I've installed the AWS Service Management Connector for JSM into Jira and provisioned the users using CloudFormation from the provided script on https://docs.aws.amazon.com/smc/latest/ag/jsmcloud-base-perms.html and all the connection tests passed.
However the SSM Incidents do not sync. The CloudTrail Event log shows that the sync requests fail with a ValidationException
. I believe this is due to the creationTime
filter.
Partial Event Redacted:
{
"eventVersion": "1.08",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIXXXXXXXXXXXXXX",
"arn": "arn:aws:iam::XXXXXXXXXX:user/SCSyncUser",
"accountId": "XXXXXXXXXX",
"accessKeyId": "AKXXXXXXXXXXXXX",
"userName": "SCSyncUser"
},
"eventTime": "2023-03-22T14:41:55Z",
"eventSource": "ssm-incidents.amazonaws.com",
"eventName": "ListIncidentRecords",
"awsRegion": "us-west-2",
"sourceIPAddress": "xx.xx.xxx.xx",
"userAgent": "Forge/4.2.0 ari:cloud:ecosystem::app/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"errorCode": "ValidationException",
"requestParameters": {
"filters": [
{
"key": "status",
"condition": {
"equals": {
"stringValues": [
"OPEN",
"RESOLVED"
]
}
}
},
{
"key": "creationTime",
"condition": {}
}
]
},
"responseElements": null,
"requestID": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"eventID": "xxxxx-xxxx-xxx-xxxx-xxxxxxxxx",
"readOnly": true,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "XXXXXXXXXX",
"eventCategory": "Management"
}
Current CF Template: https://servicecatalogconnector.s3.amazonaws.com/SMC_ConnectorforJSMCloud-AWS_Configurations_Commercial.json
Are there additional steps that are missing from the documentation or is this just a bug?