Questions tagged [amazon-web-services]

For questions about Amazon Web Services (AWS) in general. If your question is about a specific Amazon web service please use that tag, e.g. [amazon-s3], [amazon-ec2], [amazon-ecs], [aws-codedeploy]

62 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
3
votes
0answers
48 views

Trade offs of putting an international master database in us-west-2

I'm hoping this isn't so open ended that it veers towards a "discussion" more than an "answerable" question. I need to place an RDS Postgres instance in an AWS region that will act as the master DB ...
3
votes
1answer
415 views

Monitor Jenkins node/slave health

For a project i'm working on we need to create a Jenkins node in an AWS environment. For this we will work with the docker image which is available on https://github.com/jenkinsci/docker-ssh-slave ...
3
votes
0answers
108 views

AWS Batch use existing ECS cluster

I would like AWS Batch to use one of my existing ECS clusters. The problem is that when I create an unmanaged "compute environment" from the AWS Batch service, it doesn't allow me to specify an ...
3
votes
0answers
2k views

Is it possible to create AWS CloudWatch Metric Filters with dimensions?

CloudWatch Metric Filters are the recommended way to create custom metrics from Lambda functions. Sending the metrics directly from the lambda function to the CloudWatch api is the main alternative, ...
2
votes
1answer
19 views

Accessing AWS Secrets Manager from Docker

All the tutorials I've seen for AWS Secrets Manager have secrets being retrieved by the CLI. How is this done in production? Can I mount a set of secrets to a docker container as a file?
2
votes
0answers
38 views

How to configure Dedicated IPs for specific SES domain?

Recently we've requested for 2 dedicated IPs for our SES domain, As most of the mails are going to spam folder. And we've 5-6 SES domains(account.abc.com, help.abc.com, mail.abc.com, etc) in the same ...
2
votes
0answers
290 views

Can I restart a container within an ECS task group without restarting the entire task?

I know this isn't possible through the AWS portal, but we have a scenario where we would like to restart a container that may have died, which isn't essential. The scenario is along the lines of ...
2
votes
0answers
338 views

Elastic Beanstalk: Setting parameters from a .config file in the application bundle

I am using the Elastic Beanstalk web UI to create an environment, for a single Docker container. I would like to put all the environment options into a .config file in the application bundle. I'm ...
2
votes
1answer
583 views

How to provide multiple configs for EC2 node using Terraform and cloud-init?

I need to use several configs on my EC2 node using Terraform. data "template_cloudinit_config" "puppetserver_config" { gzip = true base64_encode = true part { ...
1
vote
1answer
15 views

AWS CodePipeline frozen on Source

I have created a very simple pipeline. I have a git repo in CodeCommit, and the pipeline, when triggered, simply copies the files to an existing S3 folder which is set up to serve a static website. ...
1
vote
0answers
24 views

What is the Young's Modulus for EC2?

Young's Modulus is defined as follows: Young's modulus or Young modulus is a mechanical property that measures the stiffness of a solid material In the case of AWS Elastic Compute Cloud (EC2), the ...
1
vote
0answers
78 views

Terraform destroys and creates new AWS resources

Terraform destroys and creates new AWS resources when I modify the modules with new resources. I tried with: lifecycle { prevent_destroy = true } Getting the below error : the plan would ...
1
vote
0answers
24 views

Why does logstash not output to the correct elasticsearch index with date?

I have my system running with ElasticSearch 7.0 and Logstash 7.0 on an AWS EC2 machine. In my logstash configuration, I use the default index pattern (as described in outputs plugin): output { ...
1
vote
0answers
21 views

echo colon to file in cloud-init

So, I have this part in my cloud-init: runcmd: - echo : RSA 'node.crt' >> /etc/ipsec.secrets I literally can't make it to work. I tried these variations: runcmd: - echo : RSA 'node.crt' ...
1
vote
0answers
21 views

all volumes are geting deleted when one EC2 is being deleted via terraform

i am using this template to create aws resources. my count is 2, every thing is getting created as per plan,, i am attaching a 2nd ebs volume of 1 gb to both machines, which is also happening well, ...
1
vote
0answers
78 views

How to integrate CI with federated AWS IAM roles?

Imagine a multi tenant environment using a CI (e.g. GitLab but can be any other) and AWS as a backend for test infrastructure. With fixed users, it is easy: save credentials as secrets. But what if ...
1
vote
0answers
23 views

Converting s3 URL to the desired one

I have created a s3 bucket with all permissions and user access through IAM policies. I give the below URL to the customer to access that bucket https://s3.console.aws.amazon.com/s3/buckets/s3-upload-...
1
vote
0answers
119 views

Provisioning times for Redis in cloud taking too long, how can we shorten it?

Provisioning a 1 GB Redis cache service on AWS takes around 8 minutes. Doing the same on Azure takes around 16 minutes. Ours Terraform scripts need the call back from the Redis systems. Why is this ...
1
vote
0answers
210 views

How Can I Easily View Build Artifacts From AWS CodePipeline / CodeBuild?

I'm creating a project with the nodejs + AWS Lambda + express template in AWS CodeStar, and I'm using CodePipeline and CodeBuild to build and deploy the project. It also runs tests, and it would be ...
1
vote
0answers
93 views

aws ecs jenkins on-demand agents not terminating after use

Looking for help troubleshooting an intermittent issue; We run an Ubuntu version of Jenkins on AWS infrastructure using on-demand spot ECS instances. I've noticed that while most agents spin down and ...
1
vote
0answers
580 views

How to deploy with AWS CodePipeline a multicontainer docker environment without dockerfile

I'm using simple docker-compose container images. Here's my docker-compose.yml version: '2' services: db: image: postgres:10.2 ports: - "5432:5432" ...
0
votes
1answer
9 views

Terraform creating single SG but multiple CIDR blocks

I am trying to use Terraform to create a single security group that will allow traffic for mongo on port 27017 from all my private subnets that are stored in a variable. My issue is I am unsure how ...
0
votes
0answers
21 views

Selectively uploading multiple folders to AWS S3 using CLI

I have around 50 folders, which contain subfolder, I want to upload the folders including the subfolders to an S3 bucket, while keeping the subfolders structure. I read I can use --include command ...
0
votes
0answers
7 views

How to setup Cloudfront for Load balancer for a private staging domain name?

I've got a domain name foobar-staging.com, that I use for the staging environment to get feedback, testing or demo before releasing to production. Recently, decided to deploy the UI static files to s3 ...
0
votes
0answers
14 views

How do I detach an existing volume and attach a new volume using Terraform?

Is there a way to detach EBS volume from existing EC2 instance and attach a new EBS volume using Terraform ? I prefer to replace the volume rather than trying to destroy the instance and create a new ...
0
votes
1answer
18 views

Cloudformation YAML not well-formed

I have a cloud formation template that I want to import some values from another template. Currently the other template exports a string by joining together an array (better way of doing this?). In ...
0
votes
0answers
9 views

Can Xray use existing cloudwatch metrics?

So if existing resources are not setup to send segments to Xray but do work with cloud watch metrics is there a way for Xray to use those metrics? I know Xray gets segments from the resources but I ...
0
votes
0answers
10 views

Attach elastic inference gpu graphics on aws ec2 instance with terraform lauch template

With Terraform, following the doc here and there, I am trying to create a template for ec2 instance with elastic inference gpu specification and graphics. This my code for aws launch template ...
0
votes
0answers
9 views

Are secure strings in parameter store always unencrypted in the console?

I used Terraform to build an RDS , peramitor store and key in tempory lab enviroments to try to get it working giveing the peramitor store type secure string and key_id of the key. The RDS uses the ...
0
votes
0answers
18 views

Can a password be encrypted in Terraform code without the unencrypted password ending up in the state file?

I read you could use an encrypted password in the Terraform code but it would still show up unencrypted in the TF state file. Is there any way to avoid it showing in the TF state such as getting the ...
0
votes
0answers
8 views

Can you exclude from AWS Trusted Advisor without waiting 6 minutes between clicks?

I've been working on cleaning up the AWS Trusted Advisor](https://aws.amazon.com/premiumsupport/technology/trusted-advisor/) warnings at my new job. I've got a few hundreds warnings that are worthy ...
0
votes
0answers
4 views

jenkins-x returns error 1 when I try to create a cluster

I'm following this tutorial. I'm running the jenkins-x cli on a aws ec2 instance where I installed kubenetes and jx. I get to the part where I run the command jx create cluster eks --cluster-name=...
0
votes
0answers
7 views

Recomendation for automated rotation of a JSON keyring?

I have a Sailsjs app that is configured to encrypt model attributes with sensitive information. This seems to use bcrypt, under the hood and leverages a JSON keyring in the configuration (...
0
votes
0answers
32 views

Trying to start ELK APM container on AWS but no environment variables takes effect

I am trying to run ELK APM - application performance monitoring container on AWS. Image: docker.elastic.co/apm/apm-server:7.3.1 Port mapping 8200:8200 and setting Environment variables output....
0
votes
0answers
39 views

How do I install kubeadm on RHEL 8.x?

I am using RHEL 8.x in AWS. I cannot install kubeadm because when I try "sudo yum -y install kubeadm" I get No match for argument: kubeadm Error: Unable to find a match The directions I found ...
0
votes
1answer
23 views

How do I access the web UI for Kubernetes clustered that were created via EKS?

I need a URL and the web UI log in credentials for Kubernetes. I created Kubernetes clusters in AWS with EKS. I have API endpoint URLs for the clusters based on what I see in the EKS section of the ...
0
votes
0answers
16 views

Using serverless, how can I deploy multiple stages with different api keys for each stage on a single AWS account?

I have a serverless configuration that has private routes into a lambda function and the api keys are in the configuration, using the stage name to look them up. service: my-service provider: name:...
0
votes
1answer
89 views

ERR_SSL_PROTOCOL_ERROR signin.aws.amazon.com

I was getting this error trying to sign into the AWS console. When I changed my service provider (for example using my mobile data) this would work. Trying to fix this I looked at the URL, and ...
0
votes
0answers
23 views

How do multi-cloud organizations handle DNS public zones?

What if I have an existing public zone within Amazon Web Services with an existing A record type e.g. bar.com I want to create a subdomain for that existing domain within Google Cloud Platform e.g. ...
0
votes
1answer
25 views

API Gateway - How Deploy API works?

After creating API Gateway with two API names and integrating with lambda function, AWS documentation recommends to deploy this API, as shown below: 1) What does deploy API mean? How creating API ...
0
votes
0answers
12 views

AWS beanstalk deployment policy

Our application is a relatively simple single-container docker application that we deploy to aws elasticbeanstalk. To deploy the developer's account must be attached to a role that has the ...
0
votes
0answers
13 views

AWS Cloudformation GitHub to S3 Bucket Pipeline

I am looking to create a cloudformation stack that takes a GitHub source and publishes on changes (webhooks) to an S3 bucket. The second link below gets me close but is set to deploy using code deploy....
0
votes
0answers
18 views

DeamonSet pods priority

I just upgraded my aws eks test cluster from 1.11 to 1.12. With that comes a below change: https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.12.md#sig-scheduling: DaemonSet pods, which ...
0
votes
0answers
12 views

How to make sure the storage of an AWS isn't accessible without a private ssh key?

Is there a way to encrypt the EBS attached to an EC2 instance in such a way that it can't be re-attached to another EC2 instance and read by someone without the private key required to access the ...
0
votes
0answers
47 views

kube-controller-manager unable to communicate with etcd

1. What kops version are you running? The command kops version, will display this information. Version 1.12.2 2. What Kubernetes version are you running? kubectl version will print the version if a ...
0
votes
0answers
109 views

Unit Test AWS Glue job in CodePipeline

I have an AWS Glue job written in Python that I would like to perform pyunit tests on. However, from reading and experimenting on my own, there seem to be quite a few dependencies on the Glue service, ...
0
votes
0answers
81 views

Iterating through multiple list variables within a dynamic block in Terraform .12

I am looking to us ea dynamic block for an aws beanstalk environment "settings" sub block. Essentially I want to have one settings block which contains var.namespace var.namespace_name var....
0
votes
0answers
9 views

How to enable “Detect Drift” feature in AWS Cloudformation through the Cloudformation Templates or other Automation process?

I have been deploying infra through AWS Cloudformation templates. It is all automated through a CICD pipeline. Now, AWS has recently introduced "Detect Drift" feature that identifies the AWS ...
0
votes
0answers
39 views

kubernetes service's dns not resolved inside cluster

i have setup a Service on my cluster, but can access it from pods only with the ip:port that are specified in the "Endpoints:" of the service. Instead i would like to use my-service.default.svc....
0
votes
0answers
28 views

AWS CodePipeline with Artifactory

I have a CodePipeline that builds a .Net core application that I would like to store in an Artifactory repository. AWS has an article that recommends using a worker EC2 instance to continuously poll ...