I am trying this out. account = "11111111111" tenant_name= "Demo" project_name= "demo" sns_access_policy = """{ "Version": "2012-10-17", "Statement": [ { "Sid": "0", "Effect": "Allow", "Principal": { "Service": "codestar-notifications.amazonaws.com" }, "Action": "sns:Publish", "Resource": "arn:aws:sns:eu-west-1:{account_id}:{tenant_name}-{project_name}-pipeline-monitoring" } ] }""" sns_access_policy = sns_access_policy.replace("{account_id}",account).replace("{tenant_name}",tenant_name).replace("{project_name}",project_name) This is doing my work, but I am looking something like f{string_substitution}. sns_access_policy = f"""{ "Version":… Read More multiline string substitution in python

I am working with a problem that has a few other similar solutions posted on stackoverflow (1) Argument of type ‘this’ is not assignable to parameter of type ‘Construct’ in AWS CDK (2) AWS CDK, typescript – Argument of type ‘this’ is not assignable to parameter of type ‘Construct’ I tried making all my aws… Read More AWS CDK says Argument of type 'this' is not assignable to parameter of type 'Construct'

I am consulting the databases of a mongo cluster and I need it to show me all the databases except some of them this way i get the databases in dictionary form: for db in myclient.list_databases(): print(db) “ ` and the output is as follows: {‘name’: ‘databasetest’, ‘sizeOnDisk’: 32768.0, ’empty’: False} {‘name’: ‘databaseQA’, ‘sizeOnDisk’: 98304.0,… Read More exclude values from a string or dictionar in python

I am interested in setting up an AWS host that needs to occasionally pull data from another Internet site. According to the AWS pricing calculator, inbound Internet data transfers are free but outbound data transfers are not. Does this mean I am only charged for the size of the HTTP request but the HTTP response… Read More AWS data transfer pricing

When we define application load balancer in AWS, we first attach a security group to it which itself specifies things like protocol, port etc. Then we also define a listener group whee we again specify protocol, port etc. So how do they differ in their meaning and role in overall picture? >Solution : All resources… Read More AWS application load balancer: Security group settings vs listener settings

In AWS, when I try to create a task definition, it shows nothing (I am in EU-Central region). However when I go to IAM I do have roles that have policies needed to pull my images. How can I select one of these existing roles when creating my task def when nothing shows up in… Read More Task role not found in aws

I have a requirement where my application, in AWS account A, needs to broadcast that a new resource is created, to AWS accounts: B, C and D. I was thinking of implementing a solution, where an SNS Topic in Account A, publishes to SQS Queues Accounts: B, C and D (FanOut Pattern). Question: Is it… Read More Is it possbile to publish one SNS Topic to another?

I am trying to execute my code from my ide and connect to aws resources through boto3. I go into the Secrets portal of the aws console. Inside aws secrets manager I find the resource titled my_api where my secrets are stored. I copy that name so that I can access the dict response of… Read More Receiving error "User: arn:aws:iam::11345636234528:user/my_Api is not authorized to perform: secretmanager:GetSecretValue on resouce: my_Resource"?

Using locust , I made WAF test on my application. I made a rate limit based rule to block IP if requests exceed 100 in a default 5 minute window. When I tested with concurrency 400 with spawn rate 40, then WAF doesn’t block after total requests exceeds 100. But when I stop the test… Read More AWS WAF didn't block requests if block condition matched for first time

I’m cleaning up some very old AWS IAM roles and I am unable to delete this one (probably from old tutorial I was following from ACloudguru circa 2018). I’m confused b/c I’m unable to find the resource. The resource indicates in one region (eu-north-1) and lists using the naming of the region I normally work… Read More Cannot delete old AWS IAM Role