Here's my setup: using AWS Organizations to segregate different application stacks; each Organizational Unit has separate AWS accounts to separate Dev and Prod. one "Shared services" AWS account with a CodeArtifact repository containing private Python packages, including common packages for…
I have setup a VPC in aws with 2 public subnets and 2 private subnets with a NAT Gateway in the public subnets to allow the private subnets to access the internet. In my private subnets I'm hosting an RDS…
I've been trying to get a db connection working in my lambda and having the worst time retrieving my password from secrets manager. When I run the lambda I get User: arn:aws:sts::#####:assumed-role/consent-gen/consent-gen is not authorized to perform: secretsmanager:GetSecretValue because no…
I can't seem to get DNS setup right. I have A records, NS and SOA record. I notice the domain list a different set of DNS servers than the Hosted Zone. Anyway I can't get anything to resolve across the…
I'm currently facing an issue with my ECS tasks connection to RDS which are deployed by using AWS Copilot CLI. Despite ensuring that the ECS task and the RDS have the same VPC and appropriate security groups for connection. Interestingly,…
I have a scenario where I'm using an Amazon Cognito pre-token generation trigger to call an AWS Lambda function. The Lambda function is placed within a private subnet for security reasons. However, I'm having trouble configuring the security group for…
When I create an ECS cluster on the AWS UI, I have the option to select a VPC. But how do I select or attach an existing VPC while creating a cluster using Terraform? resource "aws_ecs_cluster" "gtm" { name =…
I have setup a mongodb atlas. Also, I have configured a VPC peering from mongodb atlas to my AWS VPC. I have allowed VPC CIDR in the IP access list on mongodb atlas and it's working fine. I also have…
I have already set up the necessary VPC endpoints as stated here. However, when inside of my Lambda function (using Node.js) I do: const sesClient = new SESClient({ }); ... await sesClient.send(sendEmailCommand); it times out after 5 minutes. Should a…
When I create a DynamoDB VPC Gateway Endpoint it breaks an ECS task that connects to DynamoDB. The ECS task/service/cluster is in the same VPC in the same region as the gateway endpoint on a private subnet and its security…