Landing Zone Accelerator - TSE

Question

I am trying to deploy TSE-SE on the latest version of LZA 1.6.1.

I am getting the following error on the final 'Deploy' stage, on 'Security_Resources'

Resource handler returned message: "Resource of type 'AWS::Logs::LogGroup' with identifier '{"/properties/LogGroupName":"AWSAccelerator-sessionmanager-logs"}' already exists." (RequestToken: xxxxxx-xxxxxx-xxxx-xxxxx-xxxxxxxxx, HandlerErrorCode: AlreadyExists)

(Token values have been blanked out above)

I have removed the stack and the loggroup and reattempted the stage, still failing.

any ideas?

Thanks

Answer

Thanks for the reply!

This still didn't work. When the TSE-SE is deploying on the 'deploy' stage, it fails saying it doesn't exist but builds it few seconds later.

Then when you re-run the pipeline it says its already there.

I'm leaning towards a bug in the new 1.6.1 version of LZA.

Answer

To resolve the `Resource of type 'AWS::Logs::LogGroup' with identifier 'xxxxx' already exists` error when working with AWS resources like **CloudFormation**, follow these condensed steps:

1. Use the AWS Management Console, CLI, or SDKs to check if the `LogGroup` already exists. For CLI, run:
   ```
   aws logs describe-log-groups --log-group-name-prefix "your-log-group-name"
   ```
2. If the existing `LogGroup` is no longer required, carefully delete it to avoid data loss, using:
   ```
   aws logs delete-log-group --log-group-name "your-log-group-name"
   ```
3. After deletions, attempt your operation again.

#### Resources:
- [describe-log-groups](https://docs.aws.amazon.com/cli/latest/reference/logs/describe-log-groups.html)
- [delete-log-group](https://docs.aws.amazon.com/cli/latest/reference/logs/delete-log-group.html)

Landing Zone Accelerator - TSE

Resources:

Relevant content