Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [amazon-web-services]

For questions about Amazon Web Services (AWS) in general. If your question is about a specific Amazon web service please use that tag, e.g. [amazon-s3], [amazon-ec2], [amazon-ecs], [aws-codedeploy]

-1
votes
0answers
12 views

Serverless App Architecture & Data Flow

I'm not sure if I am asking the question in the "right" StackExchange site but I have a very specific serverless application design question. The image below is how my application is planned to be ...
0
votes
1answer
14 views

How to pass HashiCorp Vault secrets(k/v passwords) to Terraform EC2 instance

How can we pass HashiCorp Vault secrets, k/v username/password and feed Terraform while its creating Ec2 instance. For example, i don't want to use in plain text variable "myvariable" { default = "...
1
vote
1answer
206 views

How to re-enable RDP on AWS-EC2 instance

Accidentally i disabled RDP on EC2 windows machine and now I am not able to access it via RDP, Is there any way to re-enable RDP service on EC2 instance?
1
vote
1answer
22 views

How to configure Dedicated IPs for specific SES domain?

Recently we've requested for 2 dedicated IPs for our SES domain, As most of the mails are going to spam folder. And we've 5-6 SES domains(account.abc.com, help.abc.com, mail.abc.com, etc) in the same ...
0
votes
1answer
19 views

Using volumes on AWS fargate

I am new to fargate and even dockers. But I have used dockers for a couple of months. Only now, I am using fargate. I create a particular docker instance as follows: docker run -v localHostFolder/...
0
votes
0answers
19 views

AWS golang SDK get configuration variables

Is it possible to get with AWS Golang SDK custom configuration variables the same way you can get them with aws cli? As an example, I have in my ~/.aws/confg [profile test] region = eu-central-1 ...
-1
votes
0answers
13 views

AWS - One or more security groups in the launch configuration are not linked to the VPCs configured in the Auto Scaling group

I'm trying to create the ASG within my own VPC. But I'm getting the error as "One or more security groups in the launch configuration are not linked to the VPCs configured in the Auto Scaling group", ...
5
votes
2answers
310 views

Impact on policy after deleting IAM user

I have created one IAM User named "test" with S3 and Glacier Permission. Now with user "test" i created one life cycle policy to move data from S3 to Glacier at every 5 days. Now, i delete IAM user "...
0
votes
1answer
16 views

How to filter ELB logs by today's date?

I've tried this query: SELECT request_timestamp FROM elb_logs WHERE date_trunc('day', request_timestamp) = date_trunc('day', current_timestamp) LIMIT 10 but it fails with: SYNTAX_ERROR: line 3:7: ...
0
votes
0answers
5 views

Pack and move kubernetes to a different host

Say I had a K8s based infra on GCP and wanted to easily move to AWS. What design architecture do you recommend ? like use of zeroconf pods, avoid vendor locks etc.. How to make pack-and-move easy ? ...
0
votes
0answers
7 views

Does AWS Cognito support Mutual certificate-based TLS to third-parties

Does AWS Cognito support Mutual certificate-based TLS authentication to third-parties outside of AWS i.e. client certificates on my customers' organisation staff PC browsers for authentication via AWS ...
0
votes
1answer
16 views

Does AWS Amazon Certificate Manager Generate Client certificates for Customer (3rd Party Clients)

Could you kindly help me out with an answer. Does AWS Amazon Certificate Manager (ACM CA) (or maybe LetsEncrypt) generate Client certificates for Customer (3rd Party Clients), i.e. the client ...
0
votes
1answer
22 views

How to Block Traffic From a Single IP in AWS

Our server being hammered by traffic from some particular IP. It was causing a 20x increase in traffic to some URLs. So I wanted to block all traffic from that single IP.
0
votes
1answer
28 views

How to Allow AWS S3 Access From only Specific IPs

Recently we were testing with AWS VPC, and a requirement for our project was that we needed to allow nodes within a VPC access to S3 buckets, but deny access from any other IP address. Is there ...
0
votes
1answer
14 views

How to set ping response of AWS ec2 instance?

I hosted one website in AWS. When I try to open in a browser it's working properly. But when I try to ping same website that time it's not sent a response. so how to enable ping response.
0
votes
0answers
7 views

R Shiny app on AWS instance blocking API requests to Google Geocoding API [closed]

I have an R Shiny app hosted on AWS ec2 instance and part of the app is it makes API requests to Google geocoding API. This works fine locally but I have the app dockered and up on the instance and ...
0
votes
0answers
34 views

Understanding AWS GuardDuty NetworkPortUnusual findings

Today I received my first alert from AWS GuardDuty that concerns me though I'm not sure how to assess the severity. I received what appears to be an outgoing connection (or at least an attempt) to an ...
2
votes
1answer
14 views

Is there a way to find out every resource that calls a lambda?

I have a lambda that gets called from several place through out an large app. Is there a way to discover every resource that is calling/using/attached to that lambda?
1
vote
1answer
33 views

Trying to make job working AWS MediaConvert (ERROR 1040)

Here is my json job. { "Queue": "arn:aws:mediaconvert:xxxxx", "UserMetadata": {}, "Role": "xxxxx:role/MediaConvert", "Settings": { "TimecodeConfig": { "Source": "EMBEDDED" }, ...
0
votes
1answer
10 views

Can I check whether ansible is on last batch of rolling update (serial: 25%)?

I'm using Ansible to update a pool of EC2 servers with a rolling update, in batches of 25%. In between batches, I'm pausing long enough for the server health checks to start to pass again (since they'...
0
votes
1answer
31 views

Terraform - aws_security_group_rule doesn't support import

I'm having a strange problem when trying to import an aws_security_group_rule into terraform. I'm running the latest version of TF (0.11.11) For example: terraform import module.ec2....
-1
votes
1answer
22 views

How much I will pay for AWS spot: my bid or current spot price?

AWS EC2 Spot. My Spot Max Bid Price - 2$. Current Spot Price - 1$. How much I'll pay for instance? 2$ per hour or 1$ (and increasing|decreasing), equal to Current spot price, while my bid price is ...
1
vote
0answers
13 views

echo colon to file in cloud-init

So, I have this part in my cloud-init: runcmd: - echo : RSA 'node.crt' >> /etc/ipsec.secrets I literally can't make it to work. I tried these variations: runcmd: - echo : RSA 'node.crt' ...
0
votes
2answers
43 views

Transfer files and execute commands from jenkins scripted pipeline to AWS instance

I want to transfer files and execute a few commands on remote AWS instance from Jenkins. I have the following methods in mind to do the same. Note that my Jenkins server is running in the local server,...
0
votes
0answers
14 views

AWS API gateway call to multiple lambda functions possible?

We have a front end implemented in ECS. This front end communicates to API Gateways which in turn makes calls to Lambda functions. We are implementing Disaster Recovery Solution for this architecture. ...
0
votes
1answer
22 views

How does Django deployments happen on Servers?

I started learning Django six months ago and I really really loved it. I learnt how to deploy the django projects to EC2 instances. Basically 1st time when the django project is deployed to EC2, ...
0
votes
1answer
22 views

Terraform | AWS | vpc_id causing apply to fail

I am working on setting up a Cloud9 environment using Terraform, I ran into an issue when it comes to my Terraform apply and specifically: Error: Error applying plan: 1 error(s) occurred: * ...
0
votes
0answers
29 views

What AWS resources are applicable to each action?

AWS permission policies have actions and resources (and conditions, but let's leave those aside for the moment). For a given action, how can I get an accurate list of all the resources it can be ...
0
votes
1answer
36 views

When is it not appropriate to use serverless technology such as AWS Lambda?

With serverless computing using AWS lambda, Amazon(AWS) is taking the ownership of architecture, administration & deployment aspect of AWS services(VPC/EC2/ELB/AScaling/Rtables/SGroups/etc...) for ...
2
votes
2answers
56 views

How to see when an AWS IAM role was last used?

In AWS in the GUI you can select a role and then click on delete, then when you are prompted to approve or deny the deletion it shows you when the role was last used. I would like to be able to know ...
1
vote
0answers
13 views

all volumes are geting deleted when one EC2 is being deleted via terraform

i am using this template to create aws resources. my count is 2, every thing is getting created as per plan,, i am attaching a 2nd ebs volume of 1 gb to both machines, which is also happening well, ...
2
votes
2answers
32 views

all volumes are geting deleted when one EC2 is being deleted via terraform

i am using this template to create aws resources. my count is 2, every thing is getting created as per plan,, i am attaching a 2nd ebs volume of 1 gb to both machines, which is also happening well, ...
0
votes
0answers
25 views

AWS Log Insights

I tried out this new service recently but I'm in trouble with the query syntax. Do you know how to Search for given error message types based on string snippets from @message, Visualize these ...
0
votes
0answers
7 views

How do you create and implement a customized IAM Policy in AWS using LandingZone(Control Tower)

I have to this point only used managed policies and not customized policies, has anyone used created and implemented customized IAM policies using LandingZone?
0
votes
1answer
16 views

RDS IOPS utilizing fully

I have upgraded RDS mysql to 1000 IOPS from 120 IOPS, But same database operations utilizing more than 1000 IOPS now. Is there any way to implement RDS cluster or Is it possible to make use of lambda ...
0
votes
0answers
19 views

Use Google OAuth and AWS Cognito to send Jenkins api calls as auth'd user?

I've set up a webpage to require Google OAuth login via AWS Cognito so I can make AWS calls. I'd like the auth'd user to be able to also kick off a Jenkins job from the same webpage. Our Jenkins ...
0
votes
0answers
16 views

Developing a progress meter for uploading and processing a file

I saw some posts on the internet about AWS Lambda user progress meter but there were no specific answers. One answer was that "you can use SNS" but I think I solved it using SQS: Lambda 1 receives ...
0
votes
1answer
64 views

Access S3 files from Datacenter over VPN to VPC

I am trying to access S3 files from non-EC2 machine. non-EC2 machine is connected to VPC over VPN, also can reach to other hosts in VPC. Created VPC Endpoint for S3 Main routing table of VPC has ...
0
votes
0answers
9 views

Cannot run bitnami images on AWS Fargate with mounted volume?

Above is the logs when I try to run a bitnami/mariadb:latest container with a volume mounted to /bitnami/mariadb. I already knew that bitnami's images are running as non-root user that cause the ...
0
votes
1answer
77 views

How can you pass private environment variables to FARGATE tasks specified from a Docker Compose config

I am using an existing docker-compose.yml to migrate an app to ECS. The config references several $ENV vars which I used to pass in simply as environment variables when running docker-compose up. One ...
0
votes
0answers
17 views

How do you deploy Kubernetes to AWS with conjure-up (and not EKS)?

I am using Ubuntu 18.04 in AWS. I am trying to deploy a Kubernetes cluster with "conjure-up kubernetes". This has worked in the past to create EC-2 instances with Kubernetes. After I run the above ...
0
votes
0answers
15 views

How do I get Jenkins to work in a Docker container without modifying a directory on the Docker host?

I am using RHEL 7.x in AWS. I have Docker 1.13 installed. I checked a variety of ports and no firewall (or Security Group) seems to be blocking network connectivity on the EC-2 host. I tried this ...
0
votes
0answers
17 views

multicloud connect over VPN?

I need to have a private connection between aws ec2 and Azure VM. 2 instances should communicate over private IP. I followed this Doc to create VPN but couldn't able to create IPsec tunnel ...
3
votes
1answer
38 views

How do you instruct AWS FARGATE to provision a t2.small via ECS CLI instead of the default micro?

I am trialling AWS ECS for the first time. I've run through the tutorials and now I'm trying to deploy an existing Docker Compose suite which I've been using on Digital Ocean for some time. I have ...
0
votes
0answers
27 views

AWS EKS CronJob resource not found

I have an Amazon EKS Kubernetes cluster and have the need to run a CronJob on it. However, when I published the manifest to k8s, the object is there, I can list it, get it, but I cannot describe it ...
0
votes
0answers
39 views

How to allow traffic only from cloudflare to AWS ALB?

We have a use case where we wanted to allow only traffic from Cloudflare to the AWS application load balancer, which is the origin for the sub-domains which we have set up in Cloudflare. Anything ...
1
vote
0answers
28 views

How to integrate CI with federated AWS IAM roles?

Imagine a multi tenant environment using a CI (e.g. GitLab but can be any other) and AWS as a backend for test infrastructure. With fixed users, it is easy: save credentials as secrets. But what if ...
1
vote
1answer
144 views

ECS auto deploy with ECR

I'm using github, jenkins, aws ECR, aws ECS. I want to deploy automatically when github have new commit. When github have new commit, github sends a event webhook to jenkins, jenkins builds the ...
0
votes
1answer
17 views

AWS Cloudformation: Callback only for CREATE_COMPLETE or CREATE_FAILED of entire stack

I am creating a CF stack; I have been using the --notification-arns flag of aws cloudformaction create-stack to send notifications to an email topic; however this produces a huge amount of spam, ...
0
votes
1answer
8 views

AWS: Using CloudFront as CDN for non-AWS hosted content

Is there a way (say by providing a Route53 endpoint as origin) to distribute non-AWS hosted content using CloudFront? (assuming the Route53 is used as dns for a site hosted outside of amazon)