The assignment description says: "The assignment is to set up a domain controller in a subnet. Then set up a backup domain controller that is synchronized with the primary domain controller on a separate subnet. Configure the traffic flow between the two subnets to allow domain services but be somewhat secure. Provide a document showing the naming and addressing of the two subnets along with allowed traffic. Also provide a screenshot from the primary domain controller showing the controller hierarchy." The problem is we haven't touched domain controllers in this course at all. I created a new ..read more

Hey! I’m trying to write integration tests for CDK. There isn’t a great deal out there, except a few docs and articles. I’m facing an issue. In the stack I’m trying to test, I’m getting a fail when I run integ tests because the resources already exist. Now, I could create a new stack and then seek those resources out that were made by the stack to then test them, but that doesn’t make the most sense to me to do. I could also have the integ test runner deploy in a different region to avoid conflicts, but again, that doesn’t seem right. So my question is, what is the right thing to do here? I w ..read more

Hi all - Question: How do I get Github to clone/copy over the S3 bucket to the repo? Question: Is my YAML file correct? I am using https://github.com/marketplace/actions/s3-backup I created the YML file inside this directory .github/workflows I added the AWS_ACCESS_KEY + AWS_SECRET_KEY to Settings --> Actions secrets and variables Here is the YAML file I created. deploy-main: runs-on: ubuntu-latest if: github.ref == 'refs/heads/main' steps: - name: Checkout uses: actions/checkout@v3 - name: Configure AWS Credentials uses: aws-actions/configure-aws-credentials@v1 with: aws-access-key ..read more

I found hundreds of articles on how to grant full bucket access to IAM user but not a single one for IAM IC users. As a result, I have been trying to use IAM IC's permissionSet inline policies to simulate what these articles say. I can see the bucket that I am sharing by going directly to: https://...com/s3/buckets/BUCKETNAME and logging in as the IAM IC user but then I get that I don't have permission to list objects. If I click on the buckets in the left hand menu it says I don't have permission to list buckets either. Here's what I tried: 1- In IAM IC, created a permissionSet with an inlin ..read more

Is it possible and clean to use firebase for authentication over cognito (I haven’t heard great things and the docs seem horrible) while still using AWS for most backend tasks like lambda or gateway, etc? Firebase also seems to have good app notification tools but is it bad to be mixing these services together? This article seems to be a simple way to handle the auth for calling AWS functions with firebase https://medium.com/swlh/simple-firebase-authorization-for-aws-lambda-and-api-gateway-a59dacb607ba The question then is if I’m storing objects in my dynamoDBs that use the firebase user IDs ..read more

Hello, Quick question we have a r4.2xlarge instance with 2012r2 part of the in place upgrade is to update the AWS PV drivers. Part of the latest update going from version 7.xx to 8.3.x cause the network to kick off refusing connecting to the instance. Any opinions gotcha with the process? submitted by /u/rootj0 [visit reddit] [comments ..read more

it's been a hot minute since I've used AWS but I'm curious if anyone here has ever experienced this. due to my alma mater having no foresight, they closed all email accounts predating 2020 a few months ago. admittedly, it was my own fault that I forgot that I used that email for my AWS account. emailing tech support for both Amazon and my university did not help, and I basically was told that it wasn't their problem and they could not re-grant access to my account. I'm curious if anyone has ever experienced something similar and whether there's anything I can do at this point? submitted by ..read more

Hey there! Second post on here today. Curious to know if anyone has a smart method of allowing a frontend client to access AWS Transcribe's Live Transcription Stream service, without making API keys visible to the frontend. I've funnelled other AWS Services in my webapp thru Lambda functions authorized by Cognito via a Gateway REST API. I feel like this is a bit more complicated since this is a stream? Uncharted waters for me. Any recommendations for how to do this? Ideally use AWS Gateway's REST? Thanks a ton. submitted by /u/ds1008 [visit reddit] [comments ..read more

Howdy, devs! Curious to what LLM you have found the most success with when developing with AWS services? I personally love the phind model over any of the chat-gpt models I have used. I find that chat-gpt will often confuse and mix AWS services and their use cases together especially when writing queries or trying to ask for debugging questions. What LLM is your favorite go to? submitted by /u/Public-Selection3862 [visit reddit] [comments ..read more

I know that running Postgres on EC2 is cheaper than Postgres on RDS. But how about Postgres on App Runner? Is this also cheaper than RDS? submitted by /u/phatangus [visit reddit] [comments ..read more