SecurityHub member accounts stuck in "Enabling in process" for over a day

Question

I delegated management responsibility of Security Hub from my Control Tower management account to another account and, using a user with admin privileges in that account, enabled Security Hub, auto-enrolled new accounts, and clicked "Enroll" to enroll all existing accounts in my organization. For over 24 hours, all of those accounts have been stuck in a "Enabling in process" status. Is there anything I can do to resolve this? I feel like it shouldn't take this long to enroll member accounts.

Ely_K
vor 2 Jahren
What region were you seeing this behavior in? If you have an AWS Support account, filing a ticket would likely be the best bet here. This isn't expected behavior.

Answer

Do you have any Service Control Policies (SCPs) that may be blocking that action? Can you make sure that the prerequisites are met that are mentioned within the below link:
https://docs.aws.amazon.com/securityhub/latest/userguide/designate-orgs-admin-account.html

SecurityHub member accounts stuck in "Enabling in process" for over a day

Relevanter Inhalt