Podcast #128: We chat with Kent C Dodds about why he loves React and discuss what life was like in the dark days before Git. Listen now.

Questions tagged [amazon-web-services]

For questions about Amazon Web Services (AWS) in general. If your question is about a specific Amazon web service please use that tag, e.g. [amazon-s3], [amazon-ec2], [amazon-ecs], [aws-codedeploy]

Filter by
Sorted by
Tagged with
0
votes
0answers
6 views

Issue connecting to ECR using Spinnaker on Kubernetes

I installed Spinnaker onto a Kubernetes cluster via Helm. I have tried to add the ECR registry as per the docs and so far not working. I found that the aws cli is missing even though in issue 2394 it ...
3
votes
1answer
7 views

AWS SQS - use case for “short polling”

When using event driven processing of work with AWS SQS and worker clients. the use of long polling is often recommended. AWS documents this here Essentially when there are no message in the queue, ...
0
votes
0answers
20 views

Unable to get Helm to work with ECR

I'm using Helm v3 with AWS ECR on a Kubernetes cluster that was creating using Kops. I have checked and the role kops assigned to the nodes does have ECR permissions. When I deploy my helm chart I ...
0
votes
0answers
7 views

SSL bridging based on SSL session ID with AWS Loadbalancers

In our on-premise datacenter we are able to run services behind loadbalancers with session stickiness without handling the ssl terminination on the loadbalancer. For various reasons we want to have ...
2
votes
1answer
51 views

For storing avatars in s3, which approach has the lowest cost?

On my site I have the ability for users to upload avatars (which they upload to s3). They can only have one avatar at the moment, so I currently just have the filename set to their user id. However, ...
0
votes
1answer
17 views

Can Jenkins master connect to a slave node in a private subnet?

We've got a Linux Jenkins master node set up in AWS behind a load balancer and I'm attempting to connect to Windows slave nodes in private subnets. Is this possible? The Jenkins URL is accessible ...
1
vote
0answers
19 views

Getting client IP address in Istio

So I have a setup like this: AWS NLB (forwards) --> Istio --> Nginx pod Now, I'm trying to implement rate limiting at Istio layer. I followed this link. However, I can still request the API more ...
0
votes
1answer
10 views

Which compliance checking/enforcing tool should be used in Cloud Environment? ( Trubot, Saltstack) [closed]

Today it is a known thing that some cloud services may not be configured securely, this happens because of not knowing how to configure securely. This brings me to the question of "Which tools / ...
0
votes
1answer
15 views

Terraform creating single SG but multiple CIDR blocks

I am trying to use Terraform to create a single security group that will allow traffic for mongo on port 27017 from all my private subnets that are stored in a variable. My issue is I am unsure how ...
1
vote
2answers
67 views

Given a blank slate, tool recommendations? [closed]

so I have 8 months of DevOps experience previously working as a desktop engineer for two and a half years.Starting a new role in the education sector, recently they brought their IT department which ...
0
votes
1answer
26 views

DC Jenkins server to AWS servers connection

We are trying to automate the deployment process for our application, our application has two components (one hosted on DC, one hosted on AWS). Now, we are not sure how do we connect the jenkins from ...
0
votes
0answers
22 views

Selectively uploading multiple folders to AWS S3 using CLI

I have around 50 folders, which contain subfolder, I want to upload the folders including the subfolders to an S3 bucket, while keeping the subfolders structure. I read I can use --include command ...
0
votes
1answer
19 views

S3 bucket policy errors

I have the following bucket policy for Amazon S3, which is giving the following error: Error: Invalid bucket policy syntax. Either it is a JSON syntax error or a Policy error. This is the policy ...
2
votes
1answer
18 views

AWS CodePipeline frozen on Source

I have created a very simple pipeline. I have a git repo in CodeCommit, and the pipeline, when triggered, simply copies the files to an existing S3 folder which is set up to serve a static website. ...
0
votes
0answers
7 views

How to setup Cloudfront for Load balancer for a private staging domain name?

I've got a domain name foobar-staging.com, that I use for the staging environment to get feedback, testing or demo before releasing to production. Recently, decided to deploy the UI static files to s3 ...
1
vote
1answer
25 views

What is the difference between EKS and EC2 installed kubernets?

I'm newbie in AWS usage. I don't understand the difference between EKS and EC2 installed kubernets? Amazon EKS makes it easy for you to run Kubernetes on AWS without needing to install and ...
2
votes
1answer
26 views

Accessing AWS Secrets Manager from Docker

All the tutorials I've seen for AWS Secrets Manager have secrets being retrieved by the CLI. How is this done in production? Can I mount a set of secrets to a docker container as a file?
1
vote
1answer
6 views

How to share RDS snapshots across account roles?

I'm using an AWS account which has different roles for the different environments we use. For example, we have a Development role for our development environment and a Production role for our ...
0
votes
0answers
14 views

How do I detach an existing volume and attach a new volume using Terraform?

Is there a way to detach EBS volume from existing EC2 instance and attach a new EBS volume using Terraform ? I prefer to replace the volume rather than trying to destroy the instance and create a new ...
0
votes
1answer
19 views

Cloudformation YAML not well-formed

I have a cloud formation template that I want to import some values from another template. Currently the other template exports a string by joining together an array (better way of doing this?). In ...
1
vote
1answer
16 views

How can I enable active tracing by default for an AWS Lambda function using Terraform?

On the console, there’s the option to enable active tracking for X-ray tracking but I can see this in the Terraform aws_lambda_function resource the aws_xray_sampling_rule resources? I'm currently ...
2
votes
1answer
35 views

Container for every user

Please help me here based on your experiences. We have launched a desktop application where users can download all their online data from several platforms at one place. Our motto is to provide users ...
0
votes
0answers
9 views

Can Xray use existing cloudwatch metrics?

So if existing resources are not setup to send segments to Xray but do work with cloud watch metrics is there a way for Xray to use those metrics? I know Xray gets segments from the resources but I ...
1
vote
1answer
13 views

Is it possible to read secured keys from aws-secrets-manager without using aws access and secret key?

I've created a local development environment for new developers coming to work in the company I work for. One of the microservices running as part of this local development environment requires ...
3
votes
1answer
18 views

Provisioning a server on behalf of a user on GCP/AWS/Azure and probably relinquish access

I'd like to build a service where I run a custom setup script on behalf of a user on an t2.micro equivalent instance but be able to probably relinquish access to the server. Any advice on the tech ...
0
votes
1answer
18 views

How to setup a permanent storage volume for EC2 instance?

I created an EC2 instance of r5ad.xlarge and installed Jenkins on it. However, after a few jobs I configured and ran I saw a warning about no space left. Then realised Jenkins was installed on 8 GB ...
0
votes
1answer
28 views

Route53 DNS records stopped resolving

Last week, my TXT and other DNS records on Route53 stopped resolving: https://dnschecker.org/#TXT/thuijls.net The entries are set like: What else could be missing here? As far as I'm aware, nothing ...
1
vote
1answer
58 views

How do I use only an encrypted version of my AWS RDS password in my terraform code?

Is there a way to only have an encrypted version of my RDS password in my Terraform code and for AWS to decrypt it for RDS so you use the decrypted password to login to the RDS? So set my rds ...
1
vote
1answer
23 views

When should an application be copied to a new region?

I'm taking my first course For AWS cloud practitioner and I am curious: The case: I have a single, client-facing application hosted on an EC2 instance. Let's keep it simple and say it's brochureware, ...
3
votes
1answer
37 views

How does the creation of an AMI on AWS work and why is the creation time unpredictable?

Creation date: September 23, 2019 at 9:22:06 PM UTC+2 21:48: still waiting for completion 21:53: completed Sometimes it takes 15 minutes and sometimes longer. How does a creation of an AMI work and ...
3
votes
1answer
38 views

What's the benefit of using Nginx to serve a Flask API on AWS?

I want to deploy a Flask API on AWS using Docker. A common way seems to be using a combination of Nginx + app server (e.g Gunicorn) + Flask app. The reason to use app server seems obvious to me. ...
0
votes
0answers
9 views

Can you exclude from AWS Trusted Advisor without waiting 6 minutes between clicks?

I've been working on cleaning up the AWS Trusted Advisor](https://aws.amazon.com/premiumsupport/technology/trusted-advisor/) warnings at my new job. I've got a few hundreds warnings that are worthy ...
1
vote
2answers
81 views

docker build throws UnknownHostException with jenkins dind slave + kubernetes plugin

So Jenkins is installed inside the cluster with this official helm chart. And this is my installed plugins as per helm release values: installPlugins: - kubernetes:1.18.1 - workflow-job:2.33 ...
1
vote
1answer
29 views

AWS Production Configuration ASP.NET Core & Docker

So we have an asp.net core application we are hoping to start using with docker and host this all on aws. We have multiple clients that we set up this project for, each with their own configuration ...
0
votes
0answers
7 views

jenkins-x returns error 1 when I try to create a cluster

I'm following this tutorial. I'm running the jenkins-x cli on a aws ec2 instance where I installed kubenetes and jx. I get to the part where I run the command jx create cluster eks --cluster-name=...
0
votes
0answers
7 views

Recomendation for automated rotation of a JSON keyring?

I have a Sailsjs app that is configured to encrypt model attributes with sensitive information. This seems to use bcrypt, under the hood and leverages a JSON keyring in the configuration (...
0
votes
0answers
34 views

Trying to start ELK APM container on AWS but no environment variables takes effect

I am trying to run ELK APM - application performance monitoring container on AWS. Image: docker.elastic.co/apm/apm-server:7.3.1 Port mapping 8200:8200 and setting Environment variables output....
1
vote
0answers
24 views

What is the Young's Modulus for EC2?

Young's Modulus is defined as follows: Young's modulus or Young modulus is a mechanical property that measures the stiffness of a solid material In the case of AWS Elastic Compute Cloud (EC2), the ...
0
votes
0answers
49 views

How do I install kubeadm on RHEL 8.x?

I am using RHEL 8.x in AWS. I cannot install kubeadm because when I try "sudo yum -y install kubeadm" I get No match for argument: kubeadm Error: Unable to find a match The directions I found ...
0
votes
1answer
23 views

How do I access the web UI for Kubernetes clustered that were created via EKS?

I need a URL and the web UI log in credentials for Kubernetes. I created Kubernetes clusters in AWS with EKS. I have API endpoint URLs for the clusters based on what I see in the EKS section of the ...
0
votes
0answers
16 views

Using serverless, how can I deploy multiple stages with different api keys for each stage on a single AWS account?

I have a serverless configuration that has private routes into a lambda function and the api keys are in the configuration, using the stage name to look them up. service: my-service provider: name:...
4
votes
1answer
30 views

Triggering a SNS notification when an object is accessed (downloaded) in AWS S3

I have managed to trigger events on my bucket when objects are uploaded (PUT) but I am surprised that there are no triggers called when objects are downloaded (GETs), as can be seen in this screenshot ...
0
votes
1answer
95 views

ERR_SSL_PROTOCOL_ERROR signin.aws.amazon.com

I was getting this error trying to sign into the AWS console. When I changed my service provider (for example using my mobile data) this would work. Trying to fix this I looked at the URL, and ...
2
votes
1answer
18 views

How to create ALB that can handle traffic on 2 ports

I want my HTTP traffic on port 3701 and my WS (websocket) traffic on 3702. For a moment I thought that using 2 target groups was the answer, but there doesn't seem to be a way to differentiate between ...
1
vote
1answer
20 views

CORS and subdomains - do subdomains matter?

Will CORS ever be a problem when you have x.example.com going to y.example.com or only if the root domain is different?
0
votes
1answer
24 views

How to avoid a high number of requests for avoiding Amazon AWS EC2 instance AutoScalin?

If I set autoscaling for an EC2 instance in Amazon Web Services, how can I set optimized autoscaling for large numbers of connections in order to avoid unusual autoscaling?
1
vote
1answer
30 views

Route53 Routing Policies - Best Policy for US-based Ecommerce?

When I look over the documentation for Route 53 Routing Policies they list 7 different policies. How should I pick the right one if I am building out new infrastructure in AWS for a US-based e-...
1
vote
3answers
53 views

How to make an AWS S3 bucket accessible over HTTP?

Does AWS S3 provide a way to make bucket's files available over HTTP preferably protected with BASIC_AUTH? I mean listing the files (index) and make it possible to download them over HTTP.
0
votes
0answers
23 views

How do multi-cloud organizations handle DNS public zones?

What if I have an existing public zone within Amazon Web Services with an existing A record type e.g. bar.com I want to create a subdomain for that existing domain within Google Cloud Platform e.g. ...
0
votes
1answer
25 views

API Gateway - How Deploy API works?

After creating API Gateway with two API names and integrating with lambda function, AWS documentation recommends to deploy this API, as shown below: 1) What does deploy API mean? How creating API ...