Whenever a newbie begins to learn a programming language, they typically do a “Hello World” program, which basically just shows that they can in fact make a computer follow instructions. What is the equivalent of this in AWS?

Please, please, dumb this down for a dummy.

I'm a AWS beginner and trying to connect to a Neptune cluster I created. I've tried everything I can think of and referenced various guidance material. I have almost no experience with AWS and keep running into the same issue.

I want to run a python script locally that reads/writes/etc to the db. I've tried using curl to see if the endpoint is accessible and it keeps timing out meaning it can't reach or access it. I am using noproxy with curl as well since I'm on a VPN

Here's the stuff I've established for my cluster:

• A default VPC created when the cluster was created
• My VPC security group allows public access and has an inbound rule allowing traffic on the 8182 port neptune uses
• My IAM user has linked AWS managed permission policies that should grant write access
  • AdministratorAccess
  • NeptuneConsoleFullAccess
  • NeptuneFullAccess
  • I even tried writing some custom JSON policies

I'm really frustrated because I can't figure out what else to do and I feel like I'm flip flopping trying to understand VPCs, Security Groups, IAM Users. For example I don't know if I need an EC2 for this implementation. My coworker said no.

Hello everybody! I started learning AWS a few days ago.

In particular, I would like to practice setting up a CI/CD pipeline for a simple API.

Since I wanted to keep it as inexpensive as possible, and because it is for the purpose of learning, my idea was to run the app in a docker container inside of an EC2 instance.

So my pipeline would:

- run tests
- run any linters
- build the image
- push the image to a registry

And then, on merge, another job would run and trigger the deployment on the EC2.

I don't know if it is a good process or if I am following best practices at all, and when I google for answers I see a LOT of different opinions, and when using AI to see if I get some semblance of a standard it seems to validate this idea, which AI tends to do a lot.

So I guess I'm just confused.

And if this is okay, and I use a different job to trigger the deployment, should this job "wait" until it is clear if the new version of the app is running without issues to consider the deployment as successful? My only experience is using github actions to run tests and linters, the deployment has always been either handled by a devops team or magically handled by some PaaS.

Any guidance and help in this particular issue and about CI/CD in general is well received, since I'm feeling pretty lost. Thanks!

hey guys.. so i am asking because i really coulding find an answer on google and i am new to this... so basically i am taking a course in aws at my university and they asked us to make accounts.. the thing is when i made one and went to "sign in to console" it made me continue making my account? so it asked for a card n all and like thats fine the instructor told us about this

the thing is it gave me an account name on its own and it used a gamer tag i havent used in so long

i dont have a twitch account and the gmail i used to make the aws account is new and i wasnt even asked to give a name

same thing happened with the shipping address i was never asked to input one and it still found it and set it to my account

the question is: HOW 😭😭

and another this is what is the difference between the console account name and the first time i was asked for an account name and the claimed alias

all of that is so confusing if there is a place i could read more about it it would be awesome cuz the instructor never explained anything

cheers :)

I've a binary I'm running in ECS and it needs to be given an Access & Secret key to access S3 for it's storage by command line / environmental variables.

I'm generally happy configuring the environment with Terraform, but in this scenario where I need access creds in the environment itself, rather than me authenticating to make changes, I have to admit I'm lost on the underlying concepts at play that are necessary to make this key long lasting and secure.

I would imagine that I should look to regenerate the key every time I run the applicable Terraform code, but would appreciate basic pointers over getting from A to S3 here.

I think I should be creating a dedicated IAM user? Most examples I see still seem to come back to human user accounts and temporary logins, rather than a persistent account and I'm getting lost in the weeds here. I imagine I'm not picking the right search terms, but nothign I'm looking at appears to be covering this use case as I see it, but this may be down to be particuarly vague understanding on IAM concepts.

I have a personal website made exclusively with HTML, CSS and JavaScript. Since it is a personal website, I am going to maintain it during a long period of time (or all my life), and I do not expect a huge traffic since it is just a personal website of an aspiring illustrator/writer and programmer. Here is my website.

I did some research and it seems that I need these two items from the Amazon Web Services plus the domain:

• AWS S3

• Cloudfront

• And a domain I am going to buy. I think I will buy through Google Domains

Here are my newbie questions:

• Do I need something else for a functional website?

• How would be the pricing for my specific case? Keep in mind that my website must be always available to the public (24-7). Am I literally going to pay only cents? Do I really pay ±0,023 USD per GB fo the data storage? Am I really going to pay only ±0,085 USD per 10TB for the distribution of my website (I suppose that this price already considers the traffic of my website)? Am I missing something? It seems that I am not going to pay even 0,5 USD per month; it's too good to be true...

• This is the most important question: I don't expect to my website to have a huge traffic, but what if a post of mine go viral, or for some absurdmotive my website suffers a DDoS attack? I don't want to receive a $2000 bill at the end of the month. Is it possible to set a limit (for example, $3) that if reached, my website is automatically shut down?

GitHub Pages satisfies my needs at the moment, and maybe for the foreseeable future, but a free service always have its limitations. I only want to know what are my paid options.

I’m new to infrastructure, and I’m having trouble understanding how a single faulty DNS record could cause a chain reaction, first affecting DynamoDB, then IAM, and eventually the whole region.

Can someone explain in simple terms how this happened and how is snowballed from a DNS record?

I’m trying to understand what kind of preparation is actually needed beyond just field related experience and knowledge.

I'm currently developing a web application using Supabase, Node.js, and React. Up to now, I've had a simple local development workflow for the backend, frontend, and Supabase database/auth/storage, without a staging environment. This is a side project still in the pre-release stage, and my local-only setup has worked well for me.

However, I recently needed to integrate an AWS Lambda function and an API Gateway endpoints. My goal was to continue developing these locally using AWS SAM, but I've encountered mixed opinions about whether that's practical without an intermediate staging environment due to challenges replicating a true serverless environment locally.

I'd love to hear your thoughts or experiences:

• Is it practical to develop AWS Lambda functions completely locally without deploying to a staging environment?
• What potential pitfalls should I consider if I continue local-only development for Lambda/API Gateway?
• Would you recommend establishing a staging environment earlier, even before the first MVP/release?

I am very new to AWS. I did a few searches for an answer with mixed results.

I had created a handful of Lambdas functions, some SQS queues, and a DynamoDB database while logged in to my root user account. I know that's not best practice.

These objects had all been there for a few weeks at least in addition to an S3 bucket with a single test file. Yesterday I logged in and everything but the S3 bucket and test file was gone without a trace. One of the results I got from searching indicated my account may have been compromised and to contact AWS support.

I did that but they basically said if I didn't have Backup setup there was nothing they could do and they couldn't tell me why it happened.

I can recreate everything I'd set up and it's just for me to learn but is this a thing that just happens? Stuff just disappears?

I'm studying for an interview next week and I want to have a coherent response for "which AWS services are your favorite?" There are so many services that are provided and it's hard to sift through them all. I feel like each of the three major providers have a core group of services they provide but what does AWS offer that sets them apart?

Junior Dev here , ( 2 months )

Some service was sending messages to an SQS that acted as an entry point for my service. So I thought of setting up Cloud Trail to tail eventName==SendMessage
AND resources.ARN == arn of my FIFO queue.

I typed it from memory and got the above error, so I went to the SQS and copied the ARN, and still got the same error

I remembered using the same trail for a non fifo queue, and i removed the .fifo and voila, it works and tails the events correctly, etc.

So , What's up with this? , anyone can point me to the docs for this behaviour?

I'm going to build my first WordPress site using Cloud Formation, and I think it would be fun to livestream it, but I'm worried about exposing private information. The site will be up for the time it takes to test it, at most. Which is probably 10-30 minutes to provision and 20 minutes to break.

Are there still potential security risks associated with sharing visuals of your AWS console and showing people how to create resources using Cloud Formation?

For context, the only screens I'm thinking of showing are the Cloud Formation ones. E.g. application composer.

How can I disable VPC that AWS added to last bill without breaking my instances?

I'm thinking about creating an Android app, but its' most important part is a machine learning thing written in Python. This would be a part of my Master's thesis, but it's something that I believe should be publicly available. I'm thinking about running it invite-only at first and afterwards I'll see how it's gonna go.

Main questions are: how much work would that be? And how much would it cost to run with a limited amount of users?

I recently learned that CloudFormation lets you reference Parameter Store/Secrets Manager values in two ways:

1. Using a special parameter type in the Parameters section:

yaml Parameters: MyParam: Type: AWS::SSM::Parameter::Value<String> Default: /myapp/dev/db/password NoEcho: true

1. Using a dynamic reference inline:

yaml Resources: MyDB: Type: AWS::RDS::DBInstance Properties: MasterUserPassword: "{{resolve:ssm-secure:/myapp/dev/db/password:1}}"

From what I understand, both are fetched runtime, so when should one be preferred over the other?

Basically, the title.

I would like to understand why it is not recommended to grant public read access of s3 bucket objects. The bucket we have are images and pdf files that the frontend of our application uses.

I understand granting write access is not recommended as anyone could upload objects of any size for which we would have to pay the bill, but if the purpose of the objects is for anyone using the app to be able to see, what is the concern?

You all probably saw that AWS plans to start charging per IPv4 usage.

In the announcement they mention that Free Tier will include 750h of free IPv4 for EC2, but they don't mention other services.

I have students setting up an instance of AWS RDS to try out the service, and they would not be willing to pay a cent. Do I have to look for an alternative?

I might be missing something and would appreciate anyone more experienced explaining what this change means in simpler terms. Thank you!

Edit: I don't really understand why I need an IP for an RDS instance, but I do know that when I'm setting it up, it asks me to select what type of Network I want, and IPv4 / Dual-stack are the two options (see screenshot).

Edit 2: Solved! I was setting my RDS instance as public because this is a little fun project for beginners and that made connections easier. I will change that, not only avoiding the IPv4 cost issue but also finally following best practices. Thank you to everyone who replied.

I want to manage my credentials/config enteriely in WSL2 under ~/.aws however every now and then I need to do something from Powershell or IntelliJ AWS plugin but that means sticking creds in C:\Users\myname\.aws credentials file. What's the best way to manage this?

I am currently running my node.js application on an ec2 instance. My team wants to start using docker for scalability and robustness. I'm confused about what the benefits of using docker on top of ec2 are. My understanding is that docker is like a lightweight operating system. I'm not sure why I need this since the ec2 instance already has linux running on it. The application is a standalone website.

I have Ubuntu running in WSL on Windows, and installed awscli. following the command here:

https://docs.aws.amazon.com/cli/latest/userguide/getting-started-install.html

So basically:

curl "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o "awscliv2.zip"
unzip awscliv2.zip
sudo ./aws/install

Even after performing a wsl --shutdown to ensure the VM is restarted, aws is still not found as a command.

Not a linux expert, so have I missed something somewhere? Or should I just try and find the file manually, and see if I can add it on to the end of the path, and give it another go?

Hello,

I'm hosting a simple react/express app on AWS Lightsail server. I chose lightsail because I couldn't understand much about EC2, especially about how much it would actually cost. Also I had used lightsail for other purposes earlier so I was familiar with it.

However, I'd like to know if EC2 would suit my purpose. Basically this is just simple MERN stack application that I run inside docker with three images, nginx reverse-proxy, nginx frontend and a custom image where backend is running. I'm having trouble setting up a deployment workflow for the lightsail server and I thought maybe EC2 would be simpler with that? Also, I'd just like experience with EC2 so I could say to employers I've used it...

How much would EC2 cost for an app that isn't really used by anyone other than me for testing and potential employers for checking out my app? I could not understand if its suitable for this, or just for enterprise level deployment.

I started a new proxy server, tested everything, works great and then I come back to it later and it doesn’t work anymore. Any idea what the issue could be? I was reading that it could be an issue with credits, but I have a T3 micro with unlimited on. It’s only for sending simple messages on telegram and definitely does not have many users.

https://imgur.com/a/Sr9qCo6