Questions tagged [amazon-web-services]

For questions about Amazon Web Services (AWS) in general. If your question is about a specific Amazon web service please use that tag, e.g. [amazon-s3], [amazon-ec2], [amazon-ecs], [aws-codedeploy]

Filter by
Sorted by
Tagged with
31
votes
3answers
4k views

Who is this Chaos Monkey and why did he crash my server?

I had a perfect server, it was so pretty and rock solid and so I named it Petra. It was perfect in every way, everything was configured and tuned just right, it had perfect 100% service record and 753 ...
33
votes
2answers
608 views

What is a good strategy to keep my site online when S3 goes offline?

What is a good strategy to keep my site online when S3 goes offline? If S3 US East 1 goes offline, how should I have my app configured/structured to prevent that taking my entire site offline? What ...
31
votes
4answers
10k views

Why is the AWS EC2's spot price greater than the on-demand price?

I was trying to provision spot instances via Ansible yesterday, and almost all my requests failed, even when I put my spot price == the on-demand price of that instance. So, when I had a look at the ...
9
votes
1answer
2k views

Terraform: How to support releasing new versions of the code, running in parallel with the last stable release?

I have one service in production (on AWS), which follows the immutable server pattern. Its deployment looks like this: Create a new AMI with Packer Create a new CloudFormation stack, starting with an ...
6
votes
3answers
311 views

When your micro service in production needs a secret, where is the secret stored and retrieved from?

The context of the question is Secrets management. How do you manage storing and retrieving secrets for your micro service which is in production?
2
votes
2answers
118 views

How do you know which secrets and credentials of your production services were used, and by whom/what?

The context of the question is Secrets management. As the title says, how do you know which secrets and credentials of your production services were used, and by whom/what?
1
vote
1answer
133 views

What does “eksctl create iamserviceaccount” do under the hood on an EKS cluster?

AWS supports IAM Roles for Service Accounts (IRSA) that allows cluster operators to map AWS IAM Roles to Kubernetes Service Accounts. To do so, one has to create an iamserviceaccount in an EKS cluster:...
0
votes
2answers
106 views

AWS ECR start uploaded docker image?

I used packer to upload a docker image I created to my AWS ECR repository. How can I use the AWS cli to automatically locate that image, create a new cluster, set the port rules to allow all inbound ...