2,837 reputation
1431
bio website opelbrothers.net
location Germany
age 46
visits member for 5 years, 1 month
seen yesterday

Occupation

I currently develop Amazon Web Service related add-ons for the Atlassian suite at Utoolity - publicly available are:

Freelancing

I might also be available for freelancing gigs - see my freelancing profile on opelbrothers.net for availability details (a Stack Overflow Careers profile is available as well).


Jul
9
comment What constitutes “idle” CPU during T2 CPU credit calculation?
Exactly - this transparent approach (including appropriate CloudWatch metrics) is a rather significant and competitive improvement over the previous throttling model for the respectively infamous t1.micro instances.
Jun
24
comment Redirect loop after setting up domains
What's your desired canonical domain, www.mydomain.com or mydomain.com?
May
8
comment Spot instances frequently terminated in AWS auto scaling group (failing system health check)
@DerekMorrison - I see; the spot price history for m3.xlarge in us-east-1 has been >= $1 in the last weeks in some AZs in fact (please beware of the difference between EC2 classic and VPC in this regard), but given your extensive debugging effort, you have presumably looked very closely already ;) - I've updated my answer with another frequently encountered reason for spot instance terminations and options how to gain more insight into the actual cause by tracking your spot request bids.
Mar
19
comment AWS IAM user access issues for S3
According to Sid, it is is an optional identifier that you provide for the policy statement, which must be unique within a policy. Given it seems to work fine w/o (but see below), I tend to remove it here for brevity and when versionizing policies, but do not bother when generating policies automatically for example - however, as per the subsequent Note: Some AWS services (for example, Amazon SQS or Amazon SNS) might require this element [...].
Mar
17
comment Restrict the visibility of EC2 instances using IAM accounts
When you say 'IAM accounts', I presume you mean multiple 'IAM users' within a single 'AWS account'?
Nov
25
comment AWS Cloud Formation.Requires capabilities : [CAPABILITY_IAM] (Child Stack)
Thanks for following up with your discoveries - this seems to match previous observations of mine, but ironically we seem to encounter the inverse behavior as of recently, i.e. CAPABILITY_IAM is now always required once a sub stack resource is involved, even if it doesn't create IAM resources (e.g. the Nesting a Stack in a Template example exposes this behavior, and this happens at the API level). Unfortunately this obstructs other use cases now - has AWS contacted you about this change?
Oct
23
comment How to specify an IAM role for an Amazon EC2 instance being launched via the AWS CLI?
Your analyzed/described the underlying issue correctly (+1), but your conclusions are slightly imprecise/misleading - I've added a separate answer to properly explain how the potential security issue is addressed by IAM.
Jun
30
comment How to address an EC2 instance from both inside and outside datacenter?
@MichaelHampton - Ah right, I've overlooked that Alexandr is planning to use his own A record indeed (rather than a CNAME for the AWS one for example); in this case your suggestion is obviously spot on regarding the desirable routing and cost benefits implied when using the internal IP address where possible, sorry for the sloppy assessment of the question at hand.
Jun
30
comment How to address an EC2 instance from both inside and outside datacenter?
@AlexandrKurilin - I slightly disagree with Michael's suggestion: you could/should just use the new DNS record both internally and externally due to a little known, but nonetheless quite helpful feature of the AWS DNS infrastructure, see Public IP Addresses and External DNS Hostnames: We resolve an external DNS hostname to the public IP address of the instance outside the network of the instance, and to the private IP address of the instance from within the network of the instance.
Jan
25
comment Advice regarding resilient internet access from within an Amazon VPC
@sborsje - thanks much for your insight (a significant oversight of mine indeed), I've updated the post accordingly.
Dec
9
comment Amazon SES domain verification TXT DNS record
@Skittles - Also, I even assumed I might had misunderstood your issue in the first place and still tried to assemble relevant information; and I continued to do this by recommending Route 53 once the actual issue surfaced in your comment. The two things I tried to get across are simply a) your registrar has unusual deficits in his DNS console, which are hard to impossible to diagnose/address without further details from them, and b) you missed to state that problem in your question. The goal of the latter is simply to improve on that in the future for the benefit of all participants.
Dec
9
comment Amazon SES domain verification TXT DNS record
@Skittles - You response is quite inappropriate, I haven't stated RTFM anywhere in my post, rather tried to link to relevant information, as I always do. Have you even considered how much time it took me to assemble this post like so in order to help you? I've clearly stated how to properly format a standard TXT record - please reconsider: it is impossible to deduce the absence of the required Name field in your registrars DNS console from your sentence "Is this how you would make the TXT record properly?"! How should I figure that your registrar is hiding a crucial part?
Dec
9
comment Amazon SES domain verification TXT DNS record
@Skittles - How could I possibly have figured this essence from your post, after all you've left out exactly the key information of this being an issue with your specific registrar rather than with SES and/or TXT records in general? I'm not able to help you with this unusual DNS management setup (and I doubt someone else will) - if their support isn't able to explain how to create standard TXT records, I can only recommend switching your DNS to e.g. Amazon Route 53, which has a decent record management UI and API (I've never looked back myself ...).
Dec
6
comment Is there a Windows equivalent of Unix 'CPU steal time'?
+1 for the thorough exploration indeed, highly appreciated. So regarding EC2 this apparently boils down to Unix/Linux guests running in Xen paravirtual mode, which is a paravirtualized domain (i.e. not full virtualization, the guest OS is modified to run on the host), where steal time is available, vs. Windows/FreeBSD/... guests running in Xen HVM, which is a hardware emulated domain (i.e. the guest OS is unmodified to run on the host), where it apparently isn't - so a definite negative answer, guess that's what counts. Do I read you correctly that it could get added eventually?
Sep
21
comment How can I make an AMI mount the same volume when it initializes?
Presumably you are wondering how to automatically attach the volume from an Amazon EC2 API level perspective (in contrast to how to mount it afterwards, which is a secondary OS level perspective)? I suggest to adjust the question accordingly in case.
May
25
comment Geographic testing for latency
@waxical: I've misread your question indeed, sorry for that - I've updated my answer regarding two commercial options I'm aware of, hopefully someone else can point to a readily available Open Source variation as well.
May
25
comment Tons of TCP connections in TIME_WAIT state on windows 2008 - running on amazon AWS
@MarcBollinger: Just found your answer via the AWS team response to the thread you mentioned (System.Diagnostics.Stopwatch not working) - that thread is still unanswered, but your comment here seems to indicate it might actually have been addressed already as per the info @GregB quoted? Or could the QueryPerformanceCounter issue root cause still be in place and only the TCP issue at hand has been remedied? Thanks for your insight!
May
25
comment Is there a Windows equivalent of Unix 'CPU steal time'?
Thanks for checking - apparently Virtualization Counters for Hyper-V should actually be available, maybe they must be installed/activated somehow first? I'm still unable to identify/deduce a similar/related metric amongst these though.
May
2
comment Efficient plan for backing up EC2 instance, EBS volumes and RDS DBs
Please take care when promoting your product, see the respective FAQ May I promote products or websites I am affiliated with here? for details.
May
2
comment How do I auto-start an EC2 instance only when the site is being accessed?
Please take care when promoting your product, see the respective FAQ May I promote products or websites I am affiliated with here? for details.