วีดีโอ

Thank you so much! 🤩

Hi 😄 could you elaborate what exactly dosen't work? Isn't the SSL Certificate successfully validated in AWS Certificate Manger?

So true 😅 The only AWS managed policy that allows it (that I know of) is the "AmazonSQSFullAccess". Then again this way too wide of a policy to use in a production environment.

The ssl certificate itself (created using AWS Certificate Manager) is free, as far as I know😊

I’m glad you found it helpful😄 btw I have created an updated version of this video, which also includes how to set it all up using Terraform: th-cam.com/video/U9n6N56neuo/w-d-xo.html

Thank you so much! Great to see it was helpful!😄

That’s great you found it helpful 😄🙌🏼

Yes that’s right, I mention It as a prerequisite at 0:30 😄

When you regiter a domain from aws, it creates hostedzone automatically^ To those who're new to all purchasing domains. It will help you out. Look in the left panel of Route53 and you can find Register Domain option.

Yes that’s right, that way you also don’t need to manually register the name servers of your Hosted Zone with your domain prover. The reason why I didn’t register it with AWS was that it at that time were cheaper to register it elsewhere 😊

Thank you so much, I'm glad you liked It! 😄

Hi, I'm sorry for the late response. Thank you so much! 😄 Just to clarify, you have enabled the "Static website hosting" feature on tour S3 bucket and also want to use CloudFront? If this is the case, I would say that enabling the "Static website hosting" feature on the S3 bucket partially defeats the purpose of setting up CloudFront in front of your S3 bucket. This is because the content will then be available on the S3 bucket URL anyways (bypassing CloudFront all together) without you being able to restrict who can assess it. I would suggest using a private bucket (as in my video), and setting up CloudFront. You could also set up WAF (docs.aws.amazon.com/waf/latest/developerguide/cloudfront-features.html) to further limit who can assess the content. I hope this was helpful, and please let me know if I misunderstood your question 😄

I’m glad you found it helpful 😄

Thank you so much! 😄

Hi 😄 Yes It can be quite simple to do that for HTTP GET requests 🙌 Depending on your requirements, doing redirects for POST requests may not be as simple. Do you want your users to be redirected as a respons for your POST request (this can be achieved quite easily)? Or do you want the POST request itself to be redirected to another API?

@@EndreSynnes I wanted to modify the parameters they sent in their POST request and return a redirect with the updated params so they would make an updated POST request. In the end, I just did it for them and returned the response. But I'm still curious if it's possible to say 'naw, send your POST request here instead of to me. '

@@deemon710 I see, my initial thought is that you have to handle this on the client/front-end🤔 I’m not sure a web browser is “smart enough” to perform the same POST request to another API given a 3xx response by itself 😅 Alternatively if you control both domains for the two applications, I guess you could just point the old domain to the new application as well, using for example Route53? Then again you wouldn’t be able to manipulate the parameters before hitting the new API. Unless you intend use a lambda function (or similar) to forward the http request to the new API🙈

Thank you so much!😄 That sounds like an interesting assignment, especially that you are using AWS to do that😄 Thank you, it's great to see that people find my videos helpful!

Hi😄 What do you mean without the “hello”? The default root object: hello.html points to the hello.html inside the S3 bucket. You can of course change this to any file you want inside your S3 bucket😊 If you don’t set a default root object in CloudFront, then your user have to specify it when accessing your website (which isn’t ideal)😅 Please let me know if I misunderstood what you meant😊

Thank you so much! 😄 Thank you for the suggestions, I will look into these AWS services using Terraform in future videos 😄

Hi 😄 I would also like that, but the only way to do that (that I have seen), is to first call the "get_queue_url" function: boto3.amazonaws.com/v1/documentation/api/latest/reference/services/sqs/client/get_queue_url.html

Hi 😄 I'm sorry for the late response. What do you mean you're not able to get HTTPS? Have you made use of the certificate in for example your CloudFront distribution or API Gateway?

Hi, I'm sorry the late respons. Were you able to figure out the issue? It's hard for me to tell what the issue could be without seeing the configuration, but It may be some missing permissions where CloudFront can't access the S3 content. I will be publishing a new video replacing this one today (11am CET). It will among other things contain an update regarding how CloudFront access content in S3.

Thank you so much!😄

Thank you so much!😄

Hi, I'm sorry for the late response. Thanks for the question and explanation of your setup. Still, it's kind of hard to know exactly where this can go wrong since there are a lot of services and config in play 🤔 Did you manage to figure out the issue?

Thank you so much!😄

Thank you so much!😄 I’m not sure exactly what you mean, do wonder if you can perform CRUD operations to an Aurora RDS database from a lambda function, or do you want a lambda function to somehow listen to CRUD operations against an RDS database performed by some other application? Please let me know if I misunderstood 😄

I’m glad you found it helpful 😄

Hi, I assume you mean having multiple sub domains registered to one CloudFront distribution? I haven't done that for a long time myself, but as I recall there shouldn't be any reason why you can't just add another sub-domain under "Alternate domain name (CNAME)", as long as the certificate you are using also include that sub-domain😄 Please let me know if this was unclear or if you have any issues with this 😄

Thank you so much! I'm glad it was helpful 😄

Never mind. Found the answer. Needed to delete the aliased record with the domain name and recreate with the CloudFront

I see, great that you figured it out 😄🙌🏼

Thank you🤩 I’m thinking about making more infrastructure as code videos in the future😄

Thank you so much! I’m glad you found it helpful😄

Thank you!😄

Hi😄 Just to clarify; you have a DynamoDB table where the phone numbers are stored, and want to send SMS to each one of them?

@@EndreSynnes Thank you for replying to me. Yes, I have a Dynamodb where the mobile numbers are stored. Using those numbers I want to send the Sms to those people whose details are available in the Dynamodb table. In the message I want to share some other information that is present in the Dynamodb table. For example: Hello Mr.Deo We got the subscription fee of 499 on 19/12/23. Thank you. So the above information need to be updated in the message these informations are stored in the database. Sir please tell if it is possible to do it in AWS.

Hi, thank you so much!😄 Usually it takes a few minutes (maybe 5-10), but it could also take a couple hours. If it’s not valid by now (and you have followed all the steps mentioned in the video), I would assume there is a validation issue.

Thank you so much 🙌🏼😄

Hi😄 Sorry for the late response, but yes you won't find OAI in the menu anymore. Since uploading this video, AWS have replaced OAI with OAC. I will create a new video using OAC sometime in the future, but for now, I recommend reading this blog post from AWS: aws.amazon.com/blogs/networking-and-content-delivery/amazon-cloudfront-introduces-origin-access-control-oac/ I hope this was helpful😄

Thank you so much, I will look into it!😄

Hi😄 I see, I haven't tried it with a Wordpress site myself, but did you manage to get a valid certificate for your domain? In other words, does it say it's valid in AWS Certificate Manager? 😄

Hi, I'm sorry for the late response. Thank you for the request, but I currently don't do freelance work. I will gladly make videos on topics that you, my viewers suggest, and I will gladly try to answer any question related to my videos here on TH-cam 😄

Thank you so much! 😄

Yes, as shown in the video from 4:40 and onwards 😄 You could also manually create the Hosted Zone CNAME records by copying the values from the columns CNAME name and CNAME value. This way you can validate a certificate even if the Hosted Zone isn't in the same AWS account as the certificate 😄

@@EndreSynnes sure, but considering few people here had issues with timeouts, i suppose they had watched in the same manner as I did and forgot to set it up😅

That's true, there have been some questions regarding validation issues 😅 Hopefully this thread will be helpful for some 😄

how many time do u had have to wait for the validation?

Thank you so much! 😄 Yes the documentation isn't always that good 😅

Thank you 😄 Yes you are right, I didn't make use of the domain or certificate in this video. This video was only intended to show how to deploy a hosted zone (domain) and how to create and validate a certificate for that domain. How to enable HTTPS on your applications depends on how the application is deployed. Therefore I have created separate videos on this, both for API Gateways (th-cam.com/video/JKI0td7QXTQ/w-d-xo.html) and CloudFront distributions (th-cam.com/video/M0GfSXr75iU/w-d-xo.html). Keep in mind that CloudFront have had some updates since I uploaded this video, so I will create a new one at some point. Still it's highly relevant and could be used as a guide for enabling HTTPS. I hope this was somewhat clarifying? 😄

Sorry for the late response! Thank you so much! 😄 Well, this may be a bit complicated to answer in a TH-cam comment, but I'll try 😅 There is of course several ways to solve this (also if you really need to have sequential processing), but one way could be: First to have a Lambda function that triggers on upload to S3 and only stores a record containing the filename, upload-timestamp and a status ("new_file") in a DynamoDB table. Then maybe another function that looks for the oldest files (by timestamp) with status "new_file" and starts processing it from S3. Once finished processing the file, update the DynamoDB record with status as complete. Also, it could after that look for other records with status "new_file" and send an event which trigger the processing of the next record, until all records are marked as "complete". This may not be the best solution, but It may work if I understood your use case correctly😄

Hi 😄 I assume you mean sending to multiple SNS topics from one Lambda function? In that case, I haven't tried that myself, but I can't see any reason why you shouldn't be able to do that. I guess you could just use the Boto3 library as I have done here, and just send to multiple SNS topics. Then again what is the use case for this? Maybe EventBridge could be an alternative, with custom rules depending on the content of each message/record?

Thank you so much! 🤩 I'm glad you enjoyed it 🙌 No, I haven't created any Udemy course yet, but I may look into that in the future 😄