Why Does a User Not Have Access to a VPC when The Configuration Appears to Allow For Connectivity?

Problem scenario
A user has no access to a VPC from her workstation. What are three ways a user can be given access to resources in a VPC?

Four Possible, Independent Solutions

  1. Network Access Control lists. These are IP address firewalls for the VPCs themselves. Based on the IP address of the user’s workstation, Network Access Control lists can allow or disallow traffic to the VPC.

How Do You Troubleshoot the Error “DNS: A new record cannot be created. Refused.”?

Problem scenario
Using Windows Server and Active Directory, you try to add a PTR record to a Reverse Lookup Zone. You get “DNS: A new record cannot be created. Refused.” What do you do?

Possible Solution #1
Click “Ok” to the pop up. Continue where you were interrupted. The error message should be ignorable (other than the fact that you have to click “Ok” to the pop-up itself and the window to create a New Resource Record).

How Do You Add Multiple DNS A Records in Active Directory Using a File?

Problem scenario
You want to create multiple A records in DNS. But to do it manually using the MMC would take too long. What should you do?

Solution

  1. Open the MMC and browse Active Directory. On the left the name of the A.D. server should be fairly obvious (e.g., contint or foobarsrv).
  2. Open PowerShell as an administrator.

How Do You Use the AWS CLI to View the Targets of Routes in Route Tables in a VPC?

Problem scenario
You have a VPC with route tables. You want to search the targets to find a given value. What should you do?

Solution
As of early 2020, the output of aws describe-route-tables –filters –route-table-id abcd1234 –region us-west-2 will not include the word “target”. The value of the target in the JSON output will be the ID of the given target.

Why Would Boto3 Not Show a Peering Connection That the AWS CLI Shows?

Problem scenario
You have found an AWS CLI command that shows you output consistent with the console. You run this:

aws ec2 describe-vpc-peering-connection –region us-west-2 | grep pcx-abcd1234

The results show you a peering connection called pcx-abcd1234

You run this from a Python3 interpreter prompt:

import boto3
foo = boto3.resource(‘ec2’)
foo.describe_vpc_peering.connections()
print(foo)

You then search the output for pcx-abcd1234. You do not see it.

How Is Traffic Routed when a Browser Goes to a URL and the Website is Powered by a Kubernetes Cluster?

Question
You have been asked to explain how an external request for a website is routed and ultimately fulfilled by a pod in Kubernetes via an ingress controller. When a web browser downloads a website via HTTP and the website is running from a Kubernetes cluster, how does an individual container provide the HTML and/or data? How is external traffic routed to an underlying pod in a Kubernetes Cluster?

How Do You Troubleshoot “ssh connect to host x.x.x.x port 22: No route to host” on Oracle VirtualBox on a VirtualBox VM?

Problem scenario
You are using Oracle VirtualBox. You get “ssh connect to host x.x.x.x port 22: No route to host”. What do you do?

Solution
In Oracle VirtualBox, go to Devices -Network -Network Settings. Is it attached to “Internal Network”? Try attaching it to “Bridged Adapter” instead.