Into "Cost Explorer Monthly costs by service" report I saw $300 for S3 for certain month. But when I tried to drill-down into the bill for this month, I saw just $4 for the "Simple Storage Service". So I'm not sure I understand how I can investigate S3 cost.
TIA, Vitaly
I have Alerting Policy in Google's Stackdriver which sends a notification when there is an error in the specific log. For the obvious reason, there is no recovery for such condition, i.e. I don't want to get recovery notification. How/If I can suppress Stackdriver recovery notification?
I have Ubuntu 18.04 and CentOS 7 boxes, they are members of Windows domain (using sssd). Linux users need to mount CIFS shares from domains fileservers. What should be done in order to provide passwordless mount, using Kerberos? (I see a similar question, unfortunately without accepted answer Ubuntu map CIFS / SMB share using active domain credentials without password file)
For traditional init environment we had "/etc/initscript" for setting environment for services. How we can set environment for runit services (Ubuntu 14.04)?
TIA, Vitaly
I have Ubuntu 14.04 (CIS benchmark image, but I don't think it's related). I installed ENA according to http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/enhanced-networking-ena.html#test-enhanced-networking-ena. I imaged and relaunched my AMI as m4.x16large and I do have ENA active:
ethtool -i eth0
driver: ena
version: 1.5.0g
I ran update-initramfs (tried both '-u' and '-c'), created AMI, and tried to launch as c5.4xlarge. boot fails with:
Begin: Mounting root file system ... Begin: Running /scripts/local-top ... /scripts/local-top/cryptroot: line 24: dirname: not found
done.
Gave up waiting for root device.
......
Any ideas? TIA, Vitaly
According to http://docs.aws.amazon.com/cli/latest/reference/ec2/describe-images.html and other docs, "aws ec2 describe-images --image-id ami-XXXX" command should provide AMI creation date as part of the output. But for all my AMIs (created using "aws ec2 create-image") I receive "None" instead of creation date. Any suggestions how to debug it?
I have a few Jenkins slaves, some of them are labeled by "X", and others with "Y" label. I'd like to choose group of slaves, based on their label, when I starting this job from its upstream job. I.e. I want to pass a value for a label (for NodeLabelParameter plugin) as a parameter.
I already played with a NodeLabelParameter and Parameterized Trigger plugins, reviewed http://www.shaunabram.com/dynamically-set-jenkins-node/ and similar articles, but still wasn't able to implement a flow I need.
I need to migrate production environment from EC2-Classic to VPC. For now I have one Elastic LB with a few EC2 instances behind it. My plan is:
Will it work? Is there better method?
TIA, Vitaly
I asked to migrate existing CENTOS5-basedEC2 server to the new T2 instance. I created AMI, but it can't be launched as T2 instance because T2 supports only HVM virtualization. There are few manuals for converting AMI from PV to HVM (http://www.nixhat.com/2014/01/migrate-aws-pv-to-hvm-instance/, for example); but in order to do it, I need "to implant" HVM kernel into my server. But there is no CENTOS5 HVM AMIs! Is there any workaround?
May I use just vanilla CENTOS5 kernel - AFAIK, PV uses modified kernel, not sure about HVM?
TIA, Vitaly
How do I know what the Amazon DHCP server range for dynamic IP allocation is inside of my VPC? For example, I have a 172.31.32.0/20 network and I'd like to allocate a private permanent IP - which range I should choose to avoid collision with the DHCP range?
PS: I use Linux network aliases for adding a second static IP to eth0 (1st "Manage Private IP Adresses" on EC2 console and 2nd - adding appropriate alias config to Linux)
After some reading (AWS docs, http://stratumsecurity.com/2012/12/03/practical-tactical-cloud-security-ec2/, etc..) I still don't understand how to organize secure & easy access to AWS (especially RDS) from users's laptops. For example, my application from dev's laptop should be able to access MySQL RDS.
Is these something I missed? I'm thinking about install OpenVPN on one of EC2 and use it for tunneling all traffic to my AWSs, but probably some better option exists.
TIA, Vitaly
From PCI-DSS point of view, are using SSH keys for passwordless authentication secure enough?
TIA, Vitaly
There are few (~30) Linux (RHEL) boxes and I'm looking for centralized and easy managed solution, mostly for control user accounts. I'm familiar with LDAP, and I deployed a pilot of IPA ver2 from Red Hat (==FreeIPA).
I understand that in theory IPA provides "MS Windows domain"-like solution, but at a glance it's not so easy and mature product [yet]. Aside with SSO, is there any security features which are available only in IPA domain and not available when I'm using LDAP?
I'm not interesting in DNS and NTP parts of IPA domain.