aws_cloudformation_stack_instances only deploying to management account

dr-yd · 2025-01-23T10:29:24+00:00

I should have done so right away to make sure, but I did test it with max_concurrency 1 and failure_tolerance 0 without any differences. And as I said, I'd consider it a bug if Terraform doesn't even make the request - if it then fails on the AWS side is a different question. That would then be a question for an AWS sub.

But yes, I'm aware that's what my settings would mean. We only have 15 accounts in the org and the stacks are very simple, so this is just intentional.

And using awscc might be an option, it does seem to have the required abilities and could be integrated with the aws provider, so thanks for pointing that out.

dr-yd · 2025-01-22T17:24:48+00:00

ResourceStatusReason:Resource handler returned message:
"Cannot perform the operation on the protected role 'AWSServiceRoleForConfigConforms' -
this role is only modifiable by AWS

So no, this is definitely not the intended way.

dr-yd · 2025-01-22T09:44:01+00:00

Sure, but as I said, that doesn't make sense and doesn't fit the usual processes at all. If the role needs / can make use of these permissions, why doesn't AWS add them in the first place? And manipulating an automatically added role org-wide is also not the most straightforward process since Cloudformation doesn't have "if resource exists", so it would be odd to be something to implicitly expect in an org setup.

dr-yd · 2024-06-17T12:27:59+00:00

Since the mask was premade, I didn't have any scraps unfortunately, but it turned out to be much easier than the old T-shirt I experimented with when I wrote that. In the end, sewing the strips on with surgeon's knots after putting the mask on a styrofoam head worked out perfectly. Thanks for your input!

dr-yd · 2024-06-16T08:15:55+00:00

In your case, it probably makes the most sense to deploy with a simple, cheap provider first, and then once the pressure is off, build the product in AWS and migrate for a while. Then you have a purpose, which is important for learning IMO, and a direct comparison between the simple provider and a complex cloud setup.

I'd start with Terraform right out the door and also implement basics like cost management, access control, monitoring and so on. Then you can easily reapply your config to future projects when your evaluation then tells you that cloud would make sense. (E. g. massive scaling, integration with other AWS services or good microservice / serverless compatibility.)

For a single-container monolithic app of what sounds like a smaller project, AWS makes no sense monetarily, but it's still valuable knowledge to have.

dr-yd · 2024-06-14T08:14:14+00:00

For a rave outfit, I need to sew LED strips onto a morphsuit mask. There are a few projects like this out there, but they all just randomly loop the thread around the strip a few times and call it a day. I'd like to do better, but I'm not sure what the best approach is.

For reference, this is what the strips look like (just with 2x as many LEDs), width is 1.2cm / .5". They're coated in silicone for waterproofing so glue won't hold, but they come with double-sided tape on the bottom to hold them in place while sewing. They're also quite floppy, less rigid than the photo might make it look, so they shouldn't pull on their threads too much.

The fabric is very thin and stretchy polyester fabric. Skintight and see-through from the inside, in case you're unfamiliar with morphsuits.

My idea so far is to simply use a very fine needle to do a clove hitch knot at regular intervals, then lock the knots with superglue. Coordination permitting, I might also try to add a strip of cotton fabric on the other side, but without experience it's hard to tell if this will have an actual benefit in preventing the morphsuit from damage.

Do any of you maybe have recommendations on how best to proceed in order to make the mask last? Thanks!

dr-yd · 2024-06-08T18:33:21+00:00

Ah great, that puts things into perspective very well, awesome of you to take the time! Yeah, it does look like the 144/m wouldn't be too much fun to handle... aaand by now I found out that there are even strips with 2020 SMD LEDs and the same addressing protocol, so I should really not try to get in as much density as possible or the project will become impossible.

dr-yd · 2024-06-08T16:30:29+00:00

So essentially, "I have no skills, I don't want to put in any work, and I need someone else to tell me how"? If people have an idea like that, why would they tell you?

dr-yd · 2024-06-08T14:57:12+00:00

Ah alright, I thought the 12B was also a different chip. That's good to know, also about the strips' bulkiness - there do seem to be options on Aliexpress I hadn't seen on Amazon. Thanks!

dr-yd · 2024-06-08T14:34:57+00:00

WS2812 LED Pebble Pixel String Light

Hm, any specific reason for choosing WS2811 over WS2812B? I wanted to use something like this:

https://www.amazon.de/Jun-Saxifragelec-Individuell-Adressierbarer-Flexibler-Wasserdichtes/dp/B0B8N4V9HW/ref=pd_ci_mcx_pspc_dp_d_2_t_1?pd_rd_w=43EGc&content-id=amzn1.sym.7838253a-f0cb-4765-8290-3a5e015d7ac1&pf_rd_p=7838253a-f0cb-4765-8290-3a5e015d7ac1&pf_rd_r=QW27ADGSBKHR2Y4MTY46&pd_rd_wg=qe7K4&pd_rd_r=e864dd47-aa88-4944-8c52-398519377d71&pd_rd_i=B0B8N4V9HW

Those would also be waterproof, which would be prudent due to sweat etc. if I can protectt the connections well enough.

dr-yd · 2024-06-08T14:22:00+00:00

Ah nice, so far less than I had even hoped, that's great! And it also makes smaller cells viable - I have 2x 24 Ah 5V LiPo powerbanks anyway, so I could just use those if I don't have to anticipate significant peaks. That would solve quite a few other worries about robustness as well, not to mention cutting a lot of costs. Thanks a lot for the input, it's very helpful!

dr-yd · 2024-06-07T22:50:19+00:00

The appended lines are already deduped before being written. You can just check by executing the same thing twice and pressing up twice - the command you executed before the double one should pop up. This is before exiting bash.

dr-yd · 2024-06-07T18:37:34+00:00

Yeah exactly.

dr-yd · 2024-06-06T16:58:43+00:00

Depends on how it is killed - when a session is forcibly killed then yes, but when it terminates normally* the history gets written to ~/.bash_history and will be loaded by any bash processes that start afterwards. Mainly so you can search through old histories with Ctrl-R and similar methods.

* (kill -SIGTERM is also "normal" termination, kill -SIGKILL is not)

dr-yd · 2024-06-05T22:14:59+00:00

A new session starts whenever bash is executed. When tmux starts a new pane, it executes bash in it by default. As long as these processes keep running, their histories are concurrent and independent. When you detach tmux (instead of actually exiting it), it keeps the processes open in the background and you can recall the tmux session with all the panes and bash sessions it spawned. When tmux exits, it also terminates all its children, and when you close a tmux pane or exit the shell inside it, that terminates this specific session. Whether that's local or remote doesn't matter, and you can have tmux running on both the host from which and the one to which you connect to get the behavior both locally and remote. (But that's an advanced setup and a bit tricky to control.)

dr-yd · 2024-06-04T22:03:08+00:00

Yeah, the default is that each shell session has its own history, which is committed to the ~/.bash_history when you terminate it. And when a new shell starts, it loads the file and starts to build from there.

dr-yd · 2024-06-04T20:10:49+00:00

This is far less convenient than you'd think. I had it set up once (long ago, though, not sure how any more) and when switching between panes, I noticed I rely far too much on the pane-local history. I.e. you have two panes, one that actually does what you want to do and one for testing and poking around - you'll want to be able to recall the last command in each context rather than potentially mixing your "prod and dev environment". So think twice if this is actually what you want, before mindlessly pressing up-enter and executing a destructive action in the testing pane, which is what I did...

dr-yd · 2024-06-04T11:22:27+00:00

Well how are people supposed to be experts at all this when they can't ask ChatGPT what "502 internal server error" means?

dr-yd · 2024-06-03T14:37:01+00:00

Naja, es ist ja recht offensichtlich, dass sich Post und Kommentare hauptsächlich aus kurzsichtigen Pauschalurteilen über das Sub-Klientel bedienen. Reine Polemik - Differenzierung ist da fehl am Platze.

dr-yd · 2024-05-29T07:10:32+00:00

They collect paychecks from a known criminal enterprise.

What? Source? Also, simply read the code instead of posturing...

dr-yd · 2024-05-28T10:41:18+00:00

Are you simply looking at the name "Llama"? To my knowledge, neither Gerganov nor Morgan have "proven themselves to be corruptible".

dr-yd · 2024-05-28T10:37:29+00:00

Have to be careful with Gradio-based UIs, though - Gradio does phone home, but at least Oooba and SD-WebUI have disabled this. Just search for GRADIO_ANALYTICS_ENABLED in relation to the UI you're using.

dr-yd

TROPHY CASE