Questions tagged [amazon-web-services]
For questions about Amazon Web Services (AWS) in general. If your question is about a specific Amazon web service please use that tag, e.g. [amazon-s3], [amazon-ec2], [amazon-ecs], [aws-codedeploy]
584
questions
0
votes
0
answers
9
views
AWS Certificate in ACM service does not get validated successfully
I use Terraform to deploy ACM in front of my CloudFront service:
resource "aws_route53_zone" "primary" {
name = var.domain_name
comment = "Hosted Zone for ...
0
votes
1
answer
8
views
EC2 can't get to internet? SG and ACL seem OK
I've applied the terraform code below (variables.tf and main.tf are, of course, separate IRL) to setup an AWS VPC, private and public subnets, routes, NAT gateway, Internet Gateway, Network ACLs, an ...
0
votes
0
answers
8
views
OIDC configuration for Terraform/GitLab CI in a multi-account context
I wrote some Terraform code. I logged in locally using AWS Identity Center so that I would not have to generate IAM access and secret keys (as per AWS's good practice recommendations).
I'm going to ...
0
votes
1
answer
34
views
How to design AWS infrastructure for my online course selling website?
I am designing an AWS architecture for hosting a website that sells online courses and merchandise products. For the purpose, I am planning to use the following architecture design:
1 VPC
1 ...
0
votes
0
answers
10
views
Question about AWS Prometheus tutorial
I'm following this cool example on how to run a container and monitor it CloudWatch with Prometheus - Monitor and scale your Amazon ECS on AWS Fargate application using Prometheus metrics. All my ...
1
vote
1
answer
21
views
Worker Pool in Spacelift showing as 0 workers
I created a private worker using https://github.com/spacelift-io/terraform-aws-spacelift-workerpool-on-ec2
However, my worker pool shows as 0 even though I can see the worker in my AWS Console. What ...
1
vote
1
answer
53
views
How can I attach multiple AWS accounts to my Spacelift stack?
How can I connect my Spacelift stack to deploy resources into my multiple AWS accounts?
I have a current integration set up, and this works perfectly to deploy resources to my account but how can I ...
0
votes
0
answers
8
views
Gatekeeper not showing kube-system pods as violations
I am following this gatekeeper guide and it gives violation if a pod doesn’t have limits but I am unable to see pods from kube-system namespace as violations.
I am testing this on AWS EKS.
I haven’t ...
0
votes
0
answers
12
views
How to enter \ character in terraform?
I have
resource "aws_secretsmanager_secret" "mcasz2" {
name = "mcasz/client/credentials"
description = "mcasz 2.0 secretes for back-end"
}
resource "...
0
votes
0
answers
23
views
AWS Load balancer secure listener - ignore certificate in ingress-nginx
So I have an EKS cluster with ingress-nginx running inside, the service of ingress-nginx-controller is associated with the External IP of Load balancer type Network (say 123.elb.my-region.amazonaws....
1
vote
2
answers
71
views
Need to understand the career path for DevOps
I am a frontend developer, planning to gain hands on experience in DevOps. However, I'm not sure of if only DevOps or DevSecOps.
Recently I tried learning Jenkins while last year took an Udemy course ...
0
votes
0
answers
30
views
How do I recover from Amazon ECS the private key of each node that generated the Terraform script?
I have used the following repository to create a private test Blockchain and it turns out that I don't know how to recover the private keys of the nodes. some help? Thanks
GitHub:
terraform aws ecs ...
0
votes
0
answers
15
views
Use AWS IAM account for SSH login
A small admin team needs occasional SSH access to EC2 Linux instances on multiple AWS accounts (assumed role). These machines come and go dynamically so managing users via user_data or ansible is ...
1
vote
1
answer
287
views
Permission Issue when creating an ECS Service with CloudFormation
I am trying to create an ECS service in a cloud formation json. Here is the role I created (I know that it has additional permissions, I am using one role for now and will break them up later)
"...
0
votes
1
answer
24
views
Terraform conditions : How to have a multiple values in case of False condition?
I need to have two urls in case if my environment is nonprod(sit,uat,dev) and my application is Techno, otherwise only one url. In order to do that, I have made every string into a list here, so that ...
0
votes
1
answer
17
views
AWS don't gather properly logs in non-blocking mode
I have faced a situation when some of the logs don't gather by awslogs driver.
Awslogs driver with mode = non-blocking and maximum buffer size = 25mb (I have experimented with these values by looking ...
0
votes
0
answers
29
views
On AWS EKS, how can I update an addon multiple minor versions at once?
Some enabled add-on lags far behind the latest version.
The add-on is NOT self-managed (checked using the doc with aws eks describe-addon)
That specific addon has no compatibility issues between the ...
0
votes
0
answers
194
views
Alternatives to 'Docker Compose's integration for ECS and ACI will be retired in November 2023'
We are currently using 'docker compose' to deploy our applications on ECS, and during its usage, we have noticed the following notice:
'Docker Compose's integration for ECS and ACI will be retired in ...
0
votes
0
answers
16
views
How to delete Kubernetes Finalisers Kubernetes.io/pv-protection?
I am trying to delete the finalisers in the PV by issuing kubectl patch command and it deletes partially leaving behind Kubernetes.io/pv-protection
Described the PVC and able to see two entries
...
0
votes
1
answer
38
views
How to ascertain excesive use of my S3 bucket?
I have a S3 bucket that I use to store images for a website I manage. The bill is usually about $1/month and I store about 12.5 GB on the service. It's never really been an issue before, but recently ...
0
votes
0
answers
10
views
Concourse Pipeline Not Retrieving Configuration Values from AWS Secrets Manager
I'm experiencing an issue where my Concourse pipeline isn't picking up configuration values from AWS Secrets Manager. I have set everything up according to the documentation, ensured the necessary IAM ...
0
votes
1
answer
28
views
EC2 instances cannot connect over Elastic IPs
I have 2 EC2 instances and I am trying to get them to connect over port 44874 (it's a layer 1 cryptocurrency like dogecoind).
Both are running Ubuntu 22.04 AMI
Both are in the same subnet
Both are in ...
1
vote
1
answer
98
views
EKS cluster upgrade from 1.23 to 1.24 ServiceUnavailableException: Updates in the cell are disabled
I've tried upgrading my EKS cluster to 1.24 and I keep getting this error: ServiceUnavailableException: Updates in the cell are disabled
I get this using the AWS console webpage here https://us-east-1....
0
votes
0
answers
52
views
Why Kube state metrics only shows metrics related to the namespace where it is running?
I have AWS EKS cluster with kube-state-metrics installed in a namespace called "monitoring". This installation is using service monitor and other components (see yaml files below).
In this ...
0
votes
1
answer
63
views
What happens when you are running a "too old" version of k8s in eks?
I'm desperately trying to resolve all of our dockershim uses so we can migrate to EKS 1.24+, but I'm not optimistic I'll get it done before the "deadline".
I'm stuck on EKS 1.23 until I can ...
0
votes
0
answers
11
views
Transfer multidomain PHP application to AWS Autoscaling
We have a bunch of websites (>15) running on the same codebase. Currently our strategy is to run every website on a separate Lightsail/EC2 instance. Website behavior depends on .env file but it is ...
0
votes
0
answers
148
views
AWS Amplify + Flutter: How to do CI/CD?
Background
I am using AWS Amplify to build an app that uses S3 and Amplify authentication. I want to use CI/CD to automate deploying for people who only want to learn Flutter.
I setup my project in ...
0
votes
0
answers
144
views
Can't see the resources on AWS EKS, after I created a Cluster through CLI
I created a basic EKS Cluster from CLI, it created all the resources and I could view them through my CLI (pods, nodes, nameservers etc.)
However when getting into AWS platform, I could find the ...
0
votes
2
answers
106
views
Aws EKS Prometheus helm failed pod CrashLoopBackOff with log "trigger reload: reload request failed: Post \"http://127.0.0.1:9090/-/reload\"
I followed the steps here https://docs.aws.amazon.com/prometheus/latest/userguide/AMP-onboard-ingest-metrics-new-Prometheus.html
In a nutshell, I installed the Prometheus community helm chart on my ...
0
votes
0
answers
22
views
Cannot select AWS System Manager Automation documents shared between accounts
My org has 2 AWS accounts where we run EC2 instances. AccountA and AccountB.
I want to utilize the same Systems Manager automation documents that I created in AccountA in AccountB.
I opened the ...
0
votes
1
answer
310
views
terraform remote state bucket on s3
I want to use a remote state bucket on s3 for my terraform tfstate files (described here: https://developer.hashicorp.com/terraform/language/settings/backends/s3). It looks pretty basic, but in ...
0
votes
0
answers
35
views
I can only get a file after doing some upload to S3 from AWS using Node.js
I was able to upload files by one route, and query them by another. But when I go to consult them as soon as I start the application, before inserting a new file, I get the error
TypeError [...
0
votes
1
answer
109
views
how to create three different environments in aws
I want to deploy a public facing web project on aws for which I have setup ec2 for front end and another ec2 for backend (leave discussion about hpa and other services etc for now). I have to ...
0
votes
0
answers
14
views
Assigning new role to already existing user in RDS
"We have an RDS instance hosted for Aurora PostgreSQL, specifically using the 'db.r5.xlarge' instance type. When we initially set up the RDS instance, a default user named 'rdsadmin' was ...
0
votes
0
answers
34
views
How to assign different authorizations to different AWS Cognito groups for a static site served by AWS Cloudfront
We have implemented the following AWS solution in order to publish a static html site on the internet :
https://github.com/aws-samples/cloudfront-authorization-at-edge
How can we manage to assign ...
0
votes
1
answer
54
views
How to pass terraform locals variables into AWS resource template body
I am trying to apply aws conformance pack to my aws account using terraform. I am using the sample aws config rules in cloudformation syntax provided in the awslabs repository.
Now from an example ...
0
votes
0
answers
7
views
How I can generate a grahical representation at what subnet each resource is located and has access in AWS?
In my infrastructure I have multiple subnets. I want to have a better picture of what is located and where therefore I want to have some sort of UI that maps each instance into a gui such as:
Is ...
0
votes
0
answers
24
views
Legacy application failing to send trafic with Hl7 protocol to EKS cluster
I am working on an application that consumes data sent over Hl7 protocol that has recently migrated to AWS, and that's where the issues started
The "Legacy application" requires a connection ...
0
votes
1
answer
16
views
Why does AWS wrap roles with instance profiles?
In AWS EC2, a machine is assigned privileges using instance profiles. Specifically:
the desired permissions are articulated as an IAM policy,
that policy is attached to an IAM role,
that role is ...
0
votes
1
answer
141
views
& (ampersand) in Terraform string or/and AWS IAM policy
I coudn't find meaning of & sign in Terraform or/and AWS IAM policy. There is an example in Data Source: aws_iam_policy_document (docs) where you can see Basic Example (docs, github source):
data &...
0
votes
0
answers
20
views
Old resource file being served to clients, container running in kubernetes
I've encountered a problem with one of our containers and can not understand what is causing the issue. We have several microservices running in a Kubernetes deployment that also uses istio. All of ...
0
votes
1
answer
397
views
"An unknown error occurred" when authenticating between GitHub Actions and AWS using OIDC
I was unable to successfully authenticate when attempting to create a GitHub Actions workflow that would authenticate with an AWS IAM Identity Provider (IdP) using Open ID Connect (OIDC), based on ...
0
votes
1
answer
86
views
Number EC2 instances required for tasks
Let's say I want to place my tasks on EC2 instances of type m6i.large, which has 2 vCPU and 8GB of memory.
I have 10 ECS tasks, each requiring 512 mCPU and 512MB of memory. How many EC2 instances do I ...
0
votes
0
answers
116
views
Cannot install packages with apt in docker image
I'm trying to create my own postgres image that is supposed to connect to a postgreSQL database hosted on AWS RDS, however, I'm having trouble connecting to that database as well as trouble installing ...
1
vote
0
answers
50
views
AWS Cloudformation with AWS SAM cli - is it possible to rollback?
After updating a cloudformation stack via sam build, sam package and sam deploy is it possible to rollback to the previous configuration?
My use case
I've set up a Gitlab project with the ...
0
votes
0
answers
23
views
Cross-region event-driven architecture
My company use AWS for a few event-driven apps. The catch is that all events are either time-based (9pm daily, month-end, quarter-end, etc.) or S3-based (put object, deleted object, etc.).
The setup ...
0
votes
0
answers
25
views
Cloudformation automatic calculation values
I have a Cloudformation template and in this template the customer selects the instance type they want according to the load. I wondered if there is something I can have this calculated automatically. ...
0
votes
1
answer
33
views
On AWS console, how to view ALL tags on a resource?
In the AWS console, for some resources (say for an ECR repo) there is a page for "tags". This page purports to list all tags, however it seems to list only tags without hyphens or ...
0
votes
0
answers
37
views
AWS Gateway load balancer via K8s service
Is there any way to deploy the AWS Gateway Load Balancer via Kubernetes service with the annotations? I can't find any annotations to create the AWS Gateway load balancer in the documentation.
...
0
votes
0
answers
50
views
EFS is getting unmounted from lambda when there is an update to efs
I have created EFS, and mounted this on lambda using terraform. It works, but when there is an update in EFS, then EFS gets unmounted.
I need terraform to detect this update and automatically mount it ...