Questions tagged [amazon-web-services]

For questions about Amazon Web Services (AWS) in general. If your question is about a specific Amazon web service please use that tag, e.g. [amazon-s3], [amazon-ec2], [amazon-ecs], [aws-codedeploy]

Filter by
Sorted by
Tagged with
0
votes
0answers
7 views

How should Kubernetes worker nodes get the correct /run/flannel/subnet.env file?

I am using Kubectl 1.20.2 on the client side and 1.18.9 on the server side. I have deployed EKS, and I have created a cluster. The pods never become ready unless I manually log into the worker nodes ...
0
votes
0answers
5 views

Does a DB connection prevent AWS Aurora Serverless from pausing its compute capacity?

I want to host an application that connects to a DB and makes queries to it. The application holds onto the connection indefinitely but only makes queries to the DB when the user interacts with the ...
0
votes
1answer
13 views

How to mount a single 100TB SSD on AWS and access the device over nfs from different machines within the same VPC?

I have a bad experience with Storage Gateway (SGW) and would to consider the possibility to setup a 100TB SSD device (via EFS or similar) on AWS and allow an access to the storage device from ...
0
votes
1answer
15 views

How to redirect the request to a different node when there is an unexpected exception and one of the pods gets restarted

We are deploying the application in a Kubernetes cluster and when we face an unexpected error and the pod gets restarted or goes down we are getting a 502 Gateway error even though there is another ...
0
votes
0answers
8 views

AWS rds proxy not releasing connection to db

I have setup a rds proxy in between my webapp and rds mysql. However, when my webapp releases connection, rds proxy keep holding it. What is the parameter that decide the time that rds proxy release ...
0
votes
0answers
3 views

Can you use X-ray between VPCs in AWS?

I have 2 VPCs in the same account and want to test that a lambda function in one VPC will be able to connect to a lambda function in the other.
1
vote
0answers
12 views

EKS dashboard without token

The requirement is to access my EKS dashboard without any token.I have setup the EKS dashboard and i am able to access it via a web browser now i am trying to access the dashboard without the token ...
1
vote
0answers
14 views

Deploy and expose Mysql in AWS Lightsail container service

AWS Lightsail container service allows exposing the container only if it has an HTTP / HTTPS port open with the proper responses to healthcheck. I'm trying to run a MySQL container from the docker hub ...
1
vote
0answers
16 views

deploying my public key to multiple ec2 instances

I wrote a playbook to deploy my ssh keys across multiple instances. This my playbook, but I am experiencing some problems with it. I already created my ssh keys from my local instance. Please see ...
2
votes
1answer
30 views

In k8s, do the controller nodes have to be in save VPC as the worker nodes for a cluster?

I'm new to k8s and trying to grasp the infrastructure concepts, and trying to apply them in AWS. I know a k8s cluster has a control plane, which has the management nodes, and a data plane, which has ...
3
votes
1answer
59 views

K8s cluster in peered VPC can't reach RDS cluster

I have two K8s clusters in the same VPC that I want to connect to an MySQL Aurora RDS cluster. One of the clusters can reach the RDS cluster just fine. The other, however, cannot. I'll call these eks-...
1
vote
0answers
13 views

How I can retrieve aws lambda cloudwatch logs in txt format so I can serch on them?

A lambda that I have deployed has gone wrong. Therefore, I want to look on logs and find out whats wrong about it. Hence I look upon cloudwatch logs for any error message. But the cloudwatch ...
1
vote
0answers
14 views

Redirect to a custom page on 503 error in Ingress

When our site is getting deployed, the ingress gets created and before I could get any response I get 503 for 5-6 minutes(time taken to startup) . We need to configure our ingress to redirect to a ...
0
votes
0answers
9 views

How can I efficiently manage multiple ec2 instances with a Panel

My Current Scenario is: I have over 20+ AWS ec2 instances running, with each instance running a single website. I have to use SSH for every task I have to perform related to server. I have to keep ...
1
vote
0answers
5 views

can route all traffic to a fallback location using ELB?

According to the AWS page, I understand that in the event of a DNS failover, traffic can be redirected to another URL using combination record setting in Amazon Route53. Is there a way, however, in ...
1
vote
0answers
18 views

Schedule K8s pods to multiple AZ evenly in EKS 1.18

I have a requirement to distribute pods of a given deployment across 3 AZ. We are using HPA with 3 min and max 5 setup. The worker nodes are 12 initially in EKS cluster with maximum of 15. How can I ...
2
votes
1answer
49 views

Terraform ignore_changes block on JSON-encoded attribute

I'm currently trying to get CloudWatch logging and DMS configuration working smoothly in my module by ignoring certain attributes on replication_task_settings. Right now, I have a DMS replication task ...
1
vote
0answers
21 views

Correct usage of community.aws.ec2_instance_info module in a playbook

I have successfully authenticated to AWS and pulled an inventory using the aws inventory plugin. I'm interested in getting facts about instances. The documentation says that this playbook should get ...
0
votes
0answers
3 views

How do we get the rights of a user in Sailpoint?

I’m trying to write a policy violation in Sailpoint. But I don’t know how to get the rights of the user who is asking a new right. I’ve tried this: List links1 = null; IdentityService service = new ...
1
vote
1answer
13 views

Mass remove/add to multiple security groups cross region

Would it be possible to create a script or use something like terraform to mass remove/add security group entries across several regions under the one account based on the security group name? ...
1
vote
1answer
31 views

In the AWS CLI how do I treat a special character as a string?

I'm trying to run an AWS CLI command for a resource with a ! in its name. I'm doing this from Centos docker instance running on my local device a MAC and if I run echo "$SHELL" it says it ...
0
votes
1answer
26 views

Terraform deletes AWS lambda layers instead of keeping the older versions

I am using terraform version 12.26 for AWS deployment. Whenever I try updating a lambda layer, the lambda layer version is incremented, but the older layer is deleted. Even though my current version ...
0
votes
1answer
23 views

What reasons should I NOT use a private DNS zone and CNAME services in my AWS/K8s environment?

I have a Kubernetes cluster in AWS, with apps that talk to AWS services like RDS, Elasticache, Elasticsearch, DynamoDB, etc. For the services where it's available (Elasticache and RDS, and more ...
0
votes
0answers
6 views

Allow AWS IAM users with a Path prefix to manage only their own MFA device

I have several AWS IAM users, and I want to enable them to manage their own virtual MFA devices. Most of our IAM users don't have a Path attribute, so this statement works well enough: { "Sid&...
1
vote
1answer
12 views

How to remove the AWS Backups

I'm using AWS Backup to create snapshots of my production server. My current backup plan has infinite retention and that ran me into gigabytes of storage. What would be the best way to fix that? I saw ...
1
vote
0answers
38 views

Branching strategy and CI/CD

We are planning to use the Git-flow branching strategy with CI/CD. It's a conscious decision not to use Trunk based development. Here's what the pipeline looks like: Here's what the process looks ...
0
votes
1answer
28 views

Pull request and merge actions in CI/CD

The CI/CD pipeline supports pipelines per branch but no pipeline for feature branches is triggered automatically. There are pipelines deployed for the following branches: development, master. The ...
2
votes
2answers
47 views

What minimal IAM permissions are needed by AWS Chatbot so that it can show logs?

The AWS service called Chatbot allows CloudWatch Alarms to be relayed into a Slack channel. The message includes two buttons: Show logs and Show error logs. However, when I press either of these ...
3
votes
1answer
21 views

Data processing infrastructure

We are building a system for data science in AWS and our flow is pretty simple. Get the data - From redis get the model - From FSx/EBS run. This process script should take something like 5-10 ...
1
vote
0answers
9 views

How would I automate the deployment of an S3 Bucket file to a remote external server which exists on the other side of an AWS VPN Tunnel?

So my current AWS VPC consists of an EC2 jump server which is on the cloud side of a site-to-site VPN tunnel and the other side is connected to a customer server. So I am trying to find out how I can ...
2
votes
0answers
20 views

Is running linux container on windows aws instance possible?

what I'm trying to achieve is running a Linux(ubuntu LST) container inside a windows server 2019 OS. The problem is that the windows OS runs as an AWS instance. There have been problem for me trying ...
1
vote
1answer
20 views

nginx rewrite with proxy_pass

I want to proxy requests with nginx to different domain and also rewrite some part of the path. For example http://origin.com/ - > http://target.com/_plugin/kibana How to accomplish such automated ...
0
votes
1answer
33 views

Terraform Dynamic Block with list intro them

I'm creating a AWS Cloudfront module and some troubles are happening because have some Cloudfront parameters that are "dynamics/optional" too. When I'm trying run the $ terraform validate ...
0
votes
1answer
19 views

Export CloudFormation file from CDK

Since I've seen Hashicorp Terraform, I have been wondering why the "plan" it can export has binary format. Now in the AWS world you have got a declarative configuration language called ...
0
votes
0answers
12 views

How to create cloud providers sandbox environment for an application?

For reference: acloudguru website has the AWS cloud sandbox embedded to their website, ie anyone logged into acloudguru can simply click on the link and get into aws platform and start utilizing the ...
0
votes
0answers
47 views

Ansible/AWS dynamic inventory — How to create groups based on tags?

I am trying to create custom groups, based on tags. I am using this doc as a reference: https://docs.ansible.com/ansible/latest/plugins/inventory.html#inventory-plugins As a baseline, in my aws_ec2....
0
votes
0answers
528 views

Ansible playbook error: “Connection timed out during banner exchange”

I am trying to connect to my bastion host and then tunnel that ssh connection to connect to a jenkins host but keep running into the connection timed out error. The error message in full is: fatal: [&...
1
vote
0answers
24 views

Ansible dynamic inventory using AWS plugin — how to obtain internal DNS records or private IP?

Seeking help from those who've worked with dynamic inventory in Ansible. I have Ansible set up with the aws_ec2 plugin (not using the python script as it's been too problematic). Currently, I'm only ...
0
votes
0answers
14 views

Private EKS behind corporate Proxy - with Terraform

I have built a private EKS cluster, im now going through the motions of trying to attach a Managed Node group to the cluster using Terraform. Looking through lots of resource the Node group required ...
0
votes
0answers
10 views

Is it posible to have a principal for aws_lambda_permission specifying multiple resorces?

I want to implement secret rotation on a lambda function. This function also needs to be invoked by API gateway aws_lambda_permission resources fails on apply when I test it saying it requires lambda ...
0
votes
0answers
9 views

How to use Vault generated certificates for Internal Domains in AWS

I have generated certificates for an internal domain using Hashicorp Vault. I have exported the private key, certificate body and certificate chain. I have uploaded the certificate onto AWS ...
0
votes
0answers
23 views

How to improve network for Fargate based infrastructure

I am running my application (4 services) in AWS Fargate. Containers are stored in AWS ECR. Last month I ended up with a huge bill for transferred data because of constant download container from ECR ...
0
votes
0answers
7 views

How to Update asp.NET serverless code at aws lambda to deploy it

I have asp dot net code. and I used command dotnet lambda deploy-serverless But How could I update changes to the already deployed function via above command.
2
votes
1answer
31 views

AWS hosting of SPA Web App

I have just recently started to consider using AWS for my SPA Web Apps. And I have read a lot about different types of how web apps could be hosted on AWS. I have looked into Lambda, S3 Static hosting....
0
votes
0answers
6 views

Getting the count of datapoints for a metric in cloudwatch

I'm trying to get the count of how many requests were under N latency. Filtering out the correct latency can be easily done with an if expression IF(m1 >= 200, m1). This expression will generate a ...
0
votes
0answers
9 views

Am I supposed to use self-signed certs if I am using a private CA in a private network?

I am using AWS ACMPCA to create a private CA to generate ssl certs for use in my private subnet. The certs that are created are self-signed by default. But now things like curl and python's request ...
1
vote
2answers
20 views

DNS Issues with Cloud formation template

I am trying to automate the creation of an EC2 instance with CloudFormation but am running into issues with DNS. Once the instance is created it can't seem to resolve any hostnames. I try to ping a ...
1
vote
0answers
12 views

Allow specific AWS permissions(Lambda, S3) / roles to specific Jenkins Jobs within same AWS account

We have one AWS account in which an Ec2 instance is running where Jenkins is installed, and we have attached an IAM role to it, with s3 access permission. We have Jenkins jobs which needed aws ...
-1
votes
0answers
29 views

Automated Benchmarking Environment based on Github Actions/Docker/AWS-EC2

We set up a benchmarking platform that allows to easily run docker containers which execute a (self-written) benchmark program with different encryption libraries and write the measured results to a ...
1
vote
1answer
78 views

Force role session name in AWS IAM

I want to enforce users to use their IAM username as the role session name when assuming a role in AWS. I've tried the following condition in IAM policies: { "Effect": "Allow", ...

1
2 3 4 5
9