I'm working with an AWS CloudFormation template to deploy a serverless application that requires a Lambda function with internet access and a PostgreSQL RDS instance that I need to access remotely for management purposes. After modifying my subnet and route…
I have two EC2 instances: ec2-1 and ec2-2, one s3 bucket: bucket-1, all in the same aws account. both instances are associated with the same IAM role which has this trust relationship: { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow",…
Here's my setup: using AWS Organizations to segregate different application stacks; each Organizational Unit has separate AWS accounts to separate Dev and Prod. one "Shared services" AWS account with a CodeArtifact repository containing private Python packages, including common packages for…
I have setup a VPC in aws with 2 public subnets and 2 private subnets with a NAT Gateway in the public subnets to allow the private subnets to access the internet. In my private subnets I'm hosting an RDS…
I've been trying to get a db connection working in my lambda and having the worst time retrieving my password from secrets manager. When I run the lambda I get User: arn:aws:sts::#####:assumed-role/consent-gen/consent-gen is not authorized to perform: secretsmanager:GetSecretValue because no…
I can't seem to get DNS setup right. I have A records, NS and SOA record. I notice the domain list a different set of DNS servers than the Hosted Zone. Anyway I can't get anything to resolve across the…
I'm currently facing an issue with my ECS tasks connection to RDS which are deployed by using AWS Copilot CLI. Despite ensuring that the ECS task and the RDS have the same VPC and appropriate security groups for connection. Interestingly,…
I have a scenario where I'm using an Amazon Cognito pre-token generation trigger to call an AWS Lambda function. The Lambda function is placed within a private subnet for security reasons. However, I'm having trouble configuring the security group for…
When I create an ECS cluster on the AWS UI, I have the option to select a VPC. But how do I select or attach an existing VPC while creating a cluster using Terraform? resource "aws_ecs_cluster" "gtm" { name =…
I have setup a mongodb atlas. Also, I have configured a VPC peering from mongodb atlas to my AWS VPC. I have allowed VPC CIDR in the IP access list on mongodb atlas and it's working fine. I also have…