Questions tagged [amazon-web-services]

For questions about Amazon Web Services (AWS) in general. If your question is about a specific Amazon web service please use that tag, e.g. [amazon-s3], [amazon-ec2], [amazon-ecs], [aws-codedeploy]

Filter by
Sorted by
Tagged with
1
vote
1answer
57 views

Docker image registries

We are using AWS EC2 container services and we are using Amazon container registry but the problem with container registry is that it's only available in one region although it's have URI but is ...
1
vote
1answer
517 views

Is it possible to host an ECS cluster with p2 or other GPU instance types?

It seems from the GUI that it is not possible (the GPU instance types are simply not listed when you go to create an ECS cluster and look at the list of instance types). However, there is an official ...
1
vote
1answer
24 views

AWS Inspector “High Risk” : port open to the internet with IP whitelisting

We use AWS Inspector to identify risks with our AWS assets. Today I received a finding, with a "high" severity. The finding said that the FTP port was open to the internet. However, after ...
1
vote
1answer
171 views

What does “eksctl create iamserviceaccount” do under the hood on an EKS cluster?

AWS supports IAM Roles for Service Accounts (IRSA) that allows cluster operators to map AWS IAM Roles to Kubernetes Service Accounts. To do so, one has to create an iamserviceaccount in an EKS cluster:...
1
vote
1answer
71 views

Ansible dynamic inventory using AWS plugin — how to obtain internal DNS records or private IP?

Seeking help from those who've worked with dynamic inventory in Ansible. I have Ansible set up with the aws_ec2 plugin (not using the python script as it's been too problematic). Currently, I'm only ...
1
vote
2answers
59 views

Populate Database

I am using Terraform Cloud to build the infrastructure. One of the resources is a postgresql database. What is the best way to populate the database by creating tables, multiple schema etc after the ...
1
vote
1answer
19 views

Are there serious problems with an EC2 auto-scaling AMI that automatically downloads newest server from git?

I'm converting some servers from manual scaling (with a load balancer) to auto-scaling. I'm currently using an Ansible script to manage upgrades, and I wouldn't want an automatically created instance ...
1
vote
1answer
2k views

AWS API Gateway: 403 forbidden with disabled API key; error from cloudfront

How can happen that with a Lambda/API Gateway combination, if no explicit Cloud Front configuration has been done, in an error response header they mention CloudFront? header: x-amzn-ErrorType: ...
1
vote
1answer
829 views

How to programmatically enable and disable SQS triggering AWS Lambda?

I have a requirement where I want to stop my lambda from receiving messages from SQS. And I want to implement this like an API which can toggle between the disabling and enabling of the AWS Lambda ...
1
vote
1answer
44 views

Running AWS lambda in serial (for a given parameter)

I'm not sure if this is the best place to ask this. But we've currently got something in Microsoft Azure where we have their serverless functions (Azure Functions) running in serial based off a ...
1
vote
1answer
402 views

Why do I need a Nat Gateway for ECS containers using AWSVPC?

So here is a scenario: I have a route table that routes all traffic to the internet gateway, and I have a subnet associated with that route table, which makes it a public subnet. Now I create another ...
1
vote
1answer
74 views

Unable to send cloudwatch logs to loggly using a blueprint lambda - Invalid ciphertext

I am trying to use the loggly Lambda blueprint to send cloudwatch logs to loggly. I am doing this because I have a bunch of lambdas that I need to have a single point of viewing logs. I've followed ...
1
vote
1answer
27 views

AWS: Onboarding on premise instance

Is there a way to onboard the Raspberrypi device in AWS. So that the same device can be managed using ec2 console and it can seamlessly work with the rest of AWS services? I am just an experimental ...
1
vote
1answer
970 views

AWS API Gateway as an http proxy to ALB

I have a setup of API Gateway proxying all the requests to my EC2 instances behind load balancer (ALB). But I want api endpoint to have a nice domain my-api.mydomain.com. I'm trying to accomplish that ...
1
vote
1answer
284 views

AWS launch template create-before-destory?

In terraform, to reduce downtime when creating a new auto-scaling-group behind an existing load balancer, you can use a launch configuration and set create-before-destroy. Launch templates are the ...
1
vote
1answer
35 views

Issue connecting to ECR using Spinnaker on Kubernetes

I installed Spinnaker onto a Kubernetes cluster via Helm. I have tried to add the ECR registry as per the docs and so far not working. I found that the aws cli is missing even though in issue 2394 it ...
1
vote
1answer
343 views

How can I enable active tracing by default for an AWS Lambda function using Terraform?

On the console, there’s the option to enable active tracking for X-ray tracking but I can see this in the Terraform aws_lambda_function resource the aws_xray_sampling_rule resources? I'm currently ...
1
vote
1answer
70 views

API Gateway - How Deploy API works?

After creating API Gateway with two API names and integrating with lambda function, AWS documentation recommends to deploy this API, as shown below: 1) What does deploy API mean? How creating API ...
1
vote
1answer
353 views

aws - Connect two private subnets?

I'm testing some cloudformation infrastructure templates, and I noticed that most of the examples include routing tables to connect private subnets to public subnets, but my question then is: if two ...
1
vote
2answers
2k views

Unit Test AWS Glue job in CodePipeline

I have an AWS Glue job written in Python that I would like to perform pyunit tests on. However, from reading and experimenting on my own, there seem to be quite a few dependencies on the Glue service, ...
1
vote
1answer
156 views

How can I 'aws s3 sync' two buckets, which are located in different accounts

I'm trying to use 'aws s3 sync' on the awscli between two accounts. Account A, I own. Account B, Owned by a third party. Account B has given a user:jon on account A permission to a bucket through ...
1
vote
1answer
79 views

How can I expose port 3389 using a secure approach

Within our legacy infrastructure we need to keep port 3389 exposed so that we can remote desktop into this server (note that we can't go back and utilize IaC to prevent this). We currently restrict ...
1
vote
1answer
875 views

Artifacts mentioned in secondary-artifacts section not getting uploaded to s3 bucket

I have created a codePipeline project through which my application get build using maven and it's artifacts are uploaded to s3. I'm trying to upload multiple artifacts as a single zip file to s3 ...
1
vote
1answer
32 views

RDS IOPS utilizing fully

I have upgraded RDS mysql to 1000 IOPS from 120 IOPS, But same database operations utilizing more than 1000 IOPS now. Is there any way to implement RDS cluster or Is it possible to make use of lambda ...
1
vote
2answers
2k views

Always execute post statement in a jenkins pipeline when a conditional statement is met

Although it seems counterintuitive, I would like to execute an always statement when a conditional is met. In my pipeline, my post statement should always destroy my AWS CloudFormation Stack if a ...
1
vote
1answer
322 views

How do I configure an AWS network load balancer with an A record in Cloudflare

I am trying to use an AWS Network Load Balancer to point at a group of servers. I would then like to take my DNS and point it at the load balancer. However, after I set everything up I cannot find and ...
1
vote
1answer
167 views

Deploying a SaaS solution which is custom for every customer

So we have 5 repositories (Individual web services ex. CMS/E-commerce and internal APIs) which are currently deployed as Docker containers. What we plan to do is to use these services and make a ...
1
vote
2answers
747 views

AWS REST API Query

How to authenticate against AWS to make API query ? https://iam.amazonaws.com/?Action=ListAttachedUserPolicies&UserName=ja&Version=2010-05-08&accesskey and getting: <Code>...
1
vote
2answers
73 views

How do you change a secret that half of your production applications use right now?

The context of the question is Secrets management. As the title says, how do you change a secret that half of your production applications use right now?
1
vote
1answer
29 views

How to determine actual cost of specific spot instance

Is there a way to know how much a specific spot instance is actually costing? My only idea is to give it a specific tag and wait to see it show up in the billing report. But what I really want is to ...
1
vote
1answer
2k views

Why does the datasource “external” always fail?

so my issue here is that terraform really does not like a command I'm trying to run using an external datasource. I'm trying to hack my way around a problem where terraform wont wait for a KMS ...
1
vote
1answer
39 views

How CircleCI, Terraform and AWS should interact in CI/CD Pipeline

I'm new to devops and I'm have a hard time finding resources to help me with this question. My Goal is to have an automated CI/CD pipeline to launch my project. Basically I have a GitHub repo with a ...
1
vote
1answer
153 views

Can you remove a commit made to a branch on AWS code commit?

I know of git rebase but don't know if it can be used with AWS code commit? Or if there's any other method of removing a commit to revert back to before it was made and merged?
1
vote
1answer
56 views

In k8s, do the controller nodes have to be in same VPC as the worker nodes for a cluster?

I'm new to k8s and trying to grasp the infrastructure concepts, and trying to apply them in AWS. I know a k8s cluster has a control plane, which has the management nodes, and a data plane, which has ...
1
vote
1answer
13 views

Mass remove/add to multiple security groups cross region

Would it be possible to create a script or use something like terraform to mass remove/add security group entries across several regions under the one account based on the security group name? ...
1
vote
1answer
55 views

How to remove the AWS Backups

I'm using AWS Backup to create snapshots of my production server. My current backup plan has infinite retention and that ran me into gigabytes of storage. What would be the best way to fix that? I saw ...
1
vote
3answers
106 views

What minimal IAM permissions are needed by AWS Chatbot so that it can show logs?

The AWS service called Chatbot allows CloudWatch Alarms to be relayed into a Slack channel. The message includes two buttons: Show logs and Show error logs. However, when I press either of these ...
1
vote
2answers
25 views

DNS Issues with Cloud formation template

I am trying to automate the creation of an EC2 instance with CloudFormation but am running into issues with DNS. Once the instance is created it can't seem to resolve any hostnames. I try to ping a ...
1
vote
1answer
167 views

Force role session name in AWS IAM

I want to enforce users to use their IAM username as the role session name when assuming a role in AWS. I've tried the following condition in IAM policies: { "Effect": "Allow", ...
1
vote
1answer
33 views

What is the best way to set up a CI/CD pipeline on ECS?

There are so many options: Docker-compose with ECS cli looks the easiest solution Terraform CloudFormation (looks complex!) Ansible I am only interested in setting up a basic ECS docker set-up ...
1
vote
1answer
16 views

AWS Setting instance to use domain from another account

We're transitioning between accounts and we have an app on our new account but we want to use the domain from our old account. We plan on shutting off the old account soon and transitioning everything ...
1
vote
1answer
193 views

Use Sqlite database on ECS

I have an application which uses SQLite database and want to migrate it to AWS ECS service. It's dockerized and have access to DB file via mounted volume. Is there a way to make this work with ECS? (...
1
vote
1answer
63 views

Best AWS EC2 instance class for general Kubernetes cluster

Hi We are deploying a fairly standard multiple purpose (data replication workers and some nginx web proxies) in an EKS cluster, and wondering what EC2 instance class people recommend for this workload....
1
vote
1answer
42 views

Is there a way through which I can control type of load balancer like round robin , least-connections etc using helm charts?

I am researching different types of loadbalancing methods available through kubernetes .I want to implement & see before deciding on one .I'm stuck at how to actually define typeof-loadbalancer.If ...
1
vote
1answer
1k views

Terraform error Reference to “count” in non-counted context for resources not necessarily data

here's my part of my code that I am having issues with. Unfortunately I could not understand the relationship between the last answer, despite being almost what I need, and my situation. data "...
1
vote
1answer
8 views

Unable to start step function after account move

I recently moved my development account away from my prod one, everything seemed fine except I have a service that runs a lambda to start a step function - not ideal but used to work. My issue comes ...
1
vote
1answer
373 views

User data in original windows ec2 instance does not get executed in custom ami

I created a windows Ec2 instance with user data in it. In my ec2 instance I downlaoded git and installed it. Later in EC2 instance, I provided it with the user data which was supposed to download a ...
1
vote
1answer
518 views

RDS DB migrations using ECS and Fargate

I run my app with Docker and ECS. How can I handle database migrations? With fargate there doesn’t seem to be a way to SSH into the container to run any commands so I can’t run my RDS MySQL migrations ...
1
vote
2answers
87 views

Cloud service for Django app deployment

We are having webapp which is use Django and Mysql which run in Windows using Apache. Now we are planing to move into cloud service like 1) Google cloud 2) AWS 3) Azure So to deploy existing ...
1
vote
2answers
327 views

s3fs to mount S3 bucket with iamrole on non-aws machine

I am trying to mount S3 bucket on my on-premises CentOS-6 server using s3fs as below: [roots@myhost ~]# s3fs bucket-name /mnt/s3mnt -o uid=1001,gid=1001,allow_other,umask=022,iam_role=iam-role,...

1
3 4
5
6 7
9