Facing Error:Network failure while creating RabbitMQ brokers using AmazonMQ

This error usually occurs when trying to create a broker instance using an IAM role that does not have all the required permissions. Therefore, kindly request you check the role that is being used and add the relevant permissions if needed, or assume another role/user which does have the permissions [1][2].

If you are then still observing any issues please capture the HAR file [3] of the Amazon MQ Console while creating the broker. This will have the request details along with the network activity which will help in investigating the problem experienced. Furthermore, as this is observed to be a “Network Failure” issue, would it also be possible to try creating the broker using another browser or after clearing the cache. Doing this will help us in isolating any browser or cache related issues.

[1] Troubleshooting: General - I created a broker but broker creation failed. - https://docs.aws.amazon.com/amazon-mq/latest/developer-guide/general.html#issues-creating-a-broker

[2] API authentication and authorization for Amazon MQ - IAM Permissions Required to Create an Amazon MQ Broker - https://docs.aws.amazon.com/amazon-mq/latest/developer-guide/security-api-authentication-authorization.html#security-permissions-required-to-create-broker

[3] How do I create a HAR file from my browser for an AWS Support case? - https://repost.aws/knowledge-center/support-case-browser-har-file

It might be Organizations Service Control Policies (SCP). Got the same Network failure error. But when I looked details of it in AWS CloudTrail. Got a bit more detailed error information: "...is not authorized to perform: mq:CreateBroker on resource: .... with an explicit deny" The proper tagging was required (at SCP level) for this operation.