Stack creation fails with "API: s3:SetBucketEncryption Access Denied" error

[jayrao]

Describe the bug While launching this template, the nested stack "MieStack" fails with following error.

"API: s3:SetBucketEncryption Access Denied" for the resource Logical ID "DataplaneLogsBucket"

To Reproduce Just launch the stack in either regions and it throws the error. As stack gets rolled back and resources deleted, I cannot proceed further.

Expected behavior Stack should launch without any error.

Please complete the following information about the solution: (SO0163) - aws-media-insights-engine v3.0.2 for the nested stack (SO0042) - aws-content-analysis v2.0.0 for the root stack

• Region: [us-east-1 and us-west-2]
• [No] Was the solution modified from the version published on this repository?
• [n/a] If the answer to the previous question was yes, are the changes available on GitHub?
• [n/a] Have you checked your service quotas for the sevices this solution uses?
• [No] Were there any errors in the CloudWatch Logs?

[ianwow]

@jayrao Check to make sure you have admin access to the AWS account that you're using for this stack.

Also check to see if you can create a new S3 bucket, with server side encryption enabled, from the AWS web console.

[jayrao]

Thanks. It was an Organization SCP blocking permission to enable SSE on buckets.