Troubleshooting

• Useful log and event information sources

  • Where to find environment variables

  • Log files on the environment Amazon EC2 instances

  • CloudFormation Stacks

  • System failures due to an issue and reflected by Amazon EC2 Auto Scaling Group Activity

• Typical Amazon EC2 Console Appearance

  • Infrastructure hosts

  • Infrastructure hosts and virtual desktops

  • Hosts in a terminated state

  • Useful Active Directory (AD) related commands for reference

• Windows DCV debugging

• Find Amazon DCV Version Information

• Installation issues

  • CloudFormation stack fails to create with message "WaitCondition received failed message. Error:States.TaskFailed"

  • Email notification not received after CloudFormation stacks created successfully

  • Instances cycling or vdc-controller in failed state

  • Environment CloudFormation stack fails to delete due to dependent object error

  • Error encountered for CIDR block parameter during environment creation

  • CloudFormation stack creation failure during environment creation

  • Creation of external resources (demo) stack fails with AdDomainAdminNode CREATE_FAILED

• Identity management issues

  • I am not authorized to perform iam:PassRole

  • I want to allow people outside of my AWS account to access my Research and Engineering Studio on AWS resources

  • When logging into the environment, I immediately return to the login page

  • "User not found" error when trying to log in

  • User added in Active Directory, but missing from RES

  • User unavailable when creating a session

  • Size limit exceeded error in CloudWatch cluster-manager log

• Storage

  • I created file system through RES but it doesn't mount on the VDI hosts

  • I onboarded a file system through RES but it doesn't mount on the VDI hosts

  • I am not able to read/write on from VDI hosts

    • Example permission handling use cases

  • I created Amazon FSx for NetApp ONTAP from RES but it did not join my domain

• Snapshots

  • A Snapshot has a status of Failed

  • A Snapshot fails to apply with logs indicating that the tables could not be imported.

• Infrastructure

  • Load balancer target groups without healthy instances

• Launching Virtual Desktops

  • I need to launch / resume a large number of VDIs in the RES web portal

  • Login account for Windows Virtual Desktop is set to Administrator

  • Certificate expires when using external resource CertificateRenewalNode

  • A virtual desktop that was previously working is no longer able to connect successfully

  • I am only able to launch 5 virtual desktops

  • Desktop Windows connect attempts fail with "The connection has been closed. Transport error"

  • VDIs stuck in Provisioning state

  • VDIs get into Error state after launching

  • VDI session goes to a blank screen after logging in

• Virtual Desktop Component

  • Amazon EC2 instance is repeatedly showing terminated in the console

  • vdc-controller instance is cycling due to failing to join AD / eVDI module shows Failed API Health Check

  • Project does not appear in the pull down when editing the Software Stack to add it

  • cluster-manager Amazon CloudWatch log shows "<user-home-init> account not available yet. waiting for user to be synced" (where the account is a user name)

  • Windows desktop on login attempt says "Your account has been disabled. Please see your administrator"

  • DHCP Options issues with external/customer AD configuration

  • Firefox error MOZILLA_PKIX_ERROR_REQUIRED_TLS_FEATURE_MISSING

• Env deletion

  • res-xxx-cluster stack in "DELETE_FAILED" state and cannot be deleted manually due to "Role is invalid or cannot be assumed" error

  • Collecting Logs

  • Downloading VDI Logs

  • Downloading logs from Linux EC2 instances

  • Downloading logs from Windows EC2 instances

  • Collecting ECS logs for the WaitCondition error

• Demo environment

  • Demo environment login error when handling authentication request to identity provider

  • Demo stack keycloak not working

• Active Directory issues

  • My VDI is stuck in the provisioning state for a long time, or I cannot login my VDI as an AD user after the VDI is ready

  • I cannot login the RES web portal after configuring SSO

  • AD user cannot access the home directory using File Browser even after launching Linux VDIs successfully

  • AD admin user cannot access the Bastion Host after SSH access is enabled

  • View and manage my Active Directory deployed by RES external resource stack

• (2024.12 and 2024.12.01) Regex failure when registering a new Cognito user

• (2024.12.01 and earlier) Invalid bad cert error when connecting to VDI using a custom domain

• (2024.12 and 2024.12.01) Active Directory users cannot SSH to Bastion Host

• (2024.10) VDI auto stop broken for RES environments deployed in isolated VPCs

• (2024.10 and earlier) Failure to launch VDI for Graphic enhanced instance types

• (2024.08) Preparing Infrastructure AMI Failure

• (2024.08) Virtual desktops fail to mount read/write Amazon S3 bucket with root bucket ARN and custom prefixing

• (2024.06) Apply snapshot fails when the AD group name contains spaces

• (2024.06 and earlier) Group members not synced to RES during AD sync

• (2024.06 and earlier) CVE-2024-6387, RegreSSHion, Security Vulnerability in RHEL9 and Ubuntu VDIs

• (2024.04-2024.04.02) Provided IAM Permission Boundary not attached to the VDI instances' role

• (2024.04.02 and earlier) Windows NVIDIA instances in ap-southeast-2 (Sydney) fail to launch

• (2024.04 and 2024.04.01) RES delete failure in GovCloud

• (2024.04 - 2024.04.02) Linux virtual desktop may be stuck in the "RESUMING" status on reboot

• (2024.04.02 and earlier) Fails to sync AD users whose SAMAccountName attribute includes capital letters or special characters

• (2024.04.02 and earlier) Private key for accessing the bastion host is invalid