☁️ AWS Errors

49 error notes

Fixing the AWS EventBridge 'Permission Denied' Error for Lambda

The service principal events.amazonaws.com does not have permission to invoke the resource: arn:aws:lambda:region:account-id:function:function-name

aws-eventbridgeaws-lambdaiam-policydevops

awsintermediate

Stopping the Throttle: Fixing Kinesis ProvisionedThroughputExceededException

ProvisionedThroughputExceededException: Rate exceeded for shard shardId-000000000000 in stream <stream-name> under account <account-id>.

awskinesisthrottlingdata-streams

awsbeginner

Fix: 'This stack uses assets' Error in AWS CDK

Error: This stack uses assets, so the toolkit stack must be deployed to the environment (Run "cdk bootstrap aws://<account-id>/<region>")

awscdkdevopscloudformation

awsintermediate

Fixing AWS ExpiredTokenException in CI/CD Pipelines

An error occurred (ExpiredTokenException) when calling the ListBuckets operation: The security token included in the request is expired

awsstsiamboto3

awsintermediate

Why Your AWS ACM Certificate is Stuck in 'Pending Validation' (and How to Fix It)

Validation timed out. The status of this certificate request is Pending validation.

aws-acmroute53ssl-certificatedns-validation

awsintermediate

Fixing AWS ElastiCache Redis Error 111: Connection Refused on Port 6379

Error 111 connecting to cluster.xxxxx.cache.amazonaws.com:6379. Connection refused.

elasticacheredissecurity-groupvpc

awsintermediate

Fix AccessDeniedException: User s3.amazonaws.com is Not Authorized to Perform lambda:InvokeFunction

An error occurred (AccessDeniedException) when calling the Invoke operation: User: s3.amazonaws.com is not authorized to perform: lambda:InvokeFunction on resource

awslambdas3iam-policy

awsintermediate

Fix API Gateway: Execution failed due to configuration error: Invalid permissions on Lambda function

Execution failed due to configuration error: Invalid permissions on Lambda function

api-gatewaylambdaiamaws-troubleshooting

awsintermediate

Fixing AWS KMS AccessDeniedException: Why Your IAM Permissions Aren't Enough

AccessDeniedException: User: arn:aws:iam::123456789012:role/MyRole is not authorized to perform: kms:Decrypt on resource: arn:aws:kms:ap-northeast-1:123456789012:key/abc-123

awskmsiamsecurity

awsintermediate

Fixing CloudFront 502 Errors: When the SSL Handshake Fails

502 Bad Gateway: CloudFront was unable to establish a secure connection with the origin server.

cloudfront502-bad-gatewayssl-handshakeaws-troubleshooting

awsintermediate

Fixing AWS Athena HIVE_CURSOR_ERROR: Row is not a valid JSON object

HIVE_CURSOR_ERROR: Row is not a valid JSON object

aws-athenas3jsontroubleshooting

awsintermediate

Fix AWS Cognito 'Refresh Token has expired' and Stop Random Logouts

NotAuthorizedException: Refresh Token has expired

awscognitosecurityauthentication

awsintermediate

Fixing AWS Lambda 'Code uncompressed size is greater than max allowed size' during deployment

An error occurred (InvalidParameterValueException) when calling the UpdateFunctionCode operation: Code uncompressed size is greater than 262144000 bytes

aws-lambdadeploymentserverless

awsbeginner

Fixing AWS Step Functions States.HeartbeatTimeout: Why Tasks Fail at 60 Seconds

States.HeartbeatTimeout: State machine execution failed: Task timed out after 60 seconds

awsstep-functionslambdaserverless

awsintermediate

Fixing AWS VPC Peering: Resolving 'Request timeout' and 'No route to host'

Request timeout for icmp_seq — no route to host across VPC peering connection

awsvpcpeeringnetworking

awsintermediate

Fix 'InsufficientInstanceCapacity' Error When Launching or Starting EC2 Instances

An error occurred (InsufficientInstanceCapacity) when calling the RunInstances operation: We currently do not have sufficient capacity in the Availability Zone you requested.

awsec2capacitydevops

awsbeginner

Fix AWS CLI 'RequestExpired' Error Caused by System Clock Skew

RequestExpired: Request has expired. (Service: AmazonS3; Status Code: 403, Error Code: RequestExpired)

aws-clitime-syncntpauthentication

awsintermediate

Fix 'connect: No route to host' on AWS EC2 — Missing Internet Gateway or NAT Gateway

connect: No route to host

awsvpcec2internet-gateway

awsintermediate

Recovering from AWS RDS 'storage-full': Immediate Fixes and Long-term Prevention

DB instance is in storage-full state. The instance may not be able to accept connections or perform writes.

awsrdsstoragedatabase

awsintermediate

Fixing AWS ECR Push Error: 'no basic auth credentials'

Error response from daemon: no basic auth credentials

ecrdockerauthenticationaws-cli

awsintermediate

Fixing the EKS 'Unauthorized' Error: Kubeconfig and IAM Troubleshooting

error: You must be logged in to the server (Unauthorized)

ekskubectlkubeconfigiam

awsintermediate

Fixing Boto3 ThrottlingException: Handle 'Rate exceeded' Errors in AWS Python Scripts

ThrottlingException: Rate exceeded

throttlingboto3apiaws

awsintermediate

Fix AWS CloudFront 403 ERROR on S3 Origin — OAC Bucket Policy Not Configured

403 ERROR: The request could not be satisfied. Request blocked. We can't connect to the server for this app or website at this time.

cloudfronts3oacbucket-policy

awsintermediate

Fix AWS S3 403 Forbidden: HeadObject Operation Blocked by Bucket Policy or ACL

An error occurred (403) when calling the HeadObject operation: Forbidden

awss3bucket-policyacl

awsintermediate

Fix AWS Elastic Beanstalk Deploy Failed: WSGIPath Does Not Exist & Health Check Severe

ERROR: Your WSGIPath refers to a file that does not exist. / Instance deployment failed. For details, see 'eb-engine.log'. / Environment health has transitioned from Ok to Severe

awselastic-beanstalkhealth-checkdeploy

awsintermediate

Fix AWS ECS ResourceInitializationError: unable to retrieve ecr registry auth

ResourceInitializationError: unable to pull secrets or registry auth: execution resource retrieval failed: unable to retrieve ecr registry auth: service call has been retried 3 time(s): RequestError: send request failed

ecsecrdockeriam

awsintermediate

Fix AWS CodeDeploy Deployment Failed: Script at specified location failed to complete in 300 seconds

Script at specified location: scripts/before_install.sh failed to complete in 300 seconds

codedeploydeploymentlifecycle-hooktimeout

awsintermediate

Fixing SQS Duplicate Messages and ReceiptHandleIsInvalidException

com.amazonaws.services.sqs.model.ReceiptHandleIsInvalidException: The input receipt handle is not a valid receipt handle (Service: AmazonSQS; Status Code: 404)

aws-sqsvisibility-timeoutdistributed-systemscloudwatch

awsintermediate

Fix AWS Secrets Manager EndpointConnectionError: Could Not Connect to Endpoint URL (VPC Endpoint Missing)

EndpointConnectionError: Could not connect to the endpoint URL: https://secretsmanager.us-east-1.amazonaws.com / ConnectionError: HTTPSConnectionPool: Max retries exceeded

awssecrets-managervpcendpoint

awsintermediate

Fixing AWS CloudWatch AccessDeniedException on PutLogEvents

An error occurred (AccessDeniedException) when calling the PutLogEvents operation: User: arn:aws:sts::123456789012:assumed-role/MyAppRole is not authorized to perform: logs:PutLogEvents on resource: arn:aws:logs:us-east-1:123456789012:log-group:/aws/lambda/my-func:*

awscloudwatchiamtroubleshooting

awsbeginner

Fixing the AWS API Gateway CORS Error: 'No Access-Control-Allow-Origin' Header

Access to fetch at 'https://xxxxxxxx.execute-api.ap-northeast-1.amazonaws.com/prod/resource' from origin 'https://example.com' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource.

api-gatewaycorslambdaaws

awsbeginner

Fix AWS Lambda 'Runtime.ImportModuleError: No module named requests' When Deploying Without Dependencies

Runtime.ImportModuleError: Unable to import module 'lambda_function': No module named 'requests'

lambdapythonlayersdeployment

awsbeginner

Fix AWS SES MessageRejected: Email Address Not Verified (Sandbox Mode)

MessageRejected: Email address is not verified. The following identities failed the check in region US-EAST-1: recipient@example.com

sesemailsandboxsmtp

awsbeginner

Fix AWS CLI Error 'InvalidClientTokenId': The Security Token Included in the Request is Invalid

An error occurred (InvalidClientTokenId) when calling the GetCallerIdentity operation: The security token included in the request is invalid.

awscliiamaccess-key

awsintermediate

Fix ProvisionedThroughputExceededException in AWS DynamoDB

ProvisionedThroughputExceededException: The level of configured provisioned throughput for the table was exceeded. Consider increasing your provisioning level with the UpdateTable API.

dynamodbthroughputcapacityaws

awsintermediate

Fix AWS ALB 503 Service Unavailable: No Healthy Targets in Target Group

503 Service Temporarily Unavailable - No healthy upstream

albec2health-checkload-balancer

awsbeginner

Fix AWS S3 NoSuchBucket Error: An error occurred (NoSuchBucket) when calling the operation

An error occurred (NoSuchBucket) when calling the operation

awss3bucketnotfound

awsintermediate

Fix CloudFormation "The stack is in an UPDATE_ROLLBACK_FAILED state and can not be updated"

The stack is in an UPDATE_ROLLBACK_FAILED state and can not be updated.

AWSCloudFormationstackrollback

awsintermediate

Fix AWS Lambda "Task timed out after 3.00 seconds" Error

Task timed out after 3.00 seconds

awslambdatimeoutfunction

awsintermediate

Fix AWS RDS "FATAL: too many connections for role" Error

FATAL: too many connections for role

awsrdsconnectionpostgresql

awsintermediate

Fix AWS S3 Error: Your proposed upload exceeds the maximum allowed object size

Your proposed upload exceeds the maximum allowed object size.

AWSS3uploadsize limit

awsintermediate

Fix EC2 "Instance reachability check failed" (1/2 Status Checks Failed)

Instance reachability check failed (1/2 status checks failed)

AWSEC2status checktroubleshooting

awsintermediate

Fix InvalidParameterValue: The instance type is not supported in this region (AWS EC2)

InvalidParameterValue: The instance type is not supported in this region

awsec2instanceregion

awsintermediate

Fixing AWS AccessDenied: An error occurred (AccessDenied) when calling the operation: Access Denied

An error occurred (AccessDenied) when calling the operation: Access Denied

☁️ AWS Errors

Fixing the AWS EventBridge 'Permission Denied' Error for Lambda

Stopping the Throttle: Fixing Kinesis ProvisionedThroughputExceededException

Fix: 'This stack uses assets' Error in AWS CDK

Fixing AWS ExpiredTokenException in CI/CD Pipelines

Fixing DynamoDB TransactionConflictException: When Transactions Collide

Fixing AWS Lambda's [Errno 28]: How to Handle the 512MB /tmp Limit

Fix EC2 Can't Mount EFS: mount.nfs4: Connection timed out

Fixing the 'Essential container in task exited' Error in AWS ECS Fargate

Fixing AWS Glue OOM: Resolving 'java.lang.OutOfMemoryError: Java heap space'

Why Your AWS ACM Certificate is Stuck in 'Pending Validation' (and How to Fix It)

Fixing AWS ElastiCache Redis Error 111: Connection Refused on Port 6379

Fix AccessDeniedException: User s3.amazonaws.com is Not Authorized to Perform lambda:InvokeFunction

Fix API Gateway: Execution failed due to configuration error: Invalid permissions on Lambda function

Fixing AWS KMS AccessDeniedException: Why Your IAM Permissions Aren't Enough

Fixing CloudFront 502 Errors: When the SSL Handshake Fails

Fixing AWS Athena HIVE_CURSOR_ERROR: Row is not a valid JSON object

Fix AWS Cognito 'Refresh Token has expired' and Stop Random Logouts

Fixing AWS Lambda 'Code uncompressed size is greater than max allowed size' during deployment

Fixing AWS Step Functions States.HeartbeatTimeout: Why Tasks Fail at 60 Seconds

Fixing AWS VPC Peering: Resolving 'Request timeout' and 'No route to host'

Fix 'InsufficientInstanceCapacity' Error When Launching or Starting EC2 Instances

Fix AWS CLI 'RequestExpired' Error Caused by System Clock Skew

Fix 'connect: No route to host' on AWS EC2 — Missing Internet Gateway or NAT Gateway

Recovering from AWS RDS 'storage-full': Immediate Fixes and Long-term Prevention

Fixing AWS ECR Push Error: 'no basic auth credentials'

Fixing the EKS 'Unauthorized' Error: Kubeconfig and IAM Troubleshooting

Fixing Boto3 ThrottlingException: Handle 'Rate exceeded' Errors in AWS Python Scripts

Fix AWS CloudFront 403 ERROR on S3 Origin — OAC Bucket Policy Not Configured

Fix AWS S3 403 Forbidden: HeadObject Operation Blocked by Bucket Policy or ACL

Fix AWS Elastic Beanstalk Deploy Failed: WSGIPath Does Not Exist & Health Check Severe

Fix AWS ECS ResourceInitializationError: unable to retrieve ecr registry auth

Fix AWS CodeDeploy Deployment Failed: Script at specified location failed to complete in 300 seconds

Fixing SQS Duplicate Messages and ReceiptHandleIsInvalidException

Fix AWS Secrets Manager EndpointConnectionError: Could Not Connect to Endpoint URL (VPC Endpoint Missing)

Fixing AWS CloudWatch AccessDeniedException on PutLogEvents

Fixing the AWS API Gateway CORS Error: 'No Access-Control-Allow-Origin' Header

Fix AWS Lambda 'Runtime.ImportModuleError: No module named requests' When Deploying Without Dependencies

Fix AWS SES MessageRejected: Email Address Not Verified (Sandbox Mode)

Fix AWS CLI Error 'InvalidClientTokenId': The Security Token Included in the Request is Invalid

Fix ProvisionedThroughputExceededException in AWS DynamoDB

Fix AWS ALB 503 Service Unavailable: No Healthy Targets in Target Group

Fix AWS S3 NoSuchBucket Error: An error occurred (NoSuchBucket) when calling the operation

Fix CloudFormation "The stack is in an UPDATE_ROLLBACK_FAILED state and can not be updated"

Fix AWS Lambda "Task timed out after 3.00 seconds" Error

Fix AWS RDS "FATAL: too many connections for role" Error

Fix AWS S3 Error: Your proposed upload exceeds the maximum allowed object size

Fix EC2 "Instance reachability check failed" (1/2 Status Checks Failed)

Fix InvalidParameterValue: The instance type is not supported in this region (AWS EC2)

Fixing AWS AccessDenied: An error occurred (AccessDenied) when calling the operation: Access Denied