Questions tagged [amazon-web-services]

Amazon Web Services (AWS) delivers a set of services that together form a reliable, scalable, and inexpensive computing platform "in the cloud". If you have a question about a specific web service, consider asking on its tag, e.g., amazon-ec2.

Filter by
Sorted by
Tagged with
0 votes
0 answers
31 views

AWS: access private API from public web application

I have: Private API running on an ECS cluster behind an internal load balancer. This API is used by other services inside the VPC. A public Next.js web application. What I need: Give private API ...
revy's user avatar
  • 101
0 votes
1 answer
27 views

Debugging Lambda Connectivity to EC2

I have a simple Lambda deployed into my VPC that is making a call to an EC2 host in the same VPC (and subnet). They both share an SG and I've used the Reachability Analyzer (from the Lambda ENI to ...
Gandalf's user avatar
  • 63
0 votes
0 answers
47 views

AWS EC2 Ubuntu instance launches WildFly (Java / Jakarta EE server) but seems inaccessible via browser

I am trying to setup AWS for a JBoss WildFly 31.0.0.Final to get a demo webapp up and running. So I found this tutorial: https://kamalmeet.com/cloud-computing/amazon-ec2-step-by-step-guide-to-setup-a-...
Kawu's user avatar
  • 101
0 votes
0 answers
51 views

Want to use user_data (hardening script) for EKS nodegroups with EKS module (Hashicorp provided)

I am using EKS terraform module (https://github.com/terraform-aws-modules/terraform-aws-eks) to create EKS cluster and it is working fine. I have written shell script to harden EKS worker and I want ...
user3736754's user avatar
1 vote
1 answer
342 views

How to upgrade to IPv6 for AWS EC2?

Starting yesterday, AWS is charging for IP addresses (IPv4). I would like to upgrade my EC2 instances to IPv6, but I must be missing the docs on how to do that? I can't seem to get an EC2 instance ...
Paul Draper's user avatar
0 votes
0 answers
33 views

How do I debug why my aws iot remote job is stuck in queued?

I have an aws IoT core MQTT broker that's working. I can connect to it and get message to various topics. But when I create a "remote job" https://docs.aws.amazon.com/iot/latest/...
Andrew Arrow's user avatar
1 vote
0 answers
43 views

AWS Batch on Fargate is not allocating the correct number of vCPUs

I have a web application offloading some resource-intensive tasks to AWS Batch, backed by Fargate. It's a very simple setup - a single queue, a single job definition, and a single compute environment. ...
Tadas T's user avatar
  • 111
1 vote
1 answer
84 views

Accessing RDS or EC2 instance without '.pem' key

I am working for a charity who has a few of their services on AWS. They hired an agency years ago to spin up these intranet and tools platforms. I am trying to get a dump of their db, for backup ...
CJ Bradley's user avatar
0 votes
0 answers
25 views

AWS Automatic IAM Roles for Service Users

I have an EC2 instance that has an assigned/assumed role. When I run: aws sts get-caller-identity as the main login user or with sudo it returns the account information expected. However, I have a ...
thaimin's user avatar
  • 123
1 vote
0 answers
57 views

AWS Ingress-nginx loadbalancer: Targets are not within enabled Availability Zones

I have an EKS cluster with the following set up 2 VPCS 1 prod, 1 stage each vpc has 3 subnets 1 public and 2 private each vpc has 1 internet gateway and 1 nat gateway The private subnets are connected ...
David Essien's user avatar
0 votes
1 answer
84 views

EC2: multiple subdomains with one public IPv4 address

i have many EC2 instances, each of which currently has a public IPv4 address associated with it: Instance Public IP DNS juno 7.8.9.10 ec2-1-2-3-4.compute-1.amazonaws.com ceres 7.8.9.11 ec2-1-2-3-5....
barbiefront's user avatar
0 votes
1 answer
87 views

how to block outgoing traffic in ec2 without blocking ssh

I have an EC2 with has public subnet and traffic is flowing through internet gateway. Now, i have an requirement like I have to block all outgoing traffic in EC2. I have tried to restrict the traffic ...
Ravi Teja RVN's user avatar
0 votes
0 answers
115 views

AWS ECR pull-through-cache fetch image via HTTP request to registry

I've set up an AWS ECR pull-through-cache for Docker Hub registry. Say it is available under: 123.dkr.ecr.eu-central-1.amazonaws.com/docker. Now after authenticating using: aws ecr get-login-password ....
fiction's user avatar
  • 173
0 votes
1 answer
51 views

Why my AWS T2.Medium EC2 CPU utilization is at 27% constant, but on running top command shows 100%?

I am running my PHP Laravel application in AWS EC2 instance (T2.Medium, 2 core) through Laravel Forge. For 5 months continuously I am seeing constant CPU utilization of 27% in the AWS console graph. ...
Angom's user avatar
  • 101
0 votes
1 answer
61 views

Unexplained DNS_PROBE_FINISHED_NXDOMAIN

I have a website hosted on http://app.mytender.io. It works half the time, but the other time I get DNS_PROBE_FINISHED_NXDOMAIN. The DNS entries are done in the hosted zone of AWS, and all looks ...
Nickpick's user avatar
  • 145
0 votes
1 answer
68 views

After setting CORS, endpoints of web services are not retrieving data

Well, maybe I am not providing enough information to you all. Hope you can help me, give a clue or hint, or guide me how to advance. I have an application that is consuming data from a web service. ...
Kenzo_Gilead's user avatar
0 votes
0 answers
34 views

Stop EKS/Traefik overwriting Inbound Security Group rules every 2 weeks

I have a kubernetes cluster (EKS AWS Managed) with Traefik Ingress service installed. Now, my understanding is the ingress service creates and manages the load balancer in AWS, and also the security ...
Trent's user avatar
  • 101
0 votes
0 answers
127 views

How does docker swarm handle volumes mounted on replicated services and How would one integrate this with S3?

Setup: A docker swarm with one manager and one worker node (two virtual machines at play). The docker-stack.yml contains two services primary: bitnami/postgresql image setup as the master postgres ...
Ayush's user avatar
  • 101
0 votes
0 answers
22 views

EKS provisions nodes more than maxnodes using Karpenter

Currently I am using EKS with karpenter and I provision EKS cluster with values minNodes: 1 maxNodes: 2 DesiredNodes: 1 Then I setup the karpenter using this link. After Setting it up as referred by ...
Suyog Dahal's user avatar
2 votes
2 answers
11 views

Massive updates to DynamoDB

I receive from provider APIs multiple json item update at once and do not control how much can be received in the sense that sometimes there can be 1 item and sometimes 100k items. these items are put ...
user avatar
0 votes
1 answer
228 views

Redirecting subdomain to another subdomain in AWS

How can I redirect my alpha.example.com subdomain to -> dev.example.com subdomain in AWS route 53? I think to do it that way but I am not sure if this will work, so if you can help me :) Entering ...
AZAZEL's user avatar
  • 9
0 votes
0 answers
21 views

Setting up AWS and Cube.js for Encrypted Connection Between BI Tools and Cube Container

I am working on setting up an AWS infrastructure integrated with Cube, and I need some guidance on how to properly configure it to meet my requirements. Here’s what I’m trying to achieve AWS ...
T Takeshi's user avatar
0 votes
2 answers
220 views

Strongswan VPN from Windows 10: no private key found / 13801

I am evaluating AWS starting with connectivity. As AWS VPN solutions would be cumulatively expensive, I thought I'd start DIY with Strongswan. I already have Strongswan working for our site-to-site (...
Frobozz's user avatar
  • 205
1 vote
0 answers
178 views

Routing outbound traffic through multiples NAT Gateways with a single static IP address

I have an ask from an external customer that is whitelisting our NAT gateways to access their systems and their vendors systems. They said some of their vendors limit the amount of IPs they can ...
Jonathan Palumbo's user avatar
0 votes
2 answers
33 views

How does AWS Dynamodb optimize BatchWrite operation in terms of Write capacity units

If we are trying to insert many records in dynamoDb using batchWrite, then DynamoDb may optimize the BatchWrite operation such that the total size WCU consumed would be less than the total sum of each ...
user avatar
0 votes
1 answer
24 views

How to get friend/business partner to view and edit Lex bots with me in AWS?

Long story short, I want my friend who's also my partner in my startup to help me with developing, testing, and deploying AI chatbots in Amazon Lex via AWS. I have him registered as a user in Identity ...
user avatar
2 votes
0 answers
427 views

AWS VPN Client - "Unknown error ocurred. Try again"

I'm experiencing a persistent issue with the AWS VPN Client and need some assistance. Despite numerous troubleshooting attempts, I'm unable to establish a connection and fail even before reaching the ...
Just Another Nerd's user avatar
9 votes
2 answers
1k views

AWS Graviton Processors: which encryption specs are hardware accelerated?

In testing Graviton instances there seems to be significantly more CPU overhead from AES/SHA functions compared to the same on cheaper/smaller Intel/AMD instances. Do these procs supports hardware ...
Josh Hibschman's user avatar
1 vote
1 answer
32 views

AWS CLI Return Nested Results

I am trying to execute an AWS CLI query for EC2. I have crafted the query below, but the triple nesting seems to be throwing things off for InstanceStatus.Details.Status. aws ec2 describe-instance-...
techguy101's user avatar
0 votes
1 answer
74 views

Spoke VPC over VPN to IGW

Is it possible to modify this solution so a spoke VPC connects to the TGW hub over VPN, and that spoke VPC's internet access is centralized full tunnel? https://aws.amazon.com/blogs/networking-and-...
aaaaaaaaaaa's user avatar
0 votes
0 answers
89 views

gRPC Client -->ALB--->Server

I have gRPC Client with Python code as below and making a gRPC call though ALB but seeing ssl handshake errors.I have root cert in place in client certs directory but still handshake is failing. ...
Azaan Ahmad's user avatar
1 vote
0 answers
66 views

Slow mysqldump export in Amazon RDS

I need to migrate a MySQL database in Amazon RDS to another local environment, but the dump is extremely slow. The internet connection is fine; could there be some restrictions in AWS? For example, in ...
Astora's user avatar
  • 163
-4 votes
1 answer
179 views

Why run multiple containers of the same docker image in single EC2 instance

I am new to docker and my question is based on the following Reddit thread: https://www.reddit.com/r/docker/comments/p7d12j/why_run_multiple_docker_instances_of_1_image_in/ Some comments in the thread ...
mongj's user avatar
  • 1
0 votes
1 answer
76 views

Ping from a network namespace to another EC2 instance not working without NAT rule

I have the below setup. I have setup two EC2 instances. I have added the security group rules on both machine to allow ICMP traffic and both can ping each other. On one machine I have created two ...
thunderbolt's user avatar
5 votes
2 answers
1k views

Thousands of incoming HEAD requests - best way to handle with EC2?

I had unusually high https traffic recently from a couple of IP address with agents masquerading as Windows clients. I blocked the range via 'deny' inside of .htaccess (Apache 2.4) I'm still getting ...
C C's user avatar
  • 475
0 votes
0 answers
71 views

Incorrect dmarc record landing some mail in spam

I have just received notice from one of our partners that some of our emails sent via AWS SES are being flagged by their email provider as potential spoof DMARC. We used route 53 to add all our DNS ...
red house 87's user avatar
0 votes
0 answers
41 views

How to get CloudTrail to record user-data script in the log

I have users who will be able to submit scripts to instances via the aws ec2 run-instances --user-data file://bla.sh option. I have setup CloudTrail to save almost all of the data that I need to log ...
FlippinDemPancakes's user avatar
0 votes
1 answer
125 views

What happens when AWS secrets manager rotates a secret

I'm exploring AWS secret manager for an upcoming project. I got a bit confused around the concept of rotating secrets. It seems I can only keep the secret for a specific duration and after that it ...
user3360140's user avatar
0 votes
0 answers
89 views

AWS App Runner auto scaling configuration for handling occassional spikes

We're serving php:7.4-apache image through AWS App Runner and wanna handle spikes of 40k~ or so requests. But we're running into max queue length has been reached error sometimes. Here's our App ...
Zolbayar's user avatar
0 votes
0 answers
73 views

AWS EC2 networking

I've been trying to understand how exactly networking works for EC2 instances, more specifically I'm coming from on-prem infrastructure where I had dedicated networking devices (switches/routers) ...
talematros's user avatar
1 vote
1 answer
117 views

Strongswan VPN to AWS / connectivity issue / No response back to ping

I create a VPN between an ec2 with strongswan and aws vpn connection attached to a vpn gateway with dynamic routing (bgp). Tunnel is UP. Ping is OK in one way DEST TO CLIENT but not the other way. Can ...
geoffrey delnatte's user avatar
0 votes
2 answers
51 views

S2S VPN on AWS EC2 - routing issue for VPC

I'm trying to prepare VPN setup from scratch. I used Terraform + AWS + Strongswan. Basic diagram is attached here: AWS diagram, S2S VPN So I have VPC_left: 172.32.0.0/16 with subnet_left: 172.32....
Frumbar's user avatar
0 votes
0 answers
146 views

Django on EC2 can't connect to RDS (Same VPC, same subnets)

i set up this environment on AWS: VPC: 1 Public subnet Route table with Internet Gateway 2 Private subnets Route table with NAT I created a subnetgroup with the private subnets and attached it to ...
ale_93_be's user avatar
0 votes
0 answers
44 views

Can't connect instance that is migrated to AWS

I am migrating Azure instance to AWS, I migrated it successfully but when using EC2 instance connect or doing SSH using key pair I am unable to login. How can I resolve this issue? Steps I Followed ...
Adwait Gawade's user avatar
0 votes
0 answers
12 views

Traffic flow between network-interface due to VPC peering

We have a scenario, where we have SBC instance which has three network interface attached to it(1,2,3). SBC instance along with network interface 1(management),2 are deployed in VPC A, where as ...
user391's user avatar
0 votes
1 answer
45 views

Choosing AWS hosting for flutter website

Choosing AWS hosting for flutter website I have a flutter website and i have been thinking to host the site in AWS. I have saw the below features in aws which I can use for hosting my website. AWS ...
Ac. Selvan's user avatar
0 votes
1 answer
90 views

AWS instance gateway using Amazon Linux

I'm trying to create a gateway on an aws ec2 amazon linux machine so that a worker machine without access to the internet can gain access via the gateway. Then I will install a server on it and ...
daniel's user avatar
  • 1
0 votes
0 answers
30 views

AWS - Elastic Beanstalk - failed due to missing certificate

I'm using the same EBS instance for years. Today it started failing, when I restart it. I checked and the reason is there is a certificated included in load balancer, and this certificate is deleted. ...
user2396307's user avatar
0 votes
1 answer
132 views

In a cloud environment, should we alert on high CPU utilisation or high load avarage?

What is the best practice for monitoring the system, should the CPU alerts be based on the regular CPU usage or load average? I'm wondering what approach is being used in big cloud environments.
Borys's user avatar
  • 21
0 votes
0 answers
106 views

How to apply an ssl certificate to a Load Balancer Listener using OCI Certificates

I'm currently working on running a small personal server using OKE and a load balancer. My problem is as follows I attached the OCI certificate to the load balancer listener, but it doesn't work, ...
JJoRi's user avatar
  • 1