1 Respuesta
- Más nuevo
- Más votos
- Más comentarios
1
This is a difficult situation with some manual steps.
- log into the account as root to change the account name
- manually move the account out of the OU Control Tower placed it in, under root our an OU not enrolled by Control Tower
- Delete (Terminate) the Service Catalog product
- re-enroll the account into the landing zone.
respondido hace un año
Contenido relevante
- OFICIAL DE AWSActualizada hace un año
- OFICIAL DE AWSActualizada hace 2 años
- OFICIAL DE AWSActualizada hace un año
- OFICIAL DE AWSActualizada hace 2 años
Thanks! I needed elevated privilege higher than the SSO user that created the account to complete the task. The SSO user that created the account in Service Catalog does not have access to do stuff in the AWS Organization. This is a good workaround though. I appreciate.