Networking & Content Delivery

Nothing in the web UI, the CLI, nor documentation mentions networking details for lightsail containers. Lightsail instances get a public IP (and the documentation even mentions that there is no such thing as a private subnet for lightsail), but I cannot determine anything for containers. My issue is that the service I am deploying tries to connect to another service on the internet but results in a read timeout. It is extremely difficult to debug since you cannot connect to the container, nor view any network info. And apparently lightsail runs its own VPC in a separate AWS account that you cannot view in any way. I tried turning on "vpc peering", but to no avail. So are lightsail containers completely blocked off from the internet (outbound traffic)?lg...

Hello community. IHAC that did a change on HTTP API Gateway and and configured throttling. After some testing they wanted to configure it back to "not configured" or change it back to default, but it is not possible It seems it only accepts either integer values from 0-10000 and we cannot change it back to Null or Unconfigured. Is there any way to change it back to "not configured" status? Best regards Carlos.lg...

I am getting an error "Your Route 53 hosted zone for this domain needs to be set as authoritative". But I have ensured all Route 53 records are correct as per the workmail page. But still it keeps saying this error. And we are not able to connect WorkMail to MAC IOS Client. It keeps asking for Internal and External URL. Not connecting event with correct password. And we are not able to receive any email. Not sure what is wrong with the DNS or how to clear and fix it all.lg...

Is it possible to send multicast communication on a Site-to-Site VPN between AWS VPCs ? If not, I want to try to setup a GRE tunnel for this purpose between two VPC and test the multicast traffic between the two VPC. Is this possible at the moment on AWS ?lg...

Hello, I've setup everything as in getting started articles for Amazon SES, but I still getting errors like these - The messages violates the DMARC policy of addhub.com. I'm using ...@addhub.com as FROM and mail-1.addhub.com as MAIL FROM. Both addhub.com and mail-1.addhub.com have SPF records including - amazonses.com. My DMARC record for addhub.com is - v=DMARC1; p=quarantine; rua=mailto:...@addhub.com. If you check one of the reports I provided below, it writes that second record failed, that IP doesn't belong to Amazon. Could you explain why is that and how to solve it? ``` <?xml version="1.0" encoding="UTF-8" ?> <feedback> <report_metadata> <org_name>google.com</org_name> <email>noreply-dmarc-support@google.com</email> <extra_contact_info>https://support.google.com/a/answer/2466580</extra_contact_info> <report_id>...</report_id> <date_range> <begin>...</begin> <end>...</end> </date_range> </report_metadata> <policy_published> <domain>addhub.com</domain> <adkim>r</adkim> <aspf>r</aspf> <p>quarantine</p> <sp>quarantine</sp> <pct>100</pct> </policy_published> <record> <row> <source_ip>93.188.3.35</source_ip> <count>2</count> <policy_evaluated> <disposition>none</disposition> <dkim>pass</dkim> <spf>fail</spf> </policy_evaluated> </row> <identifiers> <header_from>addhub.com</header_from> </identifiers> <auth_results> <dkim> <domain>addhub.com</domain> <result>pass</result> <selector>...</selector> </dkim> <dkim> <domain>amazonses.com</domain> <result>pass</result> <selector>...</selector> </dkim> <spf> <domain>mail-1.addhub.com</domain> <result>softfail</result> </spf> </auth_results> </record> <record> <row> <source_ip>23.251.240.4</source_ip> <count>1</count> <policy_evaluated> <disposition>none</disposition> <dkim>pass</dkim> <spf>pass</spf> </policy_evaluated> </row> <identifiers> <header_from>addhub.com</header_from> </identifiers> <auth_results> <dkim> <domain>addhub.com</domain> <result>pass</result> <selector>...</selector> </dkim> <dkim> <domain>amazonses.com</domain> <result>pass</result> <selector>...</selector> </dkim> <spf> <domain>mail-1.addhub.com</domain> <result>pass</result> </spf> </auth_results> </record> </feedback> ```lg...

i am using lambda function in my react application through API gateway. When i open my lambda function it gets an error which is resolve by reloading and when i keep my page idle for too long and invoke my function it gets an error. I found that the instance allocated to my lambda function is gone if my page is idle. how do i resolve this error. I found that by allocating a certain reserved concurrency to it , it can be resolved but I am not surelg...

 Enter image description here](/media/postImages/original/IMxTa9lMr-ThGQiYEaCSaD-Q) i am using tomcat 10 as server .In browser 44.198.26.218:8080 is working properly. opens my index.jsp file. already configured security group as { ssh 22 anywhere } { custom tcp 8080 anywhere } . configured route 53 with lncomputers.online . with type { A lncomputers 44.198.26.218 } { CNAME www.lncomputers.online lncomputers.online } ] pasted all four NS to my hostinger domain as custom domain. 1 day ago . but when i type lncomputers.online in browser still shows error as this site cant be reached....... .................plzzzzz help me . i am very disappoint from this. *****@gmail.com is my mail id , you can connect to me through this mail alsolg...

Hi, I have had an API gateway running as a webhook receiver -> SQS for a little over a month with no issues. As of 9/26, I started receiving an error on all requests on my only endpoint for this API two days ago. ``` { "Error": { "Code": "MalformedQueryString", "Message": "Keys may not contain ", "Type": "Sender" }, "RequestId": "XXXXX" } ``` This is the end points def in template. ``` responses: default: statusCode: "200" requestParameters: integration.request.header.Content-Type: "'application/x-www-form-urlencoded'" requestTemplates: application/json: "Action=SendMessage&MessageBody=$input.body" passthroughBehavior: "never" type: "aws" ``` Issue I am having is that the message body to the API is always truncated, with no discernable difference in the first 1024kb of the data with historical vs new messages that are failing. I can only assume after the first 1024kb of data, there must be a difference in the message being received? How do I troubleshoot this further?lg...

Cloudfront appears to cache 404 responses from my custom origin. I do not set Cache-Control max-age header or a Cache-Control s-maxage header. According to https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/HTTPStatusCodes.html#HTTPStatusCodes-no-custom-error-pages Cloudfront caches the page for 10 seconds by default. Does setting Cache-Control: private prevent caching? What if my other response headers contain private information? The information might be seen by others, I think?lg...

Hi Tell me how can I make a "fixed order" for the record in route53? Thankslg...

Hi all, pretty new to AWS/Lightsail so hopefully i can get some help. I have setup an instance, static IP, distribution and custom domain for a site that is hosted on lightsail. It's working fine using the custom domain and standard cloudfront.net domain for everyone inside australia. It seems anyone outside AU can't access it. We have tested from multiple countries and no success but every test from every browser/device/location inside AU works fine. I can't for the life of me figure out what is happening. URL in question is https://stardust.weanmeister.com . Hoping some experts can offer some advice. Dlg...

Hi! I would like to have an SSL certificate for my domain that had been registered with Namecheap but has been transferred to AWS Route 53 a few days ago. I first followed this [article](https://aws.amazon.com/premiumsupport/knowledge-center/acm-certificate-pending-validation/?nc1=h_ls) and then this [video](https://www.youtube.com/watch?v=mls8tiiI3uc) but neither of those earned me a valid SSL certificate. On [whois.com](https://www.whois.com/whois/pontifex.live), I see that the nameservers for my domain are still those from Namecheap (at the time of me writing this). That might be important. Or not. [This](https://repost.aws/questions/QUPxbZqlbqQGeGf9uHgK5keA/certificate-requests-stuck-in-pending-validation) question seems to be equivalent to my situation but the answer has been archived and thus, I cannot access it. Can someone with higher powers than me please retrieve that (3-year old) answer and post it here? An up-to-date solution would be even better. Thanks a lot!lg...

I have a function that uses `putLogEvents()` method and it works fine locally but not when we push it out to our server (EC2 instance). We are always getting 504. I checked our LB and its allowing all traffic. I am running out of ideas why it is timing out on our server.lg...

I am trying to enable the applicance mode with the following CLI command as per the online documentation: C:\Users\Pablo>aws ec2 modify-transit-gateway-vpc-attachment --transit-gateway-attachment-id tgw-attach-0b6cb80499a53XXXX --options ApplianceModeSupport=enable Parameter validation failed: Unknown parameter in Options: "ApplianceModeSupport", must be one of: DnsSupport, Ipv6Support I tried changing the DnsSupport option to make sure I'm in the right region and transit gateway attach and works: C:\Users\Pablo>aws ec2 modify-transit-gateway-vpc-attachment --transit-gateway-attachment-id tgw-attach-0b6cb80499a5383e9 --options DnsSupport=disable { "TransitGatewayVpcAttachment": { "TransitGatewayAttachmentId": "tgw-attach-0b6cb80499a53XXXX", "TransitGatewayId": "tgw-01e5ee317cd46YYY3", "VpcId": "vpc-02e3c21f4d7dacZZZ", "VpcOwnerId": "95107885XXXX", "State": "modifying", "SubnetIds": [ "subnet-0c24bb7aae4deeXXX", "subnet-064acc2ad5667aXXX", "subnet-03b6351363cd1cXXX" ], "CreationTime": "2022-09-27T18:09:59+00:00", "Options": { "DnsSupport": "disable", "Ipv6Support": "disable" } } } It looks like this transit gateway attachment does not have this option. What am I doing wrong?lg...

Hi, in api gateway with caching enabled, what's the difference to flag "caching" checkbox for a query string parameter at method request level versus integration request request level? Method request level  Integration request level  In addition, in a proxy type gateway, do we have to flag "caching" checkbox for the default "proxy" path parameter in order to have it included in the caching key? lg...

Hello. I would like to transfer a .page domain from another registrar. Please consider adding ".page" to the supported TLD list. Thank you.lg...

I have created a hosted zone (resource type AWS::Route53::HostedZone) in aws with a custom domain name (example - numbero.uno.com) ``` customDomain: Type: AWS::Route53::HostedZone Properties: Name: 'numero.uno.com' ``` now i'm creating an api to be deployed to two regions, by deploying stack below to two regions. when i deploy stack below in one region everything works fine , but when i deploy the same stack in a second region , i get the error message, create failed for Mycustomdomainconfig => "The domain name you provided already exists. (service: ApiGateway, ...Status Code 400... i'm trying to use same custom domain name for both api gateway endpoints deployed in two regions. can anyone see what i'm doing wrong here? ``` Resources: MyCertificate: Type: "AWS::CertificateManager::Certificate" Properties: DomainName: example.com ValidationMethod: DNS DomainValidationOptions: - DomainName: 'numero.uno.com' HostedZoneId: 'afnqrejxyi' Myrecord: Type: AWS::Route53::RecordSet Properties: Region: !Ref aws_region SetIdentifier: !Sub "endpoint-${aws_region}" HostedZoneId: 'afnqrejxyi' Name: 'numero.uno.com' Type: A AliasTarget: DNSname: !GetAtt Mycustomdomainconfig.RegionalDomainName HostedZoneId: !GetAtt Mycustomdomainconfig.RegionalHostedZoneId Mycustomdomainconfig: Type: AWS::ApiGateway::DomainName Properties: RegionalCertificationArn: !Ref MyCertificate DomainName: 'numero.uno.com' ... MyApiMapping: Type: AWS::ApiGateway::BasePathMapping Properties: DomainName: !Ref Mycustomdomainconfig RestApiId: !Ref MyApi ... MyApi: Type: AWS::Serverless::Api Properties: .... ```lg...

i have created a business application using react and cognito for login. My logic are created in lambda functions and are called by the app through api gateway using aws iam authentication by using identity pool. So when i first open my application it gives an error and cannot call lambda function. after reloading it works fine but if the page is kept idle for long and i called a lambda function it gives an error which get resolve on refresh. My question is that does anyone know why this is happening and is there a way to fix itlg...