Unanswered Questions
2,704 questions with no upvoted or accepted answers
11
votes
0
answers
7k
views
How can a Cognito user initialize TOTP on first login when MFA is required?
I am setting up Amazon Cognito for authentication to use a Kibana instance. I only permit administrators to create users, and I permit only the Cognito User Pool identity provider. When creating the ...
8
votes
2
answers
5k
views
Best way to log to two different CloudWatch log streams from an ECS container?
We are running our services on AWS's ECS platform, and we send our logs to AWS CloudWatch.
We have two types of logs, any container can produce either type:
the usual application logs (access, error, ...
7
votes
1
answer
3k
views
How can one configure an AWS ElasticSearch access policy using CloudFormation?
The AWS documentation on ElasticSearch access control talks about how to grant access to the ES domains subresources while preventing changes to the domain's configuration by creating an ES domain ...
7
votes
1
answer
2k
views
Joining a server to AD via AWS cloudformation
I want to use cloudformation to automatically join new instances to AD.
When I googled this it looks like many people just use scripts in there cloudformation templates and pass in credentials- I don'...
7
votes
0
answers
2k
views
TCP congestion collapse
I am experiencing suboptimal performance on an EC2 instance connecting to an RDS instance. This particular instance was built before VPC's existed, so all the traffic is flowing through a single ...
6
votes
1
answer
7k
views
What options do I have if I need a firewall behind AWS network load balancer?
Today we're using WAF for Application Load Balancer and it's great, but WAF not support Network Load balancer.
So we need a solution that will protect us behind or after the NLB. For example:
1. ...
6
votes
0
answers
558
views
Updating to latest Docker images in Elastic Beanstalk Multicontainer
I'm running a site on Elastic Beanstalk using a multi container set up. I'm wondering what is the preferred strategy to pull in the latest images.
On the CI server, after successful commits to master,...
5
votes
0
answers
8k
views
Enabling HSTS header on AWS Application Load Balancer
We have a Spring Boot application behind an AWS Application Load Balancer. The load balancer terminates SSL before forwarding coming requests to our application and also redirects 80 port to 443 port.
...
5
votes
1
answer
3k
views
EC2 VPC Intermittent outbound connection timeouts
My production web service consists of:
Auto-scaling group
Network loadbalancer (ELB)
2x EC2 instances as web servers
This configuration was running fine until yesterday when one of the EC2 instances ...
5
votes
0
answers
5k
views
How to handle trailing slash in a redirect rule for an AWS S3 website?
I'm trying to build up some landing pages in my s3 hosted web site.
For example: http://www.example.com/products
That should redirect to http://www.example.com/products.html
To accomplish this, I ...
5
votes
0
answers
1k
views
CloudFormation fails deleting a stack if a hostedzone contains non-required records, how can it be avoided?
I wrote a CloudFormation template which creates a whole environment which includes the creation of VPC, HostedZone, Subnets, Autoscaling Groups, etc...
The servers which are created and are members ...
5
votes
0
answers
3k
views
Newly installed programs in Server 2016 can't be clicked from the start menu
I created a new instance of Windows Server Datacenter 2016 on AWS (Version: 1607 OS Build 14393.321). When I install a new application and try to click on it from the start menu it does not work.
...
5
votes
2
answers
755
views
Automate war deployment in VPC's private subnet on tomcat7
I have a VPC with public and private subnets.
Public subnet contains my Nating and Bastion instances
Private subnet contains my application servers (3 ec2 instances running tomcat7 with my project war ...
5
votes
1
answer
1k
views
ECS Stopped Task not Releasing Port
I have an ECS cluster with ELB. Last night I saw that a task was stuck in restarting loop. From the service Events log, it said:
"service xxxxx was unable to place a task because no container
...
5
votes
2
answers
2k
views
If you can't change the RDS endpoint of an AWS Beanstalk instance, how do you do a blue/green deployment?
From what I can tell, one can't change the Amazon RDS (RDS) endpoint of an existing Elastic Beanstalk (EB) instance?
If that is the case, than you can't have your code deployed to a stage server, ...