#aws (2024-03)

@Dan Miller (Cloud Posse)

I’m not the person to ask about this, sorry

All good y’all, thank you for taking a look

We’re trying to support 5.7 and 8.0 at the same time during the transition, but it doesn’t look like that’s possible

@Jeremy G (Cloud Posse) @Jeremy White (Cloud Posse) @matt

there is no right answer for this. some people find structured learning essential to grow their skillset. in regards to career growth/opportunities; it’s going to come down to the org/hiring manager and their biases. orgs that value them will require them to hold higher level positions.

@Dan Miller (Cloud Posse) @Ben Smith (Cloud Posse)

I kept hoping that AWS would fix this, but eventually gave up and ending up writing a small utility service that replicates tags, it’s purpose built so not OSS available but it was only a few days of investment…heck there probably is something out there that does this

I’ve seen this issue too. It’s quite annoying to not have the name and tags associated with the shared TGW attachment

Based on the responses in this issue, we might be able to use aws_ec2_tag to tag the resource in the second account after-the-fact. I haven’t tried it yet, and this (closed) issue claims it doesnt work. But that’s a few years old. Might be worth trying out

if that does work, I can imagine it wouldn’t be too difficult to pass module.this.tags to new shared resource in the same transit gateway module (for cloud posse terraform use cases for example)

ohh man if that works I’ll be 80% relieved, 20% angry — going to add that to my TODO list. thanks

np! if it does work lmk too please! That’d be a great QoL addition to our module

I’m not holding my breath though, the issue was closed due to age not explicitly because it was no longer needed.

looks quite interesting!

where is the kms key? the asg account or the ami account? is the kms key active? what is the kms key being used for?

ami account and yes its active to encrypt EBS volumes

ok, have you created a resource policy for the kms key to allow the asg account to use it? I also think you need to create a kms grant for the autoscaling service linnked role to use the kms key

I tried that but still kept getting the same error

You can’t assign a static IP address to an Application Load Balancer. If your Application Load Balancer requires a static IP address, then it’s a best practice to register it behind a Network Load Balancer. The static IP address that’s assigned to a Network Load Balancer doesn’t change and provides a fixed entry point for your Application Load Balancer.

another option could be https://docs.aws.amazon.com/global-accelerator/latest/dg/about-accelerators.alb-accelerator.html

@Ben Smith (Cloud Posse)

Yeah based on the other threads, I agree with Jeremy, that we should have a force_destroy flag that will destroy backups on destroy.

Is this option implemented in the module ?

not yet, but I think that’s the appropriate place for this

ok

@bessey not sure how fast I’ll be able to get to this, is this something you could open a PR for?

What’s PR ?

Pull Request

@Jeremy White (Cloud Posse) @Dan Miller (Cloud Posse)

It’s been reported internally that safari is also suitable. It’d be appreciated if you could confirm the same

@Erik Osterman (Cloud Posse) can you add me to that Slack group please?

(probably needs some others removed as well)

• if you have any performance requirements

• encryption requirements

• you want to share volumes

what kind of performance requirements are you thinking of? Are there cases where an EBS volume might outperform instance storage?

instance store verifies by class, so you might want to use EBS to have consistent performance if that’s something you need

sorry my bullet point was unclear

ah, makes sense, thanks

Yes so as Darren alludes to, we have multiple times run into this that instance store volumes are too slow. Other times we needed a lot of scratch space.

it’s a little hard to believe that a local SSD would ever be slower than something over the network, but I guess if anyone could crack that nut, it’d be AWS…

instance store volumes should be encrypted as well: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/data-protection.html#encryption-rest

you cannot provide your own encryption key

The encryption keys are destroyed when the instance is stopped or terminated and cannot be recovered Doesn’t really make a difference as the data is ephemeral and you delegate trust to AWS anyway.

to some orgs, very much

I’m not petitioning either way, I’m just calling out what factors you’d consider when choosing EBS vs instance

@Erik Osterman (Cloud Posse) please confirm https://aws.amazon.com/certification/certified-cloud-practitioner/?gclid=CjwKCAjwh4-wBhB3EiwAeJsppNFY-yL9SFCiCO10NS-3zaXE3aFEN0hNiw_b1ShxA2ZZUb_GY49SJhoCFcQQAvD_BwE&trk=0c2b5279-1e50-459b-b9b5-6b0861ac160e&sc_channel=ps&ef_id=CjwKCAjwh4-wBhB3EiwAeJsppNFY-yL9SFCiCO10NS-3zaXE3aFEN0hNiw_b1ShxA2ZZUb_GY49SJhoCFcQQAvD_BwE<i class="em em-G"https://aws.amazon.com/certification/certified-cloud-practitioner/?gclid=CjwKCAjwh4-[…]302!e!!g!!aws%20cloud%20practitioner!19919601960!149404860884 is Cloud Posse’s recommendation

Thank you @Gabriela Campana (Cloud Posse) for sharing this with me :)

Do I need to take any further course on YouTube or udemy to pass this exam? Or shall I just follow along with Aws official website?

I think you can follow along with AWS website: https://aws.amazon.com/certification/certification-prep/?ch=cta&cta=header&p=2

@Dan Miller (Cloud Posse) @Ben Smith (Cloud Posse) please confirm

The cloud practitioner exam is a great starting point. That will give you a general idea of how AWS works, but from there I’d recommending getting an Associate certificate as well. For example, the Solutions Architect exam

When I was learning AWS originally, I liked the courses on ACloudGuru and Linux Academy. Ultimately it’s up-to-you whichever you prefer. They will all be good

Here’s AWS’s recommended certificate paths: https://d1.awsstatic.com/training-and-certification/docs/AWS_certification_paths.pdf

Thank you guys, this helped me to choose a path that I want to go for. I will deffo prepare for the associate level as well the sooner I complete my cloud practitioner.

This is not a question we can answer. You need to contact Pearson Vue.