search

aws-solutions / aws-control-tower-customizations

The Customizations for AWS Control Tower solution combines AWS Control Tower and other highly-available, trusted AWS services to help customers more quickly set up a secure, multi-account AWS environment using AWS best practices.
https://docs.aws.amazon.com/controltower/latest/userguide/cfct-overview.html
Apache License 2.0
354 stars 205 forks source link

CfCT Deployment Failed in bahrain #163

Closed josukuttyulahannan closed 1 year ago

josukuttyulahannan commented 1 year ago

Describe the bug CloudFormation Stack Failed When deployed in bahrain region(me-south-1)

While deploying cfct in my landing zone in bahrain region, its giving me this error:

Resource handler returned message: "Your access has been denied by S3, please make sure your request credentials have permission to GetObject for control-tower-cfct-assets-prod-me-south-1/customizations-for-aws-control-tower/v2.5.3/custom-control-tower-state-machine.zip. S3 Error Code: AccessDenied. S3 Error Message: Access Denied (Service: Lambda, Status Code: 403, Request ID: b48a7d09-e4c8-432e-956f-0ec1a42d14c5)" (RequestToken: 0b2cb020-5cf2-8b17-b4c3-06499dbccb84, HandlerErrorCode: AccessDenied)

At the same time it is working fine for other regions, ap-south-1, eu-west-1

To Reproduce Upload the template in bahrain

Expected behavior CfCT stack successfully deployed

Please complete the following information about the solution:

To get the version of the solution, you can look at the description of the created CloudFormation stack. For example, "(SO0089) - customizations-for-aws-control-tower Solution. Version: v1.0.0". You can also find the version from releases

Screenshots If applicable, add screenshots to help explain your problem (please DO NOT include sensitive information).

Additional context Add any other context about the problem here.

hanafya commented 1 year ago

Hey @josukuttyulahannan! Thank you for bringing this to our attention! me-south-1 is only supported in v2.6.0 of CFCT. You will need to upgrade to v2.6.0. Please see, https://github.com/aws-solutions/aws-control-tower-customizations/releases/tag/v2.6.0

josukuttyulahannan commented 1 year ago

Hey @josukuttyulahannan! Thank you for bringing this to our attention! me-south-1 is only supported in v2.6.0 of CFCT. You will need to upgrade to v2.6.0. Please see, https://github.com/aws-solutions/aws-control-tower-customizations/releases/tag/v2.6.0

@hanafya Thank you for the quick response. CfCT is working fine in Bahrain now !