New answers tagged

0 votes

Easier way how to put AWS ALB behind Cloudfront with TLS?

According to the below blog entry it should be possible to use the same TLS certificate for your ALB and Cloudfront. I was not able to test yet but analysing for the exact same scenario for our ...
  • 1
0 votes

Terraform aws_key_pair creates weird key

The solution was to use private_key_openssh instead of private_key_pem in terraform. That produces usable keys for ssh.
  • 21
0 votes

How do I change (upgrade) my Elastic Beanstalk instance type?

AWS documentation tells you how to do this. Open the Elastic Beanstalk console, and in the Regions list, select your AWS Region. In the navigation pane, choose Environments. Choose Create a new ...
  • 30.4k
0 votes

Can't run AWS CLI from CRON (credentials)

A solution for me was to set both the config and credential file location via environment variables export AWS_CONFIG_FILE="/root/.aws/config" export AWS_SHARED_CREDENTIALS_FILE="/root/....
  • 101
1 vote

Could my AWS load balancer handle HTTP OPTION requests immediately?

Depending on exactly how you want to respond to these requests, you can use AWS WAF and attach this to the ELB. Create a custom rule (to block traffic by using "option"): Then create a ...
  • 41
0 votes

Is it possible to get aws ec2 instance id based on its IP address

You can use grep aws ec2 describe-instances --filter Name=private-ip-address,Values=x.x.x.x | grep 'InstanceId' Note: dont use InstanceId keyword in Tag or Name
0 votes

EC2 instance won't recognize IAM role?

Reinstalling/upgrading AWS cli made it work. The AWS cli was at version 1, after upgrading to version 2 it worked. Before that, I launched a new EC2 instance (Amazon Linux 2) with the attached role ...
  • 101
1 vote

Can someone breakdown what the IPv6 address fd15:53b6:dead::2/64 is?

AWS copied the man page regarding block-ipv6, to illustrate an example of when you don't want IPv6 traffic outside of a tunnel (leaks), but the network is not IPv6 ready. Which apparently is currently ...
0 votes

How to check if Route53 will speed up my website?

Route53 might help a little bit, but not a lot. Here's my first set of suggestions: Keep your domain registration where it is, but move domain serving to AWS Route53 Set up the CloudFront CDN in ...
  • 30.4k
1 vote
Accepted

Trying to understand Cloudformation syntax for UserData script

Referencing another answer here for the formatting of strings in yaml files. Block styles with block chomping indicator (>-, |-, >+, |+) You can control the handling of the final new line in the ...
0 votes

Failed to enable unit: Access denied - while enabling a service on AWS RHEL instance

I ran into a similar problem on a Centos 8 Stream box. Turns out it was related to selinux. You can test this by running sudo setenforce 0 and then running a sudo systemctl daemon-reload again. You ...
0 votes

How to open ports in amazon (AWS) Lightsail?

Go to the Manage Section Next go to the Networking Tab and add or edit the rules to open up the ports
0 votes
Accepted

Dynamic multicast in AWS not working using IGMPv2

I changed my instances from t2.micro to t3.micro and it worked, the multicast with igmp works only for nitro instances
0 votes

Nginx directory (21: Is a directory)

This problem can also be solved by ensuring that the folowing line is not commented : pid logs/nginx.pid;
  • 101
0 votes

DNS shows wrong IP addresses on different machines

We figured out the problem. The problem is that our domain has two NS and they return completly random the correct or incorrect IP. It isn't a problem of the client, which DNS, or from which ISP you ...
0 votes

DNS shows wrong IP addresses on different machines

Using DnsChecker I can see that major DNS providers (Google, CloudFlare, OpenDNS) report the IP for the domain correctly, as does my ISP. I suspect the problem is with your client. What problem is ...
  • 30.4k
0 votes

AWS Code Build Error : Cannot connect to docker daemon

If using CDK, you will have to set docker_enabled_for_synth flag in CodePipeline. Also, you may need to make a manual deployment (cdk deploy), since pipeline' self mutation didn't work for me. ...
  • 101
0 votes

Easier way how to put AWS ALB behind Cloudfront with TLS?

I tested today after getting stuck a lot of time with cloudfront 502 error code. Indeed Cloudfront needs a valid certificate on its origin here the ALB. On ALB side, you cannot change the DNS name, ...
0 votes

how to prune old CodePipeline artifacts

Do you really need to keep old build artifacts at all? If you're building lambdas, once the function has been created, lambda keeps its own copy of the deployment package so you can delete it from the ...
  • 489
-1 votes

Alternative of AWS SSM for configuration compliance in GCP

Yes, I use the GCP secrets manager (you can choose to encrypt or not when you create a secret) and it operates similarly to AWS SSM Parameter
0 votes

MYSQL server on EC2 is sometimes refusing to connect

With the limited information provided from your EC2 server, Observations, Connections were 895 Aborted_connects were 357 for your uptime of the instance. To attempt to reduce connect failures, ...
0 votes

aws ec2 instance AMI backup with reboot

Yes, you can use an EC2 instance while the backup is in progress. The snapshot will be as at the time you requested the snapshot. The reboot is irrelevant. As Matt points out below, if you are using a ...
  • 30.4k
0 votes

How can I find the IP addresses of an AWS RDS instance

EC2 > Network Interfaces Then look for your RDSNetworkInterface - usually identifiable by the security group. It will list the Public and Private IP there.
  • 183
0 votes

ECS service is not starting tasks

Hi so the problem was the I had not assigned the iam role for the auto scaling group, I was not using an ecs optimized image and I did not write the ecs cluster name to the ec2 config file.
1 vote
Accepted

How to create new instance from a snapshot and a new OS version

No, what you've asked isn't possible. A snapshot is an image of a disk. You can't upgrade the OS while creating an instance from a snapshot. If you want to upgrade your operating system create an ...
  • 30.4k
0 votes

What causes reachability check failure on EC2 instance?

The instance status check failure indicates an issue with the reachability of the instance. This issue occurs due to operating system-level errors such as the following: Failure to boot the operating ...
0 votes

Docker login to AWS ECR from GitLab CI fails with "dial tcp: lookup docker on x.x.x.x:53: no such host" when pulling docker:dind from ECR

As mentioned by @orban https://serverfault.com/users/190624/orb%c3%a1n-zolt%c3%a1n Just add "privileged=true" to the /etc/gitlab-runner/config.toml for ex [runners.docker] tls_verify = ...
0 votes

My instance is accessible from ipv4 address and public DNS. I want it to be accessible from domain name only

Create a different virtual host, either don't give it any content or redirect where you want, and then make it the default (usually by being the first virtual host configuration file).
  • 1
6 votes

My instance is accessible from ipv4 address and public DNS. I want it to be accessible from domain name only

This is normal behavior of web servers that have virtual host concept. You need to set up a default virtual host in your webserver that returns for example 404 to every request. Then your website is ...
0 votes

Ecs service doesn't update the task definition

This also would work. When you run --force-new-deployment on your local machine it opens a vim editor with the output, dev/null the command and it should resolve the issue. aws ecs delete-service --...
0 votes

AWS EC2 CentOS 7 Port 80 blocked despite correct rules

Thank you everyone for trying to help. As It happens to be this problem was apparently due to aws suspending thoose ports because of malware. For future reference make sure to check. The Health Status ...
  • 101
0 votes

How is fetching the secure token from AWS each time more secure?

I am not sure how this is really more secure though than just putting the key+password in a header of SSL when accessing amazon APIs. An example scenario: You inadvertently log requests. This is not ...
  • 32.5k
0 votes

How is fetching the secure token from AWS each time more secure?

A permanent access key id and secret are associated with an IAM user, and grant the bearer the permissions that user enjoys. All of the permissions. There are use cases where temporary credentials ...
0 votes
Accepted

I lost my AWS EBS volume completely. What are the odds of that?

The chances are pretty high you'll encounter one eventually. https://aws.amazon.com/ebs/features/ Amazon EBS volumes [other than io2] are designed to provided 99.8%-99.9% durability with an AFR of ...
  • 32.5k
1 vote

How is fetching the secure token from AWS each time more secure?

It's faster than authenticating every connection, and the infrastructure you are connecting to doesn't have to perform authentication, it only needs to confirm the token is valid. Also if ...
  • 34.3k

Top 50 recent answers are included