Questions tagged [amazon-web-services]

For questions about Amazon Web Services (AWS) in general. If your question is about a specific Amazon web service please use that tag, e.g. [amazon-s3], [amazon-ec2], [amazon-ecs], [aws-codedeploy]

Filter by
Sorted by
Tagged with
1
vote
1answer
89 views

How CircleCI, Terraform and AWS should interact in CI/CD Pipeline

I'm new to devops and I'm have a hard time finding resources to help me with this question. My Goal is to have an automated CI/CD pipeline to launch my project. Basically I have a GitHub repo with a ...
1
vote
2answers
358 views

Container Image Promotion across environments in ECR/ECS

We have started doing some initial work on deploying containers on ECS Fargate service. However we are not yet completely figured out how to manage our image promotion across different environments. ...
0
votes
1answer
107 views

Unexpected type error in ansible community.aws.cloudfront_distribution: "origins" parameter: "'list' object has no attribute 'get'"

I get an unexpected type error, for what I assume to be the "origins" argument to the community.aws.cloudfront_distribution module: "Error validating distribution origins: 'list' object ...
0
votes
1answer
102 views

Advantages of using Code-pipeline and Codebuild for CI/CD over Bitbucket pipeline?

What are the advantages of using AWS Codepipeline/code build for our pipeline over the bitbucket pipeline. ? Some of the factors that I can think of: Pricing? Pipeline for a serverless application ...
0
votes
1answer
535 views

AWS ElastiCache Redis DNS error - Name or service not known

The Problem & The Question I'm trying to create an AWS ElastiCache Redis-flavored cluster and connect to it from an instance in the same VPC. When I create the cluster initially, I can connect to ...
0
votes
2answers
46 views

How to get code onto aws ec2 instance using terraform and gitlabs

I've just started learning Terraform (utilizing the AWS provider) and I have managed to replicate our infrastructure which includes quite a few amazon web services. I can successfully deploy it and ...
1
vote
0answers
17 views

Cost minimization in aws parallel cluster

I'm new to aws cloud service. I have to create a parallel cluster in aws. So, I'm using aws parallel cluster. But the problem is, when creating a cluster the NAT gateway billing me when I'm not using ...
0
votes
1answer
284 views

Gitlab CI/CD: deploy docker image to existing kubernetes cluster

I have node.js application that I need to deploy to exising kubernetes cluster. The cluster is setup using kops on AWS. I have created .gitlab-ci.yml file for building docker images. So, whenever a ...
1
vote
1answer
34 views

AWS Inspector "High Risk" : port open to the internet with IP whitelisting

We use AWS Inspector to identify risks with our AWS assets. Today I received a finding, with a "high" severity. The finding said that the FTP port was open to the internet. However, after ...
3
votes
2answers
4k views

How do I use the remote-exec provisioner with Terraform?

I am using Terraform 0.14 and AWS. I am trying to write a .tf file that will invoke a remote-exec command via Terraform's provisioner. This code does not work: resource "aws_instance" "...
1
vote
0answers
265 views

The deployment failed because no instances were found in your green fleet

I have created a blue-green deployment in AWS CodeDeploy with the option Manually provision instances. but when I run pipeline code deploy show error `The deployment failed because no instances were ...
1
vote
1answer
322 views

What does "eksctl create iamserviceaccount" do under the hood on an EKS cluster?

AWS supports IAM Roles for Service Accounts (IRSA) that allows cluster operators to map AWS IAM Roles to Kubernetes Service Accounts. To do so, one has to create an iamserviceaccount in an EKS cluster:...
1
vote
1answer
1k views

Can you remove a commit made to a branch on AWS code commit?

I know of git rebase but don't know if it can be used with AWS code commit? Or if there's any other method of removing a commit to revert back to before it was made and merged?
2
votes
1answer
186 views

AWS SNS-SQS: Checking a subscription already exists

I've found it's a useful strategy to create relevant queues whenever a queue worker service boots. For instance, on service boot, it checks whether its queues exist already in AWS and creates them if ...
0
votes
1answer
38 views

Migrating to AWS with Devops [closed]

What are they key stages of migrating to AWS with Devops ? Can anyone list a use case or workflow?
0
votes
1answer
301 views

What is the AWS equivalent of Azure Management Groups?

Microsoft Azure has Management Groups. (They are a level above subscriptions that allow you to organize subscriptions into containers called "management groups" and apply your governance ...
1
vote
1answer
194 views

Is it possible to have an aws EKS infrastructure as code?

Is it possible to declare "a complete production level EKS with other aws services" using terraform? I know that terraform has an eks module and an aws provider. But I'm not sure if one can ...
0
votes
1answer
90 views

Does a DB connection prevent AWS Aurora Serverless from pausing its compute capacity?

I want to host an application that connects to a DB and makes queries to it. The application holds onto the connection indefinitely but only makes queries to the DB when the user interacts with the ...
0
votes
1answer
28 views

How to mount a single 100TB SSD on AWS and access the device over nfs from different machines within the same VPC?

I have a bad experience with Storage Gateway (SGW) and would to consider the possibility to setup a 100TB SSD device (via EFS or similar) on AWS and allow an access to the storage device from ...
0
votes
1answer
27 views

How to redirect the request to a different node when there is an unexpected exception and one of the pods gets restarted

We are deploying the application in a Kubernetes cluster and when we face an unexpected error and the pod gets restarted or goes down we are getting a 502 Gateway error even though there is another ...
1
vote
1answer
65 views

In k8s, do the controller nodes have to be in same VPC as the worker nodes for a cluster?

I'm new to k8s and trying to grasp the infrastructure concepts, and trying to apply them in AWS. I know a k8s cluster has a control plane, which has the management nodes, and a data plane, which has ...
4
votes
1answer
87 views

K8s cluster in peered VPC can't reach RDS cluster

I have two K8s clusters in the same VPC that I want to connect to an MySQL Aurora RDS cluster. One of the clusters can reach the RDS cluster just fine. The other, however, cannot. I'll call these eks-...
2
votes
1answer
268 views

How I can retrieve aws lambda cloudwatch logs in txt format so I can search on them?

A lambda that I have deployed has gone wrong. Therefore, I want to look on logs and find out whats wrong about it. Hence I look upon cloudwatch logs for any error message. But the cloudwatch ...
2
votes
1answer
430 views

Redirect to a custom page on 503 error in Ingress

When our site is getting deployed, the Ingress gets created and before I could get any response I get 503 for 5-6 minutes (time taken to startup). We need to configure our ingress to redirect to a ...
2
votes
1answer
750 views

Terraform ignore_changes block on JSON-encoded attribute

I'm currently trying to get CloudWatch logging and DMS configuration working smoothly in my module by ignoring certain attributes on replication_task_settings. Right now, I have a DMS replication task ...
1
vote
1answer
14 views

Mass remove/add to multiple security groups cross region

Would it be possible to create a script or use something like terraform to mass remove/add security group entries across several regions under the one account based on the security group name? ...
1
vote
1answer
212 views

In the AWS CLI how do I treat a special character as a string?

I'm trying to run an AWS CLI command for a resource with a ! in its name. I'm doing this from Centos docker instance running on my local device a MAC and if I run echo "$SHELL" it says it ...
1
vote
1answer
228 views

Terraform deletes AWS lambda layers instead of keeping the older versions

I am using terraform version 12.26 for AWS deployment. Whenever I try updating a lambda layer, the lambda layer version is incremented, but the older layer is deleted. Even though my current version ...
0
votes
1answer
101 views

What reasons should I NOT use a private DNS zone and CNAME services in my AWS/K8s environment?

I have a Kubernetes cluster in AWS, with apps that talk to AWS services like RDS, Elasticache, Elasticsearch, DynamoDB, etc. For the services where it's available (Elasticache and RDS, and more ...
1
vote
1answer
98 views

How to remove the AWS Backups

I'm using AWS Backup to create snapshots of my production server. My current backup plan has infinite retention and that ran me into gigabytes of storage. What would be the best way to fix that? I saw ...
0
votes
1answer
214 views

Pull request and merge actions in CI/CD

The CI/CD pipeline supports pipelines per branch but no pipeline for feature branches is triggered automatically. There are pipelines deployed for the following branches: development, master. The ...
1
vote
3answers
227 views

What minimal IAM permissions are needed by AWS Chatbot so that it can show logs?

The AWS service called Chatbot allows CloudWatch Alarms to be relayed into a Slack channel. The message includes two buttons: Show logs and Show error logs. However, when I press either of these ...
2
votes
1answer
23 views

Data processing infrastructure

We are building a system for data science in AWS and our flow is pretty simple. Get the data - From redis get the model - From FSx/EBS run. This process script should take something like 5-10 ...
3
votes
0answers
80 views

Is running linux container on windows aws instance possible?

what I'm trying to achieve is running a Linux(ubuntu LST) container inside a windows server 2019 OS. The problem is that the windows OS runs as an AWS instance. There have been problem for me trying ...
0
votes
1answer
73 views

nginx rewrite with proxy_pass

I want to proxy requests with nginx to different domain and also rewrite some part of the path. For example http://origin.com/ - > http://target.com/_plugin/kibana How to accomplish such automated ...
0
votes
1answer
973 views

Terraform Dynamic Block with list intro them

I'm creating a AWS Cloudfront module and some troubles are happening because have some Cloudfront parameters that are "dynamics/optional" too. When I'm trying run the $ terraform validate ...
0
votes
1answer
165 views

Export CloudFormation file from CDK

Since I've seen Hashicorp Terraform, I have been wondering why the "plan" it can export has binary format. Now in the AWS world you have got a declarative configuration language called ...
1
vote
0answers
541 views

Ansible/AWS dynamic inventory -- How to create groups based on tags?

I am trying to create custom groups, based on tags. I am using this doc as a reference: https://docs.ansible.com/ansible/latest/plugins/inventory.html#inventory-plugins As a baseline, in my aws_ec2....
0
votes
1answer
4k views

Ansible playbook error: "Connection timed out during banner exchange"

I am trying to connect to my bastion host and then tunnel that ssh connection to connect to a jenkins host but keep running into the connection timed out error. The error message in full is: fatal: [&...
1
vote
1answer
217 views

Ansible dynamic inventory using AWS plugin -- how to obtain internal DNS records or private IP?

Seeking help from those who've worked with dynamic inventory in Ansible. I have Ansible set up with the aws_ec2 plugin (not using the python script as it's been too problematic). Currently, I'm only ...
1
vote
0answers
39 views

How to use Vault generated certificates for Internal Domains in AWS

I have generated certificates for an internal domain using Hashicorp Vault. I have exported the private key, certificate body and certificate chain. I have uploaded the certificate onto AWS ...
2
votes
1answer
49 views

AWS hosting of SPA Web App

I have just recently started to consider using AWS for my SPA Web Apps. And I have read a lot about different types of how web apps could be hosted on AWS. I have looked into Lambda, S3 Static hosting....
1
vote
2answers
35 views

DNS Issues with Cloud formation template

I am trying to automate the creation of an EC2 instance with CloudFormation but am running into issues with DNS. Once the instance is created it can't seem to resolve any hostnames. I try to ping a ...
1
vote
0answers
19 views

Allow specific AWS permissions(Lambda, S3) / roles to specific Jenkins Jobs within same AWS account

We have one AWS account in which an Ec2 instance is running where Jenkins is installed, and we have attached an IAM role to it, with s3 access permission. We have Jenkins jobs which needed aws ...
1
vote
1answer
273 views

Force role session name in AWS IAM

I want to enforce users to use their IAM username as the role session name when assuming a role in AWS. I've tried the following condition in IAM policies: { "Effect": "Allow", ...
0
votes
1answer
278 views

AWS ECS Fargate, auto scaling and load balancer

For a ECS service with launch type "fargate", it is possible to configure a load balancer and auto scaling. I don`t understand, how those two types of scaling work in this case, and how they ...
1
vote
0answers
29 views

In aws will snapshots be cheaper than AMIs?

I know you can create AMIs from a snapshot. Snapshots are cheaper to store than AMIs and that AMIs of a stopped instance are cheaper to store than an AMI of a running instance. Will an AMI of a ...
1
vote
2answers
78 views

Populate Database

I am using Terraform Cloud to build the infrastructure. One of the resources is a postgresql database. What is the best way to populate the database by creating tables, multiple schema etc after the ...
1
vote
2answers
211 views

Spread pods over cluster

Current using AWS's auto-scale policy to start EKS worker nodes (min+desired 10, max 15) on a fixed time every day. There are 120 pods and 30 deployments. Obviously, only one node will be up firstly. ...
-1
votes
1answer
243 views

AWX cannot find matching host

I have on premise AWX and inventory (instances on AWS). To provision newly launched instance I want to use provisioning callbacks. But when executing this command from the instance $ curl -v -H '...

1
2
3 4 5
9