I'm working on a Node app that has been uploaded as a Docker image to ECR and which runs as part of an ECS cluster and which connects to DynamoDB.
We can't debug the app locally -- we haven't been able to get the connection from Loopback to DynamoDB Local to work, but that's another story -- and so I thought perhaps I could use Cloud Debugging. I don't know much about Cloud Debugging, but I wanted to try it out to see if it would help with our use case.
I installed the AWS Toolkit for WebStorm (https://plugins.jetbrains.com/plugin/11349-aws-toolkit/) and have tried to start using Cloud Debugging. I have up-to-date credentials (shared credentials stored in ~/.aws/credentials), but it appears my role doesn't have the correct permissions. (see image)
Our AWS administrator wants to know exactly what permissions I need. The only information I could find was here https://docs.aws.amazon.com/toolkit-for-jetbrains/latest/userguide/key-tasks.html#key-tasks-install, but our administrator said that that asks for me to have administrator permissions, which he won't give me.
I received this answer earlier today: it would seem that the help link in the plugin points to the wrong page. The correct one, with the correct information, is here .
Related
While trying to execute a query on local emulator using Java client API, I am getting the following error -
com.google.cloud.spanner.SpannerException: PERMISSION_DENIED: com.google.api.gax.rpc.PermissionDeniedException: io.grpc.StatusRuntimeException: PERMISSION_DENIED: Caller is missing IAM permission spanner.sessions.create on resource projects/test-project/instances/test-instance/databases/testdatabase.
How can I provide this user the capability to create a session on local spanner emulator?
The Cloud Spanner emulator does not implement any IAM and requires you to connect to it without any credentials, so this error seems at first sight to indicate that either:
You are not connected to the emulator after all, and this error is coming from a the real Cloud Spanner.
You have connected to the emulator with credentials.
Would you mind sharing the part of your code that is creating the connection?
First of all make sure that you've followed the following steps to configure your local environment appropriately. Basically make sure that all the Cloud Spanner related APIs are enabled and run the following command:
gcloud auth application-default login
By making sure that the account used for authentication has a role with enough permissions as described on the Access Control documentation. The Cloud Spanner Database Admin should allow you to issue your query, but you can create a custom role if you think that the permissions granted by the mentioned predefined role are too much.
The official documentation advises to create a separate gcloud configuration and making sure that you set the SPANNER_EMULATOR_HOST environment variable is set in the following way (check the correct info here:
export SPANNER_EMULATOR_HOST=localhost:9010
does anyone know how do i give permission from my project in GCP to a function created and deployed in firebase? Because what i'm doing is the following:
From a site (deployed also in firebase) y call to the backend (Firebase Function)
The function itself, tries to get resources from my GCP project (in specific what instances are currently running)
Then, i receive them and show on the front.
The step 2 is causing my problems, currently when i'm trying to run it, it gives me the error:
Error: could not handle the request and in the log from firebase function i got: GaxiosError: Required 'compute.instances.list' permission for 'projects/projectID' so i know for sure that's a problem of authorization.
All this project worked just well 2 months ago, but my free trial expired and we tried to move to another GCP account and try to finish this project (With this i know the code works just right, the problem is for sure GCP because also, when i use others API ENDPOINTS not related to GCP resources, they work just well).
Any recomendation would be amazing, and if i didn't gave enough info just tell me. Thanks u for your time
Add an IAM role containing the required permission to the Cloud Function service account.
For example the role roles/compute.viewer has the permission compute.instances.list.
Review this page to learn more about Compute Engine IAM roles:
Compute Engine IAM roles and permissions
Firebase Functions are Cloud Functions. Cloud Functions uses the App Engine default service account for access control. The format of the service account's name is: PROJECT_ID#appspot.gserviceaccount.com. Find that service account under IAM and add the role mentioned above.
Cloud Functions Access Control
I am trying to use google cloud speech API in microsoft azure machine(Where I have installed asterisk service). Is it possible to do this. Because in GCP we have an option where we can enable 'Allow all cloud API services'. But in microsoft we do not have an option to enable. If I use I am getting the following error. Please go through the staktrace and help me.
Note : we have a working version in GCP machine. Now I am deploying it into microsoft vm(Then only I am getting this error).
An API can be called over the internet. If the machine is configured to be able to connect to the internet than yes, you can.
Looking at the error you're getting, it looks like there's something wrong with your authentication setup.
DefaultCredentialsError: Could not automatically determine credentials. Please set GOOGLE_APPLICATION_CREDENTIALS or explicitly create credentials and re-run the application.
For more information, please see https://cloud.google.com/docs/authentication/getting-started
If you follow the instructions in the linked documentation on Getting Started with Authentication, you should be good to go.
Seams like i answered same less than week ago.
Please check that you setuped credentials for asterisk user, not for root. Asterisk is running under asterisk user.
Installed the Azure Functions Runtime as per the instructions here:
https://learn.microsoft.com/en-in/azure/azure-functions/functions-runtime-install
Configured all the things including the SQL etc correctly.
After doing that when to the https://localhost and tried to create a new Azure functions App.
When trying to create the Azure Functions App, it fails. I verified the Azure Functions Host Activation Service and the Docker Service are running.
Below is the error when trying to create the functions App from the local box:
For me, this issue was actually caused by WebDAV handler not allowing PUT verb. After I allowed all verbs in IIS for FunctionsAPI, it works like a charm.
You can use F12 in your web browser to help identify the root cause of the issue by going through the steps of creating a new function app.
Please check in the following Windows Event log for any errors on the Functions Management Role:
Microsoft-Windows-FunctionsRuntime/Operational
If you don't see any information there, please follow this instructions to capture a trace for the FunctionsAPI website with status code 400-999:
https://learn.microsoft.com/en-us/iis/troubleshoot/using-failed-request-tracing/troubleshooting-failed-requests-using-tracing-in-iis
I am currently trying to deploy a cloud service to Windows Azure but I get the following error message:
"Could not retrieve the list of cloud services.[...]"
Details can be seen on the picture.
It seems to me that VS couldn't find an existing service role in the subscription but my service is available and running, I just can not deploy a new version there.
A few days ago it worked correctly. Any Idea would be appreciated.
Thank you!
After hours of Certificate generation, messing with azure toolkit, etc. I figured out that the problem was that somehow my computer tried to resolve the azure DNS to localhost because Fiddler got crazy and the proxy that Fiddler uses, haven't stopped even after restarting my computer.
I faced same problem, when trying to deploy to azure while fiddler is running. Simply closing fiddler solve the problem.
Go to the previous screen, there will be an option of connecting to Azure using your credentials. Select your subscription and you will be able to download a file to your local machine. That file contains your subscription info as well as the keys. Once you open that file through this wizard, you will be able to publish to your services. You must create cloud services first before you do that.