AWS Codebuild Account Suspension

Question

Hello all,

I am receiving this error when using AWS Codebuild outside of any region other than us-west-2.

Build failed to start
Build failed to start. The following error occurred: Your account's access to AWS CodeBuild has been suspended. Please contact AWS Support to reinstate access

I have contacted support and they suggested a quota increase. After a quota increase I am receiving the same errors, despite having only one build project in this region.

What are the next steps to solve this issue? Has anyone else ever encountered an issue like this before?

Mitch · Answer

Hello,

I hope this finds you well! There are a couple of steps you can take to address this issue. I have detailed them below:

**1. Verify your service quota for Code Build. **
Documentation: https://docs.aws.amazon.com/servicequotas/latest/userguide/gs-request-quota.html

**2. Review your region specific IAM policies attached to the IAM entity that is attempting to launch CodeBuild outside of US-WEST-2. Ensuring that you have the correct permissions to use CodeBuild in the desired region.  If your account is a member of an AWS organization, there may also be a Service Control Policy (SCP) blocking access to the service from an organizational level. **

Required Permissions for Code Build: https://docs.aws.amazon.com/codebuild/latest/userguide/auth-and-access-control-iam-identity-based-access-control.html 
Testing IAM policy with IAM Policy Simulator: https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_testing-policies.html 
Service Control Policy Documentation: https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scps.html

**3.  It would be helpful to examine CloudTrail logs; looking for any unusual activity or denied actions related to CodeBuild in the affected region. To do so, you can follow the below steps: **
      - Navigate to the CloudTrail console 
      - In the left navigation pane, choose "Event history". 
      - Set the filter to look for CodeBuild events. Select "Event Source" and Source: "codebuild.amazon.com"
      - Look for events with an "errorCode" field 
      - Pay attention to the user "useridentity" section and "response elements" 
      - You can also look for events such as "AccessDenied" or "UnauthorizedOperation" 
**
4. Contact AWS Support again: Since the issue persists after the quota increase, it's advisable to reach out to AWS Support once more. Provide them with:
**
* The exact error message
* The steps you've taken so far
* Any relevant logs or CloudTrail entries

If it is found to be an IAM related issue, you can then update the permissions to grant access to Code Build in the specific region.

I hope this helps! Thank you!

Cheers,

Mitch

AWS Codebuild Account Suspension

Relevant content