Front-End Web & Mobile

If I have a lambda acting as an AppSync client does it leave the network to do a DNS lookup of the AppSync url provided? I am guessing that if I use an ApolloClient it would need to but what about if you use the aws-sdk AppSyncClient? Trying to speed up calls that pass through a BFF and would love any input!

Hello, I have been approved for the AWS SES production environment. I need to add DKIM records to my domain, but the DKIM records I download from my AWS SES dashboard are incomplete according to my web host. Specifically one of the records i missing the "value". Please can you provide me the the 'value' for the DNS records below. The records below are the only records I was able to view/download from my AWS SES dashboard. Type,Name,Value TXT,_amazonses.team@info.domain.com, TXT,team@info.domain.com,amazonses:

Hello, Quick question regarding AWS SF: Can you have an SF with type Express and then use it as both Synchronous and Asynchronous? For example, we want it to be Synchronous if triggered by APIGW, but Asynchronous if triggered by a lambda (that is connected to an SQS)

Hi everybody, I wanna ask you about AWS Transcribe Analytics Call. API is well with AWS Transcribe but I need also sentiment Analysis, so I try to use AWS Transcribe Analytics. There is my code : ``` from __future__ import print_function import time import boto3 transcribe = boto3.client('transcribe', 'us-east-1') job_name = "my-first-call-analytics-job" job_uri = "PATH_S3_TO_WAV_WHO_HAD_WORD_FOR_AWS_TRANSCRIBE" output_location = "PATH_TO_CREATED_FOLDER" data_access_role = "arn:aws:s3:::MY_BUCKET_NAME_WHERE_WAV_FILES" transcribe.start_call_analytics_job( CallAnalyticsJobName = job_name, Media = { 'MediaFileUri': job_uri }, DataAccessRoleArn = data_access_role, OutputLocation = output_location, ChannelDefinitions = [ { 'ChannelId': 0, 'ParticipantRole': 'AGENT' }, { 'ChannelId': 1, 'ParticipantRole': 'CUSTOMER' } ] ) while True: status = transcribe.get_call_analytics_job(CallAnalyticsJobName = job_name) if status['CallAnalyticsJob']['CallAnalyticsJobStatus'] in ['COMPLETED', 'FAILED']: break print("Not ready yet...") time.sleep(5) print(status) ``` I had done aws configure and I use a IAM user who have AdministratorAccess. > **botocore.exceptions.ClientError: An error occurred (AccessDeniedException) when calling the StartCallAnalyticsJob operation: User: MY_ARN_USER is not authorized to access this resource** Any help please ? Thank you very much!

Hi, We have a (maybe) unique situation. Our company setup Amazon SES to send customer notifications, etc. This appears to be quite reliable! However, we have a potential issue that we hope we can resolve. We configured an MX record as required by Amazon. It is pretty simple to explain. We initially setup the MX records as required... mail.example.com (priority 5) And also: feedback-smtp.us-east-2.amazonses.com (priority 10) This exposes a potential issue: If we are receiving an email, and the server is rebooting for an update, or there is a temporary connection issue at the hosting provider, the server sending us the mail will then fall back to feedback-smtp.us-east-2.amazonses.com. But because there are a number of mailboxes in the company, there is no way we can receive mail at feedback-smtp.us-east-2.amazonses.com. We need it to not accept any connection, so the SMPT server that sent the mail will re-queue it and try to send it to us again. I deleted the MX Record to prevent this, then I got the message below from Amazon. "IMPORTANT: If Amazon SES cannot detect the required MX record in 3 days, you will no longer be able to use "example.com" as a MAIL FROM domain. Consequently, any verified identities that are configured to use this MAIL FROM domain will not be able to send emails unless they are configured to fall back to the Amazon SES default MAIL FROM domain." Is there any way to prevent feedback-smtp.us-east-2.amazonses.com from accepting any connection for incoming mail for our company, so it will not generate a permanent error? Yesterday there was an issue at our host with receiving connections from different regions (it appears). This caused Gmail to detect feedback-smtp.us-east-2.amazonses.com as our main server even though it was sent from mail.example.com, and it was bounced saying "The IP address sending this message does not have a 550-5.7.25 PTR record setup". In summary, is there a workaround to prevent Amazon from receiving mail should our regular server be rebooting or have a temporary connection issue. Hope this makes sense. Thanks, Steve

``` An error occurred (BadRequestException) when calling the GetExport operation: Cannot deserialize value of type `io.swagger.v3.oas.models.media.ObjectSchema` from Array value (token `JsonToken.START_ARRAY`) at [Source: UNKNOWN; line: -1, column: -1] (through reference chain: io.swagger.v3.oas.models.media.ArraySchema["items"]) (through reference chain: io.swagger.v3.oas.models.media.ObjectSchema["properties"]->java.util.LinkedHashMap["data"]) Action failed: see logs above for details ```

I there a way to add another attribute to the customer profile that appears in the CCP ? I see in the examples of the schema there is an Attribute object for holding misc values but cannot see where these can be set. I am using the CTR model and S3

Hi, I have created a Nodejs Lambda, which require header parameters. Lambda deployed by the 'serverless.yml' file and corresponding API Gateway created for all APIs with lambda proxy integration. When I execute those APIs with headers parameters it throws CORS error like this, Request header field 'abc' is not allowed by Access-Control-Allow-Headers in preflight response I have given 'Allow Headers' in entry component. app.use(function (req, res, next) { res.header("Access-Control-Allow-Origin", "*"); res.header("Access-Control-Allow-Methods", "GET,HEAD,OPTIONS,POST,PUT,DELETE"); res.header("Access-Control-Allow-Headers", "Content-Type"); next(); }); Is there any solution to pass headers ?

I am trying to control which event-bus an AWS Tracker goes onto. I looked at the API Docs and I did not see anything like an "event-bus" as part of it's parameters. In my testing it seems that the Event Bus rule uses the "default" bus every time for an "ENTER" or "EXIT" event. We use various event-bus' per environment. Is there any way I can configure my API call to point to a specific event-bus? Here is a sample snippet I am currently using: ``` var paramsUpdateTracker = { TrackerName: 'test-tracker', Updates: [ { DeviceId: 'fake-device-number', Position: [-90.22222,41.888888], SampleTime: new Date, } ] }; location.batchUpdateDevicePosition(paramsUpdateTracker, function(err: any, data: any) { if (err) { console.log(err, err.stack); } else { console.log(data); } }); ```

I am using AppSync as my API for my application. I would like a few basic features to be available to users who haven't signed in yet. I'm aware that it is possible to use IAM authentication and to create a temporary AssumeRole call to an unprivileged role and use that with IAM authorization, but I'd really much prefer to be able to designate certain resolvers are not requiring any authentication. Is this possible? If not, why not?

Hello, Is there any way to forward AWS CCP Streams logs to cloudwatch. Currently we can only get logs from client's machine. They have to download and send them to us. We want to forward logs from client side to cloudwatch so we dont need client downloaded logs. Thank you.

Hi, I am working on creating an Platform application which is mainly for employees of that organization. Internal in organization, they are using Microsoft AD for authentication purpose. So till now we decided to use AWS Cognito with federated identity. But they are using AWS SSO also. From some of blogs it seems like we can also utilize that AWS SSO for authentication purpose in our application. Is it the write understanding Please confirm, if so here are some more confusion : - 1. If we go on AWS SSO approach, do in that we need Cognito pool or not ?? 2. If we go on AWS SSO approach, do that aws sso return some JWT token that we can utilize on API Gateway layer for authenticating all APIs ?? Looking for quick response. If possible please share some relevant blogs/article ? Regards, Abhishek

Hi, We are trying to implement click-to-call functionality. For example, CRM D65 portal, let's say we have a number present on the customer information page on CRM D-365 page. After Clicking on the number, we should be able to call out that number using Amazon connect automatically. How we can achieve this functionality. Regards Harry

I created a React app that I want to deploy to AWS Amplify. I use automatic deployment through GitHub. The problem is that I get *access denied error* when I visit a specific URL path, other than the root path of the web app. For example, visiting `example.com/some-url` will cause an "AccessDenied" error. It seems that this is a [common issue with Amplify and SPAs](https://docs.aws.amazon.com/amplify/latest/userguide/redirects.html#redirects-for-single-page-web-apps-spa), and people set up redirects to `index.html` like so: ``` </^[^.]+$|\.(?!(css|gif|ico|jpg|js|png|txt|svg|woff|woff2|ttf|map|json|webp)$)([^.]+$)/> ``` However, this is not a solution for me, or at least is not working I want to, since I want users to access specific page paths directly. My `react-router-dom` code which handles the redirects looks something like this: return ( <React.Fragment> <BrowserRouter> <Routes> <Route path="/" element={ <React.Fragment> <Index /> </React.Fragment> } /> <Route path="some-url" element={ <React.Fragment> <SomethingElse/> </React.Fragment> } /> </Routes> </React.Fragment> </BrowserRouter> </Routes> Setting up a redirect to `index.html` as the documentation suggests causes all requests to just land to `index.html` which my React app only renders a blank page. Any help will highly be appreciated.

Per https://docs.aws.amazon.com/ses/latest/dg/receiving-email-receipt-rules-console-walkthrough.html, I should be able to see Configuration->Email Receiving In the navigation pane. However this option is not present. Is that because my account in a sandbox? Although documentation for the sanboxed account describes receiving capability.

Hey everyone... I could not find any documentation on this... so heres what i was wondering... Upon requesting to exit sandbox for SMS texting... the rejection response i keep on getting says... "your use case would impact the deliverability of our service"... I am wondering what exactly may cause this decision so i can promptly rectify the issue so i may exit sandbox. thank you, rob s

Hi, I have an **API-GW HTTP API** (in account A) that uses **IAM** auth. I'm trying to invoke that API using an **IAM role** from another account (account B) I'm getting 403 responses when trying to invoke the **API-GW** from account B. I'm able to successfully invoke it from its own account (account A). The IAM role in **account B** has the following **policy** ``` { "Version": "2012-10-17", "Statement": [ { "Action": "execute-api:Invoke", "Resource": [ "arn:aws:execute-api:*:ACCOUNT-A-ID:*" ], "Effect": "Allow" } ] } ``` I have a "CrossAccountInvocationRole" in **account A** with **Policy** ``` { "Version": "2012-10-17", "Statement": [ { "Sid": "VisualEditor0", "Effect": "Allow", "Action": "execute-api:*", "Resource": "arn:aws:execute-api:*:ACCOUNT-A-ID:*/*/*/*" } ] } ``` with **Trusted Entities** ``` { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Principal": { "AWS": [ "arn:aws:iam::ACCOUNT-B-ID:role/role-name" ] }, "Action": "sts:AssumeRole" } ] } ``` My **APIGW IAM Role in Account A** has the following **Policy** ``` { "Version": "2012-10-17", "Statement": [ { "Action": "sts:AssumeRole", "Resource": "arn:aws:iam::ACCOUNT-A-ID:role/CrossAccountInvocationRole", "Effect": "Allow" } ] } ``` and **Trusted entities** ```{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Principal": { "Service": "apigateway.amazonaws.com" }, "Action": "sts:AssumeRole" } ] } ``` I tried attaching the above policy to the Lambda that is invoked by API-GW as well To test, I used the AWS CLI `sts assume-role` to get credentials for the IAM role and then used those credentials in a Lambda in account B as well as the Postman application. Both gave me 403 errors. Question: 1. Is it even possible to do cross account invocation on an API GW HTTP API with IAM? 2. If yes, what an I doing wrong?

Hello, i have a query how to add working unsubscribe link in pinpoint email capaigns