New answers tagged

1

If you don't have a CloudFormation template for your existing VPC resources, create one. Then re-create the VPC on the other AWS account by creating a CloudFormation stack with that template. You might find CloudFormer useful when creating the template based on your current VPC: ...


0

Not sure if this is considered as abandoned question - stumbled upon this while troubleshooting my issue and now adding my solution now that it's resolved. To update service with new container, you need to: upload new container to repository; trigger task definition update; trigger container update; important: make sure service rules allow launching new ...


0

If it works locally - eg, going around the LB then I would guess that the LB is not configured to pass requests to the backend servers on that port. Your LB will need some new rules to route traffic to you backed hosts based on the destination port your service is listening on, see AWS for more help with this ...


-1

Have you rerun bundler install? You have likely not had it updated in Gemfile.lock.


0

I configured Master - Slave DNS server with Ubuntu in AWS. Configure Public IP ( Elastic IP ) for these two instances. Put FQDN on each server resolving to the elastic IP. Instead of localhost use fqdn. I followed Ubuntu HOWTO for this implementation. Use "also-notify" statement in Slave server. Change localhost with FQDN in all configuration files. Rest ...


0

Unfortunately I cannot comment with my rep so I'll post this as an answer. I personally would take the same approach as @prateek61. It's very difficult to diagnose this issue without being able to log in to your server. Linux is very good with not letting people in once the some configuration has changed or been triggered. Since in AWS there is not ...


2

You can host a static website on Amazon S3. On a static website, individual web pages include static content. They may also contain client-side scripts. By contrast, a dynamic website relies on server-side processing, including server-side scripts such as PHP, JSP, or ASP.NET. Amazon S3 does not support server-side scripting. Ref: Hosting a ...


2

A simple way to do this would be to create a bash script and use some network bandwidth tool, there are many options to check bandwiwdth/traffic (bmon, nload, etc) on your server. In that script, after you found the current total bandwidth, put a statement like: if threshold reached: shutdown myWebApp # kill the service   And then once you have ...


2

An Elastic IP address is a public IP address, so that takes care of public access. While you can access your instance from within AWS's network with the public ElasticIP address instead of using the private IP address, you'll pay for it: https://aws.amazon.com/ec2/pricing/ Data Transfer IN To Amazon EC2 From Amazon EC2, Amazon RDS, Amazon ...


0

We're using DynamoDB and Elasticache Redis for different reasons. DynamoDB: Has a query language which is able to do more complex things (greater than, between etc.) Is reachable via an external internet-facing API (different regions are reachable without any changes or own infrastructure) Permissions based on tables or even rows are possible Scales in ...


0

There is a read preference value "nearest" which actually uses the latency between the MongoS and MongoD to determine which is the best/fastest set member for the query. You can find the documentation about it here: https://docs.mongodb.org/manual/reference/read-preference/#nearest The selection is based on the "member selection". For a sharded cluster like ...


1

Amazon EBS snapshots are stored in Amazon S3. Data stored in S3 is replicated across multiple devices in multiple facilities. (See Amazon S3 FAQ.) While Amazon S3 defines multiple storage classes, there is no specific mention of the storage class used to store EBS snapshots. However, it would be a fair assumption that it uses Standard Storage (3 facilities, ...


1

That's probably an ephemeral disk. See http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/InstanceStorage.html.


3

You can get the VPC CIDR block by doing e.g. $ metadata="http://169.254.169.254/latest/meta-data" $ mac=$(curl -s $metadata/network/interfaces/macs/ | head -n1 | tr -d '/') $ cidr=$(curl -s $metadata/network/interfaces/macs/$mac/vpc-ipv4-cidr-block/)


0

Sure, use awscli, boto, or your favorite language's AWS API. First, use the EC2 metadata service to get the instance ID. With that information, you can get the VPC for the instance, and then from the VPC ID, you can get the CIDR range. These steps obviously need to be run from the instance itself, so you'll need to assign an Instance Role to the server ...


0

This post describes what you're looking for: https://blogs.aws.amazon.com/security/post/Tx2SJJYE082KBUK/How-to-Delegate-Management-of-Multi-Factor-Authentication-to-AWS-IAM-Users


1

AWS docs provide an example of how to do this under "Allow Users to Manage Only Their Own Virtual MFA Devices": http://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_delegate-permissions_examples.html#creds-policies-mfa-console { "Version": "2012-10-17", "Statement": [ { "Sid": ...


0

I assume you are running ansible-playbook /blah/tasks/whatever.yml? If so, that's your problem. The proper structure for a playbook is: --- name: my playbook roles: - Arole - Brole # other playbok attributes tasks: - name: copy stuff copy: src=foo dest=bar - name: include cool tasks include: ../tasks/snafu.yml when: ...


0

The rough equivalent is creating an image form a running instance with nova image-create. This will take an snapshot of the VM and will make it available in the OpenStack Image catalog (i.e. glance). Then you will boot that image as if it was a normal image. So you would do: nova image-create <server-id> (grab image-id from response) nova boot ...


0

Sorry, my fault. Updated the version to s3cmd 1.6.1 and everything is working fine now! You can download the latest version at https://sourceforge.net/projects/s3tools/files/s3cmd/


0

Just for the confirmation, You need to associate the particular subnets in routing table also which you want to route through . Hope you did that. That's the only possibility left in this scenario.


0

i had the same problem. you can see the logs of the script with: cat /var/log/awslogs-agent-setup.log there were some problems with the locals and a export LC_ALL=C solved it for me.


1

As far as I'm aware it's not possible, it uses S3 standard only, and you have no control over it.


-1

in a word - Docker! - this is what Docker was made for and it is the most active open source project on the internet at the moment - it will be supported in Windows Server 2016, has many 'day 2' design considerations and is supported by kubernettes, AWS, OpenStack Magnum, Azure, Stackato, Cloud Foundry, IBM blue Mix, Messos and Docker Swarm check out Docker ...


0

I faced the same issues and resolved it with some different tweaks. Same error: [root@puppetclient puppet]# puppet agent --server yogesh.puppet.com --no-daemonize --verbose Error: Could not request certificate: Connection refused - connect(2) for "yogesh.puppet.com" port 8140 Error: Could not request certificate: Connection refused - connect(2) for ...


0

If Amazon S3 is your origin, you need to edit the bucket policy to allow CloudFront access. POLICY GENERATOR


0

In this particular case the problem was that the elastic load balancer was set to run in multiple subnets, and some of the subnets were not publicly accessible, and thus some requests were being routed to a bad IP. The confusion came because we misunderstood what the subnet setting on the ELB meant. So check your subnets!


0

I think is this likely because our db.m3 is not in a VPC, and db.m4 instances are required to be in a VPC.


0

This was a real issue for me. But I found the answer here. Multiple Hosts and Misdirected Requests Many sites use the same TLS certificate for multiple virtual hosts. The certificate either has a wildcard name, such as '*.example.org' or carries several alternate names. Browsers using HTTP/2 will recognize that and reuse an already opened ...


0

In constrast to @Christopher's comment: 1) deploying a custom AMI through EB is an anti-pattern. Every time EB updates the base platform, you will need to recreate your custom AMI. 2) Yes, manual configuration changes on the server is an anti-pattern. But specifying configuration as part of your deployment unit is recommended practice. Have a look at the ...


0

simply run duplicity on the other box and restore from your backend as you would on your own server. ..ede/duply.net


0

in Multi AZ- can you specify what zones because those flavors are not available in all zones. The following list describes the current Amazon RDS DB instance classes and the Amazon EC2 instance type used for each: Standard – Latest Generation (db.m4) – Third generation instances that provide more computing capacity than the second generation ...


0

Short answer for AWS services that load DBF : NO Longer answer : RDS services doesn't support DBF file types. One issues of DBF is, there is no standard. A dbf can be from ANY database engine, format is varied. If you want CORRECT answer, you must specify what DB engine it is, and not all db engine will recognise them. If you have an apps or DB engine that ...


1

In your netstat you are showing ports 28016 TCP instead of 28106, and UDP 28015 instead of 28105. Also in your telnet you are not trying to connect to the open port (28016 TCP) but to the port that you think it is open (28106 TCP).


0

Turns out I needed an ECS service, not an EC2 service, in my aws_iam_role. I'd tried this before, but didn't specify sufficient in the aws_iam_role_policy . It's very much like this issue on the AWS forums. resource "aws_iam_role" "beatthemarket" { name = "beatthemarket" assume_role_policy = <<EOF { "Version": "2012-10-17", "Statement": [ ...


1

Usually, there's no way to recover from an invalid state for a given environment. In such cases, you need to go to the current environment page, click on the Actions button, select Clone Environment, and then wait for the clone environment to be created. Once it's ready, you can go to the application page, click on the Actions button and then select SWAP ...


1

I think a well placed filter plugin can help you in this situation. For instance if you know the route table id, you can write a simple python function to retrieve a list of subnet_ids associated with the route table id. You will put this filter in the root of your ansible directory. Example below.... filter_plugins/example.py def ...


0

Panagiotis Moustafellos in the #devopsengineers slack channel actually helped me fix this issue. Turns out that the beatthemarket_service container does not exist. (Confusingly) It's the beatthemarkettask definition name. So I just replaced resource "aws_ecs_service" "beatthemarket_service" { name = "beatthemarket-service" cluster = ...


1

Either use tail to show the last few lines or grep to filter the output based on the "Total" keyword at the beginning of the line (optionally with the extra whitespace), like: aws s3 ls s3://mybucket --recursive --human-readable --summarize|tail -n2 Or aws s3 ls s3://mybucket --recursive --human-readable --summarize|grep -e '^\s*Total'


1

Your Elastic Beanstalk URL points to the Elastic Load Balancer URL. This is intentional. It is better to create a DNS CNAME pointing to your Elastic Beanstalk URL rather than the ELB URL. The reason being that in Elastic Beanstalk, you can start multiple environments within the same application, then swap the URLs around. This way, if you want to move ...


2

Probably not. What would work better is some optimisation: Get your headers in order, especially around browser caching. Note that you don't need PRAGMA and should clear it, you just need Cache-Control. Static resources to > 7 days. Set up the nginx page cache. If you're using Apache it has one too. If all your users are logged in this won't help, but if ...


0

The higher CPU and RAM resources definitely improve the processing speed of the server. If your site has more/complex SQL queries to run, which need more CPU and RAM usage, you can go with the high resources. Otherwise, additional resources will not be beneficial to you.


0

I just ran into this issue, my problem was that did check the checkbox "I acknowledge that this template might cause AWS CloudFormation to create IAM resources." on the last screen before updating my stack.


1

It's not possible to associate an Elastic IP address with an API Gateway. However, even if it was possible, it would not solve your issue. This is because your executing code (either Lambda or an EC2-instance behind-the-scenes) is where your logic is running. It is from there that you want to have a fixed IP address that you can whitelist. This is possible ...


2

No difference in price. From the FAQ There is no additional charge for Amazon EC2 Container Service. You pay for AWS resources (e.g. EC2 instances or EBS volumes) you create to store and run your application. You only pay for what you use, as you use it; there are no minimum fees and no upfront commitments.


0

You can change the hostname using "hostname" command. $~ hostname yourdomain.com Then login back to your server, the prompt name will be changed.


1

The key phrase in Google that you want is "how to change ubuntu command prompt", or perhaps "how change bash command prompt". This thread is the second hit for the first query. I'll copy it in here as per SF preferences To change it for the current terminal instance only Just enter PS1='\u:\W\$ ' and press enter. To change it "permanently" In your ...


2

The service is bind to 127.0.0.1; as such, is not reacheable from the other instance; bind the service to the IP of your instance.


0

I don't know if it's a "best practice" from the community, but Amazon recommends doing it. "We recommend that you disable Windows Firewall and control access to your instance using security group rules." (Source)


0

In most cases you need to choose CPU or RAM. Anyway, you need to investigate your app behavior and find out what particular metric better describes load for your servers and what could be a bottleneck in your particular case. If for example you have high "Network Out" while having low "CPU Utilization", your network coud become a bottleneck and you need to ...



Top 50 recent answers are included