1 Risposta
- Più recenti
- Maggior numero di voti
- Maggior numero di commenti
1
This is a difficult situation with some manual steps.
- log into the account as root to change the account name
- manually move the account out of the OU Control Tower placed it in, under root our an OU not enrolled by Control Tower
- Delete (Terminate) the Service Catalog product
- re-enroll the account into the landing zone.
con risposta un anno fa
Contenuto pertinente
AWS UFFICIALEAggiornata un anno fa- AWS UFFICIALEAggiornata 2 anni fa
- AWS UFFICIALEAggiornata un anno fa
- AWS UFFICIALEAggiornata 3 anni fa
Thanks! I needed elevated privilege higher than the SSO user that created the account to complete the task. The SSO user that created the account in Service Catalog does not have access to do stuff in the AWS Organization. This is a good workaround though. I appreciate.