Questions tagged [amazon-web-services]

For questions about Amazon Web Services (AWS) in general. If your question is about a specific Amazon web service please use that tag, e.g. [amazon-s3], [amazon-ec2], [amazon-ecs], [aws-codedeploy]

Filter by
Sorted by
Tagged with
2
votes
1answer
74 views

Cross Account EC2 Access from within Amazon Workspace

I have a requirement to setup a bastion host (Amazon Workspace) to connect to an ec2 instance living on a different account. As Amazon Workspaces cannot assume a role the way EC2s can, A cross ...
2
votes
1answer
30 views

I want to scale up/down as fast as AWS Lambda but also be able to allocate the vCPU (minimum 8) per task, any advice?

Goal So I'm looking for an AWS product or combination of products to accomplish the following: Ability to do CPU heavy (non-parallel) calculations (min 8 vCPU's per node) Minimum timeout limit of ...
2
votes
1answer
30 views

How to deploy a Kubernetes service using NodePort on AWS?

I have created a cluster on AWS EC2 using kops consisting of a master node and two worker nodes, all with public IPv4 assigned. Now, I want to create a deployment with a service using NodePort to ...
2
votes
1answer
547 views

Terraform: can't connect to AWS provider using shared config file or static variable

I'm trying to use terraform to manage AWS resources and trying to set up the credentials configuration. I'm following the official documentation: https://www.terraform.io/docs/providers/aws/index.html ...
2
votes
1answer
503 views

Use dynamic values for parameter-store in aws buildspec.yml for CodeBuild

For my CodeBuild projects, I have a dev, staging and production project. Each project has an environment variable called $BUILD_ENVIRONMENT set to dev, staging and production, respectively. Each stage ...
2
votes
1answer
40 views

Having some trouble getting service running with Docker and Terraform

I'm very new to DevOps but I'm trying to learn some of it a bit. I'm working with Terraform, trying to get a service to run on AWS using Fargate and Docker. I've successfully set up my ECR ...
2
votes
1answer
121 views

Mitigate false positives due to daylight saving time in CloudWatch anomaly dectector

For monitoring, I set up CloudWatch alerts based on CloudWatch anomaly detection. Overall, they work quite nicely, but they got confused when the clock gets shifted (summer timer to winter time). We ...
2
votes
1answer
29 views

AWS CodePipeline frozen on Source

I have created a very simple pipeline. I have a git repo in CodeCommit, and the pipeline, when triggered, simply copies the files to an existing S3 folder which is set up to serve a static website. ...
2
votes
1answer
119 views

Accessing AWS Secrets Manager from Docker

All the tutorials I've seen for AWS Secrets Manager have secrets being retrieved by the CLI. How is this done in production? Can I mount a set of secrets to a docker container as a file?
2
votes
1answer
32 views

Get available CIDRs from existing VPC

I'm writing a few templates to create a stack on demand. Because of the concurrent VPC limitations (5 to start), I'm attempting to create all the feature-based dev environments on a single VPC and ...
2
votes
1answer
326 views

Terraform - aws_security_group_rule doesn't support import

I'm having a strange problem when trying to import an aws_security_group_rule into terraform. I'm running the latest version of TF (0.11.11) For example: terraform import module.ec2....
2
votes
1answer
47 views

Bad practice having a single SSH gateway with access to all environments?

I have started at a new company and am in the process of locking down SSH access to be through a single SSH gateway server. My question is, should I create a separate SSH gateway server for each ...
2
votes
1answer
1k views

Terraform Issue - Can't find Data Source in Sub Module?

I'm fairly new to Terraform and have been following this example on creating an EKS cluster - https://github.com/terraform-providers/terraform-provider-aws/tree/master/examples/eks-getting-started ...
2
votes
1answer
131 views

Cross Region Copy of Aurora Snapshots

current_date = str(dt.now().strftime('%Y-%m-%d')) target_cluster_snapshot_arn= current_date+'_Development_Aurora' response = TARGET_CLIENT.copy_db_cluster_snapshot( ...
2
votes
1answer
494 views

does boto3 have a way to get resource limits from a region?

Right now I am looking for ec2 instances type limits for a given region. I would like to put in place an audit script that tracks our usage vs our limits for a given set of things. Also open to ...
2
votes
2answers
118 views

How do you know which secrets and credentials of your production services were used, and by whom/what?

The context of the question is Secrets management. As the title says, how do you know which secrets and credentials of your production services were used, and by whom/what?
2
votes
1answer
31 views

Can you replicate Active Directory from a Corporate Intranet to an AWS VPC where there is an outbound-only link?

In our work environment we have a standard Corporate Intranet with Active Directory. We've been granted limited access to an AWS VPC. Our connection allows outbound (from the Intranet to the VPC) ...
2
votes
1answer
185 views

Reusable module in Terraform

I want to get an autoscaling group name variable in module_apps and use it in other modules - for example module_init. However when I try to run terraform plan it does not work. content of ...
2
votes
1answer
64 views

terraform - how should I clone my code repo?

I have a very simple terraform configuration. I boot up an aws instance of Ubuntu trusty and assign a security group. My question is who is responsible of getting the latest code from my code repo? ...
2
votes
1answer
2k views

Terraform - resource repeated multiple times

I have a terraform plan which consists of multiple aws_sqs_queue resources which more of less share the same config. Before I remove any repeating configs and use variables I wanted to run terraform ...
2
votes
1answer
60 views

Redirect to a custom page on 503 error in Ingress

When our site is getting deployed, the Ingress gets created and before I could get any response I get 503 for 5-6 minutes (time taken to startup). We need to configure our ingress to redirect to a ...
2
votes
0answers
30 views

Is running linux container on windows aws instance possible?

what I'm trying to achieve is running a Linux(ubuntu LST) container inside a windows server 2019 OS. The problem is that the windows OS runs as an AWS instance. There have been problem for me trying ...
2
votes
0answers
84 views

How to deploy StatsD listening on UDP in kubernetes with external loadbalancer on AWS?

Our goal is to have StatsD deployed on k8s cluster running on AWS. Currently all existing applications using UDP to send StatsD metrics. As we understood from the kubernetes docs and tests we ...
2
votes
0answers
44 views

SFTP server with third party user management system?

I understand how to set up SFTP servers on Linux and create users and their passwords manually. So basically, the users get authenticated as normal Linux users get authenticated through /etc/passwd. ...
2
votes
0answers
1k views

CodeDeploy: deployment failed because a specified file already exists at this location

I build an AMI from a 'prototype' EC2 instance I created to confirm everything is working. I create a Launch Configuration and Auto Scaling Group based on the AMI. I associate the Auto Scaling Group ...
2
votes
0answers
47 views

Issue with Spinnaker automated trigger

I am trying to get Spinnaker to have a pipeline use an automated trigger which is an image pushed to an ECR repo. I can add different repos fine but can't seem to see the images. I am following this ...
2
votes
0answers
302 views

Allowing all apps/users access to folder - S3FS-FUSE

I'm running an application on AWS EC2 Ubuntu instance, here's what I've done: - I've mounted S3 bucket as folder with s3fs-fuse using this command (unfortunately as root : sudo): sudo s3fs ...
2
votes
3answers
1k views

Find appropriate AWS policy

I have created a user group in AWS ("developers"). Now I want to attach a policy to the group which will grant the users permission to list, create and update Amplify apps. I am struggling to ...
2
votes
0answers
47 views

How to configure Dedicated IPs for specific SES domain? [closed]

Recently we've requested for 2 dedicated IPs for our SES domain, As most of the mails are going to spam folder. And we've 5-6 SES domains(account.abc.com, help.abc.com, mail.abc.com, etc) in the same ...
2
votes
0answers
628 views

Can I restart a container within an ECS task group without restarting the entire task? [closed]

I know this isn't possible through the AWS portal, but we have a scenario where we would like to restart a container that may have died, which isn't essential. The scenario is along the lines of ...
2
votes
0answers
507 views

Provisioning times for Redis in cloud taking too long, how can we shorten it?

Provisioning a 1 GB Redis cache service on AWS takes around 8 minutes. Doing the same on Azure takes around 16 minutes. Ours Terraform scripts need the call back from the Redis systems. Why is this ...
2
votes
0answers
727 views

How to deploy with AWS CodePipeline a multicontainer docker environment without dockerfile

I'm using simple docker-compose container images. Here's my docker-compose.yml version: '2' services: db: image: postgres:10.2 ports: - "5432:5432" ...
2
votes
1answer
1k views

API gateway and service discovery on Amazon AWS

I'm trying to build an application infrastructure on Amazon AWS following a microservice pattern. However the configuration API gateway and service discovery tool together completely puzzles me. ...
2
votes
0answers
479 views

Elastic Beanstalk: Setting parameters from a .config file in the application bundle [closed]

I am using the Elastic Beanstalk web UI to create an environment, for a single Docker container. I would like to put all the environment options into a .config file in the application bundle. I'm ...
1
vote
2answers
229 views

How can I become a DevOps Engineer? [closed]

Please suggest me a right path to this DevOps career. From blogs Im not getting a well defined path. What all courses I have to take.
1
vote
2answers
123 views

Given a blank slate, tool recommendations? [closed]

so I have 8 months of DevOps experience previously working as a desktop engineer for two and a half years.Starting a new role in the education sector, recently they brought their IT department which ...
1
vote
3answers
76 views

How to make an AWS S3 bucket accessible over HTTP?

Does AWS S3 provide a way to make bucket's files available over HTTP preferably protected with BASIC_AUTH? I mean listing the files (index) and make it possible to download them over HTTP.
1
vote
2answers
61 views

How to get the AWS Access key of an already created Access ID

Inside IAM management, I navigate to Users - User and got to the Security Credentials tab, It looks like this: I see no link to show the access key of the already generated access ID, how to get it?
1
vote
2answers
345 views

Load Balancer and EC2 in same subnet?

I have a custom VPC with 3 public subnets and 3 private subnets. I have three ec2 instances with elastic IP addresses in the public subnets taking traffic on port 80 (security group is configured to ...
1
vote
1answer
304 views

Move Load balancer certificate to another AWS account

I have two AWS accounts. Created a load balancer on "first" account, requested a certificate and using it for HTTPS. Now I need to move this load balancer certificate to "second" account because it ...
1
vote
1answer
124 views

Is it possible to have an aws EKS infrastructure as code?

Is it possible to declare "a complete production level EKS with other aws services" using terraform? I know that terraform has an eks module and an aws provider. But I'm not sure if one can ...
1
vote
2answers
52 views

Spread pods over cluster

Current using AWS's auto-scale policy to start EKS worker nodes (min+desired 10, max 15) on a fixed time every day. There are 120 pods and 30 deployments. Obviously, only one node will be up firstly. ...
1
vote
1answer
51 views

What are the advantages of using AWS nameservers as opposed to servers provided by other registrars?

I am transfering a domain name from namecheap to aws route 53 service. AWS provides you with three options when transfering: Continue to use the name servers provided by the current registrar or DNS ...
1
vote
1answer
39 views

Sending HTTP requests to private EC2 DNS from other EC2 host works, but not from container on EC2 host

I want to make a container hosted on one EC2 host communicate with another container hosted on another EC2 host. Currently, if I send an HTTP request from host A to host B using host B's private DNS ...
1
vote
1answer
31 views

Spin up an EC2 instance from within the application

I am developing the architecture of this application and the way we need to scale is not just stateless API requests, but it's a logical split of responsibilities. In other words, we may only be able ...
1
vote
1answer
284 views

How do I use only an encrypted version of my AWS RDS password in my terraform code?

Is there a way to only have an encrypted version of my RDS password in my Terraform code and for AWS to decrypt it for RDS so you use the decrypted password to login to the RDS? So set my rds ...
1
vote
2answers
790 views

what is better between Jenkins & AWS CodeDeploy for CI/CD

I'm considering what is better and easier to use for CI/CD pipeline between Jenkins and AWS CodeDeploy. e.g. Jenkins server request webhook to git repo(github), and deploy to EC2. e.g. When push to ...
1
vote
1answer
796 views

How to re-enable RDP on AWS-EC2 instance

Accidentally i disabled RDP on EC2 windows machine and now I am not able to access it via RDP, Is there any way to re-enable RDP service on EC2 instance?
1
vote
1answer
38 views

AWS S3 ACLs across accounts

I have two AWS accounts: A and B (viewable from https://console.aws.amazon.com/organizations). I have given an S3 bucket in account A a policy that allows account B to do everything in that bucket. ...
1
vote
1answer
57 views

Docker image registries

We are using AWS EC2 container services and we are using Amazon container registry but the problem with container registry is that it's only available in one region although it's have URI but is ...

1 2 3
4
5
9