Amazon Web Services (AWS) delivers a set of services that together form a reliable, scalable, and inexpensive computing platform "in the cloud". If you have a question about a specific web service, consider asking on its tag, e.g., amazon-ec2.

learn more… | top users | synonyms (2)

6
votes
2answers
6k views

Force HTTPS with AWS Elastic load balancer

I need to redirect all incoming HTTP traffic to HTTPS on my elastic load balancer. I tired using Apache mod_rewrite: RewriteEngine On RewriteCond %{HTTP:X-Forwarded-Proto} !https RewriteRule ...
6
votes
1answer
5k views

How do you recover you RDS master user username?

Resetting the RDS master user's password is simple enough, but how do you find your master users username?
6
votes
2answers
3k views

AWS S3 Backup Strategies - How should I approach backing up S3 buckets?

I am in the process of building a web-app with potential for a massive amount of storage requirements which can be satisfied by amazon S3. My main concern is the usage of API keys on the server, and ...
6
votes
1answer
2k views

AWS t1 to t2 migration: Client.InstanceInitiatedShutdown on new t2 instance

I've had a Linux t1.micro running a small Apache/PHP/Postgresql website for a couple of years now (referred herein as "original instance"). Works like a charm. I wanted to migrate the site to the ...
6
votes
1answer
2k views

Amazon SES e-mails ending in Yahoo & Hotmail Spam folders, even though SPF and SenderID and DKIM are set correctly

This is incredibly frustrating. My Amazon SES e-mails are ending in Yahoo & Hotmail Spam folders, even though my SPF, SenderID, and DKIM are setup correctly. Since this particular site requires ...
6
votes
2answers
2k views

How do you get AWS VPC EC2 instances to be able to see the AWS APIs?

We're spinning up infrastructure inside of an AWS VPC via CloudFormation. We're using auto-scaling groups to bring up VPC-EC2 instances (so, we don't bring up instances directly; ASGs manage that). ...
6
votes
2answers
707 views

Running docker in VPC and accessing container from another VPC machine

I'm having issues while running docker in AWS VPC. Here is my setup: I've got two machines running in VPC: 10.0.100.150 10.0.100.151 both having an elastic IPs assigned to them, both running in ...
6
votes
2answers
480 views

Strategy for maintaining Amazon RDS instance on prod vs development

How do you folks manage your Amazon RDS instances? In production I obviously want to use Amazon RDS with a master-slave replication setup going. Unfortunately this incurs substantial costs to bring ...
5
votes
4answers
8k views

Nginx set_real_ip_from AWS ELB load balancer address

I have a set of Nginx servers behind an Amazon ELB load balancer. I am using set_real_ip (from the HttpRealIpModule) so that I can access the originating client IP address on these servers (for ...
5
votes
9answers
3k views

EC2 IP Address : How can a web server identify db server ip address at startup?

I have a simple 2-tier arrangement - one web server (Websphere hosted on windows), and one oracle db server. The web server needs to connect the oracle database server. I am trying to write a script ...
5
votes
3answers
3k views

The site is using outdated security settings that may prevent future versions of Chrome from being able to safely access it

We're using an AWS ELB to do SSL termination and are having an issue where Chrome is displaying "https" in red with a strikethrough. It says "The site is using outdated security settings that may ...
5
votes
3answers
1k views

does having dedicated instances completely prevent noisy neighbor issues?

Due to sharing of hardware, AWS instances can be prone to 'noisy neighbor' issues, where one or more of your neighbor's instances hog resources from your instance. This article suggests: The most ...
5
votes
4answers
6k views

Crontab to restart service

I am running a web server on an AWS EC2 micro instance. The instance has ~630MB of RAM. With time, I have several httpd processes and very little free RAM. When I restart the httpd service, I end up ...
5
votes
2answers
6k views

CNAME record for Amazon S3 — any drawbacks?

I'd like to make a CNAME record for my Amazon S3 domain, to have nicer URLs. There's not much discussion of this out there on the web, and nothing at all in the Amazon documentation (unless I'm ...
5
votes
4answers
6k views

On AWS do I have to open ports in an EC2 instance's firewall as well as security group?

If I change my SSH port from 22 to 23453, I can no longer ssh in. In more detail, I'm using a Red Hat EC2 instance on Amazon Web Services. This is the second change I've on a fresh install (first ...
5
votes
3answers
3k views

Can't run AWS CLI from CRON (credentials)

Trying to run a simple AWS CLI backup script. It loops through lines in an include file, backs those paths up to S3, and dumps output to a log file. When I run this command directly, it runs without ...
5
votes
3answers
9k views

Configure BIND with database backend and DLZ support

Decided to move my windows based DNS servers to linux. The problem is I need to be able to dynamically update zone files without having to restart bind. It seems the most popular solution is to ...
5
votes
2answers
595 views

Is it feasible/common for people to use only AWS to host PHP/MySQL websites?

What are the drawbacks/limitations when compared to a more traditional managed shared/virtual/dedicated host?
5
votes
2answers
493 views

AWS - how to serve faster to oversea users

We have our infras relying on AWS in the us-east-1 region. (EC2, CloudFront, RDS, ElastiCache) We are now having more and more users from the APAC. Users start to complain about network speed to our ...
5
votes
2answers
8k views

Could not call sign: Could not find certificate request for puppet

I'm getting started with puppet on ec2 using the following guide. https://help.ubuntu.com/12.04/serverguide/puppet.html In the very last step when I try to sign the puppet client from the puppet ...
5
votes
2answers
4k views

Assign multiple Elastic IPs to EC2 instance

When I try and associate a second Elastic IP to a small EC2 instance, the currently assigned Elastic IP is disassociated. Do I need to use a VPC?
5
votes
2answers
1k views

Load Balancing on Amazon (AWS) and staying up to date

I would like to have a load balancer for my site and have the site up to date. The load balancer will take the AMI I select and spin up more of those instances when processing power hits a certain ...
5
votes
1answer
3k views

How do you get Redis connections working within an Amazon VPC private subnet?

I have an Amazon VPC setup with a private subnet containing 2 instances. One of them has redis running on it, the other instance I want to use to connect to the redis server. I have the redis instance ...
5
votes
4answers
1k views

Best Amazon AWS region for Australian website?

What is the best Amazon AWS region to host a website for an Australian audience? Amazon's marketing material seems to suggest that Singapore is the best place, but the ping tests I've performed have ...
5
votes
2answers
3k views

amazon aws - regional data transfer - in/out/between EC2 Avail Zones

can anyone say what this charge item is from the account activity? $0.010 per GB - regional data transfer - in/out/between EC2 Avail Zones or when using public/elastic IP addresses or ELB i launched ...
5
votes
4answers
1k views

Multiple AWS instances and one database

I have a web app that lives on two AWS instances - one instance hosts the site, and the other hosts the actual database (MySQL). The instance hosting the site has an elastic IP pointing to it, which ...
5
votes
1answer
620 views

Lost passwordless sudo and no root access

I have a running AWS vm. The only access I have is using the ssh key (.pem file) to log in as ec2-user which is an unprivileged user. From there, I could user the sudo command without a password. ...
5
votes
2answers
4k views

What algorithm does Amazon ELB use to balance load?

I found this in the official ELB documentation By default, a load balancer routes each request independently to the application instance with the smallest load. but an article on Newvem says ...
5
votes
3answers
2k views

Amazon AWS EC2 + Puppet, get Puppet to know AWS instance tags

I am having a problem with my AWS deployment, fairly new to AWS and Puppet. So coming to my question - can you distinguish puppet nodes with AWS machine tags or CNAME domains? A little background ...
5
votes
3answers
2k views

Can you require MFA for AWS IAM accounts?

Is it possible to require Multi-factor Authentication (MFA) be enabled for specific/all IAM accounts in Amazon Web Services? There are options for password requirements and it's clear how one can ...
5
votes
2answers
6k views

Amazon Web Services - How do I use IAM to restrict a single user to managing a single EC2 instance?

I would like to: Create an IAM user Restrict that user to be able to have full management over a single EC2 Instance only. Example: While the AWS EC2 account has 10 instances, the new user, ...
5
votes
2answers
5k views

Keep alive timeout not being respected on Amazon ELB

I'm using Tomcat 6.0.24 on Ubuntu (JDK 1.6) with an app that does Comet-style requests on an HTTPS connector (directly against Tomcat, not using APR). I'd like to set the keep-alive to 5 minutes so I ...
5
votes
2answers
564 views

AWS VPC internet gateway and AWS services

Am I doing something wrong or is the AWS VPC ec2 instances not able to reach any of the AWS managed services (s3/sns/sqs) without a public route to the Internet Gateway in the routetable? I was told ...
5
votes
5answers
5k views

AWS: Multi-region setup using single RDS instance

I'm trying to scale our web application (PHP, MySQL, memcache) in a multi-region scheme. Currently we are using a setup with two EC2 instances behind an ELB and an RDS instance, all of them in US-EAST ...
5
votes
1answer
2k views

1 EC2 instance per website - manage multiple websites on Amazon cloud using EC2

I'm managing multiple websites, most based on WordPress and all are based on LAMP stack. I'm moving all my websites to Amazon cloud. I'm new to AWS and my plan is moving 1 website by one, starting ...
5
votes
4answers
5k views

Amazon EC2 tools for Debian?

What is the recommended way of getting command-line Amazon EC2 tools on Debian? So, basically the same as this question, but for EC2 instead of S3. Ubuntu has ec2-ami-tools and ec2-api-tools, but I ...
5
votes
3answers
8k views

How to create EBS based EC2 AMI from scratch?

after Amazon announced the new EBS based AMIs, I'm wondering if it is or will be possible to create new AMIs that are not based on the existing Fedora/Windows AMIs. The documentation says: The ...
5
votes
1answer
122 views

How can I tell where an Amazon AWS key is being used?

I have inherited an Amazon AWS environment in which the Root account key has been widely distributed for the purposes of making backups to S3 buckets. I need to track down where the key is being ...
5
votes
3answers
767 views

in cloudformation is it possible to create a reusable string?

i have a string the is formed from a number of variables which i use for many different things such as Tags and host names. is there a way of creating a reusable string that i can just Ref though ...
5
votes
3answers
883 views

Running Rails3 with force_ssl = true, with nginx, on AWS EC2 with SSL terminated by an ELB, setting up health check

I want to run my entire Rails app with SSL, so I thought to use Rails' global force_ssl config option, which works great, except that the ELB's healthchecker will never work because if I set it to ...
5
votes
2answers
2k views

AMI with or without reboot on AWS EC2

When creating AMI's from an EC2 instance I always check "no reboot", I've been wondering, what are the pros/cons of creating images with/without a reboot? Does keeping the server live affect the ...
5
votes
4answers
519 views

Is there a decent GUI for Amazon Route 53?

Because frankly it's a bit tricky without...
5
votes
2answers
3k views

AWS CloudFormation: VPC default security group

I have a cfn stack that (among other things), creates a VPC, several security groups, and a handful of EC2 instances. It's trivial to assign security groups that are created within the stack to ...
5
votes
2answers
6k views

What are the pros and cons of AWS Elastic Beanstalk compared with other deployment strategies?

I'm pretty new to the whole Netflix OSS stack and deployments in general. As a background for my current level of knowledge ops-wise, my main role is as a front-end application engineer. However, I ...
5
votes
3answers
2k views

AWS ELB as backend for Varnish Accelerator

I am working on a large deployment on AWS that has high uptime requirements and variable loads throughout the day. Obviously, this is the perfect use case for ELB (Elastic Load Balancer) and ...
5
votes
3answers
1k views

Tracking costs within one AWS account

I have what I'm sure is a very common problem. Our company has many projects and groups working for different clients. We do a lot of our development work in the cloud and deploy our solutions there. ...
5
votes
3answers
3k views

Deploy an AWS Auto Scaling groups using Chef Server

You can, for example, to deploy an an Auto Scaling groups consists of web severs, ELB and DB using AWS CloudFormation (with Chef server): ...
5
votes
2answers
833 views

Options for PCI-DSS on AWS - file integrity monitoring and intrusion detection

I need to deploy some file integrity monitoring and intrusion detections software on AWS instances. I really wanted to use OSSEC, however it does not work well in an environment where servers can ...
5
votes
3answers
3k views

Periodic spiky CPU usage by winlogon / LogonUI

I've noticed that my AWS server occasionally starts using a bunch of CPU for no particular reason, looking something like this: Observe that it does not occur at specific times, but has a very ...
5
votes
3answers
1k views

Is AWS's Elastic Load Balancer a single point of failure?

I am looking at moving our application up to Amazon Web Services. The plan is to have all of the EC2 instances mirrored across two availability zones. Due to data transfer costs, we will be staying in ...