Front-End Web & Mobile

I assume that the date range specified in the Analytics/usage page applies to funnels output. What I found is that irrespective of the date range, funnels output is always the same. What am I missing?lg...

I've created and deleted Amplify apps several times. Regarding deletion, I noticed that Amplify does not clean up the resources it auto-creates. It left out Cognito user pools with names starting with 'amplify_backend_manager' and a few lambda functions. Is this normal behaviour, and is there a reason why it does that?lg...

Hello, During a Preview Environment build process, is there any way to retrieve information regarding the S3 bucket name, SSR Lambda@Edge name, API Lambda@Edge information for the deployment? (Please see image below). I would like to be able to get this information during pre-build process to set it in my own environment variables due to how our code is structured.  Please advise. Thank you.lg...

Hi aws: The emails we send using amazon ses are treated as outlook spam, but gmail is not treated as spam, I have set up DomainKeys Identified Mail (DKIM) or Sender Policy Framework (SPF) in aws ses, our The email subject and content do not include any URL, similar to the following: Email Subject: Your X verification code content of email: Your X verification code is: x. Please complete the account verification process in x minutes. At the same time, the dedicated IP address of aws ses is in the application. Do you have any good suggestions or opinions for us? By ningning.lg...

I want to host an REST based Api in multi region. to do so, I am assuming i will have to create resources in each region. like api gateway, lambdas or anything related to the api. i want to create a new domain and based on the traffic or health check i can route the request to each regions api gateway endpoint. also for the security purposes, i need to create certain firewall rules. what resources do i need to create, like a domain name i suppose and firewall rules, any load balancing and besides domain name, what resources would be global that i need to create in each region?lg...

Hello we are looking into e2e test frameworks atm and I was wondering if I can run cypress tests on aws devicefarm. I know its doable by replacing selenium web driver for selenium. but cypress seems to have a few advantages when it comes to speed and simplicity.lg...

This is going to get quite a few eyerolls for good reason. We deployed an AppSync API with both DynamoDB and RDS data sources over a year ago. We've had some challenges with development coming and going and at some point, the schema has been modified likely due to development not really knowing what they were doing. This is all on me from a governance perspective but I am trying to get back to a last good known state as we are having quite a few issues where the schema just doesn't look right. 1. Does the AWS toolkit have a function to regenerate schema based on previous versions (or is this Git/source code only)? 2. I had the idea of creating an API from scratch and trying to piece it back together. Is that plausible? Outside of the obvious, do better at software change management and governance, any other words of wisdom? Thanks!lg...

Hi, We receive the notice: "[Action Required] Change to AWS IAM Role Trust Policy Evaluation" for one of our role. The notice reference this documentation about the change: https://aws.amazon.com/blogs/security/announcing-an-update-to-iam-role-trust-policy-behavior/ The policy that we are notified about was created for Cognito, and is exactly the one shown in bullet point #3 in: https://aws.amazon.com/blogs/mobile/understanding-amazon-cognito-authentication-part-3-roles-and-policies/ The policy is: ``` { "Version": "2012-10-17", "Statement": [ { "Sid": "", "Effect": "Allow", "Principal": { "Federated": "cognito-identity.amazonaws.com" }, "Action": "sts:AssumeRoleWithWebIdentity", "Condition": { "StringEquals": { "cognito-identity.amazonaws.com:aud": "{{HIDDEN}}" }, "ForAnyValue:StringLike": { "cognito-identity.amazonaws.com:amr": "authenticated" } } } ] } ``` It's really hard to know considering I believe this policy was created automatically by Cognito or Amplify to know what will be the impact here, and how to fix the issue. Considering the article https://docs.amazonaws.cn/en_us/IAM/latest/UserGuide/id_roles_create_for-idp_oidc.html still has that exact policy, maybe documentation needs to be updated there? Appreciate the help.lg...

Hi, I have added a domain into AWS SES a while ago, and I've entered the three CNAME records into our domain registry as requested by AWS. I have then received the email with the subject "DKIM setup SUCCESS for <domain>", and the domain was shown as verified in AWS SES. Now, the domain is shown in status "pending" again, even though the CNAME records still exist. I've looked up the three CNAME records again and again, I've checked that no typo was made and not a single character was missing, everything seems to be configured correctly. But AWS SES still shows the domain in status "pending". I've been using the `host` command to verify that the CNAME record exists. For example, in the AWS console, it says that `xyz._domainkey.example.com` should point to `xyz.dkim.amazonses.com`. So I ran the command: ``` host xyz._domainkey.example.com ``` and the output is: `xyz._domainkey.example.com is an alias for xyz.dkim.amazonses.com.` What could be the reason that it's still not working? Is there anything else I can do to troubleshoot this further? I'm not sure if these two events are related, but I remember that I've tried to add an additional verified domain, which was a subdomain of the already existing verified domain. I've received an error message (I don't recall which one, unfortunately). I could be wrong, but I think that the issue with the status "pending" appeared shortly after this failed attempt to add an additional verified domain. I am not using AWS Route 53 for the domain, in case that matters. Thanks for any advice.lg...

There is a small bug in aws api gateway console. Steps to replicate Go to api gateway 1) create a vpc link 2) VPC link for REST APIs 3) submit without having or. choosing an NLB 4) switch to VPC link for HTTP APIs 5) the A target NLB is required. error is still present even though the field changes to vpc endpoint and selected it is red! lg...

I've got CloudFront configured to hit my backend, but it can't resolve the API Gateway. ``` CloudFront wasn't able to resolve the origin domain name. We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner. If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation. ``` It works just fine hitting the API Gateway directly. ``` $ curl https://9cm2clgsng.execute-api.eu-central-1.amazonaws.com/api/test {"test":"ok"} ```lg...

My question is: On the API GW resource integration request endpoiint URL, what should it be if I have a VPC LINK+NLB+ALB+EC2? Should it be the NLB's DNS or the raw endpoint (i.e. myec2.scope.com/REST/ExampleCall) We have an API first architecture, so everything is private except the API Gateway. It will flow like API Gateway -> VPC Link -> Network Load Balancer -> Application load balancer -> EC2 (REST API END POINT) I skimmed the white paper https://docs.aws.amazon.com/whitepapers/latest/best-practices-api-gateway-private-apis-integration/best-practices-api-gateway-private-apis-integration.pdf?did=wp_card&trk=wp_card but couldn't find a definitive answer. Also for TLS, does it terminate at the ALB or the EC2? Thank youlg...

I have created a chat application using async chat examples github template. I have added bot, at the time of agent transfer live I would like to send the bot transcript to Agent as message. I have live participant token, Is it possible to invoke sendmessage api as http service? Create connection: https://participant.connect.us-east-1.amazonaws.com/participant/connection https://docs.aws.amazon.com/connect-participant/latest/APIReference/API_SendMessage.html Request URL: https://participant.connect.us-east-1.amazonaws.com/participant/messagelg...

Recently, one of our AWS API Gateway HTTP APIs has started failing with HTTP status code 413 and a message "Request Entity Too Large" when the API returns a stream of data (like a PDF file for example) of size greater than 10MB. The AWS API Gateway HTTP APIs documentation mentions a limit of 10 MB but that's only for the request payload and there's no mention of a limit for the response size. Our API has also been working fine with responses of size greater than 10 MB for a long time but has suddenly started failing recently. Has there been any recent change in API Gateway HTTP APIs ? Is this a new limitation that has been added ?lg...

We are using AWS SES service for our email/ notification service. Our QA team is running automation scripts while testing and our email bounce rate is increasing rapidly. Could any one advise what could be the best practice and how can we reduce our bounce rate with respect to the QA automation scripts.lg...

Trying to build a NextJs App using Node v10.19.0 and NextJs 10.0.7. The application compiled successfully but right after the message "Staring SSR Build...". In my build settings, I have specified pre-build commands to use `nvm install 10.19.0` as well as update the build image settings to use Next.js version 10. Does anyone know why this is happening? Why would it require node >= 12? `{ Error: Command failed: npm install @sls-next/-component@3.7.0 --prefix /root/./ npm WARN EBADENGINE Unsupported engine { package: '@aws-sdk/client-s3@3.54.0', npm WARN EBADENGINE required: { node: '>=12.0.0' }, npm WARN EBADENGINE current: { node: 'v10.19.0', npm: '7.24.2' } } npm WARN EBADENGINE Unsupported engine { package: '@aws-sdk/client-sqs@3.54.0', npm WARN EBADENGINE required: { node: '>=12.0.0' }, npm WARN EBADENGINE current: { node: 'v10.19.0', npm: '7.24.2' } }...`lg...

We have an extensive network of AWS services that support our application. But currently users from China can not reliably access the browser facing endpoints of our service (on EC2, S3 and API Gateway). Some days they can. Some days they can't. We are set up in 13 different AWS regions currently, and usually recommend users in China choose either our Singapore or Tokyo regions. But thats not working out. We have investigated setting up our services on an AWS region in China, but it seems to mean maintaining an entirely parallel network of AWS services. And we don't really have the business in China to justify that much effort and cost. Our clients are schools and their users are students. So asking them to use a VPN is not really a solution. So my question: Is there way for users in China to access our AWS services without us setting up a parallel AWS infrastucture in China? Have others done this? Is there an AWS region that always works for users in China?lg...

There's a python example [here](https://docs.aws.amazon.com/code-library/latest/ug/cognito-identity-provider_example_cognito-identity-provider_RespondToAuthChallenge_section.html). Does anyone have a link to an example for JavaScript? Alternatively, can anyone provide guidance on how to access the functions inside AuthenticationHelper.js (to build the SRP challenge responses during authentication) per this [AWS knowledge article](https://aws.amazon.com/premiumsupport/knowledge-center/cognito-user-pool-remembered-devices/)? > SRP_A = g^a (mod N) > > Use g as defined in AuthenticationHelper.js on the AWS Amplify (JavaScript) GitHub repository.lg...