Questions tagged [aws-ec2]

86 questions
0
votes
0 answers

Can you specify the SSM parameter store as a target in an AWS Security Group egress rule?

I would like to tightly restrict outbound network level access from groups of EC2 instances. For these instances, I need to allow access to the Parameter Store. I also need to allow access to S3. For S3, AWS provides a Prefix List and I can use…
0
votes
1 answer

Can't connect from AWS EC2 instance to AWS SES endpoint

Disclaimer: my AWS networking skills are basic. I have an EC2 Windows server instance in a private subnet. I connect via a VPN. FOR TESTING I put it in a Security Group that allows all IPV4 TCP traffic. I turned off Windows Defender Firewall. I…
0
votes
1 answer

OpenVPN on AWS (works in NAT mode but doesn't work in Routing mode)

I have a brand new VPC (10.0.0.0/16) with 3 public subnets (pointing to an IGW) and 3 private subnets (with a NAT GW in each). I have deployed an OpenVPN appliance in the public subnet and configured it to use NAT mode (Yes, using NAT in the routing…
mreferre
  • 456
  • 2
  • 6
0
votes
0 answers

EC2 instance crashing when retrieving many files from S3

I have a very annoying problem with my EC2 instance. I have a ubuntu EC2 instance and in a Python Notebook cell I do a loop for retrieving many files from s3 (actually not that very much, around 300 files) and sometime when I run this loop, after a…
WLD
  • 1
0
votes
0 answers

Calling API from Https website to AWS

I have a website with https consider https://example.com which wants to call an API from an AWS EC2 instance consider http://ec2.##.##.##/get-users. I am getting Connection Refused when I do so but in POSTMAN it is working fine. Is this an issue…
0
votes
0 answers

aws t3.small nginx gzip response time is slow?

I am having php web application on t3.small ec2 instance. webserver : nginx gzip on; gzip_vary on; gzip_min_length 10240; gzip_proxied expired no-cache no-store private auth; gzip_disable "MSIE [1-6]\."; gzip_comp_level 6; …
Hitesh
  • 1
  • 1
0
votes
1 answer

AWS storage slow simultaneous reads

We are finding that using AWS file storage (EFS or EBS using GP2 or GP3) from an EC2 instance is very slow when doing simultaneous reads. Here's an example: I'm reading 30 binary files into memory, totaling 46 MB. Doing this once takes about 16 ms. …
JoeMjr2
  • 101
  • 3
0
votes
0 answers

IAM user cannot see EC2 resources?

given the following role, why can my test IAM user not see any EC2 instances? When I login with the test user and go to EC2 I just see "You are not authorized to perform this operation". As you can see, I built this through the GUI editor. What am I…
THE JOATMON
  • 275
  • 10
  • 31
0
votes
1 answer

AWS CLI : How to use "--query" to get output from nested JSON

I am using aws-cli v2 to get the --query output from AWS Describe-volumes. In this, I am trying to get the volume id, size, Instance ID, state. Instance ID is nested in the AWS Describe-volumes. Source : { "Volumes": [ { …
0
votes
0 answers

EC2 instance connect - impersonating anyone on the server by default

I am looking at ec2 instance connect and it seems it just allows you to impersonate any user that exists on host. How is that useful or secure? In what scenario would I want to allow this functionality? i am testing it with IAM role that has all…
Sergei
  • 1,226
  • 16
  • 25
0
votes
1 answer

How do I configure AWS EC2 instances to selectively bypass default DNS resolver in all regions?

I have a network of AWS EC2 instances. Most of them are using the default VPC's DNS resolver to prevent exfiltration and to resolve internal domains (using a custom TLD). That all works fine. However, there is one (Ubuntu) instance that needs to use…
0
votes
0 answers

SCP to an EC2 instance is failing but SSH works

I'm trying to scp a jar file to an EC2 instance that hosts a service I'm working on. I'm able to ssh into that EC2 instance without issue. When I attempt to scp the file with the following command: scp -vvv foo.jar instance-id:/tmp/ I'm prompted…
mbakhiet
  • 1
  • 1
0
votes
0 answers

403 error coming after creating AMI on original UNIX instance

I was creating an image of my EC2 instance and after starting the process of image creation, the original instance is giving 403 forbidden error message. For reference, the original instance has 200GB volume and I chose the option to create the…
JDK
  • 1
  • 1
0
votes
1 answer

Host multiple websites on AWS Auto-Scaling Group with EFS

I hope this is a simple question. Currently I have an Apache2 webserver on Ubuntu with multiple websites. The basic structure of the Apache is /etc /apache2 /sites-available --> the .conf files for the websites /sites-enabled --> the…
igalsc
  • 11
  • 4
0
votes
1 answer

My website is working when https://www.example.com but not when https://example.com

I have purchased the domain from Godaddy. My website is working when https://www.example.com example.com www.example.com Not working when https://example.com I want to know where I need to add the suitable configuration. I have already added…