Hot answers tagged

85

Since it's the first result for google, I reply later. s3cmd can do this : s3cmd du s3://bucket-name


63

The AWS CLI now supports the --query parameter which takes a JMESPath expressions. This means you can sum the size values given by list-objects using sum(Contents[].Size) and count like length(Contents[]). This can be be run using the official AWS CLI as below and was introduced in Feb 2014 aws s3api list-objects --bucket BUCKETNAME --output json ...


46

GoDaddy [...] I assume their servers are geographically distributed Don't assume, verify with GoDaddy or verify it yourself. A quick traceroute to nsX.secureserver.com (a common DNS server name for GoDaddy) gives me a response from a datacenter here in Scandinavia where I live. So yes, it seems that GoDaddy has its nameservers spread out over at least ...


41

Add a file:// before the file names


39

This can now be done trivially with just the official AWS command line client: aws s3 ls --summarize --human-readable --recursive s3://bucket-name/ Official documentation This also accepts path prefixes if you don't want to count the entire bucket: aws s3 ls --summarize --human-readable --recursive s3://bucket-name/directory


35

https://ip-ranges.amazonaws.com/ip-ranges.json This question has been answered before, but here is the link to the forums, select the sticky link to the list of Ip ranges used by Amazon, it gets updated reliably when they add new information. EDIT: Changed link, whenever the post is updated the link breaks, so just gave a static link to the forum page ...


34

To communicate outside of the VPC, each non-default subnet needs a routing table and an internet gateway associated to it (the default subnets get an external gateway and a routing table by default). Depending on the way you have created public subnet in the VPC, you might need to explicitly add them additionally. Your VPC setup sounds like it matches ...


31

Update 09/04/2014 1:00AM EST Amazon has stated that all Elastic Load Balancers have been updated and are now longer vulnerable. They recommend rotating certs as well. Update 08/04/2014 2:56PM CST Amazon has stated that all Elastic Load Balancers except those in US-EAST-1 have been updated, and the vast majority of those in US-EAST-1 have been updated. ...


31

To remove java 1.7 and install java 1.8: sudo yum install java-1.8.0 sudo yum remove java-1.7.0-openjdk


28

Seems like yes (quoting AWS documentation): You can modify rules for a group at any time. The new rules are automatically enforced for all running instances and instances launched in the future. A simple test of disallowing access to a certain (previously accessible) port also confirmed this.


27

I had to wrap my SPF record in quotation marks for it to work. "v=spf1 include:_spf.google.com ~all"


27

The correct ssh-keygen command is however: ssh-keygen -y -f /path/to/privatekey > /path/to/publickey


26

Don't overcomplicate things. Just point your ELB health checks at a special URL just for them. server { location /elb-status { access_log off; return 200; } }


26

The A-record alias you create has to be the same as the name of the bucket, because virtual hosting of buckets in S3 requires that the Host: header sent by the browser match the bucket name. There's not really another practical way in which virtual hosting of buckets could be accomplished... the bucket has to be identified by some mechanism, and that ...


25

Yes, your understanding is correct. There's no AWS charging based on CPU usage -- you pay the same for an instance whether its CPU usage is 0% or 100%.


24

I had the same question as you, so I worked out how to do it. First, I did this from the Ubuntu 32-bit EBS-backed ami from the US-East region, other OS's or images may work differently. However, I suspect that you should be ok, as long as you are using an ext* filesystem. It might work on other filesystems, but you'll have to figure out how to resize them ...


24

The Amazon Linux (which is essentially CentOS, which is essentially Red Hat) equivalent of update-rc.d is chkconfig. http://www.cyberciti.biz/faq/rhel5-update-rcd-command/ chkconfig --add nginx chkconfig nginx on


22

The cleanest way I found is to use a .ebextensions config file in my project archive: Sample .ebextensions/project.config file: files: "/etc/php.d/project.ini" : mode: "000644" owner: root group: root content: | upload_max_filesize = 64M post_max_size = 64M When the application version is deployed, this will write a custom ...


21

As of 28th of July 2015 you can get this information via CloudWatch. aws cloudwatch get-metric-statistics --namespace AWS/S3 --start-time 2015-07-15T10:00:00 --end-time 2015-07-31T01:00:00 --period 86400 --statistics Average --region eu-west-1 --metric-name BucketSizeBytes --dimensions Name=BucketName,Value=toukakoukan.com ...


21

If you download a usage report, you can graph the daily values for the TimedStorage-ByteHrs field. If you want that number in GiB, just divide by 1024 * 1024 * 1024 * 24 (that's GiB-hours for a 24-hour cycle). If you want the number in bytes, just divide by 24 and graph away.


21

If you can guarantee that all requests will be coming from ELB (I'm not familiar with it), you could try: real_ip_header X-Forwarded-For; set_real_ip_from 0.0.0.0/0; That should tell nginx to trust an X-Forwarded-For header from anyone. The downside is that if anyone directly accesses your server, they would be able to spoof an X-Forwarded-For header and ...


21

You do likely need log_bin_trust_function_creators = 1 on RDS but that isn't the issue, here. You can specify a DEFINER value other than your own account only if you have the SUPER privilege. — http://dev.mysql.com/doc/refman/5.6/en/stored-programs-security.html When a stored program (proc, function, event, or trigger) is running, ...


20

Install Java Runtime 1.8 sudo yum install java-1.8.0 or if you need a java compiler and other developer tools: sudo yum install java-1.8.0-openjdk-devel Then use the alternatives command to make Java 1.8 the default. sudo /usr/sbin/alternatives --config java If you prefer you can remove Java 1.7 with sudo yum remove java-1.7.0-openjdk but remove ...


20

My comment could probably use some clarification. I spouted off with the eloquence of an inebriated yak: I have never wanted to set myself on fire so much as I do now. Why? Why would I say such a thing? Mostly because I'm an awful person. However, aside from that, I can explain my outburst by going over the original post piecemeal: I like to know ...


19

Don't assume anything about GoDaddy. I've found them to be awful on many occasions. I personally have a separate DNS host to my domain registrar, because the DNS host provides a better service (more adjustable records, rather than just A and CNAME). From what I've seen, Route53 is supposed to be quite inexpensive, at least in line with Dynect's offering ...


19

In your AWS Management Console, go to the EC2 Tab. Check the instance you want to change (from micro to large, for example) Put the instance in a 'Stopped' state. Click the 'Instance Actions' menu, and choose 'Change Instance Type' Choose the level you want the instance to run at (small, medium, large) Click 'Yes, Change'. Restart the instance in question. ...


19

The public DNS name (whether elastic IP address or not) is exactly the same as using the public IP address (elastic IP or not) with the one following important difference: If you query the public DNS name from outside of EC2, it resolves to the public IP address. If you query the public DNS name from inside of EC2, it resolves to the private IP address. ...


19

With a username like "The Internet", I'd expect you to know this. But since you asked... :) VPC's are truly private. Only traffic that you explicitly allow can transit the borders of the VPC. So, inside a VPC, instances needing access to external resources either need to be assigned an EIP (in which case they can access external resources using AWS's ...


18

Check /etc/sudoers.d/cloud-init file, ec2-user default user is there, just delete this file.


17

Things to check: Your elastic IP associated with your instance? Your security group of instance permits incoming connections? Your instance firewall permits incoming connections? Your application listens?



Only top voted, non community-wiki answers of a minimum length are eligible