Questions tagged [amazon-web-services]

For questions about Amazon Web Services (AWS) in general. If your question is about a specific Amazon web service please use that tag, e.g. [amazon-s3], [amazon-ec2], [amazon-ecs], [aws-codedeploy]

Filter by
Sorted by
Tagged with
0
votes
1answer
8 views

Use Sqlite database on ECS

I have an application which uses SQLite database and want to migrate it to AWS ECS service. It's dockerized and have access to DB file via mounted volume. Is there a way to make this work with ECS? (...
2
votes
0answers
15 views

Cross Account EC2 Access from within Amazon Workspace

I have a requirement to setup a bastion host (Amazon Workspace) to connect to an ec2 instance living on a different account. As Amazon Workspaces cannot assume a role the way EC2s can, A cross ...
1
vote
1answer
21 views

Best AWS EC2 instance class for general Kubernetes cluster

Hi We are deploying a fairly standard multiple purpose (data replication workers and some nginx web proxies) in an EKS cluster, and wondering what EC2 instance class people recommend for this workload....
2
votes
1answer
28 views

Get tagging to work on AWS CLI

I am trying to tag commit hash and app version onto the ECS service to make it easier for developers to identify the service with the code. But I get this error + aws ecs tag-resource --resource-...
1
vote
2answers
19 views

One NAT attachment for 2 private subnets

I have 2 NAT gateway attachment for 2 private subnets in AWS. is it possible to have one NAT gateway attachment for 2 private subets so that I can save one EIP?
0
votes
0answers
13 views

is it possible to connect an AWS autoscaling group with an application load balancer?

I'm working with AWS cloudformation I have an autoscaling group for a couple of machines running an API server, and I would like to set up an application load balancer as a single entry point, so that ...
2
votes
1answer
24 views

amazon ec2 ip whitelisted on a third party service provider

Currently we are running an application in a single amazon ec2 machine. On our application we are using some third party solution. For using those solution, we have asked the third party service ...
0
votes
0answers
10 views

Two CodeDeploy projects create two Webhooks in Github, causing deployment to run twice

I have two CodeBuild projects, one for dev and one for production. They both use the same repository but under 'Source Version', I specify dev for the dev branch and master for the production branch. ...
0
votes
0answers
11 views

How I can log codeploy scrips output in aws cloudwatch?

In my project I use aws codepipeline and the deployment is handled by aws codeploy. The appspec.yml go as follows: version: 0.0 os: linux files: - source: / destination: /home/ubuntu/code hooks:...
0
votes
2answers
15 views

EKS - created cluster from console with federated IAM admin - how to access

I have no programmatic access for the user who created the cluster only graphical. I tried a lot of things and I always get access denied on kubectl as I have to use another IAM identity that has ...
0
votes
0answers
6 views

Is it possible to run a local shell script on a remote host via AWS SSM?

I'm trying to find any documentation or articles that describe the pattern I'm attempting to achieve, but have had no luck so far. The summary of the situation is: I need to deploy an application to ...
0
votes
2answers
17 views

How to set Deployment Type using ECS First Run Wizard

The AWS ECS First Run Wizard provides no option for choosing the 'Deployment type' of the ECS Service: Whereas the ECS Service creation screen does: Why does the First Run Wizard not allow for ...
1
vote
1answer
26 views

Terraform fails to modify DNS settings a recently created VPC Peering connection because it is not yet active

I have the following configuration file: environment/main.tf: resource "aws_vpc_peering_connection" "sb_vpc_peering" { vpc_id = var.vpc_id peer_vpc_id = var.peer_vpc_id peer_region = var....
1
vote
1answer
22 views

AWS: Onboarding on premise instance

Is there a way to onboard the Raspberrypi device in AWS. So that the same device can be managed using ec2 console and it can seamlessly work with the rest of AWS services? I am just an experimental ...
2
votes
1answer
20 views

I want to scale up/down as fast as AWS Lambda but also be able to allocate the vCPU (minimum 8) per task, any advice?

Goal So I'm looking for an AWS product or combination of products to accomplish the following: Ability to do CPU heavy (non-parallel) calculations (min 8 vCPU's per node) Minimum timeout limit of ...
0
votes
0answers
53 views

How I can emulate a network failure on my codebuild project?

On my php project I cache the composer's cache into an S3 bucket: version: 0.2 env: variables: COMPOSER_CACHE_DIR: "/var/cache/composer" phases: install: commands: - apk add --...
1
vote
3answers
94 views

How do I run Terraform with AWS MFA?

I'm using Terraform with the terraform-provider-aws provider to manage my AWS infrastructure. I'm trying to enable mfa_delete on an S3 bucket, but when I try to apply the change I get this error: 1 ...
0
votes
0answers
12 views

Set tags to AWS resources using Helm Charts

How do I set tags to AWS resources (for cost monitoribg only) using Helm Charts v2 or v3, without using 3rd party tool that costs money? Thanks
0
votes
0answers
23 views

How I can edit an existing aws codebuild project in order to place caching using an s3 bucket?

I have already an exising aws pipeline with a single codebuild step and a single codeploy step sourcing from github. I use the pipeline to build a laravel rest API and I want to have a shared cache ...
2
votes
1answer
27 views

AWS Credentials - What are multi region user/role management best practices?

In the past, I've usually had separate accounts for each region that I've worked in. These accounts had different IAM roles/etc, so there was very little chance I'd inadvertently mess up region A ...
1
vote
1answer
25 views

Is there a way through which I can control type of load balancer like round robin , least-connections etc using helm charts?

I am researching different types of loadbalancing methods available through kubernetes .I want to implement & see before deciding on one .I'm stuck at how to actually define typeof-loadbalancer.If ...
1
vote
0answers
9 views

How to enable anonymous authentication for kube-apiserver using kops on AWS C2?

I want to enable anonymous authentication using kops, but it's default settings provides the --anonymous-auth=false options to kube-apiserver: /usr/local/bin/kube-apiserver --allow-privileged=true --...
1
vote
1answer
133 views

Terraform error Reference to “count” in non-counted context for resources not necessarily data

here's my part of my code that I am having issues with. Unfortunately I could not understand the relationship between the last answer, despite being almost what I need, and my situation. data "...
2
votes
2answers
40 views

Terraform - how to modify a existing S3 bucket that was created from module?

I already have my S3 bucket called foo-name created and existing with terraform. I want to modify the existing s3 bucket and a policy. But when I do this it seems to want to add a new s3 bucket ...
2
votes
1answer
25 views

How to deploy a Kubernetes service using NodePort on AWS?

I have created a cluster on AWS EC2 using kops consisting of a master node and two worker nodes, all with public IPv4 assigned. Now, I want to create a deployment with a service using NodePort to ...
5
votes
1answer
40 views

Should AWS arn values be treated as secrets?

I have a configuration file that contains AWS resource arn's stored in a Github repo. This includes some arn's of AWS IAM role resources. Should these be treated as if they are a secret value, and not ...
1
vote
0answers
36 views

Variables in Amazon S3 redirect rules

I'm trying to configure path redirect for Amazon S3 bucket static content ( → Properties → Static website hosting → Redirection rules). Simple rules, such as in instruction, work properly. Is it ...
2
votes
1answer
137 views

Terraform: can't connect to AWS provider using shared config file or static variable

I'm trying to use terraform to manage AWS resources and trying to set up the credentials configuration. I'm following the official documentation: https://www.terraform.io/docs/providers/aws/index.html ...
1
vote
0answers
13 views

Deploying several serverless (framework) services at once

I am building a data etl pipeline using AWS lambda and step functions. Each stage of the pipeline is a separate service on their own. The file structures resembles some thing like this. -root |-...
1
vote
1answer
139 views

AWS API Gateway as an http proxy to ALB

I have a setup of API Gateway proxying all the requests to my EC2 instances behind load balancer (ALB). But I want api endpoint to have a nice domain my-api.mydomain.com. I'm trying to accomplish that ...
4
votes
2answers
66 views

How to `terraform destroy` an `aws_instance` without also destroying its `aws_ebs_volume` (separate resource)

$ terraform -version Terraform v0.12.21 + provider.aws v2.34.0 Given a terraform configuration for one set of single aws_instance, aws_ebs_volume and aws_volume_attachment resources, each named, say,...
2
votes
0answers
30 views

SFTP server with third party user management system?

I understand how to set up SFTP servers on Linux and create users and their passwords manually. So basically, the users get authenticated as normal Linux users get authenticated through /etc/passwd. ...
1
vote
1answer
6 views

Unable to start step function after account move

I recently moved my development account away from my prod one, everything seemed fine except I have a service that runs a lambda to start a step function - not ideal but used to work. My issue comes ...
1
vote
1answer
56 views

AWS launch template create-before-destory?

In terraform, to reduce downtime when creating a new auto-scaling-group behind an existing load balancer, you can use a launch configuration and set create-before-destroy. Launch templates are the ...
0
votes
0answers
21 views

Why does destroying an ASG AWS take so long?

Creating an auto-scaling-group in AWS is extremely fast in terraform. Destroying one, on the other hand, takes far longer (5+ minutes instead of 1 minute). This makes down-time fairly significant (...
-1
votes
1answer
21 views

AWS organizations and Billing

I was using an AWS account with my credit card info and my personal account. Since I'm learning my way around AWS services I am using free tier as much as I can but I still have some small charges ...
1
vote
1answer
47 views

Cloud agnostic infrastructure automation better than terraform?

Are there any infrastructure automation technologies which do a better job at being portable than terraform? We heavily leverage terraform as it is a cloud-agnostic technology (vs, say, ARM templates ...
1
vote
0answers
16 views

Backup kubernetes cluster + EBS PVs / restore to new account?

We are migrating multiple EKS kubernetes clusters to new AWS accounts, and each of them has AWS EBS persistent volumes encrypted with the default account key. Within an account we were planning on ...
0
votes
1answer
22 views

Is there a limitation in AWS to open an IPSec VPN connection?

Consider the following situation (for test purposes): there is a public IPSec VPN endpoint (StrongSwan); a machine with either Ubuntu (Strong Swan client) or Windows OS (native client) running in the ...
1
vote
1answer
42 views

User data in original windows ec2 instance does not get executed in custom ami

I created a windows Ec2 instance with user data in it. In my ec2 instance I downlaoded git and installed it. Later in EC2 instance, I provided it with the user data which was supposed to download a ...
1
vote
1answer
69 views

RDS DB migrations using ECS and Fargate

I run my app with Docker and ECS. How can I handle database migrations? With fargate there doesn’t seem to be a way to SSH into the container to run any commands so I can’t run my RDS MySQL migrations ...
0
votes
0answers
322 views

CodeDeploy: deployment failed because a specified file already exists at this location

I build an AMI from a 'prototype' EC2 instance I created to confirm everything is working. I create a Launch Configuration and Auto Scaling Group based on the AMI. I associate the Auto Scaling Group ...
0
votes
0answers
14 views

Auto-install all security updates on new eksctl nodes

When I create a new nodegroup in my cluster with eksctl create nodegroup --config-file=cf.yaml, I'd like the newly created ec2 instances to start with all available security updates installed. By ...
1
vote
2answers
49 views

Cloud service for Django app deployment

We are having webapp which is use Django and Mysql which run in Windows using Apache. Now we are planing to move into cloud service like 1) Google cloud 2) AWS 3) Azure So to deploy existing ...
0
votes
1answer
26 views

AWS MSK: deploying all Kafka brokers in the same availability zone

When using AWS MSK, is it possible to deploy Kafka brokers in the same AWS availability zone? From what I read, AWS enforces deployments across availability zones. If you use three brokers, it will ...
0
votes
1answer
15 views

User Data in launch configuration of amazon web services

I was trying to create an EBS volume by writing a shell script in the user data of my launch configuration. I don't think there is anything wrong with my bash script. I kept looking up creating launch ...
0
votes
0answers
14 views

Unable to connect to remote service using AWS VPC Peering

I have a question regarding some AWS infra I'm trying to build. Due to legacy constraints, I have a service running in a remote VPC that I need to access, and I have a new service I'm developing in ...
1
vote
1answer
64 views

s3fs to mount S3 bucket with iamrole on non-aws machine

I am trying to mount S3 bucket on my on-premises CentOS-6 server using s3fs as below: [roots@myhost ~]# s3fs bucket-name /mnt/s3mnt -o uid=1001,gid=1001,allow_other,umask=022,iam_role=iam-role,...
1
vote
0answers
117 views

AWS ECS Overwrites Docker Entrypoint Command?

So I've built a docker image locally with packer. When running the image locally, everything is fine. But for my deployment I've uploaded the docker image to the ECR and started it on ECS. However ...
1
vote
2answers
80 views

Load Balancer and EC2 in same subnet?

I have a custom VPC with 3 public subnets and 3 private subnets. I have three ec2 instances with elastic IP addresses in the public subnets taking traffic on port 80 (security group is configured to ...

1
2 3 4 5
7