Questions tagged with DevOps

Hi, We've an odd issue with Amazon inspector. Recently we've pushed multiple Docker images into private ECR repositories, and we're scanning them with "Enhanced scanning" and "Continuously scan all repositories" - we have no scanning overrides on individual repositories and no suppression rules; our "*" filter is actively scanning all images. The scan results appear fine in ECR if you select a repository then click the "See findings" link under "Vulnerabilities" - we see critical package vulnerabilities. However: in Inspector, the "Critical findings" panel of the dashboard always displays "0 Critical" under "ECR Container". It also doesn't show the critical issue findings if you filter "By container image" or "By repository" - nothing. But: if you select "All findings" the critical ECR package issues are visible... We had thought this might be some sort of dashboard update issue, but it's been like that for over 12 hours now. What do we need to do to get our scanned critical ECR image vulnerabilities reported on the main Inspector dashboard stats? Thanks. [Dashboard Findings: Criticals 0](https://ibb.co/ZcNBFm3) [Container Image Findings: Empty](https://ibb.co/Zgtg5NZ) [All Findings - Criticals present and correct](https://ibb.co/NTw8vpX)

Hi - We are using CfCT, which is great. We currently have cloudformation templates mapped to specific Organizational Units and it works like a charm. I now have a AWS SAM Template that I would like to deploy but I could find 0 documentation about it. At the solution repository, I can see that are features enabled to support SAM[1], but no guidance on how to do it. Could you please share more information on how to deploy a AWS SAM Template through CfCT? [1] - https://github.com/aws-solutions/aws-control-tower-customizations/blob/08f76abd9548cc88d091ab6a8d8f127c768c331b/CHANGELOG.md#L18

We are trying to establish a pipeline notification rule to SNS topic to Microsoft Teams channel (via Lambda function). This has already been accomplished multiple times with manual configuration, but now we want to implement it with automation with CDK. https://docs.aws.amazon.com/cdk/api/v1/dotnet/api/Amazon.CDK.AWS.CodePipeline.Pipeline.html#Amazon_CDK_AWS_CodePipeline_Pipeline_NotifyOnExecutionStateChange_System_String_Amazon_CDK_AWS_CodeStarNotifications_INotificationRuleTarget_Amazon_CDK_AWS_CodeStarNotifications_INotificationRuleOptions_ The NotifyOnExecutionStateChange() wants an INotificationRuleTarget, but I *cannot find anything* that implements that interface. https://docs.aws.amazon.com/cdk/api/v1/dotnet/api/Amazon.CDK.AWS.CodeStarNotifications.html The CodeStarNotifications library does not appear to have a corresponding class to that interface. What's the class to use?

Hi, I would like to enable dynamodb stream on an existing dynamodb table using cloudformation template. I searched but could not find anything in this regard. I see there is way to enable dynamodb stream for an existing table using console but couldn't find any way to achieve same using cloudformation template. Can you help with this .

Hi Gurus, I am working on setting up VMC on AWS. Can anybody please advise with Bill of materials(minimum required template) for setting up VMC on AWS? Thanks Jo

Hi, im recently check throught this blog: https://aws.amazon.com/blogs/security/deploy-dashboard-for-aws-waf-minimal-effort/ but seems the cfn template link have a permission issues. Exist any updated version for that solution or another similar ? Thanks in advance,

Hi team, I'm looking for the best option to handle SES feedback loop in AWS? We have to handle bounces and complaints. if the user REPORT SPAM or if the email bounces (because you delete your email or the mailbox is full). **so we need to store feedback loop somewhere ** Thank you :)

Hi, We want to implement a pessimistic locking of code commit and wanted to find out steps to implement this. Would appreciate if anyone can provide guidance on this. Thank you

I am getting the errors: 1>error LNK2001: unresolved external symbol "__declspec(dllimport) void __cdecl Aws::InitAPI(struct Aws::SDKOptions const &)" (__imp_?InitAPI@Aws@@YAXAEBUSDKOptions@1@@Z) 1>error LNK2001: unresolved external symbol "__declspec(dllimport) public: __cdecl Aws::Client::ClientConfiguration::ClientConfiguration(void)" (__imp_??0ClientConfiguration@Client@Aws@@QEAA@XZ) . . . 1> fatal error LNK1120: 21 unresolved externals I am building my application with VS2019 but with the VS2015 runtime libraries (v140). 64 bit release and debug. Multi-threaded libraries (/MT) I used vcpkg to obtain the AWSSDK and I believe I built the SDK to match my configuration. I am linking with aws-cpp-sdk-s3.lib;aws-cpp-sdk-core.lib. I am defining USE_WINDOWS_DLL_SEMANTICS and USE_IMPORT_EXPORT in my code Any suggestions would be much appreciated. Thank you.

I'm quite new at AWS and use mostly the console to build my project. I have placed a containerized Streamlit web app in an AWS EC2/ECS instance beyond an ALB (https listener with session timeout 3960 secs.) and let users access it through Cognito authentication with Authorization code grant. Everything works fine, users are allowed to the app. Now, I would like users to be authomatically logged out after 60 minutes and redirected to the signout URL. I've set the refresh token expiration at 60 min., the access token and ID token expiration at 5 min. However, the backend continues delivering data to logged in users even after 60 minutes, so my idea doesn't work. Then, I've implemented a Lambda function with admin_user_global_sign_out but it doesn't work either: users do still get data from the backend. I'm wondering what I shall do and looking for a solution that I can implement using the AWS console so that the procedure is clear to me. Thank you for any help.

One box stage in CICD pipeline is a stage before production stage. This stage also will receive the production traffic. The goal of this stage is to validate the new changes with very small prod traffic and keep the blast radius to minimal incase of issues. In server based deployment, this stage will contain only 1 machine to receive very small % of traffic. The code changes will be deployed to 1-box stage before production and leave it for some time to validate the behaviour of new change. If there is an issue in 1-box stage with the new code, the blast radius will be minimal and roll back is faster since the changes are deployed in only one machine. It is explained in "Backward compatibility and one-box testing" topic in this link - https://aws.amazon.com/builders-library/automating-safe-hands-off-deployments/ How do we setup the same in lambda ci-cd ? Any leads on this will be super helpful.

I have a few team members want to work on different parts of a solution architecture. They should be able to create the following resources in their accounts, consume any updates from other team members updates to the whole solution architecture and test. These are the resources: 1. EventBridge (1 ESB) 2. C# Lambdas (6 Lambdas) 3. Cron Jobs (4 Cron Jobs) 4. On-Prem client applications (1 JavaScript applicaiton) This is our SDLC process: 1. We will use the AWS C# CDK to create the resources and roles. 2. On-Prem Jenkins to create a CI/CD To accomplish smooth development and deployment of the projects, what is the recommended way to split the projects into GitHub repositories? 1. Should the CDK (Infrastructure as Code) to create all the resources be a separate repository? Can this help the developer to deploy the resources in a single execution? 2. Should the CDK (Infrastructure as Code) to create the resource be part of the lambda or cron job itself? Any suggestions appreciated.

Hello, I wanted to ask you if it is possible to create an OpenLiteSpeed web server app using AWS Elastic Beanstalk. I'm planning on launching a WordPress site with it. I have just created one but it creates it with NGINX and gives me the option to change it to Apache. Do you have any docs on how to do it? If possible.

Can you tag an existing cloudformation resource in the console or cli?

Hi team, I have a glue workflow : trigger (type = "EVENT") => trigger a glue job (to take data from S3 and push them to MySQL RDS) I configured the glue Triggering criteria to kickoff the glue job after 5 events were received. in the console it says : > Specify the number of events received or maximum elapsed time before firing this trigger. > Time delay in seconds (optional) on AWS documentation it says also it's not required : ``` BatchWindow Window of time in seconds after which EventBridge event trigger fires. Window starts when first event is received. Type: Integer Valid Range: Minimum value of 1. Maximum value of 900. Required: No ``` So I want only my trigger to be triggered only and only after 5 events are received and not depending on: Time delay in seconds (optional). actually, the Time delay in seconds (optional) is set to 900 by default and my job is started after 900s even if there are no 5 events received. that's not the behaviour we want. We want ONLY the job to be started after x events are received. I tried via the console to edit the trigger and remove the 900s for the Time delay in seconds (optional) input but I can't save it until I put a value on it. it says it's optional but it doesn't seem to be. is there a workaround to make the trigger not take account of Time delay in seconds (optional)? and only be launched when it received x events and nothing else. right now the behaviour I have is that my job is triggered after 900s, we want to eliminate this case and let the job be triggered only and only if there is x event received and nothing else. how can I make the Time delay in seconds (optional) input optional, because now the console forces me to put a value in there? thank you.

Hello, I have finished the setup of Systems Manager Change Manager, I created the SNS Topic for Template Reviewers, Change Request Approvers and also another one for Notifications of the change request progress. Every time I run a Change Request it says on the Timeline: ``` Failed to publish notifications to SNS. ``` I have tried to use the same Topic of Approvers and Template Reviewers (where I know the emails are being sent correctly) but the error is the same, I would like to know what am I missing ? Does the Topic need a different Access Policy ? Do I need to add a SNS Policy to another role ? Thanks for your insights.

I have updated several task definitions and for the life of me I cannot get the latest revisions to run. We are using the AWS code management system, e.g. Code Deploy, Code Commit, etc. Wondering if there is a preferred way to get task definition to run the latest revision. I have tried stopping the service and updating with "Force new Deployment" checked and so far no dice. Any idea what I'm doing wrong?

I have react application which i integrated into amplify. The amplify created one amplifyapp domain, which is using the production configuration (some of the debug settings are not visible). How do we make the front end CI/CD pipeline for react application using amplify with dev (with dev settings), pre-prod and prod stages ?

I want to host a python code based service in Lambda behind API GW. AFAIK, there are 2 approaches to deploy the code to Lambda. 1. simply zip the code and upload to S3 and link with the lambda function 2. create ECR images and deploy it with lambda function. Are there any guidance on when to use ECR ? and when to use simple code zipping ? What are the pros and cons of each approach ? Some leads on this topic will be super helpful.

Hi there i am trying to start a task which uses gpu on my instance. EC2 is already added to a cluster but it failed to start, here is the error: ``` status: STOPPED (CannotStartContainerError: Error response from dae) Details Status reason CannotStartContainerError: Error response from daemon: OCI runtime create failed: container_linux.go:380: starting container process caused: process_linux.go:545: container init caused: Running hook #0:: error running hook: exit status 1, stdout: , stderr Network bindings - not configured ``` ec2: setup ``` Type: AWS::EC2::Instance Properties: IamInstanceProfile: !Ref InstanceProfile ImageId: ami-0d5564ca7e0b414a9 InstanceType: g4dn.xlarge KeyName: tmp-key SubnetId: !Ref PrivateSubnetOne SecurityGroupIds: - !Ref ContainerSecurityGroup UserData: Fn::Base64: !Sub | #!/bin/bash echo ECS_CLUSTER=traffic-data-cluster >> /etc/ecs/ecs.config echo ECS_ENABLED_GPU_SUPPORT=true >> /etc/ecs/ecs.config ``` Dockerfile ``` FROM nvidia/cuda:11.6.0-base-ubuntu20.04 ENV NVIDIA_VISIBLE_DEVICES all ENV NVIDIA_DRIVER_CAPABILITIES compute,utility # RUN nvidia-smi RUN echo 'install pip packages' RUN apt-get update RUN apt-get install python3.8 -y RUN apt-get install python3-pip -y RUN ln -s /usr/bin/python3 /usr/bin/python RUN pip3 --version RUN python --version WORKDIR / COPY deployment/video-blurring/requirements.txt /requirements.txt RUN pip3 install --upgrade pip RUN pip3 install --user -r /requirements.txt ## Set up the requisite environment variables that will be passed during the build stage ARG SERVER_ID ARG SERVERLESS_STAGE ARG SERVERLESS_REGION ENV SERVER_ID=$SERVER_ID ENV SERVERLESS_STAGE=$SERVERLESS_STAGE ENV SERVERLESS_REGION=$SERVERLESS_REGION COPY config/env-vars . ## Sets up the entry point for running the bashrc which contains environment variable and ## trigger the python task handler COPY script/*.sh / RUN ["chmod", "+x", "./initialise_task.sh"] ## Copy the code to /var/runtime - following the AWS lambda convention ## Use ADD to preserve the underlying directory structure ADD src /var/runtime/ ENTRYPOINT ./initialise_task.sh ```

Hi team, I create a bucket with CDK and set the property **eventBridgeEnabled to true** ``` const bucket = new Bucket( this, "myBucket", { versioned: false, publicReadAccess: false, blockPublicAccess: BlockPublicAccess.BLOCK_ALL, **eventBridgeEnabled: true**, } ); ``` but when I go to the** s3 console** and check the properties tab/ EventBridge it's still **showing "off" instead of "on"** is there anything missing? Thank you.

Hi team, I want to add a glue workflow as a target to my rule ``` import * as events from "@aws-cdk/aws-events"; const rule = new events.Rule( this, "object_created_event", { description: "description here....", ruleName: "newObj", enabled: true, eventPattern: { source: ["aws.s3"], detailType: ["Object Created"], detail: { bucket: { name: ["test_bucket"], }, }, }, } ); rule.addTarget(new targets.....); ``` I can't find glue workflow as a target on the targets list so that I can add it as a target to my rule. is there any other way to do it other than using ..addTarget method? thank you.

Hi team, I want to enable eventBridge notification on my S3 bucket via CDK, I saw it was added as a property to the bucket props as part of this PR : https://github.com/aws/aws-cdk/pull/18150 but I can't find it on the props ``` import { BlockPublicAccess, Bucket} from "@aws-cdk/aws-s3"; const myS3Bucket= new Bucket( this, "myS3Bucket", { versioned: false, publicReadAccess: false, blockPublicAccess: BlockPublicAccess.BLOCK_ALL, eventBridgeEnabled: true, -- error here ..... } ); ``` I have this error : `eventBridgeEnabled: boolean; }' is not assignable to parameter of type 'BucketProps'.` I even tried with CfnBucket but had same error ``` const bucket = new CfnBucket(this, 'MyEventBridgeBucket', { eventBridgeEnabled: true, }); ``` `Argument of type '{ eventBridgeEnabled: boolean; }' is not assignable to parameter of type 'CfnBucketProps'. Object literal may only specify known properties, and 'eventBridgeEnabled' does not exist in type 'CfnBucketProps'` I want to simply to add it in my first declaration so I can keep those properties : ``` versioned: false, publicReadAccess: false, blockPublicAccess: BlockPublicAccess.BLOCK_ALL, ``` how can I enable eventBridge on my S3 bucket via CDK ? Thank you!

I am creating a cloud9 environment from CDK as below. I want to attach/adjust EBS volume size and attach a IAM Role to the EC2 of the cloud9 from the CDK stack. Can anyone help? ``` import { aws_cloud9, Stack, StackProps } from 'aws-cdk-lib'; import { Construct } from 'constructs'; export class Cloud9CdkStack extends Stack { constructor(scope: Construct, id: string, props?: StackProps) { super(scope, id, props); // cloud9 environment const cloud9 = new aws_cloud9.CfnEnvironmentEC2( this, 'CdkCloud9Example', { automaticStopTimeMinutes: 30, instanceType: 't2.large', name: 'CdkCloud9Example', connectionType: 'CONNECT_SSM', ownerArn: 'arn:aws:iam::IAM_USER_ID:user/IAM_USER_NAME' } ) // access the ec2 and attach volume ?? } } ```

So, does anyone know what the upgrade path is for the Control Tower Python 3.6 lambdas? Did AWS publish any way to resolve these issues before CT breaks in a couple months?

I have a device "Device1" in group A, and there is a deployment in place for that group. Now, I would like to move Device1 to group B, for which there is a different deployment. I removed the device from group A, but the deployment is still running. How can I stop the deployment of group A for this specific device, and remove the components ?

I'm trying to release some code using "eb deploy". Normally this works fine, but when deploying anything that includes the code from a particular pull request, the deploy fails, seemingly without logging any errors. I see: > Instance id(s) '<a,b,c,d>' did not pass health check after command execution. When looking at the logs, I don't see any errors from the time that the deploy happened, and in fact it says "Application update - Command CMD-AppDeploy succeeded". The logs I'm looking at are the ones in the zip you can download from https://us-west-1.console.aws.amazon.com/elasticbeanstalk/home?region=us-west-1#/environment/logs?applicationName=MY_APPLIICATION_NAME&environmentId=SOME_ENVIRONMENT (And I did specifically look at logs for one of the instances that it said didn't pass health checks) Other than checking these logs, what else can I do to help diagnose this problem?

I have a CloudFormation setup with Scheduled Actions to autoscale services based on times. There is one action that scales up to start the service, and another to scale down to turn it off. I also occasionally add an additional action to scale up if a service is needed at a different time on a particular day. I'm having an issue where my service is being scaled down instead of up when I specify this additional action. Looking at the console logs I get an event that looks like: ``` 16:00:00 -0400 Message: Successfully set min capacity to 0 and max capacity to 0 Cause: scheduled action name ScheduleScaling_action_1 was triggered ``` However the relevant part of the CloudFormation Template for the Scheduled Action with the name in the log has a different time, e.g.: ``` { "ScalableTargetAction": { "MaxCapacity": 0, "MinCapacity": 0 }, "Schedule": "cron(0 5 ? * 2-5 *)", "ScheduledActionName": "ScheduleScaling_action_1" } ``` What is odd is that the time this action is triggering matches exactly with the Schedule time for another action. E.g. ``` { "ScalableTargetAction": { "MaxCapacity": 1, "MinCapacity": 1 }, "Schedule": "cron(00 20 ? * 2-5 *)", "ScheduledActionName": "ScheduleScaling_action_2" } ``` I am using CDK to generate the CloudFormation template, which doesn't appear to allow me to specify a timezone. So my understanding is that the times here should be UTC. What could cause the scheduled action to trigger at the incorrect time like this?

I have an API that uses a leaky bucket algo for token restoration. What's a good serverless pattern for being able to consume the API in the most efficient way, while maximizing the use of allocated tokens? Ideally, I want to have an SQS that we can then process in a throttled way. Currently, we just execute Lambda on schedule and read from the queue, but this results in unnecessary executions when the queue is empty. Thanks.

TLDR: I inherited a Wordpress site that I now manage that had a DevOps deployment pipeline that worked when the site was low to medium traffic, but now the site consistently gets high-traffic and I'm trying to improve the deployment pipeline. The site I inherited uses Lightsail instances and a Lightsail load balancer in conjunction with one RDS database instance and an S3 bucket for hosted media. When I inherited the site, the deployment pipeline from the old developer was: *Scale site down to one instance, make changes to that one instance, once changes are complete, clone that updated instance as many times as you need* This worked fine when the site mostly ran with only one instance except during peak traffic times. However, now at all times we have 3-5 instances as even our "off-peak" traffic is really high requiring multiple instances. I'd like to improve the deployment pipeline to allow for deployment during peak-traffic times without issues. I'm worried about updating multiples instances behind the load balancer one by one sequentially because we have Session Persistence disabled to allow for more evenly distributed load balancing. And I'm worried a user hopping to different instances that have a different functions.php file will cause issues. Should I just enable session persistence when I want to make updates and sequentially updates instances behind the load balancer one by one? Or is there a better suited solution? Should I move to a containers setup? I'm admittedly a novice with AWS so any help is greatly appreciated. Really just looking for general advice and am confident I can figure out how to implement a suggested best-practice solution. Thanks!

Currently using openapi definition in conjunction of CDK in python to produce api-gateway definition resources (REST), how does one test as code (unit or functional) to ensure that nothing breaks accidently?

I have multiple device to which my component is deployed to. I added a new device "my-device15", but the component was not properly started on it. I SSH'd into the device and fixed the problem. Can I retry the deployment only on this device without revising the deployment (since that would impact all the other device)?

Hi there, I'm trying to write a lambda layer in Go using the `google/gopacket` package for capturing network traffic packets. This uses the libpcap C library underneath, and I used https://github.com/lambci/yumda to produce a separate lambda layer that provides the libpcap.so shared library In my layer, I've added the code as outlined here: https://pkg.go.dev/github.com/google/gopacket@v1.1.19/pcap#hdr-Reading_Live_Packets However I am receiving the following error: ``` panic: vinternal_1: You don't have permission to capture on that device (socket: Operation not permitted) ``` I've also tried passing different network IDs, e.g. `"eth0"`, however I am still receiving the same error I am wondering if I do not have access to the right permissions/capabilities when using the .zip method. I had previously tested the custom lambda container image approach, and it worked, but I would prefer to use the zip file approach to avoid heavy deployment processes. Any ideas how I can get the right permissions in a zip-file lambda layer, to allow libpcap to capture packets on the lambda-managed network interface? Thanks :)

I have a SAP server that's hosted on AWS, I am unable to access the data because the EBS volumes are not mounting correctly on the server. I need help knowing the correct path to mount the EBS volumes on the server. The server has 6 EBS volumes.

I have noticed the new Function URL for lambdas that have just been launched recently. I am interested to use this functionality as it will be a cost-saver for us. However, I have not found any way to add it to integrate it into our terraform files. the [tutorial](https://docs.aws.amazon.com/lambda/latest/dg/urls-tutorial.html) here uses all other services but terraform. If you have any idea how and if it can be done, I will be grateful. Thanks!

Is there a known workaround for specifying a list of parameter overrides to the `aws-actions/aws-cloudformation-github-deploy` github action for deploying cloudformation templates? The action doesn't handle lists of parameter values, it expects every key to a have a single value and throws an error once there's a comma present to indicate a list. [This](https://github.com/aws-actions/aws-cloudformation-github-deploy/pull/54) is an issue describing the problem in more detail. That repo is archived so I can no longer comment or create an issue to try to resolve this problem, hence why I'm posting here. Any ideas?

This is a real pain. After configuring all the ENV variables and the service options, the deployment will fail if, for example, there is a bad source image or the source image repo is empty. Afterwards, there is no option to retry it - the "resume" is greyed out, and there is no button that will redo the deployment. Why? Why do I have to delete this now and enter everything again? This is very tedious.

I'm working with a CDK deployment that another coworker put together. I pulled it from a repo and when I diff on my end , I see a bunch of Refs as being different from what is currently deployed, ie. ``` [~] AWS::IAM::Policy Custom::CDKBucketDeployment..../ServiceRole/DefaultPolicy CustomCDKBucketDeployment...ServiceRoleDefaultPolicy...FDF └─ [~] PolicyDocument └─ [~] .Statement: └─ @@ -17,7 +17,7 @@ [ ] }, [ ] ":s3:::", [ ] { [-] "Ref": "AssetParameters...71A7" [+] "Ref": "AssetParameters...E99B2" [ ] } ``` For debugging, another interesting difference is the path changing for an asset, ``` [~] AWS::Lambda::LayerVersion DeployConfig/AwsCliLayer DeployConfigAwsCliLayer... └─ [~] Metadata └─ [~] .aws:asset:original-path: ├─ [-] /private/var/folders/96/.../T/jsii-kernel-O1sxtX/node_modules/@aws-cdk/lambda-layer-awscli/lib/layer.zip └─ [+] /tmp/jsii-kernel-jSg2jv/node_modules/@aws-cdk/lambda-layer-awscli/lib/layer.zip ``` Is it possible that these changes won't affect our existing deployment if I deploy? The code I've pulled is up to date so I can't explain why I would have these differences.

As a root user, I created an environment in Cloud9, then created IAMS users and gave them RW access to the environment, which I can see has worked when I click the Share button on the upper left corner of the environment, but when they log in and go to Cloud9 they can see the card for the environment but 'Open IDE' is grayed out and they can't access it. Sigh.

I have 5 crons which have separate destination lambdas. All lambdas do same work except they just pass a different parameter to a common downstream. Currently there is no way to pass additional parameter alongside cron so that I can have 1 lambda as destination for 5 crons instead of 5 different ones. Can you add this feature?

We have a CodeBuild project that is set up to build the develop branch from our GitGub repository when changes are pushed to it. In our case we used a 'Push' event trigger with this in the head ref ^refs/heads/develop$ That works but when you go to look at the builds to see which one you want to deploy, it just shows the merge commit hash for the develop branch under the 'Source Version' column rather than saying "develop". If I do a manual build and use 'develop' as the source it does say 'develop' in the source version. Is there a way to control this so that the Source Version shows something more meaningful? thanks

I want to be able to have a step function that does the following: 1. The step function starts with a call to API Gateway from my web app 2. The step function starts a Fargate pod based on a specific image 3. The step function runs a task on the pod it just created 3. After the Fargate task completes, terminate the pod so it does not consume resources Is this possible to tell Step Functions to start a new pod based on a certain image and then terminate that pod after it returns a success code? I have not been able to find any info on this. Thank you

Is there a way to deploy a component with different configuration for each device group or tag ? We have different kind of device that should have slightly different component behavior. For instance, a device A may not want to use sensor X. Is there a way to have a deployment that deploys to all my devices, but has a configuration parameter specifically for device A ? I could implement htat using an API call ListTagsForResource but that would happen too late in my workflow. I could also have two different deployments with different config, but then I have no guarantee that all my device are running the same component version, plus the logic would now be replicated in two deployments. Edit: There seems to be a way to achieve it by setting "platformOverride" to the nucleus component, altough I am not sure how that would be done

Please guide me how can i get source code data on my aws login. *Edit: Removed Account ID on 04/07/22 per our Community Guidelines regarding PII - John M.

According to [Amplify documentation](https://docs.amplify.aws/cli/usage/export-to-cdk/) and [this official blog post](https://aws.amazon.com/blogs/mobile/export-amplify-backends-to-cdk-and-use-with-existing-deployment-pipelines/), it is possible to export infrastructures from Amplify then import into CDK. However, I try with CDK V2 and it does not work. I got error when installing **npm i @aws-amplify/cdk-exported-backend@latest**. CDK V2 **Construct** is not compatible with the **Construct** in aws-amplify/cdk-exported-backend, I think. So how to export Amplify infrastructure to CDK V2? Thank you! 1. Here is my package.json of CDK ``` { "name": "amplify-export-cdk", "version": "0.1.0", "bin": { "amplify-export-cdk": "bin/amplify-export-cdk.js" }, "scripts": { "build": "tsc", "watch": "tsc -w", "test": "jest", "cdk": "cdk" }, "devDependencies": { "@types/jest": "^26.0.10", "@types/node": "10.17.27", "jest": "^26.4.2", "ts-jest": "^26.2.0", "aws-cdk": "2.18.0", "ts-node": "^9.0.0", "typescript": "~3.9.7" }, "dependencies": { "aws-cdk-lib": "2.18.0", "constructs": "^10.0.0", "source-map-support": "^0.5.16" } } ``` 2. Here is errors when installing ``` npm ERR! code ERESOLVE npm ERR! ERESOLVE unable to resolve dependency tree npm ERR! npm ERR! While resolving: amplify-export-cdk@0.1.0 npm ERR! Found: constructs@10.0.108 npm ERR! node_modules/constructs npm ERR! constructs@"^10.0.0" from the root project npm ERR! npm ERR! Could not resolve dependency: npm ERR! peer constructs@"^3.2.27" from @aws-amplify/cdk-exported-backend@0.0.5 npm ERR! node_modules/@aws-amplify/cdk-exported-backend npm ERR! @aws-amplify/cdk-exported-backend@"0.0.5" from the root project npm ERR! npm ERR! Fix the upstream dependency conflict, or retry npm ERR! this command with --force, or --legacy-peer-deps npm ERR! to accept an incorrect (and potentially broken) dependency resolution. ```

Hi Everyone, I'm a veteran taking programming classes on line via the GI Bill with other veterans. Many of my fellow students have super old PCs that have difficulty with the Programming software (such as Eclipse and SQL running locally). I'm also using AWS for unrelated personal projects. I was trying to find an image that might be free and easy for them to use. I'm obviously new to virtual machines in this environment. I feel like the easiest thing to do would be to create a new instance for each of my fellow students to use on an as needed basis. I'm getting hung up on finding the best image to use. Are there any recommendations for cost effective/1 person connecting to a dev PC just for classes a few hours a day, configurations? The classes are very Windows centric. Thank You

When using AWS SAM CLI to debug Lambda function locally, the process in VS Code goes like this: 1. Click Run / Press F5 2. (SAM initializes in background, spins up docker container) 3. VSCode opens a new tab called "index.js" with the entry point in it, and the debugger attaches and pauses. 4. You must press Run / F5 again at this point, and close the "index.js" tab if you're not using it. Is there any way to get this tool to skip step 4? I don't want it to open a new tab with entry point code in it - I'm not looking at that code or debugging it. It would also be really nice if the debugger just continued automatically following the attach. I find myself pressing F5 and closing index.js thousands of times per day. Am I doing this wrong, or does everyone have to suffer through this?

I'm trying to create SNS topics and subscriptions through Terraform and it appears to be successful when doing so. However, I can never see them in the GUI for some reason. I know that email subscriptions aren't fully supported through Terraform so I thought that may be the reason it's not showing up even though I receive the confirmation email, but I then tried another route using a CloudFormation template by following the steps in this link: http://aws-cloud.guru/terraform-sns-topic-email-list/ Same issue though. Terraform says it created the SNS topic/subscription and I receive a confirmation email. But when I go under SNS in the GUI as my root account, I don't see any SNS topics. Here's the code for the first test case I did: ``` resource "aws_sns_topic" "sysadmin_alerts" { name = "sysadmin-alerts-topic" } resource "aws_sns_topic_subscription" "sysadmin_alerts_email_target" { topic_arn = aws_sns_topic.sysadmin_alerts.arn protocol = "email" endpoint = "fake@email.com" } ``` Is there something I'm missing in the process to create these via Terraform?

We have a component that starts multiple container on our greengrass device using docker-compose. According to [the documentation](https://docs.aws.amazon.com/greengrass/v2/developerguide/run-docker-container.html), the correct way to provide the private docker images from ECR is to supply them as artefact: "URI": "docker:public.ecr.aws/cloudwatch-agent/cloudwatch-agent:latest" One important aspect of our project is that we can reuse layers of our images. We have limited bandwidth on our devices and images can be big (i.e. PyTorch). If we have modification to do to our images, usually only the last small layer will be updated over the limited bandwidth network. I am worried when we are using images as artifacts, the whole image is going to be re-downloaded. Is that the case ? I currently have a workaround of using the "install" lifecycle step to execute "docker-compose pull" and removing the artifacts, but that has the issue of being run on reboot, while I would rather only have it update the images when there is a new deployment.

In AWS Elastic beanstalk i am facing an issue with Enhanced health overview -1 out of 1 instances are impacted. See instance health for details.? how to come up with strategy?

Hello, I create one Cloudformatin resource where I am creating custom resources by following:- ``` AWS::CloudFormation::CustomResource ``` Now I made a few manual changes in created resource and when I am checking the drift of CloudFormation template, It is showing InSync, So how can I check the drift of custom resources?

I cannot seem too get more than 1 concurrent build running at a time. If I try to set the "restrict Number of Concurrent Build" in the Project Configuration for CodeBuild to say 3 I get this error: "Project-level concurrent build limit cannot exceed the account-level concurrent build limit of 1" The build that we use builds a custom Windows Server Docker image. Not sure if that has any bearing on this. thanks

Hi, Currently, I'm doing load testing using Gatling and I have one issue with my lambdas. I have two lambdas one is written in Java 8 and one is written in Python. I'm using Gatling for my load testing and I have a test where I'm doing one request with 120 concurrent users then I'm ramping them from 120 to 400 users in 1 minute, and then Gatling is doing requests with 400 constants users per second for 2 minutes. There is a weird behavior in these lambdas because the responses are very high. In the lambdas there is no logic, they are just returning a String. Here are some screenshots of Gatling reports: [Java Report][1] [Python Report][2] I can add that I did some tests when Lambda is warm-up and there is the same behaviour as well. I'm using API Gateway to run my lambdas. Do you have any idea why there is such a big response time? Sometimes I'm receiving an HTTP error that says: i.n.h.s.SslHandshakeTimeoutException: handshake timed out after 10000ms Here is also my Gatling simulation code: public class OneEndpointSimulation extends Simulation { HttpProtocolBuilder httpProtocol = http .baseUrl("url") // Here is the root for all relative URLs .acceptHeader("text/html,application/xhtml+xml,application/json,application/xml;q=0.9,*/*;q=0.8") // Here are the common headers .acceptEncodingHeader("gzip, deflate") .acceptLanguageHeader("en-US,en;q=0.5") .userAgentHeader("Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:16.0) Gecko/20100101 Firefox/16.0"); ScenarioBuilder scn = scenario("Scenario 1 Workload 2") .exec(http("Get all activities") .get("/dev")).pause(1); { setUp(scn.injectOpen( atOnceUsers(120), rampUsersPerSec(120).to(400).during(60), constantUsersPerSec(400).during(Duration.ofMinutes(1)) ).protocols(httpProtocol) ); } } I also checked logs and turned on the X-ray for API Gateway but there was nothing there. The average latency for these services was 14ms. What can be the reason for that slow Lambda responses? [1]: https://i.stack.imgur.com/sCx9M.png [2]: https://i.stack.imgur.com/SuHU0.png

Hi team, I created an HttpAuthorizer via CDK and attached to it the lambda function authorizer but I don't find a way to allow the API gw to call my lambda authorizer. on the console we have the option: "automatically authorize API gw to call your function" I even create an API role and give it permission to call my lambda authorizer but there is no way to link it to the HttpAuthorizer. is there a way like a boolen to enable API gw to call my lambda authorizer or to link the apiRole directly to the HTTP authorizer ? Thank you!!

does cloudformation support sagemaker batch transform? if yes, can the jobs be triggered/run automatically once the stack is created?

I deployed a Docker service on Lightsail. It works fine for requests that can be processed quickly but times out (gateway timeout, code 504) for requests that take a bit longer to process. What is the timeout limit on Lightsail Container instances and can I increase it? Thank you.

How can we make sure what is the spot instance price boundaries as preflight? specifically the min price

The team comprises of 4 developers who would be working on features parallelly. The resources being used are **EventBridge**, **ECS**, **Fargate** etc... My questions are: 1. Is there any framework and CLI available to create **EventBridge** and other resources locally on developers' laptop? 2. Should the developers use the same **EventBridge** from the AWS Environment during the development? This can create conflicts between developers if they share some code. 3. Should the developers create their own environment with **EventBridge** in their AWS account during development? This can avoid conflicts. 4. Should the developers use the same AWS environment but create their own resources with different names?

I have received this error in eb-engine.log. All builds on Amazon linux 3.3.11 are succeeding but fails on 3.3.12 ``` × python setup.py egg_info did not run successfully. │ exit code: 1 ╰─> [6 lines of output] Traceback (most recent call last): File "<string>", line 2, in <module> File "<pip-setuptools-caller>", line 34, in <module> File "/tmp/pip-install-xbf1ckar/django-allauth_04096779adeb4c8baaa08029f24a925a/setup.py", line 9, in <module> from setuptools import convert_path, find_packages, setup ImportError: cannot import name 'convert_path' from 'setuptools' (/var/app/venv/staging-LQM1lest/lib/python3.8/site-packages/setuptools/__init__.py) [end of output] note: This error originates from a subprocess, and is likely not a problem with pip. ```

I am following this blog - https://aws.amazon.com/blogs/opensource/packaging-and-deploying-aws-lambda-functions-written-in-java-with-aws-cloud-development-kit/ to create the java lambda using CDK. But when I pushed the changes and it is failing in code build with the below error. The "cdk synth" worked in my local machine. Can some one give any insights on this issue ? ``` Bundling asset TestStack/test/LambdaStack/LambdaFunction/Code/Stage... [ERROR] Failed to execute goal org.codehaus.mojo:exec-maven-plugin:3.0.0:java (default-cli) on project test: An exception occured while executing the Java class. Failed to bundle asset TestStack/test/LambdaStack/LambdaFunction/Code/Stage, bundle output is located at /codebuild/output/src940121800/src/cdk.out/asset.593cf75a4cb232e162ae4760eddc8336106322f580119285c2b8f0df0c517874-error: Error: docker exited with status 125 ```

Hi, I have a task on running some bash scripts on lambda. However, I can't find bash as part of AWS Lambda runtime. I will be glad if you can provide alternative suggestions accordingly.

Hi, I am trying to setup CodeBuild to build the develop branch that the PR is merged into rather than building the actual PR branch. The reason for this is sometime peoples PR brances don't yet include the develop changes made since their PR was created. Can someone tell me what I need to do in the Source section of CodeBuild in order to achieve this? thanks

Hi team, I want to create an API gw lambda authorizer and attach it to the HTTP API this is the piece of code I did : ``` // create api gw authorizer const apiGwAuthorizer = new HttpLambdaAuthorizer( "ApiGwLambdaAuthorizer", myLambdaFuncAuth, { responseTypes: [HttpLambdaResponseType.SIMPLE], identitySource: ["$request.header.my-header"], resultsCacheTtl: Duration.seconds(300), } ); //attach the authorizer to the ANY route myhttpapi.addRoutes({ integration: new HttpLambdaIntegration( "authorizer-lambda-integration", authorizerLambda ), path: "/ANY /{proxy+}", authorizer: apiGwAuthorizer , }); ``` but when I deploy the CDK this authorizer created but it's not associated with the API GW the API GW is passed as parameter from other stack in this stack Not sure what I miss here, is it because the route 'ANY /{proxy+}' already exists?

Hi everyone, Currently, I am in charge of setting CI/CD for mobile app projects which need to be run with our specific BlueTooth device. I think I can set up it in an on-premises solution which is we plug our phone and require the phone to connect to Bluetooth automatically for testing. I wonder can we do it in AWS (we will send our Bluetooth to AWS)? Hope for your answer! Thank you a lot for your help!

**I have this code as part of my cdk typescript** const stage = new CfnParameter(this, 'stageName'); const api = new apigateway.RestApi(this, 'typescriptapi', { description: 'example api gateway with typescript', deployOptions: { stageName: stage.valueAsString, }, .... ... **and running this command ** **cdk deploy TypescriptcdkStack --parameters stageName='UAT'** **it gives me error, what am I missing, I am using CDK 2.18.0 (build 75c90fa)** throw new Error(`ID components may not include unresolved tokens: ${unresolvedTokens.join(',')}`); Error: Resolution error: ID components may not include unresolved tokens: DeploymentStage.${Token[TOKEN.200]}.

Hi Team, I have 2 CDK stacks one in the Front end project and the second in the Backend project. the first stack needs resources ref from the second stack (and vice versa can be true) I have a lambda function in the backend stack that needs to call another lambda in the front end stack, If I deploy the backend CDK stack first, how can I make a reference/call to the second lambda in the front end stack? If I use event bridge or SNS I still need to have the name of the target lambda which is the lambda created by the CDK front end or I need the SNS ref to be shared between the 2 stacks for pub/sub. any idea how to solve this :) Thank you.

Hi - I exported the Draft ChatBot from the Amazon V2 Console and carefully created new intents (hundreds) with the corresponding folders and Intent.json. When I returned back to the Console and imported the chatbot (zipped) with the new intents, the Import will fail with little or no specific details. I verified that the new intents match up with the intent.json that I downloaded. I am a newbie, but need some assistance and I could not find much info on this topic online. The updated json with new intents matches the online examples and the json that I downloaded from V2 Console. Thanks for your assistance.

We are using okta to authenticate when logging into AWS's client vpn. Multiple times throughout the day, while logged in to the vpn, a pop-up with okta login will show up, and require us the enter credentials again in order to continue using the VPN. My ovpn file already has reneg-sec 0 & keepalive, and it still doesn't help. I tried creating a new vpn endpoint, without okta, and it seems I don't get prompt for re-authentication there. I contacted okta support and they say it is 100% on aws's side, I looked everywhere and cannot find a reason as to why this is happening.

The only way I can connect is when I have to start my Server folder from my local computer

A number of Lambda API calls allow for a RevisionId argument to ensure that the operation only continues if the current revision of the Lambda function matches, very similar to an atomic Compare-And-Swap operation. However, this RevisionId appears to be useless for performing some atomic operations, for the following reason: Suppose I want to update a function's code and then publish it, in 2 separate steps (I know it can be done in 1 step, but this does not interest me, because I cannot set the description of a published version in 1 update/publish step...it must be done in 2 steps). The [update_function_code](https://boto3.amazonaws.com/v1/documentation/api/latest/reference/services/lambda.html#Lambda.Client.update_function_code) call returns a RevisionId that corresponds to the "in progress" update of the function. This RevisionId cannot be used because it will change once the function becomes active/updated. This new RevisionId can only be obtained by [get_function](https://boto3.amazonaws.com/v1/documentation/api/latest/reference/services/lambda.html#Lambda.Client.get_function). Update code -> RevisionId A (in progress) -> RevisionId B (updated/active) -> Get Function -> RevisionId B -> Publish Function There exists a race condition due to the fact that I must call `get_function` in order to get the current RevisionId before I continue with publishing my function. This race condition makes it impossible create an atomic sequence of operations that includes a `update_function_code` operation, because the RevisionId that it returns cannot be relied on, and has to be refreshed with a `get_function` call. Concurrently, another operation could change the RevisionId, and you wouldn't know, because you're depending on `get_function` to return an unknown RevisionId.

I have a containerised web application that supports HTTP2. When I run it on my PC, I can clearly see HTTP2 traffic between my web browser and that container. However, when I deploy the same container to AWS App Runner, I can see that only HTTP 1.1 is used. Does App Runner support HTTP 2? If not, will it be supported and when?

Hi team, is it possible to use a wildcard in REST API GW or we need to define each endpoint one by one ? Thanks

I'm trying to make a deployment group in CodeDeploy and keep getting 'Cross-account pass role is not allowed'. I checked to see if this is regarding IAM Users and roles, and even added some to a user account, but it's not working. The weird thing is, **I don't have two AWS accounts**. (At least to my knowledge). I'm not sure which account i'm allegedly posting *from *or *to *when this error applies. Where can I find this information?

Is there is any way to start & stop an EC2 instance using the tags in lambda function. Currently i am using a lambda function to start & stop an EC2 instance by the instance id. if the instance got replaced, the lambda function is not working. So inorder to fix this issue, i am curious on setting up a lambda function to start & stop the instance by using the Tags instead of instance id.

Hi We are using Terraform (v0.13.5 with AWS provider "hashicorp/aws v3.38.0") to deploy AWS resources into our accounts. Some of these resources are Lambda functions with Lambda layers. We make use of certain automated processes (Gitlab pipelines) to run those deployments. We can change several Lambda functions at the same time. We use the same Lambda layer for ALL the Lambda functions, but create different versions of that layer with different code (ZIP files) and attach each version to a concrete Lambda function. Lately we realized that when modifying several Lambda functions at the same time, the code in the different versions of the same layer is mixed!!! So the code that should go for a concrete layer version is also appearing in other versions created at the same time. For example: * when we modify several Lambda functions at the same time (let's say L001 and L002), two new versions of layer MYLAY are created for each, and the corresponding version is linked to each of the modified Lambda functions. So we have L001 with MYLAY-001 and L002 with MYLAY-002. This is how we expect it, so fine so far * Each version of the layer should have its own code (different ZIP files) * We have detected that the code for MYLAY-001 is also appearing in MYLAY-002, even though the ZIP files used to create those versions are different!!! So from my point of view, it seems that the way in which **AWS is creating the layer versions for the same layer is not compatible with parallel creation**. Can anyone confirm of shed some light on how AWS is creating those versions? I guess the best approach considering the previous is to use different layer for each Lambda function, indeed. Thanks in advance and best regards Luis

My Cloudformation Stack stuck in Update_Rollback_Failed State because of nested stack Update_Rollback_Failed as I updated the lambda runtime environment from 10 to 12. I tried the workarounds but nothing worked https://aws.amazon.com/premiumsupport/knowledge-center/cloudformation-update-rollback-failed/ https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-continueupdaterollback.html

I'm running a single container setup on Elastic Beanstalk using the Amazon Linux 2 Docker platform. The container is running a third-party image that is fully functional only when its hostname matches an issued license file. With the previous iteration of Docker platform on Amazon Linux, it was possible (though never officially supported) to override the `docker run` command by using an `ebextension` to patch the `/opt/elasticbeanstalk/hooks/appdeploy/pre/04run.sh` script to inject `-h MY_HOST`. This does not seem to work on Amazon Linux 2. Is there any officially supported way to set the hostname of a container running on Elastic Beanstalk using the Amazon Linux 2 Docker platform? Thanks for any help you can provide.

As already pointed out in the old [Developer Forum](https://forums.aws.amazon.com/thread.jspa?messageID=812431&tstart=0#812431) CodeDeploy B/G deploy is failing if the AutoScalingGroup has some AutoScalingPolicy attached because it looses the attachment to the original TargetGroup. Has anybody found a better solution than [manually re-attaching it](https://dev.to/cvortmann/fixing-aws-codedeploy-issue-where-auto-scaling-group-is-not-attached-to-target-group-47ac)? Attaching the policies instead of the target is also a possibility, but it makes the management of the policies not in CloudFormation. BTW, the old workaround only worked with "classic LB", it can't be implemented with current ALBs. It is "funny" that AWS is aware of this severe bug but did not fixed it yet, after 5 years ;(

During deployment of new app version on new EC2 with template from AMI image I got following error: ``` [ 1.670047] No filesystem could mount root, tried: [ 1.670048] [ 1.677170] Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(0,0) [ 1.685026] CPU: 1 PID: 1 Comm: swapper/0 Not tainted 4.14.181-140.257.amzn2.x86_64 #1 [ 1.692532] Hardware name: Amazon EC2 t3a.nano/, BIOS 1.0 10/16/2017 ``` previously it was working like charm - I haven't change any AMI or template setting - just added new SSL certs to nginx I found this troubleshooting article but cannot move with it since I cannot access instance terminal. I've tried to boo new instance with add different kernel ID but got this error: ``` You cannot launch multiple AMIs with different virtualization styles at the same time. ``` I believed during AMI kernel has somehow changed and it causes problem - is it possible? What can cause that issue and how to solve?

I am trying to connect to my server using MobaXterm and it keeps saying the server refused my key. It then asked for password and each time I type my password, It says access denied. Please can you help with this? Thanks

I am deploying a Lex V2 bot with AWS CDK and want my bot to have buttons for eliciting slots, but for some reason I get an error: ```bash DevBot Resource handler returned message: "Importing CDK-DevBot failed due to [There was an error importing the bot. Make sure that the imported bot and contents of the zip file are correct, then try your request again.]. The import could not be completed." (RequestToken: ebd3354f-6169-922a-d0f9-d14690671e25, HandlerErrorCode: InvalidRequest) ``` The relevant part of the `CloudFormation` template: ["Message"](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lex-bot-message.html) ```json "MessageGroupsList: [{ "Message": { "ImageResponseCard": { "Buttons": [ { "Text": "1.0.3", "Value": "1.0.3" }, { "Text": "1.0.5", "Value": "1.0.5" } ], "Title": "Title" }, "PlainTextMessage": { "Value": "Please enter the issue number" } } }] ``` If I remove `"ImageResponseCard"` then it deploys okay. Otherwise, I get the error. Has anybody else had this problem and found a way to overcome it?

My customer is looking to deploy the app infra via a code pipeline which has the source, lint, compile, build, package and deploy stages. The lambda is in typescript and there are 4 lambdas which should be deployed for this app. Is there a need to have a different codepipeline for each lambda deployment or can I deploy all the lambdas in a single code pipeline. If there is a single pipeline, how will the app code linting, building, compiling and packaging happen for all the 4 lambdas ? Is it going to be in parallel? If yes, then would there 4 parallel runs of lint, compile and so on. Is there any reference architecture ?

Hi everyone, I'm creating multiple resources using CloudFormation and now I have the need to tag them, the thing is that I'm using the CLI to invoke cloudformation and I'm passing a JSON file with the tags as parameter. I'm using gitlab CI/CD to create the CF stack also I want to review the changes before applying them, hence what I ended doing was creating a change set first (Update or Create, depending if the stack already exists), then if everything looks good I execute the change set. This is more or less what I'm doing in the pipeline: 1. I create the change set with: > aws cloudformation create-change-set --change-set-name MyChangeSet --change-set-type <<CREATE or UPDATE>> --stack-name MyCFStack --tags <<file_with_tags.json>> 2. If everything looks good then I'm executing the change set with the following command: > aws cloudformation execute-change-set --stack-name MyCFStack --change-set-name MyChangeSet CloudFormation creates the stack and tag it appropriately, the problem is that **does NOT propagate the tags to the resources**. In the documentation (https://awscli.amazonaws.com/v2/documentation/api/latest/reference/cloudformation/create-change-set.html) says that CloudFormation should propagate the tags to the resources: > --tags (list) > Key-value pairs to associate with this stack. CloudFormation also propagates these tags to resources in the stack. You can specify a maximum of 50 tags. I know that using "create-stack" or "update-stack" you can pass the tag parameter too, but as you can see, my approach allows me to create the change set first and review the changes, even if it's the first time I'm creating the stack. Has anybody experienced something similar? Were you able to pass the tags using "create-change-set" and then execute? Am I missing something? I appreciate any help. Jorge.

Hi AWS Users, I am trying to spin up a MSK cluster with a custom MSK configuration using my serverless app. I wrote the cloudformation template for the generation of the MSK Cluster and was able to successfully bring it up. I recently saw that AWS added cloudformation template of `AWS::MSK::Configuration`. [1] I was trying that out to create a custom configuration. The Configuration requires a `ServerProperties`key that is usually a PlainText in AWS console. An example of Server Properties: ``` auto.create.topics.enable=true default.replication.factor=2 min.insync.replicas=2 num.io.threads=8 num.network.threads=5 num.partitions=10 num.replica.fetchers=2 replica.lag.time.max.ms=30000 socket.receive.buffer.bytes=102400 socket.request.max.bytes=104857600 socket.send.buffer.bytes=102400 unclean.leader.election.enable=true zookeeper.session.timeout.ms=18000 ``` `AWS::MSK::Configuration` accepts base64 (api functionality) and I have been trying to implement this. I am using the cloudformation `Fn::Base64` functionality. e.g: ``` Resources: ServerlessMSKConfiguration: Type: AWS::MSK::Configuration Properties: ServerProperties: Fn::Base64: auto.create.topics.enable=true ``` This gives me back a 400 error during deploy. ``` Resource handler returned message: "[ClientRequestToken: xxxxx] Invalid request body (Service: Kafka, Status Code: 400, Request ID: 1139d840-c02d-4fdb-b68c-cee93673d89d, Extended Request ID: null)" (RequestToken: xxxx HandlerErrorCode: InvalidRequest) ``` Can someone please help me format this ServerProperties properly, not sure how to give the proper base64 string in the template. Any help is much appreciated. [1] - [https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-msk-configuration.html](MSK::Configuration)

I've been trying to get a Keycloak Docker image to run on a Beanstalk environment for the last week without success. My Dockerfile looks like this: FROM quay.io/keycloak/keycloak:17.0.0 as builder ENV KC_DB=postgres RUN /opt/keycloak/bin/kc.sh build FROM quay.io/keycloak/keycloak:17.0.0 COPY --from=builder /opt/keycloak/lib/quarkus/ /opt/keycloak/lib/quarkus/ WORKDIR /opt/keycloak ENV KC_HTTP_ENABLED=true ENV KC_HOSTNAME_STRICT=false ENV KC_DB_POOL_INITIAL_SIZE=1 ENTRYPOINT ["/opt/keycloak/bin/kc.sh", "start-dev"] The Dockerimage runs fine on localhost (`docker run --rm -p 8080:8080 --env-file env.txt my/keycloak`). http://localhost:8080/ shows a start page. The chosen Plattform is a "Docker running on 64bit Amazon Linux 2/3.4.12". I upload the image to Amazon ECR and load it in a Beanstalk instance with the following Dockerrun.aws.json: { "AWSEBDockerrunVersion": "1", "Image": { "Name": "0815.eu-central-1.amazonaws.com/my/keycloak:latest" }, "Ports": [ {"ContainerPort": "8080"} ] } I have saved the necessary environment variables: KC_DB, KC_DB_PASSWORD, KC_DB_POOL_INITIAL_SIZE, KC_DB_SCHEMA, KC_DB_URL, KC_DB_USERNAME, KC_HOSTNAME_STRICT, KC_HTTP_ENABLED, KEYCLOAK_ADMIN, KEYCLOAK_ADMIN_PASSWORD As a load balancer, I set up the Classic Load Balancer with a listener from 8080/HTTP to 8080/HTTP. Now when I try to call the Beanstalk URL (http://Keycloak0815.eu-central-1.elasticbeanstalk.com:8080) I get a 503 error status. A look at the logs shows no abnormalities. Keycloak has started successfully within the docker. What am I doing wrong? What else do I need to configure to get access to the Docker image? I'm grateful for any further information.

Hello, I would like to use a module from one repository while running my main file from a different repository - both in CodeCommit in the same AWS account. I read that if both repositories exist I can use sys.path. The question is can I clone both repositories to the same EC2 instance (on which I run my main function)? Thanks.

Hi, I have a very simple C# Lambda that I will execute from a schedule. I want to use CodeBuild and CodeDeploy to be able to deploy new versions of this to either my staging or production environments. At the moment, my CodeBuild project build does the following: * Builds the Lambda c# project * Pushes the code to the Lambda $latest version * Creates a new Lambda version * Updates (string replacement) my Lambda deployment appspec.yml file to have the correct 'currentversion' and 'targetversion' based on what the current versions are. * uploads the appspec to an S3 bucket so that I can use it later in CodeDeploy. My CodeDeploy just takes the appspec.yml file and executes it which then changes the $latest version of the Lambda to the new version. Thats all good (I think) except that my CodeBuild doesn't know where I want to deploy the change to (staging or production) so should I be uploading 2 sets of code (one targeting a 'stage' Lambda alias and the other targeting a 'production' Lambda alias)? Or should there be a separate CodeBuild project for each environment? Or should I be having a completely separate Lambda (instead of using aliases) where one is for staging and the other for production? I feel like I am doing something horribly wrong here :)

Hey, After discovering ml.inf machines not supporting multi-model servers (MMS), we were forced to re-deploy our models. Currently, we are struggling to use MMS with EI accelerators. Is it an issue on our side, or are these accelerators not supported on MMS? ClientError: An error occurred (ValidationException) when calling the CreateModel operation: Your Ecr Image pytorch-inference-eia:1.5.1-cpu-py3 does not contain required com.amazonaws.sagemaker.capabilities.multi-models=true Docker label(s). Thanks!

Hi, I'm hosting my WordPress website using the EC2 Instance right now. Something went wrong on my website yesterday and I'm not able to fix it. Unfortunately, I haven't made any backups as well. So, I just wanted to ask if there's a way to date the instance back to a past date like maybe March 7th or 6th? Any help would be appreciated. Thank you!

Here's what I am trying to do: In my application that resides outside aws, I take some user inputs, and trigger scripts that reside inside Sagemaker notebook instance. I am able to start or create a new instance using boto3, and also use lifecycle configuration to run some starter script while the instance turns on. But I want to run multiple scripts in short intervals based on user inputs, so I don't want to restart my instance each time with a new lifecycle configuration script. I am trying to find if there is a way to execute shell commands in sagemaker using boto3 (or any other way).