Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
22 changes: 22 additions & 0 deletions docs/pages/application-access/cloud-apis/aws-console.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -443,6 +443,28 @@ instance and attach an IAM role to it.

(!docs/pages/includes/aws-no-credential-provider.mdx service="Application"!)

### `the read limit is reached` error when updating AWS lambda function

Teleport enforces a 10MB size limit for each HTTP request's body.
You may encounter this error when updating an AWS lambda function using
`tsh aws update-function-code --function-name myfunction --zip-file ./file.zip`
if `file.zip` is larger than 10MB.

AWS also limits zip file size to 50MB.
Comment thread
GavinFrazar marked this conversation as resolved.
You can workaround this issue in the same way you would work around AWS's direct
upload size limit: upload your lambda function archive to an s3 bucket,
and then update your lambda function by referencing the s3 bucket instead of
uploading an archive directly:

```code
# create an s3 bucket
$ tsh aws s3 mb s3://mybucket
# upload function to the bucket
$ tsh aws s3 cp ./file.zip s3://mybucket/path/to/file.zip
# update your lambda function by using the s3 bucket
$ tsh aws lambda update-function-code --function-name myfunction --s3-bucket mybucket --s3-key path/to/file.zip
```

## Next steps

- Take a closer look at [role-based access controls](../controls.mdx).
Expand Down
14 changes: 14 additions & 0 deletions docs/pages/application-access/troubleshooting-apps.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -153,3 +153,17 @@ This configuration is available under the `jwt_claims` property of the
application's `rewrite` configuration. See
[Web Application Access](./guides/connecting-apps.mdx#configuring-the-jwt-token)
for details.

## Request too large

Teleport enforces a 10MB size limit for the body of each HTTP request.
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

do we enforce the 10MB on regular HTTP app? i though we only rewrite body for AWS/Azure/GCP.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

hmm, I'll check. I thought we enforced this in a lot of places


### Symptom

When attempting to connect to an HTTP app behind Teleport, you see an error
that states *the read limit is reached*.

### Solution

If your application supports sending requests with chunked encoding, use that
to break up large requests into smaller chunks.