pulumi-community #aws

aws

salmon-ghost-86211

02/28/2020, 3:13 PM

If I use either the AWS console or AWS CLI to create an Alias A record and choose a load balancer from the list, the

dualstack:

prefix is added automatically to the Alias Target field. When I use Pulumi to create the same record, the

dualstack:

prefix is not added. Am I missing the correct way to do this, or is there a plan to add it?

aloof-psychiatrist-4562

02/28/2020, 7:28 PM

Regarding importing existing but unmanaged resources. Whats the recommended path when doing so? I keep running into the issue where its like, RAWR 💅 attributes don’t match and then I have to do the

ignore_changes

bitter-zebra-93800

03/01/2020, 3:21 AM

I would like to send a message to a SQS queue in response to an API Gateway POST. I see lots of examples around subscribing to sqs queues but don’t see sendmessage or put type commands in any of the examples. What would the syntax look like to send a message to a queue like this? Thanks

const queue = new aws.sqs.Queue("dataqueue");

nice-hamburger-52192

03/02/2020, 5:23 AM

I am trying to create a Lambda that when triggered by an S3 object being created, will read the contents of the file (which is JSON). When I tried that out with this code:

... (other code omitted) ...

bucket.onObjectCreated('on_created', async e => {
  if (e.Records) {
    for (const rec of e.Records) {
      const file = aws.s3.getBucketObject({
        bucket: bucketName.get(),
        key: rec.s3.object.key
      });

      console.log('body', (await file).body);
    }
  }
});

I get this error message in CloudWatch:

{
  "errorType": "Runtime.ImportModuleError",
  "errorMessage": "Error: Cannot find module '@pulumi/aws/s3/index.js'\nRequire stack:\n- /var/task/__index.js\n- /var/runtime/UserFunction.js\n- /var/runtime/index.js",
  "stack": [
    "Runtime.ImportModuleError: Error: Cannot find module '@pulumi/aws/s3/index.js'",
    "Require stack:",
    "- /var/task/__index.js",
    "- /var/runtime/UserFunction.js",
    "- /var/runtime/index.js",
    "    at _loadUserApp (/var/runtime/UserFunction.js:100:13)",
    "    at Object.module.exports.load (/var/runtime/UserFunction.js:140:17)",
    "    at Object.<anonymous> (/var/runtime/index.js:43:30)",
    "    at Module._compile (internal/modules/cjs/loader.js:955:30)",
    "    at Object.Module._extensions..js (internal/modules/cjs/loader.js:991:10)",
    "    at Module.load (internal/modules/cjs/loader.js:811:32)",
    "    at Function.Module._load (internal/modules/cjs/loader.js:723:14)",
    "    at Function.Module.runMain (internal/modules/cjs/loader.js:1043:10)",
    "    at internal/main/run_main_module.js:17:11"
  ]
}

This is the line that is causing the issue:

const file = aws.s3.getBucketObject({

I have this import at the top of my TypeScript file:

import * as aws from '@pulumi/aws';

So what am I doing wrong?

creamy-traffic-12121

03/04/2020, 2:45 PM

Not sure if this should go @here or in general, but I have an imported vpc in my stack resources:

creamy-traffic-12121

03/04/2020, 2:46 PM

export const vpc = new aws.ec2.Vpc("importedVpc", {
    cidrBlock: config.require('cidr'),
}, { import: "vpc-##################"})

creamy-traffic-12121

03/04/2020, 2:46 PM

If I call

$ pulumi destroy

, will the vpc be deleted or left untouched?

creamy-traffic-12121

03/04/2020, 2:54 PM

Currently, the destroy preview has it marked for deletion. If it will be deleted, is there anyway to import existing resources without having it included in deletion when tearing down stacks?

creamy-traffic-12121

03/04/2020, 3:31 PM

nvm, I found a better solution with

awsx.ec2.Vpc.fromExistingIds

and I've been able to confirm that it doesn't delete the vpc on destroy. 👍 😛artypus-8bit:

gentle-diamond-70147

03/04/2020, 4:05 PM

If you use

{ import: "vpc-##################"}

, Pulumi is assuming ownership of the resource and will delete it if you do a

pulumi destroy

. The

fromExistingIds

.get()

getVpc()

, etc. all just "read" the VPC information so Pulumi will not modify or destroy them.

👍 1

bitter-dentist-28132

03/04/2020, 6:38 PM

it seems eks wants a pod to claim a pvc before it'll mark the pvc as up, but my pod has the pvc as a dependency, so they never come up on the first run. what's the canonical way to make that work?

limited-rainbow-51650

03/04/2020, 8:38 PM

Am I missing something in the definition of my

aws.iam.Role

here? The

Version

property is not assignable…

limited-rainbow-51650

03/07/2020, 3:03 PM

I have built a distribution ZIP of this Lambda@Edge authentication function: https://github.com/Widen/cloudfront-auth But how can I get this zip deployed as a Lambda@Edge function? First time Lambda here…

green-morning-1318

03/07/2020, 8:43 PM

Has anyone tried using Amazon EventBridge with Pulumi? I can’t seem to find the right method calls to create a custom eventbridge 😞

billions-scientist-31826

03/10/2020, 8:01 PM

How can I tell what version of the AWS plugin that a project is using?

flat-insurance-25294

03/13/2020, 11:14 AM

I am a bit concerned of setting our AWS tokens (Not root!) on a CI and giving to Pulumi eventually. Is there a way of using 2FA similar to battle.net where on requests to AWS APIs, it would expect approval from a mobile/2fa device?

nutritious-pager-34892

03/13/2020, 8:54 PM

Hello, while testing a container example from https://www.pulumi.com/containers/ I get this error: ” error: Error creating application Load Balancer: ValidationError: At least two subnets in two different Availability Zones must be specified”

nutritious-pager-34892

03/16/2020, 1:27 AM

Does pulumi use cloud formation to apply changes?

incalculable-engineer-92975

03/16/2020, 6:08 PM

How quickly are terraform providers integrated with pulumi? I need apigatewayv2 which was just released in aws terraform v2.53

incalculable-engineer-92975

03/17/2020, 2:12 PM

@here Just bumping my request for update timing w/the aws terraform v2.53 release. Anyone know when it will be incorporated into the Pulumi AWS release?

incalculable-engineer-92975

03/18/2020, 9:56 PM

Anyone know how to get a list of load balancers? the getLoadBalancer call can only return one

bitter-zebra-93800

03/19/2020, 12:16 AM

Are provisioners specific to Amazon Linux or should they work on Debian?

alert-france-93241

03/19/2020, 11:20 AM

Has anyone here tried creation event subscriptions on an existing S3 bucket?

ambitious-pilot-38837

03/19/2020, 2:37 PM

Hi everyone, new to IaC and pulumi. Is there list of policies/permissions a user needs to have in order to work with pulumi? I created an IAM user with the PowerUser policy and it was missing some permissions: example

iam:CreateRole

. Just wondering before I go ahead and start adding policies until I get

pulumi up

to work.

faint-motherboard-95438

03/20/2020, 1:04 PM

Hi there, Does anyone of you know a way to inject a config file in a container deployed through fargate/ecs ? Like a k8s configmap.

faint-oil-7535

03/23/2020, 7:01 AM

This is probably pretty simple, but just getting started with Pulumi using AWS ECS Fargate / ECR / Build of docker image. Have a look at this Typescript code, and then tell me: As this is doing my docker build for me and deploying it to my repo, is there a way to specify the tags I want applied to my built and pushed docker image? And if the answer is "It's not posisble" all good. I just want to make sure I'm not missing something.

SampleEcsContainerDefinition_ts.ts

astonishing-gpu-12842

03/23/2020, 6:08 PM

First time user, attempting to get a sample project up into aws but running into a problem with pulumi up. Using windows 10 (probably not the best approach) and the deploy seems to stall. Tried leaving it for hours with no luck. Anyone seen this type of hanging? Just stops at the line below.

I0322 22:24:05.056101   11760 plan_executor.go:391] planExecutor.retirePendingDeletes(...): no pending deletions
I0322 22:24:05.056101   11760 plan_executor.go:215] planExecutor.Execute(...): waiting for incoming events
I0322 22:24:05.056101   11760 step_executor.go:321] StepExecutor worker(-2): worker coming online
I0322 22:24:05.056101   11760 step_executor.go:321] StepExecutor worker(-2): worker waiting for incoming chains
I0322 22:24:06.757562   11760 eventsink.go:60] Registering resource: t=pulumi:pulumi:Stack, name=assettracking-testing, custom=false
I0322 22:24:06.757562   11760 eventsink.go:63] eventSink::Debug(<{%reset%}>Registering resource: t=pulumi:pulumi:Stack, name=assettracking-testing, custom=false<{%reset%}>)
I0322 22:24:06.762066   11760 eventsink.go:60] RegisterResource RPC prepared: t=pulumi:pulumi:Stack, name=assettracking-testing
I0322 22:24:06.762066   11760 eventsink.go:63] eventSink::Debug(<{%reset%}>RegisterResource RPC prepared: t=pulumi:pulumi:Stack, name=assettracking-testing<{%reset%}>)
I0322 22:24:06.762567   11760 source_eval.go:793] ResourceMonitor.RegisterResource received: t=pulumi:pulumi:Stack, name=assettracking-testing, custom=false, #props=0, parent=, protect=false, provider=, deps=[], deleteBeforeReplace=<nil>, ignoreChanges=[], aliases=[], customTimeouts={0 0 0}
I0322 22:24:06.762567   11760 source_eval.go:147] EvalSourceIterator produced a registration: t=pulumi:pulumi:Stack,name=assettracking-testing,#props=0
I0322 22:24:06.762567   11760 plan_executor.go:219] planExecutor.Execute(...): incoming event (nil? false, <nil>)
I0322 22:24:06.762567   11760 plan_executor.go:364] planExecutor.handleSingleEvent(...): received RegisterResourceEvent
I0322 22:24:06.762567   11760 step_generator.go:493] Planner decided to create 'urn:pulumi:testing::assettracking::pulumi:pulumi:Stack::assettracking-testing' (inputs=map[])
I0322 22:24:06.762567   11760 step_executor.go:321] StepExecutor worker(-2): worker received chain for execution
I0322 22:24:06.762567   11760 step_executor.go:321] StepExecutor worker(-2): worker waiting for incoming chains
I0322 22:24:06.762567   11760 step_executor.go:321] StepExecutor worker(0): launching oneshot worker
I0322 22:24:06.762567   11760 step_executor.go:321] StepExecutor worker(0): applying step create on urn:pulumi:testing::assettracking::pulumi:pulumi:Stack::assettracking-testing (preview true)
I0322 22:24:06.762567   11760 step_executor.go:321] StepExecutor worker(0): step create on urn:pulumi:testing::assettracking::pulumi:pulumi:Stack::assettracking-testing retired
I0322 22:24:06.762567   11760 source_eval.go:825] stripping unknowns from RegisterResource response for urn urn:pulumi:testing::assettracking::pulumi:pulumi:Stack::assettracking-testing
I0322 22:24:06.762567   11760 source_eval.go:835] ResourceMonitor.RegisterResource operation finished: t=pulumi:pulumi:Stack, urn=urn:pulumi:testing::assettracking::pulumi:pulumi:Stack::assettracking-testing, #outs=0
I0322 22:24:06.764569   11760 eventsink.go:60] RegisterResource RPC finished: resource:assettracking-testing[pulumi:pulumi:Stack]; err: null, resp: urn:pulumi:testing::assettracking::pulumi:pulumi:Stack::assettracking-testing,,,,
I0322 22:24:06.764569   11760 eventsink.go:63] eventSink::Debug(<{%reset%}>RegisterResource RPC finished: resource:assettracking-testing[pulumi:pulumi:Stack]; err: null, resp: urn:pulumi:testing::assettracking::pulumi:pulumi:Stack::assettracking-testing,,,,<{%reset%}>)

bitter-zebra-93800

03/24/2020, 2:33 AM

Hi all, trying to set up an alb to route traffic to an ec2 instance but its not working. Looking in the AWS web UI I see that the target shows the message “Target is in an Availability Zone that is not enabled for the load balancer”. In the target definition I have “availabilityZone: server.availabilityZone,” but thats clearly not working. Is there a good way to make sure the instance, alb and target all land in the right azs?

busy-magician-57137

03/24/2020, 10:07 AM

Hey all. First time user here. So far its been a smooth easy setup. I've got a few questions but my first one is around

awsx.ec2.Vpc.fromExistingIds

. If I start a new stack, the

up

command preview is planning to

create

this existing vpc resource. I went ahead anyway fingers crossed. When I run the

destroy

command, the preview is telling me its planning on destroying the existing resource.

busy-magician-57137

03/24/2020, 10:09 AM

Is this correct behaviour? I feel like existing resources shouldn't have create/destroy plans.