Questions tagged [amazon-web-services]

For questions about Amazon Web Services (AWS) in general. If your question is about a specific Amazon web service please use that tag, e.g. [amazon-s3], [amazon-ec2], [amazon-ecs], [aws-codedeploy]

Filter by
Sorted by
Tagged with
0
votes
0answers
11 views

SFTP server with third party user management system?

I understand how to set up SFTP servers on Linux and create users and their passwords manually. So basically, the users get authenticated as normal Linux users get authenticated through /etc/passwd. ...
0
votes
1answer
4 views

Unable to start step function after account move

I recently moved my development account away from my prod one, everything seemed fine except I have a service that runs a lambda to start a step function - not ideal but used to work. My issue comes ...
0
votes
0answers
11 views

Kubernetes Persistent Volume Mount Not Syncing Files

I have an AWS EFS persistent volume mounting a file at /opt/file.jar via: $ mount | grep file.jar fs-xxxxxxxx.efs.us-west-2.amazonaws.com:/pvc-12345/file.jar on /opt/file.jar type nfs4 (rw,relatime,...
0
votes
1answer
12 views

AWS launch template create-before-destory?

In terraform, to reduce downtime when creating a new auto-scaling-group behind an existing load balancer, you can use a launch configuration and set create-before-destroy. Launch templates are the ...
0
votes
0answers
11 views

Why does destroying an ASG AWS take so long?

Creating an auto-scaling-group in AWS is extremely fast in terraform. Destroying one, on the other hand, takes far longer (5+ minutes instead of 1 minute). This makes down-time fairly significant (...
-1
votes
1answer
18 views

AWS organizations and Billing

I was using an AWS account with my credit card info and my personal account. Since I'm learning my way around AWS services I am using free tier as much as I can but I still have some small charges ...
0
votes
0answers
6 views

EKS ELB unable to send/recieve options request

I have a Kuberentes cluster which is running on AWS via EKS. I have a classic LB created and the front end I use (Vue.js/ axios) sends a OPTIONS request before the POST request I belive. My issue ...
1
vote
1answer
30 views

Cloud agnostic infrastructure automation better than terraform?

Are there any infrastructure automation technologies which do a better job at being portable than terraform? We heavily leverage terraform as it is a cloud-agnostic technology (vs, say, ARM templates ...
1
vote
0answers
14 views

Backup kubernetes cluster + EBS PVs / restore to new account?

We are migrating multiple EKS kubernetes clusters to new AWS accounts, and each of them has AWS EBS persistent volumes encrypted with the default account key. Within an account we were planning on ...
0
votes
1answer
14 views

Is there a limitation in AWS to open an IPSec VPN connection?

Consider the following situation (for test purposes): there is a public IPSec VPN endpoint (StrongSwan); a machine with either Ubuntu (Strong Swan client) or Windows OS (native client) running in the ...
0
votes
1answer
25 views

User data in original windows ec2 instance does not get executed in custom ami

I created a windows Ec2 instance with user data in it. In my ec2 instance I downlaoded git and installed it. Later in EC2 instance, I provided it with the user data which was supposed to download a ...
1
vote
1answer
12 views

RDS DB migrations using ECS and Fargate

I run my app with Docker and ECS. How can I handle database migrations? With fargate there doesn’t seem to be a way to SSH into the container to run any commands so I can’t run my RDS MySQL migrations ...
0
votes
0answers
13 views

AWS Route 53 cross account resolving

I have 2 AWS accounts under my organization. In account A I have a Route 53 public hosted zone with a registered domain mydomain.com. In account B I have a load balancer I want to create a CNAME ...
0
votes
0answers
10 views

How can I get utilization and coverage reports for RDS reserved instances?

The utilization and coverage reports in Cost Explorer seem to only show data for EC2 reserved instances. The "Service" report filter defaults to "EC2-Instances" and apparently it cannot be changed. ...
0
votes
0answers
68 views

CodeDeploy: deployment failed because a specified file already exists at this location

I build an AMI from a 'prototype' EC2 instance I created to confirm everything is working. I create a Launch Configuration and Auto Scaling Group based on the AMI. I associate the Auto Scaling Group ...
0
votes
0answers
11 views

Auto-install all security updates on new eksctl nodes

When I create a new nodegroup in my cluster with eksctl create nodegroup --config-file=cf.yaml, I'd like the newly created ec2 instances to start with all available security updates installed. By ...
0
votes
2answers
23 views

Cloud service for Django app deployment

We are having webapp which is use Django and Mysql which run in Windows using Apache. Now we are planing to move into cloud service like 1) Google cloud 2) AWS 3) Azure So to deploy existing ...
0
votes
0answers
9 views

AWS MSK: deploying all Kafka brokers in the same availability zone

When using AWS MSK, is it possible to deploy Kafka brokers in the same AWS availability zone? From what I read, AWS enforces deployments across availability zones. If you use three brokers, it will ...
0
votes
1answer
14 views

User Data in launch configuration of amazon web services

I was trying to create an EBS volume by writing a shell script in the user data of my launch configuration. I don't think there is anything wrong with my bash script. I kept looking up creating launch ...
0
votes
0answers
11 views

Unable to connect to remote service using AWS VPC Peering

I have a question regarding some AWS infra I'm trying to build. Due to legacy constraints, I have a service running in a remote VPC that I need to access, and I have a new service I'm developing in ...
0
votes
1answer
17 views

s3fs to mount S3 bucket with iamrole on non-aws machine

I am trying to mount S3 bucket on my on-premises CentOS-6 server using s3fs as below: [roots@myhost ~]# s3fs bucket-name /mnt/s3mnt -o uid=1001,gid=1001,allow_other,umask=022,iam_role=iam-role,...
1
vote
0answers
43 views

AWS ECS Overwrites Docker Entrypoint Command?

So I've built a docker image locally with packer. When running the image locally, everything is fine. But for my deployment I've uploaded the docker image to the ECR and started it on ECS. However ...
1
vote
2answers
36 views

Load Balancer and EC2 in same subnet?

I have a custom VPC with 3 public subnets and 3 private subnets. I have three ec2 instances with elastic IP addresses in the public subnets taking traffic on port 80 (security group is configured to ...
1
vote
0answers
26 views

How to connect AWS LoadBalancer to EKS node group using Terraform?

I've created the following service using Terraform: resource "kubernetes_service" "example" { metadata { name = "example" labels = { app = "example" } } spec { port { ...
0
votes
0answers
32 views

Running a command as a specific user on an ec2 using ssm

Background I want to automatically configure an EC2 via a build, using the aws cli and ssm. The (manual) setup for the container looks something like this: Create an EC2 Run a shell script as root ...
1
vote
1answer
18 views

Spin up an EC2 instance from within the application

I am developing the architecture of this application and the way we need to scale is not just stateless API requests, but it's a logical split of responsibilities. In other words, we may only be able ...
2
votes
3answers
78 views

What makes a difference between high-cost cloud providers and low-cost ones?

I need to decide, for a small client and a small budget (around $500 a month) the proper Cloud Provider to have some compute instances to hold a web server, a database and an Apache server. I was ...
0
votes
1answer
39 views

SQS: What could high number of visible messages mean if messages received & deleted are normal?

I'm new to SQS. I recently noticed the ApproximateNumberOfMessagesVisible in my SQS queue started rising. What was interesting though is that there was no sudden surge in the number of messages ...
0
votes
0answers
6 views

CloudFormation - Partitioning EBS root volume

Below is the cloudformation template to create EC2 instance: "EC2Instance":{ "Type": "AWS::EC2::Instance", "Properties":{ "ImageId": "ami-07777777777c7", "InstanceType": "t2....
2
votes
0answers
10 views

Issue with Spinnaker automated trigger

I am trying to get Spinnaker to have a pipeline use an automated trigger which is an image pushed to an ECR repo. I can add different repos fine but can't seem to see the images. I am following this ...
1
vote
1answer
20 views

How to grant all resources in an AWS account the ability to assume role?

I have an organization with a master account (account A) and a second account (account B). I want to create a role so all instances in account B will have read permission from everything in account A. ...
0
votes
2answers
29 views

AWS permissions for Fargate and SSM

I'm trying to create some infrastructure for a service I am building on AWS using AWS Fargate. I'm using SSM as a value store for some of my application configuration, so I need both the regular ...
1
vote
0answers
20 views

https - How to enable users to have secure connection with Jenkins via ELB?

Below is the cloud formation template that creates Eastic Load Balancer as public facing to jenkins(jenkins:ecs docker) running in VPC subnet: { "AWSTemplateFormatVersion": "2010-09-09", "...
1
vote
0answers
23 views

Allowing all apps/users access to folder - S3FS-FUSE

I'm running an application on AWS EC2 Ubuntu instance, here's what I've done: - I've mounted S3 bucket as folder with s3fs-fuse using this command (unfortunately as root : sudo): sudo s3fs ...
2
votes
1answer
103 views

parameter-store values show '***' instead of actual value

I am using CodeBuild to access the Systems Manager Parameter Store. In buildspec.yml, I have the parameter-store configured to access some values in Systems Manager (I certainly have the /mysite/dev/...
1
vote
0answers
73 views

Use dynamic values for parameter-store in aws buildspec.yml for CodeBuild

For my CodeBuild projects, I have a dev, staging and production project. Each project has an environment variable called $BUILD_ENVIRONMENT set to dev, staging and production, respectively. Each stage ...
0
votes
2answers
51 views

AWS ECR start uploaded docker image?

I used packer to upload a docker image I created to my AWS ECR repository. How can I use the AWS cli to automatically locate that image, create a new cluster, set the port rules to allow all inbound ...
1
vote
1answer
30 views

Relation/interplay of deployment pipeline stages (dev-stage-prod) with blue/green deployment mechanisms?

I'm building some new infrastructure in AWS and plan on having separate accounts for dev, stage, and prod environments. I'd like to implement a blue/green deployment strategy at least for production, ...
1
vote
0answers
33 views

Testing AWS Systems Manager's Parameter Store

I plan to use AWS Systems Manager's Parameter Store to store sensitive information that I can use in a CodeBuild buildspec.yml file for Continuous Delivery. I follow the documentation here: https://...
1
vote
1answer
30 views

private subnets in an Auto Scaling Group on aws?

I watched a video series wherein the author used 3 private subnets for his Auto Scaling Group, and I also read the premium answer on this forum wherein the author says that you can use both public and ...
1
vote
0answers
35 views

Why does an 'InvalidSnapshot.NotFound' occur in Packer and how to solve it? [closed]

When I'm running sudo packer2 build -debug template.json with this code: { "variables": { "profile": "aws", "region": "eu-west-1" }, "builders": [{ "type": "amazon-chroot", "profile": "{{...
1
vote
1answer
20 views

How to ensure EC2's OS/application is loaded?

Recently I was playing around a bit with AWS as a part of a course that I am doing. I came across a situation that to be honest is keeping be in vilo. I made a web application which connects to a ...
1
vote
1answer
21 views

Having some trouble getting service running with Docker and Terraform

I'm very new to DevOps but I'm trying to learn some of it a bit. I'm working with Terraform, trying to get a service to run on AWS using Fargate and Docker. I've successfully set up my ECR ...
1
vote
0answers
18 views

EBS Cross Region Scheduled Snapshots [closed]

I'm looking into creating scheduled EBS snapshots. I'd prefer sticking to services provided by AWS, but open to using custom scripts if the first cannot satisfy my requirements. As the title ...
2
votes
1answer
29 views

Mitigate false positives due to daylight saving time in CloudWatch anomaly dectector

For monitoring, I set up CloudWatch alerts based on CloudWatch anomaly detection. Overall, they work quite nicely, but they got confused when the clock gets shifted (summer timer to winter time). We ...
0
votes
2answers
15 views

AWS-CLI : to download IAM user with policy

aws : A single command(aws-cli) to get the IAM user name with the what all permission he/she have , would be great if can be downloaded as an excel or csv ?
1
vote
1answer
20 views

Issue connecting to ECR using Spinnaker on Kubernetes

I installed Spinnaker onto a Kubernetes cluster via Helm. I have tried to add the ECR registry as per the docs and so far not working. I found that the aws cli is missing even though in issue 2394 it ...
4
votes
1answer
44 views

AWS SQS - use case for “short polling”

When using event driven processing of work with AWS SQS and worker clients. the use of long polling is often recommended. AWS documents this here Essentially when there are no message in the queue, ...
0
votes
2answers
179 views

Unable to get Helm to work with ECR

I'm using Helm v3 with AWS ECR on a Kubernetes cluster that was creating using Kops. I have checked and the role kops assigned to the nodes does have ECR permissions. When I deploy my helm chart I ...
2
votes
1answer
65 views

For storing avatars in s3, which approach has the lowest cost?

On my site I have the ability for users to upload avatars (which they upload to s3). They can only have one avatar at the moment, so I currently just have the filename set to their user id. However, ...

1 2 3 4 5 7