Unable to open AWS Control Tower Setup console page
Hello,
I am unable to open the AWS Control Tower Setup console page. It stays on the welcome screen without redirecting, and the “Set up landing zone” button is greyed out.
Steps I have tried:
- Closed and reopened the AWS console
- Switched to ap-southeast-1 region
- Retried from different browsers and accounts
The issue still persists. Could you please help to check? Thanks.
- Più recenti
- Maggior numero di voti
- Maggior numero di commenti
Hey !
Kindly verify if the advanced tracking protection is enabled on the browsers.
If you are still facing issues even after that please reach out to us via Support Case with the HAR files from the browser.
This issue with AWS Control Tower setup could be related to service limits or account readiness. Here are some potential solutions:
-
Service Limits: New AWS accounts often have hidden limitations that prevent Control Tower from launching successfully. Even though your account might show standard service quotas, there can be underlying restrictions for new accounts.
-
Run an EC2 Instance: A common solution is to launch a free tier EC2 instance (such as Amazon Linux AMI on a t2.micro) in your management account, wait about 15-20 minutes, and then retry the Control Tower setup. This helps establish account credibility with AWS systems.
-
Check for Existing Roles: Ensure you don't have an existing IAM role named 'AWSControlTowerAdmin' in your account. If present, you may need to remove it as Control Tower needs to create this role itself during setup.
-
Check Organization Structure: If you have multiple accounts in your AWS Organization, ensure all member accounts (except the management account) are properly assigned to an Organizational Unit (OU) and not directly under the root.
-
Clean Up Failed Resources: If you've attempted to set up Control Tower before, check for and clean up any failed CloudFormation stacks with names like AWSControlTowerBP-, S3 buckets named like aws-controltower-logs-, or CloudWatch log groups.
-
Open a Support Case: Even without a paid support plan, you can open a free support case by choosing "Account and Billing" in the AWS Support Center Console to get assistance with this issue.
After implementing these solutions, try accessing the Control Tower setup page again.
Sources
ControlTower - Your existing service limits for this AWS account are not sufficient for AWS Control Tower to launch. | AWS re:Post
Control Tower set up landing zone problem | AWS re:Post
AWS Control Tower cannot create an account because you have reached the limit on the number of accounts in your organization. | AWS re:Post
I have downloaded and attached the HAR file as requested. However, I noticed that the attachment size is limited to 5MB, which seems too restrictive since HAR files can easily exceed this size when capturing full browser interactions.