Is gov-Cloud supported?

[Nano803]

Hello,
Can we use AWS-instance-scheduler on AWS Gov-Cloud region? The script is showing ARN errors when deploying it.

Thanks

[arieleeuw]

We did not verify the stack for deployment in GovCloud, but as as far I can see the required services are available (might need to double check)

Without having the output I can almost certainly say that the deployment fails because of the name of the zip file for the Lambda function, which has a region prefix, as CloudFormation requires that the zip file must be in a bucket as the same region as the stack is deployed. As you deploy it in Gov-Cloud there is no bucket for that region. I can check with PM if this is possible.

In the mean time as a work around you can download the template from this url

https://s3.amazonaws.com/solutions-reference/aws-instance-scheduler/latest/instance-scheduler.template

As well as the zip file

> aws s3 cp s3://solutions-eu-west-1/aws-instance-scheduler/latest/instance-scheduler-2.10.0.25.zip instance-scheduler-2.10.0.25.zip

This zip file contains the code of the Lambda function. You then copy the file to a bucket in your region. In the cloudformation template line 1425

               "Code": {
                    "S3Bucket": {
                        "Fn::Join": [
                            "-", 
                            [
                                "solutions", 
                                {
                                    "Ref": "AWS::Region"
                                }
                            ]
                        ]
                    },
                    "S3Key": "aws-instance-scheduler/latest/instance-scheduler-2.10.0.25.zip"

change name of the bucket you copied the zip file to

               "Code": {
                   "S3Bucket": <your bucket name>, 
                    "S3Key": "instance-scheduler-2.10.0.25.zip"

Hope this will work for you for now

[robertcurcio]

Here are the steps for GovCloud:

• Copy the instance scheduler zip from the solutions bucket to your AWS commercial IAM role profile:
  aws s3 cp aws-instance-scheduler/latest/instance-scheduler-2.10.0.25.zip . --profile commercial

• Upload the instance scheduler zip using your AWS GovCloud IAM role profile:
  aws s3 cp instance-scheduler-2.10.0.25.zip s3://<mygovcloudbucket>/aws-instance-scheduler/latest/ --profile govcloud

• Within the CloudFormation template, find and replace arn:aws to arn:aws-us-gov

• Remove any autoscaling from the "resources" section of the cloud formation template. They seemed to be causing errors as I was troubleshooting.

• Remove the join for the s3 bucket, and hard code the "s3bucket" : "your bucket name"

Code": {
                    "S3Bucket": "mybucketname",
                    "S3Key": "instance-scheduler-2.10.0.25.zip"

• Next, you will see this error in the Cloudwatch logs:

Running EC2 scheduler for account 12345678 in region(s) us-gov-west-1
ERROR : us-gov-west-1 is not a valid region name

• Solution: Go to Lambda, then the auto scheduler instance, then open the instance_scheduler.py, Line 91

     # valid regions for service
91         self._valid_regions = boto3.Session().get_available_regions(service.service_name)

Change to:

 91      self._valid_regions = "us-gov-west-1"

[HewittJC]

To anyone who might stumble on this, the above from @robertcurcio worked well for me.

The only modification to make is that the version of the scheduler has updated to:

instance-scheduler-2.2.2.0.zip

Also worth noting that you will need to have a regular AWS account to pull the code. I had to use aws configure to login to our standard account to pull then again to log back in to GovCloud to push the zip to our bucket.

[robertcurcio]

@HewittJC Thanks Jake

[robertcurcio]

@arieleeuw

[arieleeuw]

Thanks, great work

[autoist]

So I'm trying to follow the steps outlined above but am getting a strange error when try to download the zip file. I run the following:
aws s3 cp s3://aws-instance-scheduler/latest/instance-scheduler-2.2.2.0.zip .
and get the following error message:
fatal error: An error occurred (403) when calling the HeadObject operation: Forbidden

I'm signed to a standard (not govcloud) account. Any suggestions on how I can get the zip file downloaded?

-Autoist (Stephen)

[autoist]

I also tried:
aws s3 cp s3://solutions-reference/aws-instance-scheduler/latest/instance-scheduler-2.2.2.0.zip .

This is the same location where I can download the .template file successfully.
aws s3 cp s3://solutions-reference/aws-instance-scheduler/latest/instance-scheduler.template .

[arieleeuw]

Hi, Can you try if the following URL works for you? aws s3 cp s3://solutions-eu-west-1/aws-instance-scheduler/latest/instance-scheduler-2.2.2.0.zip

…

On 15 Nov 2018, at 20:37, Stephen Malcolm ***@***.***> wrote: aws s3 cp s3://solutions-reference/aws-instance-scheduler/latest/instance-scheduler-2.2.2.0.zip

[autoist]

That did the trick, Thanks!

[jlpl1999]

aws s3 cp s3://solutions-eu-west-1/aws-instance-scheduler/latest/instance-scheduler-2.2.2.0.zip. Not existed. Is the file has removed from s3 location

[jlpl1999]

When run the cf stack using this link: https://s3.amazonaws.com/solutions-reference/aws-instance-scheduler/latest/instance-scheduler.template with the modification suggested. Error ROLL BACK at "SchedulerConfigHelper": {
"Type": "Custom::ServiceSetup",
?
Any ideas?

[hznhwp]

Thanks all for the help to get template to complete installing in govcloud. However when I run the scheduler, getting the following error in the log Scheduler-ec2-673914604898-us-gov-east-1-20190304
INFO : Running EC2 scheduler for account xxxxxxxxx898 in region(s) us-gov-east-1
ERROR : us-gov-east-1 is not a valid region name
I did not put a region name in the template, to let it default to the current region? That region name matches the url of what I see in the cloudwatch monitor and ec2, etc.

Any Ideas?

Scheduler template ran and completed following robertcurcio post, except I did not do/understand how to "Remove any autoscaling from the "resources" section of the cloud formation template". Also pulled instance-scheduler-2.2.2.0.zip from Commercial AWS once I found instead of the version mentioned.

[hznhwp]

Has anybody had the scheduler "working" in the gov cloud? To remove all differences from robertcurcio post I downloaded his github, uploaded to s3 his GitHub version of scheduler zip, and provisioned it asis on us-gov-west-1, as I continued to have having issues using newer us-gov-east-1. I still have same symptom, the region (defaulting to nothing in the template execution) is not a valid region name?

INFO : Running EC2 scheduler for account xxxxx in region(s) us-gov-west-1
ERROR : us-gov-west-1 is not a valid region name

[hznhwp]

Ignore my previous post. I see I missed his explicit after-cloudformation-update in lambda to the .py