0.0\dev\Code\SDKs\LibTomMath\lib\ios' defined in TaskGenerator "TestIOSLauncher" does not exist[WARNING] 'libpath' value 'c:\Amazon\Lumberyard\1.10.0.0\dev\Code\SDKs\FreeType2\ios\lib' defined in TaskGenerator "TestIOSLauncher" does not existTraceback (most recent call last):File "C:\Amazon\Lumberyard\1.10.0.0\dev\Tools\build\waf-1.7.13\waflib\Scripting.py", line 226, in waf_entry_pointrun_commands()File "C:\Amazon\Lumberyard\1.10.0.0\dev\Tools\build\waf-1.7.13\waflib\Scripting.py", line 342, in run_commandsctx = run_command(cmd_name)File "C:\Amazon\Lumberyard\1.10.0.0\dev\Tools\build\waf-1.7.13\waflib\Scripting.py", line 319, in run_commandctx.execute()File "Tools/build/waf-1.7.13/lmbrwaflib\msvs.py", line 1974, in override_build_stateold(ctx)File "c:\Amazon\Lumberyard\1.10.0.0\dev\wscript", line 298, in executereturn execute_method(self)File "C:\Amazon\Lumberyard\1.10.0.0\dev\Tools\build\waf-1.7.13\waflib\Scripting.py", line 696, in executereturn execute_method(self)File "C:\Amazon\Lumberyard\1.10.0.0\dev\Tools\build\waf-1.7.13\waflib\Build.py", line 254, in executeself.execute_build()File "C:\Amazon\Lumberyard\1.10.0.0\dev\Tools\build\waf-1.7.13\waflib\Build.py", line 277, in execute_buildself.compile()File "C:\Amazon\Lumberyard\1.10.0.0\dev\Tools\build\waf-1.7.13\waflib\Build.py", line 370, in compileself.producer.start()File "C:\Amazon\Lumberyard\1.10.0.0\dev\Tools\build\waf-1.7.13\waflib\Runner.py", line 303, in startself.refill_task_list()File "C:\Amazon\Lumberyard\1.10.0.0\dev\Tools\build\waf-1.7.13\waflib\Runner.py", line 209, in refill_task_listself.add_outstanding_tasks(next(self.biter))File "C:\Amazon\Lumberyard\1.10.0.0\dev\Tools\build\waf-1.7.13\waflib\Build.py", line 818, in get_build_iteratorself.post_group()File "C:\Amazon\Lumberyard\1.10.0.0\dev\Tools\build\waf-1.7.13\waflib\Build.py", line 774, in post_grouptg.post()File "C:\Amazon\Lumberyard\1.10.0.0\dev\Tools\build\waf-1.7.13\waflib\TaskGen.py", line 218, in postv()File "Tools/build/waf-1.7.13/lmbrwaflib\cry_utils.py", line 589, in add_compiler_dependencyif os.path.isabs( self.env['CC'] ):File "C:\Amazon\Lumberyard\1.10.0.0\dev\Tools\Python\2.7.12\windows\lib\ntpath.py", line 59, in isabsreturn s != '' and s[:1] in '/\\'TypeError: 'in <string>' requires string as left operand, not listProcess failed with return code: 1SharerePost-User-9597235answered 6 years ago0Having same issue. Any news?SharerePost-User-9859873answered 6 years ago0@REDACTEDUSERSharerePost-User-9859873answered 6 years ago0Thanks, @REDACTEDUSERThis is likely the culprit, as currently Lumberyard only supports VS2015. I'm glad you found a working solution!SharerePost-User-3342048answered 6 years ago"


Question: Looking for an ecs/eks fargate + cloudwatch + sqs  example

"Hello all,I'm looking for a complete working example for ecs/eks fargate + cloudwatch + sqs architecture (see Fig 5) that is described in this article - https://aws.amazon.com/blogs/architecture/rate-limiting-strategies-for-serverless-applications/Any pointers is very much appreciated.FollowComment"

Answer: "1Hi,The AWS Cloud Development Kit (CDK) provides various reusable Constructs as basic "building blocks". The CDK does provide a QueueProcessingFargateService construct? This construct helps configure the SQS Queue to poll and process, the Autoscaling capacity of the ECS Fargate service, and the integration.Other CDK Patterns are available at:Construct HubServerless Patterns CollectionAWS Solutions ConstructsCDK PatternsHope it helps point you in the right direction! ThanksCommentShareOliver_Ganswered 10 months ago1Hello.For a more generic answer and not a CDK one: this is a very common pattern that I have used many times, to the point that we have an off-the-shelf solution for it. Alike CDK, it uses CFN too and docker-compose, via using ECS Compose-X to configure queue, its DLQ, and auto-scale services in ECS (compute platform in Compose-X defaults to Fargate, but you can choose whatever suits you, I use it at home too with ECS Anywhere).There is an example repository with the compose files here which is that off the shelves solution I mentioned. This is a very simple workflow: S3 -> new file / file update -> SQS -> CW Alarm -> Autoscaling of an ECS Service -> process files -> done.What I like about this approach vs S3 -> Lambda directly is that using SQS "as the carrier" any service, anywhere, on any compute, can process the messages in the same way (Lambda, ECS, EC2, on-prem, so long as it has access to the messages). In some cases we even implemented that based on filesize, using the same code, some files were processed in Lambda, some with ECS.Anyways, regardless, the idea is that you can work on your service using a combination of docker-compose, possibly add ECS Local Endpoints too for IAM high fidelity, define your services, define your resources, link them logically in a "no-code" fashion and simply deploy.Hope this helps too,CommentShareJohnPrestonanswered 10 months ago"


Question: kinesis analytics studio unable to communicate with AWS Glue

Hello -Trying to create a sample application using kinesis analytics studio. Getting an error in the initial cell. role is automatically created through console.org.apache.zeppelin.interpreter.InterpreterException: org.apache.zeppelin.interpreter.InterpreterException: org.apache.flink.table.catalog.exceptions.CatalogException: Failed to determine whether database default exists or notany additional permissions need to be set on glue in addition to permissions being set by console?Can someone please help or point us to any info around this?Thank you.FollowComment

Answer: "0Hi,Thank you for reaching out to us. Please note such errors are due to connectivity issues. Make sure both are in the same VPC or Kinesis analytics application has access to the glue table. If the issue still persists, please reachout to with a AWS case/ticket with Kinesis analytics application arn and Glue table details and we will be happy to help you further.Thank you and have a nice day ahead!CommentSharerePost-User-0932732answered 5 months ago"


Question: Creating models considering multiple variables

"Hello:I'm using Forecast to predict Temperature/Humidity/Wind Speed/etc. So far, I'm able to create the models for each parameter individually, but I think the model would benefit considering the other variables. For example, to predict the temperature, it could consider Humidity, Wind Speed, etc to train the model. But I don't see how to do this, as when I import the data, the Schema builder only allows me to include one column of type float, so if I train for Temperature (float type), no other float numbers are allowed (only strings). Is this doable? How should I define the other columns (Humidity, etc.)ThanksFollowComment"

Answer: "0Hi User,You should be able to add additional attributes of type float. Here is a sample screenshot of how it can be done:This is done via the schema builder on AWS Console. Alternatively, it can be done via the JSON Schema like this:        {"AttributeName": "target_value","AttributeType": "float"},{"AttributeName": "humidity ","AttributeType": "float"},{"AttributeName": "temperature","AttributeType": "float"},{"AttributeName": "Wind Speed","AttributeType": "float"}Hope this works for you!CommentSharejunkaianswered 6 months agoAWS-User-SOS 6 months agoHello junkai:When I try that, I get this error:We were unable to create your dataset.Invalid target time series schema: all non-reserved columns should be of string type.Which is the reason I posted my question...ThanksShare"


Question: "CDK, SSM and multistack resource sharing problem"

"Not super facile with typescript, I am trying to develop two simple cdk stacks, one with an graphql api and the other with the database to be used by it.If I create an SSM parameter in the database stack and then access that same parameter in the second stack, how do I add the database to the api?const latestDDB = ssm.StringParameter.valueForStringParameter(  this,  '/foodir/fooname'); const userDataSource = api.addDynamoDbDataSource(  'FooDataSource',  latestDDB <-- this causes an error, "Argument of type 'string' is not assignable to parameter of type 'ITable'.ts(2345) const latestDDB: string");Thanks in advance.FollowComment"


Question: Connect to RDS postgres database in GLUE script

"I would like to connect to the RDS postgres database with Glue script written in scala, I have a postgres driver located in S3 and added in script in Dependent JARs path. After running the script it fails with the message Glue ETL Marketplace - Retrieved no ETL connector jars, this may be due to no marketplace/custom connection attached to the job or failure of downloading them, please scroll back to the previous logs to find out the root cause.  I cannot find any related logs helping me to understand why there is a problem and I receive a Compilation error.FollowComment"

Answer: "1Hi,any specific reason why you are not using the native Glue connection which supports RDS PostgreSQL?Glue 2.0 uses the driver 42.1.0 and Glue 3.0 uses 42.2.18 (see in this section of the documentation or in this other one).If you really need to bring your own connector, have you followed the documentation or this blog post as an example?can you share an anonymised version of the code snippet that contains the setup for the  customJDBCDriverJsonOptions ?hope this helpsCommentShareEXPERTFabrizio@AWSanswered a year agoEXPERTGokulreviewed a year agoAWS-User-1252985 a year agoWhat I want to achieve is this: https://repost.aws/questions/QUQE0EE8VmQuau0uRhSzN0gw#ANTI7-sqAZSsqUJvy1BorvzwI am following the Medium article that was suggested to me in the responses.Share"


Question: Copying data from IBM MQ to Amazon MSK

"I am trying to use the Kafka Connect source connector for copying data from IBM MQ into Amazon MSK. I was able to create the custom plugin in MSK, but when creating the connector it is transitioning to failed state.The custom plugin i build from. https://github.com/ibm-messaging/kafka-connect-mq-sourceFor the connector configuration i am usingconnector.class=com.ibm.eventstreams.connect.mqsource.MQSourceConnectormq.connection.name.list=<host>(1414)mq.channel=<channel name>tasks.max=1mq.queue.manager=<name>mq.queue=<queue name>mq.channel.name=<channel name>kafka.topic=<topic name>value.converter=org.apache.kafka.connect.storage.StringConverterkey.converter=org.apache.kafka.connect.storage.StringConvertermq.connection.mode=clientThe configuration works and i am able to copy messages from IBM MQ to Apache Kafka installed on EC2. It is not working from IBM MQ to Amazon MSK. Are there any limitations on what source connectors you use with Amazon MSK?FollowComment"

Answer: "0You can use most connectors with MSK Connect, as long as they do not need to actively listen themselves. In the case of the MQ connector, this should work for you. The issue is most likely connected to the networking setup and the ability of the connector to find your MQ instances. Since networking can be very dependent on your environment it is difficult to be specific, and you may be able to get more details by sharing the logs and specifics with the AWS support team. However, some common challenges include name resolution, and making sure your host names are resolvable from the connector's perspective.CommentShareAWS-User-7376622answered 2 years ago0Thank you for your response. I don't believe it is a networking issue as i tried the reachability analyzer from the VPC end point where the IBM MQ is installed and the AWS Kafka Connect ENI and it is reachable. I also enabled the cloudwatch log monitoring  and don't see any errors in the logs.  So i am not sure if there is an issue with the connector configuration and if the properties specified are correct as i don't see I also don't see any message saying connectivity is established.CommentShareaws-pmalatanswered 2 years ago"


Question: Feature Request: Velocity Macros

"It has been mentioned several times in this forum over the years that APIG's implementation of Velocity does not appear to support velocimacros.This is a real shame, and I just wanted to raise it again, that this would be an absolute boon.My use case:API Gateway resources as a proxy for DynamoDBIntegration response mapping template defined to map arbitrary DynamoDB response to JSONThe template I have so far is:##NOTE This template only works for Dynamos' primitive data types##because AWS hasn't enabled velocimacros FFS#set($root=$input.path('$').Item)    {        #foreach ($mapEntry in $root.entrySet())                #set ($value=$mapEntry.value.entrySet().iterator().next().value)                #set ($valueType=$mapEntry.value.entrySet().iterator().next().key)                #if($valueType=="N" || $valueType=="BOOL")                    "$mapEntry.key":$value                #elseif($valueType=="S" || $valueType=="B")                    "$mapEntry.key":"$value"                #elseif($valueType=="SS" || $valueType=="BS")                    "$mapEntry.key":[                    #foreach ($setEntry in $value)                        "$setEntry"                        #if($foreach.hasNext),#end                    #end                    ]                #elseif ($valueType=="NS")                    "$mapEntry.key":[                    #foreach ($setEntry in $value)                        $setEntry                        #if($foreach.hasNext),#end                    #end                    ]                #end                #if($foreach.hasNext),#end        #end    }Which deals perfectly well with the primitive datatypes in DynamoDB, but in order to handle nested structures (e.g. one field is a list (L) or mapping (M)), this template would need to rely on a macro for dealing with the recursive nature of the data.P.S. To anyone finding this post as a result of facing this or a similar issue. Just know, you're not alone, the struggle is real, and AWS have been ignoring this for years.FollowComment"

Answer: "0Please, please, Amazon, implement velocimacros! It would make so many things so much easier. Otherwise, if I want to define a custom function, I have to instead use #evaluate or #define which is really inconvenient and doesn't provide the same level of functionality.CommentShareAceranswered 5 years ago0Just coming back to say I'm building another endpoint on Dynamo, and I still can't use macros.This is leading to me having to write smelly code.SORT IT OUT AWS!!!!!CommentSharegregrdataanswered 5 years ago0Another +1 to the ability to support Macros in VTL mappings.Another option would be to make/enable a VLT tool/util method to change the Low level DynamoDB Response/Requests to Plain JSON the same way the DocumentClient Does in the SDKs or you can in the Console when you do create Item.  This really would be a significant usability improvement.CommentSharePatGreenwellanswered 4 years ago0Another +1 to the ability to support Macros in VTL mappingsPlease add this feature CommentShareFrankozanswered 4 years ago0I second the call for better usability for the templates. Velocity is not a great choice, but since its there feature parity with Velocity 1.7 would be nice. Also, I ended up running Velocity in my test suite, but since the features don't match those tests will be non-conclusive.Edited by: torgeir on Nov 4, 2019 10:37 AMCommentSharetorgeiranswered 4 years ago0Still in 2021, waiting for Velocity Macros in AWS API Gateway.In case any one wondering, this is the macro I want to run; https://gist.github.com/narenranjit/1672345#gistcomment-2096494#set ( $obj = '' ) ## dummy object#set ( $int_class = $obj.class.forName('java.lang.Number') )#set ( $bool_class = $obj.class.forName('java.lang.Boolean') )#set ( $string_class = $obj.class.forName('java.lang.String') )#set ( $map_class = $obj.class.forName('java.util.Map') )#set ( $list_class = $obj.class.forName('java.util.List') )#set ( $foreachCount = 10 )#macro(VelListToJSON $list )#set($myList = $list )## dereference{#foreach($key in $myList.keySet())"$key":#set($x = $myList.get($key))#VelToJSON($x)#if($foreachCount != $myList.keySet().size()) , #end#end}#end#macro(VelArrayToJSON $arr)#set($myArr = $arr)[#foreach($x in $myArr)#VelToJSON($x)#if($foreachCount != $myArr.size()) , #end#end]#end#macro(VelToJSON $item)#if($map_class.isAssignableFrom($item.class))#VelListToJSON($item)#elseif($list_class.isAssignableFrom($item.class))#VelArrayToJSON($item)#elseif($bool_class.isAssignableFrom($item.class)|| $int_class.isAssignableFrom($item.class))$item#else ## $string_class.isAssignableFrom($item.class)"$item"#end#endEdited by: crowdblink on Mar 23, 2021 12:00 PMCommentSharecrowdblinkanswered 2 years ago"


Question: How to handle 2 triggers in 1 lamda function?

"I have 2 triggers in 1 lamda function, API gateway and AWS IOT , how can i handle 2 separate event jsons in 1 lamda functions, is it possible? IF yes, help me out with the code layout in python.FollowComment"

Answer: "0Accepted AnswerRegarding your comment "i need both the events to be processed simultaneously" please note the difference between a Lambda function definition and an instance.  If a defined function gets two trigger events it will run two separate instances.  If you need coordination between the two I suggest you look at Step Functions as a way for one event flow to wait for the other without consuming Lambda compute time.If you head this direction it's probably cleaner to split your current function definition into two, each handling one of the two trigger event types, rather than overloading one function definition to cover both.CommentShareEXPERTskinsmananswered 2 months ago0Hi, this is easily achievable. You will have to customize your code a bit and use if else condition. So I checked the APIGW and IOT payload format from the AWS documentations and they have slightly different format which will be helpful to achieve your case.----------------SAMPLE CODE----------------import jsondef lambda_handler(event, context):    # TODO implement    if "event" in event:        iotProcessing(event)    else:        apigwProcessing(event)        def iotProcessing(event):    print("IOT Event")    #perform some actions    #return    def apigwProcessing(event):    print("API Gateway Event")    #perform some actions    #returnDocuments for payload formatAPIGW - https://docs.aws.amazon.com/apigateway/latest/developerguide/set-up-lambda-proxy-integrations.htmlIOT - https://docs.aws.amazon.com/lambda/latest/dg/services-iotevents.htmlNote: For sample, I have used REST API with proxy integration as example.CommentShareShivamanswered 2 months agoEXPERTskinsmanreviewed 2 months agoPhoenix2819 2 months agoI am using a websocket api and i forward data recieved by iot core via mqtt to the lamda function, I am planning so that, whenever a client connects to the websocket it gets the data of iot core in real time, so i need both the events to be processed simultaneously.Share0Yes it can be possible to add more than 1 trigger to lambda functionBelow are the Code need to change in code sectionimport jsondef lambda_handler(event, context):# TODO implementif "event" in event:iotProcessing(event)else:apigwProcessing(event)def iotProcessing(event):print("IOT Event")#perform some actions#returndef apigwProcessing(event):print("API Gateway Event")#perform some actions#returnCommentShareRaj Kishoranswered 2 months ago"


Question: "Amazon OpenSerach - Elastic Search service integration with Spring application (Java, Maven))"

"I have taken Amazon OpenSerach - Elastic Search service to integrate with our Spring application (Java, Maven)) we are facing issue integrating it as there is no proper documentation on it. I have tried multiple ways to Integrate it.Sometimes there is some build [OSS] issue and if I fix that there is a content issue I need some help.import io.searchbox.client.JestClient;import io.searchbox.client.JestClientFactory;import io.searchbox.client.config.HttpClientConfig;import org.apache.http.HttpHost;import org.elasticsearch.client.RestClient;import org.elasticsearch.client.RestHighLevelClient;import org.springframework.beans.factory.annotation.Value;import org.springframework.context.annotation.Bean;import org.springframework.context.annotation.Configuration;import org.springframework.data.elasticsearch.client.ClientConfiguration;import org.springframework.data.elasticsearch.client.RestClients;import org.springframework.data.elasticsearch.core.ElasticsearchOperations;import org.springframework.data.elasticsearch.core.ElasticsearchRestTemplate;@Configurationpublic class ElasticsearchConfig {    @Value("${elastic.uri}")    private String elasticHost;    @Bean    public RestClient getRestClient() {        RestClient restClient = RestClient.builder(                new HttpHost(elasticHost, 9200)).build();        return restClient;    }    @Bean    public RestHighLevelClient client() {        ClientConfiguration clientConfiguration                = ClientConfiguration.builder()                .connectedTo(elasticHost)                .build();        return RestClients.create(clientConfiguration).rest();    }    @Bean    public ElasticsearchOperations elasticsearchTemplate() {        return new ElasticsearchRestTemplate(client());    }    @Bean    public JestClient jest(){        JestClientFactory factory = new JestClientFactory();        factory.setHttpClientConfig(new HttpClientConfig                .Builder("http://"+elasticHost+":9200")                .multiThreaded(true)                //Per default this implementation will create no more than 2 concurrent connections per given route                // and no more 20 connections in total                        .build());        return factory.getObject();    }        <dependency>            <groupId>org.springframework.boot</groupId>            <artifactId>spring-boot-starter-data-jpa</artifactId>        </dependency>        <dependency>            <groupId>org.springframework.boot</groupId>            <artifactId>spring-boot-starter-data-elasticsearch</artifactId>        </dependency>using this dependency gives OSS error and if I specify the version of the Elastic in dependency then it is Content type is missing errorFollowComment"


Question: Always trigger stack rerun on update

"I have a CFN root stack with nested stacks in it, one of which is essentially a lambda function. I want that nested stack to run on any update triggered on the root stack. It may be possible that there is no parameter/template changes to this nested stack, but I still want to rerun it.detailed use-case: The nested stack retrieves details about a VPC and produces outputs based on that. While the inputs to this stack may not have changed, the outputs may change based on changes in the VPC. Therefore I need a way to tell AWS to ALWAYS run this stack in case of updates.FollowComment"

Answer: "1I can think of two ways to achieve this.FirstSet the lambda up as an cloudwatch rule which is triggered by this specific stack update - I believe this would have to be a "AWS API Call via CloudTrail" event. Your nested stack would create the cloudwatch rule and potentially run the lambda on the initial creation. But I don't think this will work in your case as you need the output within the stack on the updateSecond - one I have used multiple timesCreate a parameter to the parent stack, pass to nested stack and add as a environment var within your lambda. When I have used this method I usually triggered via a pipeline so I make the parameter the pipeline-execution-id so it changes on every execution.CommentShareEXPERTPeter_Ganswered a year ago"


Question: Amazon Owned Domains

"Amazon currently owns the domain "upnext.com" but it is inactive, who should I contact to speak about purchasing it? Or how would I go about asking Amazon to relinquish the domain?FollowComment"

Answer: "1Hello,Amazon still owns upnext.com and it won't be available until Amazon decides to release it.Thanks,NiharCommentShareNIHAR-AWSanswered a month ago"


Question: EC2 Public IP Instance Deleted but still responding to pings

EC2 Public IP Instance Deleted but still responding to pings.  Is there anything that can be done to turn off this ghost ?  34.238.165.123FollowComment

Answer: "2A public IP address is assigned to your instance from Amazon's pool of public IPv4 addresses, and is not associated with your AWS account. When a public IP address is disassociated from your instance, it is released back into the public IPv4 address pool. So it is possible that it is used by someone else already. If you want to use Static IP allocated to your account then you would use Elastic IP.CommentShareEXPERTTushar_Janswered a year ago"


Question: S3 Bucket creation problems

"I'm stuck on Exercise 5: Create an Amazon S3 Bucket.I can get to task 3 Modifying the S3 bucket policyBut, when I try to save the policy I receive an unknown error.Upon clicking on the API response"Invalid principal in policy"I'm not sure if I missed a critical step in the earlier parts of this course or not.FollowCommentkentrad EXPERT3 months agoYou should provide the policy.Share"

Answer: "0Hi PatCarter,have a look at this Repost guide about troubleshooting Invalid principal error: https://repost.aws/knowledge-center/s3-invalid-principal-in-policy-error.If it does not help, please provide more details on what tutorial you are following so we can get it solved.CommentShareEXPERTalatechanswered 3 months agoPatCarter 3 months agoHello, I am doing the Coursera AWS Cloud Technical Essentials. Week 3 it is having me create an employee database, upload a picture and then modify the bucket policy.These are the instructions it provided that I am following but I am stumped. :(https://aws-tc-largeobjects.s3-us-west-2.amazonaws.com/DEV-AWS-MO-GCNv2/exercise-5-storage.htmlSharealatech EXPERT3 months agoDid you go through above guide? If so, can you share the policy you added to the S3 bucket?SharePatCarter 3 months agoThis is what I pasted in per the instructions.{"Version": "2012-10-17","Statement": [{"Sid": "AllowS3ReadAccess","Effect": "Allow","Principal": {"AWS": "arn:aws:iam::123456789012:role/S3DynamoDBFullAccessRole"},"Action": "s3:","Resource": ["arn:aws:s3:::employee-photo-bucket-al-907","arn:aws:s3:::employee-photo-bucket-al-907/*"]}]}Sharekentrad EXPERT3 months agoShould be "Action": "s3:*",SharePatCarter 3 months agoI tried it with and without. This exercise is making me feel really dumb lolIt's not showing any errors until I try to save it. Then I get API responseInvalid principal in policyShareShow 2 more comments0This may not be the same issue, but recently we received a question that sounded a lot like this one in rePost.  Here's the question and its answers.  I hope this helps.https://repost.aws/questions/QUmodGMPJ9TjavI3CFUhAwLQ/bucket-policy-error-invalid-json#ANeS5LP3Y0Sf6sRXYC-uNpcgCommentSharejschwar313answered 3 months agojschwar313 3 months agoThe above post has a comment that says this:Sharejschwar313 3 months agoThe idea is that I copied the code from AWS Cloud Technical Essentials course in Cousera, and followed the exact instruction, but it's very depressing to find such mistakeshttps://aws-tc-largeobjects.s3-us-west-2.amazonaws.com/DEV-AWS-MO-GCNv2/exercise-5-storage.htmlShare"


Question: Can't activate root domain for my amplify app

"Hi there!I had my react app deployed and worked successfully, yesterday I updated my git repo, but my web site didn't work as I expected, so I checked my amplify console for issues and found something weird like my domain name disappeared, but it still worked correctly as I see it now. So I decided to add my custom domain again, but got an error "One or more of the CNAMEs you provided are already associated with a different resource" at the last step of domain activation. But I had only one amplify app (I don't have any records at CloudFront). Then I deleted that amplify app, deleted all dns records for my domain in Route 53. Then I've created a new amplify app (now I have only one app) but I still get the same error for domain activation step. Now I excluded root domain for my app and try to activate a sub domain like sub.mydomain.com. I don't get any errors but activation is still being processed, but I'm sure it will be completed. I use Route 53 and I'm sure that my domain is delegated to it. I assume I can activate a sub domain, but what is wrong with my root domain? Amplify automatically adds dns records it needs, so it is not my mistake. Can anyone please help me activate my root domainFollowComment"

Answer: "0Sub domain activated. Now I try to enable root domain from domain management page, after I click update I see "Update domain association failed".I suppose something can be wrong with redirection rule (redirection to www subdomain). When I try to remove this rule I can't save it (I see spinner, but no response)Edited by: MikhailOG on Feb 15, 2021 12:15 PMCommentShareMikhailOGanswered 2 years ago0Now I've activated my domain. The issue was that I have several IAM users and one user had the same app with another name connected to domain.CommentShareMikhailOGanswered 2 years ago0Glad to see that you were able to set it up! For future reference, we have these 2 guides for common issues with Custom Domains:[1]: https://docs.aws.amazon.com/amplify/latest/userguide/custom-domain-troubleshoot-guide.html[2]: https://github.com/aws-amplify/amplify-console/blob/main/FAQ.mdCommentSharefdingleranswered 2 years ago"


Question: How do I find the IP(s) blocking deletion of an InternetGateway?

"I am trying to delete a CloudFormation stack, but have run into errors deleting a few resources. Of 28 resources, 5 failed to delete: AWS::EC2::InternetGateway, 2x AWS::EC2::Subnet, AWS::EC2::VPC, and AWS::EC2::VPCGatewayAttachment. The InternetGateway, Subnets, and VPC all show an error stating there are dependencies and cannot be deleted. The VPCGatewayAttachment says the VPC "has some mapped public address(es). Please unmap those public address(es) before detaching the gateway."If I try an manually detach the InternetGateway from the VPC, I get the same error that the VPC "has some mapped public address(es). Please unmap those public address(es) before detaching the gateway."I cannot find any Elastic IPs in this VPC that haven't already been deleted. How do I find what is preventing these resources from deleting?FollowComment"

Answer: "0The first thing I would try is to run aws ec2 describe-addresses using the AWS CLI and then track down the instance(s) using those IPs by looking at their network interface.CommentShareEXPERTBrettski-AWSanswered a year ago0If the aws ec2 describe-addresses from the other answer does not work, please check that you have deleted any NAT Gateway(s).  They have EIPs and have caused for me a similar issue that you are seeingCommentSharesetheliotanswered a year ago"


Question: Modbus error

"I'm getting the following error when attempting to send a request to a modbus port.2021-02-07T20:21:16.051Z [INFO] (pool-2-thread-40) aws.greengrass.Modbus: protocol_adapter.py:365,Client connecting.... {serviceInstance=0, serviceName=aws.greengrass.Modbus, currentState=RUNNING}2021-02-07T20:21:16.053Z [ERROR] (pool-2-thread-27) aws.greengrass.Modbus: sync.py:341,Could not configure port: (22, 'Invalid argument'). {serviceInstance=0, serviceName=aws.greengrass.Modbus, currentState=RUNNING}2021-02-07T20:21:16.067Z [ERROR] (pool-2-thread-27) aws.greengrass.Modbus: sync.py:341,Could not configure port: (22, 'Invalid argument'). {serviceInstance=0, serviceName=aws.greengrass.Modbus, currentState=RUNNING}2021-02-07T20:21:16.067Z [INFO] (pool-2-thread-40) aws.greengrass.Modbus: protocol_adapter.py:369,Connected. {serviceInstance=0, serviceName=aws.greengrass.Modbus, currentState=RUNNING}Here is my config for the modbus component:"aws.greengrass.Modbus": {"version": "2.0.3","configurationUpdate": {"merge": {"lambdaExecutionParameters": {"EnvironmentVariables": {"ModbusLocalPort": "/dev/usb/hiddev0"}},"containerMode": "NoContainer"}}},Initially, I got a permissions error, but then I did ran chmod 777 on /dev/usb/hiddev0. This fixed the permissions error, but then it gave the "Could not configure port" error.Below is my publishing component:com.example.pubModbus.py:ipc_utils = myUtils.IPCUtils()connection = ipc_utils.connect()ipc_client = client.GreengrassCoreIPCClient(connection)topic = "modbus/adapter/request"messageInput = '{"request": {"operation": "ReadCoilsRequest","device": 1,"address": 1,"count": 1 },"id": "MyRequest"}'request = PublishToTopicRequest()request.topic = topicpublish_message = PublishMessage()publish_message.binary_message = BinaryMessage()publish_message.binary_message.message = bytes(messageInput, "utf-8")request.publish_message = publish_messageoperation = ipc_client.new_publish_to_topic()operation.activate(request)future = operation.get_response()future.result(TIMEOUT)In the above publisher, I tried to use a JsonMessage() instead of BinaryMessage(), but that caused a runtime error in the publisher component.Also, the usb device is in the /dev/bus/usb/001/00x location. Here is a information on the device:udevadm info /dev/bus/usb/002/007P: /devices/pci0000:00/0000:00:06.0/usb2/2-2N: bus/usb/002/007E: BUSNUM=002E: DEVNAME=/dev/bus/usb/002/007E: DEVNUM=007E: DEVPATH=/devices/pci0000:00/0000:00:06.0/usb2/2-2E: DEVTYPE=usb_deviceE: DRIVER=usbE: ID_BUS=usbE: ID_MM_DEVICE_IGNORE=1E: ID_MODEL=5161E: ID_MODEL_ENC=5161E: ID_MODEL_FROM_DATABASE=USB to SerialE: ID_MODEL_ID=5161E: ID_REVISION=0003E: ID_SERIAL=0665_5161E: ID_USB_INTERFACES=:030000:E: ID_VENDOR=0665E: ID_VENDOR_ENC=0665E: ID_VENDOR_FROM_DATABASE=Cypress SemiconductorE: ID_VENDOR_ID=0665E: MAJOR=189E: MINOR=134E: PRODUCT=665/5161/3E: SUBSYSTEM=usbE: TYPE=0/0/0E: USEC_INITIALIZED=9372104378I have also tried to create a usb serial adapter by running:sudo modprobe usbserial vendor=0x0665 product=0x5161This had no effect and did not report any results in dmesg.Any help would be appreciated. Thanks.FollowComment"

Answer: "0I kind of recall that the suggest default port number of Modbus-TCP was 502.   Port 22 is usually used for SSH.  So the port 22 might be already occupied or reserved for SSH service or deamon.   Changing the port from 22 to other unused port number might fix the error.Try the below to see if you have ssh deamon, sshd, occupying port number 22.netstat -antp|grep sshEdited by: jx2900 on Feb 7, 2021 3:24 PMCommentSharejx2900answered 2 years ago0Thanks. My ubuntu VM is not running ssh on 22.CommentShareDarrenBanswered 2 years ago0I have traced the error to a call in the modbus lambda component:    try:          orig_attr = termios.tcgetattr(self.fd)          iflag, oflag, cflag, lflag, ispeed, ospeed, cc = orig_attr      except termios.error as msg:      # if a port is nonexistent but has a /dev file, it'll fail here          raise SerialException("Could not configure port: {}".format(msg))  According to the docs on the tcgetattr(), it requires a tty device input. I believe that my issue is that a serial bus adapter is not getting created for my attached usb device.https://www.programcreek.com/python/example/836/termios.tcsetattrhttps://docs.python.org/3/library/termios.htmlCommentShareDarrenBanswered 2 years ago0The problem is that my device's usb connection is not modbus or serial. I will have to take a different approach with connectivity.CommentShareDarrenBanswered 2 years ago"


Question: CodeDeploy Pipeline Failures from appspec Missing Files

"Here's my appspec.yml file:version: 0.0os: linuxfiles:  - source: /    destination: /home/ec2-user/myapphooks:  BeforeInstall:    - location: scripts/remove_root_dir.sh      timeout: 900      runas: root  ApplicationStart:    - location: scripts/install_dependencies.sh      timeout: 300      runas: root    - location: scripts/start_server.sh      timeout: 300      runas: root  ApplicationStop:    - location: scripts/stop_server.sh      timeout: 300      runas: rootHere's my stop_server.sh file under the scripts folder in my Angular root directory:#!/bin/bashisExistApp = `pgrep httpd`if [[ -n  $isExistApp ]]; then    service httpd stop        fiThe error message that I get is "ScriptMissing" at the ApplicationStop step. The script is not missing. I stopped my codedeploy agent, tried to clear out the files under /opt/codedeploy-agent/deployment-root (but many were write protected), and restarted the codedeploy agent. No success after numerous attempts to get CodeDeploy to complete successfully. What should I do to get CodeDeploy working properly?"FollowCommentmoderndayNeo a year agoI'm facing a similar issue. Here's my Appspec.yml:version: 0.0os: linuxfiles:  - source: /src/app.js    destination: /webapps/apphooks:  BeforeInstall:    - location: scripts/test-script.sh "BeforeInstall"  AfterInstall:    - location: scripts/test-script.sh "AfterInstall"  ApplicationStart:    - location: scripts/test-script.sh "ApplicationStart"I clear out all references to previous deployments. I create a new deployment and run it. The error message I get is:scripts/test-script.sh "BeforeInstall" Script does not exist at specified location: /opt/codedeploy-agent/deployment-root/f533eddd-98eb-4276-9454-c657056ccd25/d-ZAJ4AH94G/deployment-archive/scripts/test-script.sh "BeforeInstall" View more.N.b. test-script.sh contains only echo $1. It's a test-file that I'll update once I have this deployment pipeline working sucessfully.My question is: How do I get the EC2 to run the scripts from my project's root directory, and not this /opt/codedeploy-agent/deployment-root/<deployment-id> directory?Share"


Question: AWS Pricing and cost

how to Automated Deployment of Detective ControlsFollowCommentLuca_I EXPERTa year agoCan you please elaborate more?Share

Answer: "1Accepted AnswerHello Usha,Please see this link for a detailed walk-through :https://www.wellarchitectedlabs.com/security/200_labs/200_automated_deployment_of_detective_controls/Thanks.CommentShareNithin Chandran Ranswered a year ago"


Question: Can I extract the code from the aws to save it in Github

"Hi, I am trying to understand if there is a way to extract the code from aws to save it in github. What happend is that my developer has his computer crushed and then had to start from the beginning or redo some changes not saved in the github repository.Thank youFollowComment"

Answer: "0"code from AWS" I don't know the AWS product that you are using, based on the tags at the post I assume that you are using CodePipeline to build something.Use github as your git repository and connect AWS CodePipeline as source.https://docs.aws.amazon.com/codepipeline/latest/userguide/connections-github.htmlCommentShareCarlos Garcesanswered a year agoAWS-User-2831799 a year agoThank you for the reply. the codepipeline was a suggestion When I open codepipeline there is nothing inside. I am not sure the previous developer used it. Is there a way to do it(to export the code to github or download it) without codepipeline or is it possible to use codepipeline anyway even if the previouse developer didnt use it? Thank you againShare0Really need help with that. Could someone answer if there is a way to extract the code from my aws?CommentShareAWS-User-2831799answered a year agoCarlos Garces a year agoPlease clarify your question "code from AWS" is a non sense. Please identify at least the service that you are using.Share0Thank you for the reply. the codepipeline was a suggestion When I open codepipeline there is nothing inside. Is there a way to do it(to export the code to github or download it) without codepipeline or is it possible to use codepipeline anyway even if the previouse developer didnt use it?Thank you againCommentShareAWS-User-2831799answered a year ago"


Question: Aurora PostgreSQL 10 forced upgrade?

"Hello,We plan to, but have not yet migrated to a supported major version of Aurora PostgreSQL since major version 10 was deprecated on January 31. In the announcement, it was stated that forced major version upgrades would only be performed during a maintenance window.If our cluster is marked for automatic upgrade at some point, would this be visible like the usual pending maintenance actions? Would AWS notify us through some other channel? While we are actively preparing to perform this upgrade, we would appreciate knowing when/if it's going to be applied during the maintenance window on any given week.Thanks!FollowComment"

Answer: "0Hi there,That's correct, it will appear under Pending Maintenance, you can also view this through the CLI, see the guide below for how. The guide you referenced has similar information but is for RDS which can have slightly different information depending on the guide: https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_UpgradeDBInstance.Maintenance.htmlIf a notification is sent it will likely be via email, I'm not certain if one will be though so I would keep an eye on this until you upgrade.I hope that helps :)CommentShareSUPPORT ENGINEERBrandonanswered 2 months ago"


Question: Textract - Multi JPEG Job with Queries

"I'm hoping this is possible - I'd like to submit a bucket to Textract which contains an arbitrary number of JPEGs and have them all be processed as one Job, then apply my Queries to that one JobId.  Sample code?FollowComment"

Answer: "0Not out of the box.Either combine all the JPEGs into one PDF or TIFF or use https://github.com/aws-samples/amazon-textract-idp-cdk-stack-samples#demo-queries, which runs step functions for each and allow for customization of the workflow and does include some example questions for Queries.CommentShareMartin Schade _AWS_answered 10 months ago"


Question: Creating Client for Amazon Comprehend with AWS for PHP

"I recently updated from version 1 of the AWS SDK for PHP to version 3 of the AWS SDK so that I could start testing scripts using the Comprehend and Textract applications. I was able to connect through version 3 and utilize S3 using the "new S3Client()" command. There's extensive documentation regarding functions for Comprehend and Textract, but I can't figure out what the similar new client string is for each service. I've tried:$cc = new comprehendClient();$cc = new AWSComprehend();$cc = new createComprehend();and more and none of these have worked. If anyone can recommend a fix that would be really helpful. Likewise, if there's an online code repository I should look at that would be helpful. I see plenty of code samples for S3, but none for other applications (at least with SDK for PHP). Thanks!FollowComment"

Answer: "0Accepted AnswerIn the below code, enter in your access key and secret keyNote: it is bad practice to hardcode access key and secret key in code, but do it here just to show that it works.Link: https://docs.aws.amazon.com/sdk-for-php/v3/developer-guide/guide_credentials_hardcoded.htmlAlso, in your original code, you used single quotes around the    'key' => '$access_key',    'secret' => '$secret_key'You need to remove the single quotes because that causes the text within single quotes to appear "as is". i.e. the code will see '$access_key' instead of the value assigned to the variable $access_key. So changed to:    'key' => "$access_key",    'secret' => "$secret_key"Try the code below (after changing the access key/secret key).<?php  chdir("C:\aws_v3");  require 'aws-autoloader.php';  use Aws\Comprehend\ComprehendClient;  $access_key = "<enter your access key here";   $secret_key = "<enter your secret key here";  $client = new ComprehendClient([  'region' => 'us-east-1',    'version' => 'latest',    'credentials' => [    'key' => "$access_key",    'secret' => "$secret_key"    ]    ]);  $result = $client->detectSentiment([    'LanguageCode' => 'en',    'Text' => 'It was such a wonderful day full of laughter and smiles',    ]);    print($result);?>Those changes should get you further. If you still are getting the  'cURL error 28' error, let me know..-randyCommentShareRandyTakeshitaanswered 4 years ago0Hi,Here is an example of Comprehend using the AWS SDK for PHP version 3.<?php   require '/root/vendor/autoload.php';   use Aws\Comprehend\ComprehendClient;   $client = new ComprehendClient([       'region' => 'us-east-1',       'version' => '2017-11-27'    ]);   $result = $client->detectSentiment([      'LanguageCode' => 'en',      'Text' => 'It was such a wonderful day full of laughter and smiles',]);  print($result);?>And this is the output:[root@ip-172-31-88-126 work]# php test.phpModel Data----------Data can be retrieved from the model object using the get() method of themodel (e.g., `$result->get($key)`) or "accessing the result like anassociative array (e.g. `$result['key']`). You can also execute JMESPathexpressions on the result data using the search() method.{    "Sentiment": "POSITIVE",    "SentimentScore": {        "Positive": 0.9989492297172546,        "Negative": 1.9858167433994822e-5,        "Neutral": 0.0005906018195673823,        "Mixed": 0.0004403026250656694    },    "@metadata": {        "statusCode": 200,        "effectiveUri": "https:\/\/comprehend.us-east-1.amazonaws.com",        "headers": {            "x-amzn-requestid": "1c39a68f-078e-4c46-be8b-4890ac395499",            "content-type": "application\/x-amz-json-1.1",            "content-length": "166",            "date": "Sat, 31 Aug 2019 03:42:38 GMT"        },        "transferStats": {            "http": [                []            ]        }    }}I used the following links to help build the above code:Link: https://docs.aws.amazon.com/aws-sdk-php/v3/api/class-Aws.Comprehend.ComprehendClient.htmlLink: https://docs.aws.amazon.com/aws-sdk-php/v3/api/api-comprehend-2017-11-27.htmlLink: https://docs.aws.amazon.com/sdk-for-php/v3/developer-guide/s3-examples-creating-buckets.htmlHope this helps!-randyCommentShareRandyTakeshitaanswered 4 years ago0Thanks Randy. This was helpful - making progress but not quite there yet. I had to make some slight changes and used a different require statement and also added to credentials into the new client initialization statement (Initialization 2 in the code below). When I include this, I get the following message:"Fatal error: Uncaught exception 'Aws\Comprehend\Exception\ComprehendException' with message 'Error executing "DetectSentiment" on "https://comprehend.us-east-1.amazonaws.com"; AWS HTTP error: Client error: POST https://comprehend.us-east-1.amazonaws.com resulted in a 400 Bad Request response: {"__type":"UnrecognizedClientException","message":"The security token included in the request is invalid."} UnrecognizedClientException (client): The security token included in the request is invalid. - {"__type":"UnrecognizedClientException","message":"The security token included in the request is invalid."}' exception 'GuzzleHttp\Exception\ClientException' with message 'Client error: POST https://comprehend.us-east-1.amazonaws.com resulted in a 400 Bad Request response: {"__type":"UnrecognizedClientException","message":"The security token included in the request is invalid."} ' in C:\aws_v3\GuzzleHttp\Exception\RequestException.php:113 Stack trace: #0"/I think this likely means that I still have to tweak the connection string. The other error I get when I use the initialization string you provided (Initialization 1 below) involves cURL:Uncaught exception 'GuzzleHttp\Exception\ConnectException' with message 'cURL error 28: Connection timed out after 1000 milliseconds (see http://curl.haxx.se/libcurl/c/libcurl-errors.html)' in C:\aws_v3\GuzzleHttp\Handler\CurlFactory.php:185 Stack trace: #0My guess is that the first error / initialization string is closer to what I'll ultimately need to get past this. I've tried some other function calls with Amazon Textract and I'm running into the same pair of errors. Let me know if you have any other thoughts. Thanks!Code:<?php    chdir("C:\aws_v3");       //require '/root/vendor/autoload.php';     require 'aws-autoloader.php';     use Aws\Comprehend\ComprehendClient;     //Initialization 1     $client = new ComprehendClient(\[         'region' => 'us-east-1',         'version' => 'latest'      ]);    //Initialization2  /*  $access_key = "ACCESS_KEY";  $secret_key = "SECRET_KEY";       $client = new ComprehendClient(\[         'region' => 'us-east-1',         'version' => 'latest',      'credentials' => \[          'key'    => '$access_key',          'secret' => '$secret_key'  ]      ]);  */        $result = $client->detectSentiment(\[        'LanguageCode' => 'en',        'Text' => 'It was such a wonderful day full of laughter and smiles',  ]);       print($result);  ?>CommentSharezbdevanswered 4 years ago0This works. Just had to change the single apostrophe to quotes around the access key / secret key and it did the trick! I applied similar changes on the new client code for Textract and that did the trick as well.Thanks again!CommentSharezbdevanswered 4 years ago"


Question: WAF bot control javascript integration in React

"Hi.Has anybody been successful in implementing WAF integration in React pages? I'm told there isn't a npm package, but due to the way we're building I'm getting a not defined errors.We're trying out Bot Control and integrating it with javascript SDK. But we're having trouble comiling our application. We use React to make our web app.I have added <script> section as instructed in documentation and tried to replace fetch call with  AwsWafIntegration.fetch However I get an error:ReferenceError: AwsWafIntegration is not definedAnd my code:const response = await AwsWafIntegration.fetch(url, config)FollowComment"

Answer: "0Hi Artur,re-checked based on your information and I built a small demo that works without such error. I would advice to check the Console page of your browser's inspect feature and see if there are any errors showing up.CommentSharePablo Guzmananswered 5 months ago0Hi Artur - perhaps you are using Typescript? I managed to get this working adding a declaration in a .d.ts file. The typing matches exactly fetch's usual typing.  declare namespace AwsWafIntegration {    declare function fetch(      input: RequestInfo | URL,      init?: RequestInit | undefined    ): Promise<Response>;  }CommentShareBenanswered a month ago"


Question: EKS Fargate Nodes ami / kubelet version stuck?

"I may be missing something, but it seems our fargate nodes aren't updating their AMI and Kubelet version. Fargate notes are 4.14.275-207.503.amzn2.x86_64 / v1.20.7-eks-135321, but our EC2 nodes are on 5.4.188-104.359.amzn2.x86_64 / v1.20.11-eks-f17b81. We are able to update EC2 nodes as the new versions become available and we are notified. The fargate nodes are recycled often as we deploy fairly regularly.It does seem we must have received SOME update as these clusters have been deployed since 2021, and 1.20.11 was released in March?Does anyone know why our fargate nodes won't update?FollowComment"

Answer: "0It is consistent across the board on all clusters and there are no eviction errors.We are not on a technical support tier, so I won't be opening a ticket to spend 1000 dollars on this issue.CommentShareAWS-User-3601128answered a year agoJason_S a year agoSorry but lack of any insight into your account, it could be hard to give you specific directions.Fargate is supposed to update the AMIs, kubelet and agents automatically. It seems specifically the AMI is few versions behind.If your K8s versions are compatible (which it seems to be the case) the best approach is to get support to see if there is any service related issues. You will not be spending 1000 dollars on this.If you have an account team contact, please reach out to them too.Share0First about the obvious - is this behavior universal cross the board? are all Fargate pods stuck at a lower version? If not, have you check and see if there are any eviction errors?If as you suggested you recycle pod fairly frequently and you observed this issue consistently, I would recommend you submit a support ticket so our support engineers can take a deeper look.CommentShareJason_Sanswered a year ago0In case anyone is looking for an answer some day: "We do not have an ETA on when we will migrate Fargate into kernel 5.x, but kubelet will have a faster and more frequent release cycle.the release cycle for minor versions on Fargate is slower than on EKS AMIs, hence the version might be behind, for example for 1.21, Fargate nodes are on 1.21.2 while EKS AMI is on 1.21.5. If there is a critical security vulnerability on a minor version of the kubelet, we do provision that release as soon as it is discovered, so rest assured that the changes between the minor versions are not critical or security related if there is a difference between both."CommentShareAWS-User-8656027answered a year ago"


Question: Invalid scope offline_access for cognito login

"Hi,I am using Cognito login for Google assistant account linking. Below  Cognito, options are selectedAllowed OAuth FlowsAuthorization code grantAllowed OAuth Scopesphoneemailopenidaws.cognito.signin.user.adminprofileWhile login Google actions sending below requesthttps://<domain>.amazoncognito.com/oauth2/authorize?response_type=code&client_id=<id>&redirect_uri=https://oauth-redirect.googleusercontent.com/r/<App id>&scope=email+profile+offline_access+openid&state=<state>For this Cognito through error as invalid scopehttps://oauth-redirect.googleusercontent.com/r/<App id>?error_description=invalid_scope&state=<state>&error=invalid_requestThis is happening due to offline_access. Google actions team says it has to handle at login side only.Can anyone help why Cognito rejects offline_access And how to add it to Cognito login?Thanks,PrashanthFollowComment"


Question: Redshift Serverless Storage Limitations

"With Provisioned Clusters, the maximum limit of the storage on RA3 (considering the maximum number of nodes) is around 16PBWhat is the maximum limit on the amount of data that can be stored with AWS Redshift Serverless?FollowComment"

Answer: "2With Redshift Serverless you do not provision nodes. Instead you start with Base RPU, which is Redshift Processing Units. You can go as high as 512 RPU's. Redshift Serverless handles the provisioning and scaling of compute for you. The serverless instance can scale higher from the Base RPU to accommodate more queries as they come in automatically up to the usage limit you specify in Max RPU's.Recently announced configurations of 8 RPU and 16 RPU support Redshift managed storage (RMS) capacity of up to 128 TB. If you're using more than 128 TB of managed storage, you can't downgrade to less than 32 RPU.Max storage for Redshift Serverless is 8 PB of RMS for 512 RPUs.CommentShareMilindOkeanswered 3 months agoSanthosha 3 months agoMax storage for Redshift Serverless is 8 PB of RMS for 512 RPUs, Is there a documentation somewhere on this?ShareMilindOke 3 months agoI was searching for documentation link and indeed this is not currently documented. I have passed a note to the Redshift PM's for adding this to documentation.Share2The maximum limit on the amount of data that can be stored with AWS Redshift Serverless depends on the size of the cluster, which can scale dynamically based on workload demands.AWS Redshift Serverless allows you to store petabytes of data in a cost-effective manner without having to manage complex infrastructure or manually scaling your cluster. The amount of data you can store depends on the size of the cluster you provision, which can be scaled up or down based on your workload requirements.With AWS Redshift Serverless, you can scale your cluster from 1 to 128 compute nodes, and each node can have up to 60TB of storage. This means that the maximum amount of data you can store with AWS Redshift Serverless is up to 7.68 petabytes (assuming 128 nodes, each with 60TB of storage).It's worth noting that the actual amount of data you can store may be less than the maximum limit due to other factors, such as compression, replication, and other metadata that is stored in your cluster.CommentShareAWS_Guyanswered 3 months agoSanthosha 3 months agoWith AWS Redshift Serverless, we do not provision the nodes instead we select the RPUs.Share"