add ca-west-1 to list of known regions

aws-samples / aws-secure-environment-accelerator

The AWS Secure Environment Accelerator is a tool designed to help deploy and operate secure multi-account, multi-region AWS environments on an ongoing basis. The power of the solution is the configuration file which enables the completely automated deployment of customizable architectures within AWS without changing a single line of code.

Apache License 2.0

725 stars 233 forks source link

add ca-west-1 to list of known regions #1218

Closed rjjaegeraws closed 7 months ago

rjjaegeraws commented 7 months ago

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

Add ca-west-1 to the list of known regions to pass config validation phases.

jvescio-ssc commented 5 months ago

The accelerator does not work when adding ca-west-1 to :

"global-options\supported-regions"
"replacements\addl_regions[a-c]"

Results:

The run fail because macie doesn't exist in ca-west-1 (we needed to exclude it in macie-excl-regions)
Needed to manually enable ca-west-1 in all accounts
Needed to manually enable sts Service tokens in ca-west-1 and global in all accounts
Keys and policies were not being pushed to the new regions in the accounts.

rjjaegeraws commented 5 months ago

There are other considerations in addition to the ones listed (e.g. AWS Config rules). We are working on publishing a guide with sample configuration snippets to demonstrate how to get ca-west-1 configured.