Why doesn't ec2-instance-connect work on AWS-Parallel-Cluster
I know Parallel Cluster3 doesn't officially support ec2-instance-connect and SSM but I'm trying to figure out why.
It seems to be failing in
more accurately, it fails when it tries to fetch instance metadata.
In that script calling
/usr/bin/curl 169.254.169.254/latest/meta-data/ returns nothing
When logged in the instance using pcluster ssh, it returns the expected data.
How does this happen?
Finally figured it out. There are iptables rules on parallel-cluster
$ sudo iptables -S -P INPUT ACCEPT -P FORWARD ACCEPT -P OUTPUT ACCEPT -N PARALLELCLUSTER_IMDS -A OUTPUT -d 169.254.169.254/32 -j PARALLELCLUSTER_IMDS -A OUTPUT -d 169.254.169.254/32 -m owner --uid-owner 129 -j ACCEPT -A PARALLELCLUSTER_IMDS -d 169.254.169.254/32 -m owner --uid-owner 0 -j ACCEPT -A PARALLELCLUSTER_IMDS -d 169.254.169.254/32 -m owner --uid-owner 400 -j ACCEPT -A PARALLELCLUSTER_IMDS -d 169.254.169.254/32 -m owner --uid-owner 1000 -j ACCEPT -A PARALLELCLUSTER_IMDS -d 169.254.169.254/32 -j REJECT --reject-with icmp-port-unreachable
This blocks the ec2-instance-connect user from accessing the meta-data
Why doesn't ec2-instance-connect work on AWS-Parallel-Clusterasked 17 days ago
AWS IoT maximum reported attributes and how I ca increase this numberasked 2 years ago
Eventbridge Input Transformer example doesnt workasked 16 days ago
I use the EC2Rescue, but I can`t upload data to support url.Accepted Answerasked 3 months ago
I get ListMetrics in CloudWatch but I do not know whyasked 3 months ago
IAM Access Analyzer Delegated admin and Org configuration, doesnt pick up root accountasked 3 days ago
Route53 weighted routing to multiple cloudfront resources in same hosted zone doesnt work.asked 12 days ago
XCTestUI failing to run on AWS device farmasked a year ago
AWS System Manager Running AWS-RunRemoteScript doesnt redirect stream output to fileAccepted Answerasked 2 months ago
Error on uploading to S3. It seems like something has been expired but which one?asked a month ago