Questions tagged [amazon-web-services]
Amazon Web Services (AWS) delivers a set of services that together form a reliable, scalable, and inexpensive computing platform "in the cloud". If you have a question about a specific web service, consider asking on its tag, e.g., amazon-ec2.
384
questions
2
votes
1
answer
4k
views
How to set up multitenant Route53 subdomains with parent domain not on Route53?
My goal is to be able to add/drop subdomains for a multi-tenant app via Route53: tenant.example.com. Account provisioning should place the new tenant on a hosting node and then add the newly onboarded ...
- 8,303
2
votes
5
answers
5k
views
Is it possible to create a VPN link between AZURE VNET and AWS VPC?
As I found solutions on making site-to-site VPN between Azure and AWS using a software VPN server, I'm asking myself if it's possible to connect the VPN gateways (Azure VNET / AWS VPC) directly.
Is ...
- 133
2
votes
1
answer
3k
views
Can I use IAM Roles for Ansible
Apparently the AWS Access Key and Secret Key are optional parameters for the AWS Cloud Modules, however the places where the ansible would pick up those values are from Environment variables.
Can we ...
- 400
2
votes
2
answers
1k
views
Amazon EC2, fastest way to get a node into an existing cluster
I'm new to Amazon AWS. A lot of the time I hear about people folks spawning instances and almost instantly putting them behind a load balancer and into an existing cluster.
In the traditional world ...
- 1,981
1
vote
1
answer
3k
views
Cannot connect to my remote server via ssh
I'm trying to connect to a remote AWS (Ubuntu) server using SSH and keep getting this error msg:
Load key "/home/potatouser/.ssh/dashboard.pub": invalid format
Permission denied (publickey).
On my ...
- 121
1
vote
1
answer
323
views
Can I use the metadata API to check if an instance is being terminated?
Using Windows server 2016 instances.
I want the instance to run a local command before it terminates.
I can have a script run when windows is shutting down.
I would like the script to check if the ...
- 4,253
1
vote
1
answer
281
views
AWS auto-scale shared Wordpress web server - AMI vs user scripts
I have a shared Wordpress hosting server with approximately 50 sites on it, which is fully configured via Ansible.
I'm trying to find a good boundary between
a) updating AMIs every time a site is ...
- 131
1
vote
1
answer
284
views
How do I back up AWS S3 and EBS to a non-Amazon provider?
We've centered most of our operations on AWS, and love the ease of use there. However, every once in a while, the paranoid side of my brain wonders what could happen if, say, the bad guys got hold of ...
- 687
0
votes
2
answers
2k
views
Created 100GB ec2 instance, but only shows 10GB?
I just created a new EC2 instance of 100gb with only 1 storage disk.
However, my df -h output shows the following :
[root@ip-10-252-37-164 ~]# df -h
Filesystem Size Used Avail Use% ...
- 325
0
votes
1
answer
608
views
Solution for PHP / MySQL website loading fast in multiple regions [closed]
I host am ExpressionEngine based website on a single Amazon EC2 instance in the US East (Virginia) region. I use Ubuntu.
The website allows members to post their content, and displays it for other ...
0
votes
1
answer
86
views
Do you need separate IP addresses for each nameserver for an EC2 webserver?
Do you need separate elastic IP addresses for each nameserver - say NS1, NS2 - for an EC2 webserver?
- 519
0
votes
1
answer
1k
views
Can't access Nginx webserver after configuring SSL (Certbot, LetsEncrypt)
I'm brand new to AWS and web servers, using nginx for this project & MERN stack for the code. Anyways I got my website up and running using this tutorial, and used this tutorial (uses letsencrypt ...
0
votes
2
answers
4k
views
Best practice disk partitioning for Ubuntu server cloud image?
I have read in several places that it's good practice to mount /, /home and /var on separate partitions for a server, as a way of mitigating the risk of an unwanted app/action filling-up the disk.
In ...
- 155
0
votes
0
answers
2k
views
AWS S3 bucket policy for get and upload
I have two buckets each with their own goals. So far I cannot understand the complicated configuration of bucket settings. It seems there are three things to configure
Block public access
Bucket ...
- 133
0
votes
2
answers
3k
views
ip routing for extra eni on RHEL ec2 instances
I have noticed that when one add an additional ENI on an ec2, getting routing to work is so difficult and there is no documentation anywhere to refer to.
I do know that if one uses the Amazon Linux ...
- 513
0
votes
2
answers
263
views
EC2 multiple instances fixed IP
I am new to AWS and I have a question. I want to host a website on two EC2 instances. From what I read, if I stop the EC2 instance the public IP will change. In my case, Route 53 should route traffic ...
- 103
0
votes
1
answer
585
views
Domain redirecting to wrong S3 bucket
I'm currently trying to set up a small static website with my domain from NameCheap using AWS S3, but I'm having trouble correctly pointing requests to the corresponding S3 bucket.
These are my ...
0
votes
1
answer
4k
views
set up single directory ftp access for customer on Ubuntu
I have a user who like to use the our Bitnami AWS ec2 instance to store podcasts. Up to this point they have been using http://www.lemonzdream.com/podcastmaker/ with MobileMe. Now that MM is dead, ...
- 215
-1
votes
1
answer
78
views
AWS access as company owner
Our company uses AWS, however the owners are not technical people. Legal aspect aside, is it possible to gain access to an AWS organization if the CTO doesn't want to give back username and password?
...
- 133
122
votes
7
answers
161k
views
What Linux distribution is the Amazon Linux AMI based on?
Amazon Web Services (AWS) offers an officially supported Amazon Machine Image (AMI), but it doesn't indicate which Linux distribution it's based upon.
Is the official Amazon Linux AMI based on ...
- 2,093
87
votes
8
answers
69k
views
Route 53 doesn't allow adding DKIM keys because length is too long
Here is how I enter the value for DKIM key:
"v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwztXzIUqic95qSESmnqX U5v4W4ENbciFWyBkymsmmSNOhLlEtzp/mnyhf50ApwCTGLK9U7goo/ijX/wr5roy ...
- 1,127
80
votes
8
answers
240k
views
AWS RDS connection limits
RDS server come up with 40 connection max, as in the following documentation
I am using Magento 1.9, and at some points, i reach the max number then website is out of service.
Do you have any ...
- 913
68
votes
2
answers
20k
views
Why does AWS recommend against public S3 buckets?
"We highly recommend that you never grant any kind of public access to your S3 bucket."
I have set a very granular public policy (s3:GetObject) for one bucket that I use to host a website. Route53 ...
- 791
53
votes
3
answers
83k
views
Rsync to AWS S3 bucket
For a server I am hosting a website on I want to backup the data and settings to an S3 bucket. I found out that you can't directly use rsync to backup to an S3 bucket. Is there another way to achieve ...
- 653
50
votes
5
answers
48k
views
Can't connect to EC2 instance in VPC (Amazon AWS)
I've taken the following steps:
Created a VPC (with a single public subnet)
Added an EC2 instance to the VPC
Allocated an elastic IP
Associated the elastic IP with the instance
Created a security ...
- 603
48
votes
5
answers
65k
views
Is there a cloud-based reverse proxy solution in AWS? [closed]
The system
I have an API deployed on EC2 machines on AWS. Incoming HTTPS requests are passed to an elastic load balancer. The load balancer handles the SSL, and passes the request to an Nginx server, ...
- 13.6k
46
votes
5
answers
98k
views
Why can't I reach my Amazon EC2 instance via its Elastic IP address?
The server works fine via the Amazon assigned DNS entry, but I cannot reach it (using a browser) via the Elastic IP address Amazon assigned the box. Ping does not work either. I am trying to confirm ...
- 563
37
votes
1
answer
32k
views
Should I append a dot (.) at the end of my DNS urls?
I've noticed that AWS's DNS service (Route53) appends a dot (.) at the end of every DNS URL:
ns-xxx.awsdns-yy.co.uk.
ns-xxx.awsdns-yy.net.
ns-xxx.awsdns-yy.org.
ns-xxx.awsdns-yy.com.
Question: Is ...
- 1,597
36
votes
16
answers
51k
views
Can't run AWS CLI from CRON (credentials)
Trying to run a simple AWS CLI backup script. It loops through lines in an include file, backs those paths up to S3, and dumps output to a log file. When I run this command directly, it runs without ...
- 6,051
35
votes
4
answers
52k
views
Where does Amazon publish the range of IP addresses used for EC2 instances by region?
How can I keep updated of changes to the range of IP addresses that Amazon will use for EC2 instances. I want to add a range of IPs to my firewall settings to allow access to my 'ground based' mysql ...
- 654
34
votes
2
answers
41k
views
No Cache-Control Header for files from AWS CloudFront with S3 Origin
We just migrated to Amazon AWS. We currently have an EC2 instance that's working well. It's running Nginx in front and Apache in the back-end. That's running well also. All sites are launched properly ...
- 2,006
34
votes
6
answers
38k
views
Can you require MFA for AWS IAM accounts?
Is it possible to require Multi-factor Authentication (MFA) be enabled for specific/all IAM accounts in Amazon Web Services?
There are options for password requirements and it's clear how one can ...
- 853
33
votes
3
answers
18k
views
How can I reuse existing resources in CloudFormation?
I have an S3 bucket as a resource in my CloudFormation template, with DeletionPolicy set to Retain. This works as expected: when deleting the stack, it does indeed retain the bucket. However, when I ...
- 6,237
28
votes
3
answers
40k
views
Nginx Solution for AWS Amazon ELB Health Checks - return 200 without IF
I have the following code that is working on Nginx to keep the AWS ELB healthcheck happy.
map $http_user_agent $ignore {
default 0;
"ELB-HealthChecker/1.0" 1;
}
server {
location / {
if ($...
- 515
28
votes
5
answers
39k
views
How to download public key from Amazon AWS?
I have a running amazon ec2 linux instance associated with a keypair (p1) and I have downloaded the private key to my home desktop. Now at work, I created a keypair (p2) on my work desktop and ...
- 405
27
votes
9
answers
34k
views
Is it possible to restrict AWS users/accounts to a specific region?
We run a number of AWS services in the eu-west-1 region. Unfortunately it seems that a lot of our developers and other employees who need to create temporary resources forget about this aspect of AWS ...
- 2,213
27
votes
2
answers
19k
views
Can't upload certificate to AWS
I'm doing:
aws iam upload-server-certificate --server-certificate-name MysiteCertificate --certificate-body Downloads/mysite/mysite.crt --private-key mysite.pem --certificate-chain Downloads/mysite/...
- 901
26
votes
5
answers
86k
views
Why can't I ping my freshly set up amazon web service EC2 instance?
I was following this tut on how to set up a EC2 instance on Ubuntu but qhen trying to execute ssh command on my IP address, I had an operation Timeout.
So I tried to ping it but no chance neither.
...
- 391
26
votes
8
answers
50k
views
Why can't I ssh into my new EC2 Instance?
I created a new instance (tiny, 64 bit AMI linux from Amazon)
Created a new key pair called "mir".
I downloaded mir.pem and put it in my ~/.ssh folder.
I even did ssh-add mir.pem.
Then I tried to ...
- 8,591
25
votes
3
answers
12k
views
Shrinking Amazon EBS volume size
I have seen this answer for growing EBS volumes, but I would like to shrink one.
The default Ubuntu Server images are 15 GB while I really need only 2 GB max (I use a different volume for data). Is ...
- 1,679
23
votes
2
answers
12k
views
Aws vpc default route table in CloudFormation
Am I missing something but is there no way to add a route via CloudFormation to the default route table that comes provisioned with a VPC?
- 523
22
votes
2
answers
15k
views
How can I see my IOPS burst credits?
I've been reading some EBS docs
and they are talking about "I/O credit balance"
How can I view my current (or historical) credit balance?
Each volume receives an initial I/O credit balance of 5,...
- 417
21
votes
2
answers
16k
views
Restore a versioned S3 bucket to a particular point in time
Let's say I've got S3 versioning enabled for my bucket: http://docs.aws.amazon.com/AmazonS3/latest/dev/Versioning.html
Then, let's say someone (for example, junior employee) messes up the S3 bucket (...
- 313
21
votes
2
answers
20k
views
AWS Fargate service: scale to zero?
I've recently migrated a small web application to AWS using Fargate and Aurora Serverless. The application doesn't get much traffic so my goal is to save cost while no one is using it. Aurora ...
- 407
21
votes
3
answers
39k
views
EC2 Update my existing AMI
I'm using Elastic Load Balancing to load balance my Auto Scaling Group, for that I have a private AMI that hold my application server (Tomcat) and my web app deployed to it as war ... Now everything ...
- 313
20
votes
2
answers
16k
views
AMI with or without reboot on AWS EC2
When creating AMI's from an EC2 instance I always check "no reboot", I've been wondering, what are the pros/cons of creating images with/without a reboot? Does keeping the server live affect the ...
- 382
20
votes
2
answers
34k
views
How to upload a file into S3 bucket using CloudFormation script?
How do I upload a file into my AWS S3 bucket CloudFormation template?
AWSTemplateFormatVersion: '2010-09-09'
Resources:
S3Bucket:
Type: AWS::S3::Bucket
Properties:
AccessControl: ...
- 303
18
votes
6
answers
10k
views
How to upgrade to the latest AMI in AWS Elastic Beanstalk?
I'm running an application on AWS Elastic Beanstalk, and it looks like I need to create a new environment if I want to use the latest AMI.
If I knew what the latest AMI id was, I could update it in ...
- 4,607
17
votes
4
answers
43k
views
Is it possible to change the EBS volume to different availability zones?
I have a server created in "eu-west-1c" availability zone and I tried to attach the volume created in "eu-west-1a" availability zone to "eu-west-1c" but the server created in "eu-west-1c" is not ...
- 259
17
votes
1
answer
31k
views
How to “switch role” in aws-cli?
I'm contracting for a company that has multiple aws accounts. They gave me access to the Login account and I "Switch Role" in the web console to the Project account I work on. In the web gui it works. ...
- 370