Is it just me or is shockingly difficult to get a simple ECS

Question

Is it just me or is shockingly difficult to get a simple ECS fargate RDS lambda web app deployed

millions-furniture-75402 · Answer

What has been your approach so far

better-baker-47643 · Answer

basically combining the various tutorials

better-baker-47643 · Answer

better-baker-47643 · Answer

this error is classic ``` WARN A duplicate Security Group rule was found on sg 0a0f3c5fc91f75c92 This may be a side effect of a now fixed Terraform issue causing two security groups with identical attributes but different source security group ids to overwrite each other in the state See <https github com hashicorp terraform pull 2376> for more information and instructions for recovery Error InvalidPermission Duplicate the specified rule peer 0 0 0 0 0 TCP from port 443 to port 443 ALLOW already exists status code 400 request id 5db2e46f 244c 4009 b179 46ae45b85150```

little-cartoon-10569 · Answer

That s not specific to any of the techs you mentioned initially That problem generally occurs for me when I change the Pulumi name of a security group rule

little-cartoon-10569 · Answer

Changing the name of a rule means it s a new rule in Pulumi s eyes It will delete the old rule and create the new one Unfortunately it creates the new rule first which causes it to conflict with the old rule

little-cartoon-10569 · Answer

The way I usually fix this is to comment out the rule that is having its name changed and run `pulumi up` This deletes the rule with the old name You can then put the code back in and run `pulumi up` again which puts the rule back with the new name

little-cartoon-10569 · Answer

Try to avoid renaming SG rules and NACL rules and probably a few other similar entities as the process is annoying

better-baker-47643 · Answer

thanks I ve worked through this one I guess my point is that it just seems like there is a huge lack of sensible defaults what i m doing is pretty standard it smells wrong that it takes a few hundred lines of configuration

better-baker-47643 · Answer

then your trapped with a security group that Pulumi requires you to delete but RDS wont let you delete

little-cartoon-10569 · Answer

RDS is a bit of a pain when it comes to configuration We have a multi AZ SQL server instance and our playbooks list which properties we must change when it s up which must be changed when it s stopped and which require turning off multi AZ in order to change sob

better-baker-47643 · Answer

i wonder if some of these issues would go away if i migrated to the awsnative provider off of classic

little-cartoon-10569 · Answer

Good question The closer you are to the AWS SDKs the less likely some unassuming convenience code sneaks up and hits you in the back of the head

better-baker-47643 · Answer

so AWS AppRunner was what I was looking for would have saved two days of fighting with fargate if i found it monday shrug

powerful-furniture-83753 · Answer

doing literally the same stuff in our stack and what i will say is this isn t really on pulumi Renaming security groups and any of the nitty gritty inside VPCs is tricky Even in AWS If it s still in your test stack just tear it down and recreate it it s much easier Plus when you ask nicely here people are generally really helpful