The Network Orchestration for AWS Transit Gateway solution automates the process of setting up and managing transit networks in distributed AWS environments. It creates a web interface to help control, audit, and approve (transit) network changes.
This is an account that had it's aws-transit-network-orchestrator-hub stack deleted. I removed the old resources (TGW with all attachments) and recreated the stack.
Now I'm getting the following error
An error occurred (AccessDenied) when calling the AssumeRole operation: User: arn:aws:sts::123456789012:assumed-role/TransitNetworkOrchestratorSMLambdaRole-eu-west-1/TransitNetworkOrchestratorSMLambda is not authorized to perform: sts:AssumeRole on resource: arn:aws:iam::123456789012:role/TransitNetworkExecutionRole-eu-west-1
The TransitNetworkOrchestratorSMLambda policy inside arn:aws:iam::123456789012:role/TransitNetworkOrchestratorSMLambdaRole-eu-west-1 is unchanged, see below. It explicitly includes the sts:AssumeRole action that it is complaining about.
Any ideas on how to fix a broken STNO?
This is an account that had it's
aws-transit-network-orchestrator-hub
stack deleted. I removed the old resources (TGW with all attachments) and recreated the stack.Now I'm getting the following error
The
TransitNetworkOrchestratorSMLambda
policy insidearn:aws:iam::123456789012:role/TransitNetworkOrchestratorSMLambdaRole-eu-west-1
is unchanged, see below. It explicitly includes the sts:AssumeRole action that it is complaining about. Any ideas on how to fix a broken STNO?