All Questions
Content language: English
Sort by most recent
https://forum.parallels.com/threads/reactivated-hibernated-mavhine-client-refuse-to-connect.360127/
AWS EC2 WIN 12 SERVER 2012-R2_RTM
ANDROID -- Parallels Client 19.02 (newest)
The client works with newly established machines & machines reconnect to the clientnwhen I keep them running.
ISSUE
Repeatable, on multiple machines already -- when the machine(s) get hibernated & reactivated, AWS assigns them a new public IPv4+password, & these get copied over into the client (discard typos possibility). As mentioned, this is not a solitary machines issue, but repeatable no matter how many new machines I spawn. Also, enough time passed for a machine to reboot (rebooted & running overnight).
The bottom line, credentials are defo all correct & machine us running: what's the resolution & where, Client or AWS?
ERROR Feedback
[0x4000000F] - The specified remote connection could not be found.
Verify that you have typed the correct computer name or IP address, and then try to connect again.
REPORTcontent://com.parallels.client.fileprovider/feedback_external/version.log
content://com.parallels.client.fileprovider/screenshots_external/Screenshot-3A410B06-37ED-45B4-A841-36BD3A83C0FD.png
content://com.parallels.client.fileprovider/feedback_external/logs.zip
content://com.parallels.client.fileprovider/root/data/data/com.parallels.client/app_data/prelaunchlib
I'm trying to write an Eventbridge event rule to detect a Security Group inbound rule change which allows ingress on SSH or RDP from 0.0.0.0/0. However, I'm getting error "Event pattern is not valid" for ipRanges on below rule:
```
AWSTemplateFormatVersion: '2010-09-09'
Description: SecurityAlerting
Resources:
SGEventRuleNew:
Type: 'AWS::Events::Rule'
Properties:
Name: detect-SG-insecure-inbound
Description: An Event Rule that triggers on SG changes.
State: ENABLED
EventBusName: default
EventPattern:
source:
- aws.ec2
detail-type:
- AWS API Call via CloudTrail
detail:
eventSource:
- ec2.amazonaws.com
eventName:
- AuthorizeSecurityGroupIngress
requestParameters:
ipPermissions:
items:
- fromPort:
numeric:
- 22
- 3389
toPort:
numeric:
- 22
- 3389
ipRanges:
items:
- cidrIp:
match: 0.0.0.0/0
```
A sample event is as below:
```
{
"version": "0",
"id": "xyzxyzxyz",
"detail-type": "AWS API Call via CloudTrail",
"source": "aws.ec2",
"account": "123456789123",
"time": "2023-03-31T13:44:17Z",
"region": "us-east-1",
"resources": [],
"detail": {
"eventVersion": "1.08",
"userIdentity": {
"type": "AssumedRole",
"principalId": "AROA:XYZ",
"arn": "arn:aws:sts::123456789123:assumed-role/XYZ",
"accountId": "123456789123",
"accessKeyId": "XYZ",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "XYZ",
"arn": "arn:aws:sts::123456789123:assumed-role/XYZ",
"accountId": "123456789123",
"userName": "XYZ"
},
"webIdFederationData": {},
"attributes": {
"creationDate": "2023-03-31T13:15:37Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2023-03-31T13:44:17Z",
"eventSource": "ec2.amazonaws.com",
"eventName": "AuthorizeSecurityGroupIngress",
"awsRegion": "us-east-1",
"sourceIPAddress": "1.1.1.1",
"userAgent": "AWS Internal",
"requestParameters": {
"groupId": "sg-12346789456",
"ipPermissions": {
"items": [{
"ipProtocol": "tcp",
"fromPort": 22,
"toPort": 22,
"groups": {},
"ipRanges": {
"items": [{
"cidrIp": "0.0.0.0/0"
}]
},
"ipv6Ranges": {},
"prefixListIds": {}
}]
}
},
"responseElements": {
"requestId": "546416541321654654164",
"_return": true,
"securityGroupRuleSet": {
"items": [{
"groupOwnerId": "123456789123",
"groupId": "sg-12346789456",
"securityGroupRuleId": "sg-12346789456",
"isEgress": false,
"ipProtocol": "tcp",
"fromPort": 22,
"toPort": 22,
"cidrIpv4": "0.0.0.0/0"
}]
}
},
"requestID": "546416541321654654164",
"eventID": "546416541321654654164",
"readOnly": false,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "123456789123",
"eventCategory": "Management",
"sessionCredentialFromConsole": "true"
}
}
```
Please suggest how I can correct the syntax to validate the rule and match the event.
We are using Amazon Managed Grafana with Google Workspace SAML SSO.
When using the `Sign in with SAML` login button directly from the Grafana `/login` route on the AWS provided domain, access is successfully permitted.
However, when trying to use IdP-initiated sign-on from Google Workspace Google apps, we receive the following error message:
> corresponding relay state is not found: https://<name>.grafana-workspace.<region>.amazonaws.com/login/saml
Within the SAML/SSO configuration in Google Workspace, we have provided the `Start URL` value as `https://<name>.grafana-workspace.<region>.amazonaws.com/login/saml`. Additionally, we not selected the `Signed response` option.
Any thoughts?
We can ingest RTSP to Kinesis but would like to know the best method to ingest cell phone video.
We have a use case where we need to retrieve data from an external system using a REST API interface and store it into Redshift. The volume of data is expected to be quite small and the process needs to run on a schedule, once a day.
What tools and architecture is recommended for this?
Thanks!
I find different pieces of the puzzle I need to solve, but none of the examples I've found online show how to do multiple stages in a sam template (ie: Deploy dev, prod, and test) at the same time. And none show how to proxy to a URI that I've found. All of them show the gateway going to lambda as a proxy. But how do you do a standard http_proxy in the template?
Sorry, new to SAM so trying to figure things out. I need 1 API gateway with multiple stages that http_proxies to a URI. Each stage goes to the same place, but different API keys used for each one as a stage variable. And I need it to be private with two VPCE's so I have to attach a resource policy to it as well. All in SAM :)
Hello there AWS team!
I'm currently working with the ESP32 platform to create a device that connects to AWS and sends/receives data.
The idea is that I will have multiple ESP32 devices. At this moment what I'm doing is that I create a Thing per each device. So, if I have 3 devices, I need to create 3 Things, with their respective certificate and key.
JITP helped me but I noticed each firmware will be different for each device. For example, device 1 will have firmware 1 with certificate 1 and key 1. The same thing will happen for devices 2, 3, and so on.
I'm doing OTA with these devices and since every firmware needs to be different due to the certificates, keys, and thingname... I'm facing an unscalable wall.
Is there any option that helps with this?
The only option I can think of right now is to use 1 Thing in AWS IoT Core, and all my devices in the field will have the same certificate and key. I feel that is not a good practice, but the other option seems way worse.
Thanks a lot in advance
why do every time I create 3cx instance for a customer. after installation I found 2 instances instead of 1?
How to create Greengrassv2 core device with AWS Sdk.
while we create 3 instances of EC2 under free trial then what should be the instance running time for each instance? I know the aws provide 750hrs for ec2 but confused in case of multiple instances.
Hello,
The amount of Routes per Border Gateway Protocol (BGP) session on a transit virtual interface is limited to 100.
See https://docs.aws.amazon.com/directconnect/latest/UserGuide/limits.html
How to monitor the amount of BGP routes on a transit virtual interface?
Thanks and BR,
Roman
PS: I don't find a cloudwatch metric for the amount of routes.
Assume a user connects via a Websocket connection to a server, which serves a personalized typescript function based on a personalized JSON file
So when a user connects,
- the personalized JSON file is loaded from an S3 bucket (around 60-100 MB per user)
- and when he types a Typescript/JavaScript/Python code is executed which returns some string a reply and the JSON-like data structure gets updates
- when the user disconnects the JSON gets persisted back to the S3-like bucket.
In total, you can think about 10,000 users, so 600 GB in total.
It should
- spin up fast for a user,
- should be very scalable given the number of users (such that we do not waste money) and
- have a global latency of a few tens of ms.
Is that possible? If so, what architecture seems to be the most fitting?