Questions tagged [amazon-web-services]

For questions about Amazon Web Services (AWS) in general. If your question is about a specific Amazon web service please use that tag, e.g. [amazon-s3], [amazon-ec2], [amazon-ecs], [aws-codedeploy]

Filter by
Sorted by
Tagged with
0
votes
0answers
5 views

Redirect traffic to a ALB from AWS VPN endpoint client

I have an internet-facing load balancer, this ALB points to machines with private IP. On the other hand, I have an AWS VPN endpoint, I downloaded the config file, and most importantly I can ssh into ...
1
vote
1answer
24 views

Common permissions for EC2 usage and VPC Security Groups in enterprise use

Context: Looking to create some software that acts as middleware to a user's AWS account, where the user will provide their cloud credentials, and have the software use their EC2 instances. Question: ...
0
votes
0answers
8 views

404 status code in response from Cloudfront for a single page react application

we have a single page app in ReactJS that is being served by CloudFront but the response status continues to be 404 for any nested pages (i.e pages other than the home page). How can this be resolved? ...
1
vote
1answer
21 views

AWS: Restoring database snapshot to different environment

I've a webapp hosted on AWS. This has Electric Beanstalk, with EC2 and then a RDS Postgres database at the bottom. There's prod, UAT and staging environments and databases. I want to take a recent ...
0
votes
0answers
11 views

Enforce MFA with expiration time for AWS CLI

I'd like to enforce the use of an expiring MFA session for each user in my org that uses AWS CLI. My idea is to add a policy to each User Group (regardless of the very different nature of those groups)...
1
vote
0answers
13 views

Native Terraform AWS Auto-Scaling Group Management with health Checks

I have been using CloudFormation for the past 3 years to manage AWS infrastructure which consists of multiple auto-scaling groups with immutable AMIs (amongst other things). I am trying to rewrite ...
0
votes
0answers
19 views

Configure WebSocket on AWS EC2 Load Balancer throws Connection to 'wss://chat.domain.com:8080/' failed

I have built a Websocket on Ubuntu 20.04 (LAMP) stack using Ratchet. I followed this article https://www.twilio.com/blog/create-php-websocket-server-build-real-time-even-driven-application to build ...
0
votes
1answer
18 views

EKS NodeAffinity for Services

https://www.eksworkshop.com/beginner/140_assigning_pods/affinity/ Links like above usually show node affinity for "kind: Pod". Isn't it possible to use node affinity for "kind: Service&...
-1
votes
0answers
29 views

How to authentication MLflow using AWS API Gateway

I want to set up mlflow on AWS fargate and secure it with some authentication. I followed this repo to set it up. This repo recommends to provision an internal load balancer and expose it using API ...
-1
votes
0answers
16 views

Enabling service discovery on multiple EKS clusters with Amazon Managed Prometheus (AMP)

Background I currently have a Prometheus Helm chart installation (configured with AMP) on an EKS cluster where I also have GitLab installed. When I go to the frontend of Prometheus, I see my GitLab ...
-1
votes
0answers
9 views

Get a static hostname for container without ELB

I've been using compose-cli's cloud functionality to deploy my web app to AWS. It works very well. I have an Nginx image with port 80 open (not publically accessible though). Compose-cli will create ...
1
vote
2answers
17 views

kops validate cluster fails with even after providing appropriate state and clustername

I am trying to run validate cluster command as per the documentation kops validate Strangely it fails with following error $ AWS_ACCESS_KEY_ID=<my_legit_key> AWS_SECRET_ACCESS_KEY=<...
1
vote
0answers
9 views

HSM into cloud for windows authenticode signing - Cost benefits vs Security risks?

Our product has 4 apps (Windows, macOS, iOS & Android) with a partially combined build pipeline. 90% is run in the cloud (Android, iOS & macOS are built entirely on cloud infrastructure) but ...
1
vote
1answer
131 views

Nginx Ingress Controller - error creating inClusterConfig

What I'm trying to do I'm trying to get the Nginx controller up and running on my kubernetes cluster with the NLB version of the config files. The problem The ingress-nginx-admission-create and ...
0
votes
1answer
19 views

Resources don't seem to show up in Terraform state after import

I'm in the middle of importing a bunch of AWS resources into Terraform by doing the following: put a stub resource into a .tf file terraform import the resource (using the same address) copy the ...
1
vote
1answer
39 views

Do any services other than EC2s consume ip addresses in AWS?

SCENARIO: I am running out of free ips in my AWS subnets. I would like to talk to my infra team and request them to create new subnets. But they are asking me list of all ips I have consumed so far ...
1
vote
1answer
20 views

How to find the total ips allowed by an AWS subnet?

Is there a way to find how many total ip addresses that an AWS subnet can hold? If my subnet CIDR is a.b.c.d/n, then the total ips allowed in this subnet - are they decided by a, b, c & d as well?
2
votes
1answer
117 views

When to use Apache Airflow (MWAA) in AWS instead of AWS Batch?

I am trying to get a compare and contrast of various job processing services in AWS like AWS Batch, MWAA (Managed Workflow for Apache Airflow). Both are used for processing jobs. Just trying to ...
0
votes
1answer
38 views

Predictive autoscaling on K8s

I am learning about using Machine Learning for provisioning proactive resources on the Kubernetes and I have found some of the interesting articles about it on the internet(for instance for Thoth or ...
2
votes
1answer
33 views

Is there a way to export details of all EC2s in an AWS account?

I am aware there's a Tag Editor in AWS Console which allows us to export details of all EC2s in an AWS account. However that list seems to be missing ami and operating system of the EC2. Is there a ...
1
vote
3answers
107 views

Is AWS Fargate suitable for web applications?

I'm making a web-app, I've tried both ECS and EKS at AWS. It's been very comfortable to use Fargate instances instead of EC2. But I'm not sure I understand how to use them since when I count at it, it'...
0
votes
1answer
73 views

How to Integrate Amazon API Gateway with EKS using Application Load Balancer (ALB)?

According to the AWS documentation, it is possible to integrate Amazon API Gateway with EKS using ALB. However, by far most of this documentation explains how to do this with NLB instead of ALB. So ...
0
votes
1answer
21 views

Is it possible to deploy RDS in multiple region in AWS with read and write replica

I have an application that I need to make it accessible across 4 regions, I saw blogs and other posts in the internet that speaks about the read replica of AWS RDS MySQL Server, is it possible to ...
1
vote
1answer
31 views

AWS ELB Application Load balancer, SSL not working

I've setup an "Application Load balancer" in AWS. It has two Listeners, one on HTTP (port 80) and one on HTTPS (port 443). It also has one target group that with only one FARGATE instance ...
1
vote
1answer
259 views

ansible-playbook: how to dynamically, conditionally set a large deployment environment (variable space) in a playbook?

I am using an ansible playbook to deploy a php web application in aws. The deployment is repeated many times, with a different environment, for each customer. The different scenarios range from ...
0
votes
1answer
61 views

AWS ECS Update with new docker image

I've setup a cluster on AWS ECS, it's hosting nginx and a webapp. I've used these commands to create my resources aws ecr create-repository --repository-name <repo-name> ecs-cli configure --...
1
vote
1answer
48 views

How CircleCI, Terraform and AWS should interact in CI/CD Pipeline

I'm new to devops and I'm have a hard time finding resources to help me with this question. My Goal is to have an automated CI/CD pipeline to launch my project. Basically I have a GitHub repo with a ...
0
votes
2answers
172 views

Container Image Promotion across environments in ECR/ECS

We have started doing some initial work on deploying containers on ECS Fargate service. However we are not yet completely figured out how to manage our image promotion across different environments. ...
0
votes
1answer
48 views

Unexpected type error in ansible community.aws.cloudfront_distribution: “origins” parameter: “'list' object has no attribute 'get'”

I get an unexpected type error, for what I assume to be the "origins" argument to the community.aws.cloudfront_distribution module: "Error validating distribution origins: 'list' object ...
0
votes
1answer
51 views

Advantages of using Code-pipeline and Codebuild for CI/CD over Bitbucket pipeline?

What are the advantages of using AWS Codepipeline/code build for our pipeline over the bitbucket pipeline. ? Some of the factors that I can think of: Pricing? Pipeline for a serverless application ...
0
votes
1answer
263 views

AWS ElastiCache Redis DNS error - Name or service not known

The Problem & The Question I'm trying to create an AWS ElastiCache Redis-flavored cluster and connect to it from an instance in the same VPC. When I create the cluster initially, I can connect to ...
0
votes
2answers
40 views

How to get code onto aws ec2 instance using terraform and gitlabs

I've just started learning Terraform (utilizing the AWS provider) and I have managed to replicate our infrastructure which includes quite a few amazon web services. I can successfully deploy it and ...
1
vote
0answers
13 views

Cost minimization in aws parallel cluster

I'm new to aws cloud service. I have to create a parallel cluster in aws. So, I'm using aws parallel cluster. But the problem is, when creating a cluster the NAT gateway billing me when I'm not using ...
0
votes
1answer
190 views

Gitlab CI/CD: deploy docker image to existing kubernetes cluster

I have node.js application that I need to deploy to exising kubernetes cluster. The cluster is setup using kops on AWS. I have created .gitlab-ci.yml file for building docker images. So, whenever a ...
1
vote
1answer
27 views

AWS Inspector “High Risk” : port open to the internet with IP whitelisting

We use AWS Inspector to identify risks with our AWS assets. Today I received a finding, with a "high" severity. The finding said that the FTP port was open to the internet. However, after ...
2
votes
2answers
2k views

How do I use the remote-exec provisioner with Terraform?

I am using Terraform 0.14 and AWS. I am trying to write a .tf file that will invoke a remote-exec command via Terraform's provisioner. This code does not work: resource "aws_instance" "...
1
vote
0answers
155 views

The deployment failed because no instances were found in your green fleet

I have created a blue-green deployment in AWS CodeDeploy with the option Manually provision instances. but when I run pipeline code deploy show error `The deployment failed because no instances were ...
1
vote
1answer
240 views

What does “eksctl create iamserviceaccount” do under the hood on an EKS cluster?

AWS supports IAM Roles for Service Accounts (IRSA) that allows cluster operators to map AWS IAM Roles to Kubernetes Service Accounts. To do so, one has to create an iamserviceaccount in an EKS cluster:...
1
vote
1answer
551 views

Can you remove a commit made to a branch on AWS code commit?

I know of git rebase but don't know if it can be used with AWS code commit? Or if there's any other method of removing a commit to revert back to before it was made and merged?
2
votes
1answer
75 views

AWS SNS-SQS: Checking a subscription already exists

I've found it's a useful strategy to create relevant queues whenever a queue worker service boots. For instance, on service boot, it checks whether its queues exist already in AWS and creates them if ...
0
votes
1answer
37 views

Migrating to AWS with Devops [closed]

What are they key stages of migrating to AWS with Devops ? Can anyone list a use case or workflow?
0
votes
1answer
146 views

What is the AWS equivalent of Azure Management Groups?

Microsoft Azure has Management Groups. (They are a level above subscriptions that allow you to organize subscriptions into containers called "management groups" and apply your governance ...
1
vote
1answer
155 views

Is it possible to have an aws EKS infrastructure as code?

Is it possible to declare "a complete production level EKS with other aws services" using terraform? I know that terraform has an eks module and an aws provider. But I'm not sure if one can ...
0
votes
1answer
45 views

Does a DB connection prevent AWS Aurora Serverless from pausing its compute capacity?

I want to host an application that connects to a DB and makes queries to it. The application holds onto the connection indefinitely but only makes queries to the DB when the user interacts with the ...
0
votes
1answer
27 views

How to mount a single 100TB SSD on AWS and access the device over nfs from different machines within the same VPC?

I have a bad experience with Storage Gateway (SGW) and would to consider the possibility to setup a 100TB SSD device (via EFS or similar) on AWS and allow an access to the storage device from ...
0
votes
1answer
26 views

How to redirect the request to a different node when there is an unexpected exception and one of the pods gets restarted

We are deploying the application in a Kubernetes cluster and when we face an unexpected error and the pod gets restarted or goes down we are getting a 502 Gateway error even though there is another ...
1
vote
1answer
58 views

In k8s, do the controller nodes have to be in same VPC as the worker nodes for a cluster?

I'm new to k8s and trying to grasp the infrastructure concepts, and trying to apply them in AWS. I know a k8s cluster has a control plane, which has the management nodes, and a data plane, which has ...
3
votes
1answer
76 views

K8s cluster in peered VPC can't reach RDS cluster

I have two K8s clusters in the same VPC that I want to connect to an MySQL Aurora RDS cluster. One of the clusters can reach the RDS cluster just fine. The other, however, cannot. I'll call these eks-...
2
votes
1answer
79 views

How I can retrieve aws lambda cloudwatch logs in txt format so I can search on them?

A lambda that I have deployed has gone wrong. Therefore, I want to look on logs and find out whats wrong about it. Hence I look upon cloudwatch logs for any error message. But the cloudwatch ...
2
votes
1answer
202 views

Redirect to a custom page on 503 error in Ingress

When our site is getting deployed, the Ingress gets created and before I could get any response I get 503 for 5-6 minutes (time taken to startup). We need to configure our ingress to redirect to a ...

1
2 3 4 5
9