AWS control Tower setup failed

0

I am getting the following error while creating a landing zone with Control Tower:

AWS Control Tower failed to set up your landing zone completely: AWS Control Tower failed to deploy stack(s): arn:aws:cloudformation:us-east-1:058264521814:stack/AWSControlTowerBP-BASELINE-CLOUDTRAIL-MASTER/23d0fde0-c3b5-11ee-af84-0e7e2c57393b.To continue, review the failed stack(s) and try again.

Any idea how this can be fixed? Thanks.

Giri
질문됨 4달 전450회 조회
2개 답변
1

The most common cause of the error "AWS Control Tower failed to set up your landing zone completely: AWS Control Tower failed to deploy stack(s): arn:aws:cloudformation:us-east-1:058264521814:stack/AWSControlTowerBP-BASELINE-CLOUDTRAIL-MASTER/23d0fde0-c3b5-11ee-af84-0e7e2c57393b" is misconfigured KMS key policy used while configuring ControlTower.

When you enable KMS encryption on Control Tower, you need to update the KMS Key policy to allow Config and CloudTrail services access to the key.

As this is initial setup the CloudFormation stack "arn:aws:cloudformation:us-east-1:058264521814:stack/AWSControlTowerBP-BASELINE-CLOUDTRAIL-MASTER/23d0fde0-c3b5-11ee-af84-0e7e2c57393b" must be in failed rollback status. You may need to cleanup the stack"AWSControlTowerBP-BASELINE-CLOUDTRAIL-MASTER", and try setting up the landing zone again.

AWS
merinkj
답변함 한 달 전
0

Hi, There are a number of reasons why AWS Control Tower Landing Zone will fail during setup, the most common issues are documented here - https://docs.aws.amazon.com/controltower/latest/userguide/troubleshooting.html

That error you shared does not have not enough information to determine the root cause (we only know that stack is deploying the CloudTrail in that account) so you will need to look at the events in the failed CloudFormation stack to identify why it failed and then resolve that issue.

AWS
Akin
답변함 4달 전

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠