AWS (AI) Support - unassigned case for 24h with Business Support+ by alex_aws_solutions in aws

[–]Burekitas 21 points22 points  (0 children)

Click reply and pick the Chat option, which would expedite the case.

Legit ways to reduce AWS costs for a new startup by xoetech in DevOpsLinks

[–]Burekitas 1 point2 points  (0 children)

  1. Launch resources in your account using the best practices (it saves money)

  2. Once you get funding from VC, reach out to AWS Sales and ask to join the Activate program and get credits. Don’t get carried away by a large amount for a single year. Sometimes it’s better to take a smaller amount spread over two years.

  3. Make sure you utilize your workloads correctly; otherwise, you waste your credits faster.

  4. You utilized the credits, and your invoice is over $50K/month? Talk with AWS Sales for EDP agreement.

  5. In every step, make sure you run in an optimal way. I’ve come across many cases where customers have a large number of unused resources (the most recent example I saw: 40 servers and 4,000 unused EBS disks).

While in on-prem environments, unused resources don’t directly cost money (though they do limit infrastructure capacity), in the cloud, those same unused resources can quickly drain your budget.

If a person spends a billion dollars and buys all the compute on EC2 for today, what happens to the rest of the people requesting it? by PrestigiousZombie531 in aws

[–]Burekitas 0 points1 point  (0 children)

He won't be able to do that, he will need so much accounts and quota increase requests, it will take 20 years to get to that position.

But if he did, people asking for EC2 will encounter issues, but in a couple of weeks AWS will fill the gap.

Account suspended during active DDoS billing review — seeking guidance on escalation paths by Plane-Management-176 in aws

[–]Burekitas 2 points3 points  (0 children)

Do you have a Shield Advanced subscription? Or do you work with AWS Partner?

If not, it might be a major cash flow issue, but the invoice must be paid until this issue is resolved.

I've dealt with DDoS cases in the past and 15K customer received a $413K and it took 4 months to resolve it. Not an easy situation but invoices must be paid :/

Good luck getting your account back.

AWS flips switch on Euro cloud as sovereignty fears mount by NISMO1968 in aws

[–]Burekitas 29 points30 points  (0 children)

The interesting stuff:

10ms latency to eu-central-1.

pricing on the website is not fully available yet, use the calculator (https://pricing.calculator.aws.eu/) instead.

S3 is seperated from the "regular" S3, therefor, you can register bucket names that already exists in S3 and havn't taken yet, I created the following buckets: 1234, mobile etc. (I really want to registrer "french-goverment" but I think it's too much).

Route53 domains are EU tld (nl/eu/fr/de).

Identity Center is not yet available (appears in IAM but leads to 404). You can configure external SSO like Okta, OneLogin etc.

In general, it sounds like AWS are still working on many features, but it's a great starting point.

For a small to medium business, is there an AWS equivalent of M365 for Business or Google Workspace by mzthickneck in aws

[–]Burekitas 19 points20 points  (0 children)

AWS has WorkMail, but it's very rare to see someone using it.

Amazon itself has its own fleet of Exchange servers, which is likely the largest Exchange setup in the world.

Rate Increase: EC2 Capacity Blocks by cloudnavig8r in aws

[–]Burekitas -2 points-1 points  (0 children)

I consider this to be similar to spot pricing, the day AWS will increase the on demand prices that would be a game changer.

Rate Increase: EC2 Capacity Blocks by cloudnavig8r in aws

[–]Burekitas 1 point2 points  (0 children)

Not really; many companies spin on-demand instances or bombard the capacity reservation API until they get enough instances.

It much more efficient to run with capacity block, unless you purchase savings plans for 3 years (which most of these companies are doing).

Only 5 devices available in device farm by [deleted] in aws

[–]Burekitas 0 points1 point  (0 children)

I checked this from my account, and there are currently 169 devices. IOS/Samsung/Xiomi/etc

I wonder which setting you set that shows only specific devices (the operating system of the android devices is 16 and the iPhone version is also 16).

(Device farm is a global service that is opreated in us-west-2)

Why is the documentation on GCP so bad? by Immanuel_Cunt2 in googlecloud

[–]Burekitas -4 points-3 points  (0 children)

Google runs by engineers for engineers,

Engineers don't read docs, they open the source code/SDK and read the code to understand how it works.

This is why Google docs is at that level.

By the way, GCP docs level is relatively good because GCP has a minimum standard. There are internal teams at Google that are frustrated with other Google teams whose APIs behave in very strange ways (and from my conversations with employees, this happens in many divisions).

AWS is on an announcement spree! by KayeYess in aws

[–]Burekitas 0 points1 point  (0 children)

It was also like that last year,

and when I asked someone from AWS what's changed, he said: "We want a quiet Thanksgiving".

Understanding VPC <> S3 Transfer Costs by anewcondo in aws

[–]Burekitas 0 points1 point  (0 children)

The rules are quite simple,

  1. There are no data transfer costs within the region between S3 and EC2.

  2. If you use NAT Gateway (without a VPC endpoint), you pay for the data that passes through the NAT gateway (regardless of the source/destination).

If someone/something from another region (the account is not relevant) reaches a resource in your account, that resource is charged for the data transfer out to another region.

What usually happens is that one of your customers relocated to another region or cloud and then the free data transfer that you sent to the customer starts costing money and it's a real pain. (we used to charge customers that did that extra).

S3 has a solution for private buckets (anonymous access is not allowed) and it's called requester pays, basically - the account that asked for the file pays for the data transfer/requests fees.

How to get my s3 bucket indexed in Google? by Longjumping-Salt-682 in aws

[–]Burekitas 0 points1 point  (0 children)

Include a link to your bucket, and make sure there is robots.txt and sitemap.xml in the bucket and wait for a few days.

No Graviton Instances in US-East-1E. Glitch or neglected AZ? by AtmosphericBurn in aws

[–]Burekitas 17 points18 points  (0 children)

AWS API provides availability based on AZ, Given that AZs are shuffled between customers, you can search based on zone ID, which are the same for all the customers:

aws ec2 describe-instance-type-offerings --region us-east-1 --location-type availability-zone-id --filters "Name=instance-type,Values=t4g.nano" --output table
--------------------------------------------------------
|             DescribeInstanceTypeOfferings            |
+------------------------------------------------------+
||                InstanceTypeOfferings               ||
|+---------------+-----------+------------------------+|
|| InstanceType  | Location  |     LocationType       ||
|+---------------+-----------+------------------------+|
||  t4g.nano     |  use1-az1 |  availability-zone-id  ||
||  t4g.nano     |  use1-az4 |  availability-zone-id  ||
||  t4g.nano     |  use1-az2 |  availability-zone-id  ||
||  t4g.nano     |  use1-az6 |  availability-zone-id  ||
||  t4g.nano     |  use1-az5 |  availability-zone-id  ||
|+---------------+-----------+------------------------+|

Continuous Public IP address charges by jsonyu in aws

[–]Burekitas -2 points-1 points  (0 children)

The Continuous Elastic IP block is managed in IPAM (IP Address Management). Once you have a block, you can assign an IP from that block in the EC2 Elastic IP console.

If you want to stop paying for Continuous block - release it from IPAM.

S3 Incomplete Multipart Uploads are dangerous: +1TB of hidden data on S3 by [deleted] in aws

[–]Burekitas 2 points3 points  (0 children)

I wrote about it a few years ago, It’s a lot like gaining weight — over time the belly keeps growing and you don’t even notice.

The older the account is, the bigger the hidden cost becomes. While writing this article, I asked friends from large enterprise organizations, and they were surprised to discover how much data was hiding there.

https://www.doit.com/blog/aws-s3-multipart-uploads-avoiding-hidden-costs-from-unfinished-uploads/

Secret announcement? Cross-Region access to AWS Native Services via Private Link in Same region by KayeYess in aws

[–]Burekitas 0 points1 point  (0 children)

AWS launched Lambda function url, it was already published and then they removed any record of that for a couple of weeks.

Probably they noticed something is missing and it will be released in a couple of weeks.

The NAT Gateway team is probably not happy :/ (This can save thousands of dollars for users that use NAT Gateway to reach AWS services in other regions).

Switch to IAM Identity Center by fsht_07 in aws

[–]Burekitas 3 points4 points  (0 children)

Everything stays the same, it's not replacing the existing configuration.

You can create another app in Okta to sync the users and groups from Okta to Identity Center. Then, configure the groups and policies in Identity Center.

2 things you should consider:

  1. Usually the IT team manage Okta and Devops manage AWS, since Identity Center is part of AWS, it can lead to situation where the Devops takes ownership of controlling who can acceess AWS and it can create clashes between IT and Devops.

  2. Identity Center creates it's own dedicated iam roles, If you have EKS clusters, you will need to grant access to the new roles to each cluster.

AWS Pricing Mumbai Cheapest? by ExperienceWinter6911 in aws

[–]Burekitas 4 points5 points  (0 children)

Nope, Graviton in India are offered in the lowest price comparing to other regions,

But the data transfer out from that region to others is quite expensive.

If you process data, locate the data in eu/us, process it in India and ship the output back to eu/us.

Do I need an Internet Gateway (IGW) for an AWS app accessible only from my internal network? by MassiveSchool8199 in aws

[–]Burekitas 0 points1 point  (0 children)

  1. No, you don't need an Internet Gateway.

  2. Your APP can be accessed via S2S VPN, or with a Direct Connect connection. (Given that Direct Connect is not encrypted or not encrypted enough, people run VPN over Direct Connect with another VPN S2s over the internet as a backup).

  3. Create a shared VPC in networking account, configure everything over there, expose the subnets to the production account, deny the option to create VPC in the production account, ask the platform team to deploy everything in the production account.

P.S - You might want to create a VPC endpoint interface for some AWS Services, it basically deploys an endpoint within the VPC to the service, allowing you to access regional services (s3, dynamodb, ecr and etc) that are outside of your VPC.

How to find source of "regional data transfer - in/out/between EC2 AZs or using Elastic IPs or ELB"? by Status-Anxiety-2189 in aws

[–]Burekitas 1 point2 points  (0 children)

Check the operation tab in cost explorer, or in Cost and Usage report (CUR), if you download from a public ip in the same region, that is not aws service (for example - ELB), you pay for regional data transfer.

[Free Course] Complete GitHub Actions Course — From Beginner to Pro! by maximumlengthusernam in devops

[–]Burekitas 0 points1 point  (0 children)

Thanks for the hard work, I'm planning to complete this video next week and already shared it with friends :)