Questions tagged [amazon-web-services]

For questions about Amazon Web Services (AWS) in general. If your question is about a specific Amazon web service please use that tag, e.g. [amazon-s3], [amazon-ec2], [amazon-ecs], [aws-codedeploy]

0
votes
1answer
13 views

Using Amazon VPC provided DNS trough AWS Site-to-Site VPN

Currently I have an AWS VPC connected to our corporate network using AWS Site-to-Site VPN. I can reach my EC2 instances trough the tunnel by their private IP Address. Inside the VPC each EC2 ...
0
votes
0answers
27 views

kubernetes service's dns not resolved inside cluster

i have setup a Service on my cluster, but can access it from pods only with the ip:port that are specified in the "Endpoints:" of the service. Instead i would like to use my-service.default.svc....
0
votes
1answer
25 views

Terraform: Route53, LB and CDN interdependencies

My team uses Terraform to deploy the necessary infrastructure. Currently, our stack is composed of: AutoScalingGroup fronted by a Load-Balancer, and a Route53 DNS record that points to this LB; We ...
0
votes
1answer
11 views

Can't get P3 spot instance on AWS

I'm new to aws-ec2. I'd like to make spot request for a p3.2xlarge instance in my local region (EU-Ireland) to benchmark V100 Tesla GPUs against my home GPU for deep learning. I have already ...
0
votes
0answers
9 views

Reason for naming the offering “AWS XYZ” and “Amazon UVW”

Is it important to note and keep the difference in name between "AWS" and "Amazon" or is it more or less arbitrary? Is it the same? For instance, the names are "AWS Lambda" but also clearly "Amazon ...
1
vote
1answer
10 views

Why isn't my S3 Cross Region Replication working for some files?

I've followed the documentation to set up cross-region replication to another AWS account. It looked like it was working correctly until I noticed an entire prefix was missing. Here is my ...
1
vote
1answer
41 views

How can I expose port 3389 using a secure approach

Within our legacy infrastructure we need to keep port 3389 exposed so that we can remote desktop into this server (note that we can't go back and utilize IaC to prevent this). We currently restrict ...
0
votes
1answer
12 views

Spot block vs reserved instances

Let's say we have a continuous process where each two hours we receive some data which has to be analysed by a fleet of workers on AWS EC2 instances which always complete their job within two hours (...
0
votes
1answer
24 views

Artifacts mentioned in secondary-artifacts section not getting uploaded to s3 bucket

I have created a codePipeline project through which my application get build using maven and it's artifacts are uploaded to s3. I'm trying to upload multiple artifacts as a single zip file to s3 ...
0
votes
0answers
14 views

Install and configure libreoffice online docker image on ubuntu 16

I have downloaded libre office online docker image from docker hub and type the necessary commands to run it.If I type docker ps I can see container is there.But I want to know how I can get the libre ...
0
votes
0answers
19 views

Terraform aws_ecr_repository resource always attempts to destroy

I have been banging my head against this seemingly simple issue for awhile now. I have some Terraform code which sets up an ECR repository, policy and lifecycle policy. provider "aws" { region = "...
0
votes
1answer
49 views

AWS Site crashes every few hours

Every few hours, my Laravel website on AWS Elastic Beanstalk crashes and throws the following error: [Sun May 19 13:06:13.436195 2019] [php7:error] [pid 3431] [client] PHP Fatal error: require(): ...
0
votes
1answer
23 views

How to automate the process of patching Jenkins Slave instances in AWS

I've been working on an automated patching solution for some infrastructure in one of our AWS accounts. This AWS happens to host the Jenkins instance we use for CI/CD actions, among other things. ...
0
votes
0answers
5 views

ElasticBeanstalk - best way to keep EC2 instances stopped at specific time frames?

ElasticBeanstalk - how to keep EC2 instances stopped at specific time frames? Like Sunday/Saturday. Is the only way using automation on cron or there is something else?
0
votes
0answers
11 views

AWS CodePipeline with Artifactory

I have a CodePipeline that builds a .Net core application that I would like to store in an Artifactory repository. AWS has an article that recommends using a worker EC2 instance to continuously poll ...
0
votes
2answers
18 views

AWS Offsite or cross-account RDS (mysql) backups

AWS Provides a great solution to provide point-in-time recovery backups within RDS. However, while we take every measure to protect the root account, I'm paranoid that if someone were to gain access ...
0
votes
0answers
14 views

How does Joyent ContainerPilot stand vs Kubernetes?

We are at the point of laying out a major healthcare interoperability project based on docker. Think of this as hundreds of systems (of the same type, but different versions), sending hundreds of ...
0
votes
1answer
8 views

Why does Docker fail to start on AWS ECS instances. ECS stateful instance fails initialization. ECS stateful instance doesn't join the ECS cluster

The ECS instance fails to join the ECS cluster because it relies on docker to launch its ecs agent. If in this case docker fails to start then the whole process halts. Docker fails to start in AWS ...
0
votes
0answers
10 views

AWS Automation Document Run Steps Against Different Servers Targeted By Tag

As the title describes I want to execute a step against a resource, but I want to specify that resource not by resource id but by tags, I have tried with the below example, but it doesn't work. What ...
0
votes
3answers
27 views

Find appropriate AWS policy

I have created a user group in AWS ("developers"). Now I want to attach a policy to the group which will grant the users permission to list, create and update Amplify apps. I am struggling to ...
0
votes
2answers
54 views

what is better between Jenkins & AWS CodeDeploy for CI/CD

I'm considering what is better and easier to use for CI/CD pipeline between Jenkins and AWS CodeDeploy. e.g. Jenkins server request webhook to git repo(github), and deploy to EC2. e.g. When push to ...
0
votes
0answers
13 views

Terraform Elastic Beanstalk managing provisioned EC2 resources

Is anyone aware of any approach that would allow me to manage EC2 resources created by AWS Elastic Beanstalk in provisioning matter (chained after creation) in the same .tf file. The only thing I ...
0
votes
1answer
15 views

AWS instance store volume - Create volume when instance is stopped/started thru SystemD(centos)

have an instance store volume(faster/cheaper) which we would like to create a volume(mkfs) when the instance is stopped and started via systemd. Is the best way for this is to have a shell script and ...
0
votes
0answers
12 views

Lambda function not being invoked by SNS topic | Step Functions

I have created a small test application (just outputs some text to test) and am trying to get it so that when I have a message put into an SNS topic that my Step Function/Lambda Function will invoke ...
1
vote
1answer
25 views

Elastic Beanstalk give error Root Object doesn't exist in Jenkins

I create a Jenkins job which uploads my war file to elastic beanstalk. But when I start to build it gives error java.lang.IllegalArgumentException: Root Object doesn't exist Below is my ...
0
votes
0answers
9 views

Issues creating Lambda functions and stepfunctions

Just to note I did already post this on SO but no response hoping here works because I am truly stuck. Day 4 of this fight... I am trying to create some lambda functions using the serverless package ...
0
votes
0answers
8 views

Config S3 in Halyard

i have my config Halyard such like this: persistentStorage: persistentStoreType: s3 s3: bucket: %bucket-s3% rootFolder: %folder% accessKeyId: XXXXXXXXXXXXXXXXx secretAccessKey: ...
0
votes
0answers
12 views

How react server will contact node server through private IP

I already asked this Question on stackoverflow but not getting any success. Some One suggest me that there is a devOPS Community which help regarding this query. I am attaching the link which I ...
0
votes
0answers
11 views

CodeDeploy with blue-green, an ASG, AND more than one TG?

Is there an easy way to use CodeDeploy to deploy to an ASG using blue-green and attach to more than one Target Group yet? In-place deployments let me keep my ASG which has more than one target group,...
0
votes
1answer
35 views

How can I access the console of a booting EC2 instance in AWS?

I'm new to AWS and am looking for a way to access my EC2's console so I can triage issues such: boot to single user mode view console output as system boots gain console access to debug GRUB issues
1
vote
1answer
13 views

Which option do I select for Security Group Source?

I am developing my Security Group for a VPC that has my Elasticbeanstalk, RDS and ElastiCache services and I am at this dashboard: Under Source, it used to be that you could select sg-0x12345-my-...
0
votes
1answer
28 views

What are your companies policies for S3 data durability?

AWS says that their systems are designed for 99.999999999% durability, but apparently there is no guarantees in their SLA. Yes, this can (hypothetically) be improved by using cross-region replication,...
0
votes
1answer
71 views

KeyCloak, PrivacyIdea and Email Gateway

I am doing a Micro-services application hosted in AWS to be accessed via Amazon API Gateway by end-users from several organisations worldwide. I am hoping to use KeyCloak as User Authentication Server ...
0
votes
0answers
22 views

Can Terraform S3 remote state be kept in a different AWS account?

I am currently using Terraform with S3 remote state. The IAM user that I'm using to run Terraform exists in the same AWS account as the S3 bucket holding the remote state files. This is all working ...
0
votes
1answer
22 views

Which S3 buckets is Lambda allowed to read code from?

There doesn't seem to be any way to define a policy about which S3 buckets Lambda is allowed to run code from. With most services in AWS, the usual practice is to define an IAM role that can be ...
1
vote
1answer
55 views

Is it necessary to specify resource in S3 Bucket Policies?

Is it necessary to specify a resource attribute within the statements that make up an S3 bucket policy? The Access Policy Language Overview seems to suggest that the resource attribute is always ...
0
votes
0answers
13 views

How to create AWS shared logging with SAML federated identities?

This knowledge article explains very well how to setup an AWS audit log for IAM based users. However what is the recommended way to proceed if you use federated (SAML) identities?
-1
votes
1answer
17 views

Utilise AWS IoT on non-supported hardware

Before I dig in too far, is there any way I can use any of the AWS IoT core functions on non-supported hardware? I can use the AWS Node.js libraries that are available (for my hardware), but I don't ...
0
votes
1answer
14 views

TravisCI did not run after adding more configuration to .travis.yml file

I added some AWS keys to my .travis.yml file so that it would deploy my application over to ElasticBeanstalk, but after I committed the changes to the file and pushed to master, nothing happened. I ...
0
votes
0answers
6 views

How to execute an external command in Cloud Custodian (c7n)?

I need to create a tag value containing a date string via Cloud Custodian (c7n). Noting the comment block in the value section of the action block in the code below. I need to understand how to ...
2
votes
1answer
124 views

Are AWS Boto3 calls asynchronous?

In the API documentation for Apache Cloud Stack for example, they put an (A) to designate asynchronous API calls. In the Boto3 - Python client API for AWS - documentation as I can't see anything like ...
0
votes
1answer
65 views

How to pass HashiCorp Vault secrets(k/v passwords) to Terraform EC2 instance

How can we pass HashiCorp Vault secrets, k/v username/password and feed Terraform while its creating Ec2 instance. For example, i don't want to use in plain text variable "myvariable" { default = "...
1
vote
1answer
244 views

How to re-enable RDP on AWS-EC2 instance

Accidentally i disabled RDP on EC2 windows machine and now I am not able to access it via RDP, Is there any way to re-enable RDP service on EC2 instance?
2
votes
1answer
30 views

How to configure Dedicated IPs for specific SES domain?

Recently we've requested for 2 dedicated IPs for our SES domain, As most of the mails are going to spam folder. And we've 5-6 SES domains(account.abc.com, help.abc.com, mail.abc.com, etc) in the same ...
0
votes
1answer
808 views

Using volumes on AWS fargate

I am new to fargate and even dockers. But I have used dockers for a couple of months. Only now, I am using fargate. I create a particular docker instance as follows: docker run -v localHostFolder/...
0
votes
0answers
20 views

AWS golang SDK get configuration variables

Is it possible to get with AWS Golang SDK custom configuration variables the same way you can get them with aws cli? As an example, I have in my ~/.aws/confg [profile test] region = eu-central-1 ...
4
votes
2answers
328 views

Impact on policy after deleting IAM user

I have created one IAM User named "test" with S3 and Glacier Permission. Now with user "test" i created one life cycle policy to move data from S3 to Glacier at every 5 days. Now, i delete IAM user "...
0
votes
1answer
58 views

How to filter ELB logs by today's date?

I've tried this query: SELECT request_timestamp FROM elb_logs WHERE date_trunc('day', request_timestamp) = date_trunc('day', current_timestamp) LIMIT 10 but it fails with: SYNTAX_ERROR: line 3:7: ...
0
votes
0answers
5 views

Pack and move kubernetes to a different host

Say I had a K8s based infra on GCP and wanted to easily move to AWS. What design architecture do you recommend ? like use of zeroconf pods, avoid vendor locks etc.. How to make pack-and-move easy ? ...
0
votes
0answers
27 views

Does AWS Cognito support Mutual certificate-based TLS to third-parties

Does AWS Cognito support Mutual certificate-based TLS authentication to third-parties outside of AWS i.e. client certificates on my customers' organisation staff PC browsers for authentication via AWS ...