Skip to content

OpenSearchIngestion CreatePipeline fails with UnknownError in ap-northeast-1 but works in ap-northeast-2

0

Description: I encountered an issue when creating an OpenSearch Ingestion Pipeline using AWS CDK.

In the ap-northeast-1 region, the CreatePipeline action fails with an UnknownError. However, the exact same code works without any issue in the ap-northeast-2 region.

This behavior seems to be region-specific and may indicate a bug or a missing configuration/resource in ap-northeast-1.

Reproduction steps:

  1. Use the following CDK code to deploy an OpenSearch Ingestion Pipeline: Source code on GitHub
  2. Deploy to ap-northeast-1 → fails
  3. Deploy the same code to ap-northeast-2 → succeeds

Observed behavior:

  • The CloudFormation deployment fails.
  • CloudTrail logs show the following for the CreatePipeline API event:
"errorCode": "UnknownError",
"errorMessage": "An unknown error occurred"

Notes:

  • This same CDK code previously worked in ap-northeast-1. So this may be a regression.
  • The failure appears to be coming from the internal handling of the AWS::OSIS::Pipeline resource during creation.

Environment:

  • CDK-lib version: 2.195.0
  • AWS Region: ap-northeast-1 (fails), ap-northeast-2 (works)
  • Node.js version: 22.14.0
  • CLI used: npx ampx sandbox
2 Answers
0
Accepted Answer

It appears to be resolved now.

answered 10 months ago
0

This issue appears to be related to a region-specific problem with the OpenSearch Ingestion service in ap-northeast-1.

When creating an OpenSearch Ingestion pipeline using AWS CDK's CfnPipeline construct, the service requires several configurations including pipeline configuration body, minimum and maximum units, and potentially other options like buffer configurations and encryption settings. The fact that the same code works in ap-northeast-2 but fails in ap-northeast-1 with an "UnknownError" suggests this could be:

  1. A temporary service availability issue in the ap-northeast-1 region
  2. A configuration that's valid in ap-northeast-2 but not properly supported in ap-northeast-1
  3. A regression in the service as you mentioned, since it previously worked

For OpenSearch Ingestion pipelines, there are specific requirements like properly configured IAM roles and an OpenSearch Service domain or OpenSearch Serverless collection as the sink. It's possible that one of these dependencies is causing issues in the specific region.

To troubleshoot this issue:

  1. Verify that all required services and features for OpenSearch Ingestion are fully available in ap-northeast-1
  2. Check if there are any service quotas or limits that might be different between regions
  3. Ensure that the IAM permissions are correctly set up for the ap-northeast-1 region
  4. Consider reaching out to AWS Support with the CloudTrail logs, as "UnknownError" typically indicates an internal service issue that might require their investigation

Since this worked previously in ap-northeast-1, it's likely a temporary service issue or a recent change in the service behavior specific to that region.
Sources
class CfnPipeline (construct) · AWS CDK
Creating Amazon OpenSearch Ingestion pipelines - Amazon OpenSearch Service

answered a year ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.