By using AWS re:Post, you agree to the Terms of Use

Questions tagged with AWS Management Console

Sort by most recent

Browse through the questions and answers listed below or filter and sort to narrow down your results.

Approach to prevent out-of-band (clickops) updates to CloudFormation created resources

At one of my client organisation we have deployed almost all the AWS resources via CloudFormation/DevOps. On some occasions, users made updates to some of the resources directly via AWS console resulting in drift and other challenges. Thus, I am looking to see if there is any option to prevent users from making “updates” to all CloudFormation created resources. I can think of an option of deploying an SCP like below but not clear about all all actions need to be included in the SCP to prevent updates to many of the AWS resources which are deployed currently. Moreover this may result in a very long list of actions which may hit SCP policy limits as well. In this example I have only included ec2:RebootInstances for testing purpose but in reality I want to prevent all update/delete actions across all the resources. ``` { "Version": "2012-10-17", "Statement": [ { "Sid": "VisualEditor0", "Effect": "Allow", "Action": "ec2:Describe*", "Resource": "*" }, { "Sid": "VisualEditor1", "Effect": "Deny", "Action": "ec2:RebootInstances", "Resource": "*", "Condition": { "StringNotEquals": { "aws:PrincipalArn": [ "arn:aws:iam::xxxxxxxx:user/devopsuser", "" ] }, "StringEquals": { "ec2:ResourceTag/DeploymentType": [ "CloudFormation", "Terraform" ] } } } ] } ``` Is there any option available for this requirement?
4
answers
1
votes
29
views
asked a month ago

Long loading times of AWS Sign In and Console on specific computer

Since a few days I have an issue where sign in and AWS console webpage take so long to load that they become unusable. I get log in times and page load times anywhere from 30 seconds to 4 minutes with frequent failures due to timeouts. Chrome Developer Tools show that the bulk of that time are "document / Redirect" Mostly: "home?..." Before that, on Sunday, I used AWS console the whole day on the same machine with sub second loading times everywhere. I researched the issue around the web and AWS troubleshooting sites. It seems some other people had similar issues over the years but there wasn't anybody that could point to the cause. [\[1\]](https://www.reddit.com/r/aws/comments/84d5qx/console_login_slow_loading/) There was one user that started having the issue the same time as I did. [\[2\]](https://www.reddit.com/r/aws/comments/pgrw5h/comment/ilbiw5m/?utm_source=share&utm_medium=web2x&context=3) I tried clearing cache, cookies, DNS, switching browser, turning off firewalls and anti virus and trying using different accounts and using different regions. I tried log in and AWS concole on my phone and a laptop. It works flawlessly and quick on them and they both run on the same network as my desktop. It was suggested that a VPN might help but that seems like circumventing the issue and not really solving it. Machine is running Windows 10 (19044.1889) with Kasperski Anti Virus. There's no indication that anything else is wrong with the machine and am at a loss... Does anyone have an idea what the cause of this issue is?
0
answers
0
votes
44
views
asked a month ago