AWS control Tower setup failed

0

I am getting the following error while creating a landing zone with Control Tower:

AWS Control Tower failed to set up your landing zone completely: AWS Control Tower failed to deploy stack(s): arn:aws:cloudformation:us-east-1:058264521814:stack/AWSControlTowerBP-BASELINE-CLOUDTRAIL-MASTER/23d0fde0-c3b5-11ee-af84-0e7e2c57393b.To continue, review the failed stack(s) and try again.

Any idea how this can be fixed? Thanks.

Giri
已提问 4 个月前454 查看次数
2 回答
1

The most common cause of the error "AWS Control Tower failed to set up your landing zone completely: AWS Control Tower failed to deploy stack(s): arn:aws:cloudformation:us-east-1:058264521814:stack/AWSControlTowerBP-BASELINE-CLOUDTRAIL-MASTER/23d0fde0-c3b5-11ee-af84-0e7e2c57393b" is misconfigured KMS key policy used while configuring ControlTower.

When you enable KMS encryption on Control Tower, you need to update the KMS Key policy to allow Config and CloudTrail services access to the key.

As this is initial setup the CloudFormation stack "arn:aws:cloudformation:us-east-1:058264521814:stack/AWSControlTowerBP-BASELINE-CLOUDTRAIL-MASTER/23d0fde0-c3b5-11ee-af84-0e7e2c57393b" must be in failed rollback status. You may need to cleanup the stack"AWSControlTowerBP-BASELINE-CLOUDTRAIL-MASTER", and try setting up the landing zone again.

AWS
merinkj
已回答 1 个月前
0

Hi, There are a number of reasons why AWS Control Tower Landing Zone will fail during setup, the most common issues are documented here - https://docs.aws.amazon.com/controltower/latest/userguide/troubleshooting.html

That error you shared does not have not enough information to determine the root cause (we only know that stack is deploying the CloudTrail in that account) so you will need to look at the events in the failed CloudFormation stack to identify why it failed and then resolve that issue.

AWS
Akin
已回答 4 个月前

您未登录。 登录 发布回答。

一个好的回答可以清楚地解答问题和提供建设性反馈,并能促进提问者的职业发展。

回答问题的准则