awslabs / landing-zone-accelerator-on-aws

Deploy a multi-account cloud foundation to support highly-regulated workloads and complex compliance requirements.
https://aws.amazon.com/solutions/implementations/landing-zone-accelerator-on-aws/
Apache License 2.0
562 stars 448 forks source link

Control Tower deployment with LZA in seperate pipeline account #630

Open bharatwadhwaCEVO opened 2 weeks ago

bharatwadhwaCEVO commented 2 weeks ago

I'm experiencing an issue when attempting to deploy the AWS Control Tower using the Landing Zone Accelerator (LZA) with a separate pipeline account. The deployment fails during the prerequisites validation step, and I receive the following error message:

Error Message | error | runner | AWS Organization validation has 1 issue(s): AWS Control Tower Landing Zone cannot deploy because there are multiple accounts in AWS Organizations. Error: AWS Organization validation has 1 issue(s): AWS Control Tower Landing Zone cannot deploy because there are multiple accounts in AWS Organizations.

Steps to Reproduce Set up a separate pipeline account for the LZA Control Tower deployment. Attempt to deploy the Control Tower using the LZA. Observe the error message during the prerequisite validation phase.

Expected Behavior The Control Tower should deploy successfully without any validation errors regarding AWS Organizations.

Actual Behavior The deployment fails due to an error indicating that multiple accounts exist in AWS Organizations, which prevents the Control Tower from deploying.