1 Answer
- Newest
- Most votes
- Most comments
1
This is a difficult situation with some manual steps.
- log into the account as root to change the account name
- manually move the account out of the OU Control Tower placed it in, under root our an OU not enrolled by Control Tower
- Delete (Terminate) the Service Catalog product
- re-enroll the account into the landing zone.
answered a year ago
Relevant content
- asked 4 months ago
- AWS OFFICIALUpdated 2 years ago
- AWS OFFICIALUpdated 3 years ago
- AWS OFFICIALUpdated 2 years ago
- AWS OFFICIALUpdated a year ago
Thanks! I needed elevated privilege higher than the SSO user that created the account to complete the task. The SSO user that created the account in Service Catalog does not have access to do stuff in the AWS Organization. This is a good workaround though. I appreciate.