I am using a module to create an autoscaling group that spins up instances and provides them a launch script to run. The launch script is relatively simple, just a few apt gets/installs, create a user, and write some files.…
I have an ALB that has lambda as target group. Essentially, the lambda that does logic checks and returns a response: { 'statusCode': 301, 'headers': { 'Location': url, }, 'body': null, 'isBase64Encoded': false } The response above will return a…
for example I have a iam eventbridge rule that is triggered for any changes to the roles as below: { "source": ["aws.iam"], "detail-type": ["AWS API Call via CloudTrail"], "detail": { "eventSource": ["iam.amazonaws.com"], "eventName": ["AttachGroupPolicy", "AttachRolePolicy", "AttachUserPolicy", "DetachGroupPolicy", "DetachRolePolicy", "DetachUserPolicy", "PutGroupPolicy",…
I'm on the newest AWS CLI version - 2.7.24 Trying to list all the files from all the folders I have (with a certain extension) on this path: s3://myfiles/folders/ "folders" have this structure: folder1 - item - item folder2 -…
AWS Batch documentation says it is based on ECS. So why shouldn't we just use ECS? What pressing benefits does AWS Batch offer that are not available in ECS? Both offer autoscaling as well. Is queuing and priority of jbos…
Is it possible to create an AWS role (with "iam:CreateRole" permissions) to prevent it having privilege escalation, and only allow it to create new roles with a specific set of permissions e.g: "s3:GetObject"? I am not sure if PermissionsBoundary is…
I am trying to use the below aws cli command to invoke the lambda function. aws lambda invoke --invocation-type RequestResponse --function-name HelloWorldJava --payload "world" outputfile.txt But Iam getting below error. Invalid base64: ""world"" The book I am referring to is…
We have a complex AWS organization with many accounts. I need to allow web browser access to an S3 HTML bucket that is limited to the VPN private IP subnet users only. I created a VPC Interface endpoint and gave…
I'm trying to set up the AWS cloud for some VMs as an alternative for existing setups in Azure. AWS however has some limitations on the subnet that Azure does not have. With Azure I have it set up using…
I have seen related questions for this issue. But my problem in particular is I am assuming a role to retrieve temporary credenitals. It works just fine; however, when running CDK Bootstrap, I receive: Need to perform AWS calls for…