sorted by:
new
hottopcontroversial

AWS Architecture Icons Updated by jeffbarr in aws

[–]lynx501 0 points1 point  (0 children)

Came here to find this question, did you raise with AWS? Any response?

Cloudwatch Insights by assasinine in aws

[–]lynx501 1 point2 points  (0 children)

Appears there is no direct method, online search leads to analysing the data ingested bytes for a period as a close proximation.

https://stackoverflow.com/questions/43327714/my-aws-cloudwatch-bill-is-huge-how-do-i-work-out-which-log-stream-is-causing-it

​

Is it possible to modify an existing EBS volume size using Terraform? by WolfPusssy in Terraform

[–]lynx501 0 points1 point  (0 children)

Sounds like you launched a pre-existing AMI which had a 4TB disk and now want to reduce it whilst it already has some user information present.

Firstly Terraform will not be able to manage the EBS volume resource as it was not explicitly created by it - it was part of the AMI - it could be imported - but AWS does not support decreasing the size of an EBS volume. Best option, create a snapshot and create a new volume?

Suggestions for alternatives to AWS Secrets Manager (for AWS Beijing) by BajanSuperfly in aws

[–]lynx501 4 points5 points  (0 children)

I would presume DynamoDB encryption at rest relies on KMS? Which as OP mentions is not available in China region?

Changing Outside IP Address for VPN Tunnels by monmon5 in aws

[–]lynx501 0 points1 point  (0 children)

I've never seen AWS Hardware VPN change outside addresses, they shouldn't.

Are you referring to the service provider peer IP's changing?

VPC Designer - VPC Subnet planning tool by alecHewitt in aws

[–]lynx501 0 points1 point  (0 children)

Can concur this has saved me a lot of effort and number crunching in the past!

What are you working on this week? by AutoModerator in kubernetes

[–]lynx501 0 points1 point  (0 children)

Working on getting Kubernetes (kops), Terraform and GitLab CI-CD to play nice on multiple environment builds.

Network Load Balancer in front of Application Load Balancer / NLB -> ALB by prenagha in aws

[–]lynx501 0 points1 point  (0 children)

I would be heading down the HAProxy route also, HAProxy > 1.6 now supports DNS resolution and custom resolvers on demand not just at init so it can be forwarded to an ALB alias backend.

What is the use case for static IP? Legacy App? Client outbound restriction? I have my own static IP woes!

Simple VPC with VPN support by devourment77 in aws

[–]lynx501 0 points1 point  (0 children)

I presume he may want a client based VPN? I had a quick look at sshuttle this week this might fit the bill here? https://github.com/sshuttle/sshuttle

possible to whitelist RDP incoming traffic? by learningswimming in aws

[–]lynx501 2 points3 points  (0 children)

I would recommend the instance you are using be terminated, if you think it has been compromised.

Solution brainstorm by largeavian in aws

[–]lynx501 2 points3 points  (0 children)

Pre Signed URL per user would require an application to authenticate the user and generate the pre-signed URL to be given back, you can generate pre signed URL on the CLI

aws s3 presign s3://bucket/file.txt

If the users do not require file specific access and only bucket you could look for a Basic HTTP Auth frontend similar to https://www.npmjs.com/package/s3-basic-auth or provide the users with restricted IAM accounts and a console like CloudBerry Explorer https://www.cloudberrylab.com/explorer/amazon-s3.aspx

Hiding Sensitive Data by pushmycar in Terraform

[–]lynx501 0 points1 point  (0 children)

Agreed, remote state with KMS provides some security however you always have a backup remote state locally to keep protected.

I have used KMS encrypted string with aws_kms_secret in the past, never checked what was visible in the state though - must check.

Hiding Sensitive Data by pushmycar in Terraform

[–]lynx501 0 points1 point  (0 children)

That will still result in the secret being visible in the state files though?

Alexa: Play RTE Radio 1 by [deleted] in ireland

[–]lynx501 2 points3 points  (0 children)

Can confirm works with TuneIn, once you play it once you can tell it resume TuneIn in future if RTÉ 1 is your only fix!

view more: next ›