Questions tagged [amazon-web-services]

For questions about Amazon Web Services (AWS) in general. If your question is about a specific Amazon web service please use that tag, e.g. [amazon-s3], [amazon-ec2], [amazon-ecs], [aws-codedeploy]

Filter by
Sorted by
Tagged with
0
votes
0answers
9 views

Glacier offsite backup costs 2-3$ per month on AWS - avoid monthly credit card payment

I do an annual offsite backup (personal files) which I transfer to Glacier. AWS now charges me 2-3$ per month on my credit card. I have a European credit card (additional charges because of foreign ...
0
votes
2answers
26 views

Container Image Promotion across environments in ECR/ECS

We have started doing some initial work on deploying containers on ECS Fargate service. However we are not yet completely figured out how to manage our image promotion across different environments. ...
0
votes
0answers
3 views

Unexpected type error in ansible community.aws.coudfront_distribution: “origins” parameter: “'list' object has no attribute 'get'”

I get an unexpected type error, for what I assume to be the "origins" argument to the community.aws.cloudfront_distribution module: "Error validating distribution origins: 'list' object ...
0
votes
1answer
11 views

Advantages of using Code-pipeline and Codebuild for CI/CD over Bitbucket pipeline?

What are the advantages of using AWS Codepipeline/code build for our pipeline over the bitbucket pipeline. ? Some of the factors that I can think of: Pricing? Pipeline for a serverless application ...
0
votes
1answer
70 views

AWS ElastiCache Redis DNS error - Name or service not known

The Problem & The Question I'm trying to create an AWS ElastiCache Redis-flavored cluster and connect to it from an instance in the same VPC. When I create the cluster initially, I can connect to ...
0
votes
0answers
13 views

How to use new VPC CIDR range in a Fargate-only EKS cluster?

I created an EKS Fargate-only cluster using an existing VPC, and currently have objects running in it. I want to associate new CIDR ranges for my VPC by following How do I use multiple CIDR ranges ...
0
votes
1answer
23 views

How to get code onto aws ec2 instance using terraform and gitlabs

I've just started learning Terraform (utilizing the AWS provider) and I have managed to replicate our infrastructure which includes quite a few amazon web services. I can successfully deploy it and ...
0
votes
0answers
4 views

How to set AWS Events RunCommandsTargets value from event input?

The AWS EventBridge service allows to execute the SSM Run Command feature based on triggered events. The RunCommand feature accepts parameters such as which command to run, and these can be injected ...
1
vote
0answers
12 views

Cost minimization in aws parallel cluster

I'm new to aws cloud service. I have to create a parallel cluster in aws. So, I'm using aws parallel cluster. But the problem is, when creating a cluster the NAT gateway billing me when I'm not using ...
0
votes
1answer
47 views

Gitlab CI/CD: deploy docker image to existing kubernetes cluster

I have node.js application that I need to deploy to exising kubernetes cluster. The cluster is setup using kops on AWS. I have created .gitlab-ci.yml file for building docker images. So, whenever a ...
1
vote
1answer
22 views

AWS Inspector “High Risk” : port open to the internet with IP whitelisting

We use AWS Inspector to identify risks with our AWS assets. Today I received a finding, with a "high" severity. The finding said that the FTP port was open to the internet. However, after ...
1
vote
2answers
68 views

How do I use the remote-exec provisioner with Terraform?

I am using Terraform 0.14 and AWS. I am trying to write a .tf file that will invoke a remote-exec command via Terraform's provisioner. This code does not work: resource "aws_instance" "...
0
votes
0answers
5 views

AWS ElasticSearch - Automating manual snapshots

The requirement - A customer requires an automated mechanism that takes a manual snapshot of an AWS ElasticSearch domain (production) on a daily basis. The target of the snapshot is an AWS S3 bucket. ...
0
votes
0answers
15 views

What if EC2 in public subnet is not assigned public IPv4

Hi I'm struggling to understand of public vs private communication in Amazon VPC. what if EC2 instance is not assigned public ipv4 in public subnet, can it get traffic/data from any other EC2 ...
0
votes
0answers
23 views

Best way to organize e2e testing in separate environment without intervention to stable development process

Hello DevOps community! TL;DR What are your cases where you integrated cypress end-to-end testing to your project? What are the best approaches? Pitfalls? Long story... I got the QA engineer asking me ...
0
votes
0answers
8 views

Elastic Beanstalk Log Line Breaks

I have a Node.js app running in Elastic Beanstalk and logging using console.log, console.error etc...then I have CloudWatch logs turned on. When I go to the Insights and do a query it shows up but ...
1
vote
0answers
52 views

The deployment failed because no instances were found in your green fleet

I have created a blue-green deployment in AWS CodeDeploy with the option Manually provision instances. but when I run pipeline code deploy show error `The deployment failed because no instances were ...
1
vote
1answer
133 views

What does “eksctl create iamserviceaccount” do under the hood on an EKS cluster?

AWS supports IAM Roles for Service Accounts (IRSA) that allows cluster operators to map AWS IAM Roles to Kubernetes Service Accounts. To do so, one has to create an iamserviceaccount in an EKS cluster:...
1
vote
1answer
51 views

Can you remove a commit made to a branch on AWS code commit?

I know of git rebase but don't know if it can be used with AWS code commit? Or if there's any other method of removing a commit to revert back to before it was made and merged?
1
vote
1answer
25 views

AWS SNS-SQS: Checking a subscription already exists

I've found it's a useful strategy to create relevant queues whenever a queue worker service boots. For instance, on service boot, it checks whether its queues exist already in AWS and creates them if ...
0
votes
1answer
36 views

Migrating to AWS with Devops [closed]

What are they key stages of migrating to AWS with Devops ? Can anyone list a use case or workflow?
0
votes
1answer
42 views

What is the AWS equivalent of Azure Management Groups?

Microsoft Azure has Management Groups. (They are a level above subscriptions that allow you to organize subscriptions into containers called "management groups" and apply your governance ...
1
vote
1answer
111 views

Is it possible to have an aws EKS infrastructure as code?

Is it possible to declare "a complete production level EKS with other aws services" using terraform? I know that terraform has an eks module and an aws provider. But I'm not sure if one can ...
0
votes
0answers
26 views

How should Kubernetes worker nodes get the correct /run/flannel/subnet.env file?

I am using Kubectl 1.20.2 on the client side and 1.18.9 on the server side. I have deployed EKS, and I have created a cluster. The pods never become ready unless I manually log into the worker nodes ...
0
votes
1answer
24 views

Does a DB connection prevent AWS Aurora Serverless from pausing its compute capacity?

I want to host an application that connects to a DB and makes queries to it. The application holds onto the connection indefinitely but only makes queries to the DB when the user interacts with the ...
0
votes
1answer
25 views

How to mount a single 100TB SSD on AWS and access the device over nfs from different machines within the same VPC?

I have a bad experience with Storage Gateway (SGW) and would to consider the possibility to setup a 100TB SSD device (via EFS or similar) on AWS and allow an access to the storage device from ...
0
votes
1answer
21 views

How to redirect the request to a different node when there is an unexpected exception and one of the pods gets restarted

We are deploying the application in a Kubernetes cluster and when we face an unexpected error and the pod gets restarted or goes down we are getting a 502 Gateway error even though there is another ...
0
votes
0answers
27 views

AWS rds proxy not releasing connection to db

I have setup a rds proxy in between my webapp and rds mysql. However, when my webapp releases connection, rds proxy keep holding it. What is the parameter that decide the time that rds proxy release ...
0
votes
0answers
3 views

Can you use X-ray between VPCs in AWS?

I have 2 VPCs in the same account and want to test that a lambda function in one VPC will be able to connect to a lambda function in the other.
0
votes
0answers
13 views

EKS dashboard without token

The requirement is to access my EKS dashboard without any token.I have setup the EKS dashboard and i am able to access it via a web browser now i am trying to access the dashboard without the token ...
0
votes
0answers
32 views

Deploy and expose Mysql in AWS Lightsail container service

AWS Lightsail container service allows exposing the container only if it has an HTTP / HTTPS port open with the proper responses to healthcheck. I'm trying to run a MySQL container from the docker hub ...
0
votes
0answers
23 views

deploying my public key to multiple ec2 instances

I wrote a playbook to deploy my ssh keys across multiple instances. This my playbook, but I am experiencing some problems with it. I already created my ssh keys from my local instance. Please see ...
1
vote
1answer
53 views

In k8s, do the controller nodes have to be in same VPC as the worker nodes for a cluster?

I'm new to k8s and trying to grasp the infrastructure concepts, and trying to apply them in AWS. I know a k8s cluster has a control plane, which has the management nodes, and a data plane, which has ...
3
votes
1answer
70 views

K8s cluster in peered VPC can't reach RDS cluster

I have two K8s clusters in the same VPC that I want to connect to an MySQL Aurora RDS cluster. One of the clusters can reach the RDS cluster just fine. The other, however, cannot. I'll call these eks-...
1
vote
0answers
15 views

How I can retrieve aws lambda cloudwatch logs in txt format so I can serch on them?

A lambda that I have deployed has gone wrong. Therefore, I want to look on logs and find out whats wrong about it. Hence I look upon cloudwatch logs for any error message. But the cloudwatch ...
2
votes
1answer
36 views

Redirect to a custom page on 503 error in Ingress

When our site is getting deployed, the Ingress gets created and before I could get any response I get 503 for 5-6 minutes (time taken to startup). We need to configure our ingress to redirect to a ...
0
votes
0answers
13 views

How can I efficiently manage multiple ec2 instances with a Panel

My Current Scenario is: I have over 20+ AWS ec2 instances running, with each instance running a single website. I have to use SSH for every task I have to perform related to server. I have to keep ...
0
votes
0answers
6 views

can route all traffic to a fallback location using ELB?

According to the AWS page, I understand that in the event of a DNS failover, traffic can be redirected to another URL using combination record setting in Amazon Route53. Is there a way, however, in ...
0
votes
0answers
25 views

Schedule K8s pods to multiple AZ evenly in EKS 1.18

I have a requirement to distribute pods of a given deployment across 3 AZ. We are using HPA with 3 min and max 5 setup. The worker nodes are 12 initially in EKS cluster with maximum of 15. How can I ...
1
vote
1answer
195 views

Terraform ignore_changes block on JSON-encoded attribute

I'm currently trying to get CloudWatch logging and DMS configuration working smoothly in my module by ignoring certain attributes on replication_task_settings. Right now, I have a DMS replication task ...
0
votes
0answers
95 views

Correct usage of community.aws.ec2_instance_info module in a playbook

I have successfully authenticated to AWS and pulled an inventory using the aws inventory plugin. I'm interested in getting facts about instances. The documentation says that this playbook should get ...
0
votes
0answers
3 views

How do we get the rights of a user in Sailpoint?

I’m trying to write a policy violation in Sailpoint. But I don’t know how to get the rights of the user who is asking a new right. I’ve tried this: List links1 = null; IdentityService service = new ...
1
vote
1answer
13 views

Mass remove/add to multiple security groups cross region

Would it be possible to create a script or use something like terraform to mass remove/add security group entries across several regions under the one account based on the security group name? ...
0
votes
1answer
79 views

In the AWS CLI how do I treat a special character as a string?

I'm trying to run an AWS CLI command for a resource with a ! in its name. I'm doing this from Centos docker instance running on my local device a MAC and if I run echo "$SHELL" it says it ...
0
votes
1answer
73 views

Terraform deletes AWS lambda layers instead of keeping the older versions

I am using terraform version 12.26 for AWS deployment. Whenever I try updating a lambda layer, the lambda layer version is incremented, but the older layer is deleted. Even though my current version ...
0
votes
1answer
26 views

What reasons should I NOT use a private DNS zone and CNAME services in my AWS/K8s environment?

I have a Kubernetes cluster in AWS, with apps that talk to AWS services like RDS, Elasticache, Elasticsearch, DynamoDB, etc. For the services where it's available (Elasticache and RDS, and more ...
0
votes
0answers
12 views

Allow AWS IAM users with a Path prefix to manage only their own MFA device

I have several AWS IAM users, and I want to enable them to manage their own virtual MFA devices. Most of our IAM users don't have a Path attribute, so this statement works well enough: { "Sid&...
1
vote
1answer
38 views

How to remove the AWS Backups

I'm using AWS Backup to create snapshots of my production server. My current backup plan has infinite retention and that ran me into gigabytes of storage. What would be the best way to fix that? I saw ...
1
vote
0answers
61 views

Branching strategy and CI/CD

We are planning to use the Git-flow branching strategy with CI/CD. It's a conscious decision not to use Trunk based development. Here's what the pipeline looks like: Here's what the process looks ...
0
votes
1answer
34 views

Pull request and merge actions in CI/CD

The CI/CD pipeline supports pipelines per branch but no pipeline for feature branches is triggered automatically. There are pipelines deployed for the following branches: development, master. The ...

1
2 3 4 5
9