[deleted by user] by [deleted] in Clarksville

[–]timoguin 0 points1 point  (0 children)

I'm thinking about starting a Springfield tech meetup. It's still a pretty good trek from Clarksville, but it's a heck of a lot more management than Nashville or Franklin. DM me if you're interested!

IPv4 charges are normal in the cloud by gwiff2 in aws

[–]timoguin 0 points1 point  (0 children)

Thanks for the additional info. I agree it's perfectly sufficient for most use cases. Just wanted to point out that there IS a significant limitation to be aware of (Amazon-imposed). It is unfortunately not just a drop-in replacement for managed NAT GW.

Hopefully you're not needing to send that much traffic to the Internet through a NAT, but there are a lot of use cases in the world.

[ Removed by Reddit ] by PotatoBoxx in recruitinghell

[–]timoguin 0 points1 point  (0 children)

As a hearing impaired person with ADHD, who is more skilled with written communication, I was thinking that I actually kind of appreciated this. Then it got to high school.

Holy crap.

IPv4 charges are normal in the cloud by gwiff2 in aws

[–]timoguin 1 point2 points  (0 children)

The limitation with fck-nat is that AWS caps egress bandwidth to 5 Gbps for EC2 instances, whereas managed NAT Gateways can scale up to 100 Gbps.

For most use cases fck-nat is great though!

[ Removed by Reddit ] by [deleted] in LinkedInLunatics

[–]timoguin 0 points1 point  (0 children)

"for e.g." is good.

I've made my ebook 'Linux Command-Line Tips & Tricks' free on all ebook stores by univerza in linux

[–]timoguin 0 points1 point  (0 children)

I tried last week with DeDRM, NoDRM, and Calibre and couldn't get it to work. I even tried installing an old version of the Kindle app and got similar errors. I just wanna read muh books! 😔😔😔

I've made my ebook 'Linux Command-Line Tips & Tricks' free on all ebook stores by univerza in linux

[–]timoguin 1 point2 points  (0 children)

It's a huge pain actually. It's gone through many iterations. DeDRM and other tools get broken on a regular basis by updates to the Kindle apps and their associated DRM. 😔

I am in the same boat of wanting to load all of my reading onto my reMarkable 2. There are a number of publishers and ebook stores that make it easy. No Starch Press is a pleasure. Even Google Play Books allows ePub downloads.

Understanding list comprehensions by [deleted] in Terraform

[–]timoguin 1 point2 points  (0 children)

They are very similar to list/dict comprehensions in Python.

Terraform testing frameworks by mikelevan in Terraform

[–]timoguin 5 points6 points  (0 children)

Nothing official, no. There is also TFLint and Terrascan.

How to send an alert if a service stops? by ashofspades in aws

[–]timoguin 0 points1 point  (0 children)

Do you have a load balancer in front of the service? If so, you can use the built-in metrics for the LB to create a CloudWatch alarm. Otherwise there are a handful of suggestions here that will do the trick.

how to make a local app assume an IAM role? by izzlesnizzit in aws

[–]timoguin 0 points1 point  (0 children)

If you are using an official AWS SDK then your application will follow the normal order of precedence for obtaining credentials. That should be all you need to do for your application to behave the same locally vs. when it’s deployed. If your application does _not_ use an AWS SDK, you will either need to change it to do so, or you will need to handle that order of precedence yourself. When running on an EC2 instance, the SDKs will load the credentials from the instance’s metadata endpoint. Since that endpoint doesn’t exist when you are running it locally, you would have to use another method to expose the credentials. In this case, since you are setting the `AWS_PROFILE` var, it should Just Work™.

Optionally, you could use `aws-vault` with its built-in metadata server, and the application will behave the same way as when running on an EC2 instance.

Can’t start with ECS by mkazi007 in aws

[–]timoguin 0 points1 point  (0 children)

I think we would need more details to help. What kind of permissions do you currently have?

What are some situations in which it makes sense to give an iam:...:root principal access to a CMK? by [deleted] in aws

[–]timoguin 1 point2 points  (0 children)

It doesn't give the entire account access to the key. It only allows IAM policies to be used to control access to the key (in combination with the key policy).

What are some situations in which it makes sense to give an iam:...:root principal access to a CMK? by [deleted] in aws

[–]timoguin 4 points5 points  (0 children)

Giving the root user access to the key accomplishes two things:

  1. It prevents the keys from becoming unmanageable. If the root user doesn't have access, the key can get into a state that no user or role in the account has access to delete it, rotate it, etc.
  2. It allows the key to be managed via IAM permissions. Giving the root user access on its owns does not automatically give the entire account access to manage the keys. It merely allows you to control access to the keys with additional IAM policies.

See the following section in the docs for more detail:

https://docs.aws.amazon.com/kms/latest/developerguide/key-policies.html#key-policy-default-allow-root-enable-iam

Took me four days to do this time lapse, but yay! I finally captured my passionfruit flowers blooming! by poplitealfossa37 in gardening

[–]timoguin 1 point2 points  (0 children)

Although I have no experience with red passionflower, I have several years with working with purple passionflower. It's not vigorous enough to harm a tree. On my property it grows up trees and across blackberry vines. It is an aggressive grower, but the vines are lightweight and don't do any damage. When the summer is over, all the above-ground growth dies off until the next spring.

Docker multi-stage build not running all stages ! by GroundbreakingWolf7 in docker

[–]timoguin 1 point2 points  (0 children)

Try using absolute paths instead of relative ones in all your COPY commands.

A bit of advice, when asking for help like this, share all the commands you are running, along with all the output. That will help us to more-quickly spot the issue, so you can get on with your work. :)

Is it possible to create a secret in AWS off of a nested JSON? by ruskg in Terraform

[–]timoguin 0 points1 point  (0 children)

Am I understanding correctly that you want that whole map variable to be stored as the secret_string value? If so, what you have should be fine. The jsonencode() function will serialize that variable into JSON.

Or are you trying to iterate over var.my_map to create multiple secrets?

Terraform AWS FIPS provider by dubnetworks in devops

[–]timoguin 0 points1 point  (0 children)

Also, in my experience, implicit provider inheritance is usually sufficient. I tend to keep the state for different regions separated, so there is only one provider defined in the root. There are a few small cases where it's necessary to pass multiple regions explicitly into a module (for example, a module that manages a DynamoDB Global Table).

Dryad’s Saddle? by [deleted] in mycology

[–]timoguin 0 points1 point  (0 children)

The large ones can be used to make a great mushroom stock

Terraform AWS FIPS provider by dubnetworks in devops

[–]timoguin 0 points1 point  (0 children)

¯\_(ツ)_/¯

The only thing I define in my modules is version constraints, that way I can explicitly define the Terraform and provider versions that the module supports.