"An internal error has occurred" when attaching Directory Service to RDS in the Zurich region (eu-central-2).

0

Hi everyone, When I try to create SQL server RDS with Microsoft SQL Server Windows Authentication setting: SettingDirectoryInRDS I receive the error below: Error when create RDS

When I look at Directory Service in eu-central-2, I also see 3 application and services avaiable for Directory: Directory_app_eu-central-2

Compare with eu-central-1, it seems to lack "Amazon RDS for SQL Server". Directory_app_eu-central-1

I also attached the log when I try to attach Directory Service to the RDS instance in eu-central-2 region using the next command:

aws --profile <info> --region eu-central-2 rds modify-db-instance \
   --db-instance-identifier <info>  \
   --domain <d-c...info> \
   --domain-iam-role-name rds-directoryservice-access-role \
  --apply-immediately

The log content:

2023-07-11 10:49:02,066 - MainThread - botocore.httpsession - DEBUG - Certificate path: /usr/local/aws-cli/v2/2.12.3/dist/awscli/botocore/cacert.pem
2023-07-11 10:49:02,066 - MainThread - urllib3.connectionpool - DEBUG - Resetting dropped connection: rds.eu-central-2.amazonaws.com
2023-07-11 10:49:02,868 - MainThread - urllib3.connectionpool - DEBUG - https://rds.eu-central-2.amazonaws.com:443 "POST / HTTP/1.1" 500 324
2023-07-11 10:49:02,868 - MainThread - botocore.parsers - DEBUG - Response headers: {'x-amzn-RequestId': 'd0388f19-aa75-4c2b-adfa-0c9927c50b64', 'Strict-Transport-Security': 'max-age=31536000', 'Content-Type': 'text/xml', 'Content-Length': '324', 'Date': 'Tue, 11 Jul 2023 07:49:01 GMT', 'Connection': 'close'}
2023-07-11 10:49:02,869 - MainThread - botocore.parsers - DEBUG - Response body:
b'<ErrorResponse xmlns="http://rds.amazonaws.com/doc/2014-10-31/">\n  <Error>\n    <Type>Receiver</Type>\n    <Code>InternalFailure</Code>\n    <Message>An internal error has occurred. Please try your query again at a later time.</Message>\n  </Error>\n  <RequestId>d0388f19-aa75-4c2b-adfa-0c9927c50b64</RequestId>\n</ErrorResponse>\n'
2023-07-11 10:49:02,869 - MainThread - botocore.hooks - DEBUG - Event needs-retry.rds.ModifyDBInstance: calling handler <bound method RetryHandler.needs_retry of <botocore.retries.standard.RetryHandler object at 0x7fc1ed91f790>>
2023-07-11 10:49:02,869 - MainThread - botocore.retries.standard - DEBUG - Max attempts of 3 reached.
2023-07-11 10:49:02,870 - MainThread - botocore.retries.standard - DEBUG - Not retrying request.
2023-07-11 10:49:02,870 - MainThread - botocore.hooks - DEBUG - Event after-call.rds.ModifyDBInstance: calling handler <bound method RetryQuotaChecker.release_retry_quota of <botocore.retries.standard.RetryQuotaChecker object at 0x7fc1ed91f150>>
2023-07-11 10:49:02,873 - MainThread - awscli.clidriver - DEBUG - Exception caught in main()
Traceback (most recent call last):
  File "awscli/clidriver.py", line 460, in main
  File "awscli/clidriver.py", line 595, in __call__
  File "awscli/clidriver.py", line 798, in __call__
  File "awscli/clidriver.py", line 929, in invoke
  File "awscli/clidriver.py", line 941, in _make_client_call
  File "awscli/botocore/client.py", line 341, in _api_call
  File "awscli/botocore/client.py", line 697, in _make_api_call
botocore.exceptions.ClientError: An error occurred (InternalFailure) when calling the ModifyDBInstance operation (reached max retries: 2): An internal error has occurred. Please try your query again at a later time.

An error occurred (InternalFailure) when calling the ModifyDBInstance operation (reached max retries: 2): An internal error has occurred. Please try your query again at a later time.

Is there anything I can do to make it work?

1개 답변
1
수락된 답변

Hi Steve,

As you clearly spotted it, it seems that the integration directory service <> RDS is not active in your account currently.

So,

  1. You should probably open a support ticket to confirm or not the absence of this integration for Zurich region. It may be a glitch in your account.
  2. If really urgent, I would personally try to integrate RDS with a private AD instance like in https://aws.amazon.com/blogs/database/use-a-self-hosted-active-directory-with-amazon-rds-custom-for-sql-server/ and then replicate ethe ntries that you need between your private AD instance and AWS Directory service. Then, those entries that you replicated from AWS DS should become visible for your RDS instance via the private AD. (I know that it looks cumbersome but it may allow you to achieve what you need until the integration of DS with RDS works if you cannot wait)

Best,

Didier

profile pictureAWS
전문가
답변함 10달 전
  • Thank you for your help. I will create support ticket first for checking.

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠