Questions tagged [amazon-web-services]

For questions about Amazon Web Services (AWS) in general. If your question is about a specific Amazon web service please use that tag, e.g. [amazon-s3], [amazon-ec2], [amazon-ecs], [aws-codedeploy]

Filter by
Sorted by
Tagged with
0
votes
0answers
12 views

EKS & Kubernetes: AWS-IAM-Role to K8S-Role assumption seems not working

I'm trying to allow "all privileges" to a IAM-Role in an separate Namespace. but it looks like the Role is not allowed to i.e. delete anything in the defined namespace. following ...
0
votes
0answers
7 views

S3 Bucket Policy: require KMS for all files except one

I have an S3 bucket that contains sensitive data, so I want to ensure that any objects put into the bucket are encrypted with a specific KMS key. I'm doing this already with a bucket policy statement ...
0
votes
0answers
8 views

Are there serious problems with an EC2 auto-scaling AMI that automatically downloads newest server from git?

I'm converting some servers from manual scaling (with a load balancer) to auto-scaling. I'm currently using an Ansible script to manage upgrades, and I wouldn't want an automatically created instance ...
0
votes
1answer
10 views

Issue with cloudformation in target groups and ASG

I am trying to use cloudformation to setup a ASG and I have a target group which I would like to associate with the ASG. The target group is created okay but when I go to attach it to the ASG I get an ...
0
votes
0answers
6 views

How to force traffic via Laptop VPN by reconfiguring AWS server side?

A developer wants a VPN-restricted S3 bucket. I have configured the S3 bucket to only accept connections via the VPN. The VPN however isn't used by default for all connections, so requests are ...
0
votes
1answer
18 views

What are the advantages of using AWS nameservers as opposed to servers provided by other registrars?

I am transfering a domain name from namecheap to aws route 53 service. AWS provides you with three options when transfering: Continue to use the name servers provided by the current registrar or DNS ...
1
vote
0answers
15 views

Defining and using bash functions in AWS CodeBuild

I thought I could slightly improve readability of repetitive sed calls when inserting secrets into a file with AWS CodeBuild. I defined a bash function: replaceConfig() { sed -i 's|{'$1'}|'${!1}'|' ...
0
votes
2answers
51 views

How can I list all environment variables configured in Terraform?

I configured AWS provider in Terraform by providing an access key and secret as environment variables according to the documentation: $ export AWS_ACCESS_KEY_ID="anaccesskey" $ export ...
0
votes
1answer
21 views

Find relevant domain/hosted zone under which to host subdomain

Context In Terraform, to create a new domain record, I first need to find the zone under which it should be hosted. E.g. If I want to create a DNS record for mysite.example.com, I'd get the zone ...
0
votes
0answers
4 views

Vue.js UI on S3 for multiple deployments of single tenant application

I am looking to build a single tenant application that will have an api endpoint of api.customername.mydomain.com then I would like there to also be app.customername.mydomain.com that is for the UI (...
7
votes
3answers
89 views

Who should write Docker files?

Once again company debate rages on who should write Docker files (including compose, interchangeable for this post). The scenario is common in my work (developer and consultant) and I wanted to know ...
0
votes
1answer
24 views

How can I check when a subnet was created?

There's an unexpected subnet that isn't anywhere in my project I think it was created manually but I can't find when it was created to help descover what it is for and if it's still needed?
1
vote
1answer
44 views

AWS API Gateway: 403 forbidden with disabled API key; error from cloudfront

How can happen that with a Lambda/API Gateway combination, if no explicit Cloud Front configuration has been done, in an error response header they mention CloudFront? header: x-amzn-ErrorType: ...
1
vote
1answer
17 views

How to programmatically enable and disable SQS triggering AWS Lambda?

I have a requirement where I want to stop my lambda from receiving messages from SQS. And I want to implement this like an API which can toggle between the disabling and enabling of the AWS Lambda ...
1
vote
1answer
18 views

Running AWS lambda in serial (for a given parameter)

I'm not sure if this is the best place to ask this. But we've currently got something in Microsoft Azure where we have their serverless functions (Azure Functions) running in serial based off a ...
1
vote
1answer
28 views

Why do I need a Nat Gateway for ECS containers using AWSVPC?

So here is a scenario: I have a route table that routes all traffic to the internet gateway, and I have a subnet associated with that route table, which makes it a public subnet. Now I create another ...
1
vote
1answer
30 views

Sending HTTP requests to private EC2 DNS from other EC2 host works, but not from container on EC2 host

I want to make a container hosted on one EC2 host communicate with another container hosted on another EC2 host. Currently, if I send an HTTP request from host A to host B using host B's private DNS ...
1
vote
1answer
24 views

Unable to send cloudwatch logs to loggly using a blueprint lambda - Invalid ciphertext

I am trying to use the loggly Lambda blueprint to send cloudwatch logs to loggly. I am doing this because I have a bunch of lambdas that I need to have a single point of viewing logs. I've followed ...
3
votes
3answers
75 views

Accessing a AWS docker instance via localhost only?

Suppose I have two apps launched via the AWS ECS cluster (using Docker containers). I want to expose one app to the world via a public IP (and I do it via the AWS load balancer) but the other one I ...
1
vote
0answers
25 views

SQS Error Message: The specified queue does not exist for this wsdl version

I have a Lambda function that is created inside a serverless framework setup. I am trying to pass in a queue url as an ENV variable, when I do that it results in the below error message. I've checked ...
0
votes
0answers
20 views

How to reference a state file in one module from another, when using dynamic names

I have a Terraform/Terragrunt project to automate the creation of and ECR repository and several Fargate instances (test, uat, production) to host images from that repository (depending on how far ...
2
votes
1answer
35 views

Are manual changes to an aws IAM policy detected by Terraform plan?

I know that Terraform dose some checks before the plan and can detect some changes but not others such as detecting changes to variables on a lambda but not detecting a new secret in a secret manager. ...
3
votes
2answers
70 views

AWS Temporary Permission Granting Tool for Account/Service “Firefights”

I'm looking for a service or third party solution that allows for granting temporary access to an IAM user (or group) to one or more services in an AWS account. The example I have is there is an ...
1
vote
1answer
19 views

Can I use AWS Step Functions to launch many different fargate 'runs'?

I am building a service that has two independent steps. The first step is a data transformation step that has to happen and is common to all downstream processes, then the second is starting a few ...
2
votes
0answers
46 views

How to deploy StatsD listening on UDP in kubernetes with external loadbalancer on AWS?

Our goal is to have StatsD deployed on k8s cluster running on AWS. Currently all existing applications using UDP to send StatsD metrics. As we understood from the kubernetes docs and tests we ...
1
vote
1answer
16 views

AWS Setting instance to use domain from another account

We're transitioning between accounts and we have an app on our new account but we want to use the domain from our old account. We plan on shutting off the old account soon and transitioning everything ...
0
votes
0answers
10 views

Is it possible to accept a connection request for Endpoint Services in a CloudFormation Template?

Question is at the bottom. The following diagram is what I am trying to deploy. This is part of an exercise from a Developer Associate course that I am following. In this course we only use the AWS ...
0
votes
0answers
12 views

Move k8s persistent volume to new aws zone

I'm trying to shrink my GitLab EKS cluster to one node right now. I have multiple persistent volumes that belong to different availability zones. If I shrink my cluster down to one node, then I'll ...
1
vote
0answers
23 views

Terraform duplicates the security groups, how do I stop it?

I'm using terraform to create two instances and a security group. Here is how I did it: # bastion host resource "aws_instance" "bastion_1a" { ami = data.aws_ami....
0
votes
0answers
11 views

ec2fleet plugin to launch slave nodes in jenkins

I have a requirement to create && terminate the slave machines from my Jenkins master. For this i am using AWS spot instances and EC2 fleet plugin in Jenkins. I am able to launch the spot ...
1
vote
1answer
24 views

Use Sqlite database on ECS

I have an application which uses SQLite database and want to migrate it to AWS ECS service. It's dockerized and have access to DB file via mounted volume. Is there a way to make this work with ECS? (...
2
votes
1answer
20 views

Cross Account EC2 Access from within Amazon Workspace

I have a requirement to setup a bastion host (Amazon Workspace) to connect to an ec2 instance living on a different account. As Amazon Workspaces cannot assume a role the way EC2s can, A cross ...
1
vote
1answer
23 views

Best AWS EC2 instance class for general Kubernetes cluster

Hi We are deploying a fairly standard multiple purpose (data replication workers and some nginx web proxies) in an EKS cluster, and wondering what EC2 instance class people recommend for this workload....
2
votes
1answer
39 views

Get tagging to work on AWS CLI

I am trying to tag commit hash and app version onto the ECS service to make it easier for developers to identify the service with the code. But I get this error + aws ecs tag-resource --resource-...
4
votes
2answers
35 views

One NAT attachment for two private subnets

I have two NAT gateway attachments for two private subnets in AWS. Is it possible to have one NAT gateway attachment for two private subnets so that I can save one EIP?
2
votes
1answer
32 views

is it possible to connect an AWS autoscaling group with an application load balancer?

I'm working with AWS cloudformation I have an autoscaling group for a couple of machines running an API server, and I would like to set up an application load balancer as a single entry point, so that ...
2
votes
1answer
26 views

amazon ec2 ip whitelisted on a third party service provider

Currently we are running an application in a single amazon ec2 machine. On our application we are using some third party solution. For using those solution, we have asked the third party service ...
0
votes
0answers
12 views

Two CodeDeploy projects create two Webhooks in Github, causing deployment to run twice

I have two CodeBuild projects, one for dev and one for production. They both use the same repository but under 'Source Version', I specify dev for the dev branch and master for the production branch. ...
0
votes
0answers
14 views

How I can log codeploy scrips output in aws cloudwatch?

In my project I use aws codepipeline and the deployment is handled by aws codeploy. The appspec.yml go as follows: version: 0.0 os: linux files: - source: / destination: /home/ubuntu/code hooks:...
0
votes
2answers
18 views

EKS - created cluster from console with federated IAM admin - how to access

I have no programmatic access for the user who created the cluster only graphical. I tried a lot of things and I always get access denied on kubectl as I have to use another IAM identity that has ...
0
votes
1answer
18 views

How to set Deployment Type using ECS First Run Wizard

The AWS ECS First Run Wizard provides no option for choosing the 'Deployment type' of the ECS Service: Whereas the ECS Service creation screen does: Why does the First Run Wizard not allow for ...
1
vote
1answer
35 views

Terraform fails to modify DNS settings a recently created VPC Peering connection because it is not yet active

I have the following configuration file: environment/main.tf: resource "aws_vpc_peering_connection" "sb_vpc_peering" { vpc_id = var.vpc_id peer_vpc_id = var.peer_vpc_id peer_region = var....
1
vote
1answer
23 views

AWS: Onboarding on premise instance

Is there a way to onboard the Raspberrypi device in AWS. So that the same device can be managed using ec2 console and it can seamlessly work with the rest of AWS services? I am just an experimental ...
2
votes
1answer
23 views

I want to scale up/down as fast as AWS Lambda but also be able to allocate the vCPU (minimum 8) per task, any advice?

Goal So I'm looking for an AWS product or combination of products to accomplish the following: Ability to do CPU heavy (non-parallel) calculations (min 8 vCPU's per node) Minimum timeout limit of ...
0
votes
0answers
56 views

How I can emulate a network failure on my codebuild project?

On my php project I cache the composer's cache into an S3 bucket: version: 0.2 env: variables: COMPOSER_CACHE_DIR: "/var/cache/composer" phases: install: commands: - apk add --...
1
vote
3answers
374 views

How do I run Terraform with AWS MFA?

I'm using Terraform with the terraform-provider-aws provider to manage my AWS infrastructure. I'm trying to enable mfa_delete on an S3 bucket, but when I try to apply the change I get this error: 1 ...
0
votes
0answers
43 views

How I can edit an existing aws codebuild project in order to place caching using an s3 bucket?

I have already an exising aws pipeline with a single codebuild step and a single codeploy step sourcing from github. I use the pipeline to build a laravel rest API and I want to have a shared cache ...
2
votes
1answer
28 views

AWS Credentials - What are multi region user/role management best practices?

In the past, I've usually had separate accounts for each region that I've worked in. These accounts had different IAM roles/etc, so there was very little chance I'd inadvertently mess up region A ...
1
vote
1answer
26 views

Is there a way through which I can control type of load balancer like round robin , least-connections etc using helm charts?

I am researching different types of loadbalancing methods available through kubernetes .I want to implement & see before deciding on one .I'm stuck at how to actually define typeof-loadbalancer.If ...
1
vote
0answers
11 views

How to enable anonymous authentication for kube-apiserver using kops on AWS C2?

I want to enable anonymous authentication using kops, but it's default settings provides the --anonymous-auth=false options to kube-apiserver: /usr/local/bin/kube-apiserver --allow-privileged=true --...

1
2 3 4 5
8