aws-solutions / aws-control-tower-customizations

The Customizations for AWS Control Tower solution combines AWS Control Tower and other highly-available, trusted AWS services to help customers more quickly set up a secure, multi-account AWS environment using AWS best practices.
https://docs.aws.amazon.com/controltower/latest/userguide/cfct-overview.html
Apache License 2.0
354 stars 205 forks source link

CAPABILITY_NAMED_IAM Error #172

Closed bilbaose closed 9 months ago

bilbaose commented 9 months ago

Description

I am executing a customization that must create some users and policies to attach to the users. I'm executing it and fails the execution with the message:

Running aws cloudformation validate-template on xxxxx.yaml { "Parameters": [], "Description": "Creates the roles and users", "Capabilities": [ "CAPABILITY_NAMED_IAM" ], "CapabilitiesReason": "The following resource(s) require capabilities: [AWS::IAM::ManagedPolicy, AWS::IAM::User]" }

To reproduce:

Create a customization that creates a policy and a user

Expected behavior:

Execute the customization and create the users and policies

Solution Information: