1 line
No EOL
52 KiB
XML
1 line
No EOL
52 KiB
XML
<?xml version="1.0" encoding="UTF-8"?><feed xmlns="http://www.w3.org/2005/Atom" xmlns:media="http://search.yahoo.com/mrss/"><category term="aws" label="r/aws"/><updated>2023-01-24T03:33:52+00:00</updated><icon>https://www.redditstatic.com/icon.png/</icon><id>/r/aws.rss</id><link rel="self" href="https://www.reddit.com/r/aws.rss" type="application/atom+xml" /><link rel="alternate" href="https://www.reddit.com/r/aws" type="text/html" /><subtitle>News, articles and tools covering Amazon Web Services (AWS), including S3, EC2, SQS, RDS, DynamoDB, IAM, CloudFormation, Route 53, CloudFront, Lambda, VPC, Cloudwatch, Glacier and more.</subtitle><title>Amazon Web Services (AWS): S3, EC2, SQS, RDS, DynamoDB, IAM, CloudFormation, Route 53, VPC and more</title><entry><author><name>/u/goguppy</name><uri>https://www.reddit.com/user/goguppy</uri></author><category term="aws" label="r/aws"/><content type="html"><!-- SC_OFF --><div class="md"><p>Hello and welcome to the <code>/r/AWS</code> subreddit! We are here to support those that are new to Amazon Web Services (<code>AWS</code>) along with those that continue to maintain and deploy on the <em>AWS Cloud</em>! An important consideration of utilizing the <em>AWS Cloud</em> is controlling operational expense (costs) when maintaining your AWS resources and services utilized.</p> <p>We&#39;ve curated a set of documentation, articles and posts that help to understand costs along with controlling them accordingly. See below for recommended reading based on your <code>AWS</code> journey:</p> <h4>If you&#39;re new to AWS and want to ensure you&#39;re utilizing the free tier..</h4> <ul> <li><a href="https://aws.amazon.com/premiumsupport/knowledge-center/what-is-free-tier/">What is the AWS Free Tier, and how do I use it?</a></li> <li><a href="https://aws.amazon.com/premiumsupport/knowledge-center/free-tier-charges/">How do I make sure I don&#39;t incur charges when I&#39;m using the AWS Free Tier?</a></li> <li><a href="https://aws.amazon.com/blogs/aws-cloud-financial-management/beginners-guide-to-aws-cost-management/">A Beginner’s Guide to AWS Cost Management</a></li> <li><a href="https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/billing-free-tier.html">Using the AWS Free Tier</a></li> </ul> <h4>If you&#39;re a regular user (think: developer / engineer / architect) and want to ensure costs are controlled and reduce/eliminate operational expense <em>surprises</em>..</h4> <ul> <li><a href="https://docs.aws.amazon.com/wellarchitected/latest/cost-optimization-pillar/welcome.html">AWS Well-Architected Framework: Cost Optimization Pillar</a></li> <li><a href="https://aws.amazon.com/aws-cost-management/aws-cost-optimization/">AWS Cost Optimization Best Practices</a></li> <li><a href="https://aws.amazon.com/blogs/mt/manage-cost-overruns-part-1/">How to manage cost overruns in your AWS multi-account environment pt1</a></li> <li><a href="https://aws.amazon.com/blogs/mt/manage-cost-overruns-part-2/">How to manage cost overruns in your AWS multi-account environment pt2</a></li> </ul> <h4>Enable <strong>multi-factor authentication whenever possible!</strong></h4> <ul> <li><a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_mfa_enable_virtual.html">Enabling a virtual multi-factor authentication (MFA) device (console)</a></li> <li><a href="https://aws.amazon.com/iam/features/mfa/">Different forms of MFA</a></li> <li><a href="https://pages.awscloud.com/how-to-enable-multi-factor-authentication-for-aws-account.html?nc1=f_ls">Guided tour on how to add MFA to your AWS IAM users</a></li> <li><a href="https://aws.amazon.com/blogs/security/you-can-now-assign-multiple-mfa-devices-in-iam/">Adding multiple MFA devices to IAM users</a></li> </ul> <h3><a href="https://www.reddit.com/r/aws/search/?q=free%20tier%20AND%20bill%20AND%20costs%20AND%20cost%20AND%20billing&amp;restrict_sr=1&amp;sr_nsfw=&amp;sort=relevance&amp;t=all">Continued reading material, straight from the <code>/r/AWS</code> community..</a></h3> <p>Please note, this is a living thread and we&#39;ll do our best to continue to update it with new resources/blog posts/material to help support the community.</p> <p>Thank you!</p> <p><strong>Your <code>/r/AWS</code> Moderation Team</strong></p> <pre><code>changelog 12.31.2022_v1.2 - Added MFA entry and bumped back to the top. 07.12.2022_v1.1 - Revision includes post about MFA, thanks to a /u/fjleon for the reminder! 06.28.2022_v1.0 - Initial draft and stickied post </code></pre> </div><!-- SC_ON --> &#32; submitted by &#32; <a href="https://www.reddit.com/user/goguppy"> /u/goguppy </a> <br/> <span><a href="https://www.reddit.com/r/aws/comments/vn4ebe/check_it_first_operating_within_amazon_web/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/aws/comments/vn4ebe/check_it_first_operating_within_amazon_web/">[comments]</a></span></content><id>t3_vn4ebe</id><link href="https://www.reddit.com/r/aws/comments/vn4ebe/check_it_first_operating_within_amazon_web/" /><updated>2022-06-29T02:18:24+00:00</updated><published>2022-06-29T02:18:24+00:00</published><title>Check it first: operating within Amazon Web Services (AWS) and billing</title></entry><entry><author><name>/u/5acrefarmer</name><uri>https://www.reddit.com/user/5acrefarmer</uri></author><category term="aws" label="r/aws"/><content type="html">&#32; submitted by &#32; <a href="https://www.reddit.com/user/5acrefarmer"> /u/5acrefarmer </a> <br/> <span><a href="https://www.allthingsdistributed.com/2023/01/aws-launches-asia-pacific-melbourne-region.html">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/aws/comments/10jqwez/aws_launches_a_new_region_in_melbourne_australia/">[comments]</a></span></content><id>t3_10jqwez</id><link href="https://www.reddit.com/r/aws/comments/10jqwez/aws_launches_a_new_region_in_melbourne_australia/" /><updated>2023-01-23T23:25:04+00:00</updated><published>2023-01-23T23:25:04+00:00</published><title>AWS launches a new Region in Melbourne, Australia.</title></entry><entry><author><name>/u/string111</name><uri>https://www.reddit.com/user/string111</uri></author><category term="aws" label="r/aws"/><content type="html"><!-- SC_OFF --><div class="md"><p>I have watched and read a lot of tutorials about DynamoDB in the past week. One common pattern I see, is that people use strings to represent numbers, e.g. a price on a product? </p> <p>Why is this the case? Does it has to do with the floating point representation?</p> </div><!-- SC_ON --> &#32; submitted by &#32; <a href="https://www.reddit.com/user/string111"> /u/string111 </a> <br/> <span><a href="https://www.reddit.com/r/aws/comments/10jabvb/why_are_people_using_strings_to_represent_numbers/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/aws/comments/10jabvb/why_are_people_using_strings_to_represent_numbers/">[comments]</a></span></content><id>t3_10jabvb</id><link href="https://www.reddit.com/r/aws/comments/10jabvb/why_are_people_using_strings_to_represent_numbers/" /><updated>2023-01-23T11:30:31+00:00</updated><published>2023-01-23T11:30:31+00:00</published><title>Why are people using Strings to represent numbers in DynamoDB?</title></entry><entry><author><name>/u/papamamalpha2</name><uri>https://www.reddit.com/user/papamamalpha2</uri></author><category term="aws" label="r/aws"/><content type="html"><!-- SC_OFF --><div class="md"><p>lets say kubernetes is used to create services and put them in a cluster<br/> how to connect kubernetes to the load balancer in AWS?<br/> how can a load balancer know on which servers each service is located in the cluster so it can redirect requests to it?</p> </div><!-- SC_ON --> &#32; submitted by &#32; <a href="https://www.reddit.com/user/papamamalpha2"> /u/papamamalpha2 </a> <br/> <span><a href="https://www.reddit.com/r/aws/comments/10jjveg/load_balancer_and_kubernetes/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/aws/comments/10jjveg/load_balancer_and_kubernetes/">[comments]</a></span></content><id>t3_10jjveg</id><link href="https://www.reddit.com/r/aws/comments/10jjveg/load_balancer_and_kubernetes/" /><updated>2023-01-23T18:40:03+00:00</updated><published>2023-01-23T18:40:03+00:00</published><title>load balancer and kubernetes</title></entry><entry><author><name>/u/trivialstudies</name><uri>https://www.reddit.com/user/trivialstudies</uri></author><category term="aws" label="r/aws"/><content type="html"><!-- SC_OFF --><div class="md"><p>Quick question. I am running a web server on Lightsail. The bulk of the site is PHP, but I want to call a Python script from the PHP. All of my efforts (system, shell_exec, exec, and backticks) don&#39;t seem to do anything. I also tried changing the permissions of my Python script, but no luck.</p> <p>Is there something obvious I&#39;m missing?</p> <p>Any advice is appreciated. Thanks!</p> </div><!-- SC_ON --> &#32; submitted by &#32; <a href="https://www.reddit.com/user/trivialstudies"> /u/trivialstudies </a> <br/> <span><a href="https://www.reddit.com/r/aws/comments/10juto5/lightstail_php_python_question/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/aws/comments/10juto5/lightstail_php_python_question/">[comments]</a></span></content><id>t3_10juto5</id><link href="https://www.reddit.com/r/aws/comments/10juto5/lightstail_php_python_question/" /><updated>2023-01-24T02:29:36+00:00</updated><published>2023-01-24T02:29:36+00:00</published><title>Lightstail PHP / Python Question</title></entry><entry><author><name>/u/toolsbuilder</name><uri>https://www.reddit.com/user/toolsbuilder</uri></author><category term="aws" label="r/aws"/><content type="html"><!-- SC_OFF --><div class="md"><p>Hi Team;</p> <p>As a consulting company we use S3, EBS heavily in support of our customer apps. The customers also use Block, Filestore with GCP. It&#39;s getting hairy to track which app / who is using what storage.</p> <p>How are others tracking, monitoring, and adjusting storage in AWS please? We&#39;ve tried different lens, but it only provides a part of the answer, and we&#39;ve got to stitch the rest together ourselves for our clients.</p> <p>Thanks;</p> </div><!-- SC_ON --> &#32; submitted by &#32; <a href="https://www.reddit.com/user/toolsbuilder"> /u/toolsbuilder </a> <br/> <span><a href="https://www.reddit.com/r/aws/comments/10jpuyg/storage_tracking_question/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/aws/comments/10jpuyg/storage_tracking_question/">[comments]</a></span></content><id>t3_10jpuyg</id><link href="https://www.reddit.com/r/aws/comments/10jpuyg/storage_tracking_question/" /><updated>2023-01-23T22:41:44+00:00</updated><published>2023-01-23T22:41:44+00:00</published><title>Storage Tracking Question</title></entry><entry><author><name>/u/TheCandyMan88</name><uri>https://www.reddit.com/user/TheCandyMan88</uri></author><category term="aws" label="r/aws"/><content type="html"><!-- SC_OFF --><div class="md"><p>So this may be a bit out of my league but I&#39;ve been diving into aws in order to learn it a little bit as well as setup an active directory home lab. I need to get a domain controller setup but everything I keep getting back from white pages or Google keeps pushing me towards directory services which I am trying to avoid as the free tier is only for a month. Is there a good guide for setting up a domain controller on an ec2 instance or is it only possible through directory services? Thanks!</p> </div><!-- SC_ON --> &#32; submitted by &#32; <a href="https://www.reddit.com/user/TheCandyMan88"> /u/TheCandyMan88 </a> <br/> <span><a href="https://www.reddit.com/r/aws/comments/10juqcf/set_up_a_domain_controller_on_ec2/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/aws/comments/10juqcf/set_up_a_domain_controller_on_ec2/">[comments]</a></span></content><id>t3_10juqcf</id><link href="https://www.reddit.com/r/aws/comments/10juqcf/set_up_a_domain_controller_on_ec2/" /><updated>2023-01-24T02:24:51+00:00</updated><published>2023-01-24T02:24:51+00:00</published><title>Set up a domain controller on EC2</title></entry><entry><author><name>/u/nite16</name><uri>https://www.reddit.com/user/nite16</uri></author><category term="aws" label="r/aws"/><content type="html"><!-- SC_OFF --><div class="md"><p>I&#39;m planning on setting up an ec2 or docker instance running Foundry VTT (a virtual tabletop running on nodeJS). I&#39;m thinking I&#39;ll secure it behind Cloudflare Access so only authenticated users will be able to hit the backend. </p> <p>The problem is I don&#39;t need it very often, maybe a few hours a week, and so I would like to cycle it up and down as needed automatically. I think I can use eventbridge to bring it down when the CPU is idle, but can&#39;t find any information on waking it up seamlessly when someone tries to connect to the URL.</p> <p>Any ideas how I can trigger a lambda function or something to wake it up using the same URL as the server itself?</p> <p>Or even some ideas on a better AWS service to use?</p> <p>Thanks!</p> <p>Edit: Waking*, not walking</p> </div><!-- SC_ON --> &#32; submitted by &#32; <a href="https://www.reddit.com/user/nite16"> /u/nite16 </a> <br/> <span><a href="https://www.reddit.com/r/aws/comments/10judzb/walkingstarting_an_ec2_instance_on_receiving/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/aws/comments/10judzb/walkingstarting_an_ec2_instance_on_receiving/">[comments]</a></span></content><id>t3_10judzb</id><link href="https://www.reddit.com/r/aws/comments/10judzb/walkingstarting_an_ec2_instance_on_receiving/" /><updated>2023-01-24T02:07:35+00:00</updated><published>2023-01-24T02:07:35+00:00</published><title>Walking/starting an ec2 instance on receiving network traffic</title></entry><entry><author><name>/u/bazoukibarnacle</name><uri>https://www.reddit.com/user/bazoukibarnacle</uri></author><category term="aws" label="r/aws"/><content type="html"><!-- SC_OFF --><div class="md"><p>I have a nodemcu esp8266 and want to send mqtt qos 1 messages to my aws iot core. any idea how can i go about doing that? i tried the async-mqtt-client library but cant understand how to set my certificates (like you can with pubsubclient library)</p> </div><!-- SC_ON --> &#32; submitted by &#32; <a href="https://www.reddit.com/user/bazoukibarnacle"> /u/bazoukibarnacle </a> <br/> <span><a href="https://www.reddit.com/r/aws/comments/10jtotp/how_can_i_send_qos_1_mqtt_messages_to_aws/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/aws/comments/10jtotp/how_can_i_send_qos_1_mqtt_messages_to_aws/">[comments]</a></span></content><id>t3_10jtotp</id><link href="https://www.reddit.com/r/aws/comments/10jtotp/how_can_i_send_qos_1_mqtt_messages_to_aws/" /><updated>2023-01-24T01:33:11+00:00</updated><published>2023-01-24T01:33:11+00:00</published><title>How can i send qos 1 mqtt messages to aws?</title></entry><entry><author><name>/u/Diligent_File_7647</name><uri>https://www.reddit.com/user/Diligent_File_7647</uri></author><category term="aws" label="r/aws"/><content type="html"><!-- SC_OFF --><div class="md"><p>I recently moved my apis to a vpc. But now how do I access my test apis from the internet. Earlier I used to just call them directly. I can access these apis from ec2 instance with in the same vpc. Is it possible for me to access these from my computer for development? How do I go about it?</p> </div><!-- SC_ON --> &#32; submitted by &#32; <a href="https://www.reddit.com/user/Diligent_File_7647"> /u/Diligent_File_7647 </a> <br/> <span><a href="https://www.reddit.com/r/aws/comments/10jauer/how_do_i_access_private_apiapigateway_triggering/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/aws/comments/10jauer/how_do_i_access_private_apiapigateway_triggering/">[comments]</a></span></content><id>t3_10jauer</id><link href="https://www.reddit.com/r/aws/comments/10jauer/how_do_i_access_private_apiapigateway_triggering/" /><updated>2023-01-23T12:01:20+00:00</updated><published>2023-01-23T12:01:20+00:00</published><title>How do I access private api(apigateway triggering lambda inside a vpc) from the internet.</title></entry><entry><author><name>/u/jekapats</name><uri>https://www.reddit.com/user/jekapats</uri></author><category term="aws" label="r/aws"/><content type="html">&#32; submitted by &#32; <a href="https://www.reddit.com/user/jekapats"> /u/jekapats </a> <br/> <span><a href="https://github.com/cloudquery/cloudquery">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/aws/comments/10jogmf/open_source_high_performance_elt_framework_in_go/">[comments]</a></span></content><id>t3_10jogmf</id><link href="https://www.reddit.com/r/aws/comments/10jogmf/open_source_high_performance_elt_framework_in_go/" /><updated>2023-01-23T21:44:55+00:00</updated><published>2023-01-23T21:44:55+00:00</published><title>Open Source High Performance ELT Framework in Go (Fivetran, Airbyte, Appflow Alternative)</title></entry><entry><author><name>/u/mxforest</name><uri>https://www.reddit.com/user/mxforest</uri></author><category term="aws" label="r/aws"/><content type="html"><!-- SC_OFF --><div class="md"><p>The lambda function generates pdf files that can be larger than 1MB. One way is to upload them to s3 and then share a link. The only issue is that these are really sensitive files and they should not be shareable via a URL (which would be the case in s3 solution) and should be destroyed after just 1 access or some timeout whichever happens first.</p> </div><!-- SC_ON --> &#32; submitted by &#32; <a href="https://www.reddit.com/user/mxforest"> /u/mxforest </a> <br/> <span><a href="https://www.reddit.com/r/aws/comments/10jalbh/how_to_bypass_1mb_response_size_limit_while_using/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/aws/comments/10jalbh/how_to_bypass_1mb_response_size_limit_while_using/">[comments]</a></span></content><id>t3_10jalbh</id><link href="https://www.reddit.com/r/aws/comments/10jalbh/how_to_bypass_1mb_response_size_limit_while_using/" /><updated>2023-01-23T11:46:38+00:00</updated><published>2023-01-23T11:46:38+00:00</published><title>How to bypass 1MB response size limit while using Lambda with a Load balancer?</title></entry><entry><author><name>/u/Diligent_Mission8940</name><uri>https://www.reddit.com/user/Diligent_Mission8940</uri></author><category term="aws" label="r/aws"/><content type="html"><!-- SC_OFF --><div class="md"><p>I have manual resources that I would like to be managed by CloudFormation. While some resources are supported for import, other resources are not. For the resources that are not supported, is there a way to get them to be managed by CloudFormation? Or is the only way basically to delete the manual resource and recreate the resource in the stack (given that the resource does not hold data like for example a CloudWatch alarm)? If the resource does hold data and is unsupported for import, then I&#39;m guessing it&#39;s basically impossible assuming we don&#39;t want to lose the data?</p> </div><!-- SC_ON --> &#32; submitted by &#32; <a href="https://www.reddit.com/user/Diligent_Mission8940"> /u/Diligent_Mission8940 </a> <br/> <span><a href="https://www.reddit.com/r/aws/comments/10jfzbv/importing_existing_unsupported_resources_into/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/aws/comments/10jfzbv/importing_existing_unsupported_resources_into/">[comments]</a></span></content><id>t3_10jfzbv</id><link href="https://www.reddit.com/r/aws/comments/10jfzbv/importing_existing_unsupported_resources_into/" /><updated>2023-01-23T16:04:37+00:00</updated><published>2023-01-23T16:04:37+00:00</published><title>Importing existing unsupported resources into CloudFormation</title></entry><entry><author><name>/u/questioner45</name><uri>https://www.reddit.com/user/questioner45</uri></author><category term="aws" label="r/aws"/><content type="html"><!-- SC_OFF --><div class="md"><p>Is there a way to have different services/containers defined in my task definition file to resolve other containers to IPs in the same run time like with Docker Compose? </p> <p>I just set up a task definition with multiple containers and they cannot resolve each other automatically like with Docker. Do I have to use the now-deprecated links? How should I go about this? Thanks.</p> </div><!-- SC_ON --> &#32; submitted by &#32; <a href="https://www.reddit.com/user/questioner45"> /u/questioner45 </a> <br/> <span><a href="https://www.reddit.com/r/aws/comments/10js3fo/ecs_and_container_name_resolution/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/aws/comments/10js3fo/ecs_and_container_name_resolution/">[comments]</a></span></content><id>t3_10js3fo</id><link href="https://www.reddit.com/r/aws/comments/10js3fo/ecs_and_container_name_resolution/" /><updated>2023-01-24T00:17:37+00:00</updated><published>2023-01-24T00:17:37+00:00</published><title>ECS and container name resolution?</title></entry><entry><author><name>/u/smeggysmeg</name><uri>https://www.reddit.com/user/smeggysmeg</uri></author><category term="aws" label="r/aws"/><content type="html"><!-- SC_OFF --><div class="md"><p>I want a standard set of tools installed on every EC2 host spun up, regardless of which AMI is used. Normally, if I was creating the hosts, I would add the User Data script myself, but we&#39;re running into a problem where others will spin up hosts, ignore the runbooks, use standard images instead of custom images, and then we find we have hosts lacking our standard reporting tools.</p> <p>Besides me running a script on all hosts every X days to ensure the tools are installed, how can I run a script when each instance is first launched?</p> </div><!-- SC_ON --> &#32; submitted by &#32; <a href="https://www.reddit.com/user/smeggysmeg"> /u/smeggysmeg </a> <br/> <span><a href="https://www.reddit.com/r/aws/comments/10js0xt/user_data_script_on_every_new_ec2_instance/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/aws/comments/10js0xt/user_data_script_on_every_new_ec2_instance/">[comments]</a></span></content><id>t3_10js0xt</id><link href="https://www.reddit.com/r/aws/comments/10js0xt/user_data_script_on_every_new_ec2_instance/" /><updated>2023-01-24T00:14:22+00:00</updated><published>2023-01-24T00:14:22+00:00</published><title>User Data Script on every new EC2 instance, regardless of which AMI is used?</title></entry><entry><author><name>/u/SipUrine</name><uri>https://www.reddit.com/user/SipUrine</uri></author><category term="aws" label="r/aws"/><content type="html"><!-- SC_OFF --><div class="md"><p>Day 2 of being locked out. I need to get to work lol is this normal? Should I be making more noise? Seems random</p> </div><!-- SC_ON --> &#32; submitted by &#32; <a href="https://www.reddit.com/user/SipUrine"> /u/SipUrine </a> <br/> <span><a href="https://www.reddit.com/r/aws/comments/10jl73m/is_it_normal_to_register_for_an_account_and_have/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/aws/comments/10jl73m/is_it_normal_to_register_for_an_account_and_have/">[comments]</a></span></content><id>t3_10jl73m</id><link href="https://www.reddit.com/r/aws/comments/10jl73m/is_it_normal_to_register_for_an_account_and_have/" /><updated>2023-01-23T19:33:21+00:00</updated><published>2023-01-23T19:33:21+00:00</published><title>Is it normal to register for an account and have is suspended immediately</title></entry><entry><author><name>/u/thescrambler1979</name><uri>https://www.reddit.com/user/thescrambler1979</uri></author><category term="aws" label="r/aws"/><content type="html"><!-- SC_OFF --><div class="md"><p>I&#39;ve got a client that is using Cloudfront. One day last week, an edge location got a corrupted version of a javascript file which took their site offline for around 30 mins for people in a small area close to the edge location. Then the edge location pulled the correct file and all is right with the world. </p> <p>However, the client wants to know a few things:</p> <p>1) How did the cache resolve itself?</p> <p>2) Is there a way to flag an edge location as unusable?</p> <p>My thought on #1 is there is probably a system where hashes of files are compared between edge locations and and if a file does not match the majority, it&#39;s re-downloaded (this is just an idea and I have no idea if this is accurate)</p> <p>My thought on #2 is beyond selecting regions when you set up a cloudfront distribution, you have no say on what edge locations your distribution uses.</p> <p>&#x200B;</p> <p>Does anyone know the answer to these questions?</p> <p>Thanks!</p> </div><!-- SC_ON --> &#32; submitted by &#32; <a href="https://www.reddit.com/user/thescrambler1979"> /u/thescrambler1979 </a> <br/> <span><a href="https://www.reddit.com/r/aws/comments/10jdjpd/how_do_edge_locations_deal_with_corrupt_files/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/aws/comments/10jdjpd/how_do_edge_locations_deal_with_corrupt_files/">[comments]</a></span></content><id>t3_10jdjpd</id><link href="https://www.reddit.com/r/aws/comments/10jdjpd/how_do_edge_locations_deal_with_corrupt_files/" /><updated>2023-01-23T14:19:38+00:00</updated><published>2023-01-23T14:19:38+00:00</published><title>How do edge locations deal with corrupt files?</title></entry><entry><author><name>/u/TastefulElk</name><uri>https://www.reddit.com/user/TastefulElk</uri></author><category term="aws" label="r/aws"/><content type="html"><!-- SC_OFF --><div class="md"><p>Hey all builders!</p> <p><a href="https://blog.elva-group.com/serverless-frameworks-for-2023">Here&#39;s</a> a post that compares and showcases the most commonly used frameworks and tools for building and deploying serverless apps on AWS.</p> <p>What is your go-to tool, and are you looking to try out something new?</p> </div><!-- SC_ON --> &#32; submitted by &#32; <a href="https://www.reddit.com/user/TastefulElk"> /u/TastefulElk </a> <br/> <span><a href="https://www.reddit.com/r/aws/comments/10j8d5n/a_comparison_and_showcase_of_the_most_commonly/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/aws/comments/10j8d5n/a_comparison_and_showcase_of_the_most_commonly/">[comments]</a></span></content><id>t3_10j8d5n</id><link href="https://www.reddit.com/r/aws/comments/10j8d5n/a_comparison_and_showcase_of_the_most_commonly/" /><updated>2023-01-23T09:19:18+00:00</updated><published>2023-01-23T09:19:18+00:00</published><title>A comparison and showcase of the most commonly used frameworks for building serverless apps on AWS</title></entry><entry><author><name>/u/RussianInRecovery</name><uri>https://www.reddit.com/user/RussianInRecovery</uri></author><category term="aws" label="r/aws"/><content type="html"><!-- SC_OFF --><div class="md"><p>When editing a resource from within my Laravel Nova dashboard - I am unable to see my image - when checking the Google Console I get the following error:</p> <pre><code>Access to fetch at &#39;https://my-bucket.ap-southeast-2.amazonaws.com/K9P6a3VikEBCElreJGR9nJD2aRg6X2WrtJ30QlOJ.jpg&#39; from origin &#39;https://dev1.mysite.com&#39; has been blocked by CORS policy: No &#39;Access-Control-Allow-Origin&#39; header is present on the requested resource. If an opaque response serves your needs, set the request&#39;s mode to &#39;no-cors&#39; to fetch the resource with CORS disabled. </code></pre> <p>The CORS policy set in the Permission tab in my bucket is as follows:</p> <pre><code>[ { &quot;AllowedHeaders&quot;: [ &quot;*&quot; ], &quot;AllowedMethods&quot;: [ &quot;GET&quot; ], &quot;AllowedOrigins&quot;: [ &quot;*&quot; ], &quot;ExposeHeaders&quot;: [] } ] </code></pre> <p>However I am still receiving the CORS policy error message - any input or suggestions on how to fix this issue would be much appreciated.</p> <p>Thank you!</p> </div><!-- SC_ON --> &#32; submitted by &#32; <a href="https://www.reddit.com/user/RussianInRecovery"> /u/RussianInRecovery </a> <br/> <span><a href="https://www.reddit.com/r/aws/comments/10jp0fl/s3_bucket_cors_issue/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/aws/comments/10jp0fl/s3_bucket_cors_issue/">[comments]</a></span></content><id>t3_10jp0fl</id><link href="https://www.reddit.com/r/aws/comments/10jp0fl/s3_bucket_cors_issue/" /><updated>2023-01-23T22:06:47+00:00</updated><published>2023-01-23T22:06:47+00:00</published><title>S3 Bucket CORS Issue</title></entry><entry><author><name>/u/cloyfan93</name><uri>https://www.reddit.com/user/cloyfan93</uri></author><category term="aws" label="r/aws"/><content type="html"><!-- SC_OFF --><div class="md"><p>When upgrading the Aurora MySQL 5.7 to Aurora MySQL 8.0, this error showed up in the pre-check logs which prevented MySQL from continuing the upgrade process.</p> <pre><code> { &quot;id&quot;: &quot;engineMixupCheck&quot;, &quot;title&quot;: &quot;Tables recognized by InnoDB that belong to a different engine&quot;, &quot;status&quot;: &quot;OK&quot;, &quot;description&quot;: &quot;Error: Following tables are recognized by InnoDB engine while the SQL layer believes they belong to a different engine. Such situation may happen when one removes InnoDB table files manually from the disk and creates e.g. a MyISAM table with the same name.\n\nA possible way to solve this situation is to e.g. in case of MyISAM table:\n\n1. Rename the MyISAM table to a temporary name (RENAME TABLE).\n2. Create some dummy InnoDB table (its definition does not need to match), then copy (copy, not move) and rename the dummy .frm and .ibd files to the orphan name using OS file commands.\n3. The orphan table can be then dropped (DROP TABLE), as well as the dummy table.\n4. Finally the MyISAM table can be renamed back to its original name.&quot;, &quot;detectedProblems&quot;: [ { &quot;level&quot;: &quot;Error&quot;, &quot;dbObject&quot;: &quot;mysql.general_log_backup&quot;, &quot;description&quot;: &quot;recognized by the InnoDB engine but belongs to CSV&quot; } ] }, </code></pre> <p>And it looks like there are more &quot;CSV&quot; files based on this:</p> <pre><code>mysql&gt; select table_schema, table_name from information_schema.tables where engine = &#39;CSV&#39;; +--------------+--------------------+ | table_schema | table_name | +--------------+--------------------+ | mysql | general_log | | mysql | general_log_backup | | mysql | slow_log | | mysql | slow_log_backup | +--------------+--------------------+ </code></pre> <p>I am on a test cluster, and his general_log or slow_log are not being used. So I tried to drop the table by doing this (note user &quot;blah&quot; is the master user):</p> <pre><code>mysql&gt; show grants for &#39;blah&#39;@&#39;%&#39;; | GRANT SELECT, INSERT, UPDATE, DELETE, CREATE, DROP, RELOAD, PROCESS, REFERENCES, INDEX, ALTER, SHOW DATABASES, CREATE TEMPORARY TABLES, LOCK TABLES, EXECUTE, REPLICATION SLAVE, REPLICATION CLIENT, CREATE VIEW, SHOW VIEW, CREATE ROUTINE, ALTER ROUTINE, CREATE USER, EVENT, TRIGGER, LOAD FROM S3, SELECT INTO S3, INVOKE LAMBDA, INVOKE SAGEMAKER, INVOKE COMPREHEND ON *.* TO &#39;blah&#39;@&#39;%&#39; WITH GRANT OPTION mysql&gt; drop table general_log_backup; ERROR 1044 (42000): Access denied for user &#39;blah&#39;@&#39;%&#39; to database &#39;mysql&#39; </code></pre> <p>I even tried to change the log output from FILE to TABLE (hoping that MySQL will recreate the table), but this didn&#39;t work too.</p> </div><!-- SC_ON --> &#32; submitted by &#32; <a href="https://www.reddit.com/user/cloyfan93"> /u/cloyfan93 </a> <br/> <span><a href="https://www.reddit.com/r/aws/comments/10joclp/aurora_mysql_57_to_80_upgrade_with_incompatible/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/aws/comments/10joclp/aurora_mysql_57_to_80_upgrade_with_incompatible/">[comments]</a></span></content><id>t3_10joclp</id><link href="https://www.reddit.com/r/aws/comments/10joclp/aurora_mysql_57_to_80_upgrade_with_incompatible/" /><updated>2023-01-23T21:40:24+00:00</updated><published>2023-01-23T21:40:24+00:00</published><title>Aurora MySQL 5.7 to 8.0 Upgrade with Incompatible CSV Table</title></entry><entry><author><name>/u/NoseComplete</name><uri>https://www.reddit.com/user/NoseComplete</uri></author><category term="aws" label="r/aws"/><content type="html"><!-- SC_OFF --><div class="md"><p>hello everyone good afternoon, how are you?</p> <p>I&#39;m participating in a cloud project I would like to take a doubt if anyone knows.</p> <p>The customer has a site-to-site VPN that closes with AWS and has another Direct Connect VPN that closes with another unit. Is there any way I can make this network that enters through the S2S VPN communicate with the network of the unit that uses Direct Connect?</p> </div><!-- SC_ON --> &#32; submitted by &#32; <a href="https://www.reddit.com/user/NoseComplete"> /u/NoseComplete </a> <br/> <span><a href="https://www.reddit.com/r/aws/comments/10jochk/aws_vpn_ipsec_direct_connect/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/aws/comments/10jochk/aws_vpn_ipsec_direct_connect/">[comments]</a></span></content><id>t3_10jochk</id><link href="https://www.reddit.com/r/aws/comments/10jochk/aws_vpn_ipsec_direct_connect/" /><updated>2023-01-23T21:40:16+00:00</updated><published>2023-01-23T21:40:16+00:00</published><title>AWS - VPN IPsec + Direct Connect</title></entry><entry><author><name>/u/surpyc</name><uri>https://www.reddit.com/user/surpyc</uri></author><category term="aws" label="r/aws"/><content type="html"><!-- SC_OFF --><div class="md"><p>I am trying to deploy EKS, but i don&#39;t understand why i need OIDC ?</p> <p>Is best practice to use this ? I don&#39;t need connection with IAM or AD.</p> <p>But from terraform i need to have this code, Not sure how i can avoid that or i really need that.</p> <p>&#x200B;</p> <pre><code>module &quot;vpc_cni_irsa&quot; { source = &quot;terraform-aws-modules/iam/aws//modules/iam-role-for-service-accounts-eks&quot; version = &quot;~&gt; 5.0&quot; role_name_prefix = &quot;VPC-CNI-IRSA&quot; attach_vpc_cni_policy = true vpc_cni_enable_ipv6 = true oidc_providers = { main = { provider_arn = module.eks.oidc_provider_arn namespace_service_accounts = [&quot;kube-system:aws-node&quot;] } } } </code></pre> <p>&#x200B;</p> </div><!-- SC_ON --> &#32; submitted by &#32; <a href="https://www.reddit.com/user/surpyc"> /u/surpyc </a> <br/> <span><a href="https://www.reddit.com/r/aws/comments/10jbpy9/eks_is_best_to_use_oidc_providers/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/aws/comments/10jbpy9/eks_is_best_to_use_oidc_providers/">[comments]</a></span></content><id>t3_10jbpy9</id><link href="https://www.reddit.com/r/aws/comments/10jbpy9/eks_is_best_to_use_oidc_providers/" /><updated>2023-01-23T12:49:51+00:00</updated><published>2023-01-23T12:49:51+00:00</published><title>EKS Is best to use oidc_providers ?</title></entry><entry><author><name>/u/ellensen</name><uri>https://www.reddit.com/user/ellensen</uri></author><category term="aws" label="r/aws"/><content type="html"><!-- SC_OFF --><div class="md"><p>We are going to implement our first complete serverless project now without using docker containers to run the business logic, instead we are going to use serverless with lambdas + event bus + step functions like described by AWS. We haven&#39;t started implementing yet and still a bit unsure what&#39;s best practice using a central EventBus or a separate EventBus per feature/project? </p> <p><a href="https://preview.redd.it/c5tvbdun1sda1.jpg?width=4032&amp;format=pjpg&amp;auto=webp&amp;s=b59be015974c771731144c0c141748c86cbb608c">https://preview.redd.it/c5tvbdun1sda1.jpg?width=4032&amp;format=pjpg&amp;auto=webp&amp;s=b59be015974c771731144c0c141748c86cbb608c</a></p> </div><!-- SC_ON --> &#32; submitted by &#32; <a href="https://www.reddit.com/user/ellensen"> /u/ellensen </a> <br/> <span><a href="https://www.reddit.com/r/aws/comments/10ja824/best_practice_serverless_project_with_eventbridge/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/aws/comments/10ja824/best_practice_serverless_project_with_eventbridge/">[comments]</a></span></content><id>t3_10ja824</id><link href="https://www.reddit.com/r/aws/comments/10ja824/best_practice_serverless_project_with_eventbridge/" /><updated>2023-01-23T11:24:04+00:00</updated><published>2023-01-23T11:24:04+00:00</published><title>Best practice serverless project with EventBridge EventBus implementation.</title></entry><entry><author><name>/u/TalRofe</name><uri>https://www.reddit.com/user/TalRofe</uri></author><category term="aws" label="r/aws"/><content type="html"><!-- SC_OFF --><div class="md"><p>I try to deploy a complete cluster using EKS. When I run `terraform apply` the command completes successfully. I can see that my configured Pods, Deployments, Services were created. I also see the required software for `aws-load-balancer-controller` was created.</p> <p>I have a full code for my deployment here to check:</p> <p><a href="https://github.com/tal-rofe/terraform-issue">https://github.com/tal-rofe/terraform-issue</a></p> <p>&#x200B;</p> <p>**Expected outcome**</p> <p>Amazon ALB should be created</p> <p>&#x200B;</p> <p>**Environment**</p> <p>&#x200B;</p> <p>&#x200B;</p> <p>AWS Load Balancer controller version &quot;1.4.7&quot;</p> <p>Kubernetes version &quot;2.16.1&quot;</p> <p>Using EKS (yes/no), if so version? 1.24</p> <p>&#x200B;</p> <p>**Additional Context**:</p> <p>When I go to EC2 load balancers the list is empty. ALB was not created..</p> <p>&#x200B;</p> <p>![image](<a href="https://user-images.githubusercontent.com/100444463/214122215-1dec15fa-4538-4e5b-afce-6963ae840871.png">https://user-images.githubusercontent.com/100444463/214122215-1dec15fa-4538-4e5b-afce-6963ae840871.png</a>)</p> <p>&#x200B;</p> <p>All created pods seem fine: </p> <p>![image](<a href="https://user-images.githubusercontent.com/100444463/214122279-ca31e580-b0d9-446c-8c89-9a19d3b1b7dc.png">https://user-images.githubusercontent.com/100444463/214122279-ca31e580-b0d9-446c-8c89-9a19d3b1b7dc.png</a>)</p> <p>&#x200B;</p> <p>Deployments</p> <p>![image](<a href="https://user-images.githubusercontent.com/100444463/214122398-5104359c-11a3-4fee-a808-27df3fb7fda2.png">https://user-images.githubusercontent.com/100444463/214122398-5104359c-11a3-4fee-a808-27df3fb7fda2.png</a>)</p> <p>&#x200B;</p> <p>Services</p> <p>![image](<a href="https://user-images.githubusercontent.com/100444463/214122418-e459d5d7-d76a-492c-8afb-8147a573ae0a.png">https://user-images.githubusercontent.com/100444463/214122418-e459d5d7-d76a-492c-8afb-8147a573ae0a.png</a>)</p> <p>&#x200B;</p> <p>Service Account</p> <p>![image](<a href="https://user-images.githubusercontent.com/100444463/214122468-f1fe4a8a-fef7-473f-bb86-02455ba110ac.png">https://user-images.githubusercontent.com/100444463/214122468-f1fe4a8a-fef7-473f-bb86-02455ba110ac.png</a>)</p> <p>&#x200B;</p> <p>&#x200B;</p> <p>So everything seems fine, except for the ALB not created.</p> <p>&#x200B;</p> <p>I guess it has issues with permissions for creating load balancer? But I provided my load balancer permissions:</p> <p>```</p> <p># <a href="https://docs.aws.amazon.com/eks/latest/userguide/aws-load-balancer-controller.html">https://docs.aws.amazon.com/eks/latest/userguide/aws-load-balancer-controller.html</a></p> <p># <a href="https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/v2.4.4/docs/install/iam_policy.json">https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/v2.4.4/docs/install/iam_policy.json</a></p> <p>resource &quot;aws_iam_policy&quot; &quot;alb_controller_policy&quot; {</p> <p>name = &quot;alb-controller-policy&quot;</p> <p>description = &quot;Policy for ALB controller&quot;</p> <p>policy = file(&quot;./resources/node-ingress-policy.json&quot;)</p> <p>path = &quot;/&quot;</p> <p>&#x200B;</p> <p>tags = merge(</p> <p>var.common_tags,</p> <p>{</p> <p>Stack = &quot;backend&quot;</p> <p>Name = &quot;${var.project}-alb-controller-policy&quot;,</p> <p>}</p> <p>)</p> <p>}</p> <p>&#x200B;</p> <p>data &quot;aws_iam_policy_document&quot; &quot;irsa_alb_controller_trust_policy_doc&quot; {</p> <p>statement {</p> <p>effect = &quot;Allow&quot;</p> <p>actions = [&quot;sts:AssumeRoleWithWebIdentity&quot;]</p> <p>principals {</p> <p>type = &quot;Federated&quot;</p> <p>identifiers = [data.aws_iam_openid_connect_provider.main.arn]</p> <p>}</p> <p>condition {</p> <p>test = &quot;StringEquals&quot;</p> <p>variable = &quot;${data.aws_iam_openid_connect_provider.main.url}:sub&quot;</p> <p>values = [</p> <p>&quot;system:serviceaccount:kube-system:aws-load-balancer-controller&quot;</p> <p>]</p> <p>}</p> <p>condition {</p> <p>test = &quot;StringEquals&quot;</p> <p>variable = &quot;${data.aws_iam_openid_connect_provider.main.url}:aud&quot;</p> <p>values = [</p> <p>&quot;<a href="https://sts.amazonaws.com">sts.amazonaws.com</a>&quot;</p> <p>]</p> <p>}</p> <p>}</p> <p>}</p> <p>&#x200B;</p> <p>resource &quot;aws_iam_role&quot; &quot;alb_controller_role&quot; {</p> <p>name = &quot;alb-controller-role&quot;</p> <p>assume_role_policy = data.aws_iam_policy_document.irsa_alb_controller_trust_policy_doc.json</p> <p>path = &quot;/&quot;</p> <p>&#x200B;</p> <p>tags = merge(</p> <p>var.common_tags,</p> <p>{</p> <p>Stack = &quot;backend&quot;</p> <p>Name = &quot;${var.project}-alb-controller-role&quot;,</p> <p>}</p> <p>)</p> <p>}</p> <p>&#x200B;</p> <p>resource &quot;aws_iam_role_policy_attachment&quot; &quot;alb_policy_attachment&quot; {</p> <p>role = aws_iam_role.alb_controller_role.name</p> <p>policy_arn = aws_iam_policy.alb_controller_policy.arn</p> <p>}</p> <p>```</p> <p>&#x200B;</p> <p>If I run this command: `kubectl logs -n kube-system deployment.apps/aws-load-balancer-controller` I get errors in the logs:</p> <p>&#x200B;</p> <p>```</p> <p>{&quot;level&quot;:&quot;error&quot;,&quot;ts&quot;:1674494743.514425,&quot;logger&quot;:&quot;controller.ingress&quot;,&quot;msg&quot;:&quot;Reconciler error&quot;,&quot;name&quot;:&quot;api-ingress&quot;,&quot;namespace&quot;:&quot;default&quot;,&quot;error&quot;:&quot;ingress: default/api-ingress: AccessDeniedException: User: arn:aws:sts::lll:assumed-role/first-eks-node-group-llllllll/i-llllll is not authorized to perform: acm:ListCertificates because no identity-based policy allows the acm:ListCertificates action&quot;}</p> <p>```</p> <p>&#x200B;</p> <p>But I did provide this permissions in the policy json: `./terraform/k8s/resources/node-ingress-policy.json`</p> </div><!-- SC_ON --> &#32; submitted by &#32; <a href="https://www.reddit.com/user/TalRofe"> /u/TalRofe </a> <br/> <span><a href="https://www.reddit.com/r/aws/comments/10jkw70/terraform_helm_awsloadbalancercontroller_alb_wont/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/aws/comments/10jkw70/terraform_helm_awsloadbalancercontroller_alb_wont/">[comments]</a></span></content><id>t3_10jkw70</id><link href="https://www.reddit.com/r/aws/comments/10jkw70/terraform_helm_awsloadbalancercontroller_alb_wont/" /><updated>2023-01-23T19:20:59+00:00</updated><published>2023-01-23T19:20:59+00:00</published><title>Terraform & Helm & aws-load-balancer-controller : ALB won't be created</title></entry><entry><author><name>/u/babarsac</name><uri>https://www.reddit.com/user/babarsac</uri></author><category term="aws" label="r/aws"/><content type="html"><!-- SC_OFF --><div class="md"><p>For background I&#39;m a GIS Engineer who has been sliding into more of a Sysadmin role over the years. We are starting to get our feet wet in AWS and I am setting up stacks for different teams in our company. Folks really want an SSO experience when accessing resources so I&#39;m planning to use an AD Connector to hit our corporate Azure-hosted AD.</p> <p>My big question is will there be any issues when users access AWS resources using corporate AD credentials when the resources live on a completely separate domain?</p> <p>I plan to use a Route 53 hosted zone to emulate a local domain. (something like resources.cloud)</p> </div><!-- SC_ON --> &#32; submitted by &#32; <a href="https://www.reddit.com/user/babarsac"> /u/babarsac </a> <br/> <span><a href="https://www.reddit.com/r/aws/comments/10jkuu3/planning_for_hybrid_architecture_external_ad/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/aws/comments/10jkuu3/planning_for_hybrid_architecture_external_ad/">[comments]</a></span></content><id>t3_10jkuu3</id><link href="https://www.reddit.com/r/aws/comments/10jkuu3/planning_for_hybrid_architecture_external_ad/" /><updated>2023-01-23T19:19:26+00:00</updated><published>2023-01-23T19:19:26+00:00</published><title>Planning for Hybrid Architecture (External AD & Route 53)</title></entry><entry><author><name>/u/cloyfan93</name><uri>https://www.reddit.com/user/cloyfan93</uri></author><category term="aws" label="r/aws"/><content type="html"><!-- SC_OFF --><div class="md"><p>I like to run the same query where caches are disabled on AWS Amazon Aurora MySQL 8.0. But from what I read, the query cache is enabled by the default and it does not look like it can be turned off. Then the innodb_buffer_pool_size cannot have a 0 value.</p> <p>So, how do I run the same query so it pulls the data from the disk?</p> </div><!-- SC_ON --> &#32; submitted by &#32; <a href="https://www.reddit.com/user/cloyfan93"> /u/cloyfan93 </a> <br/> <span><a href="https://www.reddit.com/r/aws/comments/10jk981/how_to_run_the_same_query_in_amazon_aurora_mysql/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/aws/comments/10jk981/how_to_run_the_same_query_in_amazon_aurora_mysql/">[comments]</a></span></content><id>t3_10jk981</id><link href="https://www.reddit.com/r/aws/comments/10jk981/how_to_run_the_same_query_in_amazon_aurora_mysql/" /><updated>2023-01-23T18:55:44+00:00</updated><published>2023-01-23T18:55:44+00:00</published><title>How to Run the Same Query in Amazon Aurora MySQL 8.0 Without Caches</title></entry></feed> |