- Newest
- Most votes
- Most comments
Based on the error you're experiencing, there are several potential causes for AWS Application Migration Service (AWS MGN) appearing to initialize successfully but not actually being initialized:
Service Control Policy or Organizations Restrictions: If your AWS account is part of an AWS Organization, Service Control Policies (SCPs) might be restricting the initialization actions. You should check with your organization administrator to verify that no SCPs are blocking MGN-related actions.
Trusted Access Requirements: To use AWS MGN, particularly with AWS Organizations, you must activate trusted access for the service. This requires logging in as the management account, selecting Global view from the navigation menu, and enabling AWS Organizations service access. Without proper trusted access configuration, the service may not initialize correctly even if the CLI command returns success.
Permissions Issues: The most common cause of this error is insufficient permissions. You must be the administrator of your AWS Account to initialize AWS MGN. If you're not the admin user, you'll encounter initialization failures even if the CLI command appears to succeed. The initialization process requires specific IAM permissions that may not be present in your current role or user.
Recommended Steps:
- Verify you're using an administrator account with full permissions
- Check for any Service Control Policies in AWS Organizations that might be blocking MGN actions
- Ensure trusted access is enabled for MGN in AWS Organizations (service principal: mgn.amazonaws.com)
- Review your IAM policies to confirm they allow all necessary MGN initialization actions
The discrepancy between the successful CLI response and the actual initialization failure suggests a permissions or organizational policy issue rather than a technical failure of the service itself.
Sources
Activate trusted access for AWS Application Migration Service - Application Migration Service
How do I troubleshoot when User: arn is no authorized to perform Create * or Delete * or Update * on resource(s) because no identity- policy allows the actions | AWS re:Post
Troubleshooting launch errors - Application Migration Service
Based on your error - UninitializedAccountException - your account has not been setup. You need to wait sometime and retry. If you have setup the account using Landing Zone, it's possible though the account is created, it's in a stuck state.
Relevant content
- asked 8 months ago
