I have two EC2 instances: ec2-1 and ec2-2, one s3 bucket: bucket-1, all in the same aws account. both instances are associated with the same IAM role which has this trust relationship: { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow",…
I have the following code in Terraform: resource "aws_db_instance" "replica_rds_instance" { for_each = var.rds_number_of_replicas //integer //something } But I receive the following error: The given "for_each" argument value is unsuitable: the "for_each" argument must be a map, or set of…
In this tutorial https://aws.amazon.com/getting-started/hands-on/build-serverless-web-app-lambda-apigateway-s3-dynamodb-cognito/module-1/ I've tried looking online, but it seems this isn't a common issue. I've followed all the steps successfully up until "Step 3: Populate the git repository" When I run the commands, it gives me the following…
I have a bucket in my Primary Account. I have added a bucket policy for this account to give access to an IAM user created by Secondary Account as below: { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Principal": {…
i have a python script in which i have included a handler like this [lambda_handler] (https://phpout.com/wp-content/uploads/2024/03/ZLcFG.png) and i have a dockerfileDockerFile used to build image which i am using to make a container image which is pushed to ECR and…
The blog post AWS S3 Denial of Wallet amplification attack | by Ben Liesfeld | Feb, 2024 | Limbus News mentions: You could monitor HTTP API requests to your S3 buckets which is possible with a delay of a few…
We are trying to optimise AWS S3. The cost explorer shows very high cost of ListBuckets calls. To get the source of these calls, we enabled the CloudTrails with configuration to log all the management and data eventtype logs for…
I ran terraform apply successfully, but none the console.log statements seem to be sent to CloudWatch. I followed this solution: https://stackoverflow.com/a/75157142/9105207 I do see the CloudWatch log group created, but no log streams at all. This is my code: CloudWatch…
I accidentally changed the permissions of .ssh directory and everything inside of it to 777 in my ec2 instance as ec2-user (root) and logged out of the instance. Now I cannot ssh into my instance since the permissions are too…
Consider this class: import type { PublishCommand, SNSClient } from '@aws-sdk/client-sns' export class MyPublisher { private readonly topicArn: string private readonly snsClient: SNSClient constructor(topicArn: string, snsClient: SNSClient) { this.topicArn = topicArn this.snsClient = snsClient } async publish(title = '', description…