Do we select and attach the ALB or else target group while creating an ASG

Explained well 👏👏, can we have Infrastructure As Code via AWS SAM or Terraform

Thanks, It's well explained. Please continue the good work and keep sharing.

I seem to have an error regarding the python project given. here are the logs : Execution log for request 6a7ab568-b263-4d34-9682-825d4b4e05af Mon Jan 13 16:44:54 UTC 2025 : Starting execution for request: 6a7ab568-b263-4d34-9682-825d4b4e05af Mon Jan 13 16:44:54 UTC 2025 : HTTP Method: GET, Resource Path: /_dashboards/app/dev_tools#/console Mon Jan 13 16:44:54 UTC 2025 : Method request path: {proxy=_dashboards/app/dev_tools#/console} Mon Jan 13 16:44:54 UTC 2025 : Method request query string: {} Mon Jan 13 16:44:54 UTC 2025 : Method request headers: {} Mon Jan 13 16:44:54 UTC 2025 : Method request body before transformations: Mon Jan 13 16:44:54 UTC 2025 : Endpoint request URI: lambda.eu-west-3.amazonaws.com/2015-03-31/functions/arn:aws:lambda:eu-west-3:110717270184:function:opensearch-proxy-lambda/invocations Mon Jan 13 16:44:54 UTC 2025 : Endpoint request headers: {X-Amz-Date=20250113T164454Z, x-amzn-apigateway-api-id=v3jfz1nulk, Accept=application/json, User-Agent=AmazonAPIGateway_v3jfz1nulk, Host=lambda.eu-west-3.amazonaws.com, X-Amz-Content-Sha256=253132fc27992868e41aa8882cd4fc234e01935f02f6bfa3b7b13f6a0e298326, X-Amzn-Trace-Id=Root=1-67854306-cc07016a69acd26f1cf4b246, x-amzn-lambda-integration-tag=6a7ab568-b263-4d34-9682-825d4b4e05af, Authorization=*********************************************************************************************************************************************************************************************************************************************************************************************************************************************ae6e59, X-Amz-Source-Arn=arn:aws:execute-api:eu-west-3:110717270184:v3jfz1nulk/test-invoke-stage/GET/{proxy+}, X-Amz-Security-Token=IQoJb3JpZ2luX2VjEAgaCWV1LXdlc3QtMyJHMEUCIQCjZUq1ampNDkbG506V0ryPNJ3NekjBzR47GgOSetXIOgIgU0ETUigGVRC1jUL/UAEI3f7Td6b67o0LTSujAkJl8gEquwUI8 [TRUNCATED] Mon Jan 13 16:44:54 UTC 2025 : Endpoint request body after transformations: {"resource":"/{proxy+}","path":"/_dashboards/app/dev_tools#/console","httpMethod":"GET","headers":null,"multiValueHeaders":null,"queryStringParameters":null,"multiValueQueryStringParameters":null,"pathParameters":{"proxy":"_dashboards/app/dev_tools#/console"},"stageVariables":null,"requestContext":{"resourceId":"jciehr","resourcePath":"/{proxy+}","httpMethod":"GET","extendedRequestId":"EVdpEHhJCGYFuRQ=","requestTime":"13/Jan/2025:16:44:54 +0000","path":"/{proxy+}","accountId":"110717270184","protocol":"HTTP/1.1","stage":"test-invoke-stage","domainPrefix":"testPrefix","requestTimeEpoch":1736786694485,"requestId":"6a7ab568-b263-4d34-9682-825d4b4e05af","identity":{"cognitoIdentityPoolId":null,"cognitoIdentityId":null,"apiKey":"test-invoke-api-key","principalOrgId":null,"cognitoAuthenticationType":null,"userArn":"arn:aws:iam::110717270184:user/gautiervuillaume","apiKeyId":"test-invoke-api-key-id","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20 [TRUNCATED] Mon Jan 13 16:44:54 UTC 2025 : Sending request to lambda.eu-west-3.amazonaws.com/2015-03-31/functions/arn:aws:lambda:eu-west-3:110717270184:function:opensearch-proxy-lambda/invocations Mon Jan 13 16:44:58 UTC 2025 : Received response. Status: 200, Integration latency: 3882 ms Mon Jan 13 16:44:58 UTC 2025 : Endpoint response headers: {Date=Mon, 13 Jan 2025 16:44:58 GMT, Content-Type=application/json, Content-Length=185, Connection=keep-alive, x-amzn-RequestId=36b736c8-dde3-4d7a-bd13-31c16015dc22, X-Amz-Function-Error=Unhandled, x-amzn-Remapped-Content-Length=0, X-Amz-Executed-Version=$LATEST, X-Amzn-Trace-Id=Root=1-67854306-cc07016a69acd26f1cf4b246;Parent=6c966043d9cbbea4;Sampled=0;Lineage=1:721c91c7:0} Mon Jan 13 16:44:58 UTC 2025 : Endpoint response body before transformations: {"errorMessage": "Unable to import module 'lambda_function': No module named 'botocore.vendored.six.moves'", "errorType": "Runtime.ImportModuleError", "requestId": "", "stackTrace": []} Mon Jan 13 16:44:58 UTC 2025 : Lambda execution failed with status 200 due to customer function error: Unable to import module 'lambda_function': No module named 'botocore.vendored.six.moves'. Lambda request id: 36b736c8-dde3-4d7a-bd13-31c16015dc22 Mon Jan 13 16:44:58 UTC 2025 : Method completed with status: 502

Cannot able to download archive.zip file from the github.

Hi Thanks for the video, my rabbit MQ is placed in Private subnet here then how to access it here. Please provide some info. Thank you

How to ingest postgre SQL database data into OpenSearch service please make video on it

I deployed and followed same steps but in ALB not crreated , in ingress hostaddress is empty. logs:{"level":"error","ts":"2024-12-09T17:01:07Z","msg":"Reconciler error","controller":"ingress","object":{"name":"ingress-2048-elb","namespace":"game-2048"},"namespace":"game-2048","name":"ingress-2048-elb","reconcileID":"5ac28bf6-f768-413a-9cd5-d48f35fc4afe","error":"operation error Elastic Load Balancing v2: DescribeLoadBalancers, get identity: get credentials: failed to refresh cached credentials, failed to retrieve credentials, operation error STS: AssumeRoleWithWebIdentity, https response error StatusCode: 403, RequestID: 05530864-10ef-465e-80c6-88b2df3a05f1, api error AccessDenied: Not authorized to perform sts:AssumeRoleWithWebIdentity"}

Simply Amazing Teacher.

Deviating from the topic...but Her voice is so sweeeeet. I wonder what she looks like😗 and if girl with such a sweet voice is single

do we get logs of sqs and sns as well? what if we dont see any logs in lambda. how do we debug ? should we see logs of sns then sqs?

problem with this, at 100% volume on a external soundbar, i still can't hear

10:22 you should edit "arn:aws:sqs:us-east-1: 609292000349:q1" -> "arn:aws:sqs:us-east-1: 609292000349:queue1"

I just have one thought for your Channel ."To The point" Cut the long story short. Really helpful. :)

Thank you so much!

why this has to be so tough

I deployed and followed same steps but in ALB I'm not able to see target group under ALB and instances attached. That's why I am getting 503 error

Hey, and thanks for the good guide. In the JSON policy that we copy-paste, should we change the default regone in the JSON?

Great explaination.

Thanks!

I have got error: OpenSearch Dashboards did not load properly. Check the server output for more information.

Very useful information!

Hi i followed each every step that you mention, for me the load balancer is not created. Can you provide any suggestion that?

Thank you but in the begining of the video you're talking about private subnet but we doesn't link EC2 to them, so I'm a little bit lost. Why we create EC2 instance in public subnet?

best video

Well explained mam, learning from ur vast experience.

but you have used classic load balancer not application load balancer?

just the perfect and the crisp one....thnks...

you saved my day. you made me feel it is just so simple to get started. thanks a ton!

where exactly did you get the added policy from github for Lambda ?From creator of policy ?

After setting up the ingress, I'm unable to retrieve the ingress name (domain).

Thanks for the information....

if you run into the problem of "Error code: InvalidParameterValueException. Error message: The provided execution role does not have permissions to call DeleteMessage on SQS" Follow these instructions: Go to IAM in the AWS Console Click on roles Select your Lambda function execution role or create one if you don't already have Add the AWS managed LambdaSQSQueueExecutionRole policy to the role. The policy contains all the permissions to call the required actions on SQS from Lambda. The ARN of the policy is arn:aws:iam::aws:policy/service-role/AWSLambdaSQSQueueExecutionRole. Save the role, and then try again to add the trigger. This time it will work fine.

Great video Can someone help me understand this statement in the lambda function? domain = os.environ['NAMEOFDOMAIN'] host = "" + es.describe_elasticsearch_domain(DomainName=domain)['DomainStatus']['Endpoint'] How come Domainstatus and endpoint are in ' ' ? Is it being queried by the OS import library?

Pls continue ur videos 🙏

simple and crispy with tones of Experience knowledge. Keep it up !

Can we create sns topic without changing access policy to advanced

Hi there, i have actually run into a problem. when i try to add the lambda trigger into sqs it throws an error message "Error code: InvalidParameterValueException. Error message: The provided execution role does not have permissions to call DeleteMessage on SQS" and i have used the same policy for the sqs as shown in this video. any idea how to solve this?

I have followed the same sequence as mentined in your vedio but still facing below error : InvalidParameterValueException: Cannot access stream arn:aws:dynamodb:us-east-1:<stream-event>. Please ensure the role can perform the GetRecords, GetShardIterator, DescribeStream, and ListStreams Actions on your stream in IAM.

If a loadbalancer is applied, what dns or url should be used to launch the application?

Great Work!! Was looking for similar solution, Due to spefciic requirement, i have elasticsearch 7.10 running on AWS Opensearch service, Have tried above steps getting signature miss match error when i try to access <api url>/<stage_name>/_plugin/kibana, do we need to do some changes to make it compatible with elasticsearch

Thank you, great content 🎉

why is the volume so low ?? rest information is good.

Hi, First of all thank you for provide such helpful content... Everything is working correctly but i wanna know how to add https with the loadbalancer. thx @listentolearn2363

HI alb is not provisioning and the adress is not visble . i will share the log : 5a2-d72b-40b3-b2c0-1889ff5131d7"} {"level":"error","ts":"2024-05-28T09:53:17Z","msg":"Reconciler error","controller":"ingress","object":{"name":"testapp-nginx-ingress","namespace":"default"},"namespace":"default","name":"testapp-nginx-ingress","reconcileID":"ef38c6d9-0165-4026-9539-cc558860cdbf","error":"WebIdentityErr: failed to retrieve credentials caused by: AccessDenied: Not authorized to perform sts:AssumeRoleWithWebIdentity \tstatus code: 403, request id: 1025e76d-ae85-43b6-9511-8a65fcb6b914"} [ec2-user@ip-10-0-8-252 ~]$ kindly reply

Do we need to create index before uploading the file? I wanted to just insert the data dynamically is this possible? For example. I have a sample json using that I wanted to create an index without creating it manually.

Hi , will this work for prefixes within s3 bucket?

Thanks for the video, would you be able to show the video on how to do this using cloud formation template and how to hit the opensearch domain endpoint and ingest and query data