Skip to content

Unable to create MWAA Default VPC

0

When trying to create an MWAA Environment, I'm having an error trying to create the default VPC:

Template URL https://mwaa-downloads.s3-us-west-2.amazonaws.com/mwaa-vpc-cfn-template.yaml

Yields:

S3 error: Access Denied For more information check http://docs.aws.amazon.com/AmazonS3/latest/API/ErrorResponses.html

Also, the template the documentation indicates here doesn't work:

https://docs.aws.amazon.com/mwaa/latest/userguide/vpc-endpoint-management.html

2 Answers
0

It appears you're encountering issues while trying to create an Amazon Managed Workflows for Apache Airflow (MWAA) environment with a default VPC. The error messages you're receiving suggest there might be a few different problems at play.

First, regarding the "S3 error: Access Denied" message, this typically indicates that your AWS account doesn't have the necessary permissions to access the S3 bucket containing the CloudFormation template. This could be due to restrictions on the S3 bucket or insufficient IAM permissions for your account.

As for the template URL not working, it's possible that the documentation might be outdated or there could be region-specific issues. MWAA requires specific networking components and VPC configurations to function properly.

To resolve these issues, you could try the following steps:

  1. Instead of using the default VPC creation process, consider creating a custom VPC for your MWAA environment. You can do this using the AWS CloudFormation console or AWS CLI.

  2. Ensure that your AWS account has the necessary permissions to create VPCs and related resources.

  3. If you're in the US East (N. Virginia) region, be aware that MWAA doesn't support the use of the 'use1-az3' Availability Zone. When creating the VPC, you'll need to explicitly assign Availability Zones that are not mapped to 'use1-az3'.

  4. If you're still having trouble, you might want to create the VPC and its components manually, ensuring that you include all the necessary elements like public and private subnets, internet gateway, NAT gateways, and the required VPC endpoints for MWAA.

  5. Double-check that you're using the correct and up-to-date CloudFormation template for MWAA VPC creation.

If these steps don't resolve the issue, you may need to contact AWS support for further assistance, as there could be account-specific issues or regional problems that are beyond your control.
Sources
Create the VPC network - Amazon Managed Workflows for Apache Airflow
Managing your own Amazon VPC endpoints on Amazon MWAA - Amazon Managed Workflows for Apache Airflow

answered 2 years ago

0

Hello.

Will it work for the CloudFormation template in this tutorial?
This template includes MWAA in addition to VPC, so if you want to create only VPC, comment out the MWAA definition.
https://docs.aws.amazon.com/mwaa/latest/userguide/quick-start.html

EXPERT

answered 2 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.