ec2 | accessing EC2 instances and security groups

by mattrobenolt Python Version: Current License: BSD-2-Clause

X-Ray Key Features Code Snippets(1)Community Discussions(10)Vulnerabilities Install Support

kandi X-RAY | ec2 Summary

null

Sugar on top of boto for accessing EC2 instances and security groups

Support

Quality

Security

License

Reuse

Top functions reviewed by kandi - BETA

kandi's functional review helps you automatically verify the functionalities of the libraries and avoid rework.
Currently covering the most popular Java, JavaScript and Python libraries. See a Sample of ec2

Get all kandi verified functions for this library.

ec2 Key Features

No Key Features are available at this moment for ec2.

ec2 Examples and Code Snippets

Returns a string representation of the EC2 instance .

java

Lines of Code : 16

License : Permissive (MIT License)

Copy

@Override
    public String toString() {
        StringBuilder builder = new StringBuilder();
        builder.append("EC2Metadata [amiId=");
        builder.append(amiId);
        builder.append(", hostname=");
        builder.append(hostname);

Community Discussions

Trending Discussions on ec2

The unauthenticated git protocol on port 9418 is no longer supported

How to run a bash script in a AWS CloudFormation template

how to connect an aws api gateway to a private lambda function inside a vpc

ipykernel (Jupyter notebook/labs) cannot import name ''filefind" from traitlets.utils

MongoDB Compass: Current topology does not support sessions

How to identify an EC2 Classic Instance

Get N number of rows from mysql and update values in columns at the same time

Elastic Beanstalk deleting generated files on config changes

log4shell exploit for Redis server

Unable to install Jenkins on Ubuntu 20.04

QUESTION

The unauthenticated git protocol on port 9418 is no longer supported

Asked 2022-Mar-27 at 13:23

I have been using github actions for quite sometime but today my deployments started failing. Below is the error from github action logs

...

ANSWER

Answered 2022-Mar-16 at 07:01

First, this error message is indeed expected on Jan. 11th, 2022.
See "Improving Git protocol security on GitHub".

January 11, 2022 Final brownout.

This is the full brownout period where we’ll temporarily stop accepting the deprecated key and signature types, ciphers, and MACs, and the unencrypted Git protocol.
This will help clients discover any lingering use of older keys or old URLs.

Second, check your package.json dependencies for any git:// URL, as in this example, fixed in this PR.

As noted by Jörg W Mittag:

There was a 4-month warning.
The entire Internet has been moving away from unauthenticated, unencrypted protocols for a decade, it's not like this is a huge surprise.

Personally, I consider it less an "issue" and more "detecting unmaintained dependencies".

Plus, this is still only the brownout period, so the protocol will only be disabled for a short period of time, allowing developers to discover the problem.

The permanent shutdown is not until March 15th.

For GitHub Actions:

As in actions/checkout issue 14, you can add as a first step:

Source https://stackoverflow.com/questions/70663523

QUESTION

How to run a bash script in a AWS CloudFormation template

Asked 2022-Mar-17 at 04:00

I am trying to install MongoDB from a script in a EC2 from AWS CloudFormation. I want the script to automatically run when the stack is created from the template.

On line 303 of this template by Amazon you can see they do this

However, I am confused on the use of the backslash at every line. What format is needed to put a bash script into a AWS template so it runs on startup?

...

ANSWER

Answered 2022-Mar-16 at 04:50

This is called a userdata and in CloudFormation (CFN) it can be specified in multiple ways. The template in the link also use cfn-ini thus it has those "backslash". They are used to split a single line into multiple lines for readability.

Often the following form of user-data is enough which is easier to write and read:

Source https://stackoverflow.com/questions/71491848

QUESTION

how to connect an aws api gateway to a private lambda function inside a vpc

Asked 2022-Feb-20 at 12:53

I am trying to connect an aws api gateway to a lambda function residing in a VPC then retrieve the secret manager to access a database using python code with boto3. The database and vpc endpoint were created in a private subnet.

lambda function ...

ANSWER

Answered 2022-Feb-19 at 21:44

If you can call the Lambda function from API Gateway, then your question title "how to connect an aws api gateway to a private lambda function inside a vpc" is already complete and working.

It appears that your actual problem is simply accessing Secrets Manager from inside a Lambda function running in a VPC.

It's also strange that you are assigning a "db" security group to the Lambda function. What are the inbound/outbound rules of this Security Group?

It is entirely unclear why you created a VPC endpoint. What are we supposed to make of service_name = "foo"? What is service "foo"? How is this VPC endpoint related to the Lambda function in any way? If this is supposed to be a VPC endpoint for Secrets Manager, then the service name should be "com.amazonaws.YOUR-REGION.secretsmanager".

If you need more help you need to edit your question to provide the following: The inbound and outbound rules of any relevant security groups, and the Lambda function code that is trying to call SecretsManager.

Update: After clarifications in comments and the updated question, I think the problem is you are missing any subnet assignments for the VPC Endpoint. Also, since you are adding a VPC policy with full access, you can just leave that out entirely, as the default policy is full access. I suggest changing the VPC endpoint to the following:

Source https://stackoverflow.com/questions/71188858

QUESTION

ipykernel (Jupyter notebook/labs) cannot import name ''filefind" from traitlets.utils

Asked 2022-Feb-06 at 10:03

I installed Jupyter notebook and labs on and EC2 instance and for some reason I get the following error:

ImportError: cannot import name 'filefind' from 'traitlets.utils' (/usr/lib/python3/dist-packages/traitlets/utils/init.py)

Jupyter opens fine in the browser but I can't seem to be able to work in an python notebook.

...

ANSWER

Answered 2022-Feb-06 at 09:03

Dirty initial fix (not recommended):

Oke fixed it! It seems like the problem was that the "traitlets/utils/init.py" was empty. So I copy-pasted the code from GitHub and that worked.

https://github.com/ipython/traitlets/blob/main/traitlets/utils/__init__.py

I got this problem twice when I installed two different ec2 instances installing cuda and cudnn. So it might that this has something to do with the origins of this issue.

Proper fix:

The proper way to fix this problem is by upgrading/downgrading the library. Check the other answers to this post for guidance.

Source https://stackoverflow.com/questions/69809832

QUESTION

MongoDB Compass: Current topology does not support sessions

Asked 2022-Feb-01 at 23:21

All of a sudden I am getting an error - 'Current topology does not support sessions' on MongoDB Compass. I have never seen this before on MongoDB Compass!!!

Below are the details on version/server

MongoDB Compass Version: 1.29.5 (1.29.5)

MongoDB Version: MongoDB 3.0.6 Community

Cluster : Standalone Host : AWS EC2

...

ANSWER

Answered 2022-Jan-21 at 14:47

I believe this is an issue due to the mongoDB version is not compatible with the latest version of MongoDB Compass.

Solution: Downgraded MongoDB Compass version to 1.28.4 (1.28.4).

Link - https://github.com/mongodb-js/compass/releases?q=1.28.4&expanded=true ... look for required installer under Assets.

Source https://stackoverflow.com/questions/70298707

QUESTION

How to identify an EC2 Classic Instance

Asked 2022-Jan-20 at 21:57

Recently got an email titled, "Important News from AWS About Amazon EC2-Classic" describing some changes that need to occur. These emails from AWS usually reference the effected resources though and this one did not. I am having a hard time identifying what resources in our account are effected by this. All our EC2 instances are in a VPC and I am not even sure if anything needs to change or not.

Is there a way to identify that an EC2 instance is classic?

I have looked through their linked documentation and gone through the instances we have but I cannot tell if they are "classic" of not.

...

ANSWER

Answered 2022-Jan-20 at 21:57

You can identify the EC2-Classic env by checking the instance has VPC ID or not.

EC2 console

VPC ID is not shown by default. Enable VPC ID from Preference -> Attribute columns.

Then if VPC ID attribute is -, that means the instance is EC2-Classic. (Except that the instance state is not terminated.)

CLI

2 ways for checking. Output is none unless EC2-classic instances exist.

Describe instance with EC2-Classic env.

Source https://stackoverflow.com/questions/68749074

QUESTION

Get N number of rows from mysql and update values in columns at the same time

Asked 2021-Dec-28 at 11:05

I need to process thousands of files stored in an S3 bucket. My idea was to spin up a bunch of EC2 VMS (96 cores each) and have them contact a MySQL database via python to get 96 S3 paths to the files it needs to process. I also want to log if it is in progress or has been processed with an IN_PROGRESS AND PROCESSED column set to 0 or 1. I have the current statement, the problem I am running into is that it updates the IN_PROGRESS value, but I am not sure how to select/return the 96 filenames needed to process. I cannot run SELECT * FROM temp, after running the update it returns an error.

...

ANSWER

Answered 2021-Dec-28 at 11:05

Your question isn't super clear about where you get these instances, so I'm guessing a bit.

Try some SQL like this to avoid race conditions. Be sure to use MySQL's InnoDB storage engine; MyISAM and AriaDB don't support transactions.

Source https://stackoverflow.com/questions/70499335

QUESTION

Elastic Beanstalk deleting generated files on config changes

Asked 2021-Dec-20 at 23:51

On Elastic Beanstalk, with an AWS Linux 2 based environment, updating the Environment Properties (i.e. environment variables) of an environment causes all generated files to be deleted. It also doesn't run container_commands as part of this update.

So, for example, I have a Django project with collectstatic in the container commands:

...

ANSWER

Answered 2021-Dec-20 at 23:51

The solution is to use a Configuration deployment platform hook for any commands that change the files in the deployment directory. Note that this is different from an Application deployment platform hook.

Using the example of the collectstatic command, the best thing to do is to move it from a container command to a pair of hooks, one for standard deployments and one for configuration changes.

To do this, remove the collectstatic container command. Then, make two identical files:

.platform/confighooks/predeploy/predeploy.sh
.platform/hooks/predeploy/predeploy.sh

Each file should have the following code:

Source https://stackoverflow.com/questions/70386134

QUESTION

log4shell exploit for Redis server

Asked 2021-Dec-12 at 21:27

We are running redis server on EC2 instance.

i can see in many publications that Redis Server is vulnerable to the log4shell exploit, but can't see any documentation or any official about that.

What should I do in order to protect my redis server instance to be in-vulnerable for this exploit?

...

ANSWER

Answered 2021-Dec-12 at 21:27

Redis Server does not use Java and is therefore not impacted by this vulnerability.

See more here: https://redis.com/security/notice-apache-log4j2-cve-2021-44228/

Source https://stackoverflow.com/questions/70322115

QUESTION

Unable to install Jenkins on Ubuntu 20.04

Asked 2021-Dec-08 at 05:56

I am trying to install Jenkins on my Ubuntu EC2 instance and I performed the following steps to install but couldn't install it.

$sudo apt update $sudo apt install openjdk-8-jdk $wget -q -O - https://pkg.jenkins.io/debian-stable/jenkins.io.key | sudo apt-key add - $sudo sh -c 'echo deb http://pkg.jenkins.io/debian-stable binary/ > /etc/apt/sources.list.d/jenkins.list' $sudo apt update <--------- (Here I am getting below error)

root@ip-172-31-44-187:~# sudo apt update Ign:1 https://pkg.jenkins.io/debian-stable binary/ InRelease Err:2 https://pkg.jenkins.io/debian-stable binary/ Release Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate. Could not handshake: Error in the certificate verification. [IP: 151.101.154.133 443] Hit:3 http://ap-south-1.ec2.archive.ubuntu.com/ubuntu focal InRelease Get:4 http://ap-south-1.ec2.archive.ubuntu.com/ubuntu focal-updates InRelease [114 kB] Get:5 http://security.ubuntu.com/ubuntu focal-security InRelease [114 kB] Get:6 http://ap-south-1.ec2.archive.ubuntu.com/ubuntu focal-backports InRelease [101 kB] Reading package lists... Done E: The repository 'http://pkg.jenkins.io/debian-stable binary/ Release' does not have a Release file. N: Updating from such a repository can't be done securely, and is therefore disabled by default. N: See apt-secure(8) manpage for repository creation and user configuration details.

...

ANSWER

Answered 2021-Oct-09 at 07:17

Yeah , I had same problem with this from yesterday , I think this is after yesterday's new update in jenkins 2.303.2 Lts .

Just do , apt upgrade , apt update, apt get install jenkins -y .

It worked for me .

Source https://stackoverflow.com/questions/69495517

Community Discussions, Code Snippets contain sources that include Stack Exchange Network