Fix EKS error not authorized to perform: sts:AssumeRoleWithWebIdentity in AWS
The EKS error not authorized to perform: sts:AssumeRoleWithWebIdentity means AWS Security Token Service rejected the pod's attempt to e...
Category: AWS
DynamoDB Query Multiple Keys: Why IN and OR Fail in KeyConditionExpression, "Query Key Condition Not Supported" and "Missed Key Schema Element" Decoded, BatchGetItem, Parallel Query and PartiQL
A DynamoDB Query reads one partition key value at a time; that is the rule behind ValidationException: Query key condition not supported a...
Logeshwaran.C
CloudWatch Logs Subscription Filter to Lambda: Setup, the Permission That Breaks It, Filter Patterns, the 5-Filter Limit, the 10-Minute Disable, Recursion Loops and Every "Not Triggering" Cause
A CloudWatch Logs subscription filter sends matching log events from a log group to a Lambda function, a Kinesis data stream, a Firehose st...
Logeshwaran.C
AWS Pricing Calculator: How to Use It (With an Example), the In-Console Calculator With Your Discounts, Why Estimates Run Low, Public Share Links That Expire, and the API
The AWS Pricing Calculator is AWS's free tool for estimating what services will cost before you build. There are actually two: the publ...
Logeshwaran.C
Amazon Redshift ODBC Driver 2.3: Download and Install on Windows, Mac and Linux, the Driver Name and Connection String, and Every Error Fixed (Including the Unix Socket One)
The Amazon Redshift ODBC driver lets Excel, Power BI, Tableau, SQL clients and your own code talk to Redshift. The current version is 2.3.0...
Logeshwaran.C
SQS Lambda Batch Size: 1 vs 10 vs 10,000, the Batching Window Rule, Visibility Timeout x6, Partial Batch Failures (and the Setting That Silently Ignores Them), and Scaling to 1,250
The batch size of an SQS trigger is the maximum number of messages Lambda passes to your function in one invocation. It defaults to 10 , ca...
Logeshwaran.C
CloudFront Content Security Policy and Security Headers Policy: Add CSP With a Response Headers Policy (or a CloudFront Function), the 1,783-Character Limit, and Why the Managed SecurityHeadersPolicy Has No CSP
To add a Content-Security-Policy (CSP) to a site served by CloudFront, create a response headers policy with your CSP under Security heade...
Logeshwaran.C
CloudWatch Alarm Not Sending Email or SNS Notifications: Unconfirmed Subscriptions, the Encrypted-Topic KMS Trap, Disabled Actions, and How to Test With set-alarm-state
If a CloudWatch alarm goes into ALARM but no email or SNS notification arrives , the cause is almost always one of five things: the email su...
Logeshwaran.C
Cognito Custom Attributes Not Showing in the ID Token: App Client Read Permissions, the custom: Prefix, Access Tokens, Strings Only, and the Default That Lets Users Edit Their Own
If an Amazon Cognito custom attribute is not showing in your ID token or in GetUser , the usual cause is the app client's read permissi...
Logeshwaran.C
boto3 Pagination: How to Use get_paginator With Examples (S3, SSM, DynamoDB, IAM), PaginationConfig, search(), and a Loop for the 716 Calls With No Paginator
boto3 pagination means fetching a long list from AWS in pages, because most list and describe calls return only part of the result per call...
Logeshwaran.C
How to Test AWS Lambda Locally (Python, Node.js, Docker and SAM): Why the Emulator Gives You 3 GB and 5 Minutes While Lambda Gives You 128 MB and 3 Seconds
You can test an AWS Lambda function locally in three ways, from fastest to most realistic: call the handler directly from a unit test with ...
Logeshwaran.C
CloudFront IP Address Ranges (October 2026): The List, Origin-Facing vs Edge IPs, the Managed Prefix List and Its Weight of 55, Static IPs, and the Real Viewer IP
CloudFront's IP address ranges are published by AWS in ip-ranges.json under the service name CLOUDFRONT . On October 24, 2026 that mea...
Logeshwaran.C
DynamoDB GSI Cost: Why One Write Can Cost 7 Units, the 100-Byte Storage Overhead, KEYS_ONLY vs INCLUDE vs ALL, Sparse Indexes, GSI vs LSI, and a Calculator
A DynamoDB global secondary index (GSI) costs you writes, storage and reads , separately from its table. Every time you write an item that b...
Logeshwaran.C
EC2 Instance Types and Pricing (October 2026): The Naming Code, Every Family, Price per Hour and Month, Graviton vs Intel vs AMD, Windows, Free Tier and How to Choose
Amazon EC2 instance types are the sizes of virtual server you can rent, and on October 24, 2026 there are 1,348 of them with a Linux price ...
Logeshwaran.C
DynamoDB Vector Search: How to Create a Vector Index and Use SearchVectors (CLI and Python), Pricing per GB, the Tenant-Isolation Trap, and Why DynamoDB Local Ignores It
Yes, DynamoDB supports vector search. Since August 5, 2026, you can add a vector index to a table and find the items most similar to a que...
Logeshwaran.C
AWS Overlapping CIDR Fix: Transit Gateway 1:1 NAT Setup, Why Both VPCs Need a Rule, the Route It Replaces, VPN and Direct Connect, Cloud WAN, Pricing and Every Limit
Since October 23, 2026, AWS Transit Gateway and AWS Cloud WAN can connect networks whose CIDRs overlap , without renumbering and without a N...
Logeshwaran.C
Java Security Update October 2026: Fixed Corretto Versions (21.0.13, 17.0.21, 25.0.5, 8u512), How to Update on Windows, Mac, Linux and Docker, and Why Amazon Linux 2023 and Lambda Are Not Patched Yet
The Java security update for October 2026 is out. Oracle's October Critical Patch Update fixes 55 vulnerabilities in Java SE , 49 of th...
Logeshwaran.C
Amazon Bedrock Web Search: Setup on bedrock-mantle, Domain Filtering, User Location, $12 per 1,000 Queries, IAM, and Why Fetch Fails Silently With AmazonBedrockFullAccess
Amazon Bedrock Web Search is a built-in tool that lets a model look things up on the web while it answers, then cite its sources. You enab...
Logeshwaran.C
Route 53 vs Cloudflare DNS: Pricing ($0.50 a Zone vs Free), Alias vs CNAME Flattening, Health Checks, Private Zones, Registrar, and When to Use Both
Route 53 vs Cloudflare for DNS: Cloudflare hosts your DNS for free on every plan, including unmetered queries, DNSSEC and CNAME flattenin...
Logeshwaran.C
ECS vs EKS (and Fargate): The Real Difference, Cost Comparison With 2026 Prices, the $438 EKS Extended Support Trap, Pros and Cons, and Which to Choose
ECS vs EKS : both run your containers on AWS, on EC2 instances or on Fargate, but Amazon ECS is AWS's own, simpler orchestrator with no...
Logeshwaran.C