Question: AWS Landing Accelerator

"I am trying to deploy a Landing zone from my CLI using the LZA cloudformation tempelate and the AWS github repo: https://github.com/awslabs/landing-zone-accelerator-on-aws#aws-acceleratorconfig   and I am stuck at a parameter field which I do not know what it is refering to. I have made the section bold (AcceleratorQualifier,ParameterValue=<Accelerator_Qualifier>), I would appreciate it if someone could explain to me what value I need to input in that section. Many Thanksaws cloudformation create-stack --stack-name AWSAccelerator-InstallerStack --template-body file://cdk.out/AWSAccelerator-InstallerStack.template.json \--parameters ParameterKey=RepositoryName,ParameterValue=<Repository_Name> \ParameterKey=RepositoryBranchName,ParameterValue=<Branch_Name> \ParameterKey=**AcceleratorQualifier,ParameterValue=<Accelerator_Qualifier> \**ParameterKey=ManagementAccountId,ParameterValue=<Management_Id> \ParameterKey=ManagementAccountEmail,ParameterValue=<Management_Email> \ParameterKey=ManagementAccountRoleName,ParameterValue= \ParameterKey=LogArchiveAccountEmail,ParameterValue=<LogArchive_Email> \ParameterKey=AuditAccountEmail,ParameterValue=<Audit_Email> \ParameterKey=EnableApprovalStage,ParameterValue=Yes \ParameterKey=ApprovalStageNotifyEmailList,ParameterValue=comma-delimited-notify-emails \ParameterKey=ControlTowerEnabled,ParameterValue=Yes \--capabilities CAPABILITY_IAMFollowComment"

Answer: "0That is just an identifier that is used for naming several of the components that are deployed alongside with the stack. Use AWSAccelerator as an example.Note that there's also more user-friendly, guided way to deploy the LZA. If you go here and click "Launch solution", it'll provide you with a precompiled CloudFormation template and show the relevant parameters with description directly in the AWS Console.CommentShareDanielanswered 2 months agoseyed 2 months agoThank you very much Daniel.ShareDaniel 2 months agoSure! Feel free to accept the answer if it's been useful. Thank you!Share"


Question: Unable to recieve email address verification email through SNS

"Hi all,I've created an SES domainI've created an addressI've created a rule -> SNSI've created a subscription to the SNS topic -> my personal emailI've sent the address validation email again and againThe result is that I don't receive the validation email in my personal email. I've followed this guide to setup everything:https://medium.com/responsetap-engineering/easily-create-email-addresses-for-your-route53-custom-domain-589d099dd0f2The SNS subscription works, because I receive emails whenever I publish test messages to the SNS topic. Something seems to be wrong in the SES -> SNS integration, but I've double checked and found nothing.ThanksFollowComment"

Answer: "0For some reason I needed the MX record, that is not created automatically in the domain creation process.Thanks all.CommentSharealbert-serralleanswered 2 years ago0Hi,I had a look at the doc you linked. It's actually a misunderstanding of how SES and email/DNS work. The very purpose of verifying a domain is that you don't have to verify individual email addresses. So once you verified foo.com, there is no need to verify no_reply@foo.com to send emails from it. This also saves you from all the hacky setup suggested by the author with the inbound + rule setup.Hope it clarifies.CommentShareAWS-User-9331904answered 2 years ago"


Question: Directory issue

I am unable to create a directory of type ad connector. directory went to failed state.I got an error allow port 53.Can you please help me in creating an ad connectorFollowComment

Answer: "0Port 53 is a DNS lookup port. It sounds like there is a requirement that is missing for your to build the AD Connector.Please give a read to the AD Connector Prerequisites.https://docs.aws.amazon.com/directoryservice/latest/admin-guide/prereq_connector.htmlSee?Ports for subnetsFor AD Connector to redirect directory requests to your existing Active Directory domain controllers, the firewall for your existing network must have the following ports open to the CIDRs for both subnets in your Amazon VPC.    TCP/UDP 53 - DNS    TCP/UDP 88 - Kerberos authentication    TCP/UDP 389 - LDAPLet me know if you have any issues with this, or if it helps you then please accept my answer after you've tried it out - it would be much appreciated! Good luck :)CommentShareD Ganswered 9 days ago"


Question: Error in test invoke authorizer command for testing the authorizer

I created token signature with the below command:echo -n tokenKeyValue | openssl dgst -sha256 -sign private-key.pem| openssl base64NOw testing the authorizer by test invoke authorizer in aws CLI with the command:aws iot test-invoke-authorizer --authorizer-name my-new-authorizer --token tokenKeyValue --token-signature  {created signature}I am getting an error :   unknown options:tokenKeyValue.Please guideFollowComment

Answer: "1The error message you're encountering is likely due to an incorrect syntax in the command you're using.Here's the correct syntax for the aws iot test-invoke-authorizer command:aws iot test-invoke-authorizer--authorizer-name my-new-authorizer--token "tokenKeyValue"--token-signature "$(echo -n "tokenKeyValue" | openssl dgst -sha256 -sign private-key.pem | openssl base64)"Note that the tokenKeyValue and the token-signature values need to be passed in quotes, as they are string values. Also, the calculation of the token-signature value should be included in the command.CommentShareMuhammad Imrananswered 4 months agorePost-User-1474705 4 months agoThank You for the reply.I followed your instructions.Now I am getting the following error:An error occurred (InvalidRequestException) when calling the TestInvokeAuthorizer operation: Token signature mismatch for authorizer my-new-authorizer.I am using Openssl version:OpenSSL 1.1.1s  1 Nov 2022Windows10.Kindly helpShareMuhammad Imran 4 months agoThe error message suggests that the token signature you are passing in the command is incorrect. Here are a few steps you can try to resolve this issue:Check the private key file: Ensure that the private-key.pem file is the correct private key that corresponds to the public key you associated with the authorizer when you created it.Check the tokenKeyValue value: Ensure that the tokenKeyValue value is the correct token string that you generated and passed to the device/client when it attempted to connect to AWS IoT.Verify the token signature calculation: Ensure that the calculation of the token-signature value is correct by using the openssl command provided in the correct syntax.Use a different version of OpenSSL: Some versions of OpenSSL may not be compatible with the version of the OpenSSL library used by AWS IoT. Try using a different version of OpenSSL.If none of these steps resolve the issue, consider consulting the AWS documentation or reaching out to AWS support for further assistance.SharerePost-User-1474705 4 months agoam still getiing the error:An error occurred (InvalidRequestException) when calling the TestInvokeAuthorizer operation: Token signature mismatch for authorizer my-new-authorizer.1.How to check tokenKeyValue value is correct?2.How to verify the token signature calculation?I have ensured that the private-key.pem file is the correct private key that corresponds to the public key associated with the authorizer.Kindly helpShare"


Question: TTL field not supported in Step Functions SDK service integration with Route 53

"I tried to write a step function which upsert a DNS A record on Route 53.  However, the field TTL is not supported by step function:"cause": "An error occurred while executing the state 'UpsertARecord' (entered at the event id #9). The Parameters '{\"HostedZoneId\":\"xxxxxxxxxxxxxxxxxxx\",\"ChangeBatch\":{\"Changes\":[{\"Action\":\"UPSERT\",\"ResourceRecordSet\":{\"Name\":\"xxx.yyy.domain.\",\"Type\":\"A\",\"ResourceRecords\":[{\"Value\":\"10.0.0.36\"}],\"TTL\":300}}]}}' could not be used to start the Task: [The field \"TTL\" is not supported by Step Functions]"However, this field seems to be required by the API ChangeResourceRecordSets."cause": "Invalid request: Expected exactly one of [AliasTarget, all of [TTL, and ResourceRecords], or TrafficPolicyInstanceId], but found none in Change with [Action=UPSERT, Name=xxx.yyy.domain., Type=A, SetIdentifier=null] (Service: Route53, Status Code: 400, Request ID: d5ae58b1-e5bf-4365-a9b4-991c3736eabc)"It is the state involved:    "UpsertARecord": {      "Type": "Task",      "Resource": "arn:aws:states:::aws-sdk:route53:changeResourceRecordSets",      "Parameters": {        "HostedZoneId": "xxxxxxxxxxxxxxxxxxx",        "ChangeBatch": {          "Changes": [            {              "Action": "UPSERT",              "ResourceRecordSet": {                "Name": "xxx.yyy.domain.",                "Type": "A",                "TTL.$": "$.TTL.TTL",                "ResourceRecords": [                  {                    "Value.$": "$.InstanceDetail.Reservations[0].Instances[0].PrivateIpAddress"                  }                ]              }            }          ]        }      },      "ResultPath": "$.ChangeInfo",      "Next": "CheckStatus"    },Besides using a Lambda function instead, are there any alternatives if I want to keep using Step Function?FollowComment"

Answer: "0TTL field is not directly supported by Step Functions, but you can still use Step Functions . you can use an AWS SDK Lambda function to call the Route 53 API.just an example please modifyLambda functionimport jsonimport boto3route53 = boto3.client('route53')def lambda_handler(event, context):    hosted_zone_id = event['HostedZoneId']    change_batch = event['ChangeBatch']        response = route53.change_resource_record_sets(        HostedZoneId=hosted_zone_id,        ChangeBatch=change_batch    )        return responseAdd the necessary permissions to the Lambda (AmazonRoute53FullAccess policy or a custom policy that allows the route53:ChangeResourceRecordSets)Step Function"UpsertARecord": {  "Type": "Task",  "Resource": "arn:aws:lambda:<REGION>:<ACCOUNT_ID>:function:<YOUR_LAMBDA_FUNCTION_NAME>",  "Parameters": {    "HostedZoneId": "xxxxxxxxxxxxxxxxxxx",    "ChangeBatch": {      "Changes": [        {          "Action": "UPSERT",          "ResourceRecordSet": {            "Name": "xxx.yyy.domain.",            "Type": "A",            "TTL.$": "$.TTL.TTL",            "ResourceRecords": [              {                "Value.$": "$.InstanceDetail.Reservations[0].Instances[0].PrivateIpAddress"              }            ]          }        }      ]    }  },  "ResultPath": "$.ChangeInfo",  "Next": "CheckStatus"}CommentShareEXPERTsdtslmnanswered 2 months ago"


Question: AWS SSO ERROR 403 with AD connector

"I have enabled AWS SSO and set directory source to be my AD connector. Users authenticate without issue, however login into accounts show below errorhttps://ibb.co/XC2LvgPBelow cloudtrail event{"eventVersion": "1.08","userIdentity": {"type": "Unknown","principalId": "local.test//S-1-5-21-2194430433-125441924-3567485280-1114","accountId": "","userName": "admin3000@local.test"},"eventTime": "2022-06-18T17:34:02Z","eventSource": "sso.amazonaws.com","eventName": "Federate","awsRegion": "eu-central-1","sourceIPAddress": "","userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.0.0 Safari/537.36","errorCode": "403","errorMessage": "Forbidden","requestParameters": null,"responseElements": null,"requestID": "8090dc61-de3a-4bde-9275-f6efa75db024","eventID": "1c10d90b-b47b-4a48-93e3-bc6f870dd7b9","readOnly": false,"eventType": "AwsServiceEvent","managementEvent": true,"recipientAccountId": ,"serviceEventDetails": {"role_name": "AdministratorAccess","account_id": ""},"eventCategory": "Management"}Also in terminal below error happens while using same user to log with aws sso cliAn error occurred (ForbiddenException) when calling the GetRoleCredentials operation: No accessI have checked all roles of SSO and seems nothing is missed. Also issue happens when the identity store is AD, however no issue while identity store is the internal SSO identity store.Can you please advise.RegardsAliFollowComment"

Answer: "0Hi There,I don't think the issue from the integration between AD and SSO due to below pointsAuthentication is working without any problem. Only issue with authorizationI have already used guided processUsers are presented in SSO, issue again when user try to use any accounts will get 403, it happens after the authentication.CommentSharerePost-User-2618137answered a year agoFabienG 4 months agoHi,Any update on this issue ?I've the 403 error too.RegardsShare0Hello thereAccording to the information given,  There are few reasons why you can experience this error during sign-in.Make sure to use the exact name of your role, because role names are case sensitive.Correct the name of the role in the SAML service provider configuration.The sso_role_name does not match the permission set associated with the user.Furthermore check with the sso_account_id value. You would need to make sure that the account number is correct. Also make sure that account number is not within quotes.You need to accomplish this by using AWS CLI to check the list of permission sets associated with the user.Hence,you need to login to AWS Management Console and follow this documentation.Resource:https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/welcome.htmlhttps://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListPermissionSets.htmlhttps://docs.aws.amazon.com/IAM/latest/UserGuide/troubleshoot_saml.html#troubleshoot_saml_missing-roleCommentShareNosiphiwoanswered a year ago0Hello There,I think you have missed my point, I am not using ADFS with SAML. I am using AWS SSO and source is AD connector. So all of these settings has been created by AWS SSO. Even I can't modify any of these created SSO roles. Below steps I have used1- Created a service account in AD to be used by AD connector.2- Changed AWS SSO identity source to this AD connector3- Set permission sets to access the AWS accounts.4- Authentication part is working but problem with role authorization.So please suggest what can be done.CommentSharerePost-User-2618137answered a year ago0When your Identity source is AD Connector, you need to consider the provisioning method that your AWS SSO is using, There two provisioning methods when connecting to AD either using AD Connector of AWS Managed AD which are Configurable AD Sync and AD Sync. You can view the method SSO using from the SSO settings page.If Configurable AD Sync is in use, then you have to follow the steps here to properly setup and provision the users.Reference:https://docs.aws.amazon.com/singlesignon/latest/userguide/provision-users-from-ad-configurable-ADsync.htmlCommentShareNosiphiwoanswered a year ago"


Question: CloudWatch DataProcessing-Bytes

In Cost Explorer there is a CloudWatch charge called 'DataProcessing-Bytes' (prefixed with region name). What is this charge?FollowComment

Answer: 0Accepted AnswerPlease refer this documentation for more details. Basically its cost for  'PutLogEvents' Operation and from Cost Explorer you can group by API Operation (PutLogEvents) and Usage Type (<region>-DataProcessing-Bytes) to see this combination of charges.CommentShareEXPERTGokulanswered 3 years ago


Question: Does RDS Custom for SQL Server send t-logs to S3?

Does RDS Custom for SQL Server send transaction logs to S3?FollowComment

Answer: "0Accepted AnswerYes. On RDS Custom for SQL Server, T-logs are backed up on S3 and customers have access to it.CommentSharelightanswered 15 days ago"


Question: S3 Bucket name trough RDS DB identifier name

"How can i fetch s3 bucket name associated with the given RDS DB identifier name using java code?FollowCommentAndreas Seemueller EXPERT2 months agoHi, could you detail the use cases a little bit more? Which RDS DB type are you using? Which S3 bucket do you want to identify? Why do you want to interact with that bucket?Share"

Answer: "0Hello,Greetings of the day!! Thank you for contacting AWS.Unfortunately, there is no direct way to pull out the S3 Bucket name associated with the RDS DB identifier name. However, Its the IAM role that will be associated with the RDS instance and the policy of the IAM role will have the S3 bucket name and permissions. As Code support is beyond scope of AWS Support. I researched on this and on the best effort basis, providing you below documents which can prove to be useful to you.Code snippet of AWS SDK in Java to get a policy :[+] https://docs.aws.amazon.com/sdk-for-java/v1/developer-guide/examples-iam-policies.html#getting-a-policy[+] https://github.com/awsdocs/aws-doc-sdk-examples/blob/main/java/example_code/iam/src/main/java/aws/example/iam/GetPolicy.javaCommentShareSUPPORT ENGINEERSania_Kanswered 2 months ago"


Question: "[Announcement] (DEPRECATED) Amazon Relational Database Service (RDS) for PostgreSQL 9.6 End-of-Life date is January 18, 2022"

"This is an outdated announcement. Please refer to the latest Amazon RDS for PostgreSQL 9.6 end-of-life timeline here: https://forums.aws.amazon.com/ann.jspa?annID=9092Amazon RDS is starting the end of life (EOL) process for PostgreSQL major version 9.6. We are doing this because the PostgreSQL community is planning to discontinue support for PostgreSQL 9.6 on November 11, 2021 [1].To avoid availability impact during a time of the year when many customers' databases tend to experience their peak workload, Amazon RDS for PostgreSQL 9.6 will reach EOL on January 18, 2022 00:00:01 AM UTC. While you will be able to run your RDS for PostgreSQL 9.6 databases between community PostgreSQL 9.6 EOL (November 11, 2021) and RDS for PostgreSQL 9.6 EOL (January 18, 2022), the databases will not receive any security patches during this extended availability period. We strongly recommend that you proactively upgrade your RDS for PostgreSQL 9.6 databases to major version 12 or greater before community EOL. PostgreSQL 12 contains major innovations including JSON path queries per SQL/JSON specifications and pluggable table storage interface [2]. PostgreSQL 13 will introduce parallel processing of indexes with the VACUUM command and improved duplicate data handling by B-tree indexes [3]. Both versions contain numerous fixes to various software bugs in earlier versions of the database.If you do not upgrade your databases before January 18, 2022, RDS will upgrade your PostgreSQL 9.6 databases to 12 during a scheduled maintenance window between January 18, 2022 00:00:01 UTC and February 22, 2022 00:00:01 UTC. On February 22, 2022 00:00:01 AM UTC, any PostgreSQL 9.6 databases that remain will be upgraded to version 12 regardless of whether the instances are in a maintenance window or not.We recommend that you first upgrade to minor version 9.6.20 or greater and then upgrade directly to PostgreSQL 12 or greater so that you can skip intermediate major versions. You can initiate an upgrade of your database instance — either immediately or during your next maintenance window — to a newer version of PostgreSQL using the AWS Management Console or the AWS Command Line Interface. The upgrade process will shut down the database instance, perform the upgrade, and restart the database instance. The database instance may be restarted multiple times during the upgrade process. While major version upgrades typically complete within the standard maintenance window, the duration of the upgrade depends on the number of objects within the database. To avoid any unplanned unavailability outside your maintenance window, we recommend that you first take a snapshot of your database and test the upgrade to get an estimate of the upgrade duration. To learn more about upgrading PostgreSQL major versions in RDS, review the Upgrading Database Versions page [4].We want to make you aware of the following additional milestones associated with upgrading databases that are reaching EOL.Now through January 18, 2022 00:00:01 AM UTC - You can initiate upgrades of Amazon RDS for PostgreSQL 9.6 instances to PostgreSQL 12 or greater at any time.August 3, 2021 00:00:01 AM UTC  - After this date and time, you cannot create new RDS instances with PostgreSQL major version 9.6 from either the AWS Console or the CLI.January 18, 2022 00:00:01 AM UTC - Amazon RDS will automatically upgrade PostgreSQL 9.6 instances to version 12 within the earliest scheduled maintenance window that follows. After this date and time, restoration of Amazon RDS for PostgreSQL 9.6 database snapshots will result in an automatic upgrade of the restored database to a still supported version at the time.February 22 2022 00:00:01 AM UTC – Amazon RDS will automatically upgrade any remaining PostgreSQL 9.6 instances to version 12 whether or not they are in a maintenance window.If you have any questions or concerns, the AWS Support Team is available on the community forums and via Premium Support [5].References[1] https://www.postgresql.org/support/versioning/[2] https://aws.amazon.com/about-aws/whats-new/2019/11/postgresql-12-0-now-available-in-amazon-rds-database-preview-environment/[3] https://aws.amazon.com/about-aws/whats-new/2020/06/postgresql-13-beta-1-now-available-in-amazon-rds-database-preview-environment/[4] https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_UpgradeDBInstance.Upgrading.html#USER_UpgradeDBInstance.Upgrading.Manual[5] http://aws.amazon.com/supportFollowCommentNitin_T SUPPORT ENGINEERa year agoThis is an announcement migrated from AWS Forums that does not require an answerShare"

Answer: 0[Announcement] Does not require an answer.CommentShareEXPERTIsraa-Nanswered 18 days ago


Question: Amazon Connect and Voicemail solution

One point in the solution guide: https://docs.aws.amazon.com/solutions/latest/voicemail-for-amazon-connect/deployment.html#step2 that I couldn't get to work.When I try to doStep 4. Generate and Download Contact Flowsthe save and download buttons are both greyed out.   They never change to where I can click on them.FollowComment

Answer: "1As it turned out, the answer was I had the same login for administrator and manager.   I didn't need to differentiate.   The solution let me make them the same.   I noticed that it had me designated as a manager.  The manager cannot download or update the information.  I made them different and I can access administrator.CommentShareHot Cookieanswered a year ago0I believe it has to do with the password you sent. Make sure to set different passwords for each user.CommentSharedmaciasanswered a year ago0Now that I have the buttons available, nothing downloads.   Why is that?CommentShareHot Cookieanswered a year ago"


Question: Handling Java RMI in AWS ASG

We have 2 services front end api service and a backend service. In order to get high tps we are using async calls.End user http call lands on one of the tomcat servers in frontendThe frontend calls backend in Async with the context of the server ip and puts the request thread to sleepOnce backend finishes the job it makes a callback to frontend using rmi with the server ip it got in contextIn the callback the original http thread is invoked.The invoked http request thread consumes the prepared data from cache and completes the response.This was fine till we were in physical DC as we used to not scale or de-scale. With AWS ASG the server ip might not exist by the time backend service tries to make a callback. Due to this the request at the user end needs to get requests retried.We want to get out of RMI here and still remain async. Would like to get any solutions for thisFollowComment


Question: AWS Cloudwatch setup - initial_position parameter in the new logs agent

"In older version of AWS Cloudwatch agent, there was a parameter for initial_position. But I am not able to find it in the new Cloudwatch agent. Older version of CloudWatchinitial_position = start_of_fileBut I am not able to find the same anywhere in the new documentation. Please help in pointing to the parameter for this.collect_list :[{"file_path": "/var/log/nginx/access.log","log_group_name": "GroupName","log_stream_name": "nginxAccessLogStream","timezone": "UTC"}]Edit: Found Logs Input Plugin. Field: from_beginninghttps://github.com/aws/amazon-cloudwatch-agent/tree/f870550f94a822f3eceaea0ecb2efdeabe961e5c/plugins/inputs/logfileBut adding it is not running the plugin.FollowComment"


Question: SNS: Unsubscribe Disabled Endpoints Of Push Notification

I use AWS SDK in .NET to unsubscribe any disabled endpoint and I depend on catching EndpointDisabledException to unsubscribe it. But SDK doesn't throw the mentioned exception when I publish messages to disabled endpoints and the behavior of AWS SNS as the following:My .NET App: publish message to a disabled endpoint.SNS: convert endpoint's status from Disabled -> Enabled.Mobile Client: No push notification is received.My .NET App: publish is successful.SNS: disable endpoint again.How can I configure SNS to not enable/disable endpoints automatically?FollowComment


Question: Amplify S3 bucket missing?

"Good Evening,I setup my amplify app through the ui, connected it to my gitlab, route53 with routing my purchased domain from google. I am getting an error now that I am at the limit for free tier storage. My website is less than 500 mb.I tried searching for the S3 bucket that I guess was automagically created but there are zero S3 buckets listed for my account. From what I have been able to find online it looks like amplify keeps all versions of the website. How do I access an S3 bucket to remove extra versions of the website if it doesn't show on my S3 bucket list?** edit **Here is the amplify get-app details. I also ran the jobs and looked at the artifacts, none of the jobs create an artifact. My app is pure css, html, javascript so nothing gets built. I also tried the s3api list-buckets command => empty. And the cloudformation describe-stacks command => empty. From everything I can see, there is not a single storage item associated with my amplify instance and yet I am getting the notification that it is running out of space.{    "app": {        "appId": "an id",        "appArn": "arn:aws:amplify:us-east-2:long number:apps/an id",        "name": "bosonstudioswebsite",        "tags": {},        "repository": "https://gitlab.com/mywebsite",        "platform": "WEB",        "createTime": "2021-05-09T16:00:24.489000-04:00",        "updateTime": "2022-05-15T01:13:05.078000-04:00",        "environmentVariables": {},        "defaultDomain": "an id.amplifyapp.com",        "enableBranchAutoBuild": false,        "enableBranchAutoDeletion": false,        "enableBasicAuth": false,        "customRules": [            {                "source": "https://bosonstudios.com",                "target": "https://www.bosonstudios.com",                "status": "302"            },            {                "source": "/<*>",                "target": "/index.html",                "status": "404-200"            }        ],        "productionBranch": {            "lastDeployTime": "2022-08-13T13:12:36.782000-04:00",            "status": "SUCCEED",            "thumbnailUrl": "its here",            "branchName": "master"        },        "buildSpec": "version: 1\nfrontend:\n  phases:\n    # IMPORTANT - Please verify your build commands\n    build:\n      commands: []\n  artifacts:\n    # IMPORTANT - Please verify your build output directory\n    baseDirectory: /\n    files:\n      - '**/*'\n  cache:\n    paths: []\n",        "customHeaders": "",        "enableAutoBranchCreation": false,        "repositoryCloneMethod": "SSH"    }}FollowCommentahoff_boson 10 months agoSome more information. I installed amplify cli and when I try to pull my project I get an error saying "Cannot find any backend environemnt..." which makes sense because my code is hosted in gitlab. Not sure what to do since none of what the docs say should exist does exist...Share"

Answer: "0I assume you are talking about amplify hosting. From https://aws.amazon.com/amplify/pricing/ you can see costings for that service. If you delete the amplify app it should delete relevant resource backed behind it.Make sure you check each region for S3 if you believe there is a bucket charging, and check Cloudformation also as amplify resources can appear there.CommentShareAWS-Useranswered 10 months agoahoff_boson 10 months agoI am not wanting to delete the website, I want to keep it around. But I don't need to keep all versions that were deployed. I have gitlab for that.the website is hosted in us-east-2, there are no s3 buckets or cloudformation stacks in us-east-2.Share0Got some feedback from aws support.tldr; => use the aws cli to delete existing jobs. Even if they say they didn't produce artifacts, they did, and that is what is eating up storage space. I had 43 jobs (all of my code pushes for changes over the year) so I deleted all but the last 2 and now my usage is at around 50%. It does take a while for the dashboard to reflect the change (like days, not hours)I believe that you are referring to Data storage limit, i..e 5 GB data storage per month is reaching. Here, I would like to mention that this data is stored in the S3 buckets internally and currently AWS Amplify console does not have a feature to visualize the front-end build size....Here, the team has highlighted Artifacts are stored in Amazon S3 after successful deployments. Currently, those objects will remain in S3 unless you delete them by running commands such as "delete-job" to delete artifacts for a specific job or "delete-branch" to delete objects for all of the jobs for a specific branch (and delete the branch itself).https://docs.aws.amazon.com/cli/latest/reference/amplify/delete-job.htmlCommentShareahoff_bosonanswered 9 months ago"


Question: get stable credential for IoT Greengrass device

"I have an already working Greengrass Device. I know that the documented way to handle AWS cred access is through some IoT method that gives you a 12-hour cred.I want to run a long-running service on the device, (telegraf) that requires a standard long-term cred.I'd appreciate suggestions on the easiest way to do this, in a scalable fashion.(ie: "go make a credential one time by hand" doesnt fit the need here)I'd like some kind of method that will work for 100s of greengrass devices, each getting  their own unique AWS credential file.FollowComment"

Answer: "0Hi - Thanks for your question. As you are aware, the AWS IoT Core Credential Provider can issue a credential with a maximum lifetime is 43,200 seconds (12 hours). Having the credential be valid for up to 12 hours can help reduce the number of calls to the credential provider by caching the credential longer. Reference : https://docs.aws.amazon.com/iot/latest/developerguide/authorizing-direct-aws.htmlIn another solution, you could configure an AWS Lambda rule that ingests your device data and sends it to another AWS service. However, in applications (not sure if yours is fitting the needs) that require the uploading of large files such as videos or aggregated telemetry to the AWS Cloud, you may want your devices to be able to authenticate and send data directly to the AWS service of your choice.CommentShareEXPERTAWS-User-Nitinanswered 2 months ago0Generically, Greengrass acts as a credential provider to the AWS SDK for components Greengrass manages. It exposes an environment variable to applications which the SDK uses to request temporary credentials. When those credentials expire, the SDK will request new credentials automatically. You can run long running applications without needing to deploy "long-term" credentials. See https://docs.aws.amazon.com/greengrass/v2/developerguide/interact-with-aws-services.html for details.For your specific case, are you looking to use telegraf with timestream? https://github.com/influxdata/telegraf/tree/master/plugins/outputs/timestream#configuration says that it can pick up credentials from environment variables (it looks like internally it is uses the AWS SDK v2 for go).On your device, is Greengrass managing the telegraf process? If Greengrass runs the application, it can provide the environment variable needed to receive credentials.CommentShareRobanswered 2 months ago0To add on Nitin's and Rob's answers, depending on how telegraf uses the AWS Go SDK, the AWS_CONTAINER_CREDENTIALS_FULL_URI provided by the Token Exchange Service may automatically vend and refresh credentials from the Role Alias. I'd create a Greengrass component that wraps the Startup and Shutdown steps for telegraf, at which point the environment variable will be available to the process. I'm not familiar with how telegraf uses AWS credentials from the config file, but if you leave uncommented, this will quickly test if it works or not.Interacting with AWS Services might be of help too.CommentShareGavin_Aanswered 2 months ago-1Accepted AnswerSome more info that may end up being helpful to people in the long term.For ease of use, I switched to using fluentd+timestream plugin, rather then telegraf.Based on things I read elsewhere, I was hoping that so long as the same instance kept running, it would keep working after the initial successful connection.This was not the case. When the credential expired, its ability to write terminated.so i will have to stick to my original approach.It turns out that ChatGPT is really good at answering my actual question, so asking it,"write a lambda that creates a permenant credential" works very nicely.CommentSharerePost-User-8057778answered 2 months ago-2This might be helpful for youhttps://aws.amazon.com/blogs/iot/how-to-manage-iot-device-certificate-rotation-using-aws-iot/CommentSharerePost-User-5208427answered 2 months agorePost-User-8057778 2 months agoYou didnt read my question carefully. The article you referenced is about how to rotate expiring creds. But I said I want a cred that DOES NOT EXPIRE, aka "long term".Share"


Question: Setup Stack Entitlement with AWS Cognito?

Can i use AWS Cognito to authenticate to AWS Appstream and setup entitlements?My goal is to have one "Golden Image" with all the software installed and authenticate the users to see only the apps they need in catalogue mode....Thanks for any help in advance!FollowComment

Answer: "0Accepted AnswerAt this time, the entitlements capability is limited to users from SAML federation (either via the Stacks application entitlements feature, or the Dynamic Application Framework (which additionally requires the streaming instances be joined to a Microsoft Active Directory domain)). You can learn more here: https://docs.aws.amazon.com/appstream2/latest/developerguide/manage-application-entitlements.html.Instead, you will need to ensure the image only has the software visible that a user should be able to launch. An alternative would be to essentially have your own application that launches the other applications. You could then use session context to pass to the streaming instance which applications should be able to launch, and automatically launch your launcher app. Then your launcher app would parse session context and show users what they need.CommentShareEXPERTMuraliAtAWSanswered a year ago"


Question: About RecognizeCelebrities Actions API

"In my test, it seems Amazon Rekognition detects First Lady Melania Trump,but doesn't detect President Trump.I can reproduce it with aws cli:Steps to Reproduce:President Trump:$ curl -o trump.jpg https://www.whitehouse.gov/wp-content/uploads/2017/11/President-Trump-Official-Portrait-200x200.jpg$ aws rekognition recognize-celebrities --image-bytes fileb://trump.jpg --query "CelebrityFaces[].Name"[]First Lady Melania Trump:$ curl -o flotus.png https://www.whitehouse.gov/wp-content/uploads/2017/11/flotus-200x200.png$ aws rekognition recognize-celebrities --image-bytes fileb://flotus.png --query "CelebrityFaces[].Name"["Melania Trump"]What could be the cause of this problem?I would appreciate if you could suggest possible solutions.FollowComment"

Answer: "0Hi,Thank you for your feedback. I confirmed that Mr Trump is a supported person in this model, and that a number of other photos of him did provide positive matches. I've noted that we need to improve support here onto our backlog. Various factors affect feature releases, and we are unable to provide specific release times at this point.In the meantime, you may also consider creating a face collection (with Index Faces) and searching that directly as an alternate or supplemental approach, where coverage in Recognize Celebrities is not currently where you need it. I see that the portrait photo you provided does have a high similarity match to other images of him, so believe that could be a good approach.CommentShareAWS-User-5278841answered 4 years ago0Thank you for your answer!It helps me a lot!Edited by: cm-motchie on Aug 28, 2019 7:43 PMCommentSharecm-motchieanswered 4 years ago"


Question: How to create Kali Linux container on LightSail

"I tried to create Kali Linux container on LighiSail.I've specified 'Image' as 'kalilinux/kali-rolling' and instance type as Micro x1.Then I started deploying, but I got an error.The Log message of container is as follows. [18/9/2022:07:33:12] [deployment:1] Creating your deployment [18/9/2022:07:34:41] [deployment:1] Started 1 new node [18/9/2022:07:36:14] [deployment:1] Started 1 new node [18/9/2022:07:37:39] [deployment:1] Started 1 new nodeIs there a way to resolve this?FollowComment"

Answer: "1Hello there,I see that the logs you shared hasn't been completed. It may be that deployment is still ongoing or canceled.You should refresh the logs after some time. If you see similar message below, it means the deployment failed.[18/Sept/2022:08:48:26] [deployment:1] CanceledI can see that you are running kalilinux/kali-rolling. Note that this is unlike a web based application image that exposes container ports for it to be in running state.Did you provide any launch command for this Kali linux image in the Lightsail deployment? I did inspect the image and I see that you can run bash commands with it during startup.docker inspect kalilinux/kali-rolling | grep Cmd -A2            "Cmd": [                "bash"            ],If you create the deployment in Lightsail without a launch command that ought to keep the container in a running state, the container will fail, hence the error you faced.To resolve this, specify a Launch command for example tail -f /dev/null that will ensure the container remain in running state then your deployment will succeed as the container will return the message: "Reached a steady state".Refer to more example here.CommentShareOlawale-AWSanswered 8 months agoSUPPORT ENGINEERMonica_Lluisreviewed 8 months ago0Thank you for your response.Resolved.CommentSharepotetianswered 8 months ago"


Question: CNAME seems to be "Stuck"

"I'm attempting to add an alias to a Cloudfront distribution, via Cloudformation. The domain in question had been recently associated with a different distribution in the same account. That old association seems to be stuck, though. I've replaced the old DNS entry with an Alias to the new distribution, but I still get this error:One or more of the CNAMEs you provided are already associated with a different resource. (Service: AmazonCloudFront; Status Code: 409; Error Code: CNAMEAlreadyExists; Request ID: 8d8fc591-a88f-11e9-acf5-9dae8f6074ac)The domain in question is 'ross.karchner.com', and the distribution ID is E3UEYVFYV8BPM4, or d2436bf2kosmay.cloudfront.netFollowComment"

Answer: 0I was able to resolve this by removing the old distributionCommentShareRossanswered 4 years ago


Question: Kinesis Transformation Buffering from Data Stream

"Hi, the current pipeline I am implementing involves a Kinesis Data Stream -> Kinesis Delivery Stream -> S3 route, however when setting the buffer intervals (Both s3 and transformation) to near 5 minutes, data still rapidly appears within the S3 bucket.For my purposes I need the data for every 5 minutes to be combined into a single large file to be pushed into S3, which I was under the assumption Kinesis delivery streams should handle under the hood when taking in from a Kinesis data stream.I'd appreciate any help in pointing out where my implementation could potentially be going astray :).FollowComment"

Answer: "0Accepted AnswerIssue resolved for anyone interested, by switching to direct PUTs into the delivery stream the files are properly aggregated.However I was not able to find a reason for why the data stream -> delivery stream transition does not result in proper aggregation of data, although I suspect it may have to do with the data stream shards.CommentShareEYanswered a year ago0Kinesis firehose delivery stream has two options for buffering the data, Buffer Size and Buffer Interval.If buffering data exceed the Buffer Size, the data could be delivered to S3 in previous to Buffer Interval.What value is Buffer Size set?https://docs.aws.amazon.com/firehose/latest/dev/basic-deliver.html#frequencyThe frequency of data delivery to Amazon S3 is determined by the Amazon S3 Buffer size and Buffer interval value that you configured for your delivery stream. Kinesis Data Firehose buffers incoming data before it delivers it to Amazon S3. You can configure the values for Amazon S3 Buffer size (1–128 MB) or Buffer interval (60–900 seconds). The condition satisfied first triggers data delivery to Amazon S3. When data delivery to the destination falls behind data writing to the delivery stream, Kinesis Data Firehose raises the buffer size dynamically. It can then catch up and ensure that all data is delivered to the destination.CommentSharesuzukianswered a year agoEY a year agoThe size of the file never exceeds the max buffer size, which is anyways set to max (128)Share"


Question: E-commerce (load balanced) system on LightSail migrating to EC2

"Hi There,hope your doing fine. Now here what we are working with. We have a instance running on Lightsail Bitnami WP (WC multivendor solution) build on a 8GB /2vCPU instance on the server there is WooCommerce installed. Images are on a S3 bucket. And the Database is a MSQL dBase.The instance is running behind a distribution and the bucket as well. Now that's the short version of this setup we want it load balances later on however we wanted to wait for this to see how we can go towards a Ec2 solution.Here is what we want actually, auto scalable solution in 2 regions (we are now using 1 in Frankfurt), keeping our existing build as is and here is the part when the mkt team for example updates the frontend or the multivendor solution adds new vendor it propagates to all the instances.  Now we found a template of a stack which could be useful in cloudformation designer called (Sample CloudFormation templates) Wordpress Multi AZ however keeping the above in mind we would like to use our base snapshot for the same. Now if we autoscale we could run for example behind a balancer each instance of 4gb/2vCPU and than when the system demands it it pull a few more instances in and when the traffic is low it closes them. Dbase snaphot and instance snapshot can be created easily. S3 is already active and SES as well. As you can imagine we do not know how many people will be on the site from the beginning which is a bit of a problem in calculation capacity etc.For us its important that the changes our mkt makes or when a customer uploads products or other information on each server there is a identical copy of this facing the end user.Sorry that this is so long but i hope now this is explained a bit more detailed as we can not find any docs relating to this kind of setup how to migrate it from LightSail into a scalable EC2 solution which will propagate information maybe real time...Ohhh yes and important fact we have a monthly budget for this of around 120 US$/EUR p/m in base config so NOT when scaling hits in. Any ideas how to make this happen...Let us know what could be done in here and how this could be approached as were a bit stuck in a loop here and our know how is not up to par for this part.CheersDraganFollowComment"

Answer: "0First, for EC2 scaling, you can use AutoScaling.AutoScaling allows you to scale by EC2 load and configure scheduled scaling.Costs can be kept down by flexibly responding to the situation, such as using a single EC2 unit during times of low access and increasing to two units when the number of accesses increases.https://docs.aws.amazon.com/ja_jp/autoscaling/ec2/userguide/what-is-amazon-ec2-auto-scaling.htmlApplications can be deployed to multiple regions by using CI/CD with GitHub and CodePipeline.https://docs.aws.amazon.com/codepipeline/latest/userguide/actions-create-cross-region.htmlAnother way is to operate EFS in a replication configuration.However, EFS is a bit more expensive and may be cost prohibitive.https://docs.aws.amazon.com/ja_jp/efs/latest/ug/replication-use-cases.htmlCommentShareEXPERTRiku_Kobayashianswered 2 months agoKingMilli75 2 months agoHi riku,thank you for your answer. About Autoscaling we read this doc and starting to get a bit of a grasp on it.Now we can set up manually or via cloudformation a setup for now the easy route is cloudformation to use the template of the Multi AZ stack. So this is clear. The part is we have now a build setup in lightsail, config done on the server etc. we would like to use this https://lightsail.aws.amazon.com/ls/docs/en_us/articles/amazon-lightsail-cloudformation-stackssnapshot to the Multi AZ stack, Also the dbase we have separated. I found docs on it that this all needs to be set up manually and can not be done in a automated way.https://lightsail.aws.amazon.com/ls/docs/en_us/articles/amazon-lightsail-creating-ec2-instances-from-exported-snapshots#aws-cloud-formation-stacknow there should be a way to automate this process, of course and to use already a robust solution which AWS has proposed/templated.Now codepipeline we never used nor have experience with it. We would not use GIT but rather have a staging site where we test it on the instance and when this is all ok we push it onto the live build.Now here is the catch, because the site will launch probably with about 7-10k products on it (we separate the dbase from WP instance) in the months to come this would grow to probably 25-30k products and end goal is around 75k. Now this would mean that the oru customer/vendor will be connected to our site from their own dashboard and update their own shop.ShareKingMilli75 2 months agoSo this would mean they are a lot on the backend adding pics, and product entries. These should reflect in "realtime" on the site as well. I hope this is a bit more clear now, about the data replication and pushing this onto all the instances. As the WP CMS is connected to this separated dbase i "think" the updating of 1 instance is not the issue ONLY issue i can think of is the replication of this data onto the running instances. Example if there are always 2 running data should be identical on both of them. The staging site is just a solution probably for the front end part and ideally this would be running instance which we push onto the existing instance to update.Share"


Question: gmail mx records issue

"Hi,My domain is registered on Bluehost which is using CloudFront distribution to serve the website.I tried to set up Gmail workspace for email. Google provided me with the MX records to be added. I tried to add on Bluehost but it didn't work. Talking to Bluehost support they suggested that since the website is being hosted on CloudFront you should add the MX record there. I am not sure where I can add on cloudfront. Does that mean I have to add those records using route53.I would really appreciate any advice around this please.FollowComment"

Answer: "2Cloudfront is a CDN, it is not DNS. You can check where your DNS hosted by checking NS records.Use something like https://www.nslookup.io/ to check NS records for your domain. If it shows NS records as *awsdns* then it is hosted on Route53, otherwise DNS for your domain is hosted on bluehost most probably.CommentSharehameedullahanswered a year ago0Thanks for the reply. I tried  https://www.nslookup.io and there are no ns lookup records. And I never remove any ns records. All I did I just added the CNAME so that the domain points to cloudfront distribution.I am not sure what do I need to do now. Please advise.CommentShareAWS-User-6871093answered a year agoBrettski-AWS EXPERTa year agoWhere did you add your NS records? That's your DNS provider; and it's where you will need to add the MX records.Sharehameedullah a year agoPlease use comment option to communication on answer. Your DNS is hosted where you setup the CNAME record. And you will be adding MX record just like you added CNAME, just select the type MX from the dropdownShare"


Question: PNG Document Upload Fails

"I did a screen capture of a PDF as a .PNG and tried to upload it and it fails with the error banner sayingimage/jpeg, image/png ???FollowComment"

Answer: "0Sorry to hear this.  JPG/PNG drag and drop should work.  Will look internally whether there's a reason it might not be working.By the way, screen grabbing a PDF typically creates a low quality copy of the image and reduces the performance you'll see from Textract.  Instead, try converting the PDF to a JPG or PNG with Mac OS preview (or equivalent on Windows/Linux).You can also put the PDF directly through Textract if you use our Asynchronous API.  We're working on adding this functionality directly to our console.CommentShareAWS-User-0867741answered 4 years ago0+1, same problem here.PNG & PDF upload fails.CommentShareodisseu21answered 4 years ago0+1CommentShareodisseu21answered 4 years ago"


Question: Spurious row counts in query plan?

"I'm investigating query plans.I have the following tables, query and query plan;create table customer(  age          smallint      encode zstd,  gender       char(1)       encode zstd,  customer_id  bigint        encode zstd primary key distkey,  name         varchar(512)  encode zstd)diststyle keycompound sortkey( customer_id );create table sale(  customer_id  bigint  encode zstd references customer( customer_id ) distkey,  sale_id      bigint  encode zstd)diststyle keycompound sortkey( customer_id );explain select  age,  gender,  name,  sale_idfrom  customer,  salewhere  customer.customer_id = sale.customer_id; XN Merge Join DS_DIST_NONE  (cost=0.00..23.66 rows=754 width=533)   Merge Cond: ("outer".customer_id = "inner".customer_id)   ->  XN Seq Scan on sale  (cost=0.00..11.60 rows=1160 width=16)   ->  XN Seq Scan on customer  (cost=0.00..1.30 rows=130 width=533)Note also I've issued;set analyze_threshold_percent to 0;VACUUM FULL customer TO 100 PERCENT;VACUUM FULL sales TO 100 PERCENT;ANALYZE customer;ANALYZE sale;ANALYZE does not SKIP.Now, both these tables are new and empty.  Never seen a record.So - now - examine the query plan.See the row counts?Why are empty tables producing non-zero record counts?FollowComment"

Answer: "0Accepted AnswerHi Toebs2,Those aren't actual row counts.  Those are plan operator output estimates that can be partly based on statistics resulting from the ANALYZE command, partly from cardinality estimates based on prior filters and joins, and rules and overriding constant values in the query planner/optimizer itself.I don't know the Redshift code nor as a customer do I have access to it.  However, from having worked on and worked with other database engines for a long time I can tell you that quite often there are a lot of edge condition overriding constants in SQL query planner/optimizer code to avoid absolute edges, like 0's in the stats that often don't play to nicely with the other operators when computing plan costs.  So. small overrides at the access plan layer of a complex query plan can manifest in some unexpected numbers as they propagate up estimation formulae of the plan tree.In your case the plan still doesn't have much work to do, so I wouldn't focus on it too much.  On the other hand I would be thankful that there probably are overriding constants in the query planner/optimizer that have been put there to avoid edge conditions where misleading estimates might cause the choice of a query plan that performs horribly badly.I've seen this happen before in databases I won't name.  Most were fixed with, you guessed it, a overriding constant of an edge condition stat in the query planner/optimizer code.  If you ever trip over one you'll know it because you'll be looking at query plan that has something like a cartesian cross product or a nested loop join over tables with some ungodly number of rows.I'll leave it to the Redshift team to comment on the Redshift specifics and details of the question.Regards,-KurtCommentShareklarsonanswered 4 years ago0Hi Toebs2,Those aren't actual row counts.  Those are plan operator output estimates that can be partly based on statistics resulting from the ANALYZE command, partly from cardinality estimates based on prior filters and joins, and rules and overriding constant values in the query planner/optimizer itself.I don't know the Redshift code nor as a customer do I have access to it.  However, from having worked on and worked with other database engines for a long time I can tell you that quite often there are a lot of edge condition overriding constants in SQL query planner/optimizer code to avoid absolute edges, like 0's in the stats that often don't play to nicely with the other operators when computing plan costs.  So. small overrides at the access plan layer of a complex query plan can manifest in some unexpected numbers as they propagate up estimation formulae of the plan tree.In your case the plan still doesn't have much work to do, so I wouldn't focus on it too much.  On the other hand I would be thankful that there probably are overriding constants in the query planner/optimizer that have been put there to avoid edge conditions where misleading estimates might cause the choice of a query plan that performs horribly badly.I've seen this happen before in databases I won't name.  Most were fixed with, you guessed it, a overriding constant of an edge condition stat in the query planner/optimizer code.  If you ever trip over one you'll know it because you'll be looking at query plan that has something like a cartesian cross product or a nested loop join over tables with some ungodly number of rows.I'll leave it to the Redshift team to comment on the Redshift specifics and details of the question.Regards,-KurtCommentShareklarsonanswered 4 years ago0Thankyou, Klarson.I will look at the Postgres source code and see what it does.+5 points for you! :-)CommentShareToebs2answered 4 years ago0Hmm, interesting.I think I may have stumbled across a forum bug.You posted the same reply twice, somehow - and marking one of them as correct has given you ten points, not five.Reminds me to issue multiple replies in the future :-)CommentShareToebs2answered 4 years ago"


Question: Read and write buffer of unequal size does not work in Vitis

"Hello!I am working with Vitis on AWS instance. I successfully ran a RTL design which takes in 16KB and outputs 16KB in hardware emulation but when I modified my design to output only 8KB data it did not work. This is not just the case with this design, I ran multiple designs with the unequal size of read and write buffer and it did not run. My RTL kernel has 2 masters and 1 slave, one master is used to read the data and other to write the data in memory.I am using the standard axi read and write master code generated by RTL Kernel Wizard in Vitis.I have attached a picture of the output and my host code.Any help is very much appreciated.Thank you,ShashwatEdited by: shashwats on Jun 22, 2020 5:04 AMFollowComment"

Answer: "0Hi Shashwat, would it be possible to get the kernel code or Vitis design so we can do some profiling and take a closer look at the data transfers?Also in the host code, you seem to note the data variables on lines 70-71, but they are the same number. I assume that these values are changed appropriately for the unequal size run?const cl_uint number_of_words = 2048; // 16KB of INPUT dataconst cl_uint number_of_words_out = 2048;//8KB OUTPUTCommentSharekmorrisXilinxanswered 3 years ago0Hello!Thank you so much for your reply.Please use this link to download Vitis project files  https://drive.google.com/drive/folders/1JAClKAOgykuf0L19LjX5vVGSiMy23TQz?usp=sharing . I have added hierarchy diagram for clarity.Info about kernel: I Followed the mentioned link's example  https://github.com/Xilinx/Vitis-Tutorials/tree/master/docs/getting-started-rtl-kernels/reference-files/src/IP  to integrate my design. As given in the example, I am using 2 masters and one slave. For my design, I am using one master to read the value and other to write the value in memory. In the place of Vadd_A_B_example_adder.v (compute unit of example), I added an AXI Stream logic to integrate my hardware design. My hardware design adds 15 to every alternate value it receives and outputs only these values which are incremented by 15. Hence I generate 8KB of output from 16KB input.Sorry for the confusion, I have used ulong and uint in clCreateBuffer in line 247 and 254. But now I have added a clear host code in the project folder.Thanking you,ShashwatEdited by: shashwats on Jun 22, 2020 12:00 PMCommentShareshashwatsanswered 3 years ago0Hi Shashwat, I started with using the RTL Kernel reference instructions as you mentioned to recreate the Vitis project followed with replacing the sources with the files you provided. In testing this and trying to compare the equal vs. unequal sizes, I am seeing that the behavior is the same even when changing the values for the constant. Maybe I am misinterpreting the design, could you let me know what values are intended to be changed to show the issue?CommentSharekmorrisXilinxanswered 3 years ago0Hello!Code mkAWS_32io_h.v is specifically designed to output only alternate input values added with 15. It will not have equal size of input and output buffer. Therefore in Top_wrapper.v, line 74 and 75 have these values.localparam integer  LP_DEFAULT_LENGTH_IN_BYTES = 16384; //INPUT BYTESlocalparam integer  LP_DEFAULT_LENGTH_IN_BYTES_out = 8192; //OUTPUT BYTESI have added the code mkAWS_32io.v which adds 15 to all the input values in the google drive link. This will have equal input and output buffer.Thanking you,ShashwatCommentShareshashwatsanswered 3 years ago0Hi Morris,I have realized that the problem is not due to unequal buffer size rather it is because the output from kernel does not come every clock cycle i.e. stalls are there in the design (output comes every alternate clock cycle). But I am not able to understand how does the irregular flow of output is stopping writes into the memory.I tried to tap the AXI4 LITE signals during hardware emulation using live waveform viewer. Vivado opened up but no green or red lines of signals were present in the simulation window. Is there a way to fix this?Is there any other debug technique that can be used to debug RTL kernel in hardware emulation?Thanking you,ShashwatCommentShareshashwatsanswered 3 years ago0Hello!There was some other issue. Read and write buffer of different sizes work absolutely fine.Solution: There is no global reset signal to the kernel therefore the verilog design needs to be reset before running. So that registers have some known initialise value rather than some garbage values.Thanks,ShashwatCommentShareshashwatsanswered 3 years ago"


Question: Stored video analysis gives Content Moderation result for anything with black background

"Hello,I am passing stored videos to Content Moderation to detect a label if any, and it is detecting an alert for anything which has black color in the background. This happens for any and every black background image(s) in a video.Please help on how this issue can be resolved.FollowComment"

Answer: "0Thanks for reaching out. Amazon Rekognition service doesn’t have any issues reported on content-moderation for videos with black background. Since re:Post does not have DM support, and it's not recommended to share the videos through public forums, please create a support case through console for Rekognition (see doc below) and refer to your original post. Please include the video and corresponding labels detected in the support case. It will get re-directed to the correct team, and we can take a look.https://docs.aws.amazon.com/awssupport/latest/user/case-management.htmlCommentShareGowthamAtAWSanswered a year agoAWS-User-3217907 a year agoI will use the portal to upload videos and labels detected. Thanks for the help.Share"


Question: How can I display data with start and end date in QuickSight?

"Hello,I am wondering what the best visual in QuickSight would be to display a record of data that has a start and end date.  I am imagining a visual with time along the x-axis and a bar with its endpoints at the start and end dates for each record.Is there a visual that would meet my needs?  Or is this just wishful thinking?FollowComment"

Answer: "0Thank you for posting your question, can you please elaborate the details of the visual you are looking for and also provide a few lines of sample data so we can have a more clear understanding of the requirement.CommentShareSUPPORT ENGINEERChaitanya_Tanswered a year agoThe-Cardless-Moose a year agoSure, I will do my best to describe.  I am dealing with a dataset for equipment rentals and would like to visualize each of these rentals, showing their start and end dates plotted over time.  A sample of rental data might look like this:rentalIdcheckOutcheckIn1'2022-01-02''2022-01-05'2'2021-12-13''2022-12-13'3'2022-01-12''2022-01-18'4'2021-12-30''2022-01-04'What I am looking for is a way to represent each of these records as one unit ( a rental) and display the start and end dates for each.Share0Hi,I have a similar issue (working with start and end dates instead of single date).My goal is to display the sum of distributed value on a given period (with from and to in declared controls/parameters).So, on the X axis, I want to use the range define by from and to controls, and use distributed value for each date between start and end crossing  control period.With following data example, if I set from=2022-01-28 and to=2022-02-02, with a day distribution, I want the following resultDataset :start_dateend_datebudgetnumber_of_day(easy to compute)daily_budget(easy to compute)2022-01-162022-02-143000301002022-01-012022-01-3116123152Expected result (here as a table, but I want also use it as chart):DayBudget2022-01-281522022-01-291522022-01-301522022-01-311522022-02-01522022-02-0252Regards,CommentShareMatthieuanswered a year agoMatthieu a year agoI know that a naive solution is to have one line per day, but I prefer a mathematical solution to volume one.Share0Hi,from my understanding you are looking for a Gantt chart. This is not currently available in QuickSight, but it could be implemented following the example available in our QuickSight  community you can find it explained in this answer .hope this hepsCommentShareEXPERTFabrizio@AWSanswered a year ago"


Question: Queue Priority not working as expected

"I can confirm we are facing the same issue.I have a queue in ap-southeast-1.I have 2 spot fleets, 1 each in ap-southeast-1 and us-west-1I have set the ap-southeast-1 fleet as the first priority but every single placement on that fleet is flagged as "not viable" and is instead placed on us-west-1. This has been the case for the last 2 weeks straight. So it's not a momentary issue with the regions.What can be done to mitigate this behaviour ? Since the documentation says that priority should be followed but that isn't happening.Edit: Both fleets are healthy with no unusual events on the dashboard.No latency data is used for the placement requestsFollowComment"

Answer: "0Accepted AnswerThe behavior is similar, might be easiest to think about Game Session Queue destinations as sorted and filtered separately.If not using player latencies, the destinations are sorted by the order in the destination list (you specify the sorted order).  Spot fleets used as destinations will be filtered out if the instance type in the region is deemed unviable by GameLift's FleetIQ algorithm.If using player latencies, the destinations are sorted per placement based on the player latencies in the placement.  Spot fleets used as destinations will still be filtered out if the instance type in the region is deemed unviable.  So we still sort first, filter second, decide on the placement third.GameLift is looking at ways to make Spot utilization better, but currently the more options you have the better chance of finding a Spot viable combination.  If your Queue has 3 destinations:Spot Fleet with c5.large / ap-southeast-1Spot Fleet with c5.large / us-east-1OnDemand Fleet with c5.large / us-east-1GameLift only has a chance to look at 2 Spot instance pools and if both aren't viable, then 2/3 of the destinations will be filtered out and placements will be sent to the OnDemand Fleet.  It's a lot of resources to manage during early development, so we recommend ramping up your options as you get closer to load testing/launching your game:Spot Fleet with c5.large / ap-southeast-1Spot Fleet with c5.xlarge / ap-southeast-1Spot Fleet with c5.large / ap-northeast-1Spot Fleet with c5.xlarge / ap-northeast-1Spot Fleet with c5.large / us-east-1Spot Fleet with c5.xlarge / us-east-1Spot Fleet with c5.large / us-west-2Spot Fleet with c5.xlarge / us-west-2OnDemand Fleet with c5.large / ap-southeast-1OnDemand Fleet with c5.large / us-east-1Now GameLift has 8 Spot pools as options, so if 4/8 are unviable, GameLift can still utilize the other 4.  The key here is to span multiple instance types and multiple regions.  Also remember to always have OnDemand capacity as a backup in case all Spot options in your Queue are considered unviable at any given time.Hope that helps!CommentSharerePost-User-4192873answered 3 years ago0I moved this to a new a topic, from: https://forums.awsgametech.com/t/gamelift-queue-priority-is-broken/8449/4If you can provide your fleet ids, I can get the GameLift service team to take a look.I would suggest troubleshooting this a bit:Ensure you have spare capacity in ap-southeast-1? Do your fleet metrics show that you have capacity in the region?Can you place game sessions in the fleet directly?Are you seeing any abnormal fleet events in ap-southeast-1? Check your fleet dashboard and ensure your processes are healthy.Are you using player latency data at all? If so ensure you are passing the right values?Have you tried changing instance types in ap-southeast-1? Try using different generations of the instance type ie c3.large or c4.large or c5.large or maybe briefly c5.xlarge, c4.xlarge etc to see if its the instance type being constrained etc.CommentSharerePost-User-5332620answered 3 years ago0[quote="Pip, post:2, topic:9443"]If you can provide your fleet ids, I can get the GameLift service team to take a look.[/quote]ap-southeast-1: fleet-******us-west-1: fleet-******We are testing various configurations so the queue setup might not be consistent, but when we do have 2 SPOT targets in the queue, it doesn't pick ap-southeast-1 even if prioritised.If ap-southeast-1 is the only target, then it works perfectly fine.We have tested this with c5.large and c5.xlarge. Currently the fleets are both c5.large.As previously mentioned, no latency data in the requests.Fleets were healthy and had sufficient capacity (even at 100% available game sessions).Note to the team: 1 unhealthy process (out of 4) in ap-southeast-1 (part of our testing) was only after we switched to single destination in the queue.CommentSharerePost-User-4651918answered 3 years ago0Thanks I've let the GameLift service team know and hopefully they will have a reply soon.BTW In the future if you have an AWS account with technical support (https://docs.aws.amazon.com/awssupport/latest/user/case-management.html) I would encourage you to open issues through that channel. It will be much faster and you can share details privately.CommentSharerePost-User-5332620answered 3 years ago0Hi!What are the timestamps that you see these failures during (including the time zone)?CommentSharerePost-User-1112179answered 3 years ago0Thanks. Do you still recommend opening a case through this channel ?CommentSharerePost-User-4651918answered 3 years ago0I just did 2 placements and both directed to us-west-1 as usual.2020-09-24 15:27:06 UTC+0800 was using fleets as queue target2020-09-24 15:29:26 UTC+0800 was using aliases as queue targetsOn the queue metrics both placements were flagged as first choice not viableEdit: these are the game session creation timestamps. Let me know if there's any additional information requiredCommentSharerePost-User-4651918answered 3 years ago0Hey Alex. Any updates on the why the queue priority isn't working as expected ?CommentSharerePost-User-4651918answered 3 years ago0We generally recommend that you open a case with technical support as they provide a high tier of support for customers including discussing technical details and logs that you may not wish to discuss on forums. Additionally they are often able to address issues sooner as they have 24/7 support.CommentSharerePost-User-1112179answered 3 years ago0I've look at this a bit further and concluded that queues is actually working as expected. When considering which fleet to place onto (when not considering/using latencies) a queue evaluates the following:The order of the fleets in the queueThe capacity of the fleetsThe viability of the fleets being placed onto (if the fleet is a spot type)Both fleets here are SPOT, which means the have the potential to be "unviable", meaning the instance type is too risky for gamelift to place sessions on it. During the times you are calling placement, the ap-southeast-1 fleet is using an instance type which is considered unviable at that time, and so the queue falls back to the us-west-1 fleet so it can safely place your session. There are a couple actions I would recommend here:In your queue always have one "fall back" ondemand type fleet so in the worst case event that all spot is unviable (very, very unlikely but possible) you can still place game sessions.If you want sessions in a specific queue to always land in one region (or be far more likely to land there) create multiple instance type fleets to lower your chances the instances you are using are going to be unviable. Several instance types can be made in fleets in the queue, and as long as 1 is viable you will place on spot instances in that region.CommentSharerePost-User-1112179answered 3 years ago0What about using latency data ?Would that change the behaviour with cross-regional spot fleets ? and if so, how ?CommentSharerePost-User-4651918answered 3 years ago0[quote="Joe-117, post:12, topic:9443"]Hope that helps![/quote]Thanks. That was a very helpful answer !CommentSharerePost-User-4651918answered 3 years ago"


Question: Query String Parameters with Lambda function URL

"I have a Lambda function with URL and I am trying to POST some parameters to it with curl:curl -d "item=one"  htpps://<lambda-url>The queryStringParameters field of event is empty. Here's the function:import jsondef lambda_handler(event, context):    if "queryStringParameters" in event:        return        {        'statusCode': 200,        'body': json.dumps(event["queryStringParameters"])    }    return {        'statusCode': 200,        'headers': {            'Content-Type': 'text/html'        },        'body': 'Empty'    }The output of curl is null. I inspected the event object and the parameters do not appear anywhere in it.What am I doing wrong and how can I pass query string parameters, such as a form from a website, to a URL Lambda using POST?FollowComment"

Answer: "0-d is used to sent a payload, not query parameters.What you need to do is:curl https://<lambda-url>/item=oneCommentShareEXPERTUrianswered 6 months agoRomanko 6 months agoHi Uri,Thank you for the reply. I tried:curl -X POST https://<lambda-id>.lambda-url.ap-southeast-2.on.aws/?item=twoThe result is null as well.This beats me. I created a test event:{"queryStringParameters":{  "key1": "value1",  "key2": "value2",  "key3": "value3"}}I also added a print statement to the Lambda function:import jsondef lambda_handler(event, context):    if "queryStringParameters" in event:        print(event["queryStringParameters"])        return        {        'statusCode': 200,        'body': json.dumps(event["queryStringParameters"])    }    return {        'statusCode': 200,        'headers': {            'Content-Type': 'text/html'        },        'body': 'Empty'    }The execution results are:Test Event Namequery-string-paramsResponsenullFunction LogsSTART RequestId: 524dfae5-72de-4170-99bd-bc7bbcb18edf Version: $LATEST{'key1': 'value1', 'key2': 'value2', 'key3': 'value3'}...Any further help would be much appreciated.Share0Anwering my own question.    return {             'statusCode': 200}and     return       {            `statusCode`: 200 }are not equivalent. The first returns the object, while the second returns None (which somehow becomes null).I miss FORTRAN. Any plans of adding it to Lamdba runtimes?CommentShareRomankoanswered 6 months agoBrettski-AWS EXPERT6 months agoPython is quite picky about whitespace and lines that are not marked as unterminated - as in this case. As far as Fortran goes: You can create your own Lambda runtimes: https://docs.aws.amazon.com/lambda/latest/dg/runtimes-custom.html - I'm not sure if you're serious or not but if you are, it's probably doable.Share"


Question: Network transfer costs though NAT GW

Customer has a question on how costs are allocated for outbound traffic through a NAT GW.What they expect & what support has shared with them is that any traffic going out to the internet (to a public IP) will count as "Data transfer to the internet".  But looking at cost explorer what they are seeing is an EC2 to EC2 transfer cost.  They are indeed sending traffic to a public IP on an EC2 instance in another account but since they are using the public IP they expected to see a data transfer out to the internet charge.They are trying to accurately forecast costs for a service they are building so would like to know how these two are distinguished so they can forecast correctly.  Will they always see an EC2 to EC2 charge for outgoing NAT GW traffic if its going to the public IP of an EC2 instance?Thanks!FollowComment

Answer: 0Accepted AnswerThat's correct. EC2 to EC2 doesn't really go over Internet (minus China Regions and GovCloud regions). It uses AWS backbone. They will see either charge for EC2 Public IP (if same Region) or Inter-Region Data Transfer (DTIR) if going to EC2 in another Region.CommentShareEXPERTEvgeny-At-AWSanswered 3 years ago


Question: Lambda Function GraphQL Authentication issues

"I've created a new function using the latest version of the CLI and granted access to the API resources as stated in the docs.The generated function resources seem to miss Authorization to access AppSync schema, since any type of access attempt ends up in the following response:{   "data":{      "getUsers":null   },   "errors":[      {         "path":[            "getUsers"         ],         "data":null,         "errorType":"Unauthorized",         "errorInfo":null,         "locations":[            {               "line":2,               "column":9,               "sourceName":null            }         ],         "message":"Not Authorized to access getUsers on type Query"      }   ]}I've double-checked and the CLI recognizes/shows that the generated function has the required Resource access permissions. Existing functions created following the same exact steps (with previous CLI versions) are working correctly.Expected behaviorThe function should have access to the resources we specified during the creation process.Reproduction stepsamplify add functionfollow all required steps & grant access to the AppSync APItry to retrieve data by accessing AppsyncHere is the link to the github repo issue created with further details: https://github.com/aws-amplify/amplify-cli/issues/10141FollowComment"

Answer: "0Hi, from my experience, we had API_LIVETRACE_GRAPHQLAPIENDPOINTOUTPUT, API_LIVETRACE_GRAPHQLAPIIDOUTPUT, API_LIVETRACE_GRAPHQLAPIKEYOUTPUT in Lambda environment variables.Then I need attach {'x-api-key': os.env[['API_LIVETRACE_GRAPHQLAPIKEYOUTPUT']]} to the headers when send request to os.env[['API_LIVETRACE_GRAPHQLAPIENDPOINTOUTPUT]].CommentShareHoan Phamanswered a year agoLorenzo Hidalgo a year agoThanks for your input Hoan, I'm already adding that header and signing the request as described in the documentation. The issue is that even though the IAM roles are assigned correctly, AppSync seems to deny the acces.Share"


Question: Unable to RDP EC2 instance from local desktop

"Hi All, Greetings of the day!!I am new to AWS and have created an EC2 instance and edited the security groups to allow TCP, UDP and all ICMP traffic in Inbound and Outbound rules but cant ping my EC2 instance from its public DNS name and nor from its public IP either. I gave the IPV4 custom rules to be pinged the instance from any where. Also I added rule to RDP the machine but still not able to access it from my local desktop. Please suggest remediation or may be I am missing anything. Ty.FollowComment"

Answer: "0Hello - Is your EC2 instance in a public subnet? Check if the routing table of the subnet that you used has a route to an internet gateway for the VPC. Also, verify if you are using the correct username and password. Sometimes, some workstations automatically add a domain (example "domain\Administrator") in the username field.You may refer to the following AWS documentation for other troubleshooting tips:https://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/troubleshoot-connect-windows-instance.htmlhttps://aws.amazon.com/premiumsupport/knowledge-center/troubleshoot-remote-desktop-connection-ec2-windows/CommentSharejoahnaanswered 7 months ago0Hi,Check the below configurations:Security Group(s) rules applied to your NAT Instance and Target EC2 instance.NACL rules (both inbound and outbound) applied to Subnets.Route Table Routes (e.g. Your EC2 instance subnet is connected IGW).You can utilize the AWS VPC Reachability Analyzer feature to troubleshoot your issue. This is really nice feature to troubleshoot such connectivity issues caused due to SG, NACL, or RT misconfiguration.Regards,Ashish PatelCommentShareAshish Patelanswered 5 months ago"


Question: Unable to Delete VPC

"I'm trying to delete my VPC and it tells me that it could not delete the VPC vpc-0d0352db85946344fbecause 'eni-02512da6987229078' is currently in use.I'm not able to see what is using that ENI, and I've already deleted the rest of the things I have access to in the VPC.Can you help me to identify what is wrong with this ENI?Thanks!FollowComment"

Answer: 0This article helped me out to troubleshoot the issue:https://aws.amazon.com/premiumsupport/knowledge-center/lambda-eni-find-delete/CommentSharejorgesuarezanswered 3 years ago


Question: How to set up a custom domain/url for a public MWAA environment?

"As the title says we're looking to set up a custom url for a public network (not private) MWAA environment. I was able to find the VPC endpoint for the environment and the two private IPs associated with it, so I created an IP target group with the MWAA's same VPC, protocol HTTPS, and port 443, with a health check for status codes 200 and 302, as this guide recommends. https://docs.aws.amazon.com/mwaa/latest/userguide/vpc-vpe-access.html#vpc-vpe-access-load-balancer.I registered the two private IP addresses on the target group, also with port 443. I also added a listener rule to our load balancer pointing to the target group using our custom URL, as we've done with other applications on our domain.However, the target group keeps coming up unhealthy. I'm wondering if I am following the wrong instructions, I've found plenty of guides on setting up a custom url for a private MWAA, but nothing for a public MWAA. Can anybody point me in the right direction?FollowComment"

Answer: 0Public MWAA webserver has public IP address. ALB can only target specific IP addresses as described in the blog. You can explore the code sample in the mwaa-samples repo for your use case.CommentShareUma_Ranswered a year ago


Question: Issue with CDK version v1 running on CICD image server

"Hi All,We have CICD CDK build pipeline running on linux2 image server having node version 12.x and CDK version 1.132.0Since 09th or 10th of June it started giving error as "Unexpected Token ?" and exit code of 1. All constructs are same, no change.We tried to upgrade the CDK version also to latest version, but did not work. What can be done here to fix? Node versions are defaulted and we can change as it is managed by AWS.RegardsFollowComment"

Answer: "0Hello there,You can enable verbose output in your cdk commends, like cdk synth -vvv  and cdk deploy -vvv so you have more information about the error.Also To best troubleshoot this issue, we require information that is non-public information. Please open a support case with AWS Support using the following linkCommentShareAditya_Tanswered a year ago"


Question: How to change Count rule to Block for AWS managed rules

"Hi,I have purchaced the Fortinet AWS managed rules to protect my EBS environment. I have created this environment with ALB in order to connect WAF with it. Once I add Fortinet managed rules I do not have the option the block these requests but only count. How can this be changed to block in order to protect my environment ?FollowComment"

Answer: "0Once you add that Managed Rule group into your Web ACL, all sub-rules within that rule group are in Block by default. You can set to them count by flipping the Count switch on next to each sub-rule (or all of them at once, by using the top switch), after selecting the Fortinet rule and hitting the Edit button in your WebACL.CommentShareTzoori Tamamanswered a year ago"


Question: Elasticache T instance types unlimited mode

"I would like to enable unlimited mode on the Elasticache Tx node types but I am unable to find information on how to enable/configure this.The following mentions T3 instances launch with unlimited mode by default, does that include Elasticache instances?https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/burstable-performance-instances-how-to.html#modify-burstable-performance-instancesFollowComment"

Answer: "1ElastiCache only supports general purpose TX node types, as a result the option to enable unlimited mode on ElastiCache is not available.CommentShareRajananswered a year ago"


Question: Blue Green with Static S3 Website

A customer has an angular serverless app that is hosted on S3.  There are looking to set up a Blue Green deployment strategy and explored using route53 weighted routes to two CloudFront distributions.  The customer get a CNAMEAlreadyExists error and I came across this link - https://aws.amazon.com/premiumsupport/knowledge-center/resolve-cnamealreadyexists-error/Looking at using Lambda@Edge as a solution like in the following link - https://aws.amazon.com/blogs/networking-and-content-delivery/truecars-dynamic-routing-with-aws-lambdaedge/How are other customers doing Blue Green deployments with static s3 websites?FollowComment

Answer: "0Accepted AnswerLambda@Edge (on origin request event) is your answer to route requests to different website variations on an s3 bucket. however, it's up to you how do you want to do the routing logic itself. For ex:If you want to have stickiness, then you should use Lambda@Edge also on viewer response event to set a cookie. forward this cookie in Cloudfront and use your Lambda@Edge router function to select the correct version.In the Lambda@Edeg router, you can make a network call to an external georgraphy replicated endpoint to to decide about the load balancing percentage. Replicated endpoints possibilities: dynamoDB global tables or Route 53 TXT records.CommentShareEXPERTachrafanswered 4 years ago"


Question: Route53 PHZ and ACM certificate validation.

"IHAC that is using data.all (https://awslabs.github.io/aws-dataall/architecture/). Data.all is deployed in VPC and PHZ created.Customer has provided domain for e.g., datamarket.customer.com and provided an SSL certificate for this. Redirect has been setup where nslookup points to PHZ data.datamarket.com.In PHZ we have a CNAME which points to an EC2 ALB. What setup is needed so that the datamarket.com domain can be validated by the SSL certificate for datamarket.customer.com? Is that possible or is there any other way this can be achieved?FollowComment"


Question: AWS Workmail Verification Failed

"Hello,I bought a domain in namecheap.com and added the domain to the AWS Workmail.I have configured all of the records, why the status is "Verification Failed" ?FollowComment"

Answer: "0Underscores may not be used in TXT record names as described in the following document.Try omitting "_amazonses" from the TXT record name.For general troubleshooting instructions, please refer to the following documents.https://docs.aws.amazon.com/workmail/latest/adminguide/domain_verification.html#domain-verification-issuesCommentShareEXPERTRiku_Kobayashianswered 2 months ago"


Question: how to SES email sending limit increase anyone tell me please?

"Hello i am trying many times to request but my ses email sending limit rejectedany one help me please ?FollowCommentiwasa EXPERT2 months agoWhat is the reason for your rejection? If you provide the right information, such as a use case, it should be approved.Share"

Answer: "0Accepted AnswerRequesting an Increase in Sending Limits:https://docs.aws.amazon.com/ses/latest/DeveloperGuide/increase-sending-limits.htmlBest Practices for Sending Email with Amazon SES:https://docs.aws.amazon.com/ses/latest/DeveloperGuide/best-practices-email.htmlManaging Your Amazon SES Sending Limits:https://docs.aws.amazon.com/ses/latest/DeveloperGuide/manage-sending-limits.htmlTroubleshooting Amazon SES Sending Issues:https://docs.aws.amazon.com/ses/latest/DeveloperGuide/troubleshoot-sending.htmlI hope this helps.CommentSharerePost-User-5208427answered 2 months agoEXPERTBrettski-AWSreviewed 2 months agoBrettski-AWS EXPERT2 months agoIn general I find that limit increases are rejected if the service has not be used enough to justify a limit increase. So perhaps use the service some more? If you have an urgent need, contact your local AWS Solutions Architect - they can discuss your requirements with you.Share"


Question: Can I change the default index "amazon_neptune" that connects Neptune to Opensearch

"Is it possible to change the default index or have multiple indexes that we can use from gremlin, Example currently we use this :g.withSideEffect('Neptune#fts.endpoint','ENDPOTIN')Is there an option that we can use such as:g.withSideEffect('Neptune#fts.index','neptune_index_2')Or any other way to change the default "amazon_neptune" ?FollowComment"

Answer: "1Accepted AnswerAt present, the Elasticsearch (ES) or OpenSearch (OS) index name is required to be amazon_neptune.  The Neptune FTS feature expects this index name for any FTS queries being sent to an ES/OS endpoint.CommentShareTaylor-AWSanswered 5 months ago"


Question: Migration of windows 10 pro

we need to migrate our windows 10 pro VM from VMware to AWS we can able  move the same but the question is how we can manage license part as AWS doesn't provide license to win 10 client OS how do I proceed then?thanks in advanceFollowComment

Answer: "1You can look at using Amazon WorkSpaces as a Desktop as a Service solution to replace the current Windows 10 workload. If your licensing agreement with Microsoft allows it, you can use your Windows 10 Enterprise or Windows 10 Pro desktop licenses for your WorkSpaces. You'll have to meet requirements specified here.With this option, you will import our own Windows license to AWS and import an OEM VM into AWS for use as a base image. You cannot lift and shift/move your existing workload "as-is" to Amazon WorkSpaces. Applications and OS configuration would need to be customized using a custom image and bundle for Amazon WorkSpaces.CommentShareEXPERTDzung_Nanswered a year ago0Amazon Workspaces might be a good choice for you. The FAQ has a few answers how to handle licensing, both license included and BYOL.CommentShareJarrid_Kanswered a year agoAWS-User-6176623 a year agoCan we move our existing 10 workload as it in workspaces?Share"


Question: Codecatalyst spaces in AWS Account - request was not authorized

"I logged into one of my accounts and tried to create a space via codecatalyst. There were some issues so I removed the space from codecatalyst, and from the account.Now when I log into the AWS Console and choose Amazon CodeCatalyst > Spaces, I get a message The request was not authorized.I've checked the IAM Role and it is using the AWSAdministrator permissions policy which allows all CodeCatalyst API calls.If I now try and create a new space under the account, at the verify stage I always get Invalid TokenFollowComment"

Answer: "1Hi Simon,I'm so sorry you ran into this issue. I've alerted our team on the issue. They are looking into it now. In the meantime could you please check if you are on the right account? The token can only be accepted by the account that is being verifiedCommentShareMODERATORSundaresh_Ianswered 5 months agoSundaresh_I MODERATOR5 months agoHi, we couldn't replicate the issue. But we have noticed invalid token issues when the user tries to validate their token on a different AWS account instead of the one that they were attempting to  connect to the space. could you please confirm if you were on the right AWS account when you tried to verify the token?Share0Simon - check if an SCP or anything else prohibits you from using us-west-2 - that's what happened to me last week and you don't directly get that form the message of the expired token.Took me a few days to figure it out :-)As CodeCatalyst is in that region, the "link" also needs to happen within that region...CommentShareLockheadanswered 4 months ago"


Question: Athena ODBC Connector for Power BI

"I have two catalogs in Athena - AwsDataCatalog and another named 'rds_catalog'. The 'rds_catalog' has been created to connect to RDS database instance using the Amazon Athena Federated Query connectors. I have the Simba Athena ODBC driver installed on my machine and a 'User' DSN created.I have ensured the second catalog has been setup correctly.When i connect to Athena using Power BI and the ODBC DSN, I see only the 'AwsDataCatalog' listed. The Other Catalog does not show up. This is so even when i set the schema to 'rds_catalog'. Makes me wonder if the driver is designed to show only the 'AwsDataCatalog' or if this is a power BI issue or something wrong that i am doing.Appreciate any help on this issue.FollowComment"

Answer: "1Go to OBDC data source configurations and change the Metadata Retrieval Method to "Proxy API" from "Auto".CommentShareRavanswered a year agoEXPERTFabrizio@AWSreviewed 9 months agoFabrizio@AWS EXPERT9 months agoMore details can be found at page 99 of https://s3.amazonaws.com/athena-downloads/drivers/ODBC/SimbaAthenaODBC_1.1.15.1000/docs/Simba+Athena+ODBC+Connector+Install+and+Configuration+Guide.pdfShare0I'm having this exact same issue. While the workaround that AWS-User-0620047 mentioned is sufficient for their use case, I need the DB's/tables of the 'rds_catalog' (in this example) to be displayed in the Power BI console. That way, users can see all of the different DB's/tables instead of needing to know exactly what they're querying for. So I'll echo the initial post... Is the driver designed to show only the 'AwsDataCatalog'? Or would this be an issue with power BI only being capable of displaying the AwsDataCatalog?CommentShareAWS-User-9175044answered a year agoAWS-User-0620047 a year agoHi,This behavior is not limited to Power BI - I tried with Microsoft Excel too, seeing the same behavior. I believe it could be either the Driver's limitation OR something to do with the Driver-AWS interaction.RegardsShareRav a year agoGo to OBDC data source configurations and change the Metadata Retrieval Method to "Proxy API" from "Auto".Share0Hi,As per the doc at page 91, you can use the Catalog option in your DSN.Hope this helpsCommentShareAbdel Dadoucheanswered a year agoAWS-User-0620047 a year agoThank you for your response, Abdel.When I created the DSN entry, I did specify the other catalog's name against 'catalog'and the relevant schema name against 'Schema'. Power BI desktop client does not showthis catalog in the 'navigator' window. Only the default catalog (AwsDataCAtalog) is listed.I found a workaround for this issue ... on the 'From ODBC' window where one is presentedand prompted to select 'DSN', there's also an 'Advanced options' selection.Expand the 'Advanced options' selection pane, and fetch desired databy giving an SQL query in the 'SQL Statement' box.  Doing it this way, I was able to get data under the other catalog.CheersShare"


Question: For Cognito USER_SRP_AUTH - how to calculate PASSWORD_CLAIM_SIGNATURE to respond to ChallengeName: "PASSWORD_VERIFIER"?

"This knowledge article describes the calculation of PASSWORD_CLAIM_SIGNATURE for the case of ChallengeName: "DEVICE_PASSWORD_VERIFIER".Let PASSWORD_CLAIM_SIGNATURE = SHA256_HMAC(K_USER, DeviceGroupKey + DeviceKey + PASSWORD_CLAIM_SECRET_BLOCK + TIMESTAMP), base64-encodedLet K_USER = SHA256_HASH(S_USER)Let S_USER = (SRP_B - k * gx)(a + ux)Let x = SHA256_HASH(salt + FULL_PASSWORD)Let u = SHA256_HASH(SRP_A + SRP_B)Let k = SHA256_HASH(N + g)What is the equivalent calculation of PASSWORD_CLAIM_SIGNATURE for the case of ChallengeName: "PASSWORD_VERIFIER"?FollowComment"


Question: Does Databricks give customers the option to choose reserved instances or are there any barriers to savings plan ?

Does Databricks give customers the option to choose reserved instances or are there any barriers to savings plan ?  Does EMR provide reserved instances?FollowComment

Answer: "0Hi,AWS work in collaboration with Databricks and we provide pay-as-go pricing plan in the following link below. The saving plans apply to the EC2 and Fargate instances, not to other services such as SageMaker. Additionally, Amazon Web Services does provide EMR with Reserved Instances, the following link will provide more information for any questions needed.Resources:AWS: https://docs.aws.amazon.com/emr/latest/ManagementGuide/emr-instance-purchasing-options.htmlDatabricks: https://databricks.com/product/aws-pricingCommentSharekedkormeanswered 10 months agoSUPPORT ENGINEERAWS_SamMreviewed 10 months ago"


Question: Change email address for Log Archive and Audit accounts

"Hi,is it not safe/possible to change email address for Log Archive and Audit accounts (automatically provisioned by Control Tower) using standard procedure?See https://docs.aws.amazon.com/controltower/latest/userguide/change-account-email.html .As stated in the NOTE:The following procedure doesn't allow you to change the email address of a management account, log archive account, or audit account. For more information about that, see How do I change the email address associated with my AWS account? or contact AWS Support.What's the correct procedure?Thanks.EmanueleFollowComment"

Answer: "0It is technically possible, but it is not formally supported.You would need to go through the documented process that you linked to here already, but then you need to update/repair the landing zone to reflect those changed account emails.  You may need to do this a couple of times.  What it's doing is updating the CloudFormation stack set parameters to align.  Anecdotally I've heard that some customers find that some function as they should, others need a repeated update/repair before those changes propagate.I do not have first hand knowledge of making this change myself.CommentShareRoguenanswered a month ago0Yes you can change the email addresses associated with your Control Tower accounts, and per document that is one of the type of changes that are updated automatically by Control Tower, but AWS Service Catalog handles changes differently than AWS Control Tower so you may need to update Service Catalog manually as well since the Provisioned Product for vended accounts in Service Catalog will not be automatically updated to match any changes you make to your accounts. If you want your Provisioned Product to be consistent with the actual state of your vended accounts, you'd need to perform an update in Service Catalog.CommentShareAWS-User-9543277answered a month ago"