Questions tagged [amazon-web-services]

For questions about Amazon Web Services (AWS) in general. If your question is about a specific Amazon web service please use that tag, e.g. [amazon-s3], [amazon-ec2], [amazon-ecs], [aws-codedeploy]

Filter by
Sorted by
Tagged with
0
votes
0answers
11 views

Ansible dynamic inventory using AWS plugin — how to obtain internal DNS records or private IP?

Seeking help from those who've worked with dynamic inventory in Ansible. I have Ansible set up with the aws_ec2 plugin (not using the python script as it's been too problematic). Currently, I'm only ...
0
votes
0answers
8 views

Private EKS behind corporate Proxy - with Terraform

I have built a private EKS cluster, im now going through the motions of trying to attach a Managed Node group to the cluster using Terraform. Looking through lots of resource the Node group required ...
0
votes
0answers
8 views

Is it posible to have a principal for aws_lambda_permission specifying multiple resorces?

I want to implement secret rotation on a lambda function. This function also needs to be invoked by API gateway aws_lambda_permission resources fails on apply when I test it saying it requires lambda ...
0
votes
0answers
7 views

How to use Vault generated certificates for Internal Domains in AWS

I have generated certificates for an internal domain using Hashicorp Vault. I have exported the private key, certificate body and certificate chain. I have uploaded the certificate onto AWS ...
0
votes
0answers
20 views

How to improve network for Fargate based infrastructure

I am running my application (4 services) in AWS Fargate. Containers are stored in AWS ECR. Last month I ended up with a huge bill for transferred data because of constant download container from ECR ...
0
votes
0answers
7 views

How to Update asp.NET serverless code at aws lambda to deploy it

I have asp dot net code. and I used command dotnet lambda deploy-serverless But How could I update changes to the already deployed function via above command.
2
votes
1answer
27 views

AWS hosting of SPA Web App

I have just recently started to consider using AWS for my SPA Web Apps. And I have read a lot about different types of how web apps could be hosted on AWS. I have looked into Lambda, S3 Static hosting....
0
votes
0answers
3 views

Getting the count of datapoints for a metric in cloudwatch

I'm trying to get the count of how many requests were under N latency. Filtering out the correct latency can be easily done with an if expression IF(m1 >= 200, m1). This expression will generate a ...
0
votes
0answers
9 views

Am I supposed to use self-signed certs if I am using a private CA in a private network?

I am using AWS ACMPCA to create a private CA to generate ssl certs for use in my private subnet. The certs that are created are self-signed by default. But now things like curl and python's request ...
1
vote
2answers
18 views

DNS Issues with Cloud formation template

I am trying to automate the creation of an EC2 instance with CloudFormation but am running into issues with DNS. Once the instance is created it can't seem to resolve any hostnames. I try to ping a ...
1
vote
0answers
12 views

Allow specific AWS permissions(Lambda, S3) / roles to specific Jenkins Jobs within same AWS account

We have one AWS account in which an Ec2 instance is running where Jenkins is installed, and we have attached an IAM role to it, with s3 access permission. We have Jenkins jobs which needed aws ...
0
votes
0answers
23 views

Automated Benchmarking Environment based on Github Actions/Docker/AWS-EC2

We set up a benchmarking platform that allows to easily run docker containers which execute a (self-written) benchmark program with different encryption libraries and write the measured results to a ...
1
vote
1answer
25 views

Force role session name in AWS IAM

I want to enforce users to use their IAM username as the role session name when assuming a role in AWS. I've tried the following condition in IAM policies: { "Effect": "Allow", ...
0
votes
0answers
17 views

Deployment of Docker containers on ECS(Tcp Server Java)

The given problem: Created a Java Tcp Server with Eclipse vertx(Toolkit for building reactive,event driven)applications on JVM. The applicatino has two Tcp Servers which are running on port numbers: ...
0
votes
1answer
17 views

AWS ECS Fargate, auto scaling and load balancer

For a ECS service with launch type "fargate", it is possible to configure a load balancer and auto scaling. I don`t understand, how those two types of scaling work in this case, and how they ...
1
vote
0answers
10 views

In aws will snapshots be cheaper than AMIs?

I know you can create AMIs from a snapshot. Snapshots are cheaper to store than AMIs and that AMIs of a stopped instance are cheaper to store than an AMI of a running instance. Will an AMI of a ...
1
vote
2answers
37 views

Populate Database

I am using Terraform Cloud to build the infrastructure. One of the resources is a postgresql database. What is the best way to populate the database by creating tables, multiple schema etc after the ...
0
votes
1answer
29 views

spread pods over cluster

Current using AWS's auto-scale policy to start EKS worker nodes(min+desired 10, max 15) on a fixed time everyday. There are 120pods and 30deployments. Obviously, only one node will be up firstly. Then ...
0
votes
0answers
7 views

Quick deployment of RDS in dev environment

If in prod/master environments/branch your going to have a manage RDS instance running then in the dev/feature environments/branch is it possible to speed up the deployment process so developers are ...
-1
votes
1answer
25 views

AWX cannot find matching host

I have on premise AWX and inventory (instances on AWS). To provision newly launched instance I want to use provisioning callbacks. But when executing this command from the instance $ curl -v -H '...
0
votes
0answers
21 views

Kubernetes Node randomly fails with “Cannot connect to the Docker daemon”

In my kubernetes cluster sometimes a node becomes NotReady with the error ContainerGCFailed: Cannot connect to the Docker daemon at unix:///var/run/docker.sock. Is the docker daemon running?. The node ...
1
vote
1answer
22 views

What is the best way to set up a CI/CD pipeline on ECS?

There are so many options: Docker-compose with ECS cli looks the easiest solution Terraform CloudFormation (looks complex!) Ansible I am only interested in setting up a basic ECS docker set-up ...
0
votes
0answers
19 views

S3 Bucket Policy: require KMS for all files except one

I have an S3 bucket that contains sensitive data, so I want to ensure that any objects put into the bucket are encrypted with a specific KMS key. I'm doing this already with a bucket policy statement ...
1
vote
1answer
18 views

Are there serious problems with an EC2 auto-scaling AMI that automatically downloads newest server from git?

I'm converting some servers from manual scaling (with a load balancer) to auto-scaling. I'm currently using an Ansible script to manage upgrades, and I wouldn't want an automatically created instance ...
0
votes
1answer
13 views

Issue with cloudformation in target groups and ASG

I am trying to use cloudformation to setup a ASG and I have a target group which I would like to associate with the ASG. The target group is created okay but when I go to attach it to the ASG I get an ...
0
votes
1answer
21 views

What are the advantages of using AWS nameservers as opposed to servers provided by other registrars?

I am transfering a domain name from namecheap to aws route 53 service. AWS provides you with three options when transfering: Continue to use the name servers provided by the current registrar or DNS ...
1
vote
0answers
33 views

Defining and using bash functions in AWS CodeBuild

I thought I could slightly improve readability of repetitive sed calls when inserting secrets into a file with AWS CodeBuild. I defined a bash function: replaceConfig() { sed -i 's|{'$1'}|'${!1}'|' ...
0
votes
2answers
63 views

How can I list all environment variables configured in Terraform?

I configured AWS provider in Terraform by providing an access key and secret as environment variables according to the documentation: $ export AWS_ACCESS_KEY_ID="anaccesskey" $ export ...
0
votes
1answer
24 views

Find relevant domain/hosted zone under which to host subdomain

Context In Terraform, to create a new domain record, I first need to find the zone under which it should be hosted. E.g. If I want to create a DNS record for mysite.example.com, I'd get the zone ...
0
votes
0answers
6 views

Vue.js UI on S3 for multiple deployments of single tenant application

I am looking to build a single tenant application that will have an api endpoint of api.customername.mydomain.com then I would like there to also be app.customername.mydomain.com that is for the UI (...
7
votes
3answers
102 views

Who should write Docker files?

Once again company debate rages on who should write Docker files (including compose, interchangeable for this post). The scenario is common in my work (developer and consultant) and I wanted to know ...
0
votes
1answer
28 views

How can I check when a subnet was created?

There's an unexpected subnet that isn't anywhere in my project I think it was created manually but I can't find when it was created to help descover what it is for and if it's still needed?
1
vote
1answer
205 views

AWS API Gateway: 403 forbidden with disabled API key; error from cloudfront

How can happen that with a Lambda/API Gateway combination, if no explicit Cloud Front configuration has been done, in an error response header they mention CloudFront? header: x-amzn-ErrorType: ...
1
vote
1answer
35 views

How to programmatically enable and disable SQS triggering AWS Lambda?

I have a requirement where I want to stop my lambda from receiving messages from SQS. And I want to implement this like an API which can toggle between the disabling and enabling of the AWS Lambda ...
1
vote
1answer
23 views

Running AWS lambda in serial (for a given parameter)

I'm not sure if this is the best place to ask this. But we've currently got something in Microsoft Azure where we have their serverless functions (Azure Functions) running in serial based off a ...
1
vote
1answer
53 views

Why do I need a Nat Gateway for ECS containers using AWSVPC?

So here is a scenario: I have a route table that routes all traffic to the internet gateway, and I have a subnet associated with that route table, which makes it a public subnet. Now I create another ...
1
vote
1answer
32 views

Sending HTTP requests to private EC2 DNS from other EC2 host works, but not from container on EC2 host

I want to make a container hosted on one EC2 host communicate with another container hosted on another EC2 host. Currently, if I send an HTTP request from host A to host B using host B's private DNS ...
1
vote
1answer
40 views

Unable to send cloudwatch logs to loggly using a blueprint lambda - Invalid ciphertext

I am trying to use the loggly Lambda blueprint to send cloudwatch logs to loggly. I am doing this because I have a bunch of lambdas that I need to have a single point of viewing logs. I've followed ...
3
votes
3answers
81 views

Accessing a AWS docker instance via localhost only?

Suppose I have two apps launched via the AWS ECS cluster (using Docker containers). I want to expose one app to the world via a public IP (and I do it via the AWS load balancer) but the other one I ...
1
vote
0answers
84 views

SQS Error Message: The specified queue does not exist for this wsdl version

I have a Lambda function that is created inside a serverless framework setup. I am trying to pass in a queue url as an ENV variable, when I do that it results in the below error message. I've checked ...
0
votes
0answers
30 views

How to reference a state file in one module from another, when using dynamic names

I have a Terraform/Terragrunt project to automate the creation of and ECR repository and several Fargate instances (test, uat, production) to host images from that repository (depending on how far ...
2
votes
1answer
39 views

Are manual changes to an aws IAM policy detected by Terraform plan?

I know that Terraform dose some checks before the plan and can detect some changes but not others such as detecting changes to variables on a lambda but not detecting a new secret in a secret manager. ...
3
votes
2answers
73 views

AWS Temporary Permission Granting Tool for Account/Service “Firefights”

I'm looking for a service or third party solution that allows for granting temporary access to an IAM user (or group) to one or more services in an AWS account. The example I have is there is an ...
1
vote
1answer
72 views

Can I use AWS Step Functions to launch many different fargate 'runs'?

I am building a service that has two independent steps. The first step is a data transformation step that has to happen and is common to all downstream processes, then the second is starting a few ...
2
votes
0answers
46 views

How to deploy StatsD listening on UDP in kubernetes with external loadbalancer on AWS?

Our goal is to have StatsD deployed on k8s cluster running on AWS. Currently all existing applications using UDP to send StatsD metrics. As we understood from the kubernetes docs and tests we ...
1
vote
1answer
16 views

AWS Setting instance to use domain from another account

We're transitioning between accounts and we have an app on our new account but we want to use the domain from our old account. We plan on shutting off the old account soon and transitioning everything ...
0
votes
0answers
10 views

Is it possible to accept a connection request for Endpoint Services in a CloudFormation Template?

Question is at the bottom. The following diagram is what I am trying to deploy. This is part of an exercise from a Developer Associate course that I am following. In this course we only use the AWS ...
0
votes
0answers
12 views

Move k8s persistent volume to new aws zone

I'm trying to shrink my GitLab EKS cluster to one node right now. I have multiple persistent volumes that belong to different availability zones. If I shrink my cluster down to one node, then I'll ...
1
vote
0answers
31 views

Terraform duplicates the security groups, how do I stop it?

I'm using terraform to create two instances and a security group. Here is how I did it: # bastion host resource "aws_instance" "bastion_1a" { ami = data.aws_ami....
0
votes
0answers
12 views

ec2fleet plugin to launch slave nodes in jenkins

I have a requirement to create && terminate the slave machines from my Jenkins master. For this i am using AWS spot instances and EC2 fleet plugin in Jenkins. I am able to launch the spot ...

1
2 3 4 5
8