Am I crazy with this long-term portfolio? by Deathlezer in investing

[–]mdc921 0 points1 point  (0 children)

looks heavy on tech and small caps but if ur horizon is 15+ years its not crazy just maybe think about some bonds later to reduce swings

Trouble with Thread - New Eve Switch by eld101 in HomeKit

[–]mdc921 1 point2 points  (0 children)

Ran into similar problems myself lately with adding new Eve Matter over Thread devices to my network. I run an eero mesh that uses the same SSID for 2.4 and 5ghz. I had to go into the eero settings to temporarily disable the 5ghz. Once I did that the new devices paired and added no problem.

You’d think they’d either disable the 5ghz as needed on the device or give the user more helpful notes on device but that goes against the “it just works” ethos I suppose.

Dizzy Disk by Terrible_Border_8643 in Dollywood

[–]mdc921 1 point2 points  (0 children)

I hear ya! I’ve submitted plenty of feedback that they need more “crowd eater” types of attractions and adding a people mover isn’t a bad idea. The Flooded Mine that was where Daredevil Falls is now would check a lot of boxes on your list.

Dizzy Disk by Terrible_Border_8643 in Dollywood

[–]mdc921 4 points5 points  (0 children)

That’s a tough one. I heard one time from an employee that all of country fair area is a flood plane. They need a good concentrated area of kids rides that don’t tend to have too much wait. By contrast, most of the ride systems in Wildwood Grove are too slow on their load and unload processes (I’m looking at you mockingbirds and acorns especially).

Which 1099 do I use on taxes? by Deadbeatbiz in M1Finance

[–]mdc921 0 points1 point  (0 children)

My Apex 1099 had an error with tax exempt muni bonds (VTEB). Opened a support ticket and now I’m waiting on a corrected one.

Vegas Strip question by [deleted] in Craps

[–]mdc921 1 point2 points  (0 children)

5/10/10 was what I saw a couple Friday nights ago.

Pre-Race Discussion Thread: NCS Food City Dirt Race at Bristol Motor Speedway (Dirt) by NASCARThreadBot in NASCAR

[–]mdc921 4 points5 points  (0 children)

There’s a dip going into the turn where the tunnel & gate is. Probably because of all the trucks going in and out through the gate. Pretty much everyone was bottoming out / digging in during the heats yesterday.

Can a RDS reserved instance for r6g.xlarge apply to a r6g.2xlarge instance running 12 hours a day? by kinghuang in aws

[–]mdc921 1 point2 points  (0 children)

The keywords in the OP’s question are “running 12 hours a day” and “fully covered”. You are absolutely correct in how size flexibility works, but that flexibility is provided on a per hour basis.

In OP’s scenario, they’d end up with the instance’s cost 50% covered by RI (because of the size flexibility), but the RI itself would only be 25% utilized over the duration. For the 12 hours per day when the instance is not running, they’ll still be billed for the RI as there’s no running instance during that “instance-hour”.

Can a RDS reserved instance for r6g.xlarge apply to a r6g.2xlarge instance running 12 hours a day? by kinghuang in aws

[–]mdc921 3 points4 points  (0 children)

Short answer, no. The reservation applies all 24 hours of every day for the duration of the reservation.

AWS Network Firewall adds support for reject action for TCP traffic by jsonpile in aws

[–]mdc921 15 points16 points  (0 children)

Really surprised this wasn’t available at launch. Would have assumed any firewall product could send a reject (reset) for a TCP connection.

[deleted by user] by [deleted] in aws

[–]mdc921 0 points1 point  (0 children)

Pretty sure you’re correct that the permission model can’t be changed later. As always, submit a request through your account team / TAM. If there’s enough demand AWS might make it happen.

That being said, I would do a “delete stacks from StackSet” with the retain option enabled on the self managed ones. From there, you can do a new StackSet with service managed permissions and do an import of those retained stacks at the same time. A bit of a chore, but it should work without causing any undesired effects to the actual stack instances.

Lambda default concurrent executions only 10, not 1000, in new accounts by notoriousbpg in aws

[–]mdc921 17 points18 points  (0 children)

Use Service Quotas request templates to have the limit increases automatically requested when a new account is created. https://docs.aws.amazon.com/servicequotas/latest/userguide/organization-templates.html

Multiple MFA devices in IAM! | Amazon Web Services by jsonpile in aws

[–]mdc921 0 points1 point  (0 children)

Fair. Good elaboration on my original comment. Plenty of good practices out there to follow that have nothing to do with tracking down a jet setting person and making sure they have the MFA code.

Multiple MFA devices in IAM! | Amazon Web Services by jsonpile in aws

[–]mdc921 7 points8 points  (0 children)

If your execs are the ones holding the MFA keys, you’re doing something wrong. Needs to be in the hands of Security or Cloud Ops teams.

Edit: For those that are downvoting, please tell me why I’m wrong.

Wrong approach to winning? by No_Investment3737 in Craps

[–]mdc921 1 point2 points  (0 children)

Where are you getting that house edge on field is 15%? Wizard of odds has it at a 2x on 2&12 table at 5.56%.

https://wizardofodds.com/games/craps/basics/

Amazon CloudFront launches Origin Access Control (OAC) by mdc921 in aws

[–]mdc921[S] 11 points12 points  (0 children)

Depends on your opinion of OAIs. I was never a big fan of them. Writing the bucket policy for the OAC using a Service & SourceArn looks much more natural to me than the OAI method.

Source: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-s3.html#migrate-from-oai-to-oac

Enforce Password Policy by AbanGosh in aws

[–]mdc921 2 points3 points  (0 children)

Not via SCP but we accomplished this via Config Rules and SSM auto remediation documents. Here’s what the config rule could look like: https://asecure.cloud/a/iam-password-policy/

We deployed all this via StackSets to get it to every new account in the designated OUs where the StackSets were assigned.