Questions tagged [amazon-web-services]
Amazon Web Services (AWS) delivers a set of services that together form a reliable, scalable, and inexpensive computing platform "in the cloud". If you have a question about a specific web service, consider asking on its tag, e.g., amazon-ec2.
8,748
questions
0
votes
0
answers
12
views
RDS in the same security group does not allow connection whilst another does
I had a similar issue with EC2 (not solved yet: SSH to EC2 times out, but other instances in the same security group are reachable) and here is the same with RDS.
I have existing RDS running with SG ...
- 101
-1
votes
0
answers
15
views
How to view AWS Resources Groups - All supported resource types using AWS CLI
I'm attempting to replicate the ability to view all resources via cli. The way to perform this in the aws gui is Resource Groups > Tag Editor > select all supported resource types from Resource ...
- 1
0
votes
2
answers
30
views
SSH to EC2 times out, but other instances in the same security group are reachable
Something really weird happened to one of my EC2 istances.
So I have a security group and a bunch of instances associated with that group. I can SSH into all of those intances.
I created a new ...
- 101
0
votes
0
answers
37
views
Wrote a ansible-playbook code, In that code other than restart all the others things are working; Handlers not working
Cant restart by using handlers,
- hosts: all
remote_user: ec2-user
become: yes
vars:
ports: 1024
tasks:
- name: Add repository
yum_repository:
name: jenkins
...
- 1
0
votes
1
answer
88
views
Fluent-Bit - How to extract part of a file name and append it to log_stream_name for Cloudwatch log group
New to Fluent-Bit and looking for some guidance on this.
Latest version of Fluent-Bit is installed on ec2 and successfully running and working.
I am pushing logs from /var/log/nginx... to Cloudwatch
...
0
votes
0
answers
12
views
AWS IAM policy for partial username match (extract username from SSO)
We are using single sign-on for AWS users, so when a user logs in they assume a role, and they don't have an actual IAM user account.
We use CodeCommit, which requires an SSH key added to an IAM user.
...
- 1,145
2
votes
2
answers
416
views
How can I know which AWS S3 bucket(s) an AWS key and secret key that can access?
I have an AWS key and secret key that can access some AWS S3 buckets. How can I know which ones?
- 1,194
1
vote
1
answer
80
views
NAT gateway costs on AWS
I have a django app on AWS using ECS Fargate behind a VPC. A NAT gateway is required with this setup, but most of the costs are from the NAT gateway.
How I can reduce this? My docker image is 600 MB. ...
- 119
0
votes
0
answers
26
views
Client --> AWS ALB --> AWS Lambda: connection lost somewhere, how to identify?
The client made an API request.
Client --> ALB --> Lambda
Lambda worked fine with a response. Lambda duration is only about 3 seconds.
The client encountered timeout at 15th second.
The ALB ...
- 111
0
votes
0
answers
23
views
Is it possible to deploy Milvus on Kubernetes without using Helm?
I'm trying to deploy an application on Kubernetes using a Helm chart, specifically the storage classes, following the instructions provided in the documentation (https://milvus.io/docs/eks.md). ...
- 1
0
votes
0
answers
13
views
Redirection of Domain in Route 53 and AWS
I have help desk created in Zendesk, but the zendesk provided an URL with their domain ("example.zendesk.com"). I wanted to redirect this service with my domain name, so I added an Route 53 ...
- 101
0
votes
2
answers
49
views
Wordpress and MySQL on same EC2 instance, different subnets. One public one Private
My goal is to have a single EC2 instance containing both WordPress and its MySQL database on same VPC and have the WordPress available on the public subnet and MySQL on the private subnet. The purpose ...
- 101
0
votes
2
answers
51
views
Windows server spot instance shuts down randomly (status failed / bad-parameters)
I've been using AWS for decades at this point and I started using spot instances for various reasons including professional reasons such as testing software I develop, etc. I mostly use Windows Server ...
- 1,434
0
votes
1
answer
48
views
Best practices on managing Terraform project repositories
As part of a new job role, I have started learning Terraform recently. Before, my main orchestration/provisioning tool was Ansible, and the best practice at my previous place was to hold the state for ...
- 3
0
votes
1
answer
48
views
AWS SSL Certificate for Laravel on EC2 instance
I have Laravel application on EC2 instance on Ubuntu, also I have Application Load Balancer and verified AWS SSL certificate. But logically I can’t run Laravel without, NGINX or Apache.
I can adjust ...
- 1
0
votes
0
answers
88
views
Enable HTTPS with letsencrypt on Amazon Linux 2 with Apache
Server: AWS Linux 2 (EC2 Instance)
I'm attempting to renew a SSL certificate (with Let's Encrypt) for a webpage/application Trend Micro Deep Security. Unfortunately, I didn't setup the server so I'm ...
- 1
0
votes
1
answer
27
views
What exactly is aws load balancer "Protocol : Port"?
I have never been able to figure out what this configuration is or does when creating load balancers.
The documentation says
Choose a protocol for your target group that corresponds to the Load ...
- 1
0
votes
0
answers
22
views
Charts of Lambda Function usage in AWS
I have multiple Serverless PHP applications deployed at AWS via Vapor for Laravel.
The Lambda bill is high since a few months. I wanna know which Lambda are causing the higher usage. But I can't find ...
- 101
0
votes
0
answers
36
views
Unable to join EC2 worker to VirtualBox master
Im deploying a Hybrid Cloud(VirtualBox-AWS) Kubernetes cluster. What I have done so far:
Set the control-plane on Ubuntu Server 22.04 LTS via VirtualBox 6.1.
Change network adapter to bridged
Ran the ...
- 101
0
votes
0
answers
10
views
Lambda horizontal scaling when consuming from FIFO SQS queue
We have messages which need to be consumed by a lambda. We opted to use a FIFO SQS queue solely for the deduplication ID feature, but do not otherwise need FIFO features.
The lambda is not scaling ...
- 101
0
votes
0
answers
23
views
Options to enforce transitive routing in 3 peered VPCs in AWS
To start this off, this is strictly a test scenario that I'm playing with, I know transitive peering is not allowed but I would still like to know what technical workarounds are possible to enforce ...
0
votes
1
answer
50
views
unable to login via putty ssh to my ec2 linux instance in aws : no supported authentication methods available
i am new in aws,
i created two linux instances : amazon linux and ubuntu linux
I downloaded RSA ppk key pairs + imported to putty, however I am unable to login via putty,
i get this error
no ...
- 231
0
votes
1
answer
85
views
Outbound IPv6 connection replies not routed back to firewall in VPC
In a newly-built AWS VPC (deployed with Terraform to minimise typos), I have one "DMZ" subnet and one internal. A firewall appliance bridges the two, with an interface in each. Both ...
- 11
1
vote
1
answer
184
views
Migrate AWS ECS cluster IPV4 to IPV6
I'm trying to avoid this new cost (public IPv4) in aws for small projects because it will represent a big percentage of the cost.
In my ECS cluster, I use EC2 instances as capacity providers, ...
- 63
0
votes
0
answers
46
views
AWS Appflow - Incremental Transfer & Overwriting Existing Files in S3
I'm using AWS Appflow to transfer files from a SharePoint site to an S3 bucket. My goal is to achieve the following:
Weekly Runs: Schedule the flow to run on a weekly basis.
Incremental Transfers: ...
- 1
-3
votes
1
answer
176
views
about running an firewall on aws cloud
i am a firewall developer and i am new to the cloud. Finally, I've made an iso file of my firewall running on centos. I want to test its operability in a cloud environment. So, I want to use this ...
- 1
0
votes
0
answers
37
views
EC2 network burst credit balance
How do I know my usage of network credit balance? I have a t4g.small instance and periodically I face timeout issues on the networking services hosted there.
As it stated here:
An instance receives ...
- 111
0
votes
0
answers
19
views
Not able to FTPS to another server from EC2 under ALB and WAF
I'm having an issue whereby I'm not able to ftps to another server from my EC2.
If I run a simple command
lftp username:password@serverurl:2121
then proceed to ls, I will be stuck at ls at 0 [...
- 101
0
votes
1
answer
54
views
AWS-SES sending from one site, from is another site - will DMARC help or hurt
Alright, to keep this simple:
I have a project that is using AWS's SES to send transactional emails. The project is hosted on one site (let's call it example-site.com), but for reasons, the From: is ...
- 103
0
votes
0
answers
21
views
Does EKS bill include the costs for control-plane (master) nodes?
EKS costs $0.10 / hr + you pay for the worker nodes (EC2 + storage + data transfer). But EKS itself runs master nodes. So the question is: does $0.10 covers the costs of master nodes? If not, then how ...
0
votes
0
answers
97
views
AWS VPC CNI PLUGIN - Error: container runtime network not ready due to NetworkPluginNotReady - How to Resolve
I am facing difficulty in this, maybe the answer is simple so if someone knows the answer, please comment here.
I have created an EKS cluster using the following manifest.
apiVersion: eksctl.io/...
- 1
0
votes
0
answers
69
views
How to create a Service Principal Name (SPN) for an AWS RDS-managed SQL Server instance computer object in AD?
We are using AWS RDS for SQL Server, an AWS managed service. We joined our RDS to our self-managed AD:
We found the Active Directory Service Principal Name (SPN) for the RDS-managed-service database ...
0
votes
0
answers
19
views
Updating csi-driver without stopping
I'm now facing this.
# module.eks_volume_provisioning.aws_eks_addon.csi_driver will be updated in-place
~ resource "aws_eks_addon" "csi_driver" {
~ addon_version ...
- 1
0
votes
0
answers
18
views
Cluster Openshift on AWS with IPI, installation error no such host
I'm trying to deploy an OpenShift cluster on AWS using the IPI installation. I've used a t3.xlarge instance and followed the steps in the following guide https://docs.openshift.com/container-platform/...
0
votes
1
answer
131
views
Best approach to install gdal for rasterio in aws/lambda/python Dockerfile
The python dependencies for an AWS lambda application have exceeded the 250 MB limit for AWS Lambdas. One of these dependencies is rasterio which depends on gdal. I'm attempting to build a docker ...
- 155
0
votes
0
answers
17
views
AWS CodeBuild user doesn't take on service role
I am working on setting up a build project in CodeBuild that creates a Docker container from a GitHub repo, and pushes it to ECR. This build process uses a container built previously that's stored in ...
- 101
-1
votes
1
answer
95
views
Linux system mails alternative for sending and receiving besides SMTP
I have multiple EC2 servers which run either Ubuntu or Amazon Linux. I want to run automatic system updates but get a message when the system is updated. The yum-cron package can send emails, but I do ...
- 107
0
votes
0
answers
62
views
dns problems in self managed aws ec2 cluster with aws-vpc-cni
I'm new to k8s and I've been trying to learn it. I faced a problem with trying to setup aws-vpc-k8s-cni on my fresh k8s cluster with coredns. Here's the problem in detail.
Cluster & Network ...
- 111
0
votes
1
answer
65
views
AWS Security Group Inbound rules for SSM Session Manager
I have an instance in a private subnet and a security group that allows any inbound access. I can connect to it with Session Manager.
If I restrict inbound access to port 22 only I can no longer ...
- 631
0
votes
0
answers
27
views
Observing AWS App Runner 429s
During performance testing we're seeing 429s from App Runner. The body of the response will say "Max queue length has been reached". I know this is a known issue and it's described here in ...
- 197
0
votes
0
answers
18
views
PVC is in terminating state and PV is in bound state in Kubernetes
I have the PVC which is in terminating state (because it is referenced from 3 other pods) and the PV is in bound state. PV has the retain reclaiming policy.
Also I am not sure on the reason for the ...
- 111
0
votes
0
answers
17
views
How can I set separate phase 1 and phase 2 IPs using AWS Managed IPSec offerring?
I'm trying to setup an AWS Site-to-Site VPN connection that is IPSec based. It seems to be their managed offering. A particular connection I am trying to setup specifies distinct Phase 1 and Phase 2 ...
- 1
0
votes
0
answers
10
views
AWS VPC Connect Endpoint and Workbrench integration
I have some RDS instances under a private subnet and a bastion host (ec2 instance) with a public IP to connect to it. As part of getting a security certification we need to get rid of all ec2 ...
0
votes
0
answers
86
views
AWS ALB inbound requests/traffic and denial of wallet attacks
Scenario: I have an AWS ALB protected by AWS WAF with lots of AWS Managed WAF Rules, rate limiting rules, etc.
I'm having a hard time in understanding why, even requests blocked by WAF, are impacting ...
- 1
0
votes
0
answers
28
views
404 error on jaeger-collector in kubernetes deployment
I've tried istio in kubernetes by referring official site of istio. In that, I can access kiali, prometheus but I can't connect the jaeger-collector. Since I'm using EKS and VM, I've exposed them as ...
- 1
0
votes
1
answer
32
views
MQ broker in private or public subnet?
I'm setting up an MQ broker in an AWS environment.
The MQ broker will be used by both services running in that AWS environment as well as services running in other locations.
All other services ...
- 1,600
0
votes
0
answers
24
views
AWS Site to Site VPN to Kerio Control Phase 2 parsed INFORMATIONAL_V1 request 380820527 [ HASH N(INVALID) ]
I'm setting up a Site-to-Site VPN between my on-premises network and AWS VPC, and encountering an INVALID_ID_INFORMATION error during the phase 2 (Quick Mode) negotiation. The setup involves IPsec ...
0
votes
3
answers
174
views
Upgrade mysql 5.6 to 8 not working on AWS Linux based EC2
I am working with EC2 for MySQL DB. The OS of EC2 is AWS Linux-based Ubuntu. The current version of MySQL is 5.6.50. I am going to upgrade it to 8.0. I tried to upgrade it with this command: sudo yum ...
- 51
0
votes
0
answers
12
views
API Errors on AWS management console
I am seeing these API Errors on the AWS management console (EC2 & VPC dashboards). Sometimes refreshing will allow it to work for a short time.
This only seems to happen when accessing from our ...
- 28
0
votes
0
answers
69
views
Prioritize S2S VPN on AWS when using 1 VGW
We have the following AWS setup:
1 VPC
1 Virtual Private Gateway (VGW)
8 Customer Gateways (CGWs)
8 Site-to-Site (S2S) VPN connections
We have 4 sites, each connected to our VPC with 2 S2S VPN ...
- 101